Week 6, 2025
3 February to 9 February 2025. The CVEs published in the week, the most severe of them, and what CISA added to its catalog of known exploited vulnerabilities.
- 677CVEs publishedin the whole week
- 62CriticalCVSS 9.0 and above
- 280HighCVSS 7.0 to 8.9
- 11Added to KEVknown exploited, newly listed
Added to KEVAttackers use these now; patch them first
- CVE-2025-0994
Trimble Cityworks versions prior to 15.8.9 and Cityworks with office companion versions prior to 23.10 are vulnerable to a deserialization vulnerability. This…
Trimble · Cityworks
ExploitedHigh8.6 - CVE-2024-21413
Microsoft Outlook Remote Code Execution Vulnerability
Microsoft · Microsoft 365 Apps for Enterprise
ExploitedCritical9.8 - CVE-2020-29574
An SQL injection vulnerability in the WebAdmin of Cyberoam OS through 2020-12-04 allows unauthenticated attackers to execute arbitrary SQL statements remotely.
Product not named
ExploitedCritical9.8 - CVE-2020-15069
Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientless access. Hotfix…
Product not named
ExploitedCritical9.8 - CVE-2022-23748
mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In…
Audinate Dante Application Library for Windows
ExploitedHigh7.8 - CVE-2025-0411
7-Zip Mark-of-the-Web Bypass Vulnerability
7-Zip · 7-Zip
ExploitedHigh7.0 - CVE-2024-53104
media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
Linux · Linux
ExploitedHigh7.8 - CVE-2024-45195
Apache OFBiz: Confused controller-view authorization logic (forced browsing)
Apache Software Foundation · Apache OFBiz
ExploitedCritical9.8 - CVE-2018-19410
PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privileges (including administrator). A remote…
Product not named
ExploitedCritical9.8 - CVE-2024-29059
.NET Framework Information Disclosure Vulnerability
Microsoft · Microsoft .NET Framework 4.8
ExploitedHigh7.5 - CVE-2018-9276
An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administrator web console with administrative…
Product not named
ExploitedHigh7.2
Most severe new CVEsBy CVSS score
- CVE-2025-24786
Path traversal opening Sqlite3 database in WhoDB
clidey · whodb
Critical10.0 - CVE-2025-24957
SQL Injection endpoint 'get_detalhes_socio.php' parameter 'id_socio' in WeGIA
LabRedesCefetRJ · WeGIA
Critical10.0 - CVE-2025-24906
SQL Injection endpoint 'get_detalhes_cobranca.php' parameter 'codigo' in WeGIA
LabRedesCefetRJ · WeGIA
Critical10.0 - CVE-2025-24905
SQL Injection endpoint 'get_codigobarras_cobranca.php' parameter 'codigo' in WeGIA
LabRedesCefetRJ · WeGIA
Critical10.0 - CVE-2024-57968
Advantive VeraCore before 2024.4.2.1 allows remote authenticated users to upload files to unintended folders (e.g., ones that are accessible during web…
Advantive · VeraCore
ExploitedCritical9.9 - CVE-2025-20124
Cisco Identity Services Engine Java Deserialization Vulnerability
Cisco · Cisco Identity Services Engine Software
Critical9.9 - CVE-2025-24677
WordPress Post/Page Copying Tool to Export and Import post/page for Cross site Migration Plugin <= 2.0.3 - Remote Code Execution (RCE) vulnerability
wpspin · Post/Page Copying Tool
Critical9.9 - CVE-2025-1107
Unverified password change vulnerability in Janto
Impronta · Janto
Critical9.9 - CVE-2025-0890
**UNSUPPORTED WHEN ASSIGNED** Insecure default credentials for the Telnet function in the legacy DSL CPE Zyxel VMG4325-B10A firmware version…
Zyxel · VMG4325-B10A firmware
Critical9.8 - CVE-2024-9643
Four-Faith F3x36 Hidden Debug Credentials
Four-Faith · F3x36
Critical9.8