CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- nexryai concordeConcorde CSRF vulnerability due to insecure configuration of authentication cookie attributes8.6 High
- eprosima fast dds, fast-dds +1 moreFast DDS does not verify Permissions CA4.5 Medium
- ivanti secure access clientInsufficient permissions in Ivanti Secure Access Client before version 22.8R1 allows a local...7.1 High
- ivanti connect secure, policy secure +1 moreCleartext storage of information in Ivanti Connect Secure before version 22.7R2.6 and Ivanti...6.0 Medium
- ivanti connect secure, policy secure +1 moreA hardcoded key in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before...6.0 Medium
- ivanti connect secure, policy secure +1 moreReflected XSS in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before...6.1 Medium
- ivanti connect secure, policy secure +1 moreExternal control of a file name in Ivanti Connect Secure before version 22.7R2.6 and Ivanti...6.8 Medium
- ivanti connect secure, policy secure +1 moreCode injection in Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy Secure before...9.1 Critical
- misskeyMisskey CSRF vulnerability due to insecure configuration of authentication cookie attributes8.2 High
- ivanti connect secureA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6 allows a remote...9.9 Critical
- ivanti cloud services application, cloud services appliance +1 morePath traversal in Ivanti CSA before version 5.0.5 allows a remote unauthenticated attacker to...5.3 Medium
- ivanti cloud services application, cloud services appliance +1 moreOS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote...9.1 Critical
- misskeyMisskey allows token to remain valid in cookie after signing out8.1 High
- ami aptiov, aptio v +1 moreBiosGuard Buffer Overflow and TOCTOU Vulnerability5.7 Medium
- devolutions serverImproper password reset in PAM Module in Devolutions Server 2024.3.10.0 and earlier allows an...5.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.12.2 improper Kubernetes connection settings could expose...7.7 High
- jetbrains teamcityIn JetBrains TeamCity before 2024.12.2 several DOM-based XSS were possible on the Code Inspection...4.6 Medium
- sinaptik ai pandasaiCVE-2024-123669.8 Critical
- octopus serverIn affected versions of Octopus Server it was possible for a user with sufficient access to set...5.9 Medium
- paoltaia geodirectory – wp business directory plugin and classified listings directoryGeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.97 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Display_name Parameter6.4 Medium
- supersaas – online appointment schedulingSuperSaaS – online appointment scheduling <= 2.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via after Parameter4.9 Medium
- siemens openv2gA vulnerability has been identified in OpenV2G (All versions < V0.9.6). The OpenV2G EXI parsing...6.9 Medium
- siemens simatic s7-1200 cpu 1211c ac/dc/rly, simatic s7-1200 cpu 1211c dc/dc/dc, simatic s7-1200 cpu 1211c dc/dc/rly +31 more +33 moreA vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0) ...7.1 High
- siemens simatic s7-1200 cpu 1211c ac/dc/rly, simatic s7-1200 cpu 1211c dc/dc/dc, simatic s7-1200 cpu 1211c dc/dc/rly +31 more +33 moreA vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0),...8.7 High
- siemens scalance wab762-1, scalance wam763-1, scalance wam763-1 (me) +14 more +16 moreA vulnerability has been identified in SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0) (All versions < V3...5.3 Medium
- siemens scalance wab762-1, scalance wam763-1, scalance wam763-1 (me) +14 more +16 moreA vulnerability has been identified in SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0) (All versions < V3...7.5 High
- siemens simatic ipc diagbase, simatic ipc diagmonitor +1 moreA vulnerability has been identified in SIMATIC IPC DiagBase (All versions), SIMATIC IPC...7.3 High
- siemens teamcenter, teamcenter v14.1, teamcenter v14.2 +4 more +6 moreA vulnerability has been identified in Teamcenter (All versions < V14.3.0.0). The SSO login...6.1 Medium
- siemens apogee pxc series (bacnet), apogee pxc series (p2 ethernet), talon tc series (bacnet) +2 moreA vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC...6.0 Medium
- siemens apogee pxc series (bacnet), apogee pxc series (p2 ethernet), talon tc series (bacnet) +2 moreA vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC...8.7 High
- siemens siprotec 5 6md84 (cp300), siprotec 5 6md85 (cp300), siprotec 5 6md86 (cp300) +45 more +47 moreA vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.90), SIPROTEC...8.7 High
- siemens modelsim, questa +1 moreA vulnerability has been identified in ModelSim (All versions < V2025.1), Questa (All versions <...5.4 Medium
- siemens siprotec 5 6md84 (cp300), siprotec 5 6md85 (cp200), siprotec 5 6md85 (cp300) +58 more +60 moreA vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions), SIPROTEC 5 6MD85 ...5.1 Medium
- siemens siprotec 5 6md84 (cp300), siprotec 5 6md85 (cp200), siprotec 5 6md85 (cp300) +58 more +60 moreA vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.90), SIPROTEC...7.0 High
- siemens simatic pcs neo v4.0, simatic pcs neo v4.1, simatic pcs neo v5.0 +4 more +6 moreA vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 ...8.7 High
- siemens scalance wab762-1, scalance wam763-1, scalance wam763-1 (me) +151 more +153 moreA vulnerability has been identified in SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0) (All versions < V3...6.9 Medium
- octopus serverIn affected versions of Octopus Server error messages were handled unsafely on the error page. If...1.8 Low
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp cpu 1510sp f-1 pn +98 more +100 moreThe login functionality of the web server in affected devices does not normalize the response...6.9 Medium
- octopus serverIn affected versions of Octopus Deploy it was possible to upload files to unexpected locations on...2.3 Low
- octopus serverIn affected versions of Octopus Server the preview import feature could be leveraged to identify...2.3 Low
- wattsense bridgeAuthenticated Arbitrary Python File Upload via Plugin Manager8.8 High
- wattsense bridgeWeak Hard-coded Credentials9.8 Critical
- wattsense bridgeAccess to Bootloader and Shell Over Serial Interface6.8 Medium
- wattsense bridgeUnprotected JTAG Interface6.1 Medium
- octopus serverIn affected versions of Octopus Deploy where customers are using Active Directory for...6.9 Medium
- gnu binutilsGNU Binutils ld elflink.c bfd_elf_reloc_symbol_deleted_p memory corruption2.3 Low
- gnu binutils, netapp active iq unified manager, ontap select deploy administration utility +2 moreGNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec memory corruption2.3 Low
- gnu binutilsGNU Binutils ld elf-eh-frame.c _bfd_elf_write_section_eh_frame memory corruption2.3 Low
- mvpthemes zox news - professional wordpress news & magazine themeZox News <= 3.17.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Modification8.8 High
- solarwinds platformSolarWinds Platform Information Disclosure Vulnerability3.5 Low
- Show moreLoading…