CVEs published in January 2025
4,247 vulnerabilities, 364 critical, 17 exploited.
- monetdbAn issue in the trimchars component of MonetDB Server v11.47.11 allows attackers to cause a...7.5 High
- monetdbAn issue in the atom_get_int component of MonetDB Server v11.47.11 allows attackers to cause a...7.5 High
- monetdbAn issue in the bind_col_exp component of MonetDB Server v11.47.11 allows attackers to cause a...7.5 High
- monetdbAn issue in the dameraulevenshtein component of MonetDB Server v11.49.1 allows attackers to cause...7.5 High
- monetdbAn issue in the vscanf component of MonetDB Server v11.47.11 allows attackers to cause a Denial...7.5 High
- monetdbAn issue in the BATcalcbetween_intern component of MonetDB Server v11.47.11 allows attackers to...7.5 High
- tenda i24 firmwareTenda i24 V2.0.0.5 is vulnerable to Buffer Overflow in the addWifiMacFilter function.9.8 Critical
- h3c n12 firmwareH3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification...9.8 Critical
- h3c n12 firmwareH3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification...9.8 Critical
- h3c n12 firmwareH3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification...9.8 Critical
- h3c n12 firmwareH3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification...9.8 Critical
- h3c n12 firmwareH3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification...9.8 Critical
- djangoproject django, debian linux +1 moreDjango has a potential denial-of-service vulnerability in IPv6 validation5.8 Medium
- mayurik house rental management systemSourcecodester House Rental Management system v1.0 is vulnerable to Cross Site Scripting (XSS) in...5.4 Medium
- No product listedFlatnotes <v5.3.1 is vulnerable to denial of service through the upload image function.7.5 High
- No product listedA stored cross-site scripting (XSS) vulnerability in Arcadyan Meteor 2 CPE FG360 Firmware ETV2.10...5.4 Medium
- No product listedA remote code execution (RCE) vulnerability in Arcadyan Meteor 2 CPE FG360 Firmware ETV2.10...8.7 High
- gestioipThe ip_mod_dns_key_form.cgi request in GestioIP v3.5.7 is vulnerable to Stored XSS. An attacker...6.1 Medium
- gestioipThe ip_import_acl_csv request in GestioIP v3.5.7 is vulnerable to Reflected XSS. When a user...4.8 Medium
- gestioipMultiple endpoints in GestioIP v3.5.7 are vulnerable to Cross-Site Request Forgery (CSRF). An...8.8 High
- gestioipThe ip_do_job request in GestioIP v3.5.7 is vulnerable to Cross-Site Scripting (XSS). It allows...4.8 Medium
- gestioipAn issue in GestioIP v3.5.7 allows a remote attacker to execute arbitrary code via the file...9.8 Critical
- No product listedECOVACS Robotics Deebot T20 OMNI and T20e OMNI before 1.24.0 was discovered to contain a WiFi...7.4 High
- labredescefetrj wegiaCross-Site Scripting (XSS) Stored endpoint 'remuneracao.php ' parameter 'descricao' in WeGIA6.4 Medium
- labredescefetrj wegiaCross-Site Scripting (XSS) Reflected endpoint 'cadastro_funcionario.php' parameter 'cpf' in WeGIA6.4 Medium
- labredescefetrj wegiaCross-Site Scripting (XSS) Stored endpoint 'adicionar_alergia.php' parameter 'nome' in WeGIA6.4 Medium
- labredescefetrj wegiaCross-Site Scripting (XSS) Stored endpoint 'adicionar_escala.php' parameter 'escala' in WeGIA6.4 Medium
- labredescefetrj wegiaCross-Site Scripting (XSS) Stored endpoint 'adicionar_situacao.php' parameter 'situacao' in WeGIA6.4 Medium
- labredescefetrj wegiaCross-Site Scripting (XSS) Reflected endpoint 'tags.php' parameter 'msg_e' in WeGIA6.4 Medium
- labredescefetrj wegiaCross-Site Scripting (XSS) Stored endpoint 'adicionar_tipo_quadro_horario.php' parameter 'tipo' in WeGIA6.4 Medium
- labredescefetrj wegiaCross-Site Scripting (XSS) Reflected endpoint 'pre_cadastro_funcionario.php' parameter 'msg_e' in WeGIA6.4 Medium
- labredescefetrj wegiaCross-Site Scripting (XSS) Stored endpoint 'control.php' parameter 'cargo' in WeGIA6.4 Medium
- awplife event monster, awordpresslife event monster – manager & ticket booking +1 moreEvent monster <= 1.4.3 - Information Exposure Via Visitors List Export5.3 Medium
- bitdefender virus scannerInsufficient Hardened Runtime or Library Validation signing in Bitdefender Virus Scanner for macOS8.4 High
- labredescefetrj wegiaWeGIA Cross-Site Scripting (XSS) Stored endpoint 'informacao_adicional.php' parameter 'descricao'6.4 Medium
- labredescefetrj wegiaWeGIA Cross-Site Scripting (XSS) Stored endpoint 'dependente_editarInfoPessoal.php ' parameters 'nome' 'SobrenomeForm'6.4 Medium
- labredescefetrj wegiaWeGIA Cross-Site Scripting (XSS) Reflected endpoint 'Cadastro_Atendido.php' parameter 'cpf'6.4 Medium
- labredescefetrj wegiaWeGIA Cross-Site Scripting (XSS) Stored endpoint 'dependente_parentesco_adicionar.php' parameter 'descricao'6.4 Medium
- labredescefetrj wegiaWeGIA Cross-Site Scripting (XSS) Reflected endpoint 'editar_socio.php' parameter 'socio'6.4 Medium
- labredescefetrj wegiaWeGIA Cross-Site Scripting (XSS) Stored endpoint 'adicionar_cargo.php' parameter 'cargo'6.4 Medium
- labredescefetrj wegiaWeGIA Cross-Site Scripting (XSS) Reflected endpoint 'editar_permissoes.php' parameter 'msg_c'6.4 Medium
- vim, neovim, netapp bootstrap os +2 moreheap-buffer-overflow with visual mode in Vim < 9.1.10034.2 Medium
- codidact qpixelPrivate categories allow suggested edits to be viewed via the queue in @codidact/qpixel5.1 Medium
- openfga, openfga helm charts +1 moreOpenFGA Authorization Bypass5.8 Medium
- namelessmc namelessCross-site Scripting in NamelessMC6.3 Medium
- namelessmc namelessAccount Takeover in NamelessMC9.0 Critical
- haydenbleasel next-forgeBASEHUB_TOKEN commited in next-forge6.3 Medium
- evehome eve playCommand Injection Vulnerability9.8 Critical
- red hat build of keycloak, build of keycloak 26.0, jboss enterprise application platform 8 +2 more +4 moreOrg.keycloak:keycloak-quarkus-server: denial of service in keycloak server via security headers6.5 Medium
- red hat build of keycloak, build of keycloak 26.0, jboss enterprise application platform 8 +2 more +4 moreOrg.keycloak:keycloak-quarkus-server: unrestricted admin use of system and environment variables4.9 Medium
- Show moreLoading…