Skip to content
OpenAdvisories

Archive

January 2025

Vulnerabilities first published in this month (UTC), newest first.

← December 2024 2025 / January February 2025 →
  1. 12
  2. 2239
  3. 353
  4. 439
  5. 528
  6. 6106
  7. 7350
  8. 8128
  9. 9267
  10. 1072
  11. 11105
  12. 1213
  13. 13115
  14. 14483
  15. 15204
  16. 16299
  17. 1795
  18. 1835
  19. 1963
  20. 2033
  21. 21283
  22. 22171
  23. 23113
  24. 24199
  25. 2550
  26. 2621
  27. 27243
  28. 28102
  29. 2973
  30. 30156
  31. 31153
All Critical High Medium Low Exploited only Public exploit

2,209 results · Clear filters · Feed

  • Medium 6.1
    CVE-2024-45336

    Sensitive headers incorrectly sent after cross-domain redirect in net/http

    The HTTP client drops sensitive headers after following a cross-domain redirect. For example, a request to a.com/ containing an Authorization header which is redirected to b.com/ will not send that header to b.com. In the event that the client received a subs…

    Go standard library net/http golang go Debian Ubuntu Azure Linux Alpine Wolfi Go
  • Medium 6.1
    CVE-2024-45341

    Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

    A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate chain. Certificates containing URIs are not permitted in the web PKI, so this only affects users of private PKIs whi…

    Go standard library crypto/x509 golang go Debian Ubuntu Azure Linux Alpine Wolfi Go
  • Medium 6.3
    CVE-2023-50316

    IBM Sterling B2B Integrator information disclosure

    IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the bac…

    IBM Sterling B2B Integrator
  • Medium 5.3
    CVE-2024-27263

    IBM Sterling B2B Integrator information disclosure

    IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to obtain sensitive information from the dashboard UI using man in the middle techniques.

    IBM Sterling B2B Integrator
  • Medium 4.8
    CVE-2024-57514 Public exploit Scanner template

    The TP-Link Archer A20 v3 router is vulnerable to Cross-site Scripting (XSS) due to improper handling of directory list…

  • Medium 5.4
    CVE-2025-22917

    A reflected cross-site scripting (XSS) vulnerability in Audemium ERP <=0.9.0 allows remote attackers to execute an arbi…

  • Medium 6.5
    CVE-2024-28786

    IBM QRadar SIEM information disclosure

    IBM QRadar SIEM 7.5 transmits sensitive or security-critical data in cleartext in a communication channel that could be obtained by an unauthorized actor using man in the middle techniques.

    IBM QRadar SIEM
  • Medium 6.5
    CVE-2022-31749 Public exploit

    Authenticated arbitrary file read/write in WatchGuard Fireware OS

    An argument injection vulnerability in the diagnose and import pac commands in WatchGuard Fireware OS before 12.8.1, 12.1.4, and 12.5.10 allows an authenticated remote attacker with unprivileged credentials to upload or read files to limited, arbitrary locati…

    WatchGuard Fireware OS
  • Medium 6.5
    CVE-2024-37526

    IBM Watson Query on Cloud Pak for Data information disclosure

    IBM Watson Query on Cloud Pak for Data (IBM Data Virtualization 1.8, 2.0, 2.1, 2.2, and 3.0.0) could allow an authenticated user to obtain sensitive information from objects published using Watson Query due to an improper data protection mechanism.

    IBM Data Virtualization
  • Medium 5.5
    CVE-2024-54519

    The issue was resolved by sanitizing logging. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2. An app ma…

    Apple macOS macOS
  • Medium 5.5
    CVE-2025-24096

    This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.3. A malicious app …

    Apple macOS macOS
  • Medium 6.5
    CVE-2025-24106

    This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14…

    Apple macOS macOS
  • Medium 5.5
    CVE-2024-54539

    This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.…

    Apple macOS macOS
  • Medium 5.5
    CVE-2025-24151

    The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, …

    Apple macOS macOS
  • Medium 5.3
    CVE-2024-54488

    A logic issue was addressed with improved file handling. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3…

    Apple macOS iOS and iPadOS iPadOS macOS iOS
  • Medium 5.5
    CVE-2025-24127

    The issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Seq…

    Apple macOS iOS and iPadOS tvOS macOS iOS
  • Medium 5.3
    CVE-2024-54518

    The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Medium 6.5
    CVE-2025-24131

    The issue was addressed with improved memory handling. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, …

    Apple macOS iOS and iPadOS tvOS macOS iOS
  • Medium 5.5
    CVE-2025-24086

    The issue was addressed with improved memory handling. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, …

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Medium 4.4
    CVE-2025-24116

    An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.3, macOS So…

    Apple macOS macOS
  • Medium 5.5
    CVE-2025-24161

    The issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Seq…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Medium 4.4
    CVE-2025-24136

    This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma …

    Apple macOS macOS
  • Medium 5.5
    CVE-2024-54549

    This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.2. A…

    Apple macOS macOS
  • Medium 4.3
    CVE-2025-24160

    The issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Seq…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Medium 5.5
    CVE-2025-24117

    This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.3 and iPadOS 1…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Medium 5.3
    CVE-2025-24140

    This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.3. Files downloaded…

    Apple macOS macOS
  • Medium 5.5
    CVE-2025-24101

    This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.3. A…

    Apple macOS macOS
  • Medium 5.5
    CVE-2025-24087

    The issue was addressed with additional permissions checks. This issue is fixed in macOS Sequoia 15.3. An app may be ab…

    Apple macOS macOS
  • Medium 5.5
    CVE-2025-24114

    A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma…

    Apple macOS macOS
  • Medium 6.5
    CVE-2025-24143

    The issue was addressed with improved access restrictions to the file system. This issue is fixed in Safari 18.3, iOS 1…

    Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu
  • Medium 6.5
    CVE-2024-54497

    The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.4, macOS Seq…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Medium 6.5
    CVE-2024-54478

    An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.2 and iPadOS 1…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Medium 5.5
    CVE-2025-24092

    This issue was addressed with improved data protection. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3.…

    Apple macOS macOS
  • Medium 5.5
    CVE-2025-24138

    This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.…

    Apple macOS macOS
  • Medium 4.0
    CVE-2024-54550

    This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.2 and iPadOS 1…

    Apple macOS iOS and iPadOS macOS iOS
  • Medium 5.5
    CVE-2025-24122

    A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This iss…

    Apple macOS macOS
  • Medium 5.5
    CVE-2025-24134

    An information disclosure issue was addressed with improved privacy controls. This issue is fixed in macOS Sequoia 15.3…

    Apple macOS macOS
  • Medium 6.5
    CVE-2025-24162

    This issue was addressed through improved state management. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.…

    Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  • Medium 5.5
    CVE-2025-24163

    The issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iOS 18.4 and iPadOS 18.4…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Medium 6.5
    CVE-2025-24123

    The issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Seq…

    Apple macOS iOS and iPadOS watchOS macOS iOS