Skip to content
OpenAdvisories

Archive

28 January 2025

Vulnerabilities first published on this day (UTC), newest first.

← December 2024 2025 / January /28 February 2025 →
  1. 12
  2. 2239
  3. 353
  4. 439
  5. 528
  6. 6106
  7. 7350
  8. 8128
  9. 9267
  10. 1072
  11. 11105
  12. 1213
  13. 13115
  14. 14483
  15. 15204
  16. 16299
  17. 1795
  18. 1835
  19. 1963
  20. 2033
  21. 21283
  22. 22171
  23. 23113
  24. 24199
  25. 2550
  26. 2621
  27. 27243
  28. 28102
  29. 2973
  30. 30156
  31. 31153
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.7
    CVE-2024-40676 Public exploit

    In checkKeyIntent of AccountManagerService.java, there is a possible way to bypass intent security check and install an…

    Google Android Android
  • Critical 10.0
    CVE-2025-23211 Public exploit Scanner template

    Tandoor Recipes - SSTI - Remote Code Execution

    Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. A Jinja2 SSTI vulnerability allows any user to execute commands on the server. In the case of the provided Docker Compose file as root. This vulnerability is …

    Tandoor Recipes recipes
  • Medium 4.7
    CVE-2024-11956 Public exploit

    Pimcore customer-data-framework list sql injection

    A vulnerability, which was classified as critical, has been found in Pimcore customer-data-framework up to 4.2.0. Affected by this issue is some unknown functionality of the file /admin/customermanagementframework/customers/list. The manipulation of the argum…

    pimcore customer-data-framework pimcore/customer-management-framework-bundle Packagist
  • Low 2.4
    CVE-2024-11954 Public exploit

    Pimcore Search Document cross site scripting

    A vulnerability classified as problematic was found in Pimcore 11.4.2. Affected by this vulnerability is an unknown functionality of the component Search Document. The manipulation leads to basic cross site scripting. The attack can be launched remotely. The …

    pimcore/pimcore Packagist
  • Critical 9.8
    CVE-2022-3365 Public exploit

    Emote Interactive Remote Mouse Server command injection due to weak encoding

    Due to reliance on a trivial substitution cipher, sent in cleartext, and the reliance on a default password when the user does not set a password, the Remote Mouse Server by Emote Interactive can be abused by attackers to inject OS commands over theproduct's …

    Emote Interactive Remote Mouse Server
  • High 8.8
    CVE-2024-55968 Public exploit

    An issue was discovered in DTEX DEC-M (DTEX Forwarder) 6.1.1. The com.dtexsystems.helper service, responsible for handl…

  • High 8.8
    CVE-2024-57376 Public exploit

    Buffer Overflow vulnerability in D-Link DSR-150, DSR-150N, DSR-250, DSR-250N, DSR-500N, DSR-1000N from 3.13 to 3.17B901…

  • Medium 4.8
    CVE-2024-57514 Public exploit Scanner template

    The TP-Link Archer A20 v3 router is vulnerable to Cross-site Scripting (XSS) due to improper handling of directory list…