Skip to content
OpenAdvisories

Archive

29 January 2025

Vulnerabilities first published on this day (UTC), newest first.

← December 2024 2025 / January /29 February 2025 →
  1. 12
  2. 2239
  3. 353
  4. 439
  5. 528
  6. 6106
  7. 7350
  8. 8128
  9. 9267
  10. 1072
  11. 11105
  12. 1213
  13. 13115
  14. 14483
  15. 15204
  16. 16299
  17. 1795
  18. 1835
  19. 1963
  20. 2033
  21. 21283
  22. 22171
  23. 23113
  24. 24199
  25. 2550
  26. 2621
  27. 27243
  28. 28102
  29. 2973
  30. 30156
  31. 31153
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Critical 9.9
    CVE-2025-21415

    Azure AI Face Service Elevation of Privilege Vulnerability

    Authentication bypass by spoofing in Azure AI Face Service allows an authorized attacker to elevate privileges over a network.

    Microsoft Azure AI Face Service
  • Critical 9.8
    CVE-2025-0851 Public exploit EPSS 26%

    Path traversal issue in Deep Java Library

    A path traversal issue in ZipUtils.unzip and TarUtils.untar in Deep Java Library (DJL) on all platforms allows a bad actor to write files to arbitrary locations.

    AWS DeepJavaLibrary opensearch-2 ai.djl:api Wolfi Maven
  • Critical 9.8
    CVE-2025-20061

    mySCADA myPRO Manager OS Command Injection

    mySCADA myPRO does not properly neutralize POST requests sent to a specific port with email information. This vulnerability could be exploited by an attacker to execute arbitrary commands on the affected system.

    mySCADA myPRO Manager myPRO Runtime
  • Critical 9.8
    CVE-2025-20014

    mySCADA myPRO Manager OS Command Injection

    mySCADA myPRO does not properly neutralize POST requests sent to a specific port with version information. This vulnerability could be exploited by an attacker to execute arbitrary commands on the affected system.

    mySCADA myPRO Manager myPRO Runtime
  • Critical 9.4
    CVE-2024-48852 Public exploit

    Information disclosures

    Insertion of Sensitive Information into Log File vulnerability observed in FLEXON. Some information may be improperly disclosed through https access. This issue affects FLXEON through <= 9.3.4.

    ABB FLXEON ICS / OT
  • Critical 9.4
    CVE-2024-48849 Public exploit

    Authentication and Authorization Issues

    Missing Origin Validation in WebSockets vulnerability in FLXEON. Session management was not sufficient to prevent unauthorized HTTPS requests. This issue affects FLXEON: through <= 9.3.4.

    ABB FLXEON ICS / OT
  • Critical 9.8
    CVE-2024-57665

    JFinalCMS 1.0 is vulnerable to SQL Injection in rc/main/java/com/cms/entity/Content.java. The cause of the vulnerabilit…

  • Critical 9.8
    CVE-2024-57395

    Password Vulnerability in Safety production process management system v1.0 allows a remote attacker to escalate privile…

  • Critical 9.8
    CVE-2024-54852

    When LDAP connection is activated in Teedy versions between 1.9 to 1.12, the username field of the login form is vulner…