CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- yzncmsAn arbitrary file upload vulnerability in the plugin installation feature of YZNCMS v2.0.1 allows...4.4 Medium
- foxcmsAn arbitrary file upload vulnerability in the component \controller\LocalTemplate.php of FoxCMS...9.8 Critical
- foxcmsFoxCMS v1.2.5 was discovered to contain a remote code execution (RCE) vulnerability via the index...9.8 Critical
- jizhicmsJizhiCMS v2.5.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the component ...9.1 Critical
- jizhicmsAn arbitrary file upload vulnerability in the component \c\TemplateController.php of Jizhicms v2...9.8 Critical
- emlogAn arbitrary file upload vulnerability in the component admin\plugin.php of Emlog Pro v2.5.3...9.8 Critical
- phpgurukul land record systemA SQL Injection vulnerability was found in /admin/add-propertytype.php in PHPGurukul Land Record...5.5 Medium
- go ssh, golang.org/x/crypto golang.org/x/crypto/ssh +1 morePotential denial of service in golang.org/x/crypto7.5 High
- go jws, golang.org/x/oauth2 golang.org/x/oauth2/jws +1 moreUnexpected memory consumption during token parsing in golang.org/x/oauth27.5 High
- vishalmathur cloudclassroom-php projectA Cross Site Scripting vulnerability in CloudClassroom-PHP Project v1.0 allows a remote attacker...6.1 Medium
- tp-link tl-wr845n firmwareTL-WR845N(UN)_V4_200909 and TL-WR845N(UN)_V4_190219 was discovered to contain a hardcoded...9.8 Critical
- adacore ada web server, debian linux +1 moreWhen AdaCore Ada Web Server 25.0.0 is linked with GnuTLS, the default behaviour of AWS.Client is...7.4 High
- changeweb unifiedtransformUnifiedtransform v2.X is vulnerable to Incorrect Access Control. Unauthorized users can access...9.8 Critical
- jqlang jqjq v1.7.1 contains a stack-buffer-overflow in the decNumberCopy function within decNumber.c.8.1 High
- opswat metadefender kioskIn OPSWAT MetaDefender Kiosk before 4.7.0, arbitrary code execution can be performed by an attacker via the MD Kiosk Unlock Device feature for software encrypted USB drives.6.8 Medium
- sungrowpower winet-s firmwareSunGrow WiNet-S V200.001.00.P025 and earlier versions is missing integrity checks for firmware...7.5 High
- sungrowpower isolarcloudSunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct...9.1 Critical
- sungrowpower isolarcloudSunGrow iSolarCloud Android app V2.1.6.20241104 and prior suffers from Missing SSL Certificate...7.4 High
- sungrowpower isolarcloudSunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct...9.1 Critical
- sungrowpower isolarcloudSunGrow iSolarCloud Android application V2.1.6.20241017 and prior contains hardcoded credentials....9.8 Critical
- sungrowpower isolarcloudSunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct...9.1 Critical
- sungrowpower isolarcloudSunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct...9.1 Critical
- sungrowpower isolarcloudSunGrow iSolarCloud before the October 31, 2024 remediation, is vulnerable to insecure direct...9.1 Critical
- sungrowpower isolarcloudSunGrow iSolarCloud Android app V2.1.6.20241017 and prior uses an insecure AES key to encrypt...6.5 Medium
- helpdeskzA stored cross site scripting (XSS) vulnerability in HelpDeskZ < v2.0.2 allows remote attackers...4.8 Medium
- tenable identity exposureStored Credential Disclosure Vulnerability2.7 Low
- tenable identity exposureBroken Authorization Schema4.3 Medium
- hcl software mycloud, hcltech dryice mycloud +1 moreAn unauthenticated privilege escalation vulnerability affects HCL MyCloud5.3 Medium
- webdesigner-profi joomshopping, webdesigner-profi.de joomshopping component for joomla +1 moreExtension - webdesigner-profi.de - SQL injection in JoomShopping component version 1.0.0 - 5.5.5 for Joomla3.4 Low
- libreofficeExecutable hyperlink Windows path targets executed unconditionally on activation7.2 High
- nvidia cuda toolkitNVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the cuobjdump binary, where...2.8 Low
- nvidia cuda toolkitNVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the cuobjdump binary, where...2.8 Low
- zoom workplace, zoom communications, inc workplace apps and sdks, zoom meeting software development kit +3 more +5 moreZoom Workplace Apps and SDKs - Divide By Zero4.3 Medium
- zoom workplace, zoom communications, inc workplace apps and sdks, zoom meeting software development kit +3 more +5 moreZoom Workplace Apps and SDKs - Use After Free4.3 Medium
- zoom workplace, zoom communications, inc workplace apps and sdks, zoom meeting software development kit +3 more +5 moreZoom Workplace Apps and SDKs - Buffer Overflow4.3 Medium
- nvidia cuda toolkitNVIDIA CUDA toolkit for all platforms contains a vulnerability in the nvdisasm binary, where a...3.3 Low
- nvidia cuda toolkitNVIDIA CUDA toolkit for all platforms contains a vulnerability in the nvdisasm binary, where a...3.3 Low
- nvidia cuda toolkitNVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a...3.3 Low
- nvidia cuda toolkitNVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a...3.3 Low
- nvidia cuda toolkitNVIDIA CUDA toolkit for Windows contains a vulnerability in the cuobjdump binary, where a user...3.3 Low
- nvidia cuda toolkitNVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a...3.3 Low
- nvidia cuda toolkitNVIDIA CUDA toolkit for all platforms contains a vulnerability in the nvdisasm binary, where a...3.3 Low
- nvidia cuda toolkitNVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a...3.3 Low
- gradleGradle vulnerable to local privilege escalation through system temporary directory8.8 High
- nvidia igx orin, jetson agx orin series +1 moreNVIDIA Jetson Linux and IGX OS image contains a vulnerability in the UEFI firmware RCM boot mode,...7.6 High
- localsendLocalSend path traversal vulnerability in the file upload endpoint allows nearby devices to execute arbitrary commands6.3 Medium
- owasp-modsecurity modsecurityLibmodsecurity3 has possible bypass of encoded HTML entities7.9 High
- zoom communications, inc apps, zoom meeting software development kit, rooms +5 more +7 moreZoom Apps - Buffer Overflow8.5 High
- zoom communications, inc apps for macos, zoom meeting software development kit, rooms +2 more +4 moreZoom Apps for macOS - Symbolic Link Following5.4 Medium
- combodo itopCombodo iTop vulnerable to stored self Cross-site Scripting in preferences6.8 Medium
- Show moreLoading…