Week 4, 2025
20 January to 26 January 2025. The CVEs published in the week, the most severe of them, and what CISA added to its catalog of known exploited vulnerabilities.
- 867CVEs publishedin the whole week
- 62CriticalCVSS 9.0 and above
- 328HighCVSS 7.0 to 8.9
- 2Added to KEVknown exploited, newly listed
Added to KEVAttackers use these now; patch them first
- CVE-2025-23006
Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management…
SonicWall · SMA1000
ExploitedCritical9.8 - CVE-2020-11023
Potential XSS vulnerability in jQuery
jquery · jQuery
ExploitedMedium6.9
Most severe new CVEsBy CVSS score
- CVE-2025-22609
Coolify Vulnerable to Private Key Hijacking / Remote Command Execution (RCE)
coollabsio · coolify
Critical10.0 - CVE-2025-23953
WordPress user files plugin <= 2.4.2 - Arbitrary File Upload vulnerability
Scriptonite · user files
Critical10.0 - CVE-2024-55971
SQL Injection vulnerability in the default configuration of the Logitime WebClock application <= 5.43.0 allows an unauthenticated user to run arbitrary code on…
Product not named
Critical10.0 - CVE-2025-23220
WeGIA has a SQL Injection endpoint 'adicionar_raca.php' parameter 'raca'
LabRedesCefetRJ · WeGIA
Critical10.0 - CVE-2025-23219
WeGIA has a SQL Injection endpoint 'adicionar_cor.php' parameter 'cor'
LabRedesCefetRJ · WeGIA
Critical10.0 - CVE-2025-23218
WeGIA has a SQL Injection endpoint 'adicionar_especie.php' parameter 'especie'
LabRedesCefetRJ · WeGIA
Critical10.0 - CVE-2025-22612
Coolify Vulnerable to Private Key Enumeration on Onboarding resulting in Remote Command Execution (RCE)
coollabsio · coolify
Critical10.0 - CVE-2025-22611
Coolify vulnerable to Privilege Escalation resulting in Remote Command Execution (RCE)
coollabsio · coolify
Critical10.0 - CVE-2025-21663
net: stmmac: dwmac-tegra: Read iommu stream id from device tree
Linux · Linux
Critical10.0 - CVE-2025-20156
Cisco Meeting Management Client-Server Privilege Escalation Vulnerability
Cisco · Cisco Meeting Management
Critical9.9