CVEs published in January 2025
4,247 vulnerabilities, 364 critical, 17 exploited.
- phycticio dyn business panelDyn Business Panel <= 1.0.0 - Reflected XSS7.1 High
- healthygrid dental optimizer patient generator appDental Optimizer Patient Generator App <= 1.0 - Reflected XSS7.1 High
- pulseextensions altra side menuAltra Side Menu <= 2.0 - Abitrary Menu Deletion via CSRF6.5 Medium
- pulseextensions altra side menuAltra Side Menu <= 2.0 - Admin+ SQL Injection7.2 High
- aguilatechnologies wp customer areaWP Customer Area <= 8.2.4 - Bulk Delete via CSRF4.3 Medium
- codexpert wc affiliateWC Affiliate <= 2.3.9 - Reflected XSS7.1 High
- aguilatechnologies wp customer areaWP Customer Area <= 8.2.4 - Event Log Deletion via CSRF4.3 Medium
- otrs ag otrsMissing Cookie Flags6.8 Medium
- otrs ag ((otrs)) community edition, otrs +1 moreSMTP Password will be shown in cleartext on some SMTP errors6.3 Medium
- otrs ag ((otrs)) community edition, otrs +1 moreImproper check of permissions in Generic Interface3.5 Low
- otrs ag ((otrs)) community edition, otrs +1 moreMissing X-Content-Type-Options: nosniff Header Allows MIME Type Sniffing5.4 Medium
- ibm infosphere master data managementIBM InfoSphere Master Data Management cross-site scripting5.4 Medium
- ibm security directory integrator, security verify directory integrator +1 moreIBM Security Directory Integrator information disclosure2.4 Low
- ibm security directory integrator, security verify directory integrator +1 moreIBM Security Directory Integrator information disclosure4.8 Medium
- ibm security directory integrator, security verify directory integrator +1 moreIBM Security Directory Integrator information disclosure4.8 Medium
ghostscriptOSS-FuzzStack-buffer-underflow in gs_type1_interpretNo scorerdkitOSS-FuzzUNKNOWN READ in RDKit::Dict::resetNo scoreoatppOSS-FuzzHeap-buffer-overflow in oatpp::json::Utils::escapeStringNo score- No product listedDLINK DIR-825 REVB 2.03 devices have an OS command injection vulnerability in the CGl interface...9.8 Critical
- trendnet tew-632brp firmwareTRENDnet TEW-632BRP v1.010B31 devices have an OS command injection vulnerability in the CGl...9.8 Critical
- cmsimpleCMSimple 5.16 allows the user to read cms source code through manipulation of the file name in...7.5 High
- cmsimpleCMSimple 5.16 allows the user to edit log.php file via print page.9.1 Critical
- cmsimpleInsecure Permissions vulnerability in CMSimple v.5.16 allows a remote attacker to obtain...7.5 High
- cmsimpleAn issue in CMSimple v.5.16 allows a remote attacker to obtain sensitive information via a...7.5 High
- No product listedCross Site Request Forgery vulnerability in LifestyleStore v.1.0 allows a remote attacker to...8.1 High
- No product listedIn Electronic Arts Dragon Age Origins 1.05, the DAUpdaterSVC service contains an unquoted service...7.3 High
- No product listedSecuSTATION Camera V2.5.5.3116-S50-SMA-B20160811A and lower is vulnerable to Cross Site Scripting...6.1 Medium
- youdiancmsAn issue in youdiancms v.9.5.20 and before allows a remote attacker to escalate privileges via...9.8 Critical
- No product listedAn issue in Midea Group Co., Ltd Midea Home iOS 9.3.12 allows attackers to access sensitive user...6.5 Medium
- No product listedAn issue in Zhiyuan Yuedu (Guangzhou) Literature Information Technology Co., Ltd Shuqi Novel iOS...6.5 Medium
- No product listedAn issue in Pixocial Technology (Singapore) Pte. Ltd BeautyPlus iOS 7.8.010 allows attackers to...6.5 Medium
- No product listedAn issue in Shenzhen Intellirocks Tech Co. Ltd Govee Home iOS 6.5.01 allows attackers to access...6.5 Medium
- No product listedAn issue in Cloud Whale Interactive Technology LLC. PolyBuzz iOS 2.0.20 allows attackers to...6.5 Medium
- No product listedAn issue in Shanghai Xuan Ting Entertainment Information & Technology Co., Ltd Qidian Reader iOS...6.5 Medium
- No product listedAn issue in Shanghai Shizhi Information Technology Co., Ltd Shihuo iOS 8.16.0 allows attackers to...6.5 Medium
- No product listedAn issue in Che Hao Duo Used Automobile Agency (Beijing) Co., Ltd Guazi Used Car iOS 10.15.1...6.5 Medium
- No product listedAn issue in Beijing Sogou Technology Development Co., Ltd Sogou Input iOS 12.2.0 allows attackers...6.5 Medium
- No product listedAn issue in Tencent Technology (Shanghai) Co., Ltd WeSing iOS v9.3.39 allows attackers to access...6.5 Medium
- No product listedAn issue in Tianjin Xiaowu Information technology Co., Ltd BeiKe Holdings iOS 1.3.50 allows...6.5 Medium
- No product listedAn issue in Mashang Consumer Finance Co., Ltd Anyihua iOS 3.6.2 allows attackers to access...6.5 Medium
- No product listedAn issue in Kingsoft Office Software Corporation Limited WPS Office iOS 12.20.0 allows attackers...6.5 Medium
- No product listedAn issue in Tencent Technology (Shenzhen) Company Limited QQMail iOS 6.6.4 allows attackers to...6.5 Medium
- No product listedAn issue in Beijing Baidu Netcom Science & Technology Co Ltd Haokan Video iOS 7.70.0 allows...6.5 Medium
- No product listedAn issue in Baidu (China) Co Ltd Baidu Input Method (iOS version) v12.6.13 allows attackers to...6.5 Medium
- No product listedAn issue in Beijing Baidu Netcom Science & Technology Co Ltd Baidu Lite app (iOS version) 6.40.0...6.5 Medium
- No product listedAn issue in Hangzhou Bobo Technology Co Ltd UU Game Booster iOS 10.6.13 allows attackers to...6.5 Medium
- No product listedAn issue in KuGou Technology Co., Ltd KuGou Concept iOS 4.0.61 allows attackers to access...6.5 Medium
- No product listedAn issue in Guangzhou Polar Future Culture Technology Co., Ltd University Search iOS 2.27.0...6.5 Medium
- No product listedAn issue in KuGou Technology CO. LTD KuGou Music iOS v20.0.0 allows attackers to access sensitive...6.5 Medium
- No product listedAn issue in Xiamen Meitu Technology Co., Ltd. BeautyCam iOS v12.3.60 allows attackers to access...6.5 Medium
- Show moreLoading…