CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- nvidia nvjpeg2000NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause an out-of-bounds...6.8 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, radeon™ instinct™ mi25 +29 more +31 moreImproper input validation in AMD Crash Defender could allow an attacker to provide the Windows®...5.5 Medium
dcmtkDebiandcmtk - regression updateNo score- cactiCacti through 1.2.29 allows SQL injection in the template function in host_templates.php via the...7.6 High
- dlink dir-853 firmwareD-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability...9.8 Critical
- dlink dir-853 firmwareD-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability...9.8 Critical
- dlink dir-853 firmwareD-Link DIR-853 A1 FW1.20B07 was discovered to contain a command injection vulnerability in the...7.2 High
- dlink dir-853 firmwareD-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability...9.8 Critical
- dlink dir-853 firmwareD-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability...5.4 Medium
- phpgurukul daily expense tracker systemPHPGurukul Daily Expense Tracker System v1.1 is vulnerable to SQL Injection in /dets/add-expense...9.8 Critical
- phpgurukul daily expense tracker systemPHPGurukul Daily Expense Tracker System v1.1 is vulnerable to SQL Injection in /dets/add-expense...9.8 Critical
- tenda ac6 firmwareTenda AC6 V15.03.05.16 firmware has a buffer overflow vulnerability in the formexeCommand function.9.8 Critical
- red hat builds for red hat openshift 1.3.2, enterprise linux 10, enterprise linux 6 +14 more +16 moreEmacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme8.8 High
- thedaylightstudio fuel cmsCross Site Scripting vulnerability in Daylight Studio Fuel CMS v.1.5.2 allows an attacker to...5.4 Medium
- mayswind ezbookkeepingMaysWind ezBookkeeping has Improper Privilege Management9.8 Critical
- mayswind ezbookkeepingMissing rate limit in MaysWind ezBookkeeping6.3 Medium
- easyappointmentsEasy!Appointments Improper Restriction of Excessive Authentication Attempts9.8 Critical
- easyappointmentsRemote code execution in alextselegidis/easyappointments6.1 Medium
- learndashAn issue in the profile image upload function of LearnDash v6.7.1 allows attackers to cause a...7.5 High
- learndashLearnDash v6.7.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in...5.4 Medium
- learndashLearnDash v6.7.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in...5.4 Medium
- lf projects opensearchdashboards-reporting (aka Dashboards Reports) before 2.19.0.0, as shipped in OpenSearch before 2...6.4 Medium
- No product listedAn issue in Nothing Tech Nothing OS v.2.6 allows a local attacker to escalate privileges via the...7.8 High
- No product listedDirectory Traversal vulnerability in yeqifu carRental v.1.0 allows a remote attacker to obtain...7.5 High
- No product listedAn issue in Zertificon Z1 SecureMail Z1 SecureMail Gateway 4.44.2-7240-debian12 allows a remote...7.5 High
- No product listedCross Site Scripting vulnerability in Zertificon Z1 SecureMail Z1 CertServer v.3.16.4-2516...6.1 Medium
- samsung exynos 1480 firmware, exynos 2200 firmware, exynos 2400 firmware +2 moreAn issue was discovered in Samsung Mobile Processor Exynos 2200, 1480, and 2400. The absence of a...7.5 High
- samsung exynos 1480 firmware, exynos 2400 firmware +1 moreAn issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The absence of a null...7.5 High
intel-microcodeDebian,intel-ucodeAlpaquita,microcodeMageia +2 more +4 moreImproper handling of physical or environmental conditions in some Intel(R) Processors may allow...5.7 Mediumintel-microcodeDebian,intel-ucodeAlpaquita,microcodeMageia +2 more +4 moreSequence of processor instructions leads to unexpected behavior in the Intel(R) DSA V1.0 for some...4.9 Medium- No product listedA directory traversal vulnerability exists in the Mavenir SCE Application Provisioning Portal,...3.5 Low
- No product listedAn authorization bypass vulnerability exists in the Mavenir SCE Application Provisioning Portal,...8.8 High
- cisco anyconnect secure mobility client, secure client +1 moreCisco AnyConnect Secure Mobility Client for Mac OS File Corruption Vulnerability5.6 Medium
- amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7003 processors, epyc™ 9004 processors +22 more +24 moreImproper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM,...7.5 High
- nvidia igx orin, jetson agx orin series (including jetson orin nx series, jetson orin nano series) +1 moreNVIDIA Jetson AGX Orin™ and NVIDIA IGX Orin software contain a vulnerability where an attacker...7.5 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, instinct™ mi300a +22 more +24 moreImproper access control in the ASP could allow a privileged attacker to perform an out-of-bounds...5.0 Medium
- convoypanel panelCtrlpanel has stored XSS vulnerability in TicketsController priority field8.1 High
- amd epyc™ 9004 processors, epyc™ embedded 9004 +1 moreA bug in the SEV firmware may allow an attacker with privileges to read unencrypted memory,...6.0 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7003 processors +25 more +27 moreImproper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM,...7.5 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7003 processors +25 more +27 moreImproper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM,...7.5 High
- winzipWinZip 7Z File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- osgeo geonetwork, geonetwork core-geonetwork +1 moreGeoNetwork vulnerable to search end-point information disclosure in response headers0.0 None
- amd ryzen™ 4000 series desktop processor with radeon™ graphics, ryzen™ 4000 series mobile processors with radeon™ graphics, ryzen™ 5000 series desktop processor with radeon™ graphics +11 more +13 moreImproper access control in the DRTM firmware could allow a privileged attacker to perform...3.0 Low
- jack hopman wpgatewayWPGateway <= 3.5 - Unauthenticated Privilege Escalation9.8 Critical
- amd epyc™ 9004 processors, epyc™ embedded 9004 +1 moreImproper handling of invalid nested page table entries in the IOMMU may allow a privileged...5.3 Medium
- amd epyc™ 9004 processors, epyc™ embedded 9004 +1 moreImproper access control in the IOMMU may allow a privileged attacker to bypass RMP checks,...2.5 Low
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, ryzen™ 3000 series desktop processors +23 more +25 moreImproper access control in the fTPM driver in the trusted OS could allow a privileged attacker to...5.7 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics, ryzen™ 4000 series desktop processor with radeon™ graphics, ryzen™ 4000 series mobile processors with radeon™ graphics +12 more +14 moreAn integer overflow in the ASP could allow a privileged attacker to perform an out-of-bounds...2.3 Low
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, ryzen™ 3000 series desktop processors +25 more +27 moreSMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally...8.2 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 processors +34 more +36 moreImproper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to...8.2 High
- Show moreLoading…