CVEs published in January 2025
4,247 vulnerabilities, 364 critical, 17 exploited.
- dumbwareio dumbdrop Dumb Drop has an arbitrary file overwrite and path traversal for root shell 9.7 Critical
- anisha job recruitment code-projects Job Recruitment _call_job_search_ajax.php sql injection 5.3 Medium
- python software foundation cpython URL parser allowed square brackets in domain names 6.3 Medium
- ibm financial transaction manager for swift services for multiplatforms, financial transaction manager for multiplatform +1 more IBM Financial Transaction Manager cross-site scripting 6.1 Medium
- ibm financial transaction manager for swift services for multiplatforms, financial transaction manager for multiplatform +1 more IBM Financial Transaction Manager cross-site scripting 6.4 Medium
- ibm sterling b2b integrator IBM Sterling B2B Integrator cross-site scripting 5.4 Medium
- ibm sterling b2b integrator IBM Sterling B2B Integrator information disclosure 4.3 Medium
- pmd PMD Designer's release key passphrase (GPG) available on Maven Central in cleartext 9.3 Critical
- ibm sterling b2b integrator IBM Sterling B2B Integrator cross-site scripting 6.4 Medium
- ibm sterling b2b integrator IBM Sterling B2B Integrator cross-site scripting 4.8 Medium
- ibm sterling b2b integrator IBM Sterling B2B Integrator cross-site scripting 4.8 Medium
- ibm sterling b2b integrator IBM Sterling B2B Integrator cross-site request forgery 4.3 Medium
- grafana Grafana Alerting VictorOps integration could be exposed to users with Viewer permission 4.3 Medium
- ibm security verify directory IBM Security Verify Directory denial of service 7.5 High
- lewe teamcal neo Reflected Cross-Site Scripting (XSS) vulnerability in TeamCal Neo 6.1 Medium
- lewe teamcal neo SQL injection vulnerability in TeamCal Neo 9.8 Critical
- acronis cyber protect cloud agent Local privilege escalation due to DLL hijacking vulnerability. The following products are... 6.3 Medium
- acronis cyber protect cloud agent Local privilege escalation due to DLL hijacking vulnerability. The following products are... 6.3 Medium
- acronis cyber protect cloud agent Local privilege escalation due to DLL hijacking vulnerability. The following products are... 6.3 Medium
- acronis cyber protect cloud agent Local privilege escalation due to DLL hijacking vulnerability. The following products are... 6.3 Medium
- acronis cyber protect cloud agent Local privilege escalation due to unquoted search path vulnerability. The following products are... 6.6 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 more bpf: Fix bpf_sk_select_reuseport() memory leak 5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 more eth: bnxt: always recalculate features after XDP clearing, fix null-deref 7.3 High
- linux, linux kernel +1 more openvswitch: fix lockup on tx to unregistering netdev with carrier 5.5 Medium
- linux, linux kernel +1 more pktgen: Avoid out-of-bounds access in get_imix_entries 7.8 High
- linux, linux kernel +1 more btrfs: add the missing error handling inside get_canonical_dev_path 5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - bios +1 more +3 more gtp: Destroy device along with udp socket's netns dismantle. 7.8 High
- linux, linux kernel +1 more pfcp: Destroy device along with udp socket's netns dismantle. 7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 more net: fec: handle page_pool_dev_alloc_pages error 7.5 High
- linux, linux kernel +1 more net/mlx5: Clear port select structure when fail to create 5.5 Medium
- linux, linux kernel +1 more net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel 5.5 Medium
- linux, linux kernel +1 more smb: client: fix double free of TCP_Server_Info::hostname 9.8 Critical
- linux, linux kernel +1 more afs: Fix merge preference rule failure condition 5.5 Medium
- linux, linux kernel +1 more zram: fix potential UAF of zram table 7.8 High
- linux, linux kernel +1 more vsock/bpf: return early if transport is not assigned 5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 more vsock/virtio: discard packets if the transport changes 7.8 High
- linux, linux kernel +1 more pmdomain: imx8mp-blk-ctrl: add missing loop break condition 5.5 Medium
- linux, linux kernel +1 more iomap: avoid avoid truncating 64-bit offset to 32 bits 5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 more vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] 5.5 Medium
- linux, linux kernel +1 more filemap: avoid truncating 64-bit offset to 32 bits 5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 more mac802154: check local interfaces before deleting sdata list 5.5 Medium
- vernonsystems ehive objects image grid eHive Objects Image Grid <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 6.4 Medium
- svenl77 post form – registration form – profile form for user profiles – frontend content forms for user submissions (ugc) Frontend Content Forms for User Submissions (UGC) <= 2.8.13 - Authenticated (Contributor+) Stored Cross-Site Scripting 6.4 Medium
- quantumcloud ai infographic maker AI Infographic Maker <= 4.9.0 - Unauthenticated Arbitrary Shortcode Execution 6.5 Medium
- codedropz drag and drop multiple file upload - contact form 7, glenwpcoder drag and drop multiple file upload for contact form 7 +1 more Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.8.5 - Limited Arbitrary File Deletion 5.3 Medium
- wcproducttable woocommerce product table, product table and list builder for woocommerce lite +1 more WooCommerce Product Table Lite <= 3.9.4 - Unauthenticated Arbitrary Shortcode Execution & Reflected Cross-Site Scripting 7.3 High
- overt software solutions ltd ezpz saml sp single sign on (sso) WordPress EZPZ SAML SP Single Sign On (SSO) plugin <= 1.2.5 - CSRF to Stored XSS vulnerability 7.1 High
- activity-log.com wp sessions time monitoring full automatic WordPress WP Sessions Time Monitoring Full Automatic Plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability 7.1 High
- marcel pol gwolle guestbook WordPress Gwolle Guestbook plugin <= 4.7.1 - Reflected Cross Site Scripting (XSS) vulnerability 7.1 High
- metagauss registrationmagic WordPress RegistrationMagic Plugin <= 6.0.3.3 - Reflected Cross Site Scripting (XSS) vulnerability 7.1 High
- Show olderLoading…