January 2025
4,463 CVEs published, +27% on December 2024 and +65% on January 2024. CISA added 14 to KEV.
2025 month by month
- Critical
- 3588% of the 4,262 with a CVSS score
- Added to CISA KEV
- 1417 of this month's CVEs are in KEV, listed a median 12 days after publication
- Vendors
- 2,0965,024 products
- Top weakness
- XSSCWE-79 · 1,069 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1Сообщество Свободного Программного ОбеспеченияLinux, Debian Gnu/linux, OPEN5GS42323nonenew
- 2LinuxLinux, Linux Kernel2230nonenew
- 3Ооо «русбитех-астра»Astra Linux Special Edition, Astra Linux Common Edition, Astra Linux Special Edition Для «эльбрус»1998nonenew
- 4Ао "нппкт"Осон Основа Оnyx1955nonenew
- 5Ооо «ред Софт»Ред Ос19551new
- 6MicrosoftWindows Server 2022, 23h2 Edition (Server Core Installation), Windows Server 2025 (Server Core Installation), Windows Server 202518453new
- 7CanonicalUbuntu, Apport, Ubuntu Linux1344nonenew
- 8Red HatRed Hat Enterprise Linux, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 91284nonenew
- 9IBMSterling B2B Integrator, Concert Software, Cloud Pak System1183nonenew
- 10GoogleAndroid, Google Chrome, Chrome1054nonenew
- 11ApplemacOS, iPadOS, iOS and iPadOS10291new
- 12IBM Corp.IBM Sterling B2B Integrator, IBM Concert Software, IBM Engineering Lifecycle Optimization - Publishing883nonenew
- 13OracleMySQL Server, Jd Edwards Enterpriseone Tools, Oracle Agile Plm Framework884nonenew
- 14Novell Inc.Opensuse Leap, Suse Linux Enterprise Server, Suse Linux Enterprise Server For Sap Applications774nonenew
- 15DrupalOpen Social, Node Access Rebuild Progressive, Two-factor Authentication (Tfa)7412nonenew
- 16Ао «ивк»Альт 8 Сп, Альт Сп 10732nonenew
- 17UnknownEmail Subscribers By Icegram Express, Bulk Me Now!, Dyn Business Panel661nonenew
- 18WavlinkWavlink AC3000, Wl-wn533a8 Firmware6261nonenew
- 19PackagistPhpoffice/phpspreadsheet, Phpoffice/phpexcel, Librenms/librenms5921new
- 20FortinetFortimanager, Fortios, Fortimanager Cloud5241new
- 21code-projectsPoint of Sales and Inventory Management System, Online Book Shop, Job Recruitment500nonenew
- 22GoGithub.com/mattermost/mattermost/server/v8, Github.com/t2bot/matrix-media-repo, Github.com/kubewarden/kubewarden-controller493nonenew
- 23Fortinet Inc.Fortios, Fortimanager, Fortimanager Cloud4541new
- 24MavenCom.ruoyi:ruoyi, Org.jboss.hal:hal-console, Org.hl7.fhir.publisher:org.hl7.fhir.publisher.core434nonenew
- 25WegiaWegia378nonenew
Severity
How this month's CVEs score on CVSS; 201 have no score yet. Severity is not exploitation.
- Critical358
- High1,457
- Medium2,305
- Low142
Breakouts
Vendors with at least three times their own 12-month median.
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-79XSS1,069
- CWE-352CSRF320
- CWE-89SQL Injection292
- CWE-862Missing Authorization288
- CWE-74Injection118
- CWE-94Code Injection116
- CWE-787Out-of-bounds Write113
- CWE-120Buffer Overflow87
- CWE-22Path Traversal82
- CWE-863Incorrect Authorization80
- CWE-476NULL Pointer Dereference76
- CWE-200Information Exposure74
- CWE-434Unrestricted File Upload72
- CWE-284Improper Access Control71
- CWE-125Out-of-bounds Read66
- CWE-78OS Command Injection61
- CWE-122Heap Buffer Overflow60
- CWE-416Use After Free60
- CWE-77Command Injection58
- CWE-770Allocation Without Limits57
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Web & CMS Plugins1,33427% of sector-tagged CVEs
- Operating Systems79516% of sector-tagged CVEs
- Enterprise Software4339% of sector-tagged CVEs
- OSS Libraries3517% of sector-tagged CVEs
- Networking Infrastructure3377% of sector-tagged CVEs
- Databases2856% of sector-tagged CVEs
- Mobile Apps2525% of sector-tagged CVEs
- Security Products1974% of sector-tagged CVEs
- 7 smaller sectors561
- Not yet classified429
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 79XSS | 352CSRF | 89SQL Injection | 862Missing Authorization | 74Injection | 94Code Injection | 787Out-of-bounds Write | 120Buffer Overflow | 22Path Traversal | 863Incorrect Authorization |
|---|---|---|---|---|---|---|---|---|---|---|
| Сообщество Свободного Программного Обеспечения | 32 | 7 | 4 | 1 | 3 | 15 | 4 | 5 | 13 | |
| Linux | 6 | 1 | ||||||||
| Ооо «русбитех-астра» | 4 | 1 | 3 | 12 | 1 | 3 | 1 | |||
| Ао «нппкт» | 3 | 8 | 1 | 2 | ||||||
| Ооо «ред Софт» | 5 | 23 | 7 | 3 | 3 | 2 | ||||
| Microsoft | 1 | 1 | 1 | 2 | 1 | |||||
| Microsoft Corp | 4 | 1 | 2 | 1 | ||||||
| Canonical Ltd. | 8 | 3 | 1 | |||||||
| IBM | 20 | 1 | 3 | 1 | 4 | 2 | ||||
| Red Hat Inc. | 1 | 4 | 2 | 2 | ||||||
| 3 | 3 | 5 | 23 | 3 | ||||||
| Apple | 2 | 7 | 2 | 10 | 3 | 2 | 10 |
CVEs published in January 2025
46 vulnerabilities from this month that were exploited in the wild (CISA KEV), covered in the news, explained on cve.tools or searched for. Known-exploited first, then by CVSS.
- CVE-2024-50603An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before 7.2.4996. Due to the improper neutralization of special elements used in an OS command, an unauthenticated attacker i...KEV10.0
- CVE-2025-24085A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, ...KEV10.0
- CVE-2024-57726SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with excessive permissions. These API keys can be used to escalate...KEV9.9
- CVE-2024-13159Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.KEV9.8
- CVE-2024-13160Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.KEV9.8
- CVE-2024-13161Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.KEV9.8
- CVE-2024-53704An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.KEV9.8
- CVE-2024-55591An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 through 7.0.16 and FortiProxy version 7.0.0 through 7.0.19 and 7.2.0 through 7.2...KEV9.8
- CVE-2025-23006Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific cond...KEV9.8
- CVE-2025-0282A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a re...KEV9.0
- CVE-2025-23209Potential RCE with a compromised security key in craft/cmsKEV8.0
- CVE-2025-21333Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege VulnerabilityKEV7.8
- CVE-2025-21334Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege VulnerabilityKEV7.8
- CVE-2025-21335Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege VulnerabilityKEV7.8
- CVE-2024-57727SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the Simpl...KEV7.5
- CVE-2024-57728SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. zip slip). This can be exploited ...KEV7.2
- CVE-2025-04117-Zip Mark-of-the-Web Bypass VulnerabilityKEV7.0
- CVE-2024-13448ThemeREX Addons <= 2.32.3 - Unauthenticated Arbitrary File Upload in trx_addons_uploads_save_data9.8
- CVE-2024-49649WordPress Build App Online plugin <= 1.0.23 - Local File Inclusion vulnerability9.8
- CVE-2025-21298Windows OLE Remote Code Execution Vulnerability9.8
- CVE-2024-50858Multiple endpoints in GestioIP v3.5.7 are vulnerable to Cross-Site Request Forgery (CSRF). An attacker can execute actions via the admin's browser by hosting a malicious URL, leading to data modifi...8.8
- CVE-2024-51442Command Injection in Minidlna version v1.3.3 and before allows an attacker to execute arbitrary OS commands via a specially crafted minidlna.conf configuration file.8.8
- CVE-2025-21297Windows Remote Desktop Services Remote Code Execution Vulnerability8.1
- CVE-2024-40427Stack Buffer Overflow in PX4-Autopilot v1.14.3, which allows attackers to execute commands to exploit this vulnerability and cause the program to refuse to execute7.9
- CVE-2024-57510Buffer Overflow vulnerability in Bento4 mp42avc v.3bdc891602d19789b8e8626e4a3e613a937b4d35 allows a local attacker to execute arbitrary code via the AP4_MemoryByteStream::WritePartial.7.8
- CVE-2024-43707Kibana exposure of sensitive information to an unauthorized actor7.7
- CVE-2024-13496GamiPress <= 7.3.1 - Unauthenticated SQL Injection via orderby Parameter7.5
- CVE-2024-48456An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi 11AC Router NC63 3.0.0.3327 and 3.0.0.3503 and Netis Wifi 11AC Router NC21 3....7.5
- CVE-2024-50338Carriage-return character in remote URL allows malicious repository to leak credentials in Git Credential Manager7.4
- CVE-2024-56024WordPress Custom Dashboard Widget plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1
- CVE-2024-56027WordPress Leads CRM plugin <= 2.0.13 - Reflected Cross Site Scripting (XSS) vulnerability7.1
- CVE-2024-56299WordPress Notify Odoo plugin <= 1.0.0 - CSRF to Stored XSS vulnerability7.1
- CVE-2024-11681Remote Code Execution in MacPorts6.8
- CVE-2024-33041Use of Out-of-range Pointer Offset in Computer Vision6.7
- CVE-2024-12426URL fetching can be used to exfiltrate arbitrary INI file values and environment variables6.5
- CVE-2024-56971An issue in Zhiyuan Yuedu (Guangzhou) Literature Information Technology Co., Ltd Shuqi Novel iOS 5.3.8 allows attackers to access sensitive user information via supplying a crafted link.6.5
- CVE-2024-51417An issue in System.Linq.Dynamic.Core before 1.6.0 allows remote access to properties on reflection types and static properties/fields.6.4
- CVE-2024-13134ZeroWdd studentmanager TeacherController. java editTeacher unrestricted upload6.3
- CVE-2024-12299System Dashboard <= 2.8.17 - Reflected Cross-Site Scripting via Filename Parameter6.1
- CVE-2024-50665gpac 2.4 contains a SEGV at src/isomedia/drm_sample.c:1562:96 in isom_cenc_get_sai_by_saiz_saio in MP4Box.5.5
- CVE-2024-13426WP-Polls <= 2.77.2 - Unauthenticated SQL Injection to Stored Cross-Site Scripting5.4
- CVE-2024-56411PhpSpreadsheet has Cross-Site Scripting (XSS) vulnerability of the hyperlink base in the HTML page header5.4
- CVE-2024-12008W3 Total Cache <= 2.8.1 Information Exposure via Log Files5.3
- CVE-2025-24013CodeIgniter validation of header name and value5.3
- CVE-2024-13511Variation Swatches for WooCommerce 1.0.8 - 1.3.2 - Cross-Site Request Forgery to Plugin Settings Reset4.3
- CVE-2024-8494Elementor Website Builder Pro – More than Just a Page Builder <= 3.25.10 - Authenticated (Contributor+) Sensitive Information Exposure via Shortcode4.3