Skip to content
OpenAdvisories

Archive

4 February 2025

Vulnerabilities first published on this day (UTC), newest first.

← January 2025 2025 / February /4 March 2025 →
  1. 139
  2. 24
  3. 3187
  4. 4151
  5. 5119
  6. 699
  7. 7120
  8. 87
  9. 94
  10. 1081
  11. 11283
  12. 12265
  13. 13132
  14. 14134
  15. 1524
  16. 1640
  17. 1748
  18. 18162
  19. 19125
  20. 20120
  21. 2192
  22. 2234
  23. 2330
  24. 24119
  25. 25144
  26. 26795
  27. 27275
  28. 2887
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.8
    CVE-2024-11467 Public exploit

    Omnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability due to a logic flaw. Success…

    Omnissa Omnissa Horizon Client for MacOS macOS
  • Medium 5.9
    CVE-2025-24963 Public exploit Scanner template

    Browser mode serves arbitrary files in vitest

    Vitest is a testing framework powered by Vite. The `__screenshot-error` handler on the browser mode HTTP server that responds any file on the file system. Especially if the server is exposed on the network by `browser.api.host: true`, an attacker can send a r…

    vitest-dev vitest @vitest/browser npm
  • Critical 9.8
    CVE-2025-0364 Public exploit

    BigAntSoft BigAnt Server Account Registration Bypass to File Upload RCE

    BigAntSoft BigAnt Server, up to and including version 5.6.06, is vulnerable to unauthenticated remote code execution via account registration. An unauthenticated remote attacker can create an administrative user through the default exposed SaaS registration m…

    BigAntSoft BigAnt Server
  • Critical 9.8
    CVE-2024-9644 Public exploit

    Four-Faith F3x36 bapply.cgi Auth Bypass

    The Four-Faith F3x36 router using firmware v2.0.0 is vulnerable to an authentication bypass vulnerability in the administrative web server. Authentication is not enforced on some administrative functionality when using the "bapply.cgi" endpoint instead of the…

    Four-Faith F3x36
  • Medium 5.4
    CVE-2025-1015 Public exploit

    Unsanitized address book fields

    The Thunderbird Address Book URI fields contained unsanitized links. This could be used by an attacker to create and export an address book containing a malicious payload in a field. For example, in the “Other” field of the Instant Messaging section. If anoth…

    Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu
  • Critical 9.8
    CVE-2025-0890 Public exploit EPSS 14%

    **UNSUPPORTED WHEN ASSIGNED** Insecure default credentials for the Telnet function in the legacy DSL CPE Zyxel VMG4325-…

    Zyxel VMG4325-B10A firmware Network devices
  • High 8.8
    CVE-2024-40891 Exploited Public exploit EPSS 23%

    **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the l…

    Zyxel VMG4325-B10A firmware Network devices
    KEV Feb 11, 2025
  • Critical 9.8
    CVE-2024-48445 Public exploit

    An issue in compop.ca ONLINE MALL v.3.5.3 allows a remote attacker to execute arbitrary code via the rid, tid, et, and …