CVEs published in January 2025
4,247 vulnerabilities, 364 critical, 17 exploited.
- google chromeInappropriate implementation in Navigation in Google Chrome prior to 132.0.6834.83 allowed a...8.8 High
- google chromeInappropriate implementation in Extensions in Google Chrome prior to 132.0.6834.83 allowed a...4.3 Medium
- google chromeInsufficient data validation in Extensions in Google Chrome prior to 132.0.6834.83 allowed a...8.8 High
- google chromeInappropriate implementation in Payments in Google Chrome prior to 132.0.6834.83 allowed a remote...6.5 Medium
- google chromeInappropriate implementation in Fenced Frames in Google Chrome prior to 132.0.6834.83 allowed a...6.5 Medium
- google chromeInappropriate implementation in Fullscreen in Google Chrome on Windows prior to 132.0.6834.83...6.5 Medium
- google chromeRace in Frames in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a...6.5 Medium
- google chromeStack buffer overflow in Tracing in Google Chrome prior to 132.0.6834.83 allowed a remote...8.8 High
- google chromeOut of bounds read in Metrics in Google Chrome prior to 132.0.6834.83 allowed a remote attacker...8.8 High
- google chromeInteger overflow in Skia in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to...8.8 High
- google chromeInappropriate implementation in Navigation in Google Chrome on Android prior to 132.0.6834.83...6.5 Medium
- google chromeOut of bounds memory access in V8 in Google Chrome prior to 132.0.6834.83 allowed a remote...8.8 High
- simple-help simplehelpSimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files...7.2 High
- simple-help simplehelpSimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal...7.5 High
- simple-help simplehelpSimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low...9.9 Critical
- totolink x5000r firmwareTOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection...6.8 Medium
- totolink x5000r firmwareTOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection...6.8 Medium
- totolink x5000r firmwareTOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection...6.8 Medium
- totolink x5000r firmwareTOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection...8.8 High
- totolink x5000r firmwareTOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection...8.8 High
- totolink x5000r firmwareTOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection...8.8 High
- totolink x5000r firmwareTOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection...8.8 High
- totolink x5000r firmwareTOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection...8.8 High
- totolink x5000r firmwareTOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection...8.8 High
- totolink x5000r firmwareTOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection...8.8 High
- totolink x5000r firmwareTOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection...8.8 High
- totolink x5000r firmwareTOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection...8.8 High
- totolink x5000r firmwareTOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection...8.8 High
- totolink x5000r firmwareTOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection...8.8 High
- totolink x5000r firmwareTOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection...8.8 High
- termiusAn issue in termius before v.9.9.0 allows a local attacker to execute arbitrary code via a...3.3 Low
- phiewerIn Phiewer 4.1.0, a dylib injection leads to Command Execution which allow attackers to inject...3.3 Low
- No product listedInsecure permissions in the XNetSocketClient component of XINJE XDPPro.exe v3.2.2 to v3.7.17c...5.1 Medium
- No product listedThe XINJE XL5E-16T and XD5E-24R-E programmable logic controllers V3.5.3b-V3.7.2a have a...7.5 High
- No product listedAn issue in XINJE XL5E-16T V3.7.2a allows attackers to cause a Denial of Service (DoS) via a...7.5 High
- No product listedHI-SCAN 6040i Hitrax HX-03-19-I was discovered to contain hardcoded credentials for access to...9.8 Critical
- No product listedAn issue in the AsDB service of HI-SCAN 6040i Hitrax HX-03-19-I allows attackers to enumerate...7.5 High
- No product listedAn issue in the USB Autorun function of HI-SCAN 6040i Hitrax HX-03-19-I allows attackers to...8.4 High
- No product listedInsecure default configurations in HI-SCAN 6040i Hitrax HX-03-19-I allow authenticated attackers...6.7 Medium
- No product listedThe HI-SCAN 6040i Hitrax HX-03-19-I was discovered to transmit user credentials in cleartext over...6.5 Medium
- No product listedAn arbitrary file upload vulnerability in the UI login page logo upload function of Process Maker...6.5 Medium
- No product listedA cross-site scripting (XSS) vulnerability in Process Maker pm4core-docker 4.1.21-RC7 allows...4.8 Medium
- No product listedInsecure permissions in Aginode GigaSwitch v5 allows attackers to access sensitive information...6.5 Medium
parse-urinpm,parseurinpm +1 moreparse-uri Regular expression Denial of Service (ReDoS)6.5 Medium- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreFreeipa: administrative user data leaked through systemd journal5.5 Medium
- discourse discourse-aiCross-site Scripting via Discourse-ai SharedAiConversation onebox in Discourse9.1 Critical
silverstripe/frameworkPackagistSilverstripe Framework has a Reflected Cross Site Scripting (XSS) in error message0.0 None- silverstripe framework, silverstripe-framework +1 moreCross-site Scripting in form messages in silverstripe framework5.4 Medium
- silverstripe silverstripe-asset-adminCross-site Scripting via insert media remote file oembed in silverstripe-asset-admin5.4 Medium
@lodestar/reqrespnpmLodestar snappy checksum issueNo score- Show moreLoading…