Skip to content
OpenAdvisories

Archive

27 January 2025

Vulnerabilities first published on this day (UTC), newest first.

← December 2024 2025 / January /27 February 2025 →
  1. 12
  2. 2239
  3. 353
  4. 439
  5. 528
  6. 6106
  7. 7350
  8. 8128
  9. 9267
  10. 1072
  11. 11105
  12. 1213
  13. 13115
  14. 14483
  15. 15204
  16. 16299
  17. 1795
  18. 1835
  19. 1963
  20. 2033
  21. 21283
  22. 22171
  23. 23113
  24. 24199
  25. 2550
  26. 2621
  27. 27243
  28. 28102
  29. 2973
  30. 30156
  31. 31153
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Low 2.3
    CVE-2025-24369

    Anubis has a bot protection bypass when a sophisticated attacker asks to pass a challenge of difficulty 0

    Anubis is a tool that allows administrators to protect bots against AI scrapers through bot-checking heuristics and a proof-of-work challenge to discourage scraping from multiple IP addresses. Anubis allows attackers to bypass the bot protection by requesting…

    Xe x github.com/Xe/x anubis Alpine Go
  • Low 3.3
    CVE-2024-44172

    A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoi…

    Apple macOS macOS
  • Low 3.3
    CVE-2025-24100

    A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3,…

    Apple macOS macOS
  • Low 3.3
    CVE-2025-24141

    An authentication issue was addressed with improved state management. This issue is fixed in iOS 18.3 and iPadOS 18.3. …

    Apple iOS and iPadOS iOS
  • Low 3.3
    CVE-2025-24121

    A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS…

    Apple macOS macOS
  • Low 3.3
    CVE-2024-54475

    A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoi…

    Apple macOS macOS
  • Low 3.3
    CVE-2025-24145

    A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 18.3 and…

    Apple macOS iOS and iPadOS macOS iOS
  • Low 3.3
    CVE-2024-54516

    A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma…

    Apple macOS macOS
  • Low 3.7
    CVE-2025-0730

    TP-Link TL-SG108E HTTP GET Request usr_account_set.cgi get request method with sensitive query strings

    A vulnerability classified as problematic has been found in TP-Link TL-SG108E 1.0.0 Build 20201208 Rel. 40304. Affected is an unknown function of the file /usr_account_set.cgi of the component HTTP GET Request Handler. The manipulation of the argument usernam…

    TP-Link Systems TL-SG108E Network devices
  • Low 3.8
    CVE-2024-13116

    Crelly Slider < 1.4.7 - Admin+ Stored XSS

    The Crelly Slider WordPress plugin before 1.4.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for …

    Web / CMS
  • Low 3.5
    CVE-2024-43446

    Improper check of permissions in Generic Interface

    An improper privilege management vulnerability in OTRS Generic Interface module allows change of the Ticket status even if the user only has ro permissions. This issue affects: * OTRS 7.0.X * OTRS 8.0.X * OTRS 2023.X * OTRS 2024.X * ((OTRS)) Community Edition…

    OTRS OTRS ((OTRS)) Community Edition
  • Low 2.4
    CVE-2024-28766

    IBM Security Directory Integrator information disclosure

    IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 could disclose sensitive information about directory contents that could aid in further attacks against the system.

    IBM Security Directory Integrator Security Verify Directory Integrator