CVEs published in January 2025
4,247 vulnerabilities, 364 critical, 17 exploited.
@lodestar/reqrespnpmLodestar snappy decompression issueNo score- suse rancherStored Cross-site Scripting vulnerability in Rancher UI8.9 High
- lenovo xclarity administratorA privilege escalation vulnerability was discovered that could allow a valid, authenticated LXCA...6.8 Medium
- lenovo app store, browser, pc manager +2 moreA potential buffer overflow vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo...4.7 Medium
- lenovo app store, browser, pc manager +2 moreA potential TOCTOU vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo App Store...4.7 Medium
- git-lfsGit LFS permits exfiltration of credentials via crafted HTTP URLs8.5 High
- adobe substance3d - designer, substance 3d designer +1 moreSubstance3D - Designer | Out-of-bounds Write (CWE-787)7.8 High
- adobe substance3d - designer, substance 3d designer +1 moreSubstance3D - Designer | Out-of-bounds Write (CWE-787)7.8 High
- adobe substance3d - designer, substance 3d designer +1 moreSubstance3D - Designer | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe substance3d - designer, substance 3d designer +1 moreSubstance3D - Designer | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe animateAnimate | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- blackberry qnx software development platform, qnx software development platform (sdp) +1 moreVulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform7.5 High
- blackberry qnx software development platform, qnx software development platform (sdp) +1 moreVulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform7.5 High
- adobe illustrator on ipadIllustrator on iPad | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- adobe illustrator on ipadIllustrator on iPad | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- blackberry qnx software development platform, qnx software development platform (sdp) +1 moreVulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform9.8 Critical
- blackberry qnx software development platform, qnx software development platform (sdp) +1 moreVulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform5.3 Medium
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Out-of-bounds Write (CWE-787)7.8 High
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Out-of-bounds Write (CWE-787)7.8 High
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Out-of-bounds Write (CWE-787)7.8 High
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Stack-based Buffer Overflow (CWE-121)7.8 High
- wikimedia foundation mediawiki - socialprofile extensionSpecial:EditProfile exposes the contents of profile fields marked "hidden"/friends or "friends of friends" when the privileged user isn't a friend of the user whose profile they edit(ed)2.4 Low
- umbraco forms, umbraco.forms.issues +1 moreShort and Long Answer Fields Are Not Validated Server-Side For Maximum Length in Umbraco.Forms5.8 Medium
- blackberry qnx software development platform, qnx software development platform (sdp) +1 moreVulnerabilities in TIFF and PCX Image Codecs Impact QNX Software Development Platform5.3 Medium
- adobe photoshop, photoshop desktop +1 morePhotoshop Desktop | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- adobe photoshop, photoshop desktop +1 morePhotoshop Desktop | Uncontrolled Search Path Element (CWE-427)7.8 High
- invoice ninja ninjaInvoice Ninja PDF Rendering Server Side Request Forgery7.7 High
- wikimedia foundation mediawiki - globalblocking extensionAPI list=globalblocks can reveal IP of autoblock if username and IP are included in the bgtargets parameter3.5 Low
- wikimedia foundation mediawiki - refreshspecial extensionXSS in Special:RefreshSpecial5.4 Medium
- git-ecosystem git-credential-managerCarriage-return character in remote URL allows malicious repository to leak credentials in Git Credential Manager7.4 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Telephony Service Remote Code Execution Vulnerability8.8 High
- microsoft windows, windows 10 version 21h2, windows 10 version 22h2 +13 more +15 moreWindows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability7.8 High
- microsoft windows, windows 10 version 21h2, windows 10 version 22h2 +13 more +15 moreWindows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability7.8 High
- microsoft windows 11 version 24h2, windows server 2022, 23h2 edition (server core installation), windows server 2025 +3 more +5 moreWindows NTLM V1 Elevation of Privilege Vulnerability9.8 Critical
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreMapUrlToZone Security Feature Bypass Vulnerability4.3 Medium
- microsoft windows server 2022, 23h2 edition (server core installation), windows server 2025, windows server 2025 (server core installation) +1 more +3 moreInternet Explorer Remote Code Execution Vulnerability7.8 High
- microsoft windows 11 version 24h2, windows server 2022, 23h2 edition (server core installation), windows server 2025 +3 more +5 moreWindows Security Account Manager (SAM) Denial of Service Vulnerability6.5 Medium
- microsoft onenote, office, office ltsc for mac 2021 +2 more +4 moreMicrosoft Office OneNote Remote Code Execution Vulnerability7.8 High
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +10 more +12 moreWindows Kerberos Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows CSC Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows CSC Service Information Disclosure Vulnerability5.5 Medium
- microsoft windows 11 version 24h2, windows server 2022, 23h2 edition (server core installation), windows server 2025 +3 more +5 moreMicrosoft Brokering File System Elevation of Privilege Vulnerability7.8 High
- Show moreLoading…