CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- phptechie wp projects portfolio with client testimonialsWP Projects Portfolio with Client Testimonials <= 3.0 - Reflected XSS6.1 Medium
- swit activity log winterlockCross-site request forgery vulnerability exists in Activity Log WinterLock versions prior to 1.2...4.3 Medium
- dell powerprotect dd, data domain operating system +1 moreDell PowerProtect DD, versions prior to DDOS 8.3.0.0, 7.10.1.50, and 7.13.1.10 contains a use of...3.7 Low
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.79.8 Critical
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.79.8 Critical
- mozilla firefox, thunderbird +1 moreCertificate length was not properly checked8.8 High
- mozilla firefox, thunderbird +1 morePotential opening of private browsing tabs in normal browsing windows6.5 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free during concurrent delazification7.5 High
- mozilla firefox, thunderbird +1 moreA bug in WebAssembly code generation could result in a crash8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in Custom Highlight8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in XSLT9.8 Critical
- No product listedAn issue in compop.ca ONLINE MALL v.3.5.3 allows a remote attacker to execute arbitrary code via...9.8 Critical
- hp, inc. hp anyware linux agentHP Anyware Agent for Linux – Potential Authentication Bypass8.5 High
- zoom communications, inc jenkins marketplace pluginZoom Jenkins Marketplace plugin - Missing Password Field Masking2.6 Low
- labredescefetrj wegiaSQL Injection endpoint 'deletar_permissao.php' parameter 'c', 'a', 'r' in WeGIA9.4 Critical
- labredescefetrj wegiaSQL Injection endpoint 'salvar_cargo.php' parameter 'id_cargo' in WeGIA9.4 Critical
- labredescefetrj wegiaSQL Injection endpoint 'get_codigobarras_cobranca.php' parameter 'codigo' in WeGIA10.0 Critical
- labredescefetrj wegiaSQL Injection endpoint 'get_detalhes_cobranca.php' parameter 'codigo' in WeGIA10.0 Critical
- labredescefetrj wegiaSQL Injection endpoint 'get_detalhes_socio.php' parameter 'id_socio' in WeGIA10.0 Critical
- labredescefetrj wegiaSQL Injection endpoint 'salvar_tag.php' parameter 'id_tag' in WeGIA9.4 Critical
- wazuhImproper Access Control in wazuh-agent7.8 High
- wazuhAbility to view Agent list with no privilege access in wazuh-dashboard4.6 Medium
- enalean tuleapInitial effort field does not respect field permissions in the Taskboard REST card representation in Tuleap4.3 Medium
- enalean tuleapArtifact permissions are not verified in the Cross Tracker Search widget in Tuleap5.3 Medium
- rengineDisclosure of Sensitive User Information via API in reNgine7.1 High
- rengineCommand Injection in reNgine8.7 High
- google zxEnvironment Variable Injection for dotenv API in zx1.0 Low
- cyfershepard jellystatMissing Input validation for filename in backups endpoint in Jellystat8.7 High
- xerox phaser 6510, versalink b400, versalink b405 +14 more +16 moreSMB/FTP Address Book Scan Pass-back attack7.6 High
- px-lab boombox theme extensionsBoomBox Theme Extensions <= 1.8.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode8.8 High
- imithemes eventer, eventer - wordpress event & booking manager plugin +1 moreEventer <= 3.9.9 - Missing Authorization to Authenticated (Subscriber+) Bookings Export4.3 Medium
- imithemes eventer, eventer - wordpress event & booking manager plugin +1 moreEventer <= 3.9.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- imithemes eventer, eventer - wordpress event & booking manager plugin +1 moreEventer <= 3.9.9.5 - Missing Authorization to Unauthenticated Event Ticket Download5.3 Medium
- xerox phaser 6510, versalink b400, versalink b405 +14 more +16 moreLDAP Authentication Sever Pass-back attack6.7 Medium
- gaul s3proxyInsecure path traversal in filesystem and filesystem-nio2 storage backends in org.gaul S3Proxy6.0 Medium
- amd epyc™ 7001 series, epyc™ 7002 series, epyc™ 7003 series +1 more +3 moreamd64-microcode - security update7.2 High
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, qcc2073 firmware +8 more +10 moreUse of Out-of-range Pointer Offset in WLAN Windows Host7.8 High
- qualcomm ar8035 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +167 more +169 moreBuffer Over-read in WLAN HOST8.2 High
- qualcomm qam8255p firmware, qam8295p firmware, qam8620p firmware +24 more +26 moreImproper Validation of Array Index in Automotive OS Platform7.8 High
- qualcomm ar8035 firmware, fastconnect 6200 firmware, fastconnect 6900 firmware +122 more +124 moreUntrusted Pointer Dereference in Automotive Android OS7.8 High
- qualcomm fastconnect 6700 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +22 more +24 moreUse of Out-of-range Pointer Offset in Display7.8 High
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +30 more +32 moreUse After Free in Windows WLAN Host7.8 High
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +35 more +37 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Camera7.8 High
- qualcomm aqt1000 firmware, ar8035 firmware, fastconnect 6200 firmware +158 more +160 moreImproper Input Validation in Hypervisor8.8 High
- qualcomm c-v2x 9150 firmware, csrb31024 firmware, fastconnect 6800 firmware +60 more +62 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Camera Linux7.8 High
- qualcomm ar8035 firmware, c-v2x 9150 firmware, fastconnect 6900 firmware +54 more +56 moreBuffer Over-read in Automotive Multimedia6.1 Medium
- qualcomm ar8035 firmware, c-v2x 9150 firmware, fastconnect 6800 firmware +70 more +72 moreBuffer Over-read in Audio6.1 Medium
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, qam8295p firmware +27 more +29 moreBuffer Over-read in Computer Vision6.1 Medium
- qualcomm fastconnect 7800 firmware, snapdragon 8 gen 3 mobile firmware, wcd9390 firmware +5 more +7 moreImproper Input Validation in Computer Vision6.6 Medium
- qualcomm fastconnect 7800 firmware, snapdragon 8 gen 3 mobile firmware, wcd9390 firmware +5 more +7 moreUse After Free in Computer Vision6.6 Medium
- Show moreLoading…