CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to RPD crash8.7 High
- hcl software iautomate, hcltech dryice iautomate +1 moreHCL iAutomate is affected by a session fixation vulnerability5.5 Medium
- hp, inc. certain poly devices, poly edge e +1 moreCertain Poly Devices – Path Traversal Vulnerability - Arbitrary File Access by Unauthorized User5.8 Medium
- dell avamar, avamar server +1 moreDell Avamar, version 19.4 or later, contains an access token reuse vulnerability in the AUI. A...6.6 Medium
- manageengine endpoint central, zohocorp manageengine endpoint central +1 moreIDOR3.5 Low
- gitlabAllocation of Resources Without Limits or Throttling in GitLab7.5 High
- gitlabMissing Authorization in GitLab6.5 Medium
- ibm cloud pak for business automationIBM Cloud Pak for Business Automation incorrect privilege assignment4.3 Medium
- ibm cloud pak for business automationIBM Cloud Pak for Business Automation cross-site scripting6.4 Medium
- ibm cloud pak for business automationIBM Cloud Pak for Business Automation cross-site scripting5.4 Medium
- ibm cognos analyticsIBM Cognos Anaytics XML external entity injection7.1 High
- gitlabIncomplete Comparison with Missing Factors in GitLab3.5 Low
- gitlabInefficient Algorithmic Complexity in GitLab7.5 High
- gitlabIncorrect User Management in GitLab4.4 Medium
- gitlabMissing Authorization in GitLab4.3 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- linux, linux kernel +1 morenetfilter: nf_tables: don't fail inserts if duplicate has expired5.5 Medium
- curl, haxx libcurl, netapp hci baseboard management controller +24 more +26 moregzip integer overflow7.3 High
- tripetto wordpress form builder plugin for contact forms, surveys and quizzes – tripettoWordPress form builder plugin for contact forms, surveys and quizzes – Tripetto <= 8.0.8 - Unauthenticated Sensitive Information Exposure5.3 Medium
- cockpit-hq cockpit-hq/cockpitCockpit Arbitrary File Upload8.7 High
spatie/browsershotPackagistBrowsershot Path Traversal8.8 Highspatie/browsershotPackagistBrowsershot Local File Inclusion7.7 Highopenjdk-23Ubuntuopenjdk-23 vulnerabilityNo scoreopenjdk-8Ubuntuopenjdk-8 regressionsNo score- kleor contact managerContact Manager <= 8.6.4 - Unauthenticated Arbitrary Double File Extension Upload8.1 High
- veeam backup for aws, backup for google cloud, backup for microsoft azure +3 more +5 moreA vulnerability in Veeam Updater component allows Man-in-the-Middle attackers to execute...9.0 Critical
github.com/boltdb-go/boltGoVulnerability in github.com/boltdb-go/boltNo scoretarantoolOSS-FuzzHeap-buffer-overflow in lj_strfmt_pushvfNo scorelibssh2OSS-FuzzNull-dereference READ in session_startupNo score- netgear xr1000, xr1000v2, xr500 +2 moreNETGEAR XR1000 before 1.0.0.74, XR1000v2 before 1.1.0.22, and XR500 before 2.3.2.134 allow remote...8.1 High
- curl, netapp bootstrap os, h300s firmware +23 more +25 moreeventfd double close7.0 High
- curl, netapp bootstrap os, element software +32 more +34 morenetrc and default credential leak3.4 Low
json-smartDebian,io.root.net.minidev:json-smartRoot,jenkinsRed Hat +2 more +4 moreNetplex Json-smart Uncontrolled Recursion vulnerability7.5 High- axiosys bento4A floating point exception (divide-by-zero) vulnerability was discovered in Bento4 1.6.0-641 in...6.5 Medium
- sangoma asteriskInsecure Permissions vulnerability in asterisk v22 allows a remote attacker to execute arbitrary...9.8 Critical
node-opcua-alarm-conditionnpmnode-opcua-alarm-condition prototype pollution vulnerability7.5 High@stryker-mutator/utilnpm@stryker-mutator/util vulnerable to Prototype Pollution7.5 High- No product listedA prototype pollution in the function lib.parse of dot-properties v1.0.1 allows attackers to...7.5 High
@rpldy/uploadernpm@rpldy/uploader prototype pollution6.5 Medium- No product listedA prototype pollution in the lib.fromQuery function of underscore-contrib v0.3.0 allows attackers...7.5 High
vxe-tablenpmvxe-table prototype pollution7.5 High@zag-js/corenpm@zag-js/core prototype pollution7.5 High- No product listedA prototype pollution in the lib.merge function of cli-util v1.1.27 allows attackers to cause a...7.5 High
utils-extendnpmutils-extend Prototype Pollution9.1 Critical- No product listedA prototype pollution in the lib.post function of ajax-request v1.2.3 allows attackers to cause a...7.5 High
eazy-loggernpmeazy-logger prototype pollution7.5 High- No product listedA prototype pollution in the lib.merge function of xe-utils v3.5.31 allows attackers to cause a...7.5 High
module-from-stringnpmmodule-from-string prototype pollution7.5 High- No product listedA prototype pollution in the lib.combine function of php-parser v3.2.1 allows attackers to cause...7.5 High
- No product listedA prototype pollution in the lib function of expand-object v0.4.2 allows attackers to cause a...7.5 High
- Show moreLoading…