CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- better-authbetter-auth before 1.1.16 Reflected XSS via error parameter5.1 Medium
- plentiPlenti - Code Injection - Denial of Services8.8 High
- edgelesssys contrastContrast before 1.4.1 Coordinator Impersonation via Unauthenticated Recovery7.1 High
- opensecurity mobile security framework, mobsf mobile-security-framework-mobsf +1 moreStored Cross-Site Scripting (XSS) in MobSF8.4 High
- opensecurity mobile security framework, mobsf mobile-security-framework-mobsf +1 morePartial Denial of Service (DoS) in MobSF4.8 Medium
- opensecurity mobile security framework, mobsf mobile-security-framework-mobsf +1 moreLocal Privilege Escalation in MobSF8.5 High
- progress loadmaster, multi-tenant loadmaster +1 moreImproper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.8.4 High
- progress loadmaster, multi-tenant loadmaster +1 moreImproper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.8.4 High
- progress loadmaster, multi-tenant loadmaster +1 moreImproper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.8.4 High
- progress loadmaster, multi-tenant loadmaster +1 moreImproper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.8.4 High
- progress loadmaster, multi-tenant loadmaster +1 moreImproper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.8.4 High
- ckanXSS vector in user uploaded images in group/org and user profiles in ckan7.3 High
- ietf generic udp encapsulation, draft-ietf-intarea-gue-09 +1 moreGeneric UDP Encapsulation (GUE) (IETF Draft) do not validate or verify the source of a network packet6.5 Medium
- ietf generic routing encapsulation, generic routing encapsulation6, rfc2784 - generic routing encapsulation (gre) +2 moreGRE and GRE6 Protocols (RFC2784) do not validate or verify the source of a network packet6.5 Medium
- f5 nginx, debian linux, f5 nginx open source +1 more +3 moreTLS Session Resumption Vulnerability5.3 Medium
- f5 big-ip next central managerBIG-IP Next Central Manager vulnerability7.1 High
- f5 big-ip next central managerBIG-IP Next Central Manager vulnerability6.7 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +19 more +21 moreBIG-IP iControl REST and tmsh vulnerability8.7 High
- f5 big-ip, big-ip policy enforcement manager +1 moreBIG-IP PEM vulnerability8.7 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +19 more +21 moreBIG-IP Configuration utility vulnerability5.1 Medium
- f5 big-ip, big-ip next cnf, big-ip advanced firewall manager +1 more +3 moreBIG-IP AFM vulnerability8.7 High
- f5 big-ip, big-ip next spk, big-ip access policy manager +11 more +13 moreBIG-IP SIP Vulnerability8.7 High
- f5 big-ip, big-ip access policy manager +1 moreBIG-IP APM access profile vulnerability8.7 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreBIG-IP iControl REST vulnerability8.5 High
- f5 big-ip, big-ip application security manager +1 moreBIG-IP Advanced WAF/ASM BADoS vulnerability8.9 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +19 more +21 moreBIG-IP SIP MRF Vulnerability8.7 High
- f5 big-ip, big-ip policy enforcement manager +1 moreBIG-IP PEM Vulnerability8.7 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +19 more +21 moreBIG-IP message routing vulnerability8.9 High
- f5 big-ip, big-ip access policy manager +1 moreBIG-IP APM Endpoint Inspection vulnerability2.3 Low
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +19 more +21 moreBIG-IP SNMP vulnerability8.7 High
- f5 big-ip, big-ip next, big-ip access policy manager +20 more +22 moreTMM Vulnerability8.9 High
- drupal oauth2 clientOAuth2 Client - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-0136.8 Medium
- cisco ios xe software, ios, ios xe +2 moreA vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow...7.7 High
- cisco ios xe software, ios, ios xe +2 moreA vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow...7.7 High
- cisco ios xe software, ios, ios xe +2 moreA vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow...7.7 High
- cisco ios xe software, ios, ios xe +2 moreA vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow...7.7 High
- cisco ios xe software, ios, ios xe +2 moreA vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow...7.7 High
- cisco ios xe software, ios, ios xe +2 moreA vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow...7.7 High
- cisco ios xe software, ios xr software, ios +2 more +4 moreA vulnerability in the SNMP subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS...7.7 High
- cisco ios xe software, ios, ios xe +2 moreA vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow...7.7 High
- cisco secure email, secure email and web manager, secure web appliance +2 moreCisco Secure Email Gateway, Cisco Secure Email and Web Appliance and Cisco Secure Web Appliance SNMP Polling Information Disclosure Vulnerability4.3 Medium
- cisco identity services engine, identity services engine software +1 moreA vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE)...4.8 Medium
- cisco identity services engine, identity services engine software +1 moreA vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE)...4.8 Medium
- cisco asyncos, secure email, secure email and web manager +1 more +3 moreCisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Privilege Escalation Vulnerability3.4 Low
- cisco asyncos, secure email, secure web appliance +2 moreCisco Secure Email and Web Manager and Secure Web Appliance Command Injection Vulnerability6.5 Medium
- cisco asyncos, secure web appliance +1 moreCisco Secure Web Appliance Range Request Bypass Vulnerability5.8 Medium
- cisco asyncos, secure email, secure email and web manager +2 moreCisco Secure Email and Web Manager and Secure Email Gateway Cross-Site Scripting Vulnerability4.8 Medium
- cisco telepresence video communication server (vcs) expresswayCisco Expressway Series Cross-Site Scripting Vulnerability6.1 Medium
- cisco identity services engine, identity services engine software, ise passive identity connector +2 moreCisco Identity Services Engine Insufficient Authorization Bypass Vulnerability9.1 Critical
- cisco identity services engine, identity services engine software, ise passive identity connector +2 moreCisco Identity Services Engine Java Deserialization Vulnerability9.9 Critical
- Show moreLoading…