CVEs published in January 2025
4,247 vulnerabilities, 364 critical, 17 exploited.
- google chromeOut of bounds memory access in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote...7.5 High
- google chromeObject corruption in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to...8.2 High
- traffic alert and collision avoidance system (tcas) ii collision avoidance systemsTraffic Alert and Collision Avoidance System (TCAS) II has a Reliance on Untrusted Inputs in a Security Decision vulnerability6.0 Medium
- traffic alert and collision avoidance system (tcas) ii collision avoidance systemsTraffic Alert and Collision Avoidance System (TCAS) II has an External Control of System or Configuration Setting vulnerability7.1 High
- cloudflare warpFile symlink abuse might lead to deleting files belonging to SYSTEM user6.1 Medium
- ciliumCilium vulnerable to information leakage via insecure default Hubble UI CORS header6.5 Medium
- jenkins azure service fabric, jenkins project azure service fabric plugin +1 moreMissing permission checks in Jenkins Azure Service Fabric Plugin4.3 Medium
- jenkins azure service fabric, jenkins project azure service fabric plugin +1 moreCSRF vulnerability in Jenkins Azure Service Fabric Plugin4.3 Medium
- jenkins folder-based authorization strategy, jenkins project folder-based authorization strategy plugin +1 moreDisabled permissions can be granted by Folder-based in Jenkins Authorization Strategy Plugin6.8 Medium
- jenkins eiffel broadcaster, jenkins project eiffel broadcaster plugin +1 moreCache confusion in Jenkins Eiffel Broadcaster Plugin4.3 Medium
- jenkins openid connect authentication, jenkins project openid connect authentication plugin +1 moreImproper handling of case sensitivity in Jenkins OpenId Connect Authentication Plugin8.8 High
- jenkins bitbucket server integration, jenkins project bitbucket server integration plugin +1 moreBitbucket Server Integration Plugin allows bypassing CSRF protection for any URL8.8 High
- jenkins gitlab, jenkins project gitlab plugin +1 moreIncorrect permission check in Jenkins GitLab Plugin allows enumerating credentials IDs4.3 Medium
- drupal ignition error pages, ignition error pages project error pages +1 moreIgnition Error Pages - Critical - Cross Site Scripting - SA-CONTRIB-2025-0076.1 Medium
- drupal material admin, material admin project admin +1 moreMaterial Admin - Critical - Unsupported - SA-CONTRIB-2025-0066.6 Medium
- drupal flattern – multipurpose bootstrap business profile, flattern project flattern +1 moreFlattern – Multipurpose Bootstrap Business Profile - Critical - Unsupported - SA-CONTRIB-2025-0056.6 Medium
- artificial intelligence project intelligence, drupal ai (artificial intelligence) +1 moreAI (Artificial Intelligence) - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-0048.2 High
- ciliumDoS in Cilium agent DNS proxy from crafted DNS responses5.3 Medium
- ibm robotic process automation for cloud pakIBM Robotic Process Automation for Cloud Pak cross-site scripting4.4 Medium
- cisco broadworks network server, broadworks +1 moreCisco BroadWorks SIP Denial of Service Vulnerability7.5 High
- cisco meeting managementCisco Meeting Management Client-Server Privilege Escalation Vulnerability9.9 Critical
- clamav, cisco secure endpoint, secure endpoint private cloud +2 moreClamAV OLE2 File Format Decryption Denial of Service Vulnerability5.3 Medium
- ibm sterling b2b integrator standard edition, sterling b2b integrator +1 moreIBM Sterling B2B Integrator Standard Edition code execution8.8 High
- arm cortex-a57, cortex-a72, cortex-a73 +5 more +7 moreSpectre-BSE5.1 Medium
- nlnet labs routinatorRoutinator crashes when illegal characters are present in manifest file names7.5 High
- muzaara google ads report, notfound muzaara google ads report +1 moreWordPress Muzaara Google Ads Report Plugin <= 3.1 - PHP Object Injection vulnerability9.8 Critical
- notfound blue wrench video widgetWordPress Blue Wrench Video Widget Plugin <= 2.1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- toocheke companionWordPress Toocheke Companion plugin <= 1.166 - Stored Cross Site Scripting (XSS) vulnerability5.9 Medium
- red hat build of keycloak, build of keycloak 26.0, single sign-on 7 +2 moreKeycloak-ldap-federation: authentication bypass due to missing ldap bind after password reset in keycloak5.4 Medium
- misanthrop wp download codesWordPress WP Download Codes Plugin <= 2.5.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- kolja nolte flexible blogtitleWordPress Flexible Blogtitle Plugin <= 0.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- david jeffrey contact form 7 round robin lead distributionWordPress Contact Form 7 Round Robin Lead Distribution Plugin <= 1.2.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- inwavethemes infundingWordPress InFunding plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- edem cmc migrateWordPress CMC MIGRATE plugin <= 0.0.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- kiro g. formatted postWordPress Formatted post plugin <= 1.01 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- a.ankit readme creatorWordPress ReadMe Creator plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- imsoftware wp imap authWordPress WP IMAP Auth plugin <= 4.0.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound database syncWordPress Database Sync plugin <= 0.5.1 - Sensitive Data Exposure vulnerability6.5 Medium
- fireantology history timelineWordPress History timeline plugin <= 0.7.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- anil jailta fwd sliderWordPress FWD Slider plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- davidpuc simple shortcode buttonsWordPress Simple shortcode buttons plugin <= 1.3.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound mapbox for wp advancedWordPress Mapbox for WP Advanced Plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- ala falaki a gateway for pasargad bank on woocommerceWordPress a Gateway for Pasargad Bank on WooCommerce Plugin <= 2.5.2 - Cross Site Scripting (XSS) vulnerability7.1 High
- linus lundahl good old galleryWordPress Good Old Gallery Plugin <= 2.1.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- innovative solutions user filesWordPress user files plugin <= 2.4.2 - Arbitrary File Upload vulnerability10.0 Critical
- dzeriho improved sale badges – free versionWordPress Improved Sale Badges – Free Version Plugin <= 1.0.1 - Local File Inclusion vulnerability8.1 High
- webarea background animation blocksWordPress Background animation blocks Plugin <= 2.1.5 - Local File Inclusion vulnerability8.1 High
- bulktheme wooeximWordPress WOOEXIM Plugin <= 5.0.0 - PHP Object Injection vulnerability8.8 High
- ngoccode wp load galleryWordPress WP Load Gallery Plugin <= 2.1.6 - Arbitrary File Upload vulnerability9.1 Critical
- crudlab image gallery box by crudlabWordPress Image Gallery Box by CRUDLab Plugin <= 1.0.3 - Local File Inclusion vulnerability7.5 High
- Show moreLoading…