Skip to content
OpenAdvisories

Archive

27 January 2025

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2022-31749 Public exploit

    Authenticated arbitrary file read/write in WatchGuard Fireware OS

    An argument injection vulnerability in the diagnose and import pac commands in WatchGuard Fireware OS before 12.8.1, 12.1.4, and 12.5.10 allows an authenticated remote attacker with unprivileged credentials to upload or read files to limited, arbitrary locati…

  • Medium 5.5
    CVE-2025-24104 Public exploit

    This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17…

  • Medium 5.3
    CVE-2025-24354 Public exploit Scanner template

    imgproxy is vulnerable to SSRF against 0.0.0.0

    imgproxy is server for resizing, processing, and converting images. Imgproxy does not block the 0.0.0.0 address, even with IMGPROXY_ALLOW_LOOPBACK_SOURCE_ADDRESSES set to false. This can expose services on the local host. This vulnerability is fixed in 3.27.2.