Archive

14 January 2025

Vulnerabilities first published on this day (UTC), newest first.

← December 2024 2025 / January /14 February 2025 →

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

Critical 9.1

CVE-2024-49375 Public exploit

Remote Code Execution via Remote Model Loading in Rasa

Open source machine learning framework. A vulnerability has been identified in Rasa that enables an attacker who has the ability to load a maliciously crafted model remotely into a Rasa instance to achieve Remote Code Execution. The prerequisites for this are…

RasaHQ rasa-pro-security-advisories rasa rasa-pro PyPI

Jan 14, 2025
Critical 9.8

CVE-2025-21298 Public exploit EPSS 74%

Windows OLE Remote Code Execution Vulnerability

Windows OLE Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 14, 2025
Critical 9.8

CVE-2024-13159 Exploited Public exploit Scanner template EPSS 100%

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security U…

ivanti Endpoint Manager Network devices

Jan 14, 2025
KEV Mar 10, 2025
Critical 9.6

CVE-2024-55591 Exploited · Ransomware Public exploit Scanner template EPSS 94%

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 thr…

Fortinet FortiOS FortiProxy Network devices

Jan 14, 2025
KEV Jan 14, 2025
Critical 9.8

CVE-2024-48760 Public exploit EPSS 46%

An issue in GestioIP v3.5.7 allows a remote attacker to execute arbitrary code via the file upload function. The attack…

Jan 14, 2025