CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morenet: sched: fix ets qdisc OOB Indexing7.8 High
- linux, linux kernel +1 morecachestat: fix page cache statistics permission checking5.5 Medium
- linux, linux kernel +1 morescsi: storvsc: Ratelimit warning logs to prevent VM denial of service5.5 Medium
- linux, linux kernel +1 moreUSB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb()5.5 Medium
- linux, linux kernel +1 moredrm/v3d: Assign job pointer to NULL before signaling the fence4.7 Medium
- linux, linux kernel +1 morevfio/platform: check the bounds of read/write syscalls7.8 High
- linux, linux kernel +1 moredrm/amd/display: Initialize denominator defaults to 15.5 Medium
- ruby net-imapNet::IMAP vulnerable to possible DoS by memory exhaustion6.5 Medium
- openprojectOpenProject stored HTML injection vulnerability3.5 Low
- opensc pam pkcs11PAM-PKCS#11 vulnerable to segmentation fault on ctrl-c/ctrl-d when asked for PIN5.1 Medium
- red hat discovery 1.14, enterprise linux 10, enterprise linux 6 +20 more +22 moreGnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos5.3 Medium
- abb system 800xaCamera passwords stored in clear text7.0 High
- gnu binutilsGNU Binutils ld xmalloc.c xstrdup memory leak2.3 Low
- gnu binutilsGNU Binutils ld ldelfgen.c link_order_scan memory leak2.3 Low
- devolutions remote desktop manager, remote desktop manager powershell +1 moreMissing certificate validation in Devolutions Remote Desktop Manager on macOS, iOS, Android,...8.8 High
- devolutions remote desktop managerImproper host validation in the certificate validation component in Devolutions Remote Desktop...8.1 High
- gnu binutilsGNU Binutils nm nm.c internal_strlen buffer overflow2.3 Low
- kunbus gmbh revolution piPath-Traversal vulnerability in Revolution Pi4.3 Medium
- kunbus gmbh revolution piOS Command Injection vulnerability in Revolution Pi8.3 High
- kelio visio 1, visio x4, visio x7 +2 moreCross-Site Scripting (XSS) vulnerability in Kelio Visio6.1 Medium
randscrates.io`rands` was removed from crates.io for malicious codeNo scoretotally-safe-transmutecrates.iototally-safe-transmute allows transmuting any type to any other type in safe RustNo scoretotally-safecrates.iototally-safe introduces memory vulnerabilities in safe RustNo scorecve-rscrates.iocve-rs introduces memory vulnerabilities in safe RustNo scorersyncopenSUSESecurity update for rsyncNo score- apache felix webconsoleApache Felix Webconsole: XSS in services console6.1 Medium
- tp-link tapo c500 v1 wi-fi camera, tapo c500 v2 wi-fi camera +1 moreInformation Disclosure Vulnerability in TP-Link Tapo C500 Wi-Fi Camera7.0 High
rsyncUbuntursync regressionNo scorekimageformatsOSS-FuzzHeap-buffer-overflow in LibRaw::phase_one_correctNo scorewavpackOSS-FuzzUse-of-uninitialized-value in decimate_dsd_runNo scorewavpackOSS-FuzzUse-of-uninitialized-value in get_words_losslessNo scorewavpackOSS-FuzzHeap-use-after-free in unpack_dsd_samplesNo score- beian.miit cool-admin-javaA stored cross-site scripting (XSS) vulnerability in the Parameter List module of cool-admin-java...4.8 Medium
- beian.miit cool-admin-javaAn arbitrary file upload vulnerability in the component /comm/upload of cool-admin-java v1.0...7.2 High
- No product listedAn arbitrary file upload vulnerability in the component /userPicture of Timo v2.0.3 allows...7.3 High
- No product listedAn SQL injection vulnerability exists in Stock-Forecaster <=01-04-2020. By sending a specially...5.9 Medium
@perfood/couch-authnpmCouchAuth has a Server-Side Template Injection vulnerability in its email functionality7.3 High- zhyd oneblogOneBlog v2.3.6 was discovered to contain a template injection vulnerability via the template...8.0 High
- phpgurukul small crmPHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via a crafted payload...5.4 Medium
- tenda w18e firmwareA sensitive information disclosure vulnerability in the Tenda W18E V16.01.0.8(1625) web...6.5 Medium
- tenda w18e firmwareHardcoded credentials in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to...8.3 High
- tenda w18e firmwareA stack overflow vulnerability in the Tenda W18E V16.01.0.8(1625) web management portal allows an...8.0 High
- tenda w18e firmwareTenda W18E V16.01.0.8(1625) suffers from authentication bypass in the web management portal...8.8 High
- tenda w18e firmwareA default credentials vulnerability in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote...8.8 High
- tenda w18e firmwareTenda W18E V16.01.0.8(1625) is vulnerable to Incorrect Access Control. An attacker can send a...8.8 High
- tenda w18e firmwareTenda W18E V16.01.0.8(1625) is vulnerable to Buffer Overflow. An attacker with access to the web...8.0 High
- tenda w18e firmwareTenda W18E V16.01.0.8(1625) is vulnerable to Incorrect Access Control. Unauthorized password...6.5 Medium
- tenda w18e firmwareA hardcoded credentials vulnerability in Tenda W18E V16.01.0.8(1625) allows unauthenticated...8.8 High
- opcfoundation ua .net standard stack, siemens industrial edge for machine tools (formerly known as "sinumerik edge"), simatic braumat +9 more +11 moreSecurity Update for the OPC UA .NET Standard Stack5.3 Medium
- opcfoundation ua .net standard stack, siemens simatic energy manager pro v7.2, simatic energy manager pro v7.3 +3 more +5 moreSecurity Update for the OPC UA .NET Standard Stack8.6 High
- Show moreLoading…