Skip to content
OpenAdvisories

Archive

January 2025

Vulnerabilities first published in this month (UTC), newest first.

← December 2024 2025 / January February 2025 →
  1. 12
  2. 2239
  3. 353
  4. 439
  5. 528
  6. 6106
  7. 7350
  8. 8128
  9. 9267
  10. 1072
  11. 11105
  12. 1213
  13. 13115
  14. 14483
  15. 15204
  16. 16299
  17. 1795
  18. 1835
  19. 1963
  20. 2033
  21. 21283
  22. 22171
  23. 23113
  24. 24199
  25. 2550
  26. 2621
  27. 27243
  28. 28102
  29. 2973
  30. 30156
  31. 31153
All Critical High Medium Low Exploited only Public exploit

17 results · Clear filters · Feed

  • Critical 10.0
    CVE-2025-24085 Exploited Public exploit EPSS 17%

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, …

    Apple macOS iOS and iPadOS watchOS macOS iOS
    KEV Jan 29, 2025
  • High 7.0
    CVE-2025-0411 Exploited Public exploit EPSS 48%

    7-Zip Mark-of-the-Web Bypass Vulnerability

    7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must vi…

    7-Zip 7-Zip
    KEV Feb 6, 2025
  • Critical 9.8
    CVE-2025-23006 Exploited · Ransomware EPSS 27%

    Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Managem…

    SonicWall SMA1000 Network devices
    KEV Jan 24, 2025
  • High 8.1
    CVE-2025-23209 Exploited EPSS 22%

    Potential RCE with a compromised security key in craft/cms

    Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. This is an remote code execution (RCE) vulnerability that affects Craft 4 and 5 installs where your security key has already been compromised. Anyone running…

    craftcms cms craftcms/cms Packagist
    KEV Feb 20, 2025
  • High 7.2
    CVE-2024-57728 Exploited · Ransomware Scanner template EPSS 64%

    SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file …

    KEV Apr 24, 2026
  • Critical 9.1
    CVE-2024-57727 Exploited · Ransomware Public exploit Scanner template EPSS 97%

    SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enab…

    KEV Feb 13, 2025
  • Critical 9.9
    CVE-2024-57726 Exploited · Ransomware Scanner template EPSS 66%

    SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to crea…

    KEV Apr 24, 2026
  • High 7.8
    CVE-2025-21334 Exploited

    Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

    Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

    Microsoft Windows 10 Version 21H2 Windows 10 Version 22H2 Windows Server 2025 Windows
    KEV Jan 14, 2025
  • High 7.8
    CVE-2025-21333 Exploited Public exploit EPSS 10%

    Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

    Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

    Microsoft Windows 10 Version 21H2 Windows 10 Version 22H2 Windows Server 2025 Windows
    KEV Jan 14, 2025
  • High 7.8
    CVE-2025-21335 Exploited

    Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

    Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

    Microsoft Windows 10 Version 21H2 Windows 10 Version 22H2 Windows Server 2025 Windows
    KEV Jan 14, 2025
  • Critical 9.8
    CVE-2024-13159 Exploited Public exploit Scanner template EPSS 100%

    Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security U…

    ivanti Endpoint Manager Network devices
    KEV Mar 10, 2025
  • Critical 9.8
    CVE-2024-13160 Exploited Scanner template EPSS 91%

    Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security U…

    ivanti Endpoint Manager Network devices
    KEV Mar 10, 2025
  • Critical 9.8
    CVE-2024-13161 Exploited Scanner template EPSS 90%

    Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security U…

    ivanti Endpoint Manager Network devices
    KEV Mar 10, 2025
  • Critical 9.6
    CVE-2024-55591 Exploited · Ransomware Public exploit Scanner template EPSS 94%

    An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 thr…

    Fortinet FortiOS FortiProxy Network devices
    KEV Jan 14, 2025
  • High 8.2
    CVE-2024-53704 Exploited · Ransomware Public exploit Scanner template EPSS 95%

    An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass auth…

    SonicWall SonicOS Network devices
    KEV Feb 18, 2025
  • Critical 9.0
    CVE-2025-0282 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.…

    ivanti Connect Secure Policy Secure Neurons for ZTA gateways Network devices
    KEV Jan 8, 2025
  • Critical 10.0
    CVE-2024-50603 Exploited Public exploit Scanner template EPSS 99%

    An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before 7.2.4996. Due to the improper neutraliz…

    Aviatrix Controller
    KEV Jan 16, 2025