Skip to content
OpenAdvisories

Archive

3 February 2025

Vulnerabilities first published on this day (UTC), newest first.

← January 2025 2025 / February /3 March 2025 →
  1. 139
  2. 24
  3. 3187
  4. 4151
  5. 5119
  6. 699
  7. 7120
  8. 87
  9. 94
  10. 1081
  11. 11283
  12. 12265
  13. 13132
  14. 14134
  15. 1524
  16. 1640
  17. 1748
  18. 18162
  19. 19125
  20. 20120
  21. 2192
  22. 2234
  23. 2330
  24. 24119
  25. 25144
  26. 26795
  27. 27275
  28. 2887
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Critical 9.4
    CVE-2025-24901

    SQL Injection endpoint 'deletar_permissao.php' parameter 'c', 'a', 'r' in WeGIA

    WeGIA is a Web Manager for Charitable Institutions. A SQL Injection vulnerability was discovered in the WeGIA application, `deletar_permissao.php` endpoint. This vulnerability could allow an authorized attacker to execute arbitrary SQL queries, allowing acces…

    LabRedesCefetRJ WeGIA
  • Critical 9.4
    CVE-2025-24902

    SQL Injection endpoint 'salvar_cargo.php' parameter 'id_cargo' in WeGIA

    WeGIA is a Web Manager for Charitable Institutions. A SQL Injection vulnerability was discovered in the WeGIA application, `salvar_cargo.php` endpoint. This vulnerability could allow an authorized attacker to execute arbitrary SQL queries, allowing access to …

    LabRedesCefetRJ WeGIA
  • Critical 10.0
    CVE-2025-24905

    SQL Injection endpoint 'get_codigobarras_cobranca.php' parameter 'codigo' in WeGIA

    WeGIA is a Web Manager for Charitable Institutions. A SQL Injection vulnerability was discovered in the WeGIA application, `get_codigobarras_cobranca.php` endpoint. This vulnerability could allow an authorized attacker to execute arbitrary SQL queries, allowi…

    LabRedesCefetRJ WeGIA
  • Critical 10.0
    CVE-2025-24906

    SQL Injection endpoint 'get_detalhes_cobranca.php' parameter 'codigo' in WeGIA

    WeGIA is a Web Manager for Charitable Institutions. A SQL Injection vulnerability was discovered in the WeGIA application, `get_detalhes_cobranca.php` endpoint. This vulnerability could allow an authorized attacker to execute arbitrary SQL queries, allowing a…

    LabRedesCefetRJ WeGIA
  • Critical 10.0
    CVE-2025-24957

    SQL Injection endpoint 'get_detalhes_socio.php' parameter 'id_socio' in WeGIA

    WeGIA is a Web Manager for Charitable Institutions. A SQL Injection vulnerability was discovered in the WeGIA application, `get_detalhes_socio.php` endpoint. This vulnerability could allow an authorized attacker to execute arbitrary SQL queries, allowing acce…

    LabRedesCefetRJ WeGIA
  • Critical 9.4
    CVE-2025-24958

    SQL Injection endpoint 'salvar_tag.php' parameter 'id_tag' in WeGIA

    WeGIA is a Web Manager for Charitable Institutions. A SQL Injection vulnerability was discovered in the WeGIA application, `salvar_tag.php` endpoint. This vulnerability could allow an authorized attacker to execute arbitrary SQL queries, allowing access to or…

    LabRedesCefetRJ WeGIA
  • Critical 9.3
    CVE-2025-24370

    Django-Unicorn Class Pollution Vulnerability, Leading to XSS, DoS and Authentication Bypass

    Django-Unicorn adds modern reactive component functionality to Django templates. Affected versions of Django-Unicorn are vulnerable to python class pollution vulnerability. The vulnerability arises from the core functionality `set_property_value`, which can b…

    adamghill django-unicorn django-unicorn PyPI
  • Critical 9.8
    CVE-2024-45569

    Improper Validation of Array Index in WLAN Host Communication

    Memory corruption while parsing the ML IE due to invalid frame content.

    Qualcomm Snapdragon
  • Critical 9.8
    CVE-2024-57450

    ChestnutCMS <=1.5.0 is vulnerable to File Upload via the Create template function.

  • Critical 9.8
    CVE-2024-57098

    Moss v0.1.3 version has an SQL injection vulnerability that allows attackers to inject carefully designed payloads into…

  • Critical 9.9
    CVE-2024-57968 Exploited EPSS 32%

    Advantive VeraCore before 2024.4.2.1 allows remote authenticated users to upload files to unintended folders (e.g., one…

    Advantive VeraCore
    KEV Mar 10, 2025
  • Critical 9.8
    CVE-2024-57099

    ClassCMS v4.8 has a code execution vulnerability. Attackers can exploit this vulnerability by constructing a payload in…

  • Critical 9.8
    CVE-2025-22978

    eladmin <=2.7 is vulnerable to CSV Injection in the exception log download module.