CVEs published in January 2025
4,247 vulnerabilities, 364 critical, 17 exploited.
- umbraco cmsWithdrawn Advisory: Umbraco Rich Text Display allows Cross-Site Scripting6.5 Medium
- No product listedIn GRAU DATA Blocky before 3.1, Blocky-Gui has a Client-Side Enforcement of Server-Side Security...6.4 Medium
- No product listedGRAU DATA Blocky before 3.1 stores passwords encrypted rather than hashed. At the login screen,...5.7 Medium
- open5gsOpen5GS MME versions <= 2.6.4 contains an assertion that can be remotely triggered via a...8.6 High
- open5gsA reachable assertion in the ogs_kdf_hash_mme function of Open5GS <= 2.6.4 allows attackers to...5.3 Medium
- open5gsA reachable assertion in the mme_ue_find_by_imsi function of Open5GS <= 2.6.4 allows attackers to...7.5 High
- open5gsA reachable assertion in the nas_eps_send_emm_to_esm function of Open5GS <= 2.6.4 allows...8.6 High
- No product listedSynnefo Internet Management Software 2023 was discovered to contain a SQL injection vulnerability.9.8 Critical
- open5gsOpen5GS MME versions <= 2.6.4 contain a reachable assertion in the `Uplink NAS Transport` packet...8.6 High
- open5gsOpen5GS MME versions <= 2.6.4 contain a reachable assertion in the `UE Context Release Request`...7.5 High
- open5gsOpen5GS MME version <= 2.6.4 contains an assertion that can be remotely triggered via a malformed...8.6 High
- open5gsOpen5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed...8.6 High
- open5gsOpen5GS MME versions <= 2.6.4 contains an assertion that can be remotely triggered via a...8.6 High
- open5gsOpen5GS MME versions <= 2.6.4 contains an assertion that can be remotely triggered via a...8.6 High
- open5gsOpen5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed...8.6 High
- open5gsOpen5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed...8.6 High
- open5gsOpen5GS MME versions <= 2.6.4 contains an assertion that can be remotely triggered via a...8.6 High
- open5gsOpen5GS MME versions <= 2.6.4 contains an assertion that can be remotely triggered via a...7.5 High
- open5gsOpen5GS MME versions <= 2.6.4 contains an assertion that can be remotely triggered via a...7.3 High
- open5gsOpen5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed...5.3 Medium
- open5gsOpen5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed...6.3 Medium
- open5gsOpen5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed...6.3 Medium
- open5gsOpen5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed...6.3 Medium
- open5gsOpen5GS MME versions <= 2.6.4 contain a buffer overflow in the ASN.1 deserialization function of...5.3 Medium
- open5gsOpen5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed...5.3 Medium
- open5gsOpen5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed...5.3 Medium
- open5gsOpen5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed...5.3 Medium
- open5gsOpen5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed...5.3 Medium
- open5gsOpen5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed...5.3 Medium
- open5gsOpen5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed...5.3 Medium
- No product listedThe NextEPC MME <= 1.0.1 (fixed in commit a8492c9c5bc0a66c6999cb5a263545b32a4109df) contains a...8.9 High
- quantumcloud wpbot pro wordpress chatbot, wpbot wpot +1 moreWPBot Pro Wordpress Chatbot <= 13.5.4 - Unauthenticated Arbitrary File Upload9.8 Critical
- google androidIn setActualDefaultRingtoneUri of RingtoneManager.java, there is a possible way to bypass content...7.8 High
- google androidIn multiple locations, there is a possible way to access media content belonging to another user...5.5 Medium
- lexmark variousA Server-Side Request Forgery (SSRF) vulnerability exists in newer Lexmark devices.8.6 High
- apache rangerApache Ranger: SSRF in Edit Service page - Add logic to filter requests to localhost9.1 Critical
- apache rangerApache Ranger: Stored XSS in Edit Service page - Add logic to validate user input4.8 Medium
- apache ambariApache Ambari: Remote Code Injection in Ambari Metrics and AMS Alerts8.8 High
- apache ambariApache Ambari: Code Injection Vulnerability in Ambari Alert Definition8.8 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 8.6 advanced mission critical update support +14 more +16 morePodman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile8.6 High
- apache ambariApache Ambari: XML External Entity (XXE) Vulnerability in Ambari/Oozie7.5 High
mathlivenpmDuplicate Advisory: MathLive's Lack of Escaping of HTML allows for XSS6.3 Medium- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...7.3 High
- oracle argus safety, oracle corporation life sciences argus safety +1 moreVulnerability in the Oracle Life Sciences Argus Safety product of Oracle Health Sciences...6.1 Medium
- oracle hyperion data relationship managementVulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion ...6.6 Medium
- oracle hyperion data relationship managementVulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion ...4.5 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security:...4.3 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...6.5 Medium
- oracle corporation agile plm framework, oracle agile product lifecycle management +1 moreVulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component:...7.5 High
- oracle corporation agile plm framework, oracle agile product lifecycle management +1 moreVulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Agile...8.1 High
- Show moreLoading…