CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- ruijie rg-nbr2600s firmwareBuffer overflow vulnerability in Ruijie RG-NBR2600S Gateway 10.3(4b12) due to the lack of length...5.1 Medium
- No product listedBuffer overflow vulnerability in Mercury MIPC552W Camera v1.0 due to the lack of length...5.1 Medium
- No product listedBuffer overflow vulnerability in H3C FA3010L access points SWFA1B0V100R005 due to the lack of...5.1 Medium
- totolink x6000r firmwareBuffer overflow vulnerability in TOTOLink X6000R routers V9.4.0cu.652_B20230116 due to the lack...5.1 Medium
- trendnet teg-40128 firmwareBuffer overflow vulnerability in Trendnet TEG-40128 Web Smart Switch v1(1.00.023) due to the lack...5.9 Medium
- linksys wap610n firmwareBuffer overflow vulnerability in Linksys WAP610N v1.0.05.002 due to the lack of length...7.3 High
- containers crun.krun_config.json symlink attack creates or overwrites file on the host in crun8.5 High
- lanproxy project lanproxyDirectory Traversal vulnerability in Ianproxy v.0.1 and before allows a remote attacker to obtain...5.1 Medium
- dedecmsDedecms 5.71sp1 and earlier is vulnerable to URL redirect. In the web application, a logic error...6.5 Medium
- No product listedDNNGo xBlog v6.5.0 was discovered to contain a SQL injection vulnerability via the Categorys...6.5 Medium
- No product listedAn issue in the SharedConfig class of Telegram Android APK v.11.7.0 allows a physically proximate...6.8 Medium
- mikrotik routerosAn issue was discovered in the Winbox service of MikroTik RouterOS v6.43 through v7.16.1. A...5.4 Medium
- No product listedAn issue in the BdApiUtil driver of Baidu Antivirus v5.2.3.116083 allows attackers to terminate...3.8 Low
- No product listedAn issue in AnkiDroid Android Application v2.17.6 allows attackers to retrieve internal files...5.3 Medium
intel-microcodeDebian,microcode_ctlAlmaLinux +1 moreInsufficient granularity of access control in UEFI firmware in some Intel(R) processors may allow...6.8 Mediumintel-microcodeDebian,intel-ucodeAlpaquita,microcodeMageia +2 more +4 moreImproper access control in the EDECCSSA user leaf function for some Intel(R) Processors with...6.8 Medium- No product listedAn issue in Team Amaze Amaze File Manager v.3.8.5 and fixed in v.3.10 allows a local attacker to...7.9 High
intel-microcodeDebian,intel-ucodeAlpaquita,microcodeMageia +2 more +4 moreImproper Finite State Machines (FSMs) in Hardware Logic for some Intel(R) Processors may allow...5.6 Medium- w1.fi hostapd, siemens sidis secured smartplug +1 moreIn hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX...6.5 Medium
- No product listedA security issue in Sitevision version 10.3.1 and older allows a remote attacker, in certain (non...5.1 Medium
- code-projects vehicle parking management systemcode-projects Vehicle Parking Management System Authentication login stack-based overflow4.8 Medium
- anisha job recruitmentcode-projects Job Recruitment load\_user-profile.php sql injection5.3 Medium
- code-projects employee management systemSourceCodester Employee Management System index.php default credentials6.9 Medium
- zoo-project[XBOW-025-033] Cross-Site Scripting (XSS) via EchoProcess Service in ZOO-Project WPS Server5.5 Medium
- zoo-project[XBOW-025-031] Reflected Cross-Site Scripting via jobid Parameter in ZOO-Project WPS publish.py CGI Script5.5 Medium
- campcodes school management softwareCampCodes School Management Software academic-calendar cross site scripting5.1 Medium
cloud-regionsrv-clientSUSE,python-tomlSUSE +1 moreSecurity update for cloud-regionsrv-clientNo score- esafenet cdgESAFENET CDG addPolicyToSafetyGroup.jsp sql injection5.3 Medium
- allims lab.onlineAllims lab.online model_recuperar_senha.php sql injection5.3 Medium
- microdicom dicom viewerMicroDicom DICOM Viewer Improper Certificate Validation5.7 Medium
- pix software vivazPix Software Vivaz servlet sql injection6.9 Medium
- lemmynet lemmyServer-Side Request Forgery (SSRF) in activitypub_federation4.0 Medium
- webkul qloappsWebkul QloApps Your Location Search stores cross site scripting5.3 Medium
- 201206030 novelxxyopen Novel books sql injection5.3 Medium
- wazuh, wazuh server +1 moreRemote code execution in Wazuh server9.9 Critical
- apple ipados, ios and ipados, iphone os +2 moreAn authorization issue was addressed with improved state management. This issue is fixed in...6.1 Medium
- gnu binutilsGNU Binutils format.c bfd_set_format memory corruption2.3 Low
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 morePath Traversal in mintplex-labs/anything-llm7.2 High
- wandb wandb/openuiUnauthenticated File Upload in wandb/openui6.1 Medium
- modelscope agentscope, modelscope/agentscope +1 moreLocal File Inclusion (LFI) in modelscope/agentscope7.5 High
- chimpstudio wp foodbakeryWP Foodbakery <= 4.8 - Reflected Cross-Site Scripting6.1 Medium
- chimpstudio wp foodbakeryWP Foodbakery <= 4.7 - Unauthenticated Arbitrary File Upload9.8 Critical
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS...8.8 High
- gnu binutilsGNU Binutils ld xstrdup.c xstrdup memory leak2.3 Low
@coinbase/wallet-sdknpmUnknown vulnerability in Coinbase Wallet SDKNo scoreesbuildnpm,esbuild-android-64TuxCare,@esbuild/android-armTuxCare +43 more +45 moreesbuild enables any website to send any requests to the development server and read the response5.3 Medium- hickory-dnsDNSSEC validation may accept broken authentication chains5.7 Medium
- gnu binutilsGNU Binutils ld xmemdup.c xmemdup memory leak2.3 Low
- gnu binutilsGNU Binutils ld libbfd.c bfd_malloc memory leak2.3 Low
- linux, linux kernel +1 moremm: zswap: properly synchronize freeing resources during CPU hotunplug7.8 High
- Show moreLoading…