CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- linux, linux kernel +1 moreplatform/x86: lenovo-yoga-tab2-pro-1380-fastcharger: fix serdev race4.7 Medium
- linux, linux kernel +1 moregpio: xilinx: Convert gpio_lock to raw spinlock5.5 Medium
- linux, linux kernel +1 moreirqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity()5.5 Medium
- highwarden super store finder, super store finder store finder +1 moreSuper Store Finder <= 7.0 - Unauthenticated SQL Injection to Stored Cross-Site Scripting8.2 High
- scriptsbundle dwt - directory & listing wordpress theme, dwt listing +1 moreDWT - Directory & Listing WordPress Theme <=3.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- chimpstudio wp directorybox managerWP Directorybox Manager <= 2.5 - Authentication Bypass9.8 Critical
- hclsoftware devops deploy, ibm urbancode deploy +1 moreIBM UrbanCode Deploy missing authentication4.3 Medium
- No product listedCoinRemitter sql injection6.9 Medium
- mijnpress simple add pages or postsSimple add pages or posts <= 2.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting5.5 Medium
- dreamvention live ajax search freeDreamvention Live AJAX Search Free live_search.searchresults search sql injection6.9 Medium
- rt-threadRT-Thread lwp_syscall.c sys_timer_settime information disclosure4.8 Medium
- joplin project joplinCross-site Scripting in Goto Anything allows arbitrary code execution in Joplin7.8 High
- newbee-ltd newbee-mallnewbee-mall Add Category Page save cross site scripting5.1 Medium
- joplin project joplinCross-site Scripting (XSS) in Rich Text Editor allows arbitrary code execution in Joplin7.8 High
- joplin project joplinDOM Clobbering leads to temporary DOS in the note viewer in Joplin3.3 Low
- taisan tarzan-cmstaisan tarzan-cms Add Theme admin#themes upload deserialization5.3 Medium
opensource-workshop/connect-cmsPackagistConnect-CMS information that is restricted to viewing is visible8.7 Highopensource-workshop/connect-cmsPackagistConnect-CMS Access control vulnerability4.3 Mediumxml2rfcPyPIxml2rfc has file inclusion irregularities6.9 Medium- drakkan sftpgoInsufficient sanitization of user provided rsync command in SFTPGo7.5 High
- pimcore admin-ui-classic-bundle, admin classic bundle +1 morePimcore Admin Classic Bundle allows user enumeration6.9 Medium
- flexera risc platformImproper authorization related to Import / Export interfaces on RISC Platform5.3 Medium
- flexera risc platform2FA bypass on the RISC Platform2.3 Low
- puppetpu puppet agentDeserialization of untrusted data6.6 Medium
- cmseasyCmsEasy database_admin.php restore_action path traversal5.3 Medium
- siberiancmsSiberianCMS HTTP GET Request flat cross site scripting5.3 Medium
- welch allyn eli 150c/bur 150c/mlbur 150c resting electrocardiograph, eli 250c/bur 250c resting electrocardiograph, eli 280/bur280/mlbur 280 resting electrocardiograph +1 more +3 moreImproper Access Control Vulnerability in ELI Electrocardiograph Devices7.7 High
- welch allyn eli 150c/bur 150c/mlbur 150c resting electrocardiograph, eli 250c/bur 250c resting electrocardiograph, eli 280/bur280/mlbur 280 resting electrocardiograph +1 more +3 moreUse of Hard-Coded Password Vulnerability in ELI Electrocardiograph Devices6.4 Medium
- d-link dhp-w310av, dlink dhp-w310av firmware +1 moreD-Link DHP-W310AV authentication spoofing6.9 Medium
- soflyy wp all export, unknown wp all export pro, wp all import all export pro +2 moreWP All Export Pro <= 1.9.1 - Authenticated (ShopManager+) Arbtirary Options Update6.8 Medium
- soflyy wp all import proWP All Import Pro <= 4.9.7 - Cross-Site Request Forgery to Imported Content Deletion4.3 Medium
- soflyy wp all export, unknown wp all export pro, wp all import all export pro +2 moreWP All Export Pro <= 1.9.1 - Unauthenticated Remote Code Execution via Custom Export Fields8.3 High
- soflyy wp all import pro, wp all import +1 moreWP All Import Pro <= 4.9.7 - Authenticated (Administrator+) PHP Object Injection via Import File7.2 High
- d-link dir-823x, dlink dir-823x firmware +1 moreD-Link DIR-823X HTTP POST Request set_wifi_blacklists null pointer dereference7.1 High
- gitlab, gitlab vscode fork +1 moreImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab VSCode Fork8.7 High
- impronta jantoInsufficient data authenticity vulnerability in Janto8.6 High
- impronta jantoUnverified password change vulnerability in Janto9.9 Critical
- apache kvrocksApache Kvrocks: Cross-Protocol Scripting Vulnerability6.5 Medium
hickory-protocrates.ioHickory DNS failure to verify self-signed RRSIG for DNSKEYsNo score- black and white bookpress – for book authors, blackandwhitedigital bookpress +1 moreWordPress BookPress – For Book Authors Plugin <= 1.2.7 - Broken Access Control vulnerability8.2 High
- black and white bookpress – for book authors, blackandwhitedigital bookpress +1 moreWordPress BookPress – For Book Authors Plugin <= 1.2.7 - CSRF to Stored XSS vulnerability7.1 High
- gabrieldarezzo inlocationWordPress InLocation plugin <= 1.8 - Cross Site Scripting (XSS) vulnerability7.1 High
- zach swetz plugin a/b image optimizer, pluginab plugin a\/b image optimizer +1 moreWordPress Plugin A/B Image Optimizer Plugin <= 3.3 - Arbitrary File Download vulnerability7.5 High
- efreja music sheet viewerWordPress Music Sheet Viewer plugin <= 4.1 - Arbitrary File Read vulnerability7.5 High
- scweber custom comment notificationsWordPress Custom Comment Notifications plugin <= 1.0.8 - CSRF to Stored XSS vulnerability7.1 High
- mark barnes style tweakerWordPress Style Tweaker plugin <= 0.11 - CSRF to Stored XSS vulnerability7.1 High
- robert kolatzek wp doodlezWordPress WP doodlez plugin <= 1.0.10 - Cross Site Scripting (XSS) vulnerability7.1 High
- lukaszwiecek smart dofollowWordPress Smart DoFollow plugin <= 1.0.2 - CSRF to Stored XSS vulnerability7.1 High
- metodiew quote commentsWordPress Quote Comments plugin <= 3.0.0 - CSRF to Stored XSS vulnerability7.1 High
- djjmz simple auto tagWordPress Simple Auto Tag plugin <= 1.1 - CSRF to Stored XSS vulnerability7.1 High
- Show moreLoading…