CVEs published January 19, 2025
63 CVEs were published on January 19, 2025: 2 critical, 24 high.
- Published
- 63
- Critical
- 2
- High
- 24
- Medium
- 23
- Low
- 2
- Unrated
- 12
- Now in CISA KEV
- 0
- Fix available
- 18
Most affected products
- Linux
- 47
- code-projects Fantasy-Cricket
- 2
- IBM Sterling Secure Proxy
- 2
- IBM TXSeries for Multiplatforms
- 2
- Codezips Gym Management System
- 1
- Epic Games Launcher
- 1
- IBM Maximo Asset Management
- 1
- IBM Security ReaQta
- 1
- IBM Sterling Connect:Direct Web Services
- 1
- Mobotix M15
- 1
Critical 2
High 24
- CVE-2024-41742IBM TXSeries for Multiplatforms denial of serviceIBM TXSeries for Multiplatforms
- CVE-2024-41743IBM TXSeries for Multiplatforms denial of serviceIBM TXSeries for Multiplatforms
- CVE-2024-57929dm array: fix releasing a faulty array block twice in dm_array_cursor_endLinux
- CVE-2024-57926drm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind returns errLinux
- CVE-2024-57925ksmbd: fix a missing return value check bugLinux
- CVE-2024-57921drm/amdgpu: Add a lock when accessing the buddy trim functionLinux
- CVE-2024-57918drm/amd/display: fix page fault due to max surface definition mismatchLinux
- CVE-2024-57912iio: pressure: zpa2326: fix information leak in triggered bufferLinux
- CVE-2024-57911iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered bufferLinux
- CVE-2024-57910iio: light: vcnl4035: fix information leak in triggered bufferLinux
- CVE-2024-57909iio: light: bh1745: fix information leak in triggered bufferLinux
- CVE-2024-57908iio: imu: kmx61: fix information leak in triggered bufferLinux
- CVE-2024-57907iio: adc: rockchip_saradc: fix information leak in triggered bufferLinux
- CVE-2024-57906iio: adc: ti-ads8688: fix information leak in triggered bufferLinux
- CVE-2024-57905iio: adc: ti-ads1119: fix information leak in triggered bufferLinux
- CVE-2025-21652ipvlan: Fix use-after-free in ipvlan_get_iflink().Linux
- CVE-2025-21650net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issueLinux
- CVE-2025-21647sched: sch_cake: add bounds checks to host bulk flow fairness countsLinux
- CVE-2025-21646afs: Fix the maximum cell name lengthLinux
- CVE-2025-21640sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxyLinux
- CVE-2025-21638sctp: sysctl: auth_enable: avoid using current->nsproxyLinux
- CVE-2025-21637sctp: sysctl: udp_port: avoid using current->nsproxyLinux
- CVE-2025-21631block, bfq: fix waker_bfqq UAF after bfq_split_bfqq()Linux
- CVE-2025-0566Tenda AC15 SetDevNetName formSetDevNetName stack-based overflowTenda AC15
Medium, low and unrated 37
- CVE-2025-0576Mobotix M15 player cross site scriptingMobotix M15
- CVE-2025-0575Union Bank of India Vyom Rooting Detection protection mechanismUnion Bank of India Vyom
- CVE-2024-57928netfs: Fix enomem handling in buffered readsLinux
- CVE-2024-57927nfs: Fix oops in nfs_netfs_init_request() when copying to cacheLinux
- CVE-2024-57924fs: relax assertions on failure to encode file handlesLinux
- CVE-2024-57923btrfs: zlib: fix avail_in bytes for s390 zlib HW compression pathLinux
- CVE-2024-57922drm/amd/display: Add check for granularity in dml ceil/floor helpersLinux
- CVE-2024-57919drm/amd/display: fix divide error in DM plane scale calcsLinux
- CVE-2024-57917topology: Keep the cpumask unchanged when printing cpumapLinux
- CVE-2024-57916misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handlingLinux
- CVE-2024-57914usb: typec: tcpci: fix NULL pointer issue on shared irq caseLinux
- CVE-2024-57913usb: gadget: f_fs: Remove WARN_ON in functionfs_bindLinux
- CVE-2024-57904iio: adc: at91: call input_free_device() on allocated iio_devLinux
- CVE-2025-21654ovl: support encoding fid from inode with no aliasLinux
- CVE-2025-21653net_sched: cls_flow: validate TCA_FLOW_RSHIFT attributeLinux
- CVE-2025-21651net: hns3: don't auto enable misc vectorLinux
- CVE-2025-21649net: hns3: fix kernel crash when 1588 is sent on HIP08 devicesLinux
- CVE-2025-21648netfilter: conntrack: clamp maximum hashtable size to INT_MAXLinux
- CVE-2025-21645platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled itLinux
- CVE-2025-21644drm/xe: Fix tlb invalidation when wedgingLinux
- CVE-2025-21643netfs: Fix kernel async DIOLinux
- CVE-2025-21642mptcp: sysctl: sched: avoid using current->nsproxyLinux
- CVE-2025-21641mptcp: sysctl: blackhole timeout: avoid using current->nsproxyLinux
- CVE-2025-21639sctp: sysctl: rto_min/max: avoid using current->nsproxyLinux
- CVE-2025-21636sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxyLinux
- CVE-2025-21635rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxyLinux
- CVE-2025-21634cgroup/cpuset: remove kernfs active breakLinux
- CVE-2025-21632x86/fpu: Ensure shadow stack is active before "getting" registersLinux
- CVE-2025-0567Epic Games Launcher Installer profapi.dll untrusted search pathEpic Games Launcher
- CVE-2025-0565ZZCMS index.php sql injectionZZCMS
- CVE-2024-8722WP All Import Pro <= 4.9.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File UploadSoflyy WP All Import Pro
- CVE-2025-0564code-projects Fantasy-Cricket authenticate.php sql injectioncode-projects Fantasy-Cricket
- CVE-2024-45652IBM Maximo Asset Management directory traversalIBM Maximo Asset Management
- CVE-2024-45653IBM Sterling Connect:Direct Web Services information disclosureIBM Sterling Connect:Direct Web Services
- CVE-2024-45654IBM Security ReaQta improper input validationIBM Security ReaQta
- CVE-2025-0563code-projects Fantasy-Cricket update.php sql injectioncode-projects Fantasy-Cricket
- CVE-2025-0562Codezips Gym Management System health_status_entry.php sql injectionCodezips Gym Management System