CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- octokit request-error.js@octokit/request-error has a Regular Expression in index that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking5.3 Medium
- octokit plugin-paginate-rest.js@octokit/plugin-paginate-rest has a Regular Expression in iterator that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking5.3 Medium
- octokit endpoint.js@octokit/endpoint has a Regular Expression in parse that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking5.3 Medium
- mattermost, mattermost server +1 moreLeaked User IDs and Metadata of Deleted DMs3.1 Low
- vegaVega allows Cross-site Scripting via the vlSelectionTuples function6.9 Medium
orml-rewardscrates.ioUncaught Panic in ORML Rewards Pallet8.8 High- hp, inc. certain hp laserjet pro, hp laserjet enterprise, hp laserjet managed printers, hp 499m6a firmware, 499m7a firmware +96 more +98 moreCertain HP LaserJet Pro, HP LaserJet Enterprise, HP LaserJet Managed Printers – Potential Remote Code Execution and Potential Elevation of Privilege8.3 High
- hp, inc. certain hp laserjet pro, hp laserjet enterprise, hp laserjet managed printers, hp futuresmart 3, futuresmart 4 +1 more +3 moreCertain HP LaserJet Pro, HP LaserJet Enterprise, HP LaserJet Managed Printers – Potential Remote Code Execution and Potential Elevation of Privilege6.3 Medium
- hp, inc. certain hp laserjet pro, hp laserjet enterprise, hp laserjet managed printers, hp 499m6a firmware, 499m7a firmware +93 more +95 moreCertain HP LaserJet Pro, HP LaserJet Enterprise, HP LaserJet Managed Printers – Potential Remote Code Execution and Potential Elevation of Privilege9.2 Critical
- elabftwIncorrect input validation could allow an authenticated user to read sensitive information8.3 High
- cli`gh attestation verify` returns incorrect exit code during verification if no attestations are present6.3 Medium
- goodwe technologies co., ltd. gw1500‑xsUse of Hard-coded Credentials vulnerability in GoodWe Technologies Co., Ltd. GW1500‑XS allows...7.3 High
- python software foundation cpythonDefault mimetype known files writeable on Windows2.3 Low
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM cross-site scripting4.8 Medium
- humansignal label studio, label-studio +1 moreLabel Studio allows Server-Side Request Forgery in the S3 Storage Endpoint8.6 High
- humansignal label studio, label-studio +1 moreLabel Studio allows Cross-Site Scripting (XSS) via GET request to `/projects/upload-example` endpoint6.1 Medium
- humansignal label-studioLabel Studio has a Path Traversal Vulnerability via image Field8.7 High
- ibm power hardware management consoleIBM Power Hardware Management Console directory traversal6.5 Medium
- ibm iIBM i denial of service6.5 Medium
- apache eventmeshApache EventMesh: raft Hessian Deserialization Vulnerability allowing remote code execution9.8 Critical
- ptt inc. hgs mobile appSensitive Data Exposure in PTT Inc.'s HGS Mobile App8.5 High
- watchguard fireware, fireware os +1 moreWatchGaurd Firebox Host Header Injection Vulnerability5.1 Medium
- watchguard fireware osWatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Blocked Sites List4.8 Medium
- watchguard fireware, fireware os +1 moreWatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in spamBlocker Module4.8 Medium
- bss software mobuy online machinery monitoring panelSQLi in BSS Software's Mobuy Online Machinery Monitoring Panel10.0 Critical
- johannes van poelgeest admin options pagesWordPress Admin Options Pages plugin <= 0.9.7 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- godthor disqus popular postsWordPress Disqus Popular Posts plugin <= 2.1.1 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- themegoods photographyWordPress Photography Theme <= 7.7.2 - Broken Access Control Vulnerability6.3 Medium
- ability, inc accessibility suiteWordPress Accessibility Suite by Ability, Inc plugin <= 4.18 - Multiple Broken Access Control vulnerability6.3 Medium
- monetagwp monetag official pluginWordPress Monetag Official Plugin plugin <= 1.1.3 - Broken Access Control vulnerability7.2 High
- m.code bulk menu editWordPress Bulk Menu Edit plugin <= 1.3 - Broken Access Control vulnerability7.1 High
- brandtoss wp mailsterWordPress WP Mailster Plugin <= 1.8.20.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- xylus themes wp event aggregatorWordPress WP Event Aggregator Plugin <= 1.8.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- wow-company wp coderWordPress WP Coder Plugin <= 3.6 - CSRF to Cross Site Scripting (XSS) vulnerability7.1 High
- rickonline nl better wishlist apiWordPress Better WishList API plugin <= 1.1.3 - Stored Cross Site Scripting (XSS) vulnerability7.1 High
- acymailing newsletter team smtp newsletterWordPress AcyMailing Plugin < 9.11.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- uiux lab uix page builderWordPress Uix Page Builder Plugin <= 1.7.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- fatcatapps analytics catWordPress Analytics Cat Plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- agile logix post timelineWordPress Post Timeline Plugin <= 2.3.9 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- northern beaches websites ideapushWordPress IdeaPush plugin <= 8.71 - Broken Access Control vulnerability5.8 Medium
- sysbasics customize my account for woocommerceWordPress SysBasics Customize My Account for WooCommerce plugin <= 2.8.22 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- brandtoss wp mailsterWordPress WP Mailster plugin <= 1.8.16.0 - Sensitive Data Exposure vulnerability6.5 Medium
- tomáš groulík intro tour tutorial deeppresentationWordPress Intro Tour Tutorial DeepPresentation plugin <= 6.5.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- saleswonder team tobias wp2leadsWordPress WP2LEADS plugin <= 3.3.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- aviplugins.com contact form with shortcodeWordPress Contact Form With Shortcode plugin <= 4.2.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- crm perks perksWordPress CRM Perks plugin <= 1.1.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- awcode toolkitWordPress AWcode Toolkit plugin <= 1.0.14 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- notfound essential wp real estateWordPress Essential WP Real Estate Plugin <= 1.1.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- michelem nofollow freeWordPress NoFollow Free plugin <= 1.6.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- khushwant singh coronavirus (covid-19) outbreak data widgetsWordPress Coronavirus (COVID-19) Outbreak Data Widgets Plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- Show moreLoading…