CVEs published in January 2025
4,247 vulnerabilities, 364 critical, 17 exploited.
- No product listedIn AXESS ACS (Auto Configuration Server) through 5.2.0, unsanitized user input in the TR069 API...7.5 High
- couchbase serverAn issue was discovered in Couchbase Server 7.6.x through 7.6.3. A user with the...6.5 Medium
- dolibarr erp\/crmDolibarr Cross-site Scripting vulnerability9.0 Critical
- dolibarr erp\/crmDolibarr Cross-site Scripting vulnerability9.0 Critical
- No product listedIncorrect access control in BYD QIN PLUS DM-i Dilink OS 3.0_13.1.7.2204050.1 allows unauthorized...6.5 Medium
- No product listedCross Site Scripting vulnerability in AdGuard Application v.7.18.1 (4778) and before allows an...6.1 Medium
- edimax br-6476ac firmwareEdimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 is vulnerable to Buffer Overflow via ...8.8 High
- edimax br-6476ac firmwareEdimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 suffers from Command Injection issues in ...8.8 High
- edimax br-6476ac firmwareIn Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06, the request /goform/fromSetDDNS does...8.8 High
- edimax br-6476ac firmwareEdimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 is vulnerable to Cross Site Scripting (XSS)...5.2 Medium
- edimax br-6476ac firmwareEdimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 is vulnerable to Buffer Overflow via ...8.8 High
- No product listedIn illumos illumos-gate 2024-02-15, an error occurs in the elliptic curve point addition...6.1 Medium
- needyamin image gallery, image gallery management system +1 moreneedyamin image_gallery Cover Image gallery.php unrestricted upload5.1 Medium
- needyamin image gallery, image gallery management system +1 moreneedyamin image_gallery view.php cross site scripting5.3 Medium
- microword escan antivirus, escanav escan anti-virus +1 moreMicroword eScan Antivirus Folder Watch List rtscanner removeExtraSlashes stack-based overflow4.8 Medium
- campcodes school management softwareItechscripts School Management Software notice-edit.php sql injection5.3 Medium
- ibm cognos analytics mobile, cognos analytics +1 moreIBM Cognos Analytics Mobile information disclosure4.2 Medium
- ibm common licensingIBM Common Licensing information disclosure6.5 Medium
- ibm common licensingIBM Common Licensing information disclosure6.2 Medium
- ibm automation decision servicesIBM Automation Decision Services information disclosure6.2 Medium
- ays pro survey makerSurvey Maker <= 5.1.3.3 - Authenticated (Admin+) Stored Cross-Site Scripting via Survey Question5.5 Medium
- codexpert wc affiliate, wc affiliate – woocommerce affiliate plugin +1 moreWC Affiliate – A Complete WooCommerce Affiliate Plugin <= 2.4 - Reflected Cross-Site Scripting6.1 Medium
- mvpthemes zox newsZox News <= 3.16.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update8.8 High
- e4jvikwp vikbooking hotel booking engine & pms, vikwp vikbooking hotel booking engine \& pms +1 moreVikBooking Hotel Booking Engine & PMS <= 1.7.2 - Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- themeisle multiple page generator plugin – mpg, multiple page generator +1 moreMultiple Page Generator Plugin – MPG <= 4.0.5 - Authenticated (Editor+) Server-Side Request Forgery via fileUrl5.4 Medium
- liquidweb restrict content, stellarwp membership plugin – restrict content +1 moreMembership Plugin – Restrict Content <= 3.2.13 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure5.3 Medium
- ays pro plugins quiz maker business, quiz maker agency, quiz maker developer +2 moreQuiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated Arbitrary Shortcode Execution via content7.3 High
- ays pro plugins quiz maker business, quiz maker agency, quiz maker developer +2 moreQuiz Maker Business, Developer, and Agency <= (Multiple Versions) - Missing Authorization to Google Sheets Integration Credentials Modification and Stored Cross-Site Scripting7.2 High
- ays pro plugins quiz maker business, quiz maker agency, quiz maker developer +2 moreQuiz Maker Business, Developer, and Agency <= (Multiple Versions) - Reflected DOM-Based Cross-Site Scripting via content6.1 Medium
- ays pro plugins quiz maker business, ays-pro quiz maker, ays pro plugins quiz maker agency +1 more +3 moreQuiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated SQL Injection via id7.5 High
- gradle enterpriseDevelocity (formerly Gradle Enterprise) before 2024.3.1 allows an attacker who has network access...8.3 High
- gradle enterpriseDevelocity (formerly Gradle Enterprise) before 2024.1.8 has Incorrect Access Control. Project...7.1 High
- gnome libxml2xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.8.1 High
- g data cyberdefense ag data security clientG DATA Security Client Local privilege escalation8.5 High
- g data cyberdefense ag data management serverG DATA Management Server Local privilege escalation7.3 High
- ibm maximo application suiteIBM Maximo Application Suite log manipulation5.3 Medium
- ibm maximo application suiteIBM Maximo Application Suite SQL injection6.3 Medium
- ibm maximo application suiteIBM Maximo Application Suite information disclosure5.3 Medium
- ibm maximo application suiteIBM Maximo Application Suite cross-site scripting6.1 Medium
- ibm analytics content hubIBM Analytics Content Hub information disclosure5.3 Medium
- ibm analytics content hubIBM Analytics Content Hub buffer overflow8.8 High
- ibm cloud pak systemIBM Cloud Pak System information disclosure4.3 Medium
- ibm cloud pak systemIBM Cloud Pak System information disclosure5.3 Medium
- ibm cloud pak systemIBM Cloud Pak System information disclosure5.3 Medium
- ibm cloud pak systemIBM Cloud Pak System information disclosure5.3 Medium
- ibm cloud pak systemIBM Cloud Pak System directory traversal5.3 Medium
- ibm cloud pak systemIBM Cloud Pak System information disclosure5.3 Medium
- ibm control centerIBM Control Center information disclosure5.3 Medium
- ibm control centerIBM Control Center information disclosure4.3 Medium
- ibm control centerIBM Control Center cross-site scripting5.4 Medium
- Show moreLoading…