Skip to content
OpenAdvisories

Archive

25 January 2025

Vulnerabilities first published on this day (UTC), newest first.

← December 2024 2025 / January /25 February 2025 →
  1. 12
  2. 2239
  3. 353
  4. 439
  5. 528
  6. 6106
  7. 7350
  8. 8128
  9. 9267
  10. 1072
  11. 11105
  12. 1213
  13. 13115
  14. 14483
  15. 15204
  16. 16299
  17. 1795
  18. 1835
  19. 1963
  20. 2033
  21. 21283
  22. 22171
  23. 23113
  24. 24199
  25. 2550
  26. 2621
  27. 27243
  28. 28102
  29. 2973
  30. 30156
  31. 31153
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.8
    CVE-2025-0543

    G DATA Security Client Local privilege escalation

    Local privilege escalation in G DATA Security Client due to incorrect assignment of privileges to directories. This vulnerability allows a local, unprivileged attacker to escalate privileges on affected installations by placing an arbitrary executable in a gl…

    G DATA CyberDefense G DATA Security Client
  • High 7.8
    CVE-2025-0542

    G DATA Management Server Local privilege escalation

    Local privilege escalation due to incorrect assignment of privileges of temporary files in the update mechanism of G DATA Management Server. This vulnerability allows a local, unprivileged attacker to escalate privileges on affected installations by placing a…

    G DATA CyberDefense G DATA Management Server
  • High 8.8
    CVE-2024-39750

    IBM Analytics Content Hub buffer overflow

    IBM Analytics Content Hub 2.0 is vulnerable to a buffer overflow due to improper return length checking. A remote authenticated attacker could overflow a buffer and execute arbitrary code on the system or cause the server to crash.

    IBM Analytics Content Hub
  • High 7.5
    CVE-2024-13562

    Import WP – Export and Import CSV and XML files to WordPress <= 2.14.5 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory

    The Import WP – Export and Import CSV and XML files to WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.14.5 via the uploads directory. This makes it possible for unauthenticated attackers …

    jcollings Import WP – Export and Import CSV and XML files to WordPress Web / CMS
  • High 7.2
    CVE-2024-12600

    Custom Product Tabs Lite for WooCommerce <= 1.9.0 - Authenticated (Shop Manager+) PHP Object Injection

    The Custom Product Tabs Lite for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.9.0 via deserialization of untrusted input from the 'frs_woo_product_tabs' parameter. This makes it possible for au…

    skyverge Custom Product Tabs Lite for WooCommerce Web / CMS
  • High 8.8
    CVE-2025-0682

    ThemeREX Addons <= 2.33.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode

    The ThemeREX Addons plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.33.0 via the 'trx_sc_reviews' shortcode 'type' attribute. This makes it possible for authenticated attackers, with contributor-level and abo…

    ThemeREX ThemeREX Addons Web / CMS
  • High 7.0
    CVE-2025-0411 Exploited Public exploit EPSS 48%

    7-Zip Mark-of-the-Web Bypass Vulnerability

    7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must vi…

    7-Zip 7-Zip
    KEV Feb 6, 2025