CVEs published in January 2025
4,247 vulnerabilities, 364 critical, 17 exploited.
- alpine halo9, alpsalpine ilx-f509 firmware +1 moreAlpine Halo9 Missing Authentication5.3 Medium
- gitlabServer-Side Request Forgery (SSRF) in GitLab2.6 Low
- gitlabCross-Site Request Forgery (CSRF) in GitLab6.4 Medium
- chargepoint home flex, home flex hardwired firmware, home flex nema 14-50 plug firmware +1 more +3 moreChargePoint Home Flex OCPP bswitch Command Injection8.8 High
- chargepoint home flex, home flex hardwired firmware, home flex nema 14-50 plug firmware +1 more +3 moreChargePoint Home Flex Improper Certificate Validation6.5 Medium
- chargepoint home flex, home flex hardwired firmware, home flex nema 14-50 plug firmware +1 more +3 moreChargePoint Home Flex wlanchnllst Out-Of-Bounds Write8.8 High
- chargepoint home flex, home flex hardwired firmware, home flex nema 14-50 plug firmware +1 more +3 moreChargePoint Home Flex SrvrToSmSetAutoChnlListMsg Stack-based Buffer Overflow8.8 High
- silabs gecko osSilicon Labs Gecko OS HTTP GET Request Handling Stack-based Buffer Overflow8.8 High
- silabs gecko osSilicon Labs Gecko OS http_download Stack-based Buffer Overflow7.5 High
- pwncollege dojopwn.college has a XSS on dojo pages7.6 High
- pwncollege dojopwn.college has Symlink LFI in Dojo repos7.7 High
- code-projects chat systemcode-projects Chat System addnewmember.php sql injection5.3 Medium
linux-oracleUbuntulinux-oracle vulnerabilitiesNo score- code-projects gym management systemCodezips Gym Management System saveroutine.php sql injection5.3 Medium
- code-projects gym management systemCodezips Gym Management System updateplan.php sql injection5.3 Medium
- automationdirect c-more ea9, c-more ea9-rhmi firmware, c-more ea9-t10cl firmware +7 more +9 moreAutomationDirect C-More EA9 EAP9 File Parsing Memory Corruption Remote Code Execution Vulnerability7.8 High
- automationdirect c-more ea9, c-more ea9-rhmi firmware, c-more ea9-t10cl firmware +7 more +9 moreAutomationDirect C-More EA9 EAP9 File Parsing Memory Corruption Remote Code Execution Vulnerability7.8 High
- automationdirect c-more ea9, c-more ea9-rhmi firmware, c-more ea9-t10cl firmware +7 more +9 moreAutomationDirect C-More EA9 EAP9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- sante pacs server, santesoft sante pacs server +1 moreSante PACS Server URL path Memory Corruption Denial-of-Service Vulnerability8.2 High
- sante pacs server, santesoft sante pacs server +1 moreSante PACS Server Web Portal DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability4.3 Medium
- sante pacs server, santesoft sante pacs server +1 moreSante PACS Server DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability5.3 Medium
- sante pacs server, santesoft sante pacs server +1 moreSante PACS Server DCM File Parsing Memory Corruption Denial-of-Service Vulnerability7.5 High
- sante pacs server, santesoft sante pacs server +1 moreSante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability6.5 Medium
- sante pacs server, santesoft sante pacs server +1 moreSante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability6.5 Medium
- sante pacs server, santesoft sante pacs server +1 moreSante PACS Server DCM File Parsing Memory Corruption Denial-of-Service Vulnerability7.5 High
- zoom communications, inc workplace app for linux, zoom meeting software development kit, video software development kit +1 more +3 moreZoom Workplace App for Linux - Type Confusion8.8 High
- zoom communications, inc workplace app for macos, zoom meeting software development kit, rooms +3 more +5 moreZoom Workplace app for macOS - Symlink Following3.9 Low
- zoom communications, inc workplace apps for windows, zoom meeting software development kit, rooms +4 more +6 moreZoom Workplace Apps for Windows - Untrusted Search Path4.6 Medium
- zoom workplace, zoom communications, inc workplace apps, zoom meeting software development kit +5 more +7 moreZoom Workplace Apps - Out-of-bounds Write3.1 Low
- zoom communications, inc workplace apps for linux, zoom meeting software development kit, video software development kit +1 more +3 moreZoom Workplace Apps for Linux - Out-of-bounds Write4.3 Medium
- zoom communications, inc jenkins marketplace pluginZoom Jenkins Marketplace plugin - Cleartext Storage of Sensitive Information4.3 Medium
- 0xpolygonzero plonky2Soundness issue with Plonky2 look up tables8.6 High
- google fuchsiaIdentifiable Header Values In Fuchsia Leading To Tracking of The User6.9 Medium
- google gvisorWeaknesses in the generation of TCP/UDP source ports and some other header values in Google's...6.3 Medium
- google gvisorImproved Seeding and Hashing In gVisor6.3 Medium
- new rock technologies mx8g voip gateway, nrp1302/p desktop ip phone, om500 ip-pbx +2 moreNew Rock Technologies Cloud Connected Devices Improper Neutralization of Wildcards or Matching Symbols6.9 Medium
- new rock technologies mx8g voip gateway, nrp1302/p desktop ip phone, om500 ip-pbx +2 moreNew Rock Technologies Cloud Connected Devices has a Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.9.3 Critical
- apple garagebandThe issue was addressed with improved bounds checks. This issue is fixed in GarageBand 10.4.12....7.8 High
- broadcom symantec privileged access managementThis vulnerability allows appliance compromise at boot time.8.9 High
- broadcom symantec privileged access managementA specific authentication strategy allows to learn ids of PAM users associated with certain...5.3 Medium
- broadcom symantec privileged access managementThis vulnerability allows a high-privileged authenticated PAM user to achieve remote command...8.8 High
- broadcom symantec privileged access managementAn improper input validation the CSRF filter results in unsanitized user input written to the...5.3 Medium
- broadcom symantec privileged access managementA malicious actor can fix the session of a PAM user by tricking the user to click on a specially...9.3 Critical
- broadcom symantec privileged access managementAn improper session validation allows an unauthenticated attacker to cause certain request...5.3 Medium
- broadcom symantec privileged access managementAn improper input validation allows an unauthenticated attacker to alter PAM logs by sending a...5.3 Medium
- contec health cms8000 patient monitorExposure of Private Personal Information to an Unauthorized Actor vulnerability in Contec Health CMS8000 Patient Monitor8.2 High
- contec health cms8000 patient monitorHidden Functionality vulnerability in Contec Health CMS8000 Patient Monitor7.7 High
- contec health cms8000 patient monitorOut-of-bounds Write vulnerability in Contec Health CMS8000 Patient Monitor9.3 Critical
- broadcom symantec privileged access managementThe vulnerability allows an unauthenticated attacker to access information in PAM database.8.7 High
- code-projects simple plugins car rental management, fabian simple car rental system +1 morecode-projects Simple Plugins Car Rental Management approve.php sql injection5.3 Medium
- Show moreLoading…