Skip to content
OpenAdvisories

Archive

30 January 2025

Vulnerabilities first published on this day (UTC), newest first.

← December 2024 2025 / January /30 February 2025 →
  1. 12
  2. 2239
  3. 353
  4. 439
  5. 528
  6. 6106
  7. 7350
  8. 8128
  9. 9267
  10. 1072
  11. 11105
  12. 1213
  13. 13115
  14. 14483
  15. 15204
  16. 16299
  17. 1795
  18. 1835
  19. 1963
  20. 2033
  21. 21283
  22. 22171
  23. 23113
  24. 24199
  25. 2550
  26. 2621
  27. 27243
  28. 28102
  29. 2973
  30. 30156
  31. 31153
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-0680

    New Rock Technologies Cloud Connected Devices has a Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.

    Affected products contain a vulnerability in the device cloud rpc command handling process that could allow remote attackers to take control over arbitrary devices connected to the cloud.

    New Rock Technologies MX8G VoIP Gateway OM500 IP-PBX NRP1302/P Desktop IP Phone
  • Critical 9.3
    CVE-2025-24503

    A malicious actor can fix the session of a PAM user by tricking the user to click on a specially crafted link to the PA…

    Broadcom Symantec Privileged Access Management
  • Critical 9.8
    CVE-2024-12248

    Out-of-bounds Write vulnerability in Contec Health CMS8000 Patient Monitor

    Contec Health CMS8000 Patient Monitor is vulnerable to an out-of-bounds write, which could allow an attacker to send specially formatted UDP requests in order to write arbitrary data. This could result in remote code execution.

    Contec Health CMS8000 Patient Monitor
  • Critical —
    GHSA-vpxm-cr3r-pjp9

    General OpenMRS Security Advisory, January 2025: Penetration Testing Results and Patches

    ### Impact We recently underwent Penetration Testing of OpenMRS by a third-party company. **Vulnerabilities were found, and fixes have been made and released.** We've released security updates that include critical fixes, and so, we strongly recommend upgradi…

    org.openmrs.module:patientflags org.openmrs:openmrs org.openmrs.module:idgen org.openmrs.module:attachments Maven
  • Critical 9.3
    CVE-2025-0477

    Rockwell Automation FactoryTalk® AssetCentre Data Exposure Vulnerability

    An encryption vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to a weak encryption methodology and could allow a threat actor to extract passwords belonging to other users …

    Rockwell Automation FactoryTalk® AssetCentre ICS / OT
  • Critical 9.8
    CVE-2024-12822

    Media Manager for UserPro <= 3.12.0 - Missing Authorization to Unauthenticated Arbitrary Options Update

    The Media Manager for UserPro plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the add_capto_img() function in all versions up to, and including, 3.11.0. This ma…

    DeluxeThemes Media Manager for UserPro Web / CMS
  • Critical 9.8
    CVE-2024-13742

    iControlWP – Multiple WordPress Site Manager <= 4.4.5 - Unauthenticated PHP Object Injection

    The iControlWP – Multiple WordPress Site Manager plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.4.5 via deserialization of untrusted input from the reqpars parameter. This makes it possible for unauthenticat…

    paultgoodchild iControlWP Web / CMS