CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- hclsoftware devops deploy, ibm urbancode deploy +1 moreIBM DevOps Deploy / IBM UrbanCode Deploy command injection7.2 High
- broadcom brocade sannav, brocade sannav +1 moreClear text password seen in switch-asset-collectors-mw in Brocade SANnav supportsave5.5 Medium
net-snmpOSS-FuzzHeap-buffer-overflow in snmp_config_whenNo scorenet-snmpOSS-FuzzIndex-out-of-bounds in ada_fuzz_header.hNo scorenet-snmpOSS-FuzzHeap-buffer-overflow in snmp_log_optionsNo score- getmonero moneroMonero through 0.18.3.4 before ec74ff4 does not have response limits on HTTP server connections.8.6 High
- logpoint agentxAn issue was discovered in Logpoint AgentX before 1.5.0. A vulnerability caused by limited access...6.9 Medium
- strongkey fido serverStrongKey FIDO Server before 4.15.1 treats a non-discoverable (namedcredential) flow as a...8.4 High
- musl-libc muslmusl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an...8.1 High
- kashipara online attendance management systemA Stored Cross-Site Scripting (XSS) vulnerability was discovered in the manage-employee.php page...5.6 Medium
- darkseid beauty parlour management systemA SQL Injection vulnerability was found in /bpms/index.php in Source Code and Project Beauty...5.9 Medium
- phpgurukul online shopping portal projectA SQL Injection vulnerability was found in /shopping/track-orders.php in PHPGurukul Online...8.8 High
- feminer wms project wmsDirectory Traversal vulnerability in FeMiner wms v.1.0 allows a remote attacker to obtain...7.5 High
- feminer wms project wmsSQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive...7.5 High
- feminer wms project wmsSQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive...5.1 Medium
- feminer wms project wmsSQL Injection vulnerability in FeMiner wms 1.0 allows a remote attacker to obtain sensitive...5.1 Medium
- hooskSQL Injection vulnerability in hooskcms v.1.7.1 allows a remote attacker to obtain sensitive...5.1 Medium
- hooskCross Site Scripting vulnerability in hooskcms v.1.7.1 allows a remote attacker to obtain...6.1 Medium
- hooskCross Site Scripting vulnerability in hooskcms v.1.8 allows a remote attacker to cause a denial...4.8 Medium
- dlink dir-853 firmwareD-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability...8.8 High
- dlink dir-853 firmwareD-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability...5.5 Medium
- google chromeUse after free in Navigation in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to...8.1 High
- google chromeInappropriate implementation in Browser UI in Google Chrome on Android prior to 133.0.6943.98...5.4 Medium
- google chromeUse after free in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to...8.8 High
- mispapp/Model/Attribute.php in MISP before 2.4.198 ignores an ACL during a GUI attribute search.4.3 Medium
- No product listedIXON B.V. IXrouter IX2400 (Industrial Edge Gateway) v3.0 was discovered to contain hardcoded root...5.4 Medium
- No product listedAn issue in Orbe ONetView Roeador Onet-1200 Orbe 1680210096 allows a remote attacker to escalate...8.8 High
- No product listedAn issue in the Arcadyan Livebox Fibra PRV3399B_B_LT allows a remote or local attacker to modify...6.5 Medium
- No product listedInsecure Permissions vulnerability in Alvaria, Inc Unified IP Unified Director before v.7.2SP2...9.8 Critical
- zf rssplus 2mZF Roll Stability Support Plus (RSSPlus) Authentication Bypass By Primary Weakness5.9 Medium
- qardio qardioarm, heart health android mobile application, heart health ios mobile application +2 moreQardio Heart Health IOS and Android Application and QardioARM A100 Uncaught Exception6.1 Medium
- qardio heart health android mobile application, heart health ios mobile application +1 moreQardio iOS and Android applications Files or Directories Accessible to External Parties6.9 Medium
- zulipZulip events can leak private channel names4.3 Medium
- qardio heart health ios mobile application, qardio +1 moreQardio Heart Health IOS Mobile Application Exposure of Private Personal Information to an Unauthorized Actor6.2 Medium
- myscada mypro, mypro manager +1 moremySCADA myPRO Manager OS Command Injection9.3 Critical
- myscada mypro, mypro manager +1 moremySCADA myPRO Manager Cross-Site Request Forgery5.1 Medium
- myscada mypro, mypro manager +1 moremySCADA myPRO Manager Cleartext Storage of Sensitive Information9.2 Critical
- myscada mypro, mypro manager +1 moremySCADA myPRO Manager Missing Authentication for Critical Function10.0 Critical
- outback power mojave inverter, outbackpower mojave inverter oghi8048a firmware +1 moreOutback Power Mojave Inverter Command Injection8.7 High
- outback power mojave inverter, outbackpower mojave inverter oghi8048a firmware +1 moreOutback Power Mojave Inverter Exposure of Sensitive Information to an Unauthorized Actor8.7 High
- outback power mojave inverter, outbackpower mojave inverter oghi8048a firmware +1 moreOutback Power Mojave Inverter Use of GET Request Method With Sensitive Query Strings8.7 High
- dingtian dt-r002, dt-r008, dt-r016 +5 more +7 moreDingtian DT-R0 Series Authentication Bypass Using an Alternate Path or Channel9.3 Critical
nodejs-nodemonRocky Linux,nodejs-packagingRocky Linux +1 moreImportant: nodejs:20 security updateNo score- lexmark international cx, xc, cs, et. al.Access of Resource Using Incompatible Type in Postscript interpreter7.3 High
- lexmark cx, xc, cs, ms, mx, xm, et. al.Access of Resource Using Incompatible Type in Postscript interpreter7.3 High
- lexmark cx, xc, cs, ms, mx, xm, et. al.Type confusion vulnerability in the Postscript interpreter in various Lexmark devices7.3 High
- lexmark cx, xc, cs, ms, mx, xm, et. al.Combination Path Traversal and Concurrent Execution vulnerability exists within the embedded web server9.1 Critical
- lexmark cx, xc, cs, ms, mx, xm, et. al.Heap-based memory vulnerability in the Postscript interpreter in various Lexmark devices7.3 High
- freedomofpress securedrop-clientPath traversal in sd-log Qubes virtual machine4.5 Medium
- freedomofpress securedrop-clientPath traversal in SecureDrop Client API.download_reply()8.1 High
- Show moreLoading…