CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- synacor zimbra collaboration suiteSSRF vulnerability in the RSS feed parser in Zimbra Collaboration 9.0.0 before Patch 43, 10.0.x...5.3 Medium
- synacor zimbra collaboration suiteSQL injection vulnerability in the ZimbraSyncService SOAP endpoint in Zimbra Collaboration 10.0.x...8.8 High
- backdropcms backdrop, backdrop cms +1 moreAn XSS issue was discovered in Backdrop CMS 1.28.x before 1.28.5 and 1.29.x before 1.29.3. It...4.4 Medium
- backdropcms backdrop, backdrop cms +1 moreAn XSS issue was discovered in Backdrop CMS 1.28.x before 1.28.5 and 1.29.x before 1.29.3. It...4.4 Medium
- eladmineladmin <=2.7 is vulnerable to CSV Injection in the exception log download module.9.8 Critical
- No product listedPolycom RealPresence Group 500 <=20 has Insecure Permissions due to automatically loaded cookies....7.5 High
- pega platform, pegasystems pega infinity +1 morePega Platform versions 7.2.1 to Infinity 24.2.1 are affected by an XSS issue with Mashup7.1 High
- advantive veracoreAdvantive VeraCore before 2024.4.2.1 allows remote authenticated users to upload files to...9.9 Critical
- cyberark privileged access managerPVWA (Password Vault Web Access) in CyberArk Privileged Access Manager Self-Hosted before 14.4...4.2 Medium
- kde arklibarchiveplugin.cpp in KDE ark before 24.12.0 can extract to an absolute path from an archive.5.0 Medium
- No product listedDirectory Traversal vulnerability in Zrlog backup-sql-file.jar v.3.0.31 allows a remote attacker...7.5 High
- oretnom23 packers and movers management systemSourceCodester Packers and Movers Management System v1.0 is vulnerable to Cross Site Scripting ...6.4 Medium
- forestblog project forestblogCross Site Scripting vulnerability in sayski ForestBlog 20241223 allows a remote attacker to...4.8 Medium
- 1000mz chestnutcmsChestnutCMS <=1.5.0 has an arbitrary file deletion vulnerability in contentcore.controller...7.5 High
- 1000mz chestnutcmsChestnutCMS <=1.5.0 has a directory traversal vulnerability in contentcore.controller...7.5 High
- 1000mz chestnutcmsChestnutCMS <=1.5.0 is vulnerable to File Upload via the Create template function.9.8 Critical
- No product listedProlink 4G LTE Mobile Wi-Fi DL-7203E V4.0.0B05 is vulnerable to SQL Injection in in the /reqproc...7.3 High
- No product listedProlink 4G LTE Mobile Wi-Fi DL-7203E V4.0.0B05 is vulnerable to Cross Site Scripting (XSS) in the...6.3 Medium
- phpgurukul online birth certificate systemA Stored Cross-Site Scripting (XSS) vulnerability was identified in the PHPGURUKUL Online Birth...5.4 Medium
- classcmsClassCMS v4.8 has a code execution vulnerability. Attackers can exploit this vulnerability by...9.8 Critical
- deep-project mossMoss v0.1.3 version has an SQL injection vulnerability that allows attackers to inject carefully...9.8 Critical
- classcmsClassCMS 4.8 is vulnerable to Cross Site Scripting (XSS) in class/admin/channel.php.4.8 Medium
- roundcube webmailCross-Site Scripting (XSS) vulnerability in Roundcube Webmail 1.6.9 allows remote authenticated...6.1 Medium
- technitium dnsserverDenial of service in DNS-over-QUIC in Technitium DNS Server <= v13.2.2 allows remote attackers to...5.3 Medium
- open5gsAn issue was discovered in Open5gs v2.7.2. InitialUEMessage, Registration request sent at a...7.5 High
- No product listedA Cross-Site Request Forgery (CSRF) in Geovision GV-ASWeb with the version 6.1.1.0 or less allows...8.1 High
- No product listedAn issue in Geovision GV-ASWeb with version 6.1.0.0 or less allows unauthorized attackers with...7.5 High
- No product listedA Cross-Site Request Forgery (CSRF) in the Account Management component of Geovision GV-ASWeb...8.8 High
- No product listedIncorrect access control in Geovision GV-ASWeb version 6.1.0.0 or less allows unauthorized...8.8 High
- sammycage lunasvglunasvg v3.0.1 was discovered to contain a segmentation violation via the component gray_find_cell6.5 Medium
- cyberark privileged access managerPVWA (Password Vault Web Access) in CyberArk Privileged Access Manager Self-Hosted before 14.4...4.2 Medium
- No product listedAn issue was discovered in NRadio N8-180 NROS-1.9.2.n3.c5 devices. The /cgi-bin/luci/nradio/basic...6.1 Medium
- No product listedAn issue was discovered on NRadio N8-180 NROS-1.9.2.n3.c5 devices. The /cgi-bin/luci/nradio/basic...4.8 Medium
- angeljudesuarez placement management systemitsourcecode Placement Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the...6.1 Medium
- No product listedCross Site Scripting vulnerability in Quorum onQ OS v.6.0.0.5.2064 allows a remote attacker to...6.1 Medium
- No product listedThe com.enflick.android.TextNow (aka TextNow: Call + Text Unlimited) application 24.17.0.2 for...6.5 Medium
- No product listedNedis SmartLife android app v1.4.0 was discovered to contain an API key disclosure vulnerability.7.5 High
- No product listedAn issue in Nedis SmartLife Video Doorbell (WIFICDP10GY), Nedis SmartLife IOS v1.4.0 causes users...7.5 High
- No product listedaccess_device.cgi on Digiever DS-2105 Pro 3.1.0.71-11 devices allows arbitrary file read. NOTE:...5.1 Medium
- digiever ds-2105 pro, ds-2105 pro\+ firmware, ds-2105 pro firmware +2 moreDigiever DS-2105 Pro 3.1.0.71-11 devices allow time_tzsetup.cgi Command Injection. NOTE: This...8.8 High
- zenvia movideskZenvia Movidesk Profile Editing EditProfile cross site scripting5.3 Medium
- zenvia movideskZenvia Movidesk Login redirect6.9 Medium
- code-projects chat systemcode-projects Chat System add_chatroom.php sql injection5.3 Medium
- rust-opensslrust openssl ssl::select_next_proto use after free6.3 Medium
ntopngOSS-FuzzSegv on unknown address in ___interceptor_freeNo scorendpiOSS-FuzzSegv on unknown address in ndpi_free_flow_dataNo scorentopngOSS-FuzzSegv on unknown address in Flow::processExtraDissectedInformationNo scorendpiOSS-FuzzSegv on unknown address in ndpi_serialize_string_stringNo scorendpiOSS-FuzzSegv on unknown address in ndpi_snprintfNo score- anisha job recruitmentcode-projects Job Recruitment load_job-details.php cross site scripting5.1 Medium
- Show moreLoading…