CVEs published in January 2025
4,247 vulnerabilities, 364 critical, 17 exploited.
- iocharger firmware for ac modelsAuthenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station9.3 Critical
- iocharger firmware for ac modelsAuthenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station9.3 Critical
- iocharger firmware for ac modelsBuffer overflow in <redacted>.so leads to DoS of OCPP service7.1 High
- iocharger firmware for ac modelsArbitrary file download using <redacted>.sh7.1 High
- iocharger firmware for ac modelsWhen uploading new firmware, a shell script inside a firmware file is executed during its processing. This can be used to craft a custom firmware file with a custom script with arbitrary code, which w…9.3 Critical
- iocharger firmware for ac modelsAuthenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station9.3 Critical
- iocharger firmware for ac chargersAuthenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station9.3 Critical
- iocharger firmware for ac modelsAuthenticated command injection via <redacted>.exe <redacted> parameter9.3 Critical
- iocharger firmware for ac modelsAuthenticated command injection via <redacted>.exe <redacted> parameter9.3 Critical
- iocharger firmware for ac modelsBuffer overflow vulnerabilities in CGI scripts lead to segfault5.3 Medium
- iocharger firmware for ac modelsAuthenticated arbitrary file upload to /tmp/ and /tmp/upload/5.3 Medium
- iocharger firmware for ac modelsPlaintext default credentials in firmware8.3 High
- iocharger firmware for ac modelsA backup can be manipulated and then restored to create arbitrary files inside the <redacted> directory. A CGI script can be added to the web directory this way, allowing for full remote code executio…9.3 Critical
- iocharger firmware for ac modelsAny authenticated users can execute OS commands as root using the <redacted>.sh CGI script.9.3 Critical
- iocharger firmware for ac modelsAuthenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station9.3 Critical
- campcodes computer laboratory management systemCampCodes Computer Laboratory Management System edit cross site scripting5.3 Medium
- campcodes computer laboratory management systemCampCodes Computer Laboratory Management System edit unrestricted upload5.3 Medium
- sonicwall sonicosA post-authentication absolute path traversal vulnerability in SonicOS management allows a remote...4.9 Medium
- pgadminPgadmin: users authenticated simultaneously via ldap may be attached to the wrong session8.0 High
- sonicwall sonicosA post-authentication format string vulnerability in SonicOS management allows a remote attacker...7.2 High
- sonicwall sonicosA post-authentication stack-based buffer overflow vulnerability in SonicOS management allows a...7.2 High
- sonicwall sonicosAn Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker...9.8 Critical
- sonicwall sonicosA vulnerability in the Gen7 SonicOS Cloud platform NSv, allows a remote authenticated local low...7.8 High
- code-projects cinema seat reservation systemcode-projects Cinema Seat Reservation System deleteBooking.php sql injection6.9 Medium
- code-projects online bike rental, fabian online bike rental system +1 morecode-projects Online Bike Rental HTTP GET Request vehical-details.php cross site scripting5.3 Medium
- sonicwall sonicosA Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a...7.5 High
- mattermost, mattermost server +1 moreMisleading UI for undefined admin console settings in Calls causes security confusion3.5 Low
- mattermost, mattermost server +1 moreDoS via custom post type for sysconsole plugin readers4.3 Medium
- mattermost, mattermost server +1 moreAccess control flaw for team admins allows unauthorized team additions3.8 Low
- sonicwall sonicosAn Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote...9.8 Critical
- sonicwall sonicosUse of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in the SonicOS SSLVPN...9.8 Critical
- gitlabIncorrect User Management in GitLab4.2 Medium
- codezips project management systemCodezips Project Management System teacher.php sql injection5.3 Medium
- gitlabInefficient Algorithmic Complexity in GitLab4.3 Medium
- code-projects online bike rental systemcode-projects Online Bike Rental System Change Image unrestricted upload5.3 Medium
- boston university (is&t) bu section editing, bu section editing +1 moreBU Section Editing <= 0.9.9 - Reflected XSS6.1 Medium
- aklamator infeed, unknown aklamator infeed +1 moreaklamator-infeed <= 2.0.0 - Reflected XSS6.1 Medium
- leiyuxi cy-fastleiyuxi cy-fast listData sql injection5.3 Medium
- aklamator infeed, unknown aklamator infeed +1 moreaklamator-infeed <= 2.0.0 - Admin+ Stored XSS4.8 Medium
- outself asgard security scannerAsgard Security Scanner <= 0.7 - Reflected XSS6.1 Medium
- syedfakharabbas backlink monitoring managerBacklink Monitoring Manager <= 0.1.3 - Reflected XSS6.1 Medium
- reneade postlistsPostLists <= 2.0.2 - Reflected XSS4.2 Medium
- leiyuxi cy-fastleiyuxi cy-fast listData sql injection5.3 Medium
- No product listedYunzMall HTTP POST Request ResetpwdController.php changePwd password recovery6.9 Medium
- kaiyuantong ect platformKaiYuanTong ECT Platform HTTP POST Request runCode.php command injection6.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreRuby: openssl: ruby marvin attack7.4 High
- singmr houserentSingMR HouseRent toAdminUpdateHousePage cross site scripting5.3 Medium
- singmr houserentSingMR HouseRent AddHouseController.java upload unrestricted upload5.3 Medium
- singmr houserentSingMR HouseRent AdminController.java access control5.3 Medium
- donglight bookstore, bookstore电商书城系统说明 +1 moredonglight bookstore电商书城系统说明 AdminBookController. java uploadPicture unrestricted upload5.1 Medium
- Show moreLoading…