# CVEs published 2025-01-17

95 CVEs were published on January 17, 2025: 8 critical, 26 high. Days are UTC.

- [CVE-2023-50739](https://cve.now/CVE-2023-50739.md): A buffer overflow vulnerability has been identified in the Internet Printing Protocol (IPP) in various Lexmark devices. (CVSS 8.8, Lexmark Printer Firmware)
- [CVE-2024-11923](https://cve.now/CVE-2024-11923.md): Sensitive Information Disclosure in Fortra Application Hub Prior to version 1.3 (CVSS 5.5, Fortra Application Hub)
- [CVE-2018-9405](https://cve.now/CVE-2018-9405.md): In BnDmAgent::onTransact of dm\_agent.cpp, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, Google Android)
- [CVE-2018-9401](https://cve.now/CVE-2018-9401.md): In many locations, there is a possible way to access kernel memory in user space due to an incorrect bounds check. (CVSS 7.8, Google Android)
- [CVE-2018-9406](https://cve.now/CVE-2018-9406.md): In NlpService, there is a possible way to obtain location information due to a missing permission check. (CVSS 5.5, Google Android)
- [CVE-2018-9389](https://cve.now/CVE-2018-9389.md): In ip6\_append\_data of ip6\_output.c, there is a possible way to achieve code execution due to a heap buffer overflow. (CVSS 5.1, Google Android)
- [CVE-2018-9387](https://cve.now/CVE-2018-9387.md): In multiple functions of mnh-sm.c, there is a possible way to trigger a heap overflow due to an integer overflow. (CVSS 7.8, Google Android)
- [CVE-2018-9464](https://cve.now/CVE-2018-9464.md): In multiple locations, there is a possible way to read protected files due to a missing permission check. (CVSS 7.8, Google Android)
- [CVE-2018-9461](https://cve.now/CVE-2018-9461.md): In onAttachFragment of ShareIntentActivity.java, there is a possible way for an app to read files in the messages app due to a race conditio (CVSS 7.0, Google Android)
- [CVE-2018-9447](https://cve.now/CVE-2018-9447.md): In onCreate of EmergencyCallbackModeExitDialog.java, there is a possible way to crash the emergency callback mode due to a missing null chec (CVSS 5.5, Google Android)
- [CVE-2018-9434](https://cve.now/CVE-2018-9434.md): In multiple functions of Parcel.cpp, there is a possible way to bypass address space layout randomization. (CVSS 7.8, Google Android)
- [CVE-2018-9382](https://cve.now/CVE-2018-9382.md): In multiple functions of WifiServiceImpl.java, there is a possible way to activate Wi-Fi hotspot from a non-owner profile due to a missing p (CVSS 7.8, Google Android)
- [CVE-2018-9379](https://cve.now/CVE-2018-9379.md): In multiple functions of MiniThumbFile.java, there is a possible way to view the thumbnails of deleted photos due to a confused deputy. (CVSS 5.5, Google Android)
- [CVE-2018-9375](https://cve.now/CVE-2018-9375.md): In multiple functions of UserDictionaryProvider.java, there is a possible way to add and delete words in the user dictionary due to a confus (CVSS 7.8, Google Android)
- [CVE-2017-13322](https://cve.now/CVE-2017-13322.md): In endCallForSubscriber of PhoneInterfaceManager.java, there is a possible way to prevent access to emergency services due to a logic error (CVSS 10.0, Google Android)
- [CVE-2018-9384](https://cve.now/CVE-2018-9384.md): In multiple locations, there is a possible way to bypass KASLR due to an unusual root cause. (CVSS 4.4, Google Android)
- [CVE-2018-9383](https://cve.now/CVE-2018-9383.md): In asn1\_ber\_decoder of asn1\_decoder.c, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.4, Google Android)
- [CVE-2025-23208](https://cve.now/CVE-2025-23208.md): IdP group membership revocation ignored in zot (CVSS 7.3, project-zot zot · zotregistry.dev/zot)
- [CVE-2025-0541](https://cve.now/CVE-2025-0541.md): Codezips Gym Management System edit\_member.php sql injection (CVSS 5.3, Codezips Gym Management System)
- [CVE-2025-23207](https://cve.now/CVE-2025-23207.md): \\htmlData does not validate attribute names in KaTeX (CVSS 6.3, KaTeX)
- [CVE-2023-50738](https://cve.now/CVE-2023-50738.md): A firmware downgrade prevention vulnerability has been identified in newer Lexmark devices. (CVSS 4.3, Lexmark Printer Firmware)
- [CVE-2025-0540](https://cve.now/CVE-2025-0540.md): itsourcecode Tailoring Management System expadd.php sql injection (CVSS 5.3, itsourcecode Tailoring Management System)
- [CVE-2025-23206](https://cve.now/CVE-2025-23206.md): IAM OIDC custom resource allows connection to unauthorized OIDC provider in aws-cdk (CVSS 1.8, aws-cdk · aws-cdk-lib)
- [CVE-2025-0538](https://cve.now/CVE-2025-0538.md): code-projects Tourism Management System manage-pages.php cross site scripting (CVSS 5.3, code-projects Tourism Management System)
- [CVE-2025-23205](https://cve.now/CVE-2025-23205.md): \`frame-ancestors: self\` grants all users access to formgrader in nbgrader (CVSS 6.9, jupyter nbgrader · nbgrader)
- [CVE-2025-23202](https://cve.now/CVE-2025-23202.md): Improper Input Validation in Bible Module for ROBLOX (CVSS 10.0, devycreates Bible-Module)
- [CVE-2025-23039](https://cve.now/CVE-2025-23039.md): Cross Site Scripting on URL decode Tooltip in Caido (CVSS 5.2, caido)
- [CVE-2025-21606](https://cve.now/CVE-2025-21606.md): Local Privilege Escalation via Exposed XPC Method Due to Client Verification Failure in stats (CVSS 8.7, exelban stats)
- [CVE-2024-13026](https://cve.now/CVE-2024-13026.md): Inadequate Encryption Strength Vulnerability in Roche Algo Edge (CVSS 6.1, Roche Diagnostics Algorithm Suite)
- [CVE-2025-0537](https://cve.now/CVE-2025-0537.md): code-projects Car Rental Management System manage-pages.php cross site scripting (CVSS 5.1, code-projects Car Rental Management System)
- [CVE-2025-0536](https://cve.now/CVE-2025-0536.md): 1000 Projects Attendance Tracking Management System edit\_action.php sql injection (CVSS 5.3, 1000 Projects Attendance Tracking Management System)
- [CVE-2025-21185](https://cve.now/CVE-2025-21185.md): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CVSS 6.5, Microsoft Edge)
- [CVE-2025-21399](https://cve.now/CVE-2025-21399.md): Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability (CVSS 7.4, Microsoft Edge Update Setup)
- [CVE-2025-0535](https://cve.now/CVE-2025-0535.md): Codezips Gym Management System edit\_mem\_submit.php sql injection (CVSS 5.3, Codezips Gym Management System)
- [CVE-2025-0534](https://cve.now/CVE-2025-0534.md): 1000 Projects Campaign Management System Platform for Women loginnew.php sql injection (CVSS 6.9, 1000 Projects Campaign Management System Platform for Women)
- [CVE-2025-0533](https://cve.now/CVE-2025-0533.md): 1000 Projects Campaign Management System Platform for Women sc\_login.php sql injection (CVSS 6.9, 1000 Projects Campaign Management System Platform for Women)
- [CVE-2024-12757](https://cve.now/CVE-2024-12757.md): Nedap Librix Ecoreader Missing Authentication for Critical Function (CVSS 8.6, Nedap Librix Ecoreader)
- [CVE-2025-0430](https://cve.now/CVE-2025-0430.md): Belledonne Communications Linphone-Desktop NULL Pointer Dereference (CVSS 7.5, Belledonne Communications Linphone-Desktop)
- [CVE-2025-0532](https://cve.now/CVE-2025-0532.md): Codezips Gym Management System new\_submit.php sql injection (CVSS 5.3, Codezips Gym Management System)
- [CVE-2024-45832](https://cve.now/CVE-2024-45832.md): Ossur Mobile Logic Application Use of Hard-coded Credentials (CVSS 4.3, Ossur Mobile Logic Application)
- [CVE-2024-54681](https://cve.now/CVE-2024-54681.md): Ossur Mobile Logic Application Command Injection (CVSS 3.5, Ossur Mobile Logic Application)
- [CVE-2024-53683](https://cve.now/CVE-2024-53683.md): Ossur Mobile Logic Application Exposure of Sensitive System Information to an Unauthorized Control Sphere (CVSS 4.4, Ossur Mobile Logic Application)
- [CVE-2024-26153](https://cve.now/CVE-2024-26153.md): ETIC Telecom Remote Access Server (RAS) Cross-Site Request Forgery (CVSS 7.4, ETIC Telecom Remote Access Server)
- [CVE-2024-26155](https://cve.now/CVE-2024-26155.md): ETIC Telecom Remote Access Server (RAS) Cleartext Transmission of Sensitive Information (CVSS 6.8, ETIC Telecom Remote Access Server)
- [CVE-2024-26154](https://cve.now/CVE-2024-26154.md): ETIC Telecom Remote Access Server (RAS) Cross-site Scripting (CVSS 4.8, ETIC Telecom Remote Access Server)
- [CVE-2024-26157](https://cve.now/CVE-2024-26157.md): ETIC Telecom Remote Access Server (RAS) Cross-site Scripting (CVSS 6.1, ETIC Telecom Remote Access Server)
- [CVE-2024-26156](https://cve.now/CVE-2024-26156.md): ETIC Telecom Remote Access Server (RAS) Cross-site Scripting (CVSS 4.8, ETIC Telecom Remote Access Server)
- [CVE-2025-0531](https://cve.now/CVE-2025-0531.md): code-projects Chat System leaveroom.php sql injection (CVSS 5.3, code-projects Chat System)
- [CVE-2025-0530](https://cve.now/CVE-2025-0530.md): code-projects Job Recruitment \_feedback\_system.php cross site scripting (CVSS 5.3, code-projects Job Recruitment)
- [CVE-2025-0529](https://cve.now/CVE-2025-0529.md): code-projects Train Ticket Reservation System Login Form stack-based overflow (CVSS 4.8, code-projects Train Ticket Reservation System)
- [CVE-2025-0528](https://cve.now/CVE-2025-0528.md): Tenda AC8/AC10/AC18 HTTP Request telnet command injection (CVSS 8.6, Tenda AC8 · Tenda AC10 +1)
- [CVE-2024-13502](https://cve.now/CVE-2024-13502.md): A command injection in the NTC2218, NTC2250, NTC2299 modems' web interfaces allows to exeucte arbitrary shell commands. (CVSS 9.3, Newtec/iDirect NTC2218, NTC2250, NTC2299)
- [CVE-2024-13503](https://cve.now/CVE-2024-13503.md): Stack-Based Buffer Overflow in Newtec's update signaling causes RCE (CVSS 9.5, Newtec/iDirect NTC2218, NTC2250, NTC2299)
- [CVE-2025-0527](https://cve.now/CVE-2025-0527.md): code-projects Admission Management System signupconfirm.php sql injection (CVSS 6.9, code-projects Admission Management System)
- [CVE-2024-10498](https://cve.now/CVE-2024-10498.md): CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could allow an unauthorized attac (CVSS 6.9, Schneider Electric PowerLogic HDPM6000)
- [CVE-2024-10497](https://cve.now/CVE-2024-10497.md): CWE-639: Authorization Bypass Through User-Controlled Key vulnerability exists that could allow an authorized attacker to modify values outs (CVSS 8.7, Schneider Electric PowerLogic HDPM6000)
- [CVE-2024-12703](https://cve.now/CVE-2024-12703.md): CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of confidentiality, integrity and potential remote c (CVSS 8.5, Schneider Electric RemoteConnect and SCADAPack x70 Utilities)
- [CVE-2024-12142](https://cve.now/CVE-2024-12142.md): CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause information disclosure of restrict (CVSS 8.8, Schneider Electric Modicon M340 processors · Schneider E… +2)
- [CVE-2024-12476](https://cve.now/CVE-2024-12476.md): CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure, impacts worksta (CVSS 8.4, Schneider Electric Web Designer for BMXNOR0200H · Schnei… +2)
- [CVE-2024-12399](https://cve.now/CVE-2024-12399.md): CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause part (CVSS 6.1, Schneider Electric Pro-face GP-Pro EX · Schneider Electric…)
- [CVE-2024-13378](https://cve.now/CVE-2024-13378.md): GravityForms 2.9.0.1 - 2.9.1.3 - Unauthenticated Stored Cross-Site Scripting via 'style\_settings' parameter (CVSS 5.4, Gravity Forms)
- [CVE-2024-13377](https://cve.now/CVE-2024-13377.md): GravityForms \<= 2.9.1.3 - Unauthenticated Stored Cross-Site Scripting via 'alt' parameter (CVSS 7.2, Gravity Forms)
- [CVE-2024-11425](https://cve.now/CVE-2024-11425.md): CWE-131: Incorrect Calculation of Buffer Size vulnerability exists that could cause Denial-of-Service of the product when an unauthenticated (CVSS 8.7, Schneider Electric Modicon M580 CPU · Schneider Electric… +1)
- [CVE-2024-11139](https://cve.now/CVE-2024-11139.md): CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could allow local attackers to ex (CVSS 4.6, Schneider Electric EcoStruxure™ Power Build Rapsody)
- [CVE-2024-12370](https://cve.now/CVE-2024-12370.md): WP Hotel Booking \<= 2.1.5 - Missing Authorization (CVSS 5.3, thimpress WP Hotel Booking)
- [CVE-2024-12203](https://cve.now/CVE-2024-12203.md): RSS Icon Widget \<= 5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting (CVSS 4.4, brandondove RSS Icon Widget)
- [CVE-2024-12466](https://cve.now/CVE-2024-12466.md): Proofreading \<= 1.2.1.1 - Reflected Cross-Site Scripting (CVSS 6.1, scribit Proofreading)
- [CVE-2024-12598](https://cve.now/CVE-2024-12598.md): MyBookProgress by Stormhill Media \<= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via book Parameter (CVSS 6.4, zookatron MyBookProgress by Stormhill Media)
- [CVE-2024-12637](https://cve.now/CVE-2024-12637.md): Moving Users \<= 1.05 - Unauthenticated Sensitive Information Exposure (CVSS 5.3, katsushi-kawamori Moving Users)
- [CVE-2024-13367](https://cve.now/CVE-2024-13367.md): Sandbox \<= 0.4 - Missing Authorization to Authenticated (Subscriber+) Sandbox Download (CVSS 6.5, barteled Sandbox)
- [CVE-2024-13386](https://cve.now/CVE-2024-13386.md): quote-posttype-plugin \<= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, tobig quote-posttype-plugin)
- [CVE-2024-13366](https://cve.now/CVE-2024-13366.md): Sandbox \<= 0.4 - Reflected Cross-Site Scripting (CVSS 6.1, barteled Sandbox)
- [CVE-2024-12508](https://cve.now/CVE-2024-12508.md): Glofox Shortcodes \<= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, glofoxwebdev Glofox Shortcodes)
- [CVE-2024-10799](https://cve.now/CVE-2024-10799.md): Eventer \<= 3.9.7 - Authenticated (Subscriber+) Arbitrary File Read (CVSS 6.5, imithemes Eventer - WordPress Event & Booking Manager Plugin)
- [CVE-2024-13333](https://cve.now/CVE-2024-13333.md): Advanced File Manager 5.2.12 - 5.2.13 - Authenticated (Subscriber+) Arbitrary File Upload (CVSS 7.5, saadiqbal Advanced File Manager — Ultimate WordPress File M…)
- [CVE-2024-11146](https://cve.now/CVE-2024-11146.md): TrueFiling authorization bypass via user-controlled keys (CVSS 6.3, i3 Verticals TrueFiling)
- [CVE-2024-13398](https://cve.now/CVE-2024-13398.md): Checkout for PayPal \<= 1.0.32 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, naa986 Checkout for PayPal)
- [CVE-2024-13434](https://cve.now/CVE-2024-13434.md): WP Inventory Manager \<= 2.3.2 - Reflected Cross-Site Scripting (CVSS 6.1, chuck1982 WP Inventory Manager)
- [CVE-2024-13401](https://cve.now/CVE-2024-13401.md): Payment Button for PayPal \<= 1.2.3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, naa986 Payment Button for PayPal)
- [CVE-2024-51462](https://cve.now/CVE-2024-51462.md): IBM QRadar WinCollect Agent data manipulation (CVSS 4.0, IBM QRadar WinCollect Agent)
- [CVE-2024-52363](https://cve.now/CVE-2024-52363.md): IBM InfoSphere Information Server directory traversal (CVSS 6.5, IBM InfoSphere Information Server)
- [CVE-2025-21325](https://cve.now/CVE-2025-21325.md): Windows Secure Kernel Mode Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2024-34579](https://cve.now/CVE-2024-34579.md): Fuji Electric Alpha5 SMART Stack-Based Buffer Overflow (CVSS 7.8, Fuji Electric Alpha5 SMART)
- [CVE-2024-50967](https://cve.now/CVE-2024-50967.md): The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. (CVSS 6.5)
- [CVE-2024-52870](https://cve.now/CVE-2024-52870.md): Teradata Vantage Editor 1.0.1 is mostly intended for SQL database access and docs.teradata.com access, but provides unintended functionality (CVSS 7.1)
- [CVE-2024-57030](https://cve.now/CVE-2024-57030.md): Wegia \< 3.2.0 is vulnerable to Cross Site Scripting (XSS) in /geral/documentos\_funcionario.php via the id parameter. (CVSS 8.1)
- [CVE-2024-57031](https://cve.now/CVE-2024-57031.md): WeGIA \< 3.2.0 is vulnerable to SQL Injection in /funcionario/remuneracao.php via the id\_funcionario parameter. (CVSS 9.8)
- [CVE-2024-57032](https://cve.now/CVE-2024-57032.md): WeGIA \< 3.2.0 is vulnerable to Incorrect Access Control in controle/control.php. (CVSS 9.8)
- [CVE-2024-57033](https://cve.now/CVE-2024-57033.md): WeGIA \< 3.2.0 is vulnerable to Cross Site Scripting (XSS) via the dados\_addInfo parameter of documentos\_funcionario.php. (CVSS 6.1)
- [CVE-2024-57034](https://cve.now/CVE-2024-57034.md): WeGIA \< 3.2.0 is vulnerable to SQL Injection in query\_geracao\_auto.php via the query parameter. (CVSS 9.8)
- [CVE-2024-57035](https://cve.now/CVE-2024-57035.md): WeGIA v3.2.0 is vulnerable to SQL Injection viathe nextPage parameter in /controle/control.php. (CVSS 9.8)
- [CVE-2024-57252](https://cve.now/CVE-2024-57252.md): OtCMS \<=V7.46 is vulnerable to Server-Side Request Forgery (SSRF) in /admin/read.php, which can Read system files arbitrarily. (CVSS 4.3)
- [CVE-2024-57369](https://cve.now/CVE-2024-57369.md): Clickjacking vulnerability in typecho v1.2.1. (CVSS 6.4)
- [CVE-2024-57370](https://cve.now/CVE-2024-57370.md): Cross Site Scripting vulnerability in sunnygkp10 Online Exam System master version allows a remote attacker to obtain sensitive information (CVSS 6.1)
- [CVE-2024-57372](https://cve.now/CVE-2024-57372.md): Cross Site Scripting vulnerability in InformationPush master version allows a remote attacker to obtain sensitive information via the title, (CVSS 6.1)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-01-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.