CVE Tools
Sign in
month report

January 2025

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

January 2025 closed with 4,463 published CVEs — +65.4% YoY . 358 criticals, 14 added to CISA KEV (6 ransomware-linked). сообщество свободного программного обеспечения led volume, mostly via linux. Biggest breakout: wavlink at ×12.4 their 12-month median. Top weakness class — CWE-79 (1,069 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
4,463
— MoM+65.4% YoY
Severity mix
358 / 1,457
critical / high
KEV added
14
6 ransomware-linked
Nuclei coverage
35.2%
1,569 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
414.0
n=1,569
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
12
n=17
Detection gap

KEV pressure, no Nuclei coverage

January 2025 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in January 2025

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS352CSRF89SQL Injection862Missing Authorization74Injection94Code Injection787Out-of-bounds Write120Buffer Overflow22Path Traversal863Incorrect Authorizationсообщество свободного программного обеспечения327413154513linux61ооо «русбитех-астра»41312131ао «нппкт»3812ооо «ред софт»5237332microsoft11121microsoft corp4121canonical ltd.831ibm2013142red hat inc.1422google335233apple272103210

Most discussed CVEs — January 2025

No CVE mentions in the news this month yet.

Breakout vendors

CVE count ≥3× their own 12-period median.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1сообщество свободного программного обеспечения—
    423 CVE23 critCVSS 6.3
    Nuclei 1PoC 27
    linux (231) · debian gnu/linux (183) · open5gs (11)
  • 2linux—
    223 CVECVSS 5.9
    linux (223) · linux kernel (223)
  • 3ооо «русбитех-астра»—
    199 CVE8 critCVSS 6.5
    PoC 15
    astra linux special edition (198) · astra linux common edition (51) · astra linux special edition для «эльбрус» (1)
  • 4ао "нппкт"—
    195 CVE5 critCVSS 6.3
    PoC 13
    осон основа оnyx (195)
  • 5ооо «ред софт»—
    195 CVE5 critCVSS 6.6
    KEV 1PoC 44
    ред ос (195)
  • 6microsoft—
    184 CVE5 critCVSS 7.2
    KEV 3PoC 8
    windows server 2022, 23h2 edition (server core installation) (128) · windows server 2025 (server core installation) (127) · windows server 2025 (127)
  • 7canonical—
    134 CVE4 critCVSS 6.1
    PoC 4
    ubuntu (131) · apport (2) · ubuntu linux (1)
  • 8redhat—
    128 CVE4 critCVSS 6.7
    PoC 5
    red hat enterprise linux (107) · red hat enterprise linux 10 (11) · red hat enterprise linux 9 (11)
  • 9ibm—
    118 CVE3 critCVSS 5.6
    sterling b2b integrator (13) · concert software (6) · cloud pak system (6)
  • 10google—
    105 CVE4 critCVSS 7.5
    PoC 5
    android (84) · google chrome (18) · chrome (17)
  • 11apple—
    102 CVE9 critCVSS 6.6
    KEV 1PoC 2
    macos (94) · ipados (52) · ios and ipados (50)
  • 12ibm corp.—
    88 CVE3 critCVSS 5.8
    ×5.7
    ibm sterling b2b integrator (7) · ibm concert software (6) · ibm engineering lifecycle optimization - publishing (5)
  • 13oracle—
    88 CVE4 critCVSS 5.8
    mysql server (30) · jd edwards enterpriseone tools (14) · oracle agile plm framework (4)
  • 14novell inc.—
    77 CVE4 critCVSS 6.0
    PoC 4
    opensuse leap (72) · suse linux enterprise server (56) · suse linux enterprise server for sap applications (54)
  • 15drupal—
    74 CVE12 critCVSS 6.6
    open social (5) · node access rebuild progressive (2) · two-factor authentication (tfa) (2)
  • 16ао «ивк»—
    73 CVE2 critCVSS 5.9
    PoC 6
    альт 8 сп (53) · альт сп 10 (30)
  • 17unknown—
    66 CVE1 critCVSS 5.8
    Nuclei 64PoC 66
    email subscribers by icegram express (5) · bulk me now! (3) · dyn business panel (3)
  • 18wavlink—
    62 CVE61 critCVSS 9.2
    ×12.4PoC 40
    wavlink ac3000 (62) · wl-wn533a8 firmware (62)
  • 19packagist—
    59 CVE2 critCVSS 5.5
    KEV 1Nuclei 4PoC 21
    phpoffice/phpspreadsheet (8) · phpoffice/phpexcel (8) · librenms/librenms (5)
  • 20fortinet—
    52 CVE4 critCVSS 6.3
    ×4.5KEV 1Nuclei 1
    fortimanager (15) · fortios (15) · fortimanager cloud (10)
  • 21code-projects—
    50 CVECVSS 5.9
    PoC 47
    point of sales and inventory management system (9) · online book shop (7) · job recruitment (6)
  • 22go—
    49 CVE3 critCVSS 6.6
    Nuclei 1PoC 2
    github.com/mattermost/mattermost/server/v8 (7) · github.com/t2bot/matrix-media-repo (5) · github.com/kubewarden/kubewarden-controller (2)
  • 23fortinet inc.—
    45 CVE4 critCVSS 6.4
    ×4.5KEV 1Nuclei 1
    fortios (16) · fortimanager (14) · fortimanager cloud (9)
  • 24maven—
    43 CVE4 critCVSS 6.3
    PoC 3
    com.ruoyi:ruoyi (3) · org.jboss.hal:hal-console (2) · org.hl7.fhir.publisher:org.hl7.fhir.publisher.core (2)
  • 25wegia—
    37 CVE8 critCVSS 7.1
    NEWPoC 20
    wegia (37)
  • 26linuxfoundation—
    30 CVE2 critCVSS 7.1
    ×3.3PoC 9
    magma (22) · yocto (8)
  • 27openlink software—
    30 CVECVSS 7.5
    PoC 30
    virtuoso-opensource (30)
  • 28openlinksw—
    30 CVECVSS 7.5
    PoC 30
    virtuoso (30)
  • 29wavlink technology ltd.—
    30 CVE30 critCVSS 9.2
    NEWPoC 8
    wavlink ac3000 (wl-wn533a8) (30)
  • 30open5gs—
    29 CVECVSS 7.1
    NEWPoC 8
    open5gs (29)
  • 31huawei—
    28 CVECVSS 5.9
    harmonyos (28) · emui (12)
  • 32labredescefetrj—
    26 CVE3 critCVSS 6.4
    NEWPoC 9
    wegia (26)
  • 33npm—
    23 CVE1 critCVSS 5.9
    Nuclei 1PoC 4
    directus (2) · @lodestar/reqresp (2) · @fastify/multipart (1)
  • 34pypi—
    23 CVE2 critCVSS 7.1
    Nuclei 1PoC 1
    snowflake-connector-python (3) · asteval (2) · vyper (1)
  • 35dlink—
    22 CVE3 critCVSS 6.8
    PoC 19
    dir-816 a2 (16) · dir-816 firmware (16) · dir-823x (1)
  • 36ivanti—
    22 CVE5 critCVSS 8.0
    KEV 4Nuclei 4PoC 3
    endpoint manager (16) · ivanti endpoint manager (16) · avalanche (3)
  • 37monetdb—
    20 CVECVSS 7.5
    PoC 9
    monetdb (20)
  • 38totolink—
    20 CVECVSS 8.2
    PoC 5
    x5000r firmware (15) · x5000r (15) · a6000r firmware (4)
  • 39linksys—
    19 CVE3 critCVSS 7.1
    NEW×3.8PoC 11
    e8450 firmware (10) · e7350 firmware (7) · e5600 firmware (2)
  • 40qualcomm—
    19 CVECVSS 7.4
    fastconnect 7800 firmware (13) · fastconnect 6900 firmware (13) · wsa8845h firmware (12)
  • 41qualcomm, inc.—
    19 CVECVSS 7.2
    snapdragon (19)
  • 42tenda—
    18 CVE10 critCVSS 8.5
    PoC 10
    ac18 firmware (9) · ac8 firmware (3) · ac9 firmware (2)
  • 43hcl software—
    17 CVECVSS 4.1
    dryice myxalytics (11) · bigfix patch management download plug-ins (6)
  • 44adobe—
    16 CVECVSS 7.7
    substance3d - stager (5) · adobe substance 3d sampler (5) · substance 3d stager (5)
  • 45apache—
    16 CVE2 critCVSS 6.9
    ambari (3) · solr (2) · ranger (2)
  • 46apache software foundation—
    16 CVE2 critCVSS 6.8
    apache ambari (3) · apache hive (2) · hive (2)
  • 47fedora project—
    16 CVECVSS 7.2
    PoC 3
    fedora (16)
  • 48iocharger—
    16 CVE2 critCVSS 8.7
    NEW
    iocharger firmware for ac models (15) · iocharger firmware for ac chargers (1)
  • 49seling—
    16 CVECVSS 5.1
    NEW
    visual access manager (16)
  • 50silabs.com—
    16 CVECVSS 7.4
    sisdk (2) · emberznet (1) · ember znet sdk (1)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-791,069—
2CWE-352320—
3CWE-89292—
4CWE-862288—
5CWE-74118—
6CWE-94116—
7CWE-787113—
8CWE-12087—
9CWE-2282—
10CWE-86380—
11CWE-47676—
12CWE-20074—
13CWE-43472—
14CWE-28471—
15CWE-12566—
16CWE-7861—
17CWE-12260—
18CWE-41660—
19CWE-7758—
20CWE-77057—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Web & CMS Plugins1,334 CVE
    98 crit5 KEV841 vendorsCVSS 6.5
    givewp (6) · arprice (5) · email subscribers \& newsletters (5)
  • Operating Systems795 CVE
    253 crit70 KEV44 vendorsCVSS 8.2
    linux (459) · linux kernel (223) · astra linux special edition (198)
  • Enterprise Software433 CVE
    60 crit4 KEV117 vendorsCVSS 7.2
    dryice myxalytics (22) · sterling b2b integrator (13) · cacti (12)
  • OSS Libraries351 CVE
    29 crit1 KEV91 vendorsCVSS 7.6
    ffmpeg (12) · bento4 (8) · phpspreadsheet (8)
  • Networking Infrastructure337 CVE
    236 crit15 KEV55 vendorsCVSS 8.8
    wavlink ac3000 (62) · wl-wn533a8 firmware (62) · wavlink ac3000 (wl-wn533a8) (30)
  • Databases285 CVE
    15 crit23 vendorsCVSS 7.2
    mysql server (90) · jd edwards enterpriseone tools (42) · virtuoso (30)
  • Mobile Apps252 CVE
    71 crit13 KEV14 vendorsCVSS 7.1
    android (94) · harmonyos (28) · google chrome (18)
  • Security Products197 CVE
    60 crit13 KEV54 vendorsCVSS 7.6
    endpoint manager (16) · ivanti endpoint manager (16) · fortimanager (15)
  • Hardware Firmware127 CVE
    112 crit26 vendorsCVSS 9.3
    graphics ddk (12) · nvidia container toolkit (6) · nvidia gpu operator (5)
  • Cloud & SaaS104 CVE
    18 crit61 vendorsCVSS 7.4
    yunfan learning examination system (3) · clickwhale – link manager, link shortener and click tracker for affiliate links & link pages (2) · dojo (2)
  • ICS / OT / IoT98 CVE
    107 crit44 vendorsCVSS 8.1
    factorytalk assetcentre (6) · mypro manager (4) · mypro runtime (4)
  • DevTools & CI66 CVE
    3 crit36 vendorsCVSS 7.7
    gitlab (17) · git (7) · enterprise server (2)
  • Consumer Software64 CVE
    6 crit2 KEV34 vendorsCVSS 7.4
    adobe substance 3d sampler (5) · substance 3d stager (5) · substance3d - stager (5)
  • Communications52 CVE
    2 crit31 vendorsCVSS 8.8
    mattermost (12) · mattermost server (7) · matrix-media-repo (5)
  • AI / ML50 CVE
    5 crit15 vendorsCVSS 8.7
    magma (22) · yocto (8) · keras (1)
  • Unclassified429 CVE
    27 crit326 vendorsCVSS 6.6
    iocharger firmware for ac models (15) · мсвсфера (10) · dir-816 a2 (7)
Weakness × Sector

Which weaknesses hit which solution categories in January 2025

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS352CSRF89SQL Injection862Missing Authorization74Injection94Code Injection787Out-of-bounds Write120Buffer Overflow22Path Traversal863Incorrect AuthorizationWeb & CMS Plugins668221133213605412614Operating Systems15223131145319820Enterprise Software131285316271411822OSS Libraries81239910101431313Networking Infrastructure19253851643211Security Products2742827611141Databases1234321214Consumer Software33327161712Cloud & SaaS245412121164ICS / OT / IoT84726310341