CVEs published in January 2025
4,247 vulnerabilities, 364 critical, 17 exploited.
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moretopology: Keep the cpumask unchanged when printing cpumap7.8 High
- linux, linux kernel +1 moremisc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling5.5 Medium
- linux, linux kernel +1 moreusb: typec: tcpci: fix NULL pointer issue on shared irq case5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreusb: gadget: f_fs: Remove WARN_ON in functionfs_bind4.7 Medium
- linux, linux kernel +1 moreiio: pressure: zpa2326: fix information leak in triggered buffer7.1 High
- linux, linux kernel +1 moreiio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer7.1 High
- linux, linux kernel +1 moreiio: light: vcnl4035: fix information leak in triggered buffer7.1 High
- linux, linux kernel +1 moreiio: light: bh1745: fix information leak in triggered buffer7.1 High
- linux, linux kernel +1 moreiio: imu: kmx61: fix information leak in triggered buffer7.1 High
- linux, linux kernel +1 moreiio: adc: rockchip_saradc: fix information leak in triggered buffer7.1 High
- linux, linux kernel +1 moreiio: adc: ti-ads8688: fix information leak in triggered buffer7.1 High
- linux, linux kernel +1 moreiio: adc: ti-ads1119: fix information leak in triggered buffer7.1 High
- linux, linux kernel +1 moreiio: adc: at91: call input_free_device() on allocated iio_dev7.8 High
- linux, linux kernel +1 moreovl: support encoding fid from inode with no alias5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - bios +1 more +3 morenet_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute5.5 Medium
- linux, linux kernel +1 moreipvlan: Fix use-after-free in ipvlan_get_iflink().7.8 High
- linux, linux kernel +1 morenet: hns3: don't auto enable misc vector4.7 Medium
- linux, linux kernel +1 morenet: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue7.1 High
- linux, linux kernel +1 morenet: hns3: fix kernel crash when 1588 is sent on HIP08 devices5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: conntrack: clamp maximum hashtable size to INT_MAX5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - bios +1 more +3 moresched: sch_cake: add bounds checks to host bulk flow fairness counts7.3 High
- linux, linux kernel +1 moreafs: Fix the maximum cell name length7.5 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreplatform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it5.5 Medium
- linux, linux kernel +1 moredrm/xe: Fix tlb invalidation when wedging5.5 Medium
- linux, linux kernel +1 morenetfs: Fix kernel async DIO5.5 Medium
- linux, linux kernel +1 moremptcp: sysctl: sched: avoid using current->nsproxy5.5 Medium
- linux, linux kernel +1 moremptcp: sysctl: blackhole timeout: avoid using current->nsproxy5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moresctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moresctp: sysctl: rto_min/max: avoid using current->nsproxy5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moresctp: sysctl: auth_enable: avoid using current->nsproxy7.1 High
- linux, linux kernel +1 moresctp: sysctl: udp_port: avoid using current->nsproxy7.1 High
- linux, linux kernel +1 moresctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy5.5 Medium
- linux, linux kernel +1 morerds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy5.5 Medium
- linux, linux kernel +1 morecgroup/cpuset: remove kernfs active break5.5 Medium
- linux, linux kernel +1 morex86/fpu: Ensure shadow stack is active before "getting" registers5.5 Medium
- linux, linux kernel +1 moreblock, bfq: fix waker_bfqq UAF after bfq_split_bfqq()7.8 High
- epic games launcherEpic Games Launcher Installer profapi.dll untrusted search path2.0 Low
- tenda ac15, ac15 firmware +1 moreTenda AC15 SetDevNetName formSetDevNetName stack-based overflow8.7 High
- zzcmsZZCMS index.php sql injection6.9 Medium
- soflyy wp all import proWP All Import Pro <= 4.9.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File Upload5.5 Medium
- anisha fantasy-cricketcode-projects Fantasy-Cricket authenticate.php sql injection6.9 Medium
- ibm maximo asset managementIBM Maximo Asset Management directory traversal6.5 Medium
- ibm sterling connect:direct web services, sterling connect direct web services +1 moreIBM Sterling Connect:Direct Web Services information disclosure4.3 Medium
- ibm security reaqta, security qradar edr +1 moreIBM Security ReaQta improper input validation4.3 Medium
- anisha fantasy-cricketcode-projects Fantasy-Cricket update.php sql injection5.3 Medium
- code-projects gym management systemCodezips Gym Management System health_status_entry.php sql injection5.3 Medium
apache-poiOSS-FuzzSecurity exception in POIHDGFFuzzerNo scoreradare2OSS-FuzzHeap-use-after-free in r_list_freeNo scoretryton-serverDebiantryton-server - security updateNo score- angeljudesuarez farm management systemitsourcecode Farm Management System add-pig.php sql injection5.3 Medium
- Show moreLoading…