CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- ffmpeg, debian linux +1 moreFFmpeg git-master,N-113007-g8d24a28d06 was discovered to contain a segmentation violation via the...6.5 Medium
ffmpegAlpine,ffmpeg-7openSUSE,libavUbuntu +2 moreA heap buffer overflow vulnerability in FFmpeg before commit 4bf784c allows attackers to trigger...5.3 MediumffmpegAlpine,ffmpeg-4openSUSE,ffmpeg-6openSUSE +2 more +4 moreA reachable assertion in FFmpeg git-master commit N-113007-g8d24a28d06 allows attackers to cause...6.5 Medium- denx u-bootsqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap...7.1 High
- denx u-boot, siemens ruggedcom rox mx5000, ruggedcom rox mx5000re +9 more +11 moreInteger overflows in memory allocation in Das U-Boot before 2025.01-rc1 occur for a crafted...7.1 High
- denx u-bootA stack consumption issue in sqfs_size in Das U-Boot before 2025.01-rc1 occurs via a crafted...2.0 Low
- denx u-boot, siemens ruggedcom rox mx5000, ruggedcom rox mx5000re +9 more +11 moreAn integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc ...7.1 High
- denx u-bootAn integer overflow in sqfs_resolve_symlink in Das U-Boot before 2025.01-rc1 occurs via a crafted...7.1 High
- denx u-bootAn integer overflow in sqfs_inode_size in Das U-Boot before 2025.01-rc1 occurs in the symlink...7.1 High
- No product listedIncorrect cookie session handling in WombatDialer before 25.02 results in the full session...5.4 Medium
- No product listedServer-Side Access Control Bypass vulnerability in WombatDialer before 25.02 could allow...5.0 Medium
- netgear dgn2200 firmwareA vulnerability in the Netgear DGN2200 router with firmware version v1.0.0.46 and earlier permits...8.8 High
- dlink dir-859 a3 firmwareA vulnerability in the D-Link DIR-859 router with firmware version A3 1.05 and earlier permits...9.8 Critical
- sagedpw sage dpwSage DPW before 2024_12_001 is vulnerable to Incorrect Access Control. The implemented role-based...8.1 High
- sagedpw sage dpwSage DPW before 2024_12_000 is vulnerable to Cross Site Scripting (XSS). Low-privileged Sage...5.4 Medium
- gnome libxml2, netapp active iq unified manager, h300s firmware +8 more +10 morelibxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in...7.8 High
- No product listedA time-based SQL injection vulnerability in the login page of BoardRoom Limited Dividend...9.8 Critical
- No product listedAn issue was discovered in Atos Eviden IDRA before 2.7.1. A highly trusted role (Config Admin)...8.0 High
- treasuredata fluent bitAn issue was discovered in Fluent Bit 3.1.9. When the OpenTelemetry input plugin is running and...7.5 High
- treasuredata fluent bitAn issue was discovered in Fluent Bit 3.1.9. When the Prometheus Remote Write input plugin is...7.5 High
- No product listedInsecure Permissions in Atos Eviden IDRA and IDCA before 2.7.0. A highly trusted role (Config...6.8 Medium
- No product listedIncorrect Access Control vulnerability in Atos Eviden IDRA before 2.6.1 could allow the...9.9 Critical
- netgear c7800 firmwareThe administrative web interface of a Netgear C7800 Router running firmware version 6.01.07 (and...6.4 Medium
- extra innovation inc. acmailer cgi, acmailer db +1 moreImproper neutralization of special elements used in an OS command ('OS Command Injection') issue...9.8 Critical
- jip infobridge co., ltd. filemeganeServer-side request forgery (SSRF) vulnerability exists in FileMegane versions above 3.0.0.0...7.2 High
- jip infobridge co., ltd. filemeganeAuthentication bypass by spoofing issue exists in FileMegane versions above 1.0.0.0 prior to 3.4...5.3 Medium
- d-link dir-816, dlink dir-816 firmware +1 moreD-Link DIR-816 index.html cross site scripting5.1 Medium
- sound4 ltd. streamStream <= 4.0.2 - Authenticated (Admin+) Server-Side Request Forgery5.5 Medium
- red hat build of keycloak, build of keycloak 26.0 +1 moreKeycloak-services: improper authorization in keycloak organization mapper allows unauthorized organization claims5.4 Medium
- dell networker, networker management console +1 moreDell NetWorker Management Console, version(s) 19.11 through 19.11.0.3 & Versions prior to 19.10.0...7.8 High
- mobatek mobaxtermInsecure storage of sensitive information in MobaXTerm <25.0.6.5 Medium
- bep imagemetaWordPress ImageMeta Plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- webjema wp-notcaptchaWordPress WP-NOTCAPTCHA Plugin <= 1.3.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- jordy meow galleryWordPress Gallery Custom Links Plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- realmag777 bear, pluginus bear - woocommerce bulk editor and products manager professional +1 moreWordPress BEAR Plugin <= 1.1.4.4 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- adnan analytify, analytify - google analytics dashboard +1 moreWordPress Analytify plugin <= 5.5.0 - Broken Access Control vulnerability4.3 Medium
- detheme dethemekit for elementorWordPress DethemeKit For Elementor plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- sktthemes skt blocksWordPress SKT Blocks plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- joe waymarkWordPress Waymark plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- webilia vertex addons for elementorWordPress Vertex Addons for Elementor plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- rebelcode spotlight social media feedsWordPress Spotlight Social Feeds plugin <= 1.7.1 - Sensitive Data Exposure vulnerability5.3 Medium
- bplugins timeline blockWordPress Timeline Block plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- abacus research ag abacusauthenticated arbitrary file read vulnerability6.5 Medium
- code-projects real estate property management systemcode-projects Real Estate Property Management System ajax_city.php sql injection5.3 Medium
- code-projects gym management systemCodezips Gym Management System del_plan.php sql injection5.3 Medium
- code-projects real estate property management systemcode-projects Real Estate Property Management System CustomerReport.php sql injection5.3 Medium
- txone networks safe lock, stellarenforce, stellarprotect (legacy mode) +2 moreTXOne Networks StellarProtect (Legacy Mode), StellarEnforce, and Safe Lock Improper Validation of Integrity Check Value Vulnerability5.4 Medium
- radare radare2radare2 rasm2 rasm2.c memory corruption4.8 Medium
- themescoder themes coderThemes Coder <= 1.3.4 - Unauthenticated SQLi8.6 High
- unknown owl carousel sliderWP Touch Slider <= 2.2 - Reflected XSS4.7 Medium
- Show moreLoading…