CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- ibm openpages with watsonIBM OpenPages improper certificate validation6.8 Medium
- ibm openpages with watsonIBM OpenPages data manipulation4.3 Medium
- ibm openpages with watsonIBM OpenPages log manipulation5.3 Medium
- wiresharkUncontrolled Recursion in Wireshark7.8 High
- hashicorp hermes, tooling +1 moreHashiCorp Hermes Improperly Validates AWS ALB JWTs, which May Lead to Authentication Bypass8.2 High
- citrix secure access client for mac, secure access client +1 moreAn attacker can gain application privileges in order to perform limited modification and/or read arbitrary data5.8 Medium
- citrix secure access client for mac, secure access client +1 moreAn attacker can gain application privileges in order to perform limited modification and/or read arbitrary data5.8 Medium
- No product listedSitecore Experience Manager (XM) and Experience Platform (XP) 10.4 before KB1002844 allow remote...5.3 Medium
- libmingMultiple memory leaks have been identified in the clip actions parsing functions ...6.5 Medium
- libmingMultiple memory leaks have been identified in the ABC file parsing functions ...6.5 Medium
- libmingA memory leak has been identified in the parseSWF_DEFINESCENEANDFRAMEDATA function in util/parser...6.5 Medium
- libmingA memory leak has been identified in the parseSWF_FILTERLIST function in util/parser.c of libming...6.5 Medium
- libmingA memory leak has been identified in the parseSWF_IMPORTASSETS2 function in util/parser.c of...6.5 Medium
- libmingA memory leak has been identified in the readSizedString function in util/read.c of libming v0.4...6.5 Medium
- libmingA memory leak has been identified in the parseSWF_SOUNDINFO function in util/parser.c of libming...8.2 High
- libmingA memory leak has been identified in the parseSWF_EXPORTASSETS function in util/parser.c of...8.2 High
- yandaozi ppressA stored Cross Site Scripting vulnerability in the "related recommendations" feature in Ppress v...6.5 Medium
- ddsn cm3 acora content management systemDDSN Interactive cm3 Acora CMS version 10.1.1 contains an improper access control vulnerability....6.0 Medium
- phpcmsCross Site Scripting vulnerability in phpcmsv9 v.9.6.3 allows a remote attacker to escalate...6.1 Medium
- phpcmsCross Site Scripting vulnerabilities in phpcmsv9 v.9.6.3 allows a remote attacker to escalate...5.4 Medium
- xunruicmsCross Site Scripting vulnerabilities in Xunruicms v.4.6.3 and before allows a remote attacker to...6.1 Medium
- tenda i12 firmwareTenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the index parameter in...8.0 High
- tenda i12 firmwareTenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the funcpara1 parameter...9.8 Critical
- tenda i12 firmwareTenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the list parameter in...9.8 Critical
- tenda ac10 firmwareTenda AC10 V1.0 V15.03.06.23 has a command injection vulnerablility located in the formexeCommand...9.8 Critical
- tenda ac10 firmwareTenda AC10 V1.0 V15.03.06.23 is vulnerable to Buffer Overflow in form_fast_setting_wifi_set via...9.8 Critical
- tenda ac8 firmwareTenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the shareSpeed parameter...9.8 Critical
- tenda ac8 firmwareTenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the urls parameter in the...9.8 Critical
- tenda ac8 firmwareTenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the shareSpeed parameter...9.8 Critical
- tenda ac8 firmwareA vulnerability was found in Tenda AC8V4 V16.03.34.06. Affected is the function SUB_0046AC38 of...9.8 Critical
- tenda o4 firmwareTenda O4 V3.0 V1.0.0.10(2936) is vulnerable to Buffer Overflow in the function SafeSetMacFilter...9.8 Critical
- litespeedtech lsquicA hash collision vulnerability (in the hash table used to manage connections) in LSQUIC (aka...5.3 Medium
- privateoctopus picoquicThe hash table used to manage connections in picoquic before b80fd3f uses a weak hash function,...5.3 Medium
- ptrd kwikKwik hash collision vulnerability5.3 Medium
- qibosoft qibocms x1An issue in QiboSoft QiboCMS X1.0 allows a remote attacker to obtain sensitive information via...7.5 High
AutoQueryableNuGetAutoQueryable leaks sensitive information7.5 High- No product listedSQL Injection vulnerability in Uniclare Student portal v.2 and before allows a remote attacker to...9.8 Critical
- No product listedMasterSAM Star Gate 11 is vulnerable to directory traversal via /adama/adama/downloadService. An...6.5 Medium
- nagios xiNagios XI 2024R1.2.2 has an Information Disclosure vulnerability, which allows unauthenticated...6.5 Medium
- nagios xiA SQL Injection vulnerability in Nagios XI 2024R1.2.2 allows a remote attacker to execute SQL...6.5 Medium
- nagios xiNagios XI 2024R1.2.2 is vulnerable to a Cross-Site Request Forgery (CSRF) attack through the...6.1 Medium
- nagios xiNagios XI 2024R1.2.2 is susceptible to a stored Cross-Site Scripting (XSS) vulnerability in the...6.1 Medium
- No product listedA remote code execution (RCE) vulnerability in the ZScript function of ZDoom Team GZDoom v4.13.1...9.8 Critical
- No product listedAn issue was discovered in Atos Eviden BullSequana XH2140 BMC before C4EM-125: OMF_C4E 101.05...7.7 High
- phpjabbers event ticketing systemA lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Event Ticketing System v1...6.5 Medium
- phpjabbers meeting room booking systemPHPJabbers Meeting Room Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting...5.4 Medium
- phpjabbers event ticketing systemPHPJabbers Event Ticketing System v1.0 is vulnerable to Reflected Cross-Site Scripting (XSS) in ...5.4 Medium
- phpjabbers meeting room booking systemPHPJabbers Meeting Room Booking System v1.0 is vulnerable to CSV Injection vulnerability which...8.8 High
- phpjabbers cinema booking systemPHPJabbers Cinema Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS)...6.5 Medium
- phpjabbers cinema booking systemA lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cinema Booking System v1.0...5.3 Medium
- Show moreLoading…