CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- ffmpegFFmpeg AAC Encoder aacenc_tns.c ff_aac_search_for_tns stack-based overflow5.3 Medium
- mayurik best employee management systemSourceCodester Best Employee Management System Profile Picture unrestricted upload5.1 Medium
- mayurik best employee management systemSourceCodester Best Employee Management System Add Role Page Role.php cross site scripting4.8 Medium
- code-projects employee management systemSourceCodester Employee Management System Department Page department.php cross site scripting4.8 Medium
- janobe e-learning systemSourceCodester E-Learning System List of Lessons Page index.php unrestricted upload5.1 Medium
- janobe e-learning systemSourceCodester E-Learning System User Registration register.php cross site scripting5.3 Medium
- phpgurukul online nurse hiring systemPHPGurukul Online Nurse Hiring System manage-nurse.php path traversal6.9 Medium
tarteaucitronjsnpmtarteaucitron Cross-site Scripting (XSS)5.1 Medium- razormist telecom billing management systemSourceCodester Telecom Billing Management System Add New Record main.cpp addrecords buffer overflow4.8 Medium
- code-projects blood bank systemcode-projects Blood Bank System A-.php cross site scripting5.1 Medium
- otale taleotale header.html OptionsService cross site scripting4.8 Medium
- opensolon solonopensolon Solon StaticMappings.java path traversal5.3 Medium
- phpgurukul online nurse hiring systemPHPGurukul Online Nurse Hiring System search-report-details.php sql injection5.3 Medium
- phpgurukul online nurse hiring systemPHPGurukul Online Nurse Hiring System all-request.php sql injection5.3 Medium
- phpgurukul online nurse hiring systemPHPGurukul Online Nurse Hiring System book-nurse.php sql injection5.3 Medium
- phpgurukul nipah virus testing management systemPHPGurukul Nipah Virus Testing Management System search-report-result.php sql injection5.3 Medium
- code-projects blood bank systemcode-projects Blood Bank System user.php cross site scripting4.8 Medium
- campcodes online shopping portalPHPGurukul/Campcodes Online Shopping Portal search-result.php sql injection5.3 Medium
- code-projects blood bank systemcode-projects Blood Bank System prostatus.php cross site scripting5.1 Medium
- scottpaterson accept donations with paypal & stripeAccept Donations with PayPal & Stripe <= 1.4.4 - Reflected Cross-Site Scripting6.1 Medium
- code-projects real estate property management systemcode-projects Real Estate Property Management System ajax_state.php sql injection5.3 Medium
- harpia diagsystemHarpia DiagSystem atualatendimento_jpeg.php resource injection5.3 Medium
ndpiOSS-FuzzCheck failed in CheckUnwindNo scorendpiOSS-FuzzUNKNOWN READ in ndpi_strdupNo scorendpiOSS-FuzzUNKNOWN READ in processClientServerHelloNo scorenet-snmpOSS-FuzzHeap-buffer-overflow in setup_engineIDNo score- trend micro, inc. micro housecall for home networks, trendmicro housecall for home networks +1 moreTrend Micro HouseCall for Home Networks version 5.3.1302 and below contains an uncontrolled...7.3 High
- notfound chaty proWordPress Chaty Pro Plugin <= 3.3.3 - Arbitrary File Upload vulnerability10.0 Critical
- rock solid responsive modal builder for high conversion – easy popupsWordPress Responsive Modal Builder for High Conversion – Easy Popups plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- enituretechnology distance based shipping calculatorWordPress Distance Based Shipping Calculator plugin <= 2.0.22 - Settings Change vulnerability6.5 Medium
- metaslider responsive slider by metasliderWordPress Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider Plugin <= 3.94.0 - PHP Object Injection vulnerability9.8 Critical
- wow-company calculator builderWordPress Calculator Builder plugin <= 1.6.2 - Local File Inclusion vulnerability7.5 High
- full services customerWordPress FULL – Cliente plugin <= 3.1.26 - Local File Inclusion vulnerability7.5 High
- a1post a1post.bg shipping for wooWordPress A1POST.BG Shipping for Woo plugin <= 1.5 - CSRF to Privilege Escalation vulnerability8.8 High
- warfareplugins social warfareWordPress Social Warfare Plugin <= 4.5.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- grimdonkey magic the gathering card tooltipsWordPress Magic the Gathering Card Tooltips plugin <= 3.5.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- appsbd viteposWordPress Vitepos Plugin <= 3.1.3 - Broken Access Control vulnerability6.5 Medium
- imagination technologies graphics ddkGPU DDK - rgxfw_pcset_ungrab OOB write via psFWMemContext->uiPageCatBaseRegSet7.3 High
- imagination technologies graphics ddkGPU DDK - RGXFWIF_HWPERF_CTL_BLK.uiNumCounters OOB write7.8 High
- imagination technologies graphics ddkGPU DDK - rgxfw_hwr_log_info OOB write via psHWRInfoBuf->ui32WriteIndex3.3 Low
- imagination technologies graphics ddkGPU DDK - rgxfw_write_robustness_buffer allows arbitrary catreg set mapping7.9 High
- yaycommerce smtp for amazon ses – yaysmtpVulnerability: SMTP for Amazon SES <= 1.8 - Unauthenticated Stored Cross-Site Scripting via Email Logs7.2 High
- ofcms project ofcmsOFCMS cross-site request forgery5.3 Medium
- yaycommerce smtp for sendinblue – yaysmtp, yaysmtp +1 moreSMTP for Sendinblue – YaySMTP <= 1.2 - Unauthenticated Stored Cross-Site Scripting via Email Logs7.2 High
- yaycommerce smtp for sendgrid – yaysmtp, yaysmtp +1 moreSMTP for SendGrid – YaySMTP <= 1.4 - Unauthenticated Stored Cross-Site Scripting via Email Logs7.2 High
- wpvivid backup \& migration, wpvividplugins wpvivid — backup, migration & staging +1 moreMigration, Backup, Staging – WPvivid <= 0.9.112 - Authenticated (Admin+) Arbitrary File Upload via wpvivid_upload_file7.2 High
- westboy cicadascmswestboy CicadasCMS Template Management system deserialization5.1 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreusb: cdc-acm: Check control transfer buffer size before access7.8 High
- pankajindevops scalepankajindevops scale project cross site scripting5.1 Medium
- ip2location country blockerIP2Location Country Blocker <= 2.38.8 - Missing Authorization to Unauthenticated Information Exposure via admin_init Function7.5 High
- Show moreLoading…