CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)7.5 High
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)8.7 High
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Incorrect Authorization (CWE-863)8.2 High
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Business Logic Errors (CWE-840)5.3 Medium
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Incorrect Authorization (CWE-863)4.3 Medium
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)8.7 High
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Access Control (CWE-284)6.5 Medium
- adobe commerce, commerce b2b +1 moreAdobe Commerce | Improper Access Control (CWE-284)6.5 Medium
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)8.7 High
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Information Exposure (CWE-200)6.5 Medium
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Access Control (CWE-284)4.3 Medium
- adobe photoshop elementsPhotoshop Elements | Creation of Temporary File in Directory with Incorrect Permissions (CWE-379)5.5 Medium
- salesforce tableau server, tableau server +1 moreServer Side Request Forgery vulnerability in Tableau Server7.7 High
- adobe substance3d - designer, substance 3d designer +1 moreSubstance3D - Designer | Out-of-bounds Write (CWE-787)7.8 High
- adobe illustratorIllustrator | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- adobe illustratorIllustrator | Stack-based Buffer Overflow (CWE-121)7.8 High
- adobe illustratorIllustrator | Use After Free (CWE-416)7.8 High
- atlassian jira data center, jira server +1 moreAn exploitable CSRF vulnerability exists in Atlassian Jira, from versions 7.6.4 to 8.1.0. The...4.3 Medium
- adobe incopyInCopy | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | NULL Pointer Dereference (CWE-476)5.5 Medium
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Improper Input Validation (CWE-20)5.5 Medium
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | NULL Pointer Dereference (CWE-476)5.5 Medium
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Out-of-bounds Write (CWE-787)7.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Out-of-bounds Write (CWE-787)7.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Out-of-bounds Read (CWE-125)5.5 Medium
- avaya spacesAvaya Spaces HTML injection (HTMLi) Vulnerability7.3 High
- avaya spacesAvaya Spaces XSS Vulnerability7.9 High
- fortinet fortios, fortiproxy, fortios and fortiproxy +2 moreAn Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting...8.1 High
- lexmark print management clientLexmark has identified a vulnerability in our Lexmark Print Management Client (LPMC).9.3 Critical
- dell ucc edge, utility configuration collector edge +1 moreDell UCC Edge, version 2.3.0, contains a Blind SSRF on Add Customer SFTP Server vulnerability. An...7.9 High
opensslUbuntuopenssl vulnerabilitiesNo score- fortinet fortisandboxAn improper neutralization of input during web page generation ('cross-site scripting') in...6.9 Medium
- fortinet fortisiemMultiple Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...2.2 Low
- fortinet fortianalyzer, fortianalyzer cloud, fortimanager +2 more +4 moreAn improper neutralization of special elements used in an OS command ('OS Command Injection')...6.8 Medium
- fortinet fortianalyzer, fortimanager +1 moreAn improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability ...5.9 Medium
- fortinet forticlient, forticlientwindows +1 moreAn Improper Access Control vulnerability [CWE-284] in FortiClient Windows version 7.4.0, version...6.3 Medium
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreA use of externally-controlled format string vulnerability [CWE-134] in Fortinet FortiOS version...6.3 Medium
- fortinet fortiwebAn improper neutralization of special elements used in an os command ('os command injection') in...6.8 Medium
- fortinet fortimanager, fortimanager cloud +1 moreA use of hard-coded cryptographic key to encrypt sensitive data vulnerability [CWE-321] in...3.9 Low
- fortinet fortiosAn incorrect privilege assignment vulnerability [CWE-266] in Fortinet FortiOS version 7.6.0, 7.4...8.0 High
- fortinet fortiosA stack-based buffer overflow [CWE-121] vulnerability in Fortinet FortiOS version 7.2.4 through 7...7.7 High
- fortinet fortianalyzerAn exposure of sensitive information to an unauthorized actor in Fortinet FortiAnalyzer 6.4.0...2.2 Low
- fortinet forticlient, forticlientmac +1 moreAn improper authentication in Fortinet FortiClientMac 7.0.11 through 7.2.4 allows attacker to...5.8 Medium
- fortinet fortiwebA improper neutralization of special elements used in an os command ('os command injection') in...6.3 Medium
- fortinet fortiportalAn Improper Resolution of Path Equivalence vulnerability [CWE-41] in FortiPortal 7.4.0 through 7...8.1 High
- distributionDistribution's token authentication allows attacker to inject an untrusted signing key in a JWT6.6 Medium
- nexryai concordeConcorde not removing authentication tokens after logging out9.4 Critical
- Show moreLoading…