Skip to content
OpenAdvisories

Archive

11 February 2025

Vulnerabilities first published on this day (UTC), newest first.

8 results · Clear filters · Feed

  • High 7.8
    CVE-2025-21420 Public exploit

    Windows Disk Cleanup Tool Elevation of Privilege Vulnerability

    Windows Disk Cleanup Tool Elevation of Privilege Vulnerability

  • High 8.1
    CVE-2025-24472 Exploited · Ransomware Public exploit

    An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS 7.0.0 through 7.0…

    KEV Mar 18, 2025
  • Medium 6.3
    CVE-2024-40586 Public exploit

    An Improper Access Control vulnerability [CWE-284] in FortiClient Windows version 7.4.0, version 7.2.6 and below, versi…

  • Medium 5.4
    CVE-2025-0054 Public exploit

    Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server Java

    SAP NetWeaver Application Server Java does not sufficiently handle user input, resulting in a stored cross-site scripting vulnerability. The application allows attackers with basic user privileges to store a Javascript payload on the server, which could be la…

  • Medium 6.5
    CVE-2024-57241 Public exploit Scanner template

    Dedecms 5.71sp1 and earlier is vulnerable to URL redirect. In the web application, a logic error does not judge the inp…

  • Low 3.8
    CVE-2024-51324 Public exploit

    An issue in the BdApiUtil driver of Baidu Antivirus v5.2.3.116083 allows attackers to terminate arbitrary process via e…

  • Medium 6.8
    CVE-2024-54916 Public exploit

    An issue in the SharedConfig class of Telegram Android APK v.11.7.0 allows a physically proximate attacker to bypass au…

  • Medium 5.4
    CVE-2024-54772 Public exploit Scanner template

    An issue was discovered in the Winbox service of MikroTik RouterOS long-term release v6.43.13 through v6.49.13 and stab…