Week 6, 2025
3–9 February 2025
Newly exploited 11
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
-
High 8.6
CVE-2025-0994 KEV Feb 7, 2025 Trimble Cityworks versions prior to 15.8.9 and Cityworks with office companion versions prior to 23.10 are vulnerable to a deserialization vulnerability. This …EPSS 31%
-
Critical 9.8
CVE-2024-21413 KEV Feb 6, 2025 Microsoft Outlook Remote Code Execution VulnerabilityEPSS 95%
Microsoft · Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office 2019
-
Critical 9.8
CVE-2020-29574 KEV Feb 6, 2025 · ransomware An SQL injection vulnerability in the WebAdmin of Cyberoam OS through 2020-12-04 allows unauthenticated attackers to execute arbitrary SQL statements remotely.EPSS 4.7%
-
Critical 9.8
CVE-2020-15069 KEV Feb 6, 2025 Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientless access. Hotfix HF…EPSS 11%
-
High 7.8
CVE-2022-23748 KEV Feb 6, 2025 mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In…EPSS 8.3%
- High 7.0 EPSS 48%
-
High 7.8
CVE-2024-53104 KEV Feb 5, 2025 media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_formatEPSS 3.4%
-
Critical 9.8
CVE-2024-45195 KEV Feb 4, 2025 Apache OFBiz: Confused controller-view authorization logic (forced browsing)EPSS 100%
-
Critical 9.8
CVE-2018-19410 KEV Feb 4, 2025 PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privileges (including administrator). A remote…EPSS 98%
-
High 7.5
CVE-2024-29059 KEV Feb 4, 2025 .NET Framework Information Disclosure VulnerabilityEPSS 99%
Microsoft · Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 · Microsoft .NET Framework 3.5 AND 4.7.2 · Microsoft .NET Framework 3.5 AND 4.8
-
High 7.2
CVE-2018-9276 KEV Feb 4, 2025 An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administrator web console with administrative pri…EPSS 87%
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
-
Critical 9.9
CVE-2024-57968 Advantive VeraCore before 2024.4.2.1 allows remote authenticated users to upload files to unintended folders (e.g., ones that are accessible during web browsin…EPSS 32%
-
Critical 9.9
CVE-2025-20124 Cisco Identity Services Engine Java Deserialization VulnerabilityEPSS 19%
Cisco · Cisco Identity Services Engine Software · Cisco ISE Passive Identity Connector
-
Critical 9.1
CVE-2025-20125 Cisco Identity Services Engine Insufficient Authorization Bypass VulnerabilityEPSS 16%
Cisco · Cisco Identity Services Engine Software · Cisco ISE Passive Identity Connector
-
Critical 9.8
CVE-2025-0890 **UNSUPPORTED WHEN ASSIGNED** Insecure default credentials for the Telnet function in the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_201…EPSS 14%
-
Critical 9.8
CVE-2025-0674 Elber Communications Equipment Authentication Bypass Using an Alternate Path or ChannelEPSS 3.7%
Elber · Signum DVB-S/S2 IRD · Reble610 M/ODU XPIC IP-ASI-SDH · Wayber Analog/Digital Audio STL
- Critical 9.5 EPSS 3.3%
- Critical 9.8 EPSS 3%
- Critical 10.0 EPSS 2.7%
-
Critical 9.8
CVE-2024-48445 An issue in compop.ca ONLINE MALL v.3.5.3 allows a remote attacker to execute arbitrary code via the rid, tid, et, and ts parameters.EPSS 2%
- Critical 9.8 EPSS 1.9%
-
Critical 9.8
CVE-2024-55215 An issue in trojan v.2.0.0 through v.2.15.3 allows a remote attacker to escalate privileges via the initialization interface /auth/register.EPSS 1.4%
- Critical 9.8 EPSS 1.2%
- Critical 9.1 EPSS 1.1%
-
Critical 9.8
CVE-2024-57520 Insecure Permissions vulnerability in asterisk v22 allows a remote attacker to execute arbitrary code via the action_createconfig function. NOTE: this is dispu…EPSS 1%
- Critical 9.4
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
-
High 8.8
CVE-2023-52163 Digiever DS-2105 Pro 3.1.0.71-11 devices allow time_tzsetup.cgi Command Injection. NOTE: This vulnerability only affects products that are no longer supported …EPSS 97%
-
Medium 5.8
CVE-2025-25181 A SQL injection vulnerability in timeoutWarning.asp in Advantive VeraCore through 2025.1.0 allows remote attackers to execute arbitrary SQL commands via the Pm…EPSS 55%
-
Medium 6.1
CVE-2024-57004 Cross-Site Scripting (XSS) vulnerability in Roundcube Webmail 1.6.9 allows remote authenticated users to upload a malicious file as an email attachment, leadin…EPSS 41%
-
High 8.8
CVE-2025-25064 SQL injection vulnerability in the ZimbraSync Service SOAP endpoint in Zimbra Collaboration 10.0.x before 10.0.12 and 10.1.x before 10.1.4 due to insufficient …EPSS 37%
-
High 8.6
CVE-2025-0994 Trimble Cityworks versions prior to 15.8.9 and Cityworks with office companion versions prior to 23.10 are vulnerable to a deserialization vulnerability. This …EPSS 31%
-
High 7.5
CVE-2024-56902 Information disclosure vulnerability in Geovision GV-ASManager web application with the version v6.1.0.0 or less, which discloses account information, includin…EPSS 27%
-
High 8.8
CVE-2024-40891 **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B10A firmwar…EPSS 23%
-
High 8.8
CVE-2024-40890 **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the CGI program of the legacy DSL CPE Zyxel VMG4325-B10A firmware versio…EPSS 21%
Advisories
- SUSE / openSUSE Security Updates 16833 critical
- Red Hat Security Advisories (RHSA) 5714 critical
- BSI CERT-Bund (WID) 47
- Ubuntu Security Notices (USN) 171 critical
- Debian Security (DSA / DLA) 135 critical
- AlmaLinux Security Advisories 10
- Oracle Linux Security Advisories (ELSA) 10
- CISA ICS & IT advisories 94 critical
- NCSC-NL (Netherlands) 7
- ABB PSIRT 22 critical
- CERT@VDE 2
- SUSE-SU-2025:20008-1 Security update for the Linux Kernel 848 CVEs
- SUSE-SU-2025:20028-1 Security update for the Linux Kernel 826 CVEs
- SUSE-SU-2025:20047-1 Security update for the Linux Kernel 383 CVEs
- SUSE-SU-2025:20044-1 Security update for the Linux Kernel 383 CVEs
- SUSE-SU-2025:20077-1 Security update for the Linux Kernel 162 CVEs
- SUSE-SU-2025:20073-1 Security update for the Linux Kernel 162 CVEs
- DSA-5860-1 linux - security update 60 CVEs
- DSA-5861-1 thunderbird - security update 11 CVEs
- DLA-4045-1 thunderbird - security update 11 CVEs
- openSUSE-SU-2025:14730-1 MozillaFirefox-135.0-1.1 on GA media 11 CVEs