CVEs published in January 2025
4,247 vulnerabilities, 364 critical, 17 exploited.
- linksys e8450 firmwareLinksys E8450 v1.2.00.360516 was discovered to contain a command injection vulnerability via...8.0 High
binutilsAlpaquita,rootio-binutilsRoot +1 morehttps://www.gnu.org/software/binutils/ nm >=2.43 is affected by: Incorrect Access Control. The...5.5 Medium- totolink a810r firmwareTOTOLINK A810R V4.1.2cu.5032_B20200407 was found to contain a command insertion vulnerability in...8.1 High
- phpgurukul hospital management systemPHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) in /edit...4.2 Medium
- phpgurukul hospital management systemPHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) in /doctor...4.2 Medium
- phpgurukul hospital management systemPHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) in /view...4.5 Medium
- No product listedNorthern.tech Mender Client 4.x before 4.0.5 has Insecure Permissions.9.1 Critical
- No product listedNorthern.tech CFEngine Enterprise Mission Portal 3.24.0, 3.21.5, and below allows XSS. The fixed...4.8 Medium
- No product listedAn issue in RAR Extractor - Unarchiver Free and Pro v.6.4.0 allows local attackers to inject...5.5 Medium
- eng spagobiSpagoBI v3.5.1 contains multiple Stored Cross-Site Scripting (XSS) vulnerabilities in the create...5.4 Medium
- eng spagobiThe script input feature of SpagoBI 3.5.1 allows arbitrary code execution.9.1 Critical
- eng spagobiA Cross-Site Request Forgery (CSRF) vulnerability has been found in SpagoBI v3.5.1 in the user...6.1 Medium
System.Linq.Dynamic.CoreNuGetProperty reflection in System.Linq.Dynamic.Core6.4 Medium- orangescrumOrangeScrum v2.0.11 is vulnerable to Cross Site Scripting (XSS). An attacker can inject malicious...5.4 Medium
- ruijie reyee osThe mqlink.elf is service component in Ruijie RG-EW300N with firmware ReyeeOS 1.300.1422 is...9.8 Critical
- No product listedA stack overflow in the sctp_server::sctp_receiver_thread component of OpenAirInterface CN5G AMF ...7.5 High
- No product listedOpenAirInterface CN5G AMF (oai-cn5g-amf) <= 2.0.0 contains a null dereference in its handling of...6.5 Medium
- No product listedImproper file descriptor handling for closed connections in OpenAirInterface CN5G AMF (oai-cn5g...7.5 High
- No product listedAn uninitialized pointer dereference in the ngap_handle_pdu_session_resource_setup_response...6.5 Medium
- No product listedA NULL pointer dereference in the ngap_app::handle_receive routine of OpenAirInterface CN5G AMF ...7.5 High
- open5gsA reachable assertion in the oai_nas_5gmm_decode function of Open5GS <= 2.6.4 allows attackers to...7.5 High
- open5gsA reachable assertion in the amf_ue_set_suci function of Open5GS <= 2.6.4 allows attackers to...7.5 High
- No product listedA reachable assertion in the decode_access_point_name_ie function of Magma <= 1.8.0 (fixed in v1...7.5 High
- linuxfoundation magmaThe Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit...7.5 High
- linuxfoundation magmaThe Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit...7.5 High
- linuxfoundation magmaA type confusion in the nas_message_decode function of Magma <= 1.8.0 (fixed in v1.9 commit...9.8 Critical
- linuxfoundation magmaA reachable assertion in the decode_linked_ti_ie function of Magma <= 1.8.0 (fixed in v1.9 commit...7.5 High
- linuxfoundation magmaThe Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit...7.5 High
- linuxfoundation magmaThe Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit...7.5 High
- linuxfoundation magmaThe Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit...7.5 High
- linuxfoundation magmaThe Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit...7.5 High
- nvidia gpu display driver, vgpu softwareNVIDIA GPU display driver for Windows and Linux contains a vulnerability where referencing memory...5.5 Medium
- No product listedHomarr before v0.14.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability...6.1 Medium
- No product listedA Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 ...6.5 Medium
- linuxfoundation magmaA Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 ...6.5 Medium
- linuxfoundation magmaA Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 ...6.5 Medium
- linuxfoundation magmaA Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 ...6.5 Medium
- No product listedA Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 ...6.5 Medium
- linuxfoundation magmaA Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 ...6.5 Medium
- linuxfoundation magmaA Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 ...6.5 Medium
- linuxfoundation magmaA Stack-based buffer overflow in the Mobile Management Entity (MME) of Magma versions <= 1.8.0 ...7.5 High
- linuxfoundation magmaA Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 ...6.5 Medium
- linuxfoundation magmaA Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 ...6.5 Medium
- linuxfoundation magmaMagma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) are...7.5 High
- linuxfoundation magmaA Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 ...6.5 Medium
- linuxfoundation magmaNull pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 ...6.5 Medium
- linuxfoundation magmaA Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 ...6.5 Medium
- linuxfoundation magmaA Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 ...6.5 Medium
- linuxfoundation magmaA reachable assertion in the Mobile Management Entity (MME) of Magma versions <= 1.8.0 (fixed in...7.5 High
- a54552239 pearprojectapipearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- Show moreLoading…