CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- openatom openharmonyLiteos_a has an use after free vulnerability8.8 High
- openatom openharmonyLiteos_a has a buffer overflow vulnerability8.8 High
- openatom openharmonyLiteos_a has an integer overflow read vulnerability5.5 Medium
- ibl software engineering aero weather, namis, satellite weather +1 more +3 moreRemote Code Execution vulnerability in IBL Software Engineering Visual Weather and derived products (NAMIS, Aero Weather, Satellite Weather)9.5 Critical
- delta electronics cncsoft-g2Heap-based Buffer Overflow in CNCSoft-G27.8 High
- daveshine builder shortcode extras – wordpress shortcodes collection to save you timeBuilder Shortcode Extras – WordPress Shortcodes Collection to Save You Time <= 1.0.0 - Authenticated (Contributor+) Post Disclosure4.3 Medium
- notfound guten free optionsGuten Free Options <= 0.9.5 - Reflected XSS6.1 Medium
- alwayscurious legullLegull <= 1.2.2 - Reflected XSS7.1 High
- red hat discovery 1.14, enterprise linux 10, enterprise linux 6 +26 more +28 moreLibtasn1: inefficient der decoding in libtasn1 leading to potential remote dos5.3 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- dell update manager pluginDell Update Manager Plugin, version(s) 1.5.0 through 1.6.0, contain(s) an Improper Neutralization...2.6 Low
- nextendweb nextend social login proNextend Social Login Pro <= 3.1.16 - Authentication Bypass via Apple OAuth provider9.8 Critical
- safetytest cloud-master serverSafetytest Cloud-Master Server static path traversal6.9 Medium
- animati pacsAnimati PACS login cross site scripting5.3 Medium
- dataeaseAn issue in DataEase v1 allows an attacker to execute arbitrary code via the user account and...9.8 Critical
- guojusoft jeecgbootSQL injection in JeecgBoot7.5 High
- tp-link tl-wpa8630 firmwareAn issue in TPLINK TL-WPA 8630 TL-WPA8630(US)_V2_2.0.4 Build 20230427 allows a remote attacker to...8.0 High
- No product listedA reflected Cross-Site Scripting (XSS) vulnerability has been identified in the LDAP User Manager...5.4 Medium
- No product listedA reflected Cross-Site Scripting (XSS) vulnerability exists in /webscan/sqlmap/index.html in...5.4 Medium
- gleamtech filevistaIncorrect Access Control in the Preview Function of Gleamtech FileVista 9.2.0.0 allows remote...6.5 Medium
- gleamtech filevistaDirectory Traversal in File Upload in Gleamtech FileVista 9.2.0.0 allows remote attackers to...6.3 Medium
- No product listedAn issue in Brainasoft Braina v2.8 allows a remote attacker to obtain sensitive information via...7.5 High
- jrohy trojanAn issue in trojan v.2.0.0 through v.2.15.3 allows a remote attacker to escalate privileges via...9.8 Critical
- dhtmlx file explorerLocal File Inclusion vulnerability in dhtmlxFileExplorer v.8.4.6 allows a remote attacker to...6.5 Medium
- dhtmlx file explorerDirectory Traversal vulnerability in dhtmlxFileExplorer v.8.4.6 allows a remote attacker to...6.5 Medium
- audiocodes mediant session border controllerAn issue was discovered in AudioCodes Mediant Session Border Controller (SBC) before 7.40A.501...7.5 High
- audiocodes one voice operations centerAn issue was discovered in AudioCodes One Voice Operations Center (OVOC) before 8.4.582. Due to a...7.5 High
- audiocodes one voice operations centerAn issue was discovered in AudioCodes One Voice Operations Center (OVOC) before 8.4.582. Due to...6.1 Medium
- audiocodes one voice operations centerAn issue was discovered in AudioCodes One Voice Operations Center (OVOC) before 8.4.582. Due to...7.5 High
- No product listedTally Prime Edit Log v2.1 was discovered to contain a DLL hijacking vulnerability via the...7.8 High
- No product listedNEXTU FLETA AX1500 WIFI6 v1.0.3 was discovered to contain a buffer overflow at /boafrm/formIpQoS....4.6 Medium
- elber cleber/3 broadcast multi-purpose platform, ese dvb-s/s2 satellite receiver, reble610 m/odu xpic ip-asi-sdh +2 more +4 moreElber Communications Equipment Hidden Functionality8.7 High
- elber cleber/3 broadcast multi-purpose platform, ese dvb-s/s2 satellite receiver, reble610 m/odu xpic ip-asi-sdh +2 more +4 moreElber Communications Equipment Authentication Bypass Using an Alternate Path or Channel9.3 Critical
- mindskip xzs-mysql, xzs-mysql 学之思开源考试系统 +1 moreMindskip xzs-mysql 学之思开源考试系统 cross-site request forgery5.3 Medium
- mindskip xzs-mysql, xzs-mysql 学之思开源考试系统 +1 moreMindskip xzs-mysql 学之思开源考试系统 CORS cross-domain policy2.3 Low
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability8.8 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability8.8 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability6.5 Medium
- microsoft edge, edge for ios, edge for android +2 moreMicrosoft Edge for IOS and Android Spoofing Vulnerability5.3 Medium
- microsoft dynamics 365 salesMicrosoft Dynamics 365 Sales Elevation of Privilege Vulnerability8.7 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability6.5 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability4.4 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability4.3 Medium
- mindskip xzs-mysql, xzs-mysql 学之思开源考试系统 +1 moreMindskip xzs-mysql 学之思开源考试系统 Exam Edit edit cross site scripting5.1 Medium
- hp inc. certain hp laserjet pro printers, hp 4pa41a firmware, 4pa42a firmware +8 more +10 moreCertain HP LaserJet Pro Printers – Potential Denial of Service6.9 Medium
- ibm entirexIBM EntireX denial of service5.5 Medium
- bharti airtel xstream fiberBharti Airtel Xstream Fiber WiFi Password weak credentials2.3 Low
- ibm entirexIBM EntireX information disclosure3.3 Low
- ibm entirexIBM EntireX XML external entity injection7.1 High
- vllmvLLM using built-in hash() from Python 3.12 leads to predictable hash collisions in vLLM prefix cache2.6 Low
- Show moreLoading…