CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- dell supportassist os recoveryDell SupportAssist OS Recovery versions prior to 5.5.13.1 contain a symbolic link attack...7.0 High
- zettler 130.8005A CWE-1392 “Use of Default Credentials” was discovered affecting the 130.8005 TCP/IP Gateway...7.6 High
- zettler 130.8005A CWE-598 “Use of GET Request Method with Sensitive Query Strings” was discovered affecting the...5.7 Medium
- zettler 130.8005A CWE-126 “Buffer Over-read” was discovered affecting the 130.8005 TCP/IP Gateway running...7.6 High
- netapp instaclustr fork of stratio's cassandra-lucene-index pluginCassandra-Lucene-Index allows bypass of Cassandra RBAC8.8 High
- lakejason0 mediawiki-skins-lakeusLakeus vulnerable to stored XSS via system messages4.7 Medium
- whisperfish libsignal-service-rslibsignal-service-rs doesn't sanity check plaintext envelopes are not sanity-checked8.5 High
- whisperfish libsignal-service-rslibsignal-service-rs Doesn't Check Origin of Sync Messages8.5 High
- kubernetes kubeletNode Denial of Service via kubelet Checkpoint API6.2 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morenet: avoid race between device unregistration and ethnl ops7.8 High
- petkivim embed google mapWordPress Embed Google Map plugin <= 3.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- dan rossiter prezi embedderWordPress Prezi Embedder plugin <= 2.1 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- blackbam tinymce advanced qtranslate fix editor problemsWordPress TinyMCE Advanced qTranslate fix editor problems plugin <= 1.0.0 - CSRF to Stored XSS vulnerability7.1 High
- complete seo page/post specific social share buttonsWordPress Page/Post Specific Social Share Buttons plugin <= 2.1 - CSRF to Stored XSS vulnerability7.1 High
- mathieuhays simple documentationWordPress Simple Documentation plugin <= 1.2.8 - CSRF to Stored XSS vulnerability7.1 High
- daxiawp dx-auto-publishWordPress DX-auto-publish plugin <= 1.2 - CSRF to Stored XSS vulnerability7.1 High
- moch amir google drive wp mediaWordPress Google Drive WP Media plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- jesseheap wp phplistWordPress WP PHPList Plugin <= 1.7 - CSRF to Stored XSS vulnerability7.1 High
- wibiya toolbarWordPress Wibiya Toolbar plugin <= 2.0 - CSRF to Stored XSS vulnerability7.1 High
- uamv glance thatWordPress Glance That plugin <= 4.9 - CSRF to Stored XSS vulnerability7.1 High
- callmeforsox post thumbsWordPress Post Thumbs Plugin <= 1.5 - CSRF to Stored XSS vulnerability7.1 High
- jensmueller easy amazon product informationWordPress Easy Amazon Product Information plugin <= 4.0.1 - CSRF to Stored XSS vulnerability7.1 High
- farjana55 font awesome wpWordPress Font Awesome WP plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- shambhu patnaik rss filterWordPress RSS FIlter Plugin <= 1.2 - CSRF to Stored Cross Site Scripting (XSS) vulnerability7.1 High
- elfsight yottie liteWordPress Elfsight Yottie Lite Plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- mkkmail aparat responsiveWordPress Aparat Responsive plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- badrhan naver syndication v2WordPress Naver Syndication V2 plugin <= 0.8.3 - CSRF to Stored Cross-Site Scripting vulnerability7.1 High
- sureshdsk bootstrap collapseWordPress Bootstrap collapse plugin <= 1.0.4 - CSRF to Stored Cross-Site Scripting vulnerability7.1 High
- kunal shivale global meta keyword & descriptionWordPress Global Meta Keyword & Description plugin <= 2.3 - CSRF to Cross-Site Scripting vulnerability7.1 High
- pa1 wp html page sitemapWordPress WP Html Page Sitemap plugin <= 2.2 - CSRF to Stored Cross-Site Scripting7.1 High
- nagarjunsonti my login logout pluginWordPress My Login Logout Plugin plugin <= 2.4 - CSRF to Stored Cross-Site Scripting vulnerability7.1 High
- shisuh related posts line-up-exactly by milliardWordPress Related Posts Line-up-Exactly by Milliard plugin <= 0.0.22 - CSRF to Stored XSS vulnerability7.1 High
- pukhraj suthar simple responsive menuWordPress Simple Responsive Menu plugin <= 2.1 - CSRF to Stored XSS vulnerability7.1 High
- red hat build of apache camel 4.8 for quarkus 3.15, build of quarkus 3.15.3.sp1, build of quarkus 3.8.6.sp3 +2 moreIo.quarkus:quarkus-rest: quarkus rest endpoint request parameter leakage due to shared instance8.3 High
- anapi h6webReflected Cross-Site Scripting (XSS) vulnerability in H6Web6.1 Medium
- anapi h6webInsecure direct object reference (IDOR) vulnerability in H6Web9.1 Critical
- chimpstudio wp directorybox managerWP Directorybox Manager <= 2.5 - Authentication Bypass9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet: sched: Disallow replacing of child qdisc from one parent to another7.8 High
- wiselyhub js help desk, rabilal js help desk – ai-powered support & ticketing system +1 moreJS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory7.5 High
- tangiblewp listivo, listivo - classified ads wordpress theme +1 moreListivo - Classified Ads WordPress Theme <= 2.3.67 - Reflected Cross-Site Scripting6.1 Medium
- apache atlasApache Atlas: An authenticated user can perform XSS and potentially impersonate another user7.1 High
- gitlabImproper Neutralization of Input Used for LLM Prompting in GitLab6.4 Medium
ansibleUbuntuansible regressionNo score- edmon.parker read more & accordion, edmonsoft read more \& accordion +1 moreRead More & Accordion <= 3.4.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary 'Read More' Post Deletion4.3 Medium
- theme-fusion avada builder, themefusion avada (fusion) builder +1 moreAvada Builder <= 3.11.13 - Unauthenticated Arbitrary Shortcode Execution7.3 High
- detheme dethemekit for elementorDethemeKit For Elementor <= 2.1.8 - Authenticated (Contributor+) Protected Post Disclosure4.3 Medium
- theme-fusion avada, themefusion avada | website builder for wordpress & woocommerce +1 moreAvada Theme <= 7.11.13 - Unauthenticated Arbitrary Shortcode Execution7.3 High
- schneider electric enerlin’x eife (lv851001), enerlin’x ife interface (lv434001) +1 moreCWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the...6.9 Medium
- schneider electric enerlin’x eife (lv851001), enerlin’x ife interface (lv434001) +1 moreCWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the...7.1 High
- schneider electric enerlin’x eife (lv851001), enerlin’x ife interface (lv434001) +1 moreCWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the...7.1 High
- Show moreLoading…