CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- zoom communications, inc apps for macos, zoom meeting software development kit, rooms +2 more +4 moreZoom Apps for macOS - Uncontrolled Resource Consumption6.0 Medium
- zoom workplace, zoom communications, inc workplace apps, zoom meeting software development kit +4 more +6 moreZoom Workplace Apps - Incorrect Ownership Assignment4.9 Medium
- zoom workplace, zoom communications, inc workplace apps, zoom meeting software development kit +4 more +6 moreZoom Workplace Apps - Incorrect User Management4.9 Medium
- zoom workplace, zoom communications, inc workplace apps, zoom meeting software development kit +4 more +6 moreZoom Workplace Apps - Business Logic Error5.3 Medium
- odoo, odoo community, enterprise +2 moreImproper access control in mail module of Odoo Community 17.0 and Odoo Enterprise 17.0 allows...7.5 High
- matrix irc bridge, matrix-org matrix-appservice-irc +1 moreMatrix IRC Bridge allows IRC command injection to own puppeted user2.7 Low
- infiniflow ragflowRAGFlow SQL Injection vulnerability8.9 High
- odoo, odoo community, enterprise +2 moreImproper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0...8.1 High
- glpi-project glpiGLPI allows unauthorized access to debug mode6.5 Medium
- glpi-project glpiGLPI vulnerable to unauthorized authentication by email using the OAuthIMAP plugin6.3 Medium
- contec health cms8000 patient monitorThe "update" binary in the firmware of the affected product sends attempts to mount to a hard...7.7 High
- esri arcgis allsource, arcgis pro +1 moreThere is a code injection vulnerability in Esri ArcGIS AllSource7.3 High
- esri arcgis pro, arcgis allsource +1 moreThere is a code injection vulnerability in ArcGIS Pro7.3 High
- glpi-project glpiGLPI: Plugins are disabled accessing one page6.9 Medium
- glpi-project glpiGLPI Cross-site Scripting vulnerability6.5 Medium
- glpi-project glpiGLPI vulnerable to exposure of sensitive information in the `status.php` endpoint5.8 Medium
- glpi-project glpiGLPI index.php redirect5.3 Medium
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: use-after-free in syncinittrigger()7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: use-after-free in playreleasedevents()7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: use of uninitialized pointer in compredirectwindow()7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: out-of-bounds write in createpointerbarrierclient()7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: buffer overflow in xkbchangetypesofkey()7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: heap overflow in xkbwritekeysyms()7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg: xwayland: buffer overflow in xkbvmodmasktext()7.8 High
- x.org x server, xwayland, red hat enterprise linux 10 +18 more +20 moreX.org: xwayland: use-after-free of the root cursor7.8 High
- jupyterhub ltiauthenticator, jupyter lti jupyterhub authenticator +1 moreJupyterHub's LTI13Authenticator: JWT signature not validated10.0 Critical
- anton vanyukov market exporterWordPress Market Exporter plugin <= 2.0.21 - Broken Access Control vulnerability5.4 Medium
- vito peleg atarimWordPress Visual Website Collaboration Atarim plugin <= 4.1.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- ollybach wppizzaWordPress WPPizza plugin <= 3.19.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- wpzoom recipe card blocks for gutenberg & elementorWordPress Recipe Card Blocks for Gutenberg & Elementor plugin <= 3.4.3 - Broken Access Control vulnerability4.3 Medium
- accessibe web accessibility by accessibeWordPress Web Accessibility By accessiBe plugin <= 2.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- wired impact volunteer managementWordPress Wired Impact Volunteer Management plugin <= 2.5 - Stored Cross Site Scripting (XSS) vulnerability6.5 Medium
- aman funnel builder by funnelkitWordPress Funnel Builder by FunnelKit plugin <= 3.9.0 - Local File Inclusion vulnerability7.5 High
- ninja team filebirdWordPress FileBird plugin <= 6.4.2.1 - Insecure Direct Object References (IDOR) vulnerability3.8 Low
- wp chill strong testimonialsWordPress Strong Testimonials plugin <= 3.2.3 - Broken Access Control vulnerability5.3 Medium
- wpexperts.io wp multistore locatorWordPress WP Multi Store Locator plugin <= 2.5.1 - SQL Injection vulnerability9.3 Critical
- ays pro poll makerWordPress Poll Maker <= 5.6.5 - SQL Injection vulnerability7.6 High
- aldo latino privatecontentWordPress PrivateContent plugin <= 8.11.5 - Unauthenticated Account Takeover vulnerability9.8 Critical
- ameliabooking ameliaWordPress Amelia plugin <= 1.2.16 - Insecure Direct Object References (IDOR) vulnerability5.3 Medium
- arraytics eventinWordPress Eventin plugin <= 4.0.20 - Local File Inclusion vulnerability7.5 High
- clickwhaleWordPress ClickWhale plugin <= 2.4.3 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability5.4 Medium
- ghozylab easy contact form liteWordPress Contact Form Plugin plugin <= 1.1.25 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- enituretechnology small package quotes – unishippers editionWordPress Small Package Quotes – Unishippers Edition plugin <= 2.4.9 - Broken Access Control vulnerability6.5 Medium
- deetronix affiliate couponsWordPress Affiliate Coupons plugin <= 1.7.3 - Local File Inclusion vulnerability7.5 High
- bplugins business card blockWordPress Business Card Block plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- bplugins team section blockWordPress Team Section Block plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- notfound pie register premiumWordPress Pie Register Premium plugin <= 3.8.3.2 - Broken Access Control vulnerability4.3 Medium
- bplugins services section blockWordPress Services Section block plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- jgwhite33 wp yelp review sliderWordPress WP Yelp Review Slider Plugin <= 8.1 - SQL Injection vulnerability7.6 High
- bplugins info cardsWordPress Info Cards plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- Show moreLoading…