CVEs published in January 2025
4,247 vulnerabilities, 364 critical, 17 exploited.
- tenda ac9 firmwareTenda ac9 v1.0 firmware v15.03.05.19 contains a stack overflow vulnerability in /goform...9.8 Critical
- librdf raptor rdf syntax libraryIn Raptor RDF Syntax Library through 2.0.16, there is an integer underflow when normalizing a URI...9.3 Critical
- librdf raptor rdf syntax libraryIn Raptor RDF Syntax Library through 2.0.16, there is a heap-based buffer over-read when parsing...4.0 Medium
- phpgurukul land record systemAn OS Command Injection vulnerability was found in /landrecordsys/admin/dashboard.php in...9.8 Critical
- phpgurukul land record systemA Cross Site Scripting (XSS) vulnerability was found in /landrecordsys/admin/contactus.php in...9.8 Critical
- linksys e7350 firmwareLinksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the...8.0 High
- linksys e7350 firmwareLinksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the...8.0 High
- linksys e7350 firmwareLinksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the...8.0 High
- linksys e7350 firmwareLinksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the...9.8 Critical
- linksys e7350 firmwareLinksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the...9.8 Critical
- linksys e7350 firmwareLinksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the...9.8 Critical
- linksys e7350 firmwareLinksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the...6.3 Medium
- totolink a6000r firmwareTOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability...6.3 Medium
- totolink a6000r firmwareTOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability...6.3 Medium
- totolink a6000r firmwareTOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability...5.1 Medium
- totolink a6000r firmwareTOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability...8.0 High
- monicahq monicaMonicaHQ v4.1.2 was discovered to contain an authenticated Client-Side Injection vulnerability...5.4 Medium
- monicahq monicaMonicaHQ v4.1.1 was discovered to contain an authenticated Client-Side Injection vulnerability...5.4 Medium
- monicahq monicaMonicaHQ v4.1.2 was discovered to contain multiple authenticated Client-Side Injection...8.8 High
- monicahq monicaMonicaHQ v4.1.2 was discovered to contain multiple Client-Side Injection vulnerabilities via the...6.5 Medium
- No product listedHasleo Backup Suite Free v4.9.4 and before is vulnerable to Insecure Permissions via the File...4.7 Medium
- cpplusworld cp-vnr-3104 firmwareAn issue in CP Plus CP-VNR-3104 B3223P22C02424 allows attackers to obtain the second RSA private...5.9 Medium
- cpplusworld cp-vnr-3104 firmwareImproper handling and storage of certificates in CP Plus CP-VNR-3104 B3223P22C02424 allow...7.4 High
- cpplusworld cp-vnr-3104 firmwareAn issue in CP Plus CP-VNR-3104 B3223P22C02424 allows attackers to access the Diffie-Hellman (DH)...5.9 Medium
- cpplusworld cp-vnr-3104 firmwareAn issue in CP Plus CP-VNR-3104 B3223P22C02424 allows attackers to obtain the EC private key and...5.9 Medium
- vtiger crmVtiger CRM v.6.1 and before is vulnerable to Cross Site Scripting (XSS) via the Documents module...6.1 Medium
- No product listedTrippo Responsive Filemanager 9.14.0 is vulnerable to Cross Site Scripting (XSS) via file upload...6.1 Medium
- redaxoAn arbitrary file upload vulnerability in the MediaPool module of Redaxo CMS v5.17.1 allows...7.2 High
- microweberMicroweber Cross-site Scripting vulnerability4.7 Medium
- microweberMicroweber Cross-site Scripting vulnerability6.1 Medium
- microweberMicroweber Cross-site Scripting vulnerability4.7 Medium
- scontain sconeScontain SCONE 5.8.0 has an interface vulnerability that leads to state corruption via injected...9.8 Critical
- No product listedFortanix Enclave OS 3.36.1941-EM has an interface vulnerability that leads to state corruption...9.8 Critical
- No product listedGramine before a390e33e16ed374a40de2344562a937f289be2e1 suffers from an Interface vulnerability...7.5 High
- microsoft azure marketplace, marketplace saas +1 moreAzure Marketplace SaaS Resources Information Disclosure Vulnerability8.8 High
- microsoft purviewMicrosoft Purview Information Disclosure Vulnerability8.8 High
- drupal print anything, print anything project anything +1 morePrint Anything - Critical - Unsupported - SA-CONTRIB-2024-0666.6 Medium
- boozallen megamenu frameworkMegamenu Framework - Critical - Unsupported - SA-CONTRIB-2024-0656.6 Medium
- drupal eloquaEloqua - Moderately critical - Arbitrary PHP code execution - SA-CONTRIB-2024-0636.6 Medium
- drupal node export, node export project export +1 moreNode export - Moderately critical - Arbitrary PHP code execution - SA-CONTRIB-2024-0616.6 Medium
- basic http authentication project http authentication, drupal basic http authentication +1 moreBasic HTTP Authentication - Critical - Access bypass - SA-CONTRIB-2024-0577.3 High
- drupal smart ip ban, smart ip ban project ip ban +1 moreSmart IP Ban - Critical - Access bypass - SA-CONTRIB-2024-0419.1 Critical
- drupal file entity (fieldable files), file entity project entity +1 moreFile Entity (fieldable files) - Moderately critical - Information Disclosure - SA-CONTRIB-2024-0407.5 High
- iqonic wpbookitWPBookit <= 1.6.4 - Unauthenticated Arbitrary User Password Change9.8 Critical
- drupal opignoOpigno - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-0326.8 Medium
- drupal opigno tincan question type, opigno tincan question type +1 moreOpigno TinCan Question Type - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-0317.5 High
- drupal restful web services, restful web services project web services +1 moreRESTful Web Services - Critical - Access bypass - SA-CONTRIB-2024-0197.5 High
- drupal node access rebuild progressive, node access rebuild progressive project access rebuild progressive +1 moreNode Access Rebuild Progressive - Less critical - Access bypass - SA-CONTRIB-2024-0135.4 Medium
- strawberry-graphql strawberryStrawberry GraphQL has a type resolution vulnerability3.7 Low
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: When BGP traceoptions are configured, receipt of malformed BGP packets causes RPD to crash8.2 High
- Show moreLoading…