CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- cisco broadworksCisco BroadWorks Application Delivery Platform Software Cross-Site Scripting Vulnerability6.1 Medium
- cisco secure email, secure email gateway +1 moreCisco ESA mail Bypass5.8 Medium
- cisco session initiation protocol (sip) software, desk phone 9841 firmware, desk phone 9851 firmware +3 more +5 moreCisco Video Phone 8875 and Desk Phone 9800 Series Information Disclosure Vulnerability4.4 Medium
- ibm cognos controller, controller +1 moreIBM Cognos Controller code execution8.8 High
- ibm cognos controller, controller +1 moreIBM Cognos Controller cross-site scripting5.4 Medium
linuxUbuntu,linux-lowlatencyUbuntu +1 morelinux, linux-lowlatency vulnerabilitiesNo score- ibm cognos controller, controller +1 moreIBM Cognos Controller information disclosure5.9 Medium
- ibm cognos controller, controller +1 moreIBM Cognos Controller incorrect authorization6.5 Medium
- lmxcmslmxcms Maintenance db.inc.php code injection2.1 Low
- ibm cognos controller, controller +1 moreIBM Cognos Controller CSV injection8.0 High
- ibm cognos controller, controller +1 moreIBM Cognos Controller information disclosure8.8 High
- baiyi cloud asset management systemBaiyi Cloud Asset Management System admin.house.collect.php sql injection6.9 Medium
- eniture small package quotes, enituretechnology small package quotes – worldwide express edition +1 moreSmall Package Quotes – Worldwide Express Edition <= 5.2.18 - Unauthenticated SQL Injection7.5 High
- eniture small package quotes, enituretechnology small package quotes – usps edition +1 moreSmall Package Quotes – USPS Edition <= 1.3.5 - Unauthenticated SQL Injection7.5 High
- eniture small package quotes, enituretechnology small package quotes – for customers of fedex +1 moreSmall Package Quotes – For Customers of FedEx <= 4.3.1 - Unauthenticated SQL Injection7.5 High
- eniture ltl freight quotes, enituretechnology ltl freight quotes – saia edition +1 moreLTL Freight Quotes – SAIA Edition <= 2.2.10 - Unauthenticated SQL Injection7.5 High
- eniture ltl freight quotes, enituretechnology ltl freight quotes – abf freight edition +1 moreLTL Freight Quotes – ABF Freight Edition <= 3.3.7 - Unauthenticated SQL Injection7.5 High
- eniture ltl freight quotes, enituretechnology ltl freight quotes – r+l carriers edition +1 moreLTL Freight Quotes – R+L Carriers Edition <= 3.3.4 - Unauthenticated SQL Injection7.5 High
- wpmet elementskit elementor addons, roxnor elementskit elementor addons – advanced widgets & templates addons for elementor +1 moreElementsKit Elementor addons <= 3.4.0 - Unauthenticated Information Exposure via get_megamenu_content Function5.3 Medium
- eniture ltl freight quotes, enituretechnology ltl freight quotes – sefl edition +1 moreLTL Freight Quotes – SEFL Edition <= 3.2.4 - Unauthenticated SQL Injection7.5 High
- eniture ltl freight quotes, enituretechnology ltl freight quotes – tforce edition +1 moreLTL Freight Quotes – TForce Edition <= 3.6.4 - Unauthenticated SQL Injection7.5 High
- yaycommerce yaysmtp, yaysmtp and email logs: amazon ses, sendgrid, outlook, mailgun, brevo, google and any smtp service +1 moreYaySMTP 2.4.9 - 2.6.2 - Unauthenticated Stored Cross-Site Scripting7.2 High
- checkmkLDAP credentials logged to Apache error log5.6 Medium
- eniture ltl freight quotes, enituretechnology ltl freight quotes – old dominion edition +1 moreLTL Freight Quotes – Old Dominion Edition <= 4.2.10 - Unauthenticated SQL Injection7.5 High
- churchcrmSQL Injection in ChurchCRM CurrentFundraiser Parameter via BatchWinnerEntry.php9.3 Critical
- churchcrmSQL Injection in ChurchCRM CurrentFundraiser Parameter via DonatedItemEditor.php9.3 Critical
- churchcrmSQL Injection in ChurchCRM EID Parameter via EditEventAttendees.php9.3 Critical
- churchcrmSQL Injection in ChurchCRM EN_tyid Parameter via EditEventAttendees.php9.3 Critical
- eclipse foundation openvsx, eclipse open vsx +1 moreImproper Authorization in /user/namespace/{namespace}/details6.9 Medium
- churchcrmSession Hijacking via Reflected Cross-Site Scripting (XSS) in ChurchCRM EditEventAttendees.php EID Parameter8.4 High
- raptive adsRaptive Ads <= 3.6.3 - Reflected Cross-Site Scripting6.1 Medium
- raptive adsRaptive Ads <= 3.6.3 - Missing Authorization to Unauthenticated Data/Settings Reset5.3 Medium
- debounce email validatorDeBounce Email Validator <= 5.8.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting6.1 Medium
- exeebit disable auto updatesDisable Auto Updates <= 1.4 - Cross-Site Request Forgery to Auto-update Disable4.3 Medium
- portfoliohub wordpress portfolio builder – portfolio gallery, portfoliohub +1 moreWordPress Portfolio Builder – Portfolio Gallery <= 1.1.7 - Missing Authorization to Unauthenticated Portfolio Update5.3 Medium
- simply4net widget buy.box, getbuybox buybox widget +1 moreWidget BUY.BOX <= 3.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- apptivo business siteApptivo Business Site CRM <= 5.3 - Cross-Site Request Forgery to IP Address Block4.3 Medium
- labibahmed42 team builder for wpbakery page builder(formerly visual composer), webdevocean team-builder-for-wpbakery-page-builder +1 moreTeam Builder For WPBakery Page Builder(Formerly Visual Composer) <= 1.0 - Authenticated (Contributor+) Local File Inclusion7.5 High
- solwininfotech trash duplicate and 301 redirectTrash Duplicate and 301 Redirect <= 1.9 - Missing Authorization to Unauthenticated Arbitrary Post Deletion7.5 High
- pure-chat pure chat – live chat & more!, purechat pure chat +1 morePure Chat – Live Chat & More! <= 2.4 - Reflected Cross-Site Scripting via purechatWidgetName Parameter6.1 Medium
- store locator widgets locator widget, store-locator-pro store locator widget +1 moreStore Locator Widget <= 2025r1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- labibahmed42 team builder for wpbakery page builder(formerly visual composer), webdevocean team-builder-for-wpbakery-page-builder +1 moreTeam Builder For WPBakery Page Builder(Formerly Visual Composer) <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- wamasoftware categorized gallery pluginCategorized Gallery Plugin <= 2.0 - Authenticated (Contributor+) SQL Injection6.5 Medium
- umichitswebhosting umich oidc loginUMich OIDC Login <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- nida78 wp wiki tooltipWP Wiki Tooltip <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- canadahelps embedded donation formCanadaHelps Embedded Donation <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- ultradevs ultraembed – advanced iframe plugin for wordpress with gutenberg block includedUltraEmbed – Advanced Iframe Plugin For WordPress with Gutenberg Block Included <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- robertmsiaorg responsive flickr slideshowResponsive Flickr Slideshow <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- digihood html sitemapDigihood HTML Sitemap <= 3.1.1 - Reflected Cross-Site Scripting via 'channel'6.1 Medium
- berginformatik cosmic blocks (40+) content editor blocks collectionCosmic Blocks (40+) Content Editor Blocks Collection <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- Show moreLoading…