Skip to content
OpenAdvisories

Archive

28 January 2025

Vulnerabilities first published on this day (UTC), newest first.

← December 2024 2025 / January /28 February 2025 →
  1. 12
  2. 2239
  3. 353
  4. 439
  5. 528
  6. 6106
  7. 7350
  8. 8128
  9. 9267
  10. 1072
  11. 11105
  12. 1213
  13. 13115
  14. 14483
  15. 15204
  16. 16299
  17. 1795
  18. 1835
  19. 1963
  20. 2033
  21. 21283
  22. 22171
  23. 23113
  24. 24199
  25. 2550
  26. 2621
  27. 27243
  28. 28102
  29. 2973
  30. 30156
  31. 31153
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 3.5
    CVE-2025-0790

    ESAFENET CDG doneDetail.jsp cross site scripting

    A vulnerability classified as problematic was found in ESAFENET CDG V5. This vulnerability affects unknown code of the file /doneDetail.jsp. The manipulation of the argument curpage leads to cross site scripting. The attack can be initiated remotely. The expl…

    ESAFENET CDG
  • Low 3.5
    CVE-2025-0787

    ESAFENET CDG appDetail.jsp cross site scripting

    A vulnerability was found in ESAFENET CDG V5. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /appDetail.jsp. The manipulation of the argument curpage leads to cross site scripting. The attack can be…

    ESAFENET CDG
  • Low 3.5
    CVE-2025-0785

    ESAFENET CDG SysConfig.jsp cross site scripting

    A vulnerability was found in ESAFENET CDG V5 and classified as problematic. This issue affects some unknown processing of the file /SysConfig.jsp. The manipulation of the argument help leads to cross site scripting. The attack may be initiated remotely. The e…

    ESAFENET CDG
  • Low 3.7
    GHSA-r5w7-f542-q2j4

    Potential DoS when using ContextLines integration

    ### Impact The [ContextLines integration](https://docs.sentry.io/platforms/javascript/guides/node/configuration/integrations/contextlines/) uses readable streams to more efficiently use memory when reading files. The ContextLines integration is used to attach…

    @sentry/nextjs @sentry/astro @sentry/solidstart @sentry/bun npm
  • Low 3.7
    CVE-2025-0784

    Intelbras InControl Registered User usuario cleartext transmission

    A vulnerability has been found in Intelbras InControl up to 2.21.58 and classified as problematic. This vulnerability affects unknown code of the file /v1/usuario/ of the component Registered User Handler. The manipulation leads to cleartext transmission of s…

    Intelbras InControl
  • Low 2.4
    CVE-2024-11954 Public exploit

    Pimcore Search Document cross site scripting

    A vulnerability classified as problematic was found in Pimcore 11.4.2. Affected by this vulnerability is an unknown functionality of the component Search Document. The manipulation leads to basic cross site scripting. The attack can be launched remotely. The …

    pimcore/pimcore Packagist
  • Low 3.3
    CVE-2024-0149

    NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an attacker unauthorized access to files…

    NVIDIA NVIDIA GPU Display Driver, vGPU software nvidia-graphics-drivers-304 nvidia-graphics-drivers-340 Debian Ubuntu