Skip to content
OpenAdvisories

Archive

28 January 2025

Vulnerabilities first published on this day (UTC), newest first.

← December 2024 2025 / January /28 February 2025 →
  1. 12
  2. 2239
  3. 353
  4. 439
  5. 528
  6. 6106
  7. 7350
  8. 8128
  9. 9267
  10. 1072
  11. 11105
  12. 1213
  13. 13115
  14. 14483
  15. 15204
  16. 16299
  17. 1795
  18. 1835
  19. 1963
  20. 2033
  21. 21283
  22. 22171
  23. 23113
  24. 24199
  25. 2550
  26. 2621
  27. 27243
  28. 28102
  29. 2973
  30. 30156
  31. 31153
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.3
    CVE-2025-24480

    FactoryTalk® View Machine Editon - Remote Code Execution

    A Remote Code Execution Vulnerability exists in the product and version listed above. The vulnerability is due to lack of input sanitation and could allow a remote attacker to run commands or code as a high privileged user.

    Rockwell Automation FactoryTalk View Machine Edition ICS / OT
  • Critical 9.3
    CVE-2025-24800

    Critical vulnerability in `ismp-grandpa` <v15.0.1

    Hyperbridge is a hyper-scalable coprocessor for verifiable, cross-chain interoperability. A critical vulnerability was discovered in the ismp-grandpa crate, that allowed a malicious prover easily convince the verifier of the finality of arbitrary headers. Thi…

    polytope-labs hyperbridge grandpa-verifier-primitives ismp-grandpa crates.io
  • Critical 10.0
    CVE-2025-23211 Public exploit Scanner template

    Tandoor Recipes - SSTI - Remote Code Execution

    Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. A Jinja2 SSTI vulnerability allows any user to execute commands on the server. In the case of the provided Docker Compose file as root. This vulnerability is …

    Tandoor Recipes recipes
  • Critical 9.8
    CVE-2024-13448

    ThemeREX Addons <= 2.32.3 - Unauthenticated Arbitrary File Upload in trx_addons_uploads_save_data

    The ThemeREX Addons plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'trx_addons_uploads_save_data' function in all versions up to, and including, 2.32.3. This makes it possible for unauthenticated attack…

    ThemeREX ThemeREX Addons Web / CMS
  • Critical 9.8
    CVE-2024-12649

    Buffer overflow in XPS data font processing of Small Office Multifunction Printers and Laser Printers(*) which may allo…

    Canon Color imageCLASS MF653Cdw Color imageCLASS LBP633Cdw i-SENSYS MF657Cdw
  • Critical 9.8
    CVE-2024-12648

    Buffer overflow in TIFF data EXIF tag processing of Small Office Multifunction Printers and Laser Printers(*) which may…

    Canon Color imageCLASS MF656Cdw i-SENSYS LBP633Cdw Color imageCLASS MF653Cdw
  • Critical 9.8
    CVE-2024-12647

    Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(*) which may…

    Canon Color imageCLASS LBP633Cdw i-SENSYS MF657Cdw Satera MF654Cdw
  • Critical 9.8
    CVE-2022-3365 Public exploit

    Emote Interactive Remote Mouse Server command injection due to weak encoding

    Due to reliance on a trivial substitution cipher, sent in cleartext, and the reliance on a default password when the user does not set a password, the Remote Mouse Server by Emote Interactive can be abused by attackers to inject OS commands over theproduct's …

    Emote Interactive Remote Mouse Server