CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- openenergymonitor emoncmsA SQL Injection vulnerability exists in the /feed/insert.json endpoint of the Emoncms project >=...9.8 Critical
- No product listedAn issue in Smartcom Bulgaria AD Smartcom Ralink CPE/WiFi router SAM-4G1G-TT-W-VC, SAM-4F1F-TT-W...5.7 Medium
- go toolchain cmd/goArbitrary code execution during build on darwin in cmd/go7.5 High
- go standard library crypto/internal/nistecTiming sidechannel for P-256 on ppc64le in crypto/internal/nistec4.0 Medium
- projectfloodlight floodlightAn issue in floodlight v1.2 allows a local attacker to cause a denial of service via the Topology...5.5 Medium
- projectfloodlight floodlightAn issue in floodlight v1.2 allows a local attacker to cause a denial of service via the Topology...5.5 Medium
- fabian shopping portalIn Code-projects Shopping Portal v1.0, the insert-product.php page has an arbitrary file upload...8.8 High
- syliusWithdrawn Advisory: Sylius allows unrestricted brute-force attacks on user accounts7.5 High
- No product listedAn issue in Kanaries Inc Pygwalker before v.0.4.9.9 allows a remote attacker to obtain sensitive...8.6 High
- douco douphpCross Site Scripting vulnerability in DouPHP v.1.8 Release 20231203 allows attackers to execute...4.8 Medium
- oretnom23 packers and movers management systemCross Site Request Forgery (CSRF) in Users.php in SourceCodester Packers and Movers Management...4.5 Medium
- phpjabbers cinema booking systemAn SQL injection vulnerability in the pjActionGetUser function of PHPJabbers Cinema Booking...9.8 Critical
- phpjabbers cinema booking systemA cross-site request forgery (CSRF) vulnerability in the pjActionUpdate function of PHPJabbers...5.4 Medium
- phpjabbers cinema booking systemA stored cross-site scripting (XSS) vulnerability in PHPJabbers Cinema Booking System v2.0 exists...9.3 Critical
- phpjabbers cinema booking systemPHPJabbers Cinema Booking System v2.0 is vulnerable to reflected cross-site scripting (XSS)....6.1 Medium
- No product listedNetMod VPN Client 5.3.1 is vulnerable to DLL injection, allowing an attacker to execute arbitrary...7.3 High
proftpdMageia,proftpd-dfsgDebian +1 moreBuffer Overflow vulnerability in Proftpd commit 4017eff8 allows a remote attacker to execute...7.5 High- codeastro complaint management systemIncorrect access control in the endpoint /admin/m_delete.php of CodeAstro Complaint Management...7.5 High
- No product listedAn issue in deep-diver LLM-As-Chatbot before commit 99c2c03 allows a remote attacker to execute...8.8 High
- No product listedA vulnerability has been identified in GoldPanKit eva-server v4.1.0. It affects the path...8.1 High
- No product listedAn issue in the relPath parameter of WebFileSys version 2.31.0 allows attackers to perform...5.3 Medium
- No product listedCross Site Scripting vulnerability in Gilnei Moraes phpABook v.0.9 allows a remote attacker to...6.3 Medium
- No product listedIn Newgensoft OmniDocs 11.0_SP1_03_006, Insecure Direct Object Reference (IDOR) in the...7.5 High
- No product listedForever KidsWatch Call Me KW-50 R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h suffers from...7.5 High
- No product listedThe device ID is based on IMEI in Forever KidsWatch Call Me KW50 R36_YDR_A3PW_GM7S_V1...6.6 Medium
- No product listedForever KidsWatch Call Me KW50 R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h, and Forever...9.1 Critical
- No product listedBuilt-in SMS-configuration command in Forever KidsWatch Call Me KW50 R36_YDR_A3PW_GM7S_V1...9.8 Critical
- No product listedForever KidsWatch Call Me KW-50 R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h and Forever...9.8 Critical
- No product listedForever KidsWatch Call Me KW-50 R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h is vulnerable to...8.1 High
- No product listedThe mstatus register in RSD commit 3d13a updates incorrectly, leading to processing errors.5.3 Medium
- prasathmani tiny file managerTiny File Manager v2.4.7 and below is vulnerable to session fixation.9.8 Critical
- prasathmani tiny file managerTiny File Manager v2.4.7 and below was discovered to contain a Cross Site Scripting (XSS)...4.8 Medium
- No product listedStored Cross Site Scripting(XSS) vulnerability in Egavilan Media Resumes Management and Job...6.3 Medium
- ibm applinxIBM ApplinX Information Disclosure4.3 Medium
- ibm applinxIBM ApplinX Information Disclosure4.3 Medium
- ibm applinxIBM ApplinX Information Disclosure5.9 Medium
- ibm applinxIBM ApplinX Clickjacking5.4 Medium
- ibm applinxIBM ApplinX Cross-Site Request Forgery4.3 Medium
- ibm applinxIBM ApplinX Cross-Site Request Forgery4.3 Medium
- autonomy openplcCVE-2025-10669.8 Critical
- ibm applinxIBM ApplinX Cross-Site Scripting5.4 Medium
- ibm applinxIBM ApplinX Cross-Site Scripting5.4 Medium
- ibm applinxIBM ApplinX Cross-Site Scripting6.4 Medium
- ibm aspera sharesIBM Aspera Shares Data Manipulation5.3 Medium
- ibm aspera sharesIBM Aspera Shares Cross-Site Scripting6.4 Medium
- ibm aspera sharesIBM Aspera Shares Server-Side Request Forgery5.4 Medium
- ibm aspera sharesIBM Aspera Shares Server-Side Request Forgery5.4 Medium
- ibm aspera sharesIBM Aspera Shares HTML injection4.8 Medium
- ibm aspera sharesIBM Aspera Shares Cross-Site Scripting4.8 Medium
- ibm aspera sharesIBM Aspera Shares Denial of Service4.3 Medium
- Show moreLoading…