CVEs published in January 2025
4,247 vulnerabilities, 364 critical, 17 exploited.
- a54552239 pearprojectapipearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- vim, netapp hci compute node firmware +1 moresegmentation fault in win_line() in Vim < 9.1.10434.2 Medium
- openvpn easy-rsaWeak encryption algorithm in Easy-RSA version 3.0.5 through 3.1.7 allows a local attacker to more...5.3 Medium
- azukaar cosmos-serverCosmos userbase checking vulnerability6.9 Medium
- hcltech devops velocity, ibm urbancode velocity +1 moreIBM UrbanCode Velocity information disclosure4.0 Medium
- hcltech devops velocity, ibm urbancode velocity +1 moreIBM UrbanCode Velocity information disclosure5.9 Medium
- hcltech devops velocity, ibm urbancode velocity +1 moreIBM UrbanCode Velocity cross-origin resource sharing5.3 Medium
- @fedify fedifyFedify has an Infinite loop and Blind SSRF found inside the Webfinger mechanism5.4 Medium
- codeigniter, codeigniter4 +1 moreCodeIgniter validation of header name and value5.3 Medium
- vitejs viteVite allows any websites to send any requests to the development server and read the response6.5 Medium
- labredescefetrj wegiaWeGIA has a SQL Injection endpoint 'adicionar_raca.php' parameter 'raca'10.0 Critical
- labredescefetrj wegiaWeGIA has a SQL Injection endpoint 'adicionar_cor.php' parameter 'cor'10.0 Critical
- labredescefetrj wegiaWeGIA has a SQL Injection endpoint 'adicionar_especie.php' parameter 'especie'10.0 Critical
- pwndocCross-Site Request Forgery (CSRF) allows creating admin account with POST request6.8 Medium
- phpoffice phpspreadsheetCross-Site Scripting (XSS) vulnerability in generateNavigation() function5.1 Medium
- lizardbyte sunshineSunshine improperly enforces pairing protocol request order7.7 High
- ibm security verify access, security verify access docker +1 moreIBM Security Verify Access unverified password change5.6 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreio_uring/eventfd: ensure io_eventfd_signal() defers another RCU period7.8 High
- debian linux, netapp 500f firmware, 8300 firmware +27 more +29 moreTiming side-channel in ECDSA signature computation4.6 Medium
- cp plus cp-xr-de21-s routerSecurity Misconfiguration Vulnerability in CP Plus Router8.6 High
- linux, linux kernel +1 morenetfilter: nf_tables: adapt set backend to use GC transaction API7.8 High
- tecno com.transsion.carlcareImproper permission settings for mobile applications (com.transsion.carlcare) may lead to ...7.5 High
- itsourcecode farm management system, angeljudesuarez tailoring management system +1 moreitsourcecode Farm Management System add-pig.php unrestricted upload5.1 Medium
- campcodes school management softwareCampCodes School Management Software Chat History send cross site scripting5.3 Medium
- No product listedShiprocket Module REST API Module rest_api authorization6.3 Medium
- No product listedShiprocket Module REST API Module restapi sql injection6.9 Medium
- aenrich a+hrd, a\+hrd +1 moreaEnrich Technology a+HRD - Insecure Deserialization7.2 High
- aenrich a+hrd, a\+hrd +1 moreaEnrich Technology a+HRD - SQL Injection9.8 Critical
- aenrich a+hrd, a\+hrd +1 moreaEnrich Technology a+HRD - Server-Side Request Forgery (SSRF)5.3 Medium
- obsproject obs studioobsproject OBS Studio untrusted search path2.0 Low
- aenrich a+hrd, a\+hrd +1 moreaEnrich Technology a+HRD - Reflected Cross-site Scripting(XSS)6.1 Medium
- facile sistemas cloud appsFacile Sistemas Cloud Apps Password Reset forgotpassword cross site scripting5.3 Medium
- musing studio writefreelyInsecure default config access in WriteFreely8.4 High
- mobotix m15Mobotix M15 player cross site scripting6.9 Medium
- union bank of india vyomUnion Bank of India Vyom Rooting Detection protection mechanism1.8 Low
- ibm txseries for multiplatformsIBM TXSeries for Multiplatforms denial of service7.5 High
- ibm txseries for multiplatformsIBM TXSeries for Multiplatforms denial of service7.5 High
- ibm sterling secure proxyIBM Sterling Secure Proxy improper input validation9.1 Critical
- ibm sterling secure proxyIBM Sterling Secure Proxy improper input validation9.1 Critical
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moredm array: fix releasing a faulty array block twice in dm_array_cursor_end7.8 High
- linux, linux kernel +1 morenetfs: Fix enomem handling in buffered reads7.1 High
- linux, linux kernel +1 morenfs: Fix oops in nfs_netfs_init_request() when copying to cache5.5 Medium
- linux, linux kernel +1 moredrm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind returns err7.8 High
- linux, linux kernel +1 moreksmbd: fix a missing return value check bug7.1 High
- linux, linux kernel, siemens simatic cn 4100 +5 more +7 morefs: relax assertions on failure to encode file handles5.5 Medium
- linux, linux kernel +1 morebtrfs: zlib: fix avail_in bytes for s390 zlib HW compression path5.5 Medium
- linux, linux kernel +1 moredrm/amd/display: Add check for granularity in dml ceil/floor helpers5.5 Medium
- linux, linux kernel +1 moredrm/amdgpu: Add a lock when accessing the buddy trim function7.8 High
- linux, linux kernel +1 moredrm/amd/display: fix divide error in DM plane scale calcs5.5 Medium
- linux, linux kernel +1 moredrm/amd/display: fix page fault due to max surface definition mismatch7.8 High
- Show moreLoading…