CVEs published January 5, 2025
28 CVEs were published on January 5, 2025: 0 critical, 0 high.
- Published
- 28
- Critical
- 0
- High
- 0
- Medium
- 28
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- wangl1989 mysiteforme
- 4
- ZeroWdd studentmanager
- 4
- Emlog Pro
- 3
- Tsinghua Unigroup Electronic Archives System
- 3
- IObit Protected Folder
- 2
- Trimble SPS851
- 2
- code-projects Local Storage Todo App
- 1
- code-projects Responsive Hotel Site
- 1
- code-projects Travel Management System
- 1
- Codezips Blood Bank Management System
- 1
Medium, low and unrated 28
- CVE-2024-13143ZeroWdd studentmanager PermissionController. java submitAddPermission cross site scriptingZeroWdd studentmanager
- CVE-2024-13142ZeroWdd studentmanager RoleController. java submitAddRole cross site scriptingZeroWdd studentmanager
- CVE-2025-0233Codezips Project Management System course.php sql injectionCodezips Project Management System
- CVE-2025-0232Codezips Blood Bank Management System successadmin.php sql injectionCodezips Blood Bank Management System
- CVE-2025-0231Codezips Gym Management System submit_payments.php sql injectionCodezips Gym Management System
- CVE-2025-0230code-projects Responsive Hotel Site print.php sql injectioncode-projects Responsive Hotel Site
- CVE-2025-0229code-projects Travel Management System enquiry.php sql injectioncode-projects Travel Management System
- CVE-2025-0228code-projects Local Storage Todo App index.html cross site scriptingcode-projects Local Storage Todo App
- CVE-2025-0227Tsinghua Unigroup Electronic Archives System downLoad.html information disclosureTsinghua Unigroup Electronic Archives System
- CVE-2025-0226Tsinghua Unigroup Electronic Archives System downLoad.html download information disclosureTsinghua Unigroup Electronic Archives System
- CVE-2025-0225Tsinghua Unigroup Electronic Archives System exampleDownload.html path traversalTsinghua Unigroup Electronic Archives System
- CVE-2025-0224Provision-ISR SH-4050A-2 server.js information disclosureProvision-ISR SH-4050A-2 · Provision-ISR SH-4100A-2L +4
- CVE-2025-0223IObit Protected Folder IOCTL IURegistryFilter.sys 0x8001E010 null pointer dereferenceIObit Protected Folder
- CVE-2025-0222IObit Protected Folder IOCTL IUProcessFilter.sys 0x8001E004 null pointer dereferenceIObit Protected Folder
- CVE-2025-0221IOBit Protected Folder IOCTL pffilter.sys 0x22200c null pointer dereferenceIOBit Protected Folder
- CVE-2024-13141osuuu LightPicture SVG File Upload upload cross site scriptingosuuu LightPicture
- CVE-2025-0220Trimble SPS851 Ethernet Configuration Menu cross site scriptingTrimble SPS851
- CVE-2024-13140Emlog Pro Cover Upload article.php cross site scriptingEmlog Pro
- CVE-2024-13139wangl1989 mysiteforme FileController doContent server-side request forgerywangl1989 mysiteforme
- CVE-2024-13138wangl1989 mysiteforme LocalUploadServiceImpl upload unrestricted uploadwangl1989 mysiteforme
- CVE-2024-13137wangl1989 mysiteforme SiteController RestResponse cross site scriptingwangl1989 mysiteforme
- CVE-2024-13136wangl1989 mysiteforme ShiroConfig.java rememberMeManager deserializationwangl1989 mysiteforme
- CVE-2024-13135Emlog Pro Subpage twitter.php cross site scriptingEmlog Pro
- CVE-2024-13134ZeroWdd studentmanager TeacherController. java editTeacher unrestricted uploadZeroWdd studentmanager
- CVE-2025-0219Trimble SPS851 Receiver Status Identity Tab cross site scriptingTrimble SPS851
- CVE-2024-13133ZeroWdd studentmanager StudentController. java editStudent unrestricted uploadZeroWdd studentmanager
- CVE-2024-13132Emlog Pro Subpage article.php cross site scriptingEmlog Pro
- CVE-2024-13130Dahua IPC-HFW1200S Web Interface Sha1Account1 path traversalDahua IPC-HFW1200S · Dahua IPC-HFW2300R-Z +2