CVEs published in January 2025
4,247 vulnerabilities, 364 critical, 17 exploited.
- liujianview gymxmjpaliujianview gymxmjpa GoodsController.java GoodsDaoImpl sql injection5.3 Medium
- liujianview gymxmjpaliujianview gymxmjpa CoachController.java CoachController sql injection5.3 Medium
- 1902756969 reggie1902756969 reggie Phone Number Validation sendMsg information disclosure6.9 Medium
- sismics teedyTeedy through 1.11 allows CSRF for account takeover via POST /api/user/admin.7.5 High
- No product listedIn Eaton X303 3.5.16 - X303 3.5.17 Build 712, an attacker with network access to a XC-303 PLC can login as root over SSH. The root password is hardcoded in the firmware. NOTE: This vulnerability appea…9.1 Critical
- code-projects online car rental systemCode-Projects Online Car Rental System 1.0 is vulnerable to Cross Site Scripting (XSS) via the...6.5 Medium
- code-projects online car rental systemIn Code-Projects Online Car Rental System 1.0, the file upload feature does not validate file...6.5 Medium
- monicahq monicaMonicaHQ v4.1.2 was discovered to contain a Client-Side Injection vulnerability via the last_name...6.5 Medium
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +16 more +18 moreAn issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820,...4.3 Medium
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +14 more +16 moreAn issue was discovered in Samsung Mobile Processor and Modem Exynos 9820, 9825, 980, 990, 1080,...6.5 Medium
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 2100 firmware +5 more +7 moreAn issue was discovered in Samsung Mobile Processor Exynos 9820, 9825, 980, 990, 850, 1080, 2100,...6.5 Medium
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 2100 firmware +5 more +7 moreAn issue was discovered in Samsung Mobile Processor Exynos 9820, 9825, 980, 990, 850, 1080, 2100,...5.3 Medium
- venki supravizio bpmThe login page of Venki Supravizio BPM up to 18.1.1 is vulnerable to open redirect leading to...7.2 High
- venki supravizio bpmAn NTLM hash leak in Venki Supravizio BPM up to 18.0.1 allows authenticated attackers with...8.4 High
- venki supravizio bpmVenki Supravizio BPM through 18.0.1 was discovered to contain an arbitrary file upload...9.9 Critical
- No product listedIncorrect Access Control in Cfx.re FXServer v9601 and earlier allows unauthenticated users to...9.1 Critical
- No product listedBigId PrivacyPortal v179 is vulnerable to Cross Site Scripting (XSS) via the "Label" field in the...6.1 Medium
- seling visual access managerSelesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via /common...6.1 Medium
- seling visual access managerSelesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via vam...6.1 Medium
- seling visual access managerAn issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated...6.5 Medium
- seling visual access managerSelesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via monitor...6.1 Medium
- seling visual access managerSelesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via /vam...6.1 Medium
- seling visual access managerSelesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via monitor...6.1 Medium
- seling visual access managerAn issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated...8.8 High
- seling visual access managerIn Selesta Visual Access Manager < 4.42.2, an authenticated user can access the administrative...5.4 Medium
- seling visual access managerAn issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated...3.8 Low
- seling visual access managerAn issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated...3.8 Low
- seling visual access managerAn issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated...3.8 Low
- seling visual access managerAn issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated...3.8 Low
- seling visual access managerAn issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated...3.8 Low
- seling visual access managerAn issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated...3.8 Low
- seling visual access managerAn issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated...3.8 Low
- seling visual access managerAn issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated...3.8 Low
- zucchetti helpdeskadvancedPat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Request Forgery ...5.4 Medium
- zucchetti helpdeskadvancedPat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Scripting (XSS)...6.1 Medium
- zucchetti helpdeskadvancedPat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the...7.5 High
- zucchetti helpdeskadvancedPat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Control. Low...8.1 High
- zucchetti helpdeskadvancedPat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Scripting (XSS)...6.1 Medium
- zucchetti helpdeskadvancedPat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal....6.5 Medium
- zucchetti helpdeskadvancedPat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Control. Low...8.8 High
- zucchetti helpdeskadvancedPat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the...7.5 High
- zucchetti helpdeskadvancedPat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via Email...7.5 High
- zucchetti helpdeskadvancedPat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the...7.5 High
- 1902756969 reggie1902756969 reggie CommonController.java upload unrestricted upload5.3 Medium
- 1902756969 reggie1902756969 reggie CommonController.java download path traversal6.9 Medium
- starsea99 starsea-mallStarSea99 starsea-mall update cross site scripting5.1 Medium
- starsea99 starsea-mallStarSea99 starsea-mall uploadController.java UploadController unrestricted upload5.1 Medium
- hcl software dryice myxalyticsHCL MyXalytics is affected by a cleartext transmission of sensitive information vulnerability1.6 Low
- hcl software dryice myxalyticsHCL MyXalytics is affected by a malicious file upload vulnerability1.6 Low
- hcl software dryice myxalyticsHCL MyXalytics is affected by sensitive information disclosure vulnerability2.0 Low
- Show moreLoading…