CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- ibm entirexIBM EntireX information disclosure3.3 Low
- yukseloglu filter b2b login platformSQLi in Yukseloglu Filter's B2B Login Platform9.8 Critical
- revmakx defendwp firewallWordPress DefendWP Firewall Plugin <= 1.1.0 - Broken Access Control vulnerability7.6 High
- e-kent pallium vehicle trackingInformation Disclosure in E-Kent's Pallium Vehicle Tracking8.2 High
- spotipy-dev spotipySpotipy's cache file, containing spotify auth token, is created with overly broad permissions8.4 High
- boss media buddyboss platform, buddyboss platform +1 moreBuddyBoss Platform <= 2.7.70 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'link_title'6.4 Medium
- trivision camera nc227wfMultiple vulnerabilities in Trivision Camera NC227WF7.1 High
- mongodb mongoshMongoDB Shell may be susceptible to control character Injection via shell output3.9 Low
- mongodb mongoshMongoDB Shell may be susceptible to control character injection via pasting6.3 Medium
- mongodb mongoshMongoDB Shell may be susceptible to Control Character Injection via autocomplete7.6 High
- trivision camera nc227wfMultiple vulnerabilities in Trivision Camera NC227WF6.2 Medium
- atisoluciones cigesSQL Injection CIGES9.8 Critical
- libmodbusStack-based Buffer Overflow in libmodbus library4.8 Medium
- jegtheme jeg elementor kit, jeg kit for elementor – powerful addons for elementor, widgets & templates for wordpress +1 moreJeg Elementor Kit <= 2.6.11 - Authenticated (Contributor+) Sensitive Information Exposure via Countdown and Off-Canvas4.3 Medium
chromiumopenSUSESecurity update for chromiumNo score- premio floating chat widget, floating chat widget: contact chat icons, telegram chat, line messenger, wechat, email, sms, call button – chaty +1 moreFloating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button, WhatsApp – Chaty <= 3.3.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting6.4 Medium
- techeshta card elements for elementorCard Elements for Elementor <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Profile Card Widget6.4 Medium
tomcat9TuxCare,libtomcat9-embed-javaTuxCare,libtomcat9-javaTuxCare +5 more +7 moreUpdate of tomcat9No score- thememakers car dealer automotive wordpress theme – responsive, car dealer automotive +1 moreCar Dealer Automotive WordPress Theme – Responsive <= 1.6.3 - Authenticated (Subscriber+) Arbitrary File Deletion and Read8.8 High
- thememakers stripe checkoutThemeMakers Stripe Checkout <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- pluginly login me now, login me now – passwordless, magic link, otp & social login for wordpress +1 moreLogin Me Now <= 1.7.2 - Authentication Bypass8.1 High
- wso2 api manager, open banking am +1 moreReflected Cross-Site Scripting (XSS) in Multiple WSO2 Products Due to Improper Input Validation6.1 Medium
- wso2 enterprise integratorCross-Site Request Forgery (CSRF) in WSO2 Enterprise Integrator 6.6.0 Management Console Due to Missing CSRF Token Validation5.4 Medium
- thememakers paypal express checkout, paypal checkout +1 moreThemeMakers PayPal Express Checkout <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- boldgrid total upkeep – wordpress backup plugin plus restore & migrate by boldgrid, total upkeep +1 moreTotal Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid <= 1.16.8 - Authenticated (Administrator+) Server-Side Request Forgery4.9 Medium
- machothemes image photo gallery final tiles gridImage Photo Gallery Final Tiles Grid <= 3.6.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting6.4 Medium
- bricks builder bricksBricksbuilder <= 1.9.6.1 - Authenticated (Contributor+) Privilege Escalation via create_autosave7.1 High
- templines elementor helper coreTemplines Elementor Helper Core <= 2.7 - Authenticated (Subscriber+) Privilege Escalation8.8 High
- pebbletemplates pebble templatesPebble has Arbitrary Local File Inclusion (LFI) Vulnerability via `include` macro6.1 Medium
- sainwp onestore sitesOneStore Sites <= 0.1.1 - Unauthenticated Blind Server-Side Request Forgery5.3 Medium
- wpmudev forminator forms – contact form, payment form & custom form builder, forminator forms +1 moreForminator <= 1.39.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- themesawesome sakolawp, school management system – sakolawp +1 moreSchool Management System – SakolaWP <= 1.0.8 - Cross-Site Request Forgery to Exam Setting Manipulation4.3 Medium
- wso2 api manager, identity server +1 moreIncorrect Authorization in Multiple WSO2 Products Allows API Access via Refresh Token5.6 Medium
- linux, linux kernel +1 moreHID: corsair-void: Add missing delayed work cancel for headset status7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenfsd: clear acl_access/acl_default after releasing them9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreNFSD: fix hang in nfsd4_shutdown_callback7.5 High
- linux, linux kernel +1 moreHID: hid-thrustmaster: fix stack-out-of-bounds read in usb_check_int_endpoints()7.1 High
- linux, linux kernel +1 morespi: sn-f-ospi: Fix division by zero5.5 Medium
- linux, linux kernel +1 moreax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morevrf: use RCU protection in l3mdev_l3_out()7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morevxlan: check vxlan_vnigroup_init() return value5.5 Medium
- linux, linux kernel +1 moreLoongArch: csum: Fix OoB access in IP checksum code for negative lengths7.3 High
- linux, linux kernel +1 morenet: ethernet: ti: am65-cpsw: fix memleak in certain XDP cases7.5 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreteam: better TEAM_OPTION_TYPE_STRING validation5.5 Medium
- linux, linux kernel +1 moreworkqueue: Put the pwq after detaching the rescuer from the pool7.8 High
- linux, linux kernel +1 morearm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array7.8 High
- linux, linux kernel +1 moredrm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode()5.5 Medium
- linux, linux kernel +1 moregpiolib: Fix crash on error in gpiochip_get_ngpios()5.5 Medium
- linux, linux kernel +1 moreorangefs: fix a oob in orangefs_debug_write7.1 High
- linux, linux kernel +1 morebatman-adv: fix panic during interface removal5.5 Medium
- Show moreLoading…