CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- labredescefetrj wegiaSQL Injection endpoint 'informacao_adicional.php' parameter 'id_descricao' in WeGIA10.0 Critical
- labredescefetrj wegiaSQL Injection endpoint 'documento_excluir.php' parameter 'id_funcionario' in WeGIA10.0 Critical
- labredescefetrj wegiaSQL Injection endpoint 'dependente_docdependente.php' parameter 'id_dependente', 'id_doc' in WeGIA10.0 Critical
- labredescefetrj wegiaSQL Injection endpoint 'familiar_docfamiliar.php' parameter 'id_dependente', 'id_doc' in WeGIA10.0 Critical
- labredescefetrj wegiaSQL Injection endpoint 'restaurar_produto_desocultar.php' parameter 'id_produto' in WeGIA9.4 Critical
- labredescefetrj wegiaSQL Injection endpoint 'remover_produto.php' parameter 'id_produto' in WeGIA10.0 Critical
- labredescefetrj wegiaSQL Injection endpoint 'adicionar_almoxarife.php' parameter 'id_almoxarifado', 'id_funcionario' in WeGIA10.0 Critical
- labredescefetrj wegiaOS Command Injection endpoint 'gerenciar_backup.php' parameter 'file' (RCE) in WeGIA10.0 Critical
- labredescefetrj wegiaSQL Injection endpoint 'deletar_documento.php' parameter 'id_cargo' in WeGIA9.4 Critical
- labredescefetrj wegiaPath Traversal endpoint 'examples.php' parameter 'src' in WeGIA10.0 Critical
- labredescefetrj wegiaPath Traversal endpoint 'exportar_dump.php' parameter 'file' in WeGIA10.0 Critical
- labredescefetrj wegiaSQL Injection endpoint 'historico_paciente.php' parameter 'id_fichamedica' in WeGIA10.0 Critical
- videowhisper paid videochat turnkey siteWordPress Paid Videochat Turnkey Site plugin <= 7.2.12 - Arbitrary File Deletion vulnerability8.6 High
- vito peleg atarimWordPress Atarim plugin <= 4.0.9 - Arbitrary Content Deletion vulnerability7.5 High
- oscar alvarez cookie monsterWordPress Cookie Monster Plugin <= 1.2.2 - Local File Inclusion vulnerability8.1 High
- kodeshpa simplifiedWordPress Simplified Plugin Plugin <= 1.0.6 - Arbitrary File Upload vulnerability10.0 Critical
- erez hadas-sonnenschein smartargetWordPress Smartarget.online Integration plugin <= 1.5.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- rameez iqbal real estate managerWordPress Real Estate Manager plugin <= 7.3 - Captcha Bypass Vulnerability vulnerability5.3 Medium
- notfound distance rate shipping for woocommerceWordPress Distance Rate Shipping for WooCommerce plugin <= 1.3.4 - SQL Injection vulnerability8.5 High
- seventhqueen k elementsWordPress K Elements plugin < 5.4.0 - Unauthenticated Account Takeover vulnerability9.8 Critical
- awsm.in drivr lite – google drive pluginWordPress Drivr Lite – Google Drive Plugin plugin <= 1.0.1 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- quanticalabs medicenter - health medical clinicWordPress MediCenter theme < 14.7 - Sensitive Data Exposure vulnerability5.3 Medium
- exiv2Use After Free in Exiv25.3 Medium
- discord-agora kernelPossibility to retrieve bot token by malicious module developers in Discord-Bot-Framework-Kernel8.3 High
- vim, netapp hci compute node +1 moreheap-use-after-free in function str_to_reg in vim/vim4.2 Medium
- home-assistant coreSSL validation for outgoing requests in Home Assistant Core and used libs not correct7.0 High
- zoo-projectPath Traversal and Local File Read via VRT (Virtual Format) in ZOO-Project WPS Implementation8.7 High
- italia cie-aspnetcoreSAML Response Signature Verification Bypass in CIE.AspNetCore.Authentication9.1 Critical
- italia spid-aspnetcoreSAML Response Signature Verification Bypass in SPID.AspNetCore.Authentication9.1 Critical
- meshtastic firmwareForged packets over MQTT can show up in direct messages in Meshtastic firmware5.3 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: fs/hfs: integer overflow may lead to heap based out-of-bounds write7.8 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: commands/dump: the dump command is not in lockdown when secure boot is enabled4.4 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: read: integer overflow may lead to out-of-bounds write6.1 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: udf: heap based buffer overflow in grub_udf_read_block() may lead to arbitrary code execution7.8 High
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: romfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading dat6.4 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: jfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data6.4 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: reiserfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data6.4 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +5 more +7 moreGrub2: squash4: integer overflow may lead to heap based out-of-bounds write when reading data7.8 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: ufs: integer overflow may lead to heap based out-of-bounds write when handling symlinks6.4 Medium
- red hat enterprise linux 10, enterprise linux 7 extended lifecycle support, enterprise linux 8 +19 more +21 moreGrub2: net: out-of-bounds write in grub_net_search_config_file()7.6 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: command/gpg: use-after-free due to hooks not being removed on module unload6.4 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: fs/hfs+: refcount can be decremented twice4.4 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +5 more +7 moreGrub2: fs/hfs: strcpy() using the volume name (fs/hfs.c:382)7.8 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: fs/ufs: oob write in the heap6.7 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: fs/tar: integer overflow causes heap oob write6.7 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: fs/bfs: integer overflow leads to heap oob read in the bfs parser6.0 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +5 more +7 moreGrub2: fs/bfs: integer overflow in the bfs parser.4.1 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +5 more +7 moreGrub2: grub-core/gettext: integer overflow leads to heap oob write.6.7 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: grub-core/gettext: integer overflow leads to heap oob write and read.6.7 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: commands/extcmd: missing check for failed allocation5.2 Medium
- Show moreLoading…