CVEs published in January 2025
4,247 vulnerabilities, 364 critical, 17 exploited.
- jfinaloa project jfinaloaA cross-site scripting (XSS) vulnerability in the getBusinessUploadListPage?busid interface of...4.8 Medium
- jfinaloa project jfinaloaA cross-site scripting (XSS) vulnerability in the openSelectManyUserPage?orgid interface of...4.8 Medium
- jfinaloa project jfinaloaA cross-site scripting (XSS) vulnerability in the /bumph/getDraftListPage?type interface of...4.8 Medium
- jfinaloa project jfinaloaA cross-site scripting (XSS) vulnerability in the common/getEditPage?view interface of JFinalOA...4.8 Medium
- jfinaloa project jfinaloaJFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the...8.8 High
- jfinaloa project jfinaloaJFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the...8.8 High
- jfinaloa project jfinaloaJFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- tenda ac8 firmwareTenda AC8v4 V16.03.34.06 has a stack overflow vulnerability. Affected by this vulnerability is...8.8 High
- tenda ac8 firmwareTenda AC8v4 V16.03.34.06 has a stack overflow vulnerability. Affected by this vulnerability is...9.8 Critical
- dlink dir-816 firmwareAn access control issue in the component formDMZ.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210...9.8 Critical
- dlink dir-816 firmwareAn access control issue in the component websURLFilterAddDel of D-Link 816A2_FWv1...4.3 Medium
- dlink dir-816 firmwareAn information disclosure vulnerability in the component d_status.asp of D-Link 816A2_FWv1...6.5 Medium
- dlink dir-816 firmwareAn access control issue in the component form2alg.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210...5.3 Medium
- dlink dir-816 firmwareAn access control issue in the component form2PortriggerRule.cgi of D-Link 816A2_FWv1...5.3 Medium
- dlink dir-816 firmwareAn access control issue in the component form2RepeaterSetup.cgi of D-Link 816A2_FWv1...6.5 Medium
- dlink dir-816 firmwareAn access control issue in the component form2WlAc.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210...6.5 Medium
- dlink dir-816 firmwareAn access control issue in the component form2Wan.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210...6.5 Medium
- dlink dir-816 firmwareAn access control issue in the component form2WlanBasicSetup.cgi of D-Link 816A2_FWv1...6.5 Medium
- 07fly 07flycms07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin...3.5 Low
- tenda ac18 firmwareTenda AC18 V15.03.05.19 was discovered to contain a command injection vulnerability via the...9.8 Critical
- tenda ac18 firmwareTenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the startIP parameter in...9.8 Critical
- tenda ac18 firmwareTenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the firewallEn parameter...9.8 Critical
- tenda ac18 firmwareTenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the devName parameter in...9.8 Critical
- tenda ac18 firmwareTenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the limitSpeedUp parameter...9.8 Critical
- tenda ac18 firmwareTenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the funcpara1 parameter in...8.8 High
- tenda ac18 firmwareTenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the speed_dir parameter in...5.7 Medium
- tenda ac18 firmwareTenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the ssid parameter in the...9.8 Critical
- campcodes cybercafe management systemCampcodes Cybercafe Management System v1.0 is vulnerable to SQL Injection in /ccms/view-user...7.2 High
- 07fly customer relationship management07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net...4.3 Medium
- 07fly customer relationship management07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net...4.3 Medium
- 07fly 07flycms07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net...3.5 Low
- No product listedA null pointer dereference vulnerability in Macrium Reflect prior to 8.1.8017 allows an attacker...7.8 High
- No product listedA JNDI injection issue was discovered in Cloudera JDBC Connector for Hive before 2.6.26 and JDBC...8.7 High
- opexustech foiaxpress public access linkAn issue in OPEXUS FOIAXPRESS PUBLIC ACCESS LINK v11.1.0 allows attackers to bypass...9.1 Critical
- cern indicoIndico Insecure Access0.0 None
tabby-sshnpmEugeny Tabby Sends Password Despite Host Key Verification Failure4.3 Medium- tenda ac6 firmwareIncorrect access control in Tenda AC1200 Smart Dual-Band WiFi Router Model AC6 v2.0 Firmware v15...8.1 High
- themesbrand chatviaInsecure Permissions vulnerability in themesebrand Chatvia v.5.3.2 allows a remote attacker to...4.6 Medium
- themesbrand chatviaAn issue in themesebrand Chatvia v.5.3.2 allows a remote attacker to execute arbitrary code via...4.6 Medium
- red hat .net 6.0 on red hat enterprise linux, cryostat 3, logging subsystem for red hat openshift +52 more +54 moreNpm-serialize-javascript: cross-site scripting (xss) in serialize-javascript5.4 Medium
- mattermost, mattermost mobile +1 moreMobile crash via file with specially crafted filename4.3 Medium
- davidanderson updraftplus: wp backup & migration pluginUpdraftPlus - Backup/Restore <= 1.24.12 - Reflected Cross-Site Scripting6.1 Medium
- islandora crayfishCrayfish allows Remote Code Execution via Homarus Authorization header9.8 Critical
- d-link dir-823x, dlink dir-823x firmware +1 moreD-Link DIR-823X FUN_00412244 null pointer dereference8.7 High
- fanli2012 native-php-cmsFanli2012 native-php-cms cat_dodel.php sql injection5.3 Medium
- fanli2012 native-php-cmsFanli2012 native-php-cms article_dodel.php sql injection5.3 Medium
- fanli2012 native-php-cmsFanli2012 native-php-cms friendlink_dodel.php sql injection5.3 Medium
sp1-starkcrates.ioSP1 has missing verifier checks and fiat-shamir observationsNo score- fanli2012 native-php-cmsFanli2012 native-php-cms product_list.php sql injection5.3 Medium
- fanli2012 native-php-cmsFanli2012 native-php-cms cat_edit.php sql injection5.3 Medium
- Show moreLoading…