CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- linux, linux kernel +1 moretty: xilinx_uartps: split sysrq handling5.5 Medium
- linux, linux kernel +1 moreRevert "drm/amd/display: Use HW lock mgr for PSR1"5.5 Medium
- linux, linux kernel +1 moreblock: mark GFP_NOIO around sysfs ->store()5.5 Medium
- linux, linux kernel +1 morehrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING5.5 Medium
- linux, linux kernel +1 moremm/compaction: fix UBSAN shift-out-of-bounds warning7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreptp: Ensure info->enable callback is always set5.5 Medium
- linux, linux kernel +1 moretimers/migration: Fix off-by-one root mis-connection5.5 Medium
- linux, linux kernel +1 moreax25: rcu protect dev->ax25_ptr7.8 High
- linux, linux kernel +1 morenilfs2: protect access to buffers with no active references7.8 High
- linux, linux kernel +1 moredriver core: class: Fix wild pointer dereferences in API class_dev_iter_next()7.8 High
- linux, linux kernel +1 morerxrpc, afs: Fix peer hash locking vs RCU callback7.5 High
- linux, linux kernel +1 morenet: xdp: Disallow attaching device-bound programs in generic mode7.8 High
- linux, linux kernel +1 moreblock: fix queue freeze vs limits lock order in sysfs store methods5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - bios +1 more +3 morenet: let net.core.dev_weight always be non-zero5.5 Medium
- linux, linux kernel +1 moreRDMA/rtrs: Add missing deinit() call9.8 Critical
- linux, linux kernel +1 morePCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()7.1 High
- linux, linux kernel +1 moreLoongArch: Fix warnings during S3 suspend5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: hns3: fix oops when unload drivers paralleling5.5 Medium
- linux, linux kernel +1 morenet: ravb: Fix missing rtnl lock in suspend/resume path7.8 High
- linux, linux kernel +1 morenet/mlx5: HWS, fix definer's HWS_SET32 macro for negative offset7.8 High
- linux, linux kernel +1 morenet: ethernet: ti: am65-cpsw: fix freeing IRQ in am65_cpsw_nuss_remove_tx_chns()5.5 Medium
- linux, linux kernel +1 morefirewire: test: Fix potential null dereference in firewire kunit test5.5 Medium
- linux, linux kernel +1 morerhashtable: Fix potential deadlock by moving schedule_work outside lock5.5 Medium
- linux, linux kernel +1 morememory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code()7.8 High
- linux, linux kernel +1 moremailbox: th1520: Fix a NULL vs IS_ERR() bug5.5 Medium
- suse rancherRancher does not Properly Validate Account Bindings in SAML Authentication Enables User Impersonation on First Login8.4 High
- suse rancherUnauthenticated stack overflow in /v3-public/authproviders API8.2 High
- suse rancherRancher's SAML-based login via CLI can be denied by unauthenticated users5.3 Medium
- bradvin foogallery - responsive photo gallery, image viewer, justified, masonry & carouselFooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry and Carousel 2.4.29 - Reflected cross-site scripting (XSS)5.1 Medium
- melapress wp activity logWP Activity Log 5.3.2 - Insecure deserialization6.3 Medium
- linzhaoguan pb-cmsLinZhaoguan pb-cms Logout cross-site request forgery5.3 Medium
- zyx0814 pichomezyx0814 Pichome index.php path traversal6.9 Medium
- joinmastodon mastodonMastodon's domain blocks & rationales ignore user approval when visibility set as "users"5.3 Medium
- joinmastodon mastodonMastodon's rate-limits are missing on `/auth/setup`5.3 Medium
- pihome-shc pihome, pihome maxair +1 morepihome-shc PiHome home.php cross site scripting5.3 Medium
- tu yafeng via browserTu Yafeng Via Browser Javascript Bridge cross site scripting5.3 Medium
- simonhunter woo store modeWordPress Woo Store Mode plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- rapid7 velociraptorVelociraptor Shell Plugin Prevent_execve Bypass3.8 Low
- No product listedb1gMail Admin Page users.php deserialization5.1 Medium
- mongodb mongosh, redhat codeready linux builder eus, codeready linux builder for arm64 eus +10 more +12 moreMongoDB Shell may be susceptible to local privilege escalation in Windows7.5 High
- mongodb compass, redhat enterprise linux for arm 64, enterprise linux for ibm z systems +2 more +4 moreMongoDB Compass may be susceptible to local privilege escalation in Windows7.5 High
- ibm entirexIBM EntireX denial of service5.5 Medium
- ibm entirexIBM EntireX path traversal6.5 Medium
- ibm entirexIBM EntireX race condition3.3 Low
- ibm entirexIBM EntireX information disclosure3.3 Low
- ibm entirexIBM EntireX information disclosure3.3 Low
- ibm entirexIBM EntireX information disclosure3.3 Low
- ibm entirexIBM EntireX information disclosure3.3 Low
- ibm entirexIBM EntireX information disclosure3.3 Low
- ibm entirexIBM EntireX information disclosure3.3 Low
- Show moreLoading…