January 2025
Published in January 2025
- unknownexploitedA method to assess 'forgivable' vs 'unforgivable' vulnerabilitiesncsc-uk
- known exploitedpublic exploitCVE-2020-11023
- criticalexploitedCVE-2025-23006: SonicWall SMA1000 Appliances Deserialization Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2020-2883
- criticalexploitedCVE-2020-11023: JQuery Cross-Site Scripting (XSS) Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2021-26084
- unknownJenkins Security Advisory 2025-01-22jenkins
- known exploitedpublic exploitCVE-2023-27997
- criticalGitLab Patch Release: 17.8.1, 17.7.3, 17.6.4gitlab
- known exploitedpublic exploitCVE-2023-34362
- criticalGitLab Patch Release: 17.8.1, 17.7.3, 17.6.4gitlab
- known exploitedCVE-2023-48365
- criticalexploitedCVE-2024-50603: Aviatrix Controllers OS Command Injection Vulnerabilitycisa-kev
- known exploitedCVE-2024-12686
- unknownGitLab Patch Release: 17.7.2gitlab
- known exploitedpublic exploitCVE-2024-41713
- unknownGitLab Patch Release: 17.7.2gitlab
- known exploitedpublic exploitCVE-2024-50603
- criticalexploitedCVE-2024-55591: Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2024-55550
- unknownexploited[Update] Vulnerability in Fortinet products (January 14, 2025)cert-fr-alerte
- known exploitedpublic exploitCVE-2024-55591
- criticalexploitedCVE-2024-12686: BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulner…cisa-kev
- known exploitedpublic exploitCVE-2025-0282
- unknownexploited[Update] Vulnerability in Ivanti products (January 9, 2025)cert-fr-alerte
- known exploitedpublic exploitCVE-2025-21333
- criticalGitLab Patch Release: 17.7.1, 17.6.3, 17.5.5gitlab
- known exploitedCVE-2025-21334
- criticalGitLab Patch Release: 17.7.1, 17.6.3, 17.5.5gitlab
- known exploitedCVE-2025-21335
- criticalexploitedCVE-2024-41713: Mitel MiCollab Path Traversal Vulnerabilitycisa-kev
- known exploitedCVE-2025-23006
- criticalexploitedCVE-2024-55550: Mitel MiCollab Path Traversal Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-24085