CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- phpjabbers cinema booking systemPHPJabbers Cinema Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows...8.8 High
- phpjabbers meeting room booking systemA lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Meeting Room Booking...4.3 Medium
- phpjabbers cleaning business softwarePHPJabbers Cleaning Business Software v1.0 is vulnerable to CSV Injection vulnerability which...6.5 Medium
- phpjabbers cinema booking systemPHPJabbers Cinema Booking System v1.0 is vulnerable to Reflected Cross-Site Scripting (XSS) in...5.4 Medium
- phpjabbers cleaning business softwareA lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software...6.5 Medium
- phpjabbers cleaning business softwareA lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software...6.5 Medium
- phpjabbers shared asset booking systemPHPJabbers Shared Asset Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting...5.4 Medium
- phpjabbers shared asset booking systemPHPJabbers Shared Asset Booking System v1.0 is vulnerable to CSV Injection vulnerability which...6.5 Medium
- phpjabbers shared asset booking systemA lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Shared Asset Booking...6.5 Medium
- phpjabbers night club booking softwareA lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Night Club Booking...6.5 Medium
- phpjabbers night club booking softwarePHPJabbers Night Club Booking Software v1.0 is vulnerable to CSV Injection vulnerability which...5.3 Medium
- phpjabbers bus reservation systemPHPJabbers Bus Reservation System v1.1 is vulnerable to CSV Injection vulnerability which allows...8.8 High
- phpjabbers bus reservation systemPHPJabbers Bus Reservation System v1.1 is vulnerable to Multiple Stored Cross-Site Scripting (XSS...5.4 Medium
- phpjabbers restaurant booking systemPHPJabbers Restaurant Booking System v3.0 is vulnerable to Multiple HTML Injection in the "name,...6.5 Medium
- phpjabbers bus reservation systemA lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Bus Reservation System v1...7.5 High
- phpjabbers restaurant booking systemPHPJabbers Restaurant Booking System v3.0 is vulnerable to Multiple Stored Cross-Site Scripting ...5.4 Medium
- phpjabbers restaurant booking systemA lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers...7.5 High
- phpjabbers restaurant booking systemPHPJabbers Restaurant Booking System v3.0 is vulnerable to CSV Injection vulnerability which...8.8 High
- phpjabbers restaurant booking systemPHPJabbers Restaurant Booking System v3.0 is vulnerable to Reflected Cross-Site Scripting (XSS)...5.4 Medium
- phpjabbers car park booking systemPHPJabbers Car Park Booking System v3.0 is vulnerable to CSV Injection vulnerability which allows...8.8 High
- phpjabbers car park booking systemA lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Car Park...4.3 Medium
- phpjabbers car park booking systemA lack of rate limiting in the 'Email Settings' feature of PHPJabbers Car Park Booking System v3...4.3 Medium
- phpjabbers car park booking systemPHPJabbers Car Park Booking System v3.0 is vulnerable to Multiple HTML Injection in the "name,...6.1 Medium
- phpjabbers event ticketing systemPHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS...5.4 Medium
- palo alto networks cortex xdr agentCortex XDR Agent: Local Windows User Can Disable the Agent6.8 Medium
- hitachi vantara pentaho business analytics server, pentaho data integration & analytics +1 moreHitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization6.5 Medium
- hitachi vantara pentaho data integration & analytics, pentaho business analytics server +1 moreHitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentials6.3 Medium
- hitachi vantara pentaho business analytics server, pentaho data integration & analytics +1 moreHitachi Vantara Pentaho Business Analytics Server - Improper Handling of Insufficient Permissions or Privileges6.5 Medium
- citrix netscaler agent, netscaler console, iidk-the-actual console +1 more +3 moreAuthenticated privilege escalation8.8 High
- hitachi vantara pentaho business analytics server, pentaho data integration & analytics +1 moreHitachi Vantara Pentaho Business Analytics Server - Insufficient Granularity of Access Control4.9 Medium
- hitachi vantara pentaho business analytics server, pentaho data integration & analytics +1 moreHitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data9.9 Critical
- hitachi vantara pentaho business analytics server, pentaho data integration & analytics +1 moreHitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4.4 Medium
- hitachi vantara pentaho business analytics server, pentaho data integration & analytics +1 moreHitachi Vantara Pentaho Business Analytics Server – Server Side Request Forgery8.6 High
- hitachi vantara pentaho business analytics server, pentaho data integration & analytics +1 moreHitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization8.8 High
- hitachi vantara pentaho data integration & analytics, pentaho business analytics server +1 moreHitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection')8.8 High
- microsoft power pagesMicrosoft Power Pages Elevation of Privilege Vulnerability8.2 High
- microsoft bingMicrosoft Bing Remote Code Execution Vulnerability8.6 High
- cmu ghostsPath Traversal Vulnerability in GHOSTS Photo Retrieval Endpoint8.7 High
- bishopfox sliverServer-Side Request Forgery (SSRF) in sliver teamserver6.9 Medium
- openfga, openfga helm charts +1 moreOpenFGA Authorization Bypass5.8 Medium
- symantec diagnostic toolSymantec Diagnostic Tool (SymDiag), prior to 3.0.79, may be susceptible to a Privilege Escalation...7.8 High
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- autheliaRegulation applies separately to Username-based logins to Email-based logins in authelia2.3 Low
- google chromeHeap buffer overflow in GPU in Google Chrome on Android prior to 133.0.6943.126 allowed a remote...8.8 High
- google chromeUse after free in Network in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to...8.8 High
- google chromeHeap buffer overflow in V8 in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to...8.8 High
- dell client platform bios, alienware m15 r6 firmware, alienware m15 r7 firmware +390 more +392 moreDell Client Platform BIOS contains a Weak Authentication vulnerability. A high privileged...8.2 High
- directusOverlapping policies allow update to non-allowed fields in directus5.4 Medium
linux-awsUbuntu,linux-azureUbuntu,linux-gcpUbuntu +3 more +5 morelinux-aws, linux-azure, linux-gcp, linux-oracle, linux-raspi, linux-realtime vulnerabilitiesNo score- ibm cognos controller, controller +1 moreIBM Cognos Controller XML external entity injection8.2 High
- Show moreLoading…