| CVE-2025-71020 |
Tenda AX-1806栈溢出漏洞导致拒绝服务 |
高危 |
7.5 |
2026-01-16 |
| CVE-2025-70746 |
| Tenda AX-1806 路由器 timeZone 参数栈溢出导致拒绝服务 |
高危 |
7.5 |
2026-01-16 |
| CVE-2025-69581 |
Chamillo LMS登出后敏感用户信息泄露漏洞 |
中危 |
5.5 |
2026-01-16 |
| CVE-2025-68924 |
Umbraco UmbracoForms 恶意WSDL数据源远程代码执行漏洞 |
高危 |
7.5 |
2026-01-16 |
| CVE-2025-68921 |
SteelSeries Nahimic 3 目录遍历漏洞 |
高危 |
7.8 |
2026-01-16 |
| CVE-2025-68675 |
Apache Airflow代理凭证信息泄露漏洞 |
高危 |
7.5 |
2026-01-16 |
| CVE-2025-68438 |
Apache Airflow渲染模板敏感信息泄露漏洞 |
高危 |
7.5 |
2026-01-16 |
| CVE-2025-65118 |
AVEVA Process Optimization权限提升漏洞 |
高危 |
8.8 |
2026-01-16 |
| CVE-2025-65117 |
AVEVA Process Optimization Designer权限提升漏洞(CVE-2025... |
高危 |
7.4 |
2026-01-16 |
| CVE-2025-64769 |
AVEVA Process Optimization 未加密通信漏洞 |
高危 |
7.1 |
2026-01-16 |
| CVE-2025-64729 |
AVEVA Process Optimization 权限提升与代码注入漏洞 |
高危 |
8.1 |
2026-01-16 |
| CVE-2025-64691 |
AVEVA产品TCL宏脚本篡改导致本地权限提升漏洞 |
高危 |
8.8 |
2026-01-16 |
| CVE-2025-62582 |
Delta DIAView SCADA软件多个严重漏洞 |
严重 |
9.8 |
2026-01-16 |
| CVE-2025-62581 |
Delta Electronics DIAView 多个高危漏洞 |
严重 |
9.8 |
2026-01-16 |
| CVE-2025-62291 |
strongSwan eap-mschapv2整数下溢漏洞 |
高危 |
8.1 |
2026-01-16 |
| CVE-2025-61943 |
Aveva Captive Historian SQL注入漏洞 |
高危 |
8.4 |
2026-01-16 |
| CVE-2025-61937 |
AVEVA工业软件远程代码执行漏洞（严重） |
严重 |
10.0 |
2026-01-16 |
| CVE-2025-61873 |
Best Practical RT CSV注入漏洞 |
低危 |
2.6 |
2026-01-16 |
| CVE-2025-60021 |
Apache bRPC堆内存分析器远程命令注入漏洞 |
严重 |
9.8 |
2026-01-16 |
| CVE-2025-59870 |
HCL MyXalytics JWT静态签名密钥漏洞 |
高危 |
7.4 |
2026-01-16 |
| CVE-2025-56451 |
致远A8+协同管理软件topValue参数跨站脚本漏洞(CVE-2025-56451) |
中危 |
6.1 |
2026-01-16 |
| CVE-2025-51602 |
VideoLAN VLC mmstu.c越界读取漏洞 |
中危 |
4.8 |
2026-01-16 |
| CVE-2025-48647 |
Android cpm_fwtp_msg_handler内存覆盖本地提权漏洞 |
高危 |
7.8 |
2026-01-16 |
| CVE-2025-43904 |
SchedMD Slurm accounting系统权限提升漏洞 |
中危 |
4.2 |
2026-01-16 |
| CVE-2025-43508 |
macOS Tahoe 日志敏感数据访问漏洞 |
中危 |
5.5 |
2026-01-16 |
| CVE-2025-31510 |
LemonLDAP::NG 登录页跨站脚本(XSS)漏洞 |
高危 |
7.2 |
2026-01-16 |
| CVE-2025-31186 |
Xcode权限绕过漏洞允许应用绕过隐私偏好设置 |
低危 |
3.3 |
2026-01-16 |
| CVE-2025-24531 |
OpenSC pam_pkcs11 认证绕过漏洞 |
中危 |
6.7 |
2026-01-16 |
| CVE-2025-24528 |
MIT Kerberos 5 kdb_log.c整数溢出导致远程代码执行 |
高危 |
7.1 |
2026-01-16 |
| CVE-2025-24090 |
Apple iOS/iPadOS应用枚举权限绕过漏洞 |
低危 |
3.3 |
2026-01-16 |