CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- No product listedImproper initialization in the firmware for some Intel(R) AMT and Intel(R) Standard Manageability...4.6 Medium
- No product listedImproper access control in some Intel(R) ME driver pack installer engines before version 2422.6.2...5.3 Medium
- No product listedImproper input validation in the firmware for some Intel(R) AMT and Intel(R) Standard...7.1 High
- No product listedImproper buffer restrictions in the UEFI firmware for some Intel(R) Processors may allow a...6.8 Medium
- No product listedImproper buffer restrictions in the UEFI firmware for some Intel(R) Processors may allow a...8.7 High
- No product listedStack-based buffer overflow in some drivers for Intel(R) Ethernet Connection I219 Series before...5.7 Medium
- No product listedImproper access control in some drivers for Intel(R) Ethernet Connection I219 Series before...5.7 Medium
- No product listedOut-of-bounds write in the Intel(R) 800 Series Ethernet Driver for Intel(R) Ethernet Adapter...7.1 High
- No product listedUncontrolled search path in some Intel(R) Ethernet Adapter Complete Driver Pack install before...5.4 Medium
- No product listedUncontrolled search path for some Intel(R) Chipset Software Installation Utility before version...5.4 Medium
- No product listedUncontrolled search path for some Intel(R) MPI Library for Windows software before version 2021...5.4 Medium
- intel advisor, oneapi base toolkit +1 moreUncontrolled search path for some Intel(R) Advisor software before version 2024.2 may allow an...5.4 Medium
- No product listedUncontrolled search path for some EPCT software before version 1.42.8.0 may allow an...5.4 Medium
- No product listedTime-of-check time-of-use race condition for some Intel(R) Battery Life Diagnostic Tool software...5.4 Medium
linuxRoot,linux-allwinner-5.19Ubuntu,linux-awsUbuntu +168 more +170 moreIncorrect execution-assigned permissions in the Linux kernel mode driver for the Intel(R) 800...2.0 Low- No product listedUncontrolled search path element in some BIOS and System Firmware Update Package for Intel(R)...5.4 Medium
- No product listedUncontrolled search path in some Intel(R) VPL software before version 2023.4.0 may allow an...5.4 Medium
- No product listedImproper access control in some Intel(R) GPA software before version 2024.3 may allow an...4.1 Medium
- No product listedIncorrect default permissions for some Intel(R) GPA and Intel(R) GPA Framework software...5.4 Medium
- No product listedImproper input validation in some Intel(R) Graphics Drivers may allow an authenticated user to...6.8 Medium
- No product listedImproper access control in some Intel(R) Graphics Driver software installers may allow an...5.4 Medium
- No product listedImproper access control in some Intel(R) Graphics software may allow an authenticated user to...8.5 High
- intel quickassist technologyImproper input validation for some Intel(R) QuickAssist Technology software before version 2.2.0...5.1 Medium
- No product listedUntrusted Pointer Dereference in I/O subsystem for some Intel(R) QAT software before version 2.0...4.3 Medium
- intel quickassist technologyUncontrolled search path for some Intel(R) QuickAssist Technology software before version 2.2.0...5.4 Medium
- intel quickassist technologyOut-of-bounds write for some Intel(R) QuickAssist Technology software before version 2.2.0 may...7.3 High
islandora/crayfishPackagistCrayfish Allows Remote Code Execution via hypercube X-Islandora-Args Header9.5 Critical- palo alto networks cortex xdr broker vmCortex XDR Broker VM: Unauthorized Access to Broker VM Docker Containers5.3 Medium
- palo alto networks pan-os openconfig pluginPAN-OS OpenConfig Plugin: Command Injection Vulnerability in OpenConfig Plugin8.6 High
- r1bbit yimioaywoa AddressDao.xml selectList sql injection5.3 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Authenticated File Read Vulnerability in the Management Web Interface7.1 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Unauthenticated File Deletion Vulnerability on the Management Web Interface6.9 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Authentication Bypass in the Management Web Interface8.8 High
- lenovo vantageAn improper privilege vulnerability was reported in a BIOS customization feature of Lenovo...8.5 High
- r1bbit yimioaywoa setup.jsp improper authorization6.9 Medium
- r1bbit yimioaywoa WXCallBack Interface XMLParse.java extract xml external entity reference5.3 Medium
ellipticnpm,node-ellipticDebian,@rootio/ellipticRoot +2 moreElliptic Cryptanalysis vulnerability when `k` has leading zeros5.6 Medium- r1bbit yimioaywoa UserMapper.xml listNameBySql sql injection5.3 Medium
- r1bbit yimioaywoa OaNoticeMapper.xml selectNoticeList sql injection5.3 Medium
- hashicorp nomad, nomad enterprise +1 moreNomad Vulnerable To Event Stream Namespace ACL Policy Bypass Through Wildcard Namespace7.1 High
- vim, netapp bootstrap os +1 morevim main.c memory corruption2.4 Low
- crowdstrike falcon container sensor, falcon kubernetes admission controller, falcon sensor for linux +2 moreCrowdStrike Falcon Sensor for Linux TLS Issue8.1 High
- jkroso parse-durationparse-duraton vulnerable to Regex Denial of Service that results in event loop delay and out of memory7.5 High
- advplyr audiobookshelfaudiobookshelf - %2F Encoding Discrepancy Bypasses Cover/Image Auth Exemption Regex, Enabling Unauthenticated Path Traversal7.5 High
- advplyr audiobookshelfRemote Authentication-Bypass can lead to server crash or limited information disclosure due to faulty pattern matching8.2 High
- nitrokey nitrokey-3-firmwareImproper Validation of Admin Key in PIV Smartcard4.0 Medium
- pihome-shc pihome, pihome maxair +1 morepihome-shc PiHome Role-Based Access Control user_accounts.php authorization5.3 Medium
- koajs koaKoa has Inefficient Regular Expression Complexity9.2 Critical
linux-awsUbuntulinux-aws vulnerabilitiesNo score- microsoft go-crypto-winnativeBCryptGenerateSymmetricKey memory leak7.5 High
- Show moreLoading…