CVEs published in January 2025
4,247 vulnerabilities, 364 critical, 17 exploited.
- linux, linux kernel +1 morenet: renesas: rswitch: avoid use-after-put for a device tree node8.4 High
- linux, linux kernel +1 morenetfilter: IDLETIMER: Fix for possible ABBA deadlock5.5 Medium
- linux, linux kernel +1 moreBluetooth: iso: Fix circular lock in iso_listen_bis5.5 Medium
- linux, linux kernel +1 moreBluetooth: iso: Fix circular lock in iso_conn_big_sync5.5 Medium
- linux, linux kernel +1 moreriscv: Fix IPIs usage in kfence_protect_page()5.5 Medium
- linux, linux kernel +1 moreregulator: axp20x: AXP717: set ramp_delay5.5 Medium
- linux, linux kernel +1 moreipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()5.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 moreigb: Fix potential invalid memory access in igb_init_module()7.1 High
- linux, linux kernel +1 morespi: mpc52xx: Add cancel_work_sync before module remove7.8 High
- linux, linux kernel +1 morenvme-rdma: unquiesce admin_q before destroy it7.5 High
- linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 morebcache: revert replacing IS_ERR_OR_NULL with IS_ERR again5.5 Medium
- linux, linux kernel +1 morestackdepot: fix stack_depot_save_flags() in NMI context5.5 Medium
- linux, linux kernel +1 morebtrfs: don't take dev_replace rwsem on task already holding it5.5 Medium
- linux, linux kernel +1 morewifi: rtw89: check return value of ieee80211_probereq_get() for RNR5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moredlm: fix possible lkb_resource null dereference5.5 Medium
- linux, linux kernel +1 morebpf: Prevent tailcall infinite loop caused by freplace7.8 High
- linux, linux kernel +1 moredma-debug: fix a possible deadlock on radix_lock5.5 Medium
- linux, linux kernel +1 morepinmux: Use sequential access to access desc->pinmux data5.5 Medium
- linux, linux kernel +1 morei3c: mipi-i3c-hci: Mask ring interrupts before ring stop request5.5 Medium
- linux, linux kernel +1 morei3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock5.5 Medium
- linux, linux kernel +1 moref2fs: fix to shrink read extent node in batches7.1 High
- linux, linux kernel +1 moresched: fix warning in sched_setaffinity5.5 Medium
- erzhongxmu jeewmsGuangzhou Huayi Intelligent Technology Jeewms graphReportController.do datagridGraph sql injection5.3 Medium
- erzhongxmu jeewmsGuangzhou Huayi Intelligent Technology Jeewms CgFormBuildController. java saveOrUpdate sql injection5.3 Medium
- erzhongxmu jeewmsGuangzhou Huayi Intelligent Technology Jeewms wmOmNoticeHController.do path traversal6.9 Medium
- alanperfectportal perfect portal widgetsPerfect Portal Widgets <= 3.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- murali-indiacitys push notification for post and buddypressPush Notification for Post and BuddyPress <= 2.07 - Reflected Cross-Site Scripting6.1 Medium
- wow-analytics gatormail smartformsGatorMail SmartForms <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 3.19.2 - Unauthenticated PHP Object Injection9.8 Critical
- magepeopleteam booking and rental manager for bike | car | resort | appointment | dress | equipmentRental and Booking Manager for Bike, Car, Dress, Resort with WooCommerce Integration – WpRently | WordPress plugin <= 2.2.1 - Reflected Cross-Site Scripting6.1 Medium
- bqworks accordion slider liteAccordion Slider Lite <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- reader87 dominion – domain checker for wpbakeryDominion – Domain Checker for WPBakery <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- codepopular unlimited theme addon for elementorUnlimited Theme Addon For Elementor and WooCommerce <= 1.2.2 - Authenticated (Contributor+) Post Disclosure4.3 Medium
- tcoder tcbd auto refresherTCBD Auto Refresher <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- rrdevs rraddons for elementorRRAddons for Elementor <= 1.1.0 - Authenticated (Contributor+) Post Disclosure4.3 Medium
- bqworks grid accordion liteGrid Accordion Lite <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- milmor wp spid italiaWP SPID Italia <= 2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- hcl software dryice myxalyticsHCL MyXalytics is affected by a weak input validation vulnerability2.6 Low
- hcl software dryice myxalyticsHCL MyXalytics is affected by username enumeration vulnerability3.7 Low
- hcl software dryice myxalyticsHCL MyXalytics is affected by an improper password policy implementation vulnerability4.8 Medium
- hcl software dryice myxalyticsHCL MyXalytics is affected by broken authentication5.3 Medium
- hcl software dryice myxalyticsHCL MyXalytics is affected by insufficient session expiration6.4 Medium
- hcl software dryice myxalyticsHCL MyXalytics is affected by a session fixation vulnerability6.8 Medium
- edmonparker contact form masterContact Form Master <= 1.0.7 - Reflected XSS6.1 Medium
- mozilla firefox, firefox for ios +1 moreAddress bar spoofing on iOS using long hostnames6.5 Medium
- mozilla firefox, firefox for ios +1 moreFirefox Mobile iOS Full Address Bar Spoof Using Open in New Tab and Javascript URI4.3 Medium
- kadencewp gutenberg blocks with ai, stellarwp kadence blocks — page builder toolkit for gutenberg editor +1 moreGutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.4.2 - Authenticated (contributor+) Stored Cross-Site Scripting via Button Link6.4 Medium
- palo alto networks expedition, pan-os, cloud ngfw +2 more +4 moreExpedition: OS Command Injection Vulnerability7.7 High
- palo alto networks expedition, cloud ngfw, pan-os +2 more +4 moreExpedition: Wildcard Expansion Vulnerability6.9 Medium
- palo alto networks expedition, cloud ngfw, pan-os +2 more +4 moreExpedition: Arbitrary File Deletion Vulnerability6.9 Medium
- Show moreLoading…