CVEs published in January 2025
4,247 vulnerabilities, 364 critical, 17 exploited.
- oracle jd edwards enterpriseone toolsVulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web...6.1 Medium
- oracle jd edwards enterpriseone toolsVulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web...6.1 Medium
- oracle jd edwards enterpriseone toolsVulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web...7.5 High
- oracle jd edwards enterpriseone toolsVulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web...7.5 High
- oracle jd edwards enterpriseone toolsVulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web...6.5 Medium
- oracle jd edwards enterpriseone toolsVulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web...6.5 Medium
- oracle jd edwards enterpriseone toolsVulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web...5.4 Medium
- oracle e-business suite, oracle corporation project foundation +1 moreVulnerability in the Oracle Project Foundation product of Oracle E-Business Suite (component:...8.1 High
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services...4.9 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...4.9 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported...4.9 Medium
- oracle graalvm, graalvm for jdk, jdk +9 more +11 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...4.8 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...6.5 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...6.5 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported...4.9 Medium
- oracle http serverVulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Core). ...5.3 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported...5.5 Medium
- oracle mysql enterprise firewallVulnerability in the MySQL Enterprise Firewall product of Oracle MySQL (component: Firewall). ...4.4 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security:...4.1 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security:...4.4 Medium
- oracle mysql server, netapp active iq unified manager, oncommand insight +1 more +3 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...4.9 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported...4.9 Medium
- oracle mysql server, debian linux +1 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported...4.9 Medium
- oracle e-business suite, oracle corporation advanced outbound telephony +1 moreVulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite ...6.1 Medium
- oracle jd edwards enterpriseone toolsVulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component:...5.4 Medium
- compose-spec compose-goExcessive Platform Resource Consumption within a Loop when unmarshalling Compose file having recursive loop5.9 Medium
- matrix-org mjolnirMjolnir v1.9.0 accepts commands from any room9.1 Critical
- github enterprise serverImproper Verification of Cryptographic Signature in GitHub Enterprise Server Allows Signature Spoofing by Improper Validation7.6 High
- labredescefetrj wegiaWeGIA Open Redirect vulnerability4.8 Medium
- nodejs undiciUndici Uses Insufficiently Random Values6.8 Medium
- yeswikiYesWiki vulnerable to authenticated arbitrary file deletion7.1 High
- jetbrains teamcityIn JetBrains TeamCity before 2024.12.1 decryption of connection secrets without proper...6.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.12.1 improper access control allowed to see Projects’ names in...4.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.12.1 reflected XSS was possible on the Vault Connection page4.6 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.55417 account takeover was possible via spoofed email and...7.1 High
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.55417 permanent tokens could be exposed in logs5.5 Medium
- jetbrains hubIn JetBrains Hub before 2024.3.55417 privilege escalation was possible via LDAP authentication...6.7 Medium
- anyroadWordPress AnyRoad plugin <= 1.3.2 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- estatebud – properties & listingsWordPress Estatebud – Properties & Listings plugin <= 5.5.0 - CSRF to Settings Update & Stored XSS vulnerability7.1 High
- marketing fire widget optionsWordPress Widget Options plugin <= 4.0.8 - Broken Access Control to Notice Dimissal vulnerability4.3 Medium
- farhan noor applyonlineWordPress ApplyOnline plugin <= 2.6.7.1 - Broken Access Control vulnerability4.3 Medium
- vcita online payments – get paid with paypal, square & stripeWordPress Online Payments plugin <= 3.20.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- matthew bizlibraryWordPress BizLibrary plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- p. razvan sexbundleWordPress SexBundle plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- brian messenlehner wp-announcementsWordPress WP-Announcements plugin <= 1.8 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- realty workstation workstation, realtyworkstation realty workstation +1 moreWordPress Realty Workstation plugin <= 1.0.45 - Broken Access Control vulnerability8.2 High
- enguerran weiss related post shortcodeWordPress Related Post Shortcode Plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- bruce wampler weaver themes shortcode compatibilityWordPress Weaver Themes Shortcode Compatibility Plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- andrea dotta, jacopo campani, di xkoll.com social2blogWordPress Social2Blog plugin <= 0.2.990 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- flashmaniac nature flipbookWordPress Nature FlipBook WordPress Plugin plugin <= 1.7 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- Show moreLoading…