CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
@tanstack/form-corenpm@tanstack/form-core prototype pollution7.5 High- No product listedA prototype pollution in the lib.parse function of dot-qs v0.2.0 allows attackers to cause a...7.5 High
@ndhoule/defaultsnpm@ndhoule/defaults prototype pollution7.5 High- No product listedA prototype pollution in the lib.createPath function of utile v0.3.0 allows attackers to cause a...7.5 High
- No product listedA prototype pollution in the lib.setValue function of @syncfusion/ej2-spreadsheet v27.2.2 allows...7.5 High
- No product listedA prototype pollution in the lib function of php-date-formatter v1.3.6 allows attackers to cause...7.5 High
- No product listedA Stored Cross-Site Scripting (XSS) vulnerability was identified affecting Skybox Change Manager...5.4 Medium
- No product listedA Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in the driver of the...7.8 High
- jkev responsive e-learning systemSQL Injection vulnerability in SourceCodester Responsive E-Learning System 1.0 allows remote...9.8 Critical
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- parallels desktop, parallels, parallels remote application server +2 moreParallels Desktop Technical Data Reporter Link Following Local Privilege Escalation Vulnerability7.8 High
- omnissa horizon client for macosOmnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability due to...7.8 High
- ashlar cobalt, ashlar-vellum argon, lithium +2 more +4 moreAshlar-Vellum Cobalt, Xenon, Argon, Lithium Out-of-bounds Write8.4 High
- ashlar cobalt, ashlar-vellum argon, lithium +2 more +4 moreAshlar-Vellum Cobalt, Xenon, Argon, Lithium Heap-based Buffer Overflow8.4 High
- omnissa horizon client for macosOmnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability due to...7.8 High
- checkmk nagvisCheckmk NagVis Reflected Cross-site Scripting5.4 Medium
- checkmk nagvisCheckmk NagVis Remote Code Execution7.2 High
- opentext™ content management (extended ecm)A remote code vulnerability has been discovered in OpenText™ Content Management.5.4 Medium
github.com/edgelesssys/marblerunGoMarbleRun unauthenticated recovery allows Coordinator impersonation7.1 High- discourseCross-site Scripting (XSS) via topic titles when CSP disabled in Discourse4.3 Medium
- discoursePartial denial of service via inline oneboxes in Discourse4.3 Medium
- discoursePotential bypass of chat permissions in Discourse4.3 Medium
- discourseAnonymous cache poisoning via XHR requests in Discourse8.2 High
- discourseUsers can see other user's tagged PMs in Discourse2.2 Low
- discourseHTMLi(XSS without CSP) via Onebox urls in Discourse6.5 Medium
- discourseClient Side Path Traversal using activate account route in Discourse3.1 Low
- discourseStored DOM-based XSS (without CSP) via video placeholders in Discourse6.5 Medium
- discourseAnonymous cache poisoning via request headers in Discourse8.2 High
- ibm security verify access appliance, security verify access, security verify access container +1 more +3 moreIBM Security Verify Access incorrect privilege assignment5.0 Medium
- ibm security verify access appliance, security verify access, security verify access container +2 moreIBM Security Verify Access cross-site request forgery6.5 Medium
- ibm security verify access appliance, security verify access, security verify access container +1 more +3 moreIBM Security Verify Access information disclosure5.9 Medium
- ibm security verify access appliance, security verify access, security verify access container +2 moreIBM Security Verify Access information disclosure2.7 Low
- ibm security verify access appliance, security verify access, security verify access container +1 more +3 moreIBM Security Verify Access cross-site scripting6.1 Medium
- sparkle project sparkle, netapp hci compute node, oncommand workflow automation +2 moreSigning Checks Bypass7.3 High
- western telematic inc console server (dsm series), console server + pdu combo unit (cpm series), network power switch (nps series) +2 moreWestern Telematic Inc NPS Series, DSM Series, CPM Series External Control of File Name or Path6.0 Medium
- automationdirect c-more ea9 hmi ea9-rhmi, c-more ea9 hmi ea9-t10cl, c-more ea9 hmi ea9-t10wcl +7 more +9 moreAutomationDirect C-more EA9 HMI Classic Buffer Overflow9.3 Critical
- rengineBusiness Logic And Unrestricted Project Deletion Lead To Take Over the System in reNgine8.8 High
- rengineStored XSS on Admin Panel When Deleting a User in reNgine7.4 High
- rengineHTML Injection in reNgine5.3 Medium
github.com/CosmWasm/wasmvmGo,cosmwasm-vmcrates.io,github.com/CosmWasm/wasmvm/v2Go +2 morewasmvm: Malicious smart contract can slow down block productionNo scoregithub.com/CosmWasm/wasmvmGo,github.com/CosmWasm/wasmvm/v2Go +1 morewasmvm: Malicious smart contract can crash the chainNo score- dumbwareio dumbdropOS Command Injection endpoint '/upload/init' parameter 'filename' (RCE) in DumpDrop9.5 Critical
- google chromeInappropriate implementation in Extensions API in Google Chrome prior to 133.0.6943.53 allowed a...6.3 Medium
- google chromeUse after free in V8 in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to...5.4 Medium
- google chromeUse after free in Skia in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to...6.3 Medium
- wpovernight woocommerce-pdf-invoices-packing-slips, woocommerce pdf invoices\& packing slips +1 moreUnrestricted Access to PDF Documents via URL Manipulation in woocommerce-pdf-invoices-packing-slips6.3 Medium
- Show moreLoading…