İçeriğe atla
Noroxi

Yayın tarihine göre

Ocak 2025: sömürülen ve yeni ciddi CVE kayıtları

219 kayıt · 17 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 2 / 3

  • CVE-2024-13160
    87Hemen

    Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %91

    ivanti · endpoint manager14 Oca 2025

  • CVE-2024-13161
    87Hemen

    Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %90

    ivanti · endpoint manager14 Oca 2025

  • CVE-2024-13162
    47Planlayın

    SQL injection in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote authentic

    YüksekCVSS 7,2İstismar yokEPSS %64

    ivanti · endpoint manager14 Oca 2025

  • CVE-2024-13171
    36İzleyin

    Insufficient filename validation in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows

    YüksekCVSS 7,8İstismar yokEPSS %17

    ivanti · endpoint manager14 Oca 2025

  • CVE-2025-21277
    42Planlayın

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %38

    microsoft · windows 10 150714 Oca 2025

  • CVE-2025-21285
    47Planlayın

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %55

    microsoft · windows 10 150714 Oca 2025

  • CVE-2025-21293
    41Planlayın

    Active Directory Domain Services Elevation of Privilege Vulnerability

    YüksekCVSS 8,8SilahlaştırılmışEPSS %21

    microsoft · windows 10 150714 Oca 2025

  • CVE-2025-21298
    63Bu hafta

    Windows OLE Remote Code Execution Vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %80

    microsoft · windows 10 150714 Oca 2025

  • CVE-2025-21309
    36İzleyin

    Windows Remote Desktop Services Remote Code Execution Vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %14

    microsoft · windows server 201214 Oca 2025

  • CVE-2025-21333
    64Bu hafta

    Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %9

    microsoft · windows 10 21h214 Oca 2025

  • CVE-2025-21334
    61Bu hafta

    Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %1

    microsoft · windows 10 21h214 Oca 2025

  • CVE-2025-21335
    61Bu hafta

    Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %1

    microsoft · windows 10 21h214 Oca 2025

  • CVE-2025-21340
    22İzleyin

    Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    microsoft · windows 10 180914 Oca 2025

  • CVE-2024-49375
    36İzleyin

    Remote Code Execution via Remote Model Loading in Rasa

    KritikCVSS 9,0Kavram kanıtıEPSS %0

    rasahq · rasa-pro-security-advisories14 Oca 2025

  • CVE-2024-12085
    33İzleyin

    Rsync: info leak via uninitialized stack contents

    YüksekCVSS 7,5Kavram kanıtıEPSS %8

    samba · rsync14 Oca 2025

  • CVE-2024-48760
    60Bu hafta

    An issue in GestioIP v3.5.7 allows a remote attacker to execute arbitrary code via the file upload function.

    KritikCVSS 9,8SilahlaştırılmışEPSS %45

    gestioip · gestioip14 Oca 2025

  • CVE-2024-50857
    19İzleyin

    The ip_do_job request in GestioIP v3.5.7 is vulnerable to Cross-Site Scripting (XSS).

    OrtaCVSS 4,8Kavram kanıtıEPSS %1

    gestioip · gestioip14 Oca 2025

  • CVE-2024-50858
    36İzleyin

    Multiple endpoints in GestioIP v3.5.7 are vulnerable to Cross-Site Request Forgery (CSRF).

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    gestioip · gestioip14 Oca 2025

  • CVE-2024-50859
    19İzleyin

    The ip_import_acl_csv request in GestioIP v3.5.7 is vulnerable to Reflected XSS.

    OrtaCVSS 4,8Kavram kanıtıEPSS %0

    gestioip · gestioip14 Oca 2025

  • CVE-2024-50861
    24İzleyin

    The ip_mod_dns_key_form.cgi request in GestioIP v3.5.7 is vulnerable to Stored XSS.

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    gestioip · gestioip14 Oca 2025

  • CVE-2024-47605
    21İzleyin

    Cross-site Scripting via insert media remote file oembed in silverstripe-asset-admin

    OrtaCVSS 5,4Kavram kanıtıEPSS %1

    silverstripe · silverstripe-asset-admin14 Oca 2025

  • CVE-2025-23061
    41Planlayın

    Mongoose before 8.9.5 can improperly use a nested $where filter with a populate() match, leading to search injection.

    KritikCVSS 9,8Kavram kanıtıEPSS %7

    mongoosejs · mongoose15 Oca 2025

  • CVE-2024-11848
    32İzleyin

    NitroPack <= 1.17.0 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    nitropack · nitropack – performance, page speed & cache plugin for core web vitals, cdn & image optimization15 Oca 2025

  • CVE-2024-12084
    61Bu hafta

    Rsync: heap buffer overflow in rsync due to improper checksum length handling

    KritikCVSS 9,8Kavram kanıtıEPSS %72

    samba · rsync15 Oca 2025

  • CVE-2024-47002
    26İzleyin

    A html code injection vulnerability exists in the vlan management part of Observium CE 24.4.13528.

    OrtaCVSS 5,4İstismar yokEPSS %15

    observium · observium15 Oca 2025

  • CVE-2025-22785
    38İzleyin

    WordPress Course Booking System plugin <= 6.0.6 - SQL Injection vulnerability

    KritikCVSS 9,3Kavram kanıtıEPSS %2

    commotion · course booking system15 Oca 2025

  • CVE-2025-22968
    40Planlayın

    An issue in D-Link DWR-M972V 1.05SSG allows a remote attacker to execute arbitrary code via SSH using root account without restrictions

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    dlink · dwr-m972v firmware15 Oca 2025

  • CVE-2024-52005
    30İzleyin

    The sideband payload is passed unfiltered to the terminal in git

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    git · git15 Oca 2025

  • CVE-2025-23040
    26İzleyin

    Maliciously crafted remote URLs could lead to credential leak in GitHub Desktop

    OrtaCVSS 6,6Kavram kanıtıEPSS %0

    desktop · desktop15 Oca 2025

  • CVE-2024-41453
    19İzleyin

    A cross-site scripting (XSS) vulnerability in Process Maker pm4core-docker 4.1.21-RC7 allows attackers to execute arbitrary web scripts or H

    OrtaCVSS 4,8Kavram kanıtıEPSS %0

    15 Oca 2025

  • CVE-2024-53407
    13İzleyin

    In Phiewer 4.1.0, a dylib injection leads to Command Execution which allow attackers to inject dylib file potentially leading to remote cont

    DüşükCVSS 3,3Kavram kanıtıEPSS %0

    phiewer · phiewer15 Oca 2025

  • CVE-2024-55503
    13İzleyin

    An issue in termius before v.9.9.0 allows a local attacker to execute arbitrary code via a crafted script to the DYLD_INSERT_LIBRARIES compo

    DüşükCVSS 3,3Kavram kanıtıEPSS %0

    termius · termius15 Oca 2025

  • CVE-2024-57726
    89Hemen

    SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with exce

    KritikCVSS 9,9KEVSilahlaştırılmışEPSS %66

    simple-help · simplehelp15 Oca 2025

  • CVE-2024-57727
    89Hemen

    SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated re

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %96

    simple-help · simplehelp15 Oca 2025

  • CVE-2024-57728
    77Bu hafta

    SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a

    YüksekCVSS 7,2KEVSilahlaştırılmışEPSS %64

    simple-help · simplehelp15 Oca 2025

  • CVE-2025-22964
    32İzleyin

    DDSN Interactive cm3 Acora CMS version 10.1.1 has an unauthenticated time-based blind SQL Injection vulnerability caused by insufficient inp

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    ddsn · cm3 acora content management system15 Oca 2025

  • CVE-2025-22912
    40Planlayın

    RE11S v1.11 was discovered to contain a command injection vulnerability via the component /goform/formAccept.

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    edimax · re11s firmware15 Oca 2025

  • CVE-2024-50633
    30İzleyin

    A Broken Object Level Authorization (BOLA) vulnerability in Indico through 3.3.5 allows attackers to read information by sending a crafted P

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    cern · indico16 Oca 2025

  • CVE-2024-57684
    43Planlayın

    An access control issue in the component formDMZ.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the D

    KritikCVSS 9,8İstismar yokEPSS %14

    dlink · dir-816 firmware16 Oca 2025

  • CVE-2025-23922
    40Planlayın

    WordPress iSpring Embedder plugin <= 1.0 - CSRF to Arbitrary File Upload vulnerability

    KritikCVSS 10,0Kavram kanıtıEPSS %1

    harsh · ispring embedder16 Oca 2025

  • CVE-2024-55511
    31İzleyin

    A null pointer dereference vulnerability in Macrium Reflect prior to 8.1.8017 allows a local attacker to cause a system crash or potentially

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    16 Oca 2025

  • CVE-2024-57784
    22İzleyin

    An issue in the component /php/script_uploads.php of Zenitel AlphaWeb XE v11.2.3.10 allows attackers to execute a directory traversal.

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    16 Oca 2025

  • CVE-2024-57785
    19İzleyin

    Zenitel AlphaWeb XE v11.2.3.10 was discovered to contain a local file inclusion vulnerability via the component amc_uploads.php.

    OrtaCVSS 4,9Kavram kanıtıEPSS %0

    16 Oca 2025

  • CVE-2025-23200
    30İzleyin

    Stored XSS-LibreNMS-Misc Section in librenms

    OrtaCVSS 5,4İstismar yokEPSS %30

    librenms · librenms16 Oca 2025

  • CVE-2024-50967
    27İzleyin

    The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability.

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    17 Oca 2025

  • CVE-2018-9375
    31İzleyin

    In multiple functions of UserDictionaryProvider.java, there is a possible way to add and delete words in the user dictionary due to a confus

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    google · android17 Oca 2025

  • CVE-2023-50739
    35İzleyin

    A buffer overflow vulnerability has been identified in the Internet Printing Protocol (IPP) in various Lexmark devices.

    YüksekCVSS 8,8İstismar yokEPSS %0

    lexmark · printer firmware17 Oca 2025

  • CVE-2025-23209
    69Bu hafta

    Potential RCE with a compromised security key in craft/cms

    YüksekCVSS 8,1KEVSilahlaştırılmışEPSS %21

    craftcms · craft cms17 Oca 2025

  • CVE-2024-13184
    30İzleyin

    The Ultimate WordPress Toolkit – WP Extended <= 3.0.12 - Unauthenticated SQL Injection via Login Attempts Module

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    wpextended · the ultimate wordpress toolkit – wp extended18 Oca 2025

  • CVE-2024-13176
    16İzleyin

    Timing side-channel in ECDSA signature computation

    OrtaCVSS 4,1Kavram kanıtıEPSS %0

    openssl · openssl20 Oca 2025

  • CVE-2025-22131
    20İzleyin

    Cross-Site Scripting (XSS) vulnerability in generateNavigation() function

    OrtaCVSS 5,1Kavram kanıtıEPSS %0

    phpoffice · phpspreadsheet20 Oca 2025

  • CVE-2025-22620
    20İzleyin

    gix-worktree-state nonexclusive checkout sets executable files world-writable

    OrtaCVSS 5,0Kavram kanıtıEPSS %0

    gitoxidelabs · gitoxide20 Oca 2025

  • CVE-2024-49699
    35İzleyin

    WordPress ARPrice plugin <= 4.1.3 - PHP Object Injection vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    reputeinfosystems · arprice21 Oca 2025

  • CVE-2024-51818
    42Planlayın

    WordPress Fancy Product Designer plugin <= 6.4.3 - Unauthenticated SQL Injection vulnerability

    KritikCVSS 9,3Kavram kanıtıEPSS %16

    radykal · fancy product designer21 Oca 2025

  • CVE-2025-22710
    30İzleyin

    WordPress Smart Manager Plugin <= 8.52.0 - SQL Injection vulnerability

    YüksekCVSS 7,6Kavram kanıtıEPSS %0

    storeapps · smart manager21 Oca 2025

  • CVE-2025-24001
    28İzleyin

    WordPress PPO Call To Actions plugin <= 0.1.3 - CSRF to Stored XSS vulnerability

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    ngô thắng it · ppo call to actions21 Oca 2025

  • CVE-2025-24011
    21İzleyin

    Umbraco CMS Vulnerable to User Enumeration Feasible Based On Management API Timing and Response Codes

    OrtaCVSS 5,3Kavram kanıtıEPSS %1

    umbraco · umbraco cms21 Oca 2025

  • CVE-2024-54794
    40Planlayın

    The script input feature of SpagoBI 3.5.1 allows arbitrary code execution.

    KritikCVSS 9,1İstismar yokEPSS %12

    eng · spagobi21 Oca 2025

  • CVE-2024-55504
    22İzleyin

    An issue in RAR Extractor - Unarchiver Free and Pro v.6.4.0 allows local attackers to inject arbitrary code potentially leading to remote co

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    21 Oca 2025

  • CVE-2025-23369
    30İzleyin

    Improper Verification of Cryptographic Signature in GitHub Enterprise Server Allows Signature Spoofing by Improper Validation

    YüksekCVSS 7,6Kavram kanıtıEPSS %1

    github · enterprise server21 Oca 2025

  • CVE-2024-48392
    21İzleyin

    OrangeScrum v2.0.11 is vulnerable to Cross Site Scripting (XSS).

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    orangescrum · orangescrum21 Oca 2025

  • CVE-2024-24451
    30İzleyin

    A stack overflow in the sctp_server::sctp_receiver_thread component of OpenAirInterface CN5G AMF (oai-cn5g-amf) up to v2.0.0 allows attacker

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    21 Oca 2025

  • CVE-2024-13496
    31İzleyin

    GamiPress <= 7.3.1 - Unauthenticated SQL Injection via orderby Parameter

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    gamipress · gamipress22 Oca 2025

  • CVE-2025-23942
    37İzleyin

    WordPress WP Load Gallery Plugin <= 2.1.6 - Arbitrary File Upload vulnerability

    KritikCVSS 9,1Kavram kanıtıEPSS %2

    ngocuct0912 · wp load gallery22 Oca 2025

  • CVE-2024-31903
    35İzleyin

    IBM Sterling B2B Integrator Standard Edition code execution

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    ibm · sterling b2b integrator22 Oca 2025

  • CVE-2024-56924
    29İzleyin

    A Cross Site Request Forgery (CSRF) vulnerability in Code Astro Internet banking system 2.0.0 allows remote attackers to execute arbitrary J

    YüksekCVSS 7,3Kavram kanıtıEPSS %0

    codeastro · internet banking system22 Oca 2025

  • CVE-2025-23006
    76Bu hafta

    Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %23

    sonicwall · sma8200v23 Oca 2025

  • CVE-2024-55192
    39İzleyin

    OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via the component OpenImageIO_v3_1_0::farmhash::inlined::Fetch64(char cons

    KritikCVSS 9,8İstismar yokEPSS %0

    openimageio · openimageio23 Oca 2025

  • CVE-2025-24582
    21İzleyin

    WordPress 12 Step Meeting List plugin <= 3.16.5 - Sensitive Data Exposure vulnerability

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    aa web servant · 12 step meeting list24 Oca 2025

  • CVE-2025-24587
    40Planlayın

    WordPress Email Subscription Popup plugin <= 1.2.23 - SQL Injection vulnerability

    YüksekCVSS 7,6Kavram kanıtıEPSS %32

    nks · email subscription popup24 Oca 2025

  • CVE-2025-24659
    30İzleyin

    WordPress Premium Packages – Sell Digital Products Securely plugin <= 5.9.6 - SQL Injection vulnerability

    YüksekCVSS 7,6Kavram kanıtıEPSS %0

    shahjada · wpdm – premium packages24 Oca 2025

  • CVE-2024-57041
    30İzleyin

    A persistent cross-site scripting (XSS) vulnerability in NodeBB v3.11.0 allows remote attackers to store arbitrary code in the 'about me' se

    OrtaCVSS 4,6İstismar yokEPSS %39

    nodebb · nodebb24 Oca 2025

  • CVE-2025-0411
    78Bu hafta

    7-Zip Mark-of-the-Web Bypass Vulnerability

    YüksekCVSS 7,0KEVSilahlaştırılmışEPSS %67

    7-zip · 7-zip25 Oca 2025

  • CVE-2024-13055
    28İzleyin

    Dyn Business Panel <= 1.0.0 - Reflected XSS

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    phycticio · dyn business panel27 Oca 2025

  • CVE-2024-13094
    28İzleyin

    WP Triggers Lite <= 2.5.3 - Reflected XSS

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    wptriggers · wp triggers lite27 Oca 2025

  • CVE-2024-52012
    34İzleyin

    Apache Solr: Configset upload on Windows allows arbitrary path write-access

    OrtaCVSS 5,4İstismar yokEPSS %44

    apache · solr27 Oca 2025

  • CVE-2024-54146
    49Planlayın

    Cacti has a SQL Injection vulnerability when view host template

    YüksekCVSS 8,8İstismar yokEPSS %46

    cacti · cacti27 Oca 2025

  • CVE-2025-22604
    30İzleyin

    Cacti has Authenticated RCE via multi-line SNMP responses

    YüksekCVSS 7,2Kavram kanıtıEPSS %5

    cacti · cacti27 Oca 2025

  • CVE-2025-24354
    21İzleyin

    imgproxy is vulnerable to SSRF against 0.0.0.0

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    imgproxy · imgproxy27 Oca 2025

  • CVE-2025-24367
    50Planlayın

    Cacti allows Arbitrary File Creation leading to RCE

    YüksekCVSS 8,7SilahlaştırılmışEPSS %54

    cacti · cacti27 Oca 2025

  • CVE-2024-48841
    41Planlayın

    Remote Code Execution (RCE) Vulnerabilities

    KritikCVSS 10,0Kavram kanıtıEPSS %4

    abb · flxeon27 Oca 2025

  • CVE-2024-54507
    22İzleyin

    A type confusion issue was addressed with improved memory handling.

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    apple · ipados27 Oca 2025

  • CVE-2025-24085
    75Bu hafta

    A use after free issue was addressed with improved memory management.

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %17

    apple · ipados27 Oca 2025

  • CVE-2025-24104
    22İzleyin

    This issue was addressed with improved handling of symlinks.

    OrtaCVSS 5,5Kavram kanıtıEPSS %1

    apple · ipados27 Oca 2025

  • CVE-2025-24118
    29İzleyin

    The issue was addressed with improved memory handling.

    YüksekCVSS 7,1Kavram kanıtıEPSS %3

    apple · ipados27 Oca 2025

  • CVE-2024-57373
    32İzleyin

    Cross Site Request Forgery (CSRF) vulnerability in LifestyleStore v1.0 allows a remote attacker to execute unauthorized actions on behalf of

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    27 Oca 2025

  • CVE-2022-31749
    26İzleyin

    Authenticated arbitrary file read/write in WatchGuard Fireware OS

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    watchguard · fireware os27 Oca 2025

  • CVE-2022-3365
    60Bu hafta

    Emote Interactive Remote Mouse Server command injection due to weak encoding

    KritikCVSS 9,8SilahlaştırılmışEPSS %2

    emote interactive · remote mouse server27 Oca 2025

  • CVE-2024-11954
    20İzleyin

    Pimcore Search Document cross site scripting

    OrtaCVSS 5,1Kavram kanıtıEPSS %1

    pimcore · pimcore28 Oca 2025

  • CVE-2024-11956
    20İzleyin

    Pimcore customer-data-framework list sql injection

    OrtaCVSS 5,1Kavram kanıtıEPSS %0

    pimcore · pimcore28 Oca 2025

  • CVE-2025-23211
    40Planlayın

    Tandoor Recipes - SSTI - Remote Code Execution

    KritikCVSS 9,9Kavram kanıtıEPSS %3

    tandoor · recipes28 Oca 2025

  • CVE-2024-40676
    30İzleyin

    In checkKeyIntent of AccountManagerService.java, there is a possible way to bypass intent security check and install an unknown app due to a

    YüksekCVSS 7,7Kavram kanıtıEPSS %0

    google · android28 Oca 2025

  • CVE-2024-55968
    35İzleyin

    An issue was discovered in DTEX DEC-M (DTEX Forwarder) 6.1.1.

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    28 Oca 2025

  • CVE-2024-57376
    36İzleyin

    Buffer Overflow vulnerability in D-Link DSR-150, DSR-150N, DSR-250, DSR-250N, DSR-500N, DSR-1000N from 3.13 to 3.17B901C allows unauthentica

    YüksekCVSS 8,8Kavram kanıtıEPSS %3

    dlink · dsr-150 firmware28 Oca 2025

  • CVE-2024-57514
    19İzleyin

    The TP-Link Archer A20 v3 router is vulnerable to Cross-site Scripting (XSS) due to improper handling of directory listing paths in the web

    OrtaCVSS 4,8Kavram kanıtıEPSS %0

    28 Oca 2025

  • CVE-2024-12749
    28İzleyin

    Competition Form <= 2.0 - Reflected XSS

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    raiserweb · competition form29 Oca 2025

  • CVE-2024-48849
    35İzleyin

    Authentication and Authorization Issues

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    abb · flxeon29 Oca 2025

  • CVE-2024-48852
    28İzleyin

    Information disclosures

    OrtaCVSS 6,9Kavram kanıtıEPSS %2

    abb · flxeon29 Oca 2025

  • CVE-2024-11187
    35İzleyin

    Many records in the additional section cause CPU exhaustion

    YüksekCVSS 7,5İstismar yokEPSS %15

    isc · bind 929 Oca 2025

  • CVE-2024-12705
    36İzleyin

    DNS-over-HTTPS implementation suffers from multiple issues under heavy query load

    YüksekCVSS 7,5İstismar yokEPSS %18

    isc · bind 929 Oca 2025