CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- hikashop, hikashop.com hikashop component for joomla +1 moreExtension - hikashop.com - SQL injection in Hikashop component version 3.3.0 - 5.1.4 for Joomla7.2 High
- aureus erpLumsoft ERP ASPX File UploadAjaxAPI.ashx unrestricted upload6.9 Medium
- benner connectaBenner Connecta EditarLogado resource injection5.3 Medium
- 9001 copypartycopyparty renders unsanitized filenames as HTML when user uploads empty files3.6 Low
- benner modernanetBenner ModernaNet SG_Gravar cross-site request forgery5.3 Medium
- benner modernanetBenner ModernaNet SG_AlterarSenha cross-site request forgery5.3 Medium
- benner modernanetBenner ModernaNet GetImageMedico resource injection5.3 Medium
- benner modernanetBenner ModernaNet GetHorariosDoDia sql injection6.9 Medium
- benner modernanetBenner ModernaNet JS_CarregaCombo sql injection6.9 Medium
- seacmsSeacms <=13.3 is vulnerable to SQL Injection in admin_type_news.php.9.8 Critical
- seacmsSeacms <13.3 is vulnerable to SQL Injection in admin_pay.php.9.8 Critical
- seacmsSeacms <=13.3 is vulnerable to SQL Injection in admin_zyk.php.9.8 Critical
- seacmsSeacms <=13.3 is vulnerable to SQL Injection in admin_reslib.php.9.8 Critical
- seacmsSeacms <=13.3 is vulnerable to SQL Injection in admin_paylog.php.9.8 Critical
- seacmsSeacms <=13.3 is vulnerable to SQL Injection in admin_collect.php that allows an authenticated...8.8 High
- seacmsSeacms <=13.3 is vulnerable to SQL Injection in admin_collect_news.php.6.5 Medium
- No product listedAn issue was discovered in O-RAN Near Realtime RIC I-Release. To exploit this vulnerability, an...4.3 Medium
- No product listedAn issue was discovered in O-RAN Near Realtime RIC H-Release. To trigger the crashing of the...5.7 Medium
- No product listedAn issue was discovered in FlexRIC 2.0.0. It crashes during a Subscription Request denial-of...5.7 Medium
ffmpegMageia,ffmpeg-4openSUSE,ffmpeg-6openSUSE +1 more +3 moreUpdated ffmpeg packages fix security vulnerabilityNo score- go-joseGo JOSE's Parsing Vulnerable to Denial of Service6.6 Medium
- metabaseMetabase Enterprise Edition allows cached questions to leak data to impersonated users4.8 Medium
- labredescefetrj wegiaWeGIA vulnerable to OS Command Injection at endpoint 'importar_dump.php' parameter 'import' (RCE)10.0 Critical
- dependencytrack dependency-trackDependency-Track vulnerable to local file inclusion via custom notification templates4.4 Medium
- better-authbetter-auth before 1.1.20 Open Redirect via trustedOrigins Bypass7.1 High
- moodleSQL injection risk in course search module list filter8.1 High
- moodleTeachers can evade trusttext config when restoring glossary entries3.1 Low
- moodleIDOR in badges allows disabling of arbitrary badges3.1 Low
- moodleReflected XSS via question bank filter8.3 High
- moodleStored XSS risk in admin live log8.3 High
- moodleStored XSS in ddimageortext question type3.4 Low
- moodleNon-searchable tags can still be discovered on the tag search page and in the tags block5.3 Medium
- moodleFeedback response viewing and deletions did not respect Separate Groups mode6.5 Medium
- moodleArbitrary file read risk through pdfTeX8.6 High
- labredescefetrj wegiaWeGIA has SQL Injection endpoint at 'dao/pet/adicionar_tipo_exame.php' parameter 'tipo_exame'9.4 Critical
- navidromeNavidrome has authentication bypass in Subsonic API with non-existent username6.9 Medium
- better-auth better auth, better-auth +1 moreBeter Auth has an Open Redirect via Scheme-Less Callback Parameter6.9 Medium
- eaton network m2An improper input validation vulnerability was discovered in the NTP server configuration field...8.4 High
- musa avci önceki yazı linkWordPress Önceki Yazı Link Plugin <= 1.3 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- hardik sticky header on scrollWordPress Sticky Header On Scroll plugin <= 1.0 - Broken Access Control vulnerability5.4 Medium
- nicolas grillet woocommerce – loi hamonWordPress Woocommerce – Loi Hamon Plugin <= 1.1.0 - CSRF to Stored XSS vulnerability7.1 High
- bob namaste! lmsWordPress Namaste! LMS Plugin <= 2.6.5 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- wumii team 无觅相关文章插件WordPress 无觅相关文章插件 plugin <= 1.0.5.7 - CSRF to Cross Site Scripting (XSS) vulnerability7.1 High
- expertbusinesssearch local search seo contact pageWordPress Local Search SEO Contact Page plugin <= 4.0.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- nurelm get postsWordPress Get Posts plugin <= 0.6 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- daniel wp social seo booster – knowledge graph social signals seoWordPress WP Social SEO Booster plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- techmix direct checkout button for woocommerceWordPress Direct Checkout Button for WooCommerce plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- filipstepanov phee's linkpreviewWordPress Phee's LinkPreview Plugin <= 1.6.7 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- josesan woocommerce recargo de equivalenciaWordPress WooCommerce Recargo de Equivalencia Plugin <= 1.6.24 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- afzal du reactive mortgage calculatorWordPress Reactive Mortgage Calculator plugin <= 1.1 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- Show moreLoading…