Skip to content
OpenAdvisories

Archive

27 January 2025

Vulnerabilities first published on this day (UTC), newest first.

← December 2024 2025 / January /27 February 2025 →
  1. 12
  2. 2239
  3. 353
  4. 439
  5. 528
  6. 6106
  7. 7350
  8. 8128
  9. 9267
  10. 1072
  11. 11105
  12. 1213
  13. 13115
  14. 14483
  15. 15204
  16. 16299
  17. 1795
  18. 1835
  19. 1963
  20. 2033
  21. 21283
  22. 22171
  23. 23113
  24. 24199
  25. 2550
  26. 2621
  27. 27243
  28. 28102
  29. 2973
  30. 30156
  31. 31153
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 6.5
    CVE-2022-31749 Public exploit

    Authenticated arbitrary file read/write in WatchGuard Fireware OS

    An argument injection vulnerability in the diagnose and import pac commands in WatchGuard Fireware OS before 12.8.1, 12.1.4, and 12.5.10 allows an authenticated remote attacker with unprivileged credentials to upload or read files to limited, arbitrary locati…

    WatchGuard Fireware OS
  • Critical 9.1
    CVE-2024-54507 Public exploit

    A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 18.2 and iPadOS 18.2, ma…

    Apple macOS iOS and iPadOS macOS iOS
  • Critical 9.8
    CVE-2025-24118 Public exploit

    The issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.4, macOS Sequoia 15.3, macOS …

    Apple macOS iPadOS macOS iOS
  • Critical 10.0
    CVE-2025-24085 Exploited Public exploit EPSS 17%

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, …

    Apple macOS iOS and iPadOS watchOS macOS iOS
    KEV Jan 29, 2025
  • Medium 5.5
    CVE-2025-24104 Public exploit

    This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17…

    Apple iOS and iPadOS iPadOS iOS
  • Critical 10.0
    CVE-2024-48841 Public exploit

    Remote Code Execution (RCE) Vulnerabilities

    Network access can be used to execute arbitrary code with elevated privileges. This issue affects FLXEON 9.3.4 and older.

    ABB FLXEON ICS / OT
  • Medium 5.3
    CVE-2025-24354 Public exploit Scanner template

    imgproxy is vulnerable to SSRF against 0.0.0.0

    imgproxy is server for resizing, processing, and converting images. Imgproxy does not block the 0.0.0.0 address, even with IMGPROXY_ALLOW_LOOPBACK_SOURCE_ADDRESSES set to false. This can expose services on the local host. This vulnerability is fixed in 3.27.2.

    imgproxy imgproxy github.com/imgproxy/imgproxy/v3 github.com/imgproxy/imgproxy Go
  • High 8.7
    CVE-2025-24367 Public exploit EPSS 59%

    Cacti allows Arbitrary File Creation leading to RCE

    Cacti is an open source performance and fault management framework. An authenticated Cacti user can abuse graph creation and graph template functionality to create arbitrary PHP scripts in the web root of the application, leading to remote code execution on t…

    Cacti cacti cacti cacti Debian Ubuntu Alpine
  • Critical 9.1
    CVE-2025-22604 Public exploit

    Cacti has Authenticated RCE via multi-line SNMP responses

    Cacti is an open source performance and fault management framework. Due to a flaw in multi-line SNMP result parser, authenticated users can inject malformed OIDs in the response. When processed by ss_net_snmp_disk_io() or ss_net_snmp_disk_bytes(), a part of e…

    Cacti cacti cacti cacti Debian Ubuntu Alpine
  • High 8.1
    CVE-2024-57373 Public exploit

    Cross Site Request Forgery (CSRF) vulnerability in LifestyleStore v1.0 allows a remote attacker to execute unauthorized…