По дате публикации
Эксплуатируемые и новые серьёзные CVE: январь 2025 г.
219 записей · 17 KEV. В порядке публикации.
В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.
Границы месяца считаются по UTC, как и дата публикации на странице записи.
Страница 3 из 3
| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
31Наблюдать | CVE-2024-23733Proof of concept | The /WmAdmin/,/invoke/vm.server/login login page in the Integration Server in Software AG webMethods 10.15.0 before Core_Fix7 allows remote CWE-522 | Высокая7,5 | — | 2,4 % | 29 янв. 2025 г. |
44В плане | CVE-2025-0851Proof of concept | Path traversal issue in Deep Java Libraryaws · deepjavalibrary · CWE-36 | Критическая9,3 | — | 23,2 % | 29 янв. 2025 г. |
28Наблюдать | CVE-2024-12638Proof of concept | Bulk Me Now <= 2.0 - Reflected XSSombu · bulk me now\! · CWE-79 | Высокая7,1 | — | 0,5 % | 30 янв. 2025 г. |
26Наблюдать | CVE-2024-53615Proof of concept | A command injection vulnerability in the video thumbnail rendering component of Karl Ward's files.gallery v0.3.0 through 0.11.0 allows remotCWE-77 | Средняя6,5 | — | 1,3 % | 30 янв. 2025 г. |
27Наблюдать | CVE-2024-55415Proof of concept | DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass.thecontrolgroup · voyager · CWE-22 | Средняя5,7 | — | 15,5 % | 30 янв. 2025 г. |
20Наблюдать | CVE-2024-55416Proof of concept | DevDojo Voyager through version 1.8.0 is vulnerable to reflected XSS via /admin/compass.thecontrolgroup · voyager · CWE-79 | Низкая3,5 | — | 20,2 % | 30 янв. 2025 г. |
21Наблюдать | CVE-2024-55417Proof of concept | DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user uploads a file via /athecontrolgroup · voyager · CWE-434 | Средняя4,3 | — | 14,1 % | 30 янв. 2025 г. |
24Наблюдать | CVE-2024-13112Proof of concept | WP MediaTagger <= 4.1.1 - Reflected XSSphd38 · wp mediatagger · CWE-79 | Средняя6,1 | — | 0,5 % | 31 янв. 2025 г. |
24Наблюдать | CVE-2024-13219Proof of concept | Policy Genius <= 2.0.4 - Reflected XSSwaelhassan · privacy policy genius · CWE-79 | Средняя6,1 | — | 0,5 % | 31 янв. 2025 г. |
24Наблюдать | CVE-2024-13220Proof of concept | Google Map Professional <= 1.0 - Reflected XSSpragmasoftwares · google map professional · CWE-79 | Средняя6,1 | — | 0,5 % | 31 янв. 2025 г. |
24Наблюдать | CVE-2024-13221Proof of concept | Fantastic Elasticsearch <= 4.1.0 - Reflected XSSparisholley · fantastic elasticsearch · CWE-79 | Средняя6,1 | — | 0,5 % | 31 янв. 2025 г. |
24Наблюдать | CVE-2024-13222Proof of concept | User Messages <= 1.2.4 - Reflected XSSmarvinlabs · user messages · CWE-79 | Средняя6,1 | — | 0,5 % | 31 янв. 2025 г. |
24Наблюдать | CVE-2024-13224Proof of concept | SlideDeck 1 Lite Content Slider <= 1.4.8 - Reflected XSSdtelepathy · slidedeck 1 lite content slider · CWE-79 | Средняя6,1 | — | 0,5 % | 31 янв. 2025 г. |
24Наблюдать | CVE-2024-13225Proof of concept | ECT Home Page Products <= 1.9 - Reflected XSSetemplates · ect home page products · CWE-79 | Средняя6,1 | — | 0,5 % | 31 янв. 2025 г. |
24Наблюдать | CVE-2024-13226Proof of concept | A5 Custom Login Page <= 2.8.1 - Reflected XSStepelstreel · a5 custom login page · CWE-79 | Средняя6,1 | — | 0,5 % | 31 янв. 2025 г. |
44В плане | CVE-2024-52875Proof of concept | An issue was discovered in GFI Kerio Control 9.2.5 through 9.4.5.gfi · kerio control · CWE-113 | Высокая8,8 | — | 29,3 % | 31 янв. 2025 г. |
37Наблюдать | CVE-2024-53537Proof of concept | An issue in OpenPanel v0.3.4 to v0.2.1 allows attackers to execute a directory traversal in File Actions of File Manager.openpanel · openpanel · CWE-22 | Критическая9,1 | — | 2,3 % | 31 янв. 2025 г. |
31Наблюдать | CVE-2024-53582Proof of concept | An issue found in the Copy and View functions in the File Manager component of OpenPanel v0.3.4 allows attackers to execute a directory travopenpanel · openpanel · CWE-22 | Высокая7,5 | — | 3,2 % | 31 янв. 2025 г. |
40В плане | CVE-2024-53584Proof of concept | OpenPanel v0.3.4 was discovered to contain an OS command injection vulnerability via the timezone parameter.openpanel · openpanel · CWE-78 | Критическая9,8 | — | 4,1 % | 31 янв. 2025 г. |
- CVE-2024-2373331Наблюдать
The /WmAdmin/,/invoke/vm.server/login login page in the Integration Server in Software AG webMethods 10.15.0 before Core_Fix7 allows remote
ВысокаяCVSS 7,5Proof of conceptEPSS 2 %29 янв. 2025 г.
- CVE-2025-085144В плане
Path traversal issue in Deep Java Library
КритическаяCVSS 9,3Proof of conceptEPSS 23 %aws · deepjavalibrary29 янв. 2025 г.
- CVE-2024-1263828Наблюдать
Bulk Me Now <= 2.0 - Reflected XSS
ВысокаяCVSS 7,1Proof of conceptEPSS 0 %ombu · bulk me now\!30 янв. 2025 г.
- CVE-2024-5361526Наблюдать
A command injection vulnerability in the video thumbnail rendering component of Karl Ward's files.gallery v0.3.0 through 0.11.0 allows remot
СредняяCVSS 6,5Proof of conceptEPSS 1 %30 янв. 2025 г.
- CVE-2024-5541527Наблюдать
DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass.
СредняяCVSS 5,7Proof of conceptEPSS 15 %thecontrolgroup · voyager30 янв. 2025 г.
- CVE-2024-5541620Наблюдать
DevDojo Voyager through version 1.8.0 is vulnerable to reflected XSS via /admin/compass.
НизкаяCVSS 3,5Proof of conceptEPSS 20 %thecontrolgroup · voyager30 янв. 2025 г.
- CVE-2024-5541721Наблюдать
DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user uploads a file via /a
СредняяCVSS 4,3Proof of conceptEPSS 14 %thecontrolgroup · voyager30 янв. 2025 г.
- CVE-2024-1311224Наблюдать
WP MediaTagger <= 4.1.1 - Reflected XSS
СредняяCVSS 6,1Proof of conceptEPSS 0 %phd38 · wp mediatagger31 янв. 2025 г.
- CVE-2024-1321924Наблюдать
Policy Genius <= 2.0.4 - Reflected XSS
СредняяCVSS 6,1Proof of conceptEPSS 0 %waelhassan · privacy policy genius31 янв. 2025 г.
- CVE-2024-1322024Наблюдать
Google Map Professional <= 1.0 - Reflected XSS
СредняяCVSS 6,1Proof of conceptEPSS 0 %pragmasoftwares · google map professional31 янв. 2025 г.
- CVE-2024-1322124Наблюдать
Fantastic Elasticsearch <= 4.1.0 - Reflected XSS
СредняяCVSS 6,1Proof of conceptEPSS 0 %parisholley · fantastic elasticsearch31 янв. 2025 г.
- CVE-2024-1322224Наблюдать
User Messages <= 1.2.4 - Reflected XSS
СредняяCVSS 6,1Proof of conceptEPSS 0 %marvinlabs · user messages31 янв. 2025 г.
- CVE-2024-1322424Наблюдать
SlideDeck 1 Lite Content Slider <= 1.4.8 - Reflected XSS
СредняяCVSS 6,1Proof of conceptEPSS 0 %dtelepathy · slidedeck 1 lite content slider31 янв. 2025 г.
- CVE-2024-1322524Наблюдать
ECT Home Page Products <= 1.9 - Reflected XSS
СредняяCVSS 6,1Proof of conceptEPSS 0 %etemplates · ect home page products31 янв. 2025 г.
- CVE-2024-1322624Наблюдать
A5 Custom Login Page <= 2.8.1 - Reflected XSS
СредняяCVSS 6,1Proof of conceptEPSS 0 %tepelstreel · a5 custom login page31 янв. 2025 г.
- CVE-2024-5287544В плане
An issue was discovered in GFI Kerio Control 9.2.5 through 9.4.5.
ВысокаяCVSS 8,8Proof of conceptEPSS 29 %gfi · kerio control31 янв. 2025 г.
- CVE-2024-5353737Наблюдать
An issue in OpenPanel v0.3.4 to v0.2.1 allows attackers to execute a directory traversal in File Actions of File Manager.
КритическаяCVSS 9,1Proof of conceptEPSS 2 %openpanel · openpanel31 янв. 2025 г.
- CVE-2024-5358231Наблюдать
An issue found in the Copy and View functions in the File Manager component of OpenPanel v0.3.4 allows attackers to execute a directory trav
ВысокаяCVSS 7,5Proof of conceptEPSS 3 %openpanel · openpanel31 янв. 2025 г.
- CVE-2024-5358440В плане
OpenPanel v0.3.4 was discovered to contain an OS command injection vulnerability via the timezone parameter.
КритическаяCVSS 9,8Proof of conceptEPSS 4 %openpanel · openpanel31 янв. 2025 г.