CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- synology active backup for business, active backup for business agent +1 moreImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in...2.7 Low
- synology active backup for business, active backup for business agent +1 moreImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in...6.5 Medium
- synology active backup for business, active backup for business agent +1 moreImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in...4.9 Medium
- schneider electric ecostruxure process expert, ecostruxure process expert for aveva system platform +1 moreCWE-269: Improper Privilege Management vulnerability exists for two services (of which one...8.5 High
- maximize simple video management systemSimple Video Management System <= 1.0.4 - Admin+ Stored XSS3.5 Low
- unknown everest formsEverest Forms < 3.0.8.1 - Admin+ Stored XSS3.5 Low
- unknown paid membership plugin, ecommerce, user registration form, login form, user profile & restrict content, properfraction profilepress +1 morePaid Membership Plugin < 4.15.20 - Admin+ Stored XSS3.5 Low
- properfraction profilepress, unknown paid membership plugin, ecommerce, user registration form, login form, user profile & restrict content +1 moreProfilePress < 4.15.20 - Admin+ Stored XSS4.8 Medium
- properfraction profilepress, unknown paid membership plugin, ecommerce, user registration form, login form, user profile & restrict content +1 moreProfilePress < 4.15.20 - Admin+ Stored XSS4.8 Medium
- alpium chalet-montagne.com toolsChalet Montagne Com Tools <= 2.7.8 - Reflected XSS6.1 Medium
- schneider electric asco 5310 single-channel remote annunciator, asco 5350 eight channel remote annunciator +1 moreCWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could render...7.2 High
- schneider electric asco 5310 single-channel remote annunciator, asco 5350 eight channel remote annunciator +1 moreCWE-319: Cleartext Transmission of Sensitive Information vulnerability exists that could result...8.7 High
- schneider electric asco 5310 single-channel remote annunciator, asco 5350 eight channel remote annunciator +1 moreCWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could...8.7 High
- schneider electric asco 5310 single-channel remote annunciator, asco 5350 eight channel remote annunciator +1 moreCWE-494: Download of Code Without Integrity Check vulnerability exists that could render the...7.2 High
- schneider electric uni-telway driver, uni-telway driver used in ecostruxure control expert, uni-telway driver used in ecostruxure process expert +2 more +4 moreCWE-20: Improper Input Validation vulnerability exists that could cause denial of service of...6.8 Medium
- apustheme campressCampress <= 1.35 - Unauthenticated Local File Inclusion9.8 Critical
- themerex puzzles, puzzles | wp magazine / review with store wordpress theme + rtl +1 morePuzzles <= 4.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- themerex puzzles, puzzles | wp magazine / review with store wordpress theme + rtl +1 morePuzzles | WP Magazine / Review with Store WordPress Theme + RTL <= 4.2.4 - Unauthenticated PHP Object Injection8.1 High
- rankmath rank math seo – ai seo tools to dominate seo rankings, seo +1 moreRank Math SEO <= 1.0.235 - Missing Authorization to Authenticated (Contributor+) Arbitrary Schema Deletion4.3 Medium
- rankmath rank math seo – ai seo tools to dominate seo rankings, seo +1 moreRank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.235 - Authenticated (Contributor+) Stored Cross-Site Scripting via Rank Math API6.4 Medium
ruby2.7Ubunturuby2.7 regressionNo score- detheme dethemekit for elementorDethemeKit For Elementor <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via De Gallery Widget6.4 Medium
- orthanc server, orthanc-server orthanc +1 moreOrthanc Server Missing Authentication for Critical Function9.2 Critical
- gitlabInsufficient Session Expiration in GitLab4.2 Medium
- gitlabExecution with Unnecessary Privileges in GitLab9.6 Critical
- gitlabExecution with Unnecessary Privileges in GitLab4.4 Medium
bloatyOSS-FuzzStack-buffer-overflow in absl::debugging_internal::ParseLocalNameSuffixNo score- tp-link tl-wr841nd firmwareA buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11, triggered by the...7.5 High
- tp-link tl-wr841nd v11 firmwareA buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the username and...4.9 Medium
- tp-link tl-wr841nd v11 firmwareA buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the 'gw' parameter...3.5 Low
- tp-link tl-wr841nd firmwareA buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the pskSecret...7.5 High
- tp-link tl-wr841nd firmwareA buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the 'ip' parameter...7.5 High
- phpgurukul land record systemA SQL Injection vulnerability was found in /admin/forgot-password.php in Phpgurukul Land Record...9.8 Critical
- phpgurukul land record systemA SQL Injection vulnerability was found in /admin/edit-propertytype.php in PHPGurukul Land Record...9.8 Critical
- phpgurukul land record systemA SQL Injection vulnerability was found in /admin/manage-propertytype.php in PHPGurukul Land...7.2 High
- phpgurukul land record systemA SQL Injection vulnerability was found in /admin/contactus.php in PHPGurukul Land Record System...7.2 High
- phpgurukul land record systemA SQL Injection vulnerability was found in /admin/bwdates-reports-details.php in PHPGurukul Land...7.2 High
- phpgurukul land record systemA SQL Injection vulnerability was found in /admin/bwdates-reports-details.php in PHPGurukul Land...7.2 High
- phpgurukul land record systemA SQL Injection was found in /admin/admin-profile.php in PHPGurukul Land Record System v1.0,...7.2 High
- phpgurukul land record systemA SQL Injection vulnerability was found in /admin/aboutus.php in PHPGurukul Land Record System v1...7.2 High
- No product listedA critical remote code execution (RCE) vulnerability exists in the web-based management interface...7.2 High
- No product listedA critical information disclosure vulnerability exists in the web-based management interface of...8.0 High
- No product listedA session hijacking vulnerability exists in the web-based management interface of GatesAir Maxiva...8.0 High
libpqAlmaLinux,postgresqlAlmaLinux,libecpg6TuxCare +103 more +105 morePostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation8.1 High- No product listedAn issue in Docker-proxy v18.09.0 allows attackers to cause a denial of service.6.8 Medium
- No product listedWazuh SIEM version 4.8.2 is affected by a broken access control vulnerability. This issue allows...7.3 High
- No product listedIn Perfex Crm < 3.2.1, an authenticated attacker can send a crafted HTTP POST request to the...6.8 Medium
- monicahq monicaMonica 4.1.2 is vulnerable to Cross Site Scripting (XSS). A malicious user can create a malformed...5.4 Medium
- No product listedA Stack buffer overflow in the arguments parameter in Immunity Inc. Immunity Debugger v1.85...5.5 Medium
- No product listedA Structured Exception Handler based buffer overflow vulnerability exists in Effectmatrix Total...5.5 Medium
- Show moreLoading…