CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- ibm jazz for service managementIBM Jazz for Service Management Cross-Site Scripting6.1 Medium
- 2n access commander2N Access Commander version 2.1 and prior is vulnerable in default settings to Man In The Middle...8.1 High
- 2n access commanderSuccessful exploitation of this vulnerability could allow an attacker (who needs to have Admin...6.0 Medium
- 2n osSpecifically crafted payloads sent to the RFID reader could cause DoS of RFID reader. After the...4.6 Medium
- 2n osUsing API in the 2N OS device, authorized user can enable logging, which discloses valid...4.3 Medium
- clidey whodbPath traversal opening Sqlite3 database in WhoDB10.0 Critical
- clidey whodbParameter injection in DB connection URIs leading to local file inclusion in WhoDB8.6 High
- nuxt-modules mdcParsed HTML anchor links in Markdown provided to parseMarkdown can result in XSS in @nuxtjs/mdc9.3 Critical
rudloff/rtmpdump-binPackagistMultiple rtmpdump vulnerabilitiesNo score- mitmproxyMitmweb API Authentication Bypass Using Proxy Server8.2 High
- apphousekitchen aldente charge limiterAppHouseKitchen AlDente Charge Limiter XPC Service com.apphousekitchen.aldente-pro.helper shouldAcceptNewConnection improper authorization4.8 Medium
- clear clearml enterprise server, clearml +1 moreA cross-site scripting (xss) vulnerability exists in the dataset upload functionality of ClearML...9.0 Critical
- clear clearml enterprise server, clearml +1 moreAn information disclosure vulnerability exists in the Vault API functionality of ClearML...7.7 High
- kaspersky anti-ransomware tool, anti-virus, anti-virus sdk for windows +8 more +10 moreKaspersky has fixed a security issue in Kaspersky Anti-Virus SDK for Windows, Kaspersky Security...5.3 Medium
- trimble cityworks, cityworks (with office companion) +1 moreTrimble Cityworks versions prior to 15.8.9 and Cityworks with office companion versions prior to...8.6 High
- apache shardingsphere elasticjob-uiApache ShardingSphere ElasticJob-UI allows RCE via event trace data source JDBC8.5 High
- honeywell onewireless network wireless device managerOneWireless command injection possible when updating firmware9.4 Critical
- webkul qloappsWebkul QloApps URL mylogout cross-site request forgery5.3 Medium
- checkpoint gaia os, multi-domain security management, quantum security management +1 moreOut of Bounds read in the CPCA process on Check Point Management Server5.3 Medium
- holdedStored Cross-Site Scripting vulnerability in Holded4.8 Medium
- huawei harmonyosVulnerability of incomplete verification information in the VPN service module Impact: Successful...6.1 Medium
- huawei emui, harmonyos +1 moreOut-of-bounds write vulnerability in the emcom module Impact: Successful exploitation of this...6.8 Medium
- huawei emui, harmonyos +1 moreInput verification vulnerability in the ExternalStorageProvider module Impact: Successful...7.7 High
- huawei emui, harmonyos +1 moreUse-After-Free (UAF) vulnerability in the display module Impact: Successful exploitation of this...6.1 Medium
- huawei emui, harmonyos +1 moreOut-of-bounds array read vulnerability in the FFRT module Impact: Successful exploitation of this...5.7 Medium
- huawei harmonyosIdentity verification vulnerability in the ParamWatcher module Impact: Successful exploitation of...6.2 Medium
- huawei harmonyosVulnerability of improper log information control in the UI framework module Impact: Successful...6.6 Medium
- huawei harmonyosOut-of-bounds read vulnerability in the interpreter string module Impact: Successful exploitation...2.8 Low
- huawei harmonyosArbitrary write vulnerability in the Gallery module Impact: Successful exploitation of this...6.1 Medium
- huawei harmonyosPermission verification vulnerability in the media library module Impact: Successful exploitation...6.2 Medium
- google application integrationSandbox Escape in Google Cloud Application Integration's JavaScript Task (Rhino Engine)9.4 Critical
- apache james serverApache James: denial of service through the use of IMAP literals8.6 High
- apache james serverApache James: denial of service through JMAP HTML to text conversion6.5 Medium
- boldgrid post and page builder by boldgrid – visual drag and drop editor, post and page builder +1 morePost and Page Builder by BoldGrid <= 1.27.6 - Path Traversal to Authenticated (Contributor+) Arbitrary File Read via template_via_url Function6.5 Medium
- humming heads inc. defense platform home edition, hummingheads defense platform +1 moreImproper neutralization of argument delimiters in a command ('Argument Injection') issue exists...6.3 Medium
- humming heads inc. defense platform home edition, hummingheads defense platform +1 moreNULL pointer dereference vulnerability exists in Defense Platform Home Edition Ver.3.9.51.x and...6.5 Medium
- humming heads inc. defense platform home edition, hummingheads defense platform +1 moreBuffer overflow vulnerability exists in Defense Platform Home Edition Ver.3.9.51.x and earlier....8.8 High
- humming heads inc. defense platform home edition, hummingheads defense platform +1 moreUnprotected Windows messaging channel ('Shatter') issue exists in Defense Platform Home Edition...8.8 High
- humming heads inc. defense platform home edition, hummingheads defense platform +1 moreUnprotected Windows messaging channel ('Shatter') issue exists in Defense Platform Home Edition...6.5 Medium
- humming heads inc. defense platform home edition, hummingheads defense platform +1 moreExecution with unnecessary privileges issue exists in Defense Platform Home Edition Ver.3.9.51.x...6.5 Medium
- villatheme curcy – multi currency for woocommerce – smoothly on woocommerce 9.xCURCY – Multi Currency for WooCommerce <= 2.2.5 - Unauthenticated Arbitrary Shortcode Execution via get_products_price Function7.3 High
- tommietott likebotLikeBot – Decentralized like-system <= 0.85 - Admin+ Stored XSS via CSRF4.7 Medium
- abb aspect-enterprise, matrix series, nexus series +19 more +21 moreCredentials Disclosure - keys9.3 Critical
- ibm app connect enterpriseIBM App Connect Enterprise Arbitrary File Write6.5 Medium
- ibm security verify directoryIBM Security Verify Directory Command Execution9.1 Critical
- ibm security verify access appliance, security verify access +1 moreIBM Security Verify Access Appliance Privilege Escalation7.8 High
- opensc project pam pkcs11pam-pkcs11 - security update6.7 Medium
- opensc pam pkcs11PAM-PKCS#11 vulnerable to authentication bypass with default value for `cert_policy` (`none`)9.2 Critical
- No product listedThe Platform component of Mitel OpenScape 4000 and OpenScape 4000 Manager V11 R0.22.0 through V11...7.3 High
- No product listedThe Platform component of Mitel OpenScape 4000 and OpenScape 4000 Manager through V10 R1.54.1 and...8.8 High
- Show moreLoading…