CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- mailcow mailcow-dockerized, mailcow\ +1 moremailcow: dockerized vulnerable to password reset poisoning7.1 High
- drupal configuration splitConfiguration Split - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-0176.8 Medium
- drowl spamspan filterSpamSpan filter - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-0166.1 Medium
- drupal open socialOpen Social - Less critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-0158.1 High
- drupal open socialOpen Social - Moderately critical - Access bypass - SA-CONTRIB-2025-0149.1 Critical
- progress software corporation progress® telerik® reporting, progress telerik reporting +1 moreAbsolute Path Traversal Vulnerability5.3 Medium
- pihome-shc pihome, pihome maxair +1 morepihome-shc PiHome index.php cross site scripting5.1 Medium
- anisha wazifa systemcode-projects Wazifa System control.php sql injection5.3 Medium
- anisha wazifa systemcode-projects Wazifa System search_resualts.php searchuser cross site scripting5.1 Medium
- progress software progress® telerik® document processing libraries, progress telerik document processing libraries +1 moreTelerik Document Processing RTF Export of Arbitrary File Path7.1 High
- rackPossible Log Injection in Rack::CommonLogger5.7 Medium
- progress kendo ui for vue, progress software progress® telerik® kendo ui for vue +1 morePrototype Pollution in Progress® Telerik® Kendo UI for Vue4.1 Medium
- gchq stroomStroom Authentication/Authorization Bypass when using AWS ALB9.4 Critical
- anisha wazifa systemcode-projects Wazifa System Profile.php cross site scripting5.1 Medium
- progress telerik document processing librariesTelerik Document Processing Path Traversal8.3 High
- progress kendoreact, progress software telerik kendoreact +1 morePrototype Pollution in Progress® Telerik® KendoReact4.1 Medium
- phjounin tftpd64phjounin TFTPD64 DNS denial of service2.3 Low
- gitlabUnintended Proxy or Intermediary ('Confused Deputy') in GitLab4.3 Medium
- gitlabIncorrect Authorization in GitLab4.3 Medium
- progress software progress® telerik® ui for winforms, progress telerik ui for winforms +1 moreProgress UI for WinForms decompression path traversal vulnerability7.8 High
- progress telerik report serverTelerik Report Server Clear Text Transmission of Agent Commands8.8 High
- progress telerik ui for winuiImproper neutralization special element in hyperlinks7.8 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab8.7 High
- gitlabExposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab4.3 Medium
- gitlabFiles or Directories Accessible to External Parties in GitLab4.9 Medium
- code-projects gym management systemCodezips Gym Management System viewdetailroutine.php sql injection5.3 Medium
- mayurik best church management softwareSourceCodester Best Church Management Software edit_slider.php sql injection5.3 Medium
- mayurik best church management softwareSourceCodester Best Church Management Software profile_crud.php sql injection5.3 Medium
- linux, linux kernel +1 moregfs2: Truncate address space when flipping GFS2_DIF_JDATA flag7.8 High
- linux, linux kernel +1 moreRevert "libfs: fix infinite directory reads for offset dir"7.1 High
- hcl software connections docsHCL Connections Docs is vulnerable to a sensitive information disclosure3.9 Low
- mayurik best church management softwareSourceCodester Best Church Management Software slider_crud.php sql injection5.3 Medium
- q-free maxtimeA CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or...8.8 High
- q-free maxtimeA CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or...8.1 High
- q-free maxtimeA CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or...6.5 Medium
- q-free maxtimeA CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or...8.8 High
- q-free maxtimeA CWE-862 "Missing Authorization" in maxprofile/users/routes.lua (users endpoint) in Q-Free...6.5 Medium
- q-free maxtimeA CWE-862 "Missing Authorization" in maxprofile/users/routes.lua (user endpoint) in Q-Free...6.5 Medium
- q-free maxtimeA CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less...7.1 High
- q-free maxtimeA CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less...8.8 High
- q-free maxtimeA CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less...7.1 High
- q-free maxtimeA CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less...8.8 High
- q-free maxtimeA CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less...8.1 High
- q-free maxtimeA CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less...4.3 Medium
- q-free maxtimeA CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free...7.5 High
- q-free maxtimeA CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free...7.5 High
- q-free maxtimeA CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free...7.5 High
- q-free maxtimeA CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free...7.5 High
- q-free maxtimeA CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free...7.5 High
- Show moreLoading…