CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- solarwinds platformSolarWinds Platform Reflected Cross-Site Scripting Vulnerability6.8 Medium
- solarwinds kiwi syslog ngSensitive data disclosure vulnerability4.6 Medium
- solarwinds, solarwinds platform +1 moreSolarWinds Platform Server-Side Request Forgery Vulnerability3.5 Low
- solarwinds web help deskSolarWinds Web Help Desk Cryptographic Key Management Vulnerability5.5 Medium
- gnu binutilsGNU Binutils ld libbfd.c bfd_putl64 memory corruption2.3 Low
- chimpstudio wp foodbakeryWP Foodbakery <= 4.8 - Authentication Bypass in foodbakery_parse_request9.8 Critical
- chimpstudio wp foodbakeryWP Foodbakery <= 4.7 - Unauthenticated Privilege Escalation in foodbakery_registration_validation9.8 Critical
- gnu binutils, netapp active iq unified manager, ontap select deploy administration utility +2 moreGNU Binutils ld libbfd.c bfd_putl64 memory corruption6.3 Medium
- dayrui xunruicmsdayrui XunRuiCMS Linkage.php import_add deserialization5.3 Medium
- notfound stray random quotesStray Random Quotes <= 1.9.9 - Reflected XSS6.1 Medium
- amini7 zarinpal paid downloadZarinpal Paid Downloads <= 2.3 - Admin+ Arbitrary File Upload4.8 Medium
- amini7 zarinpal paid downloadZarinpal Paid Downloads <= 2.3 - Reflected XSS6.1 Medium
- gnu binutilsGNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec heap-based overflow2.3 Low
- 1000 projects bookstore management system1000 Projects Bookstore Management System Add Book Page process_book_add.php cross site scripting4.8 Medium
- hackneyServer-side Request Forgery (SSRF) in hackney6.3 Medium
- 1000 projects bookstore management system1000 Projects Bookstore Management System process_users_del.php sql injection5.1 Medium
- hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 moreHT Mega – Absolute Addons For Elementor <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget6.4 Medium
- 1000 projects bookstore management system1000 Projects Bookstore Management System addtocart.php sql injection5.3 Medium
- code-projects real estate property management systemcode-projects Real Estate Property Management System CustomerReport.php cross site scripting5.1 Medium
- netvision information isoinsightNetVision Information ISOinsight - Reflected Cross-site Scripting6.1 Medium
- quanxun school affairs systemQuanxun School Affairs System - Exposure of Sensitive Information9.8 Critical
- billion electric m120n, m100, m150 +1 more +3 moreBillion Electric M120N - Use of Hard-coded Credentials8.4 High
- code-projects real estate property management systemcode-projects Real Estate Property Management System Category.php cross site scripting5.1 Medium
- rems image compressor toolSourceCodester Image Compressor Tool compressor.php cross site scripting5.1 Medium
- rems contact manager with export to vcfSourceCodester Contact Manager with Export to VCF delete-contact.php sql injection5.3 Medium
- code-projects employee management systemMayuri K Employee Management System Update_User.php sql injection5.3 Medium
- remyandrade food menu managerSourceCodester Food Menu Manager update.php unrestricted upload5.3 Medium
- sap se supplier relationship management (master data management catalog)Path traversal vulnerability in SAP Supplier Relationship Management (Master Data Management Catalog)8.6 High
- sap se fiori apps reference library (my overtime requests)Missing Authorization check in SAP Fiori Apps Reference Library (My Overtime Requests)5.4 Medium
- sap se approuter node.js packageAuthentication bypass via authorization code injection in SAP Approuter8.1 High
- sap se commerceSameSite Defense in Depth not applied for some cookies in SAP Commerce6.8 Medium
- sap se commerce (backoffice)Missing Defense in Depth Against Clickjacking in SAP Commerce Backoffice6.8 Medium
- sap se abap platform (abap build framework)Missing Authorization check in SAP ABAP Platform (ABAP Build Framework)4.3 Medium
- sap se gui for windowsInsecure Key & Secret Management vulnerability in SAP GUI for Windows6.0 Medium
- sap se netweaver application server javaInformation Disclosure vulnerability in SAP NetWeaver Application Server Java4.3 Medium
- sap se hana extended application services, advanced model (user account and authentication services)Open Redirect Vulnerability in SAP HANA extended application services, advanced model (User Account and Authentication Services)7.1 High
- sap se businessobjects platform (bi launchpad)Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence platform (BI Launchpad)6.1 Medium
- sap se netweaver server abap, sap basis +1 moreInformation Disclosure vulnerability in SAP NetWeaver Application Server ABAP5.3 Medium
- sap se fiori for sap erpCache Poisoning through header manipulation vulnerability in SAP Fiori for SAP ERP3.1 Low
- sap se netweaver and abap platform (st-pi)Missing Authorization check in SAP NetWeaver and ABAP platform (ST-PI)4.3 Medium
- sap se netweaver and abap platform (sdccn)Missing Authorization Check in SAP NetWeaver and ABAP Platform (SDCCN)4.3 Medium
- sap se netweaver and abap platform (sdccn)Missing Authorization Check in SAP NetWeaver and ABAP Platform (SDCCN)5.3 Medium
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (central management console) +1 moreImproper Authorization in SAP BusinessObjects Business Intelligence platform (Central Management Console)8.7 High
- sap se netweaver application server javaCross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server Java5.4 Medium
- aureus erpLumsoft ERP FileUploadApi.ashx DoWebUpload unrestricted upload6.9 Medium
- code-projects police fir record management systemcode-projects Police FIR Record Management System Add Record stack-based overflow4.8 Medium
ruby2.7Debianruby2.7 - regression updateNo score- No product listedBuffer overflow vulnerability in Digital China DCBI-Netlog-LAB Gateway 1.0 due to the lack of...9.8 Critical
- No product listedBuffer overflow vulnerability in Digital China DCBC Gateway 200-2.1.1 due to the lack of length...5.1 Medium
- wavlink wl-wn575a3 firmwareMultiple buffer overflow vulnerabilities in Wavlink WL-WN575A3 RPT75A3.V4300, which are caused by...5.1 Medium
- Show moreLoading…