CVE-2025 records published in February 2025

This page lists the 1,793 CVE-2025 records published in February 2025, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 11 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2025 list filters these records by severity or signal.

Critical
20811.6% of these records
Listed in CISA KEV
110.6% of these records
Reported exploited
50.3% of these records
Detection signal
382.1% of these records
Exploit code
402.2% of these records
Actionable vendor fix
1,08460.5% of these records

Figures as of 2026-10-24 13:47 UTC. Records published in February 2025 have had from about 20 months to about 21 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.

CVE-2025 records published in February 2025, newest first: records 1 to 1,000 of 1,793
CVE Summary CVSS EPSS Published Signals
CVE-2025-27414MinIO SFTP authentication bypass due to improperly trusted SSH key4.6CNA v4.00.6%2025-02-28Fix
CVE-2025-27413PwnDoc arbitrary file write to RCE6.5CNA v3.11.2%2025-02-28Fix
CVE-2025-27410PwnDoc arbitrary file write to RCE using path traversal in backup restore as admin6.5CNA v3.12.1%2025-02-28Exploit codeFix
CVE-2025-27408Manifest Uses a One-Way Hash without a Salt4.8CNA v3.10.2%2025-02-28Fix
CVE-2025-27400OpenMage magento-lts magento vulnerable to stored XSS in theme config fields2.9CNA v3.10.3%2025-02-28Fix
CVE-2025-26466OpenSSH: Denial of service in OpenSSH5.9NVD v3.140.7%2025-02-28Exploit codeFix
CVE-2025-26326A vulnerability was identified in the NVDA Remote (version 2.6.4) and Tele NVDA Remote (version 2025.3.3) remote connection add-ons, which allows an attacker to obtain total control of the remote system by guessing a weak password. The problem occurs because these add-ons accept any password entered8.8CISA ADP v3.11.7%2025-02-28Exploit code
CVE-2025-26263GeoVision ASManager ASManagerService information disclosure5.1CISA ADP v3.11.4%2025-02-28Exploit code
CVE-2025-26047olajowon Loggrove SQL injection5.1CISA ADP v3.10.2%2025-02-28
CVE-2025-25916WuzhiCMS cross-site scripting5.4CISA ADP v3.10.2%2025-02-28
CVE-2025-25729Bosscomm IF740 firmware update process information disclosure7.5CISA ADP v3.10.4%2025-02-28
CVE-2025-25728Bosscomm IF740 firmware update API cleartext transmission of sensitive information6.5CISA ADP v3.10.2%2025-02-28
CVE-2025-25727Bosscomm IF740 Firmware versions:11001.7078 & v11001.0000 and System versions: 6.25 & 6.00 were discovered to store passwords in cleartext.6.2CISA ADP v3.10.2%2025-02-28
CVE-2025-25723gpac buffer overflow8.4CISA ADP v3.10.4%2025-02-28
CVE-2025-25635TOTOLINK A3002R buffer overflow8.0CISA ADP v3.10.4%2025-02-28
CVE-2025-25610TOTOLINK A3002R buffer overflow8.0CISA ADP v3.10.3%2025-02-28
CVE-2025-25609TOTOLINK A3002R buffer overflow8.0CISA ADP v3.10.3%2025-02-28
CVE-2025-25478sysPass external control of a file path6.5CISA ADP v3.10.4%2025-02-28
CVE-2025-25477sysPass host header injection8.1CISA ADP v3.10.4%2025-02-28
CVE-2025-25476sysPass stored cross-site scripting5.4CISA ADP v3.10.3%2025-02-28
CVE-2025-25461Seeddms A stored cross-site scripting5.4CISA ADP v3.10.5%2025-02-28Exploit code
CVE-2025-25431TRENDnet Tew-929dru cross-site scripting4.8CISA ADP v3.10.3%2025-02-28
CVE-2025-25430TRENDnet Tew-929dru cross-site scripting4.8CISA ADP v3.10.3%2025-02-28
CVE-2025-25429TRENDnet Tew-929dru cross-site scripting4.8CISA ADP v3.10.3%2025-02-28
CVE-2025-25428TRENDnet Tew-929dru hard-coded password8.0CISA ADP v3.10.4%2025-02-28
CVE-2025-2537907FLY-CMS cross-site request forgery9.6CISA ADP v3.10.3%2025-02-28
CVE-2025-24849Lack of encryption in transit for cloud infrastructure facilitating potential for sensitive data manipulation or exposure.7.5CNA v4.00.1%2025-02-28Fix
CVE-2025-24843Insecure file retrieval process that facilitates potential for file manipulation to affect product stability and confidentiality, integrity, authenticity, and attestation of stored data.5.1CNA v4.00.2%2025-02-28Fix
CVE-2025-24318Dario Health Dario application and server infrastructure session cookie vulnerability5.9CNA v4.00.4%2025-02-28Fix
CVE-2025-24316Dario Health Dario application and server infrastructure information disclosure6.9CNA v4.00.3%2025-02-28Fix
CVE-2025-23405Dario Health Blood Glucose Monitoring System Starter Kit Android application log injection6.9CNA v4.00.3%2025-02-28Fix
CVE-2025-23225IBM MQ denial of service6.5CNA v3.10.4%2025-02-28Fix
CVE-2025-22492Insecure storage of connection strings in FRS6.3CNA v3.10.2%2025-02-28Fix
CVE-2025-22491Improper input validation in Foreseer Reporting Software (FRS)6.7CNA v3.10.2%2025-02-28Fix
CVE-2025-22274HTML injection in CyberArk Endpoint Privilege Manager2.0CNA v4.00.5%2025-02-28Fix
CVE-2025-22273Lack of rate-limiting in password change mechanism in CyberArk Endpoint Privilege Manager9.3CNA v4.00.6%2025-02-28Fix
CVE-2025-22272Self reflected XSS in CyberArk Endpoint Privilege Manager2.1CNA v4.00.5%2025-02-28Fix
CVE-2025-22271IP spoofing in CyberArk Endpoint Privilege Manager6.9CNA v4.00.4%2025-02-28Fix
CVE-2025-22270Stored XSS in CyberArk Endpoint Privilege Manager7.3CNA v4.00.6%2025-02-28Fix
CVE-2025-20060Dario Health Blood Glucose Monitoring System Android application information disclosure8.7CNA v4.00.4%2025-02-28Fix
CVE-2025-20049Dario Health Dario application portal service cross-site scripting7.1CNA v4.00.3%2025-02-28Fix
CVE-2025-1795Python CPython mishandling of comma during folding and unicode-encoding of email headers2.3CNA v4.00.6%2025-02-28Fix
CVE-2025-1776Cross-site scripting (XSS) vulnerability in Soteshop6.1CNA v3.10.3%2025-02-28Fix
CVE-2025-1757WordPress Portfolio Builder Portfolio Gallery plugin stored cross-site scripting5.4v3.10.3%2025-02-28
CVE-2025-1749HTML injection vulnerability in OpenCart4.7v3.10.3%2025-02-28Fix
CVE-2025-1748HTML injection vulnerability in OpenCart4.7v3.10.3%2025-02-28Fix
CVE-2025-1747HTML injection vulnerability in OpenCart4.7v3.10.3%2025-02-28Fix
CVE-2025-1746Cross-site scripting vulnerability in OpenCart6.1v3.10.2%2025-02-28Fix
CVE-2025-1744Out-of-bounds write in radare29.8v3.10.5%2025-02-28Fix
CVE-2025-1687Cardealer WordPress theme cross-site request forgery8.8CNA v3.10.3%2025-02-28Fix
CVE-2025-1682Cardealer WordPress theme privilege escalation8.8CNA v3.10.6%2025-02-28Fix
CVE-2025-1681Cardealer WordPress theme unauthorized access5.4CNA v3.10.4%2025-02-28Fix
CVE-2025-1662URL Media Uploader WordPress plugin server-side request forgery6.4v3.10.3%2025-02-28Fix
CVE-2025-1572KiviCare Clinic and Patient Management System (EHR) WordPress plugin SQL injection8.8v3.10.5%2025-02-28Fix
CVE-2025-1571Exclusive Addons for Elementor WordPress plugin stored cross-site scripting5.4v3.10.3%2025-02-28Fix
CVE-2025-1570wpWax Directorist password reset OTP privilege escalation9.8v3.10.4%2025-02-28Fix
CVE-2025-1560WOW Entrance Effects (WEE!) WordPress plugin stored cross-site scripting5.4v3.10.3%2025-02-28
CVE-2025-1513Photos WordPress plugin stored cross-site scripting6.1NVD v3.10.3%2025-02-28Fix
CVE-2025-1511User Registration and Membership WordPress plugin reflected cross-site scripting6.1v3.10.3%2025-02-28Fix
CVE-2025-1506Wp Social Login and Register Social Counter WordPress plugin cross-site request forgery4.3CNA v3.10.2%2025-02-28Fix
CVE-2025-1505Advanced AJAX Product Filters WordPress plugin reflected cross-site scripting6.1v3.10.3%2025-02-28Fix
CVE-2025-1413Blackmagic Design DaVinci Resolve macOS installation permissions privilege escalation8.4CNA v4.00.2%2025-02-28Fix
CVE-2025-1405Product Catalog Simple WordPress plugin stored cross-site scripting5.4v3.10.3%2025-02-28Fix
CVE-2025-1319Site Mailer WordPress plugin unauthenticated stored cross-site scripting6.1NVD v3.10.4%2025-02-28Fix
CVE-2025-1300Open redirect in CodeChecker web server6.1CNA v3.10.3%2025-02-28Fix
CVE-2025-0985IBM MQ information disclosure5.5CNA v3.10.3%2025-02-28Fix
CVE-2025-0975IBM MQ code execution8.8CNA v3.10.7%2025-02-28Fix
CVE-2025-0823IBM MQ path traversal6.5CNA v3.10.6%2025-02-28Fix
CVE-2025-0801RateMyAgent Official WordPress plugin cross-site request forgery to API Key update4.3v3.10.2%2025-02-28Fix
CVE-2025-0769PixelYourSite insecure deserialization6.3CNA v4.00.4%2025-02-28Fix
CVE-2025-0764wpForo Forum WordPress plugin authenticated (Subscriber+) arbitrary file read in update6.5CNA v3.10.4%2025-02-28Fix
CVE-2025-0160IBM FlashSystem code execution8.1CNA v3.10.5%2025-02-28Fix
CVE-2025-0159IBM FlashSystem authentication bypass9.1CNA v3.10.9%2025-02-28Fix
CVE-2025-27399Mastodon's domain blocks and rationales ignore user approval when visibility set as users5.3CNA v3.10.4%2025-02-27Fix
CVE-2025-27157Mastodon's rate-limits are missing on `/auth/setup`5.3CNA v3.10.4%2025-02-27Fix
CVE-2025-27154Spotipy's cache file, containing spotify auth token, is created with overly broad permissions8.4CNA v4.00.6%2025-02-27Fix
CVE-2025-26325ShopXO unrestricted file upload9.8CISA ADP v3.10.5%2025-02-27
CVE-2025-26264GeoVision GV-ASWeb notification settings code injection8.8CISA ADP v3.123.0%2025-02-27Emerging ThreatsExploit code
CVE-2025-25761HkCms external control of a file path7.2CISA ADP v3.10.4%2025-02-27
CVE-2025-25760Sucms component admin_webgather.php server-side request forgery7.5CISA ADP v3.10.4%2025-02-27
CVE-2025-25759Sucms path traversal7.5CISA ADP v3.10.7%2025-02-27
CVE-2025-25730Motorola Droid Razr HD USB debugging improper access control4.6CISA ADP v3.10.2%2025-02-27
CVE-2025-25570Vue Vben Admin hard-coded credentials9.8CISA ADP v3.12.1%2025-02-27Nuclei
CVE-2025-25334Suning Commerce Group Suning EMall iOS app information disclosure5.5CISA ADP v3.10.2%2025-02-27
CVE-2025-25333IKEA CN iOS app information disclosure7.5CISA ADP v3.10.4%2025-02-27
CVE-2025-25331Beitatong Technology LianJia iOS app information disclosure5.5CISA ADP v3.10.2%2025-02-27
CVE-2025-25330Boohee Health iOS app information disclosure5.5CISA ADP v3.10.2%2025-02-27
CVE-2025-25329Tencent MicroVision iOS app information disclosure5.5CISA ADP v3.10.2%2025-02-27
CVE-2025-25326Merchants Union Consumer Finance Merchants Union Finance iOS app information disclosure5.5CISA ADP v3.10.2%2025-02-27
CVE-2025-25325Yibin Fengguan Network Technology YuPao DirectHire iOS app information disclosure5.5CISA ADP v3.10.2%2025-02-27
CVE-2025-25324Shandong Provincial Big Data Center AiShanDong iOS app information disclosure5.5CISA ADP v3.10.2%2025-02-27
CVE-2025-25323Qianjin Network Information Technology 51Job iOS app information disclosure5.5CISA ADP v3.10.2%2025-02-27
CVE-2025-24832Acronis Backup plugin for cPanel and WHM symlink following4.4CNA v3.00.2%2025-02-27Fix
CVE-2025-23687Woo Store Mode WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-02-27
CVE-2025-22952Memos server-side request forgery (SSRF)9.8CISA ADP v3.12.9%2025-02-27NucleiFix
CVE-2025-22624bradvin FooGallery admin meta box handler reflected cross-site scripting5.1CNA v4.00.4%2025-02-27Fix
CVE-2025-22280DefendWP Firewall WordPress plugin broken access control7.6CNA v3.10.3%2025-02-27Fix
CVE-2025-21824Linux kernel host1x GPU driver vulnerability5.5v3.10.2%2025-02-27Fix
CVE-2025-21823Linux kernel batman-adv ELP metric worker vulnerability7.8CNA v3.10.2%2025-02-27Fix
CVE-2025-21822Linux kernel vmclock PTP driver vulnerability5.5v3.10.2%2025-02-27Fix
CVE-2025-21821Linux kernel omap LCD framebuffer driver denial of service5.5v3.10.2%2025-02-27Fix
CVE-2025-21820Linux kernel xilinx_uartps improper locking5.5v3.10.2%2025-02-27Fix
CVE-2025-21819Linux kernel AMD display PSR1 lock manager denial of service5.5v3.10.2%2025-02-27Fix
CVE-2025-21817Linux kernel block layer sysfs store deadlock5.5v3.10.1%2025-02-27Fix
CVE-2025-21816Linux kernel hrtimer CPU hotplug migration vulnerability5.5v3.10.2%2025-02-27Fix
CVE-2025-21815Linux kernel memory compaction out-of-bounds read7.1v3.10.2%2025-02-27Fix
CVE-2025-21814Linux kernel PTP clock driver null pointer dereference5.5NVD v3.10.3%2025-02-27Fix
CVE-2025-21813Linux kernel timer migration hierarchy off-by-one error5.5v3.10.2%2025-02-27Fix
CVE-2025-21812Linux kernel ax25 use-after-free7.8CNA v3.10.2%2025-02-27Fix
CVE-2025-21811Linux kernel nilfs2 dirty buffer handling use-after-free7.8CNA v3.10.3%2025-02-27Fix
CVE-2025-21810Linux kernel driver core class iterator null pointer dereference7.8CNA v3.10.2%2025-02-27Fix
CVE-2025-21809Linux kernel rxrpc peer hash table deadlock7.5CNA v3.10.3%2025-02-27Fix
CVE-2025-21808Linux kernel XDP generic mode vulnerability7.8CNA v3.10.2%2025-02-27Fix
CVE-2025-21807Linux kernel block layer sysfs limits deadlock5.5v3.10.1%2025-02-27Fix
CVE-2025-21806In the Linux kernel, the following vulnerability has been resolved: net: let net.core.dev_weight always be non-zero The following problem was encountered during stability test: (NULL net_device): NAPI poll function process_backlog+0x0/0x530 \ returned 1, exceeding its budget of 0. ------------[5.5NVD v3.10.2%2025-02-27Fix
CVE-2025-21805Linux kernel RTRS RDMA transport vulnerability9.8CNA v3.10.4%2025-02-27Fix
CVE-2025-21804Linux kernel rcar PCIe endpoint driver null pointer dereference7.1CNA v3.10.2%2025-02-27Fix
CVE-2025-21803Linux kernel LoongArch ACPI suspend handling vulnerability5.5v3.10.2%2025-02-27Fix
CVE-2025-21802Linux kernel hns3 Ethernet driver vulnerability5.5NVD v3.10.2%2025-02-27Fix
CVE-2025-21801Linux kernel ravb Ethernet driver vulnerability7.8CNA v3.10.2%2025-02-27Fix
CVE-2025-21800Linux kernel mlx5 HWS steering vulnerability7.8v3.10.2%2025-02-27Fix
CVE-2025-21799Linux kernel am65-cpsw Ethernet driver null pointer dereference5.5v3.10.2%2025-02-27Fix
CVE-2025-21798Linux kernel firewire KUnit test null pointer dereference5.5v3.10.2%2025-02-27Fix
CVE-2025-21797Linux kernel corsair-void HID driver use-after-free7.8v3.10.2%2025-02-27Fix
CVE-2025-21796Linux kernel NFSD ACL release use-after-free9.8CNA v3.10.7%2025-02-27Fix
CVE-2025-21795Linux kernel NFSD callback shutdown denial of service7.5CNA v3.10.7%2025-02-27Fix
CVE-2025-21794Linux kernel Thrustmaster HID driver out-of-bounds read7.1v3.10.2%2025-02-27Fix
CVE-2025-21793Linux kernel sn-f-ospi divide by zero5.5v3.10.2%2025-02-27Fix
CVE-2025-21792Linux kernel AX.25 device binding reference count leak7.8CNA v3.10.2%2025-02-27Fix
CVE-2025-21791Linux kernel VRF l3mdev output path use-after-free7.8CNA v3.10.3%2025-02-27Fix
CVE-2025-21790Linux kernel vxlan crash5.5NVD v3.10.2%2025-02-27Fix
CVE-2025-21789Linux kernel LoongArch checksum code out-of-bounds read7.3CNA v3.10.2%2025-02-27Fix
CVE-2025-21788Linux kernel am65-cpsw XDP path memory leak7.5CNA v3.10.5%2025-02-27Fix
CVE-2025-21787Linux kernel team driver string option validation vulnerability5.5NVD v3.10.3%2025-02-27Fix
CVE-2025-21786Linux kernel workqueue rescuer thread use-after-free7.8CNA v3.10.2%2025-02-27Fix
CVE-2025-21785Linux kernel arm64 cache information array out-of-bounds write7.8CNA v3.10.3%2025-02-27Fix
CVE-2025-21784Linux kernel PSP microcode loading vulnerability5.5v3.10.2%2025-02-27Fix
CVE-2025-21783Linux kernel gpiolib crash5.5v3.10.2%2025-02-27Fix
CVE-2025-21782Linux kernel orangefs debug interface out-of-bounds read7.1v3.10.3%2025-02-27Fix
CVE-2025-21781Linux kernel batman-adv interface removal vulnerability5.5v3.10.2%2025-02-27Fix
CVE-2025-21780Linux kernel SMU power play table interface buffer overflow7.8CNA v3.10.3%2025-02-27Fix
CVE-2025-21779Linux kernel KVM Hyper-V SEND_IPI emulation null pointer dereference5.5NVD v3.10.3%2025-02-27Fix
CVE-2025-21778Linux kernel ring buffer memory mapping vulnerability7.8CNA v3.10.2%2025-02-27Fix
CVE-2025-21777Linux kernel ring buffer persistent metadata vulnerability5.5v3.10.2%2025-02-27Fix
CVE-2025-21776Linux kernel USB hub driver null pointer dereference5.5NVD v3.10.3%2025-02-27Fix
CVE-2025-21775Linux kernel ctucanfd CAN driver null pointer dereference5.5v3.10.2%2025-02-27Fix
CVE-2025-21774Linux kernel rkcanfd CAN driver null pointer dereference5.5v3.10.2%2025-02-27Fix
CVE-2025-21773Linux kernel etas_es58x CAN driver null pointer dereference5.5v3.10.2%2025-02-27Fix
CVE-2025-21772Linux kernel Mac partition table parser out-of-bounds write7.8CNA v3.10.2%2025-02-27Fix
CVE-2025-21771Linux kernel sched_ext scheduler class vulnerability5.5v3.10.2%2025-02-27Fix
CVE-2025-21770Linux kernel IOMMU page fault queue memory leak5.5v3.10.2%2025-02-27Fix
CVE-2025-21769Linux kernel vmclock PTP device driver vulnerability5.5v3.10.2%2025-02-27Fix
CVE-2025-21768Linux kernel IPv6 lightweight tunnel destination cache memory leak5.5NVD v3.10.2%2025-02-27Fix
CVE-2025-21767Linux kernel clocksource watchdog verification vulnerability5.5NVD v3.10.2%2025-02-27Fix
CVE-2025-21766Linux kernel IPv4 route PMTU update vulnerability8.1CNA v3.10.6%2025-02-27Fix
CVE-2025-21765In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU protection in ip6_default_advmss() ip6_default_advmss() needs rcu protection to make sure the net structure it reads does not disappear.8.1CNA v3.10.6%2025-02-27Fix
CVE-2025-21764Linux kernel ndisc use-after-free7.8CNA v3.10.3%2025-02-27Fix
CVE-2025-21763Linux kernel neighbour use-after-free7.8CNA v3.10.3%2025-02-27Fix
CVE-2025-21762Linux kernel arp use-after-free8.1CNA v3.10.7%2025-02-27Fix
CVE-2025-21761Linux kernel openvswitch use-after-free7.8CNA v3.10.3%2025-02-27Fix
CVE-2025-21760Linux kernel ndisc use-after-free8.1CNA v3.138.0%2025-02-27Emerging ThreatsFix
CVE-2025-21759Linux kernel IPv6 multicast use-after-free7.8CNA v3.17.8%2025-02-27Emerging ThreatsFix
CVE-2025-21758Linux kernel IPv6 multicast vulnerability7.8CNA v3.116.9%2025-02-27Emerging ThreatsFix
CVE-2025-21756Linux kernel vsock socket binding use-after-free7.8CNA v3.10.9%2025-02-27Reported exploitedExploit codeFix
CVE-2025-21754Linux kernel Btrfs ordered extent splitting reachable assertion5.5v3.10.2%2025-02-27Fix
CVE-2025-21753Linux kernel Btrfs transaction abort handling use-after-free7.8CNA v3.10.3%2025-02-27Fix
CVE-2025-21752Linux kernel Btrfs RAID stripe tree vulnerability5.5v3.10.2%2025-02-27Fix
CVE-2025-21751Linux kernel mlx5 hardware steering matcher use-after-free7.8CNA v3.10.2%2025-02-27Fix
CVE-2025-21750Linux kernel brcmfmac Wi-Fi driver null pointer dereference5.5v3.10.2%2025-02-27Fix
CVE-2025-21749Linux kernel ROSE socket bind vulnerability5.5v3.10.2%2025-02-27Fix
CVE-2025-21748Linux kernel ksmbd IPC message allocation integer overflow9.8CNA v3.10.6%2025-02-27Fix
CVE-2025-21747In the Linux kernel, the following vulnerability has been resolved: drm/ast: astdp: Fix timeout for enabling video signal The ASTDP transmitter sometimes takes up to 1 second for enabling the video signal, while the timeout is only 200 msec. This results in a kernel error message. Increase the tim5.5v3.10.2%2025-02-27Fix
CVE-2025-21746Linux kernel Synaptics touchpad driver pass-through port race condition4.7v3.10.1%2025-02-27Fix
CVE-2025-21745Linux kernel block cgroup class registration vulnerability5.5NVD v3.10.3%2025-02-27Fix
CVE-2025-21744Linux kernel brcmfmac Wi-Fi driver null pointer dereference5.5NVD v3.10.3%2025-02-27Fix
CVE-2025-21743Linux kernel ipheth out-of-bounds read7.1v3.10.2%2025-02-27Fix
CVE-2025-21742Linux kernel ipheth out-of-bounds read7.1v3.10.2%2025-02-27Fix
CVE-2025-21741Linux kernel ipheth out-of-bounds read7.1v3.10.2%2025-02-27Fix
CVE-2025-21739Linux kernel UFS crypto profile initialization use-after-free7.8CISA ADP v3.10.2%2025-02-27Fix
CVE-2025-21738Linux kernel libata SFF ATA pass-through handling vulnerability7.8CNA v3.10.2%2025-02-27Fix
CVE-2025-21737Linux kernel Ceph client MDS auth matching memory leak5.5v3.10.2%2025-02-27Fix
CVE-2025-21736Linux kernel NILFS2 FIEMAP handling integer overflow5.5v3.10.2%2025-02-27Fix
CVE-2025-21735Linux kernel NFC NCI HCI pipe creation out-of-bounds write8.8CNA v3.10.4%2025-02-27Fix
CVE-2025-21734Linux kernel fastrpc buffer copy out-of-bounds write7.8CNA v3.10.2%2025-02-27Fix
CVE-2025-21733Linux kernel osnoise tracer tracepoint handling vulnerability5.5v3.10.2%2025-02-27Fix
CVE-2025-21732Linux kernel mlx5 RDMA ODP memory region race condition4.7v3.10.1%2025-02-27Fix
CVE-2025-21731Linux kernel nbd use-after-free7.8CISA ADP v3.10.2%2025-02-27Fix
CVE-2025-21730Linux kernel rtw89 Wi-Fi driver WoWLAN resume vulnerability7.8CNA v3.10.2%2025-02-27Fix
CVE-2025-21729Linux kernel rtw89 Wi-Fi driver hardware scan use-after-free7.8CNA v3.10.2%2025-02-27Fix
CVE-2025-21728Linux kernel BPF signal delivery vulnerability5.5NVD v3.10.2%2025-02-27Fix
CVE-2025-21727Linux kernel padata output reordering use-after-free7.8CNA v3.10.2%2025-02-27Fix
CVE-2025-21726Linux kernel padata reorder work handling use-after-free7.8CNA v3.10.2%2025-02-27Fix
CVE-2025-21725Linux kernel SMB client link speed handling vulnerability7.5CNA v3.10.4%2025-02-27Fix
CVE-2025-21724Linux kernel IOMMUFD IOVA bitmap out-of-bounds write7.8NVD v3.10.2%2025-02-27Fix
CVE-2025-21723Linux kernel mpi3mr driver bsg queue setup null pointer dereference5.5NVD v3.10.2%2025-02-27Fix
CVE-2025-21722Linux kernel NILFS2 buffer head handling use-after-free7.8CNA v3.10.2%2025-02-27Fix
CVE-2025-21721Linux kernel NILFS2 directory rename handling reachable assertion5.5v3.10.2%2025-02-27Fix
CVE-2025-21720Linux kernel XFRM packet offload path null pointer dereference7.5CNA v3.10.4%2025-02-27Fix
CVE-2025-21719Linux kernel ipmr crash7.1CNA v3.10.2%2025-02-27Fix
CVE-2025-21718Linux kernel ROSE protocol timers race condition7.8CNA v3.10.2%2025-02-27Fix
CVE-2025-21717Linux kernel net/mlx5e kernel panic7.8CNA v3.10.2%2025-02-27Fix
CVE-2025-21716Linux kernel vxlan uninitialized resource use5.5NVD v3.10.2%2025-02-27Fix
CVE-2025-21715Linux kernel davicom use-after-free7.8CISA ADP v3.10.2%2025-02-27Fix
CVE-2025-21714Linux kernel mlx5 RDMA driver implicit ODP use-after-free7.8CNA v3.10.2%2025-02-27Fix
CVE-2025-21713Linux kernel pseries IOMMU TCE window handling null pointer dereference5.5v3.10.2%2025-02-27Fix
CVE-2025-21712Linux kernel md-bitmap statistics vulnerability7.8CNA v3.10.2%2025-02-27Fix
CVE-2025-21711Linux kernel ROSE socket options integer overflow5.5NVD v3.10.2%2025-02-27Fix
CVE-2025-21710Linux kernel TCP window advertisement denial of service8.2CNA v3.10.3%2025-02-27Fix
CVE-2025-21709Linux kernel uprobe and dup_mmap handling vulnerability7.8CNA v3.10.2%2025-02-27Fix
CVE-2025-21708Linux kernel rtl8150 USB Ethernet driver vulnerability5.5NVD v3.10.2%2025-02-27Fix
CVE-2025-21707Linux kernel MPTCP suboption parsing vulnerability9.8CNA v3.10.5%2025-02-27Fix
CVE-2025-21706Linux kernel MPTCP path manager vulnerability5.5NVD v3.10.2%2025-02-27Fix
CVE-2025-21705Linux kernel MPTCP fastopen handling vulnerability5.5NVD v3.10.2%2025-02-27Fix
CVE-2025-1756MongoDB Shell may be susceptible to local privilege escalation in Windows7.5CNA v3.10.2%2025-02-27Fix
CVE-2025-1755MongoDB Compass may be susceptible to local privilege escalation in Windows7.5CNA v3.10.1%2025-02-27Fix
CVE-2025-1751ATISoluciones CIGES SQL injection9.8CNA v3.10.5%2025-02-27
CVE-2025-1745LinZhaoguan pb-cms Logout cross-site request forgery5.3CNA v4.00.3%2025-02-27
CVE-2025-1743zyx0814 Pichome index.php path traversal6.9CNA v4.01.7%2025-02-27Nuclei
CVE-2025-1742pihome-shc PiHome home.php cross-site scripting6.1v3.10.5%2025-02-27
CVE-2025-1741b1gMail Admin page users.php deserialization5.1CNA v4.00.4%2025-02-27Fix
CVE-2025-1739Trivision Camera NC227WF activex_pal.asp authentication bypass7.1CNA v3.10.3%2025-02-27Exploit code
CVE-2025-1738Trivision Camera NC227WF information disclosure6.2CNA v3.10.2%2025-02-27Exploit code
CVE-2025-1717Login Me Now WordPress plugin authentication bypass8.1v3.10.6%2025-02-27Fix
CVE-2025-1693MongoDB Shell may be susceptible to control character injection via shell output3.9CNA v3.10.2%2025-02-27Fix
CVE-2025-1692MongoDB Shell may be susceptible to control character injection via pasting6.3CNA v3.10.3%2025-02-27Fix
CVE-2025-1691MongoDB Shell may be susceptible to Control Character injection via autocomplete7.6CNA v3.10.4%2025-02-27Fix
CVE-2025-1690ThemeMakers Stripe Checkout WordPress plugin stored cross-site scripting5.4v3.10.3%2025-02-27Fix
CVE-2025-1689ThemeMakers PayPal Express Checkout WordPress plugin stored cross-site scripting5.4v3.10.3%2025-02-27Fix
CVE-2025-1686Pebble has arbitrary local file inclusion (LFI) vulnerability via `include` macro4.9v3.10.8%2025-02-27Fix
CVE-2025-1450Floating Chat Widget: Contact Chat Icons WordPress plugin stored cross-site scripting5.4v3.10.3%2025-02-27Fix
CVE-2025-1295Templines Elementor Helper Core WordPress plugin authenticated (Subscriber+) privilege escalation8.8CNA v3.10.5%2025-02-27Fix
CVE-2025-1282Car Dealer Automotive WordPress Theme Responsive arbitrary file deletion and read8.8CNA v3.11.1%2025-02-27Fix
CVE-2025-0914Velociraptor Shell Plugin Prevent_execve Bypass3.8CNA v3.10.2%2025-02-27Fix
CVE-2025-0767WP Activity Log insecure deserialization9.8v3.10.5%2025-02-27Fix
CVE-2025-0759IBM EntireX race condition3.3CNA v3.10.1%2025-02-27Fix
CVE-2025-0469Forminator WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.2%2025-02-27Fix
CVE-2025-26925Admin Menu Manager WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-02-26
CVE-2025-26698J’s Communication RevoWorks Browser RevoWorks SCVX and incorrect resource transfer2.7CNA v3.00.2%2025-02-26
CVE-2025-25827emlog component sort.php server-side request forgery6.8CISA ADP v3.10.2%2025-02-26
CVE-2025-25825emlog A cross-site scripting7.1CISA ADP v3.10.2%2025-02-26
CVE-2025-25823emlog A cross-site scripting7.3CISA ADP v3.10.2%2025-02-26
CVE-2025-25818emlog A cross-site scripting5.1CISA ADP v3.10.2%2025-02-26
CVE-2025-25813Seacms command injection5.1CISA ADP v3.10.4%2025-02-26
CVE-2025-25802Seacms command injection5.1CISA ADP v3.10.4%2025-02-26
CVE-2025-25800Seacms path traversal5.3CISA ADP v3.10.5%2025-02-26
CVE-2025-25799Seacms files accessible to external parties6.0CISA ADP v3.10.2%2025-02-26
CVE-2025-25797Seacms command injection5.1CISA ADP v3.10.4%2025-02-26
CVE-2025-25796Seacms command injection5.1CISA ADP v3.10.4%2025-02-26
CVE-2025-25794Seacms command injection5.1CISA ADP v3.10.4%2025-02-26
CVE-2025-25793Seacms command injection5.1CISA ADP v3.10.4%2025-02-26
CVE-2025-25792Seacms command injection4.4CISA ADP v3.10.4%2025-02-26
CVE-2025-25791Yzncms plugin installation feature arbitrary file upload4.4CISA ADP v3.10.2%2025-02-26
CVE-2025-25790FoxCMS component \controller\LocalTemplate.php arbitrary file upload9.8CISA ADP v3.10.9%2025-02-26
CVE-2025-25789FoxCMS code injection9.8CISA ADP v3.11.3%2025-02-26
CVE-2025-25785jizhiCMS server-side request forgery9.1CISA ADP v3.10.4%2025-02-26
CVE-2025-25784jizhiCMS component \c\TemplateController.php arbitrary file upload9.8CISA ADP v3.10.9%2025-02-26
CVE-2025-25783emlog component admin\plugin.php arbitrary file upload9.8CISA ADP v3.10.7%2025-02-26
CVE-2025-25462PHPGurukul Land Record System SQL injection5.5CISA ADP v3.10.3%2025-02-26
CVE-2025-22881Heap-based buffer overflow in CNCSoft-G28.4CNA v4.00.3%2025-02-26Fix
CVE-2025-22869Potential denial of service in golang.org/x/crypto7.5CISA ADP v3.10.9%2025-02-26Fix
CVE-2025-22868Unexpected memory consumption during token parsing in golang.org/x/oauth27.5CISA ADP v3.10.9%2025-02-26Fix
CVE-2025-20161Cisco NX-OS Software command injection5.1CNA v3.10.5%2025-02-26Fix
CVE-2025-20119Cisco Application Policy Infrastructure Controller Authenticated Local denial of service6.0CNA v3.10.1%2025-02-26Fix
CVE-2025-20118Cisco Application Policy Infrastructure Controller CLI information disclosure4.4CNA v3.10.2%2025-02-26Fix
CVE-2025-20117Cisco Application Policy Infrastructure Controller Authenticated command injection5.1CNA v3.10.2%2025-02-26Fix
CVE-2025-20116Cisco Application Policy Infrastructure Controller stored cross-site scripting4.8CNA v3.10.3%2025-02-26Fix
CVE-2025-20111Cisco Nexus 3000 and 9000 Series Switches Layer 2 Ethernet denial of service7.4CNA v3.10.3%2025-02-26Fix
CVE-2025-1726Esri ArcGIS Monitor SQL injection4.3CNA v3.10.4%2025-02-26Fix
CVE-2025-1716picklescan Security scanning bypass via pip main9.8NVD v3.11.7%2025-02-26Fix
CVE-2025-1634Io.quarkus:quarkus-resteasy: Memory leak in quarkus resteasy classic when client requests timeout7.5CNA v3.10.8%2025-02-26Fix
CVE-2025-1517Sina Extension for Elementor WordPress plugin stored cross-site scripting5.4v3.10.5%2025-02-26Fix
CVE-2025-1249Events Manager WordPress plugin broken access control5.3CNA v3.10.3%2025-02-26Fix
CVE-2025-1091Tenable Identity Exposure Broken Authorization Schema4.3CNA v3.10.3%2025-02-26Fix
CVE-2025-0941MET ONE 3400+ potential credential exposure5.8CNA v3.10.2%2025-02-26
CVE-2025-0889Privilege Management for Windows elevation of privilege7.2CNA v4.00.2%2025-02-26Fix
CVE-2025-0760Tenable Identity Exposure stored credential disclosure2.7CNA v3.10.2%2025-02-26Fix
CVE-2025-0731SMA: Sunny portal remote code execution6.5CNA v3.10.7%2025-02-26Fix
CVE-2025-0719IBM Cloud Pak for Data cross-site scripting6.1CNA v3.10.3%2025-02-26Fix
CVE-2025-0236Canon Generic PCL6 V4 Printer Driver out-of-bounds write5.3CNA v3.10.6%2025-02-26Fix
CVE-2025-0235Canon Generic PCL6 V4 Printer Driver out-of-bounds write5.3CNA v3.10.6%2025-02-26Fix
CVE-2025-0234Canon Generic PCL6 V4 Printer Driver out-of-bounds write5.3CNA v3.10.6%2025-02-26Fix
CVE-2025-27148Gradle vulnerable to local privilege escalation through system temporary directory8.8CNA v3.10.2%2025-02-25Fix
CVE-2025-27146Matrix IRC Bridge allows IRC command injection to own puppeted user2.7CNA v3.10.4%2025-02-25Fix
CVE-2025-27145copyparty renders unsanitized filenames as HTML when user uploads empty files3.6CNA v3.10.5%2025-02-25Fix
CVE-2025-27142LocalSend file upload endpoint path traversal6.3CNA v4.00.5%2025-02-25Fix
CVE-2025-27139Combodo iTop vulnerable to stored self cross-site scripting in preferences6.8CNA v3.10.2%2025-02-25Fix
CVE-2025-27135RAGFlow SQL injection8.9CNA v4.00.6%2025-02-25Fix
CVE-2025-27110owasp-modsecurity ModSecurity libmodsecurity3 has possible bypass of encoded HTML entities7.9CNA v4.00.5%2025-02-25Fix
CVE-2025-27000Simple Photo Feed WordPress plugin broken access control5.4CNA v3.10.3%2025-02-25Fix
CVE-2025-26995Market Exporter WordPress plugin broken access control5.4CNA v3.10.4%2025-02-25Fix
CVE-2025-26993Visual Website Collaboration Atarim WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-25Fix
CVE-2025-26991WPPizza WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-25Fix
CVE-2025-26987Frontend Admin by DynamiApps WordPress plugin reflected cross-site scripting (XSS)6.1NVD v3.10.3%2025-02-25Fix
CVE-2025-26985Majestic Support WordPress plugin local file inclusion8.1CNA v3.10.8%2025-02-25Fix
CVE-2025-26983Recipe Card Blocks for Gutenberg and Elementor WordPress plugin broken access control4.3CNA v3.10.3%2025-02-25Fix
CVE-2025-26981Web Accessibility By accessiBe WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-25Fix
CVE-2025-26980Wired Impact Volunteer Management WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.3%2025-02-25Fix
CVE-2025-26979Funnel Builder by FunnelKit WordPress plugin local file inclusion7.5CNA v3.10.8%2025-02-25Fix
CVE-2025-26977FileBird WordPress plugin insecure direct object references (IDOR)7.2v3.10.4%2025-02-25Fix
CVE-2025-26975Strong Testimonials WordPress plugin broken access control5.3CNA v3.10.4%2025-02-25Fix
CVE-2025-26974WP Multi Store Locator WordPress plugin SQL injection9.3CNA v3.10.5%2025-02-25Fix
CVE-2025-26971WordPress Poll Maker plugin SQL injection9.8v3.10.5%2025-02-25Fix
CVE-2025-26966PrivateContent WordPress plugin unauthenticated account takeover9.8CNA v3.10.6%2025-02-25
CVE-2025-26965Amelia WordPress plugin insecure direct object references (IDOR)5.3CNA v3.10.4%2025-02-25Fix
CVE-2025-26964Eventin WordPress plugin local file inclusion8.8v3.10.7%2025-02-25Fix
CVE-2025-26963ClickWhale WordPress plugin cross-site request forgery (CSRF) to settings Change8.8v3.10.2%2025-02-25Fix
CVE-2025-26962Contact Form WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-02-25Fix
CVE-2025-26960Small Package Quotes Unishippers Edition WordPress plugin broken access control6.5CNA v3.10.4%2025-02-25Fix
CVE-2025-26957Affiliate Coupons WordPress plugin local file inclusion7.5CNA v3.10.8%2025-02-25Fix
CVE-2025-26952Business Card Block WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-02-25Fix
CVE-2025-26949Team Section Block WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-02-25Fix
CVE-2025-26948Pie Register Premium WordPress plugin broken access control4.3CNA v3.10.3%2025-02-25Fix
CVE-2025-26947Services Section block WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-02-25Fix
CVE-2025-26946WP Yelp Review Slider WordPress plugin SQL injection7.6CNA v3.10.5%2025-02-25Fix
CVE-2025-26945Info Cards WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-02-25Fix
CVE-2025-26943Easy Quotes WordPress plugin SQL injection9.3CNA v3.10.5%2025-02-25Fix
CVE-2025-26939Counters Block WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-02-25Fix
CVE-2025-26938Countdown Timer block WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-02-25Fix
CVE-2025-26937Icon List Block WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-02-25Fix
CVE-2025-26935WP Job Portal WordPress plugin local file inclusion8.8v3.10.7%2025-02-25Fix
CVE-2025-26932QuantumCloud ChatBot local file inclusion7.5CNA v3.10.8%2025-02-25Fix
CVE-2025-26931Tribulant Gallery Voting WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-02-25Fix
CVE-2025-26928Order Limit for WooCommerce WordPress plugin broken access control4.3CNA v3.10.3%2025-02-25Fix
CVE-2025-26926Booknetic WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-02-25
CVE-2025-26915Wishlist WordPress plugin SQL injection8.5CNA v3.10.4%2025-02-25Fix
CVE-2025-26913AR for WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-02-25Fix
CVE-2025-26912Easy Elementor Addons WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-02-25Fix
CVE-2025-26911System Dashboard WordPress plugin sensitive data exposure4.3CNA v3.10.4%2025-02-25Fix
CVE-2025-26907Estatik Mortgage Calculator WordPress plugin local file inclusion7.5CNA v3.10.5%2025-02-25
CVE-2025-26905Estatik WordPress plugin local file inclusion7.5CNA v3.10.6%2025-02-25Fix
CVE-2025-26904WP Responsive Auto Fit Text WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-02-25Fix
CVE-2025-26900Flexmls® IDX WordPress plugin PHP object injection9.8CNA v3.10.6%2025-02-25Fix
CVE-2025-26897List Related Attachments WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-02-25
CVE-2025-26896PiwigoPress WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-02-25Fix
CVE-2025-26893Easy Charts WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-02-25Fix
CVE-2025-26891Ibtana WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-02-25
CVE-2025-26887EZ SQL Reports Shortcode Widget and DB Backup WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-02-25Fix
CVE-2025-26884Greenshift WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2025-02-25Fix
CVE-2025-26882Popup Builder WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-02-25Fix
CVE-2025-26881Sticky Content WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-02-25Fix
CVE-2025-26878Autoship Cloud for WooCommerce Subscription Products WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-02-25Fix
CVE-2025-26877Front End Users WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2025-02-25Fix
CVE-2025-26876Search with Typesense WordPress plugin path traversal4.9v3.10.5%2025-02-25Fix
CVE-2025-26871Essential Blocks WordPress plugin broken access control8.8v3.10.4%2025-02-25Fix
CVE-2025-26868Fast Flow WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-25Fix
CVE-2025-26753VideoWhisper Live Streaming Integration WordPress plugin arbitrary file download7.5CNA v3.10.6%2025-02-25Fix
CVE-2025-26752VideoWhisper Live Streaming Integration WordPress plugin arbitrary file deletion8.6CNA v3.10.5%2025-02-25Fix
CVE-2025-26751Alphabetic Pagination WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-25Fix
CVE-2025-26601X.Org xwayland X.Org and use-after-free7.8NVD v3.10.4%2025-02-25Fix
CVE-2025-26600X.Org xwayland X.Org and use-after-free7.8NVD v3.10.4%2025-02-25Fix
CVE-2025-26599X.Org Xwayland compRedirectWindow function uninitialized pointer access7.8NVD v3.10.4%2025-02-25Fix
CVE-2025-26598Xorg: Xwayland: Out-of-bounds write in createpointerbarrierclient7.8NVD v3.10.4%2025-02-25Fix
CVE-2025-26597Xorg: Xwayland: Buffer overflow in xkbchangetypesofkey7.8NVD v3.10.4%2025-02-25Fix
CVE-2025-26596Xorg: Xwayland: Heap overflow in xkbwritekeysyms7.8NVD v3.10.4%2025-02-25Fix
CVE-2025-26595Xorg: Xwayland: Buffer overflow in xkbvmodmasktext7.8NVD v3.10.4%2025-02-25Fix
CVE-2025-26594X.Org xwayland X.Org and use-after-free7.8NVD v3.10.4%2025-02-25Fix
CVE-2025-25521Seacms SQL injection9.8CISA ADP v3.10.5%2025-02-25
CVE-2025-25520Seacms SQL injection9.8CISA ADP v3.10.5%2025-02-25
CVE-2025-25519Seacms SQL injection9.8CISA ADP v3.10.5%2025-02-25
CVE-2025-25517Seacms SQL injection9.8CISA ADP v3.10.5%2025-02-25
CVE-2025-25516Seacms SQL injection9.8CISA ADP v3.10.5%2025-02-25
CVE-2025-25515Seacms SQL injection8.8CISA ADP v3.10.5%2025-02-25
CVE-2025-25514Seacms SQL injection6.5CISA ADP v3.10.3%2025-02-25
CVE-2025-25192GLPI allows unauthorized access to debug mode6.5CNA v3.10.7%2025-02-25Fix
CVE-2025-23046GLPI vulnerable to unauthorized authentication by email using the OAuthIMAP plugin6.3CNA v4.00.5%2025-02-25Fix
CVE-2025-23024GLPI: Plugins are disabled accessing one page6.9CNA v4.00.3%2025-02-25Fix
CVE-2025-22211Extension Webdesigner-profi.de SQL injection in JoomShopping component for Joomla3.4CISA ADP v3.10.4%2025-02-25
CVE-2025-22210Extension Hikashop.com SQL injection in Hikashop component for Joomla7.2CISA ADP v3.10.5%2025-02-25
CVE-2025-21627GLPI cross-site scripting6.5CNA v3.10.4%2025-02-25Fix
CVE-2025-21626GLPI vulnerable to exposure of sensitive information in the `status.php` endpoint5.8CNA v3.10.4%2025-02-25Fix
CVE-2025-1676hzmanyun Education and Training System pdf2swf os command injection9.8v3.12.4%2025-02-25
CVE-2025-1675zephyrproject-rtos Zephyr out-of-bounds read in dns_copy_qname8.2CNA v3.10.4%2025-02-25Fix
CVE-2025-1674zephyrproject-rtos Zephyr out-of-bounds read when unpacking DNS answers8.2CNA v3.10.4%2025-02-25Fix
CVE-2025-1673zephyrproject-rtos Zephyr out-of-bounds read when calling crc16_ansi and strlen in dns_validate_msg8.2CNA v3.10.4%2025-02-25Fix
CVE-2025-1648Yawave WordPress plugin unauthenticated SQL injection7.5CNA v3.11.0%2025-02-25
CVE-2025-1646Lumsoft ERP ASPX File UploadAjaxAPI.ashx unrestricted upload6.9CNA v4.00.5%2025-02-25
CVE-2025-1645Benner Connecta EditarLogado resource injection5.3CNA v4.00.4%2025-02-25
CVE-2025-1644Benner ModernaNet SG_Gravar cross-site request forgery6.5v3.10.4%2025-02-25
CVE-2025-1643Benner ModernaNet SG_AlterarSenha cross-site request forgery8.8v3.10.4%2025-02-25
CVE-2025-1642Benner ModernaNet GetImageMedico resource injection7.5v3.10.7%2025-02-25
CVE-2025-1641Benner ModernaNet GetHorariosDoDia SQL injection9.8v3.10.6%2025-02-25
CVE-2025-1640Benner ModernaNet JS_CarregaCombo SQL injection9.8v3.10.6%2025-02-25
CVE-2025-1262Advanced Google reCaptcha WordPress plugin Built-in Math CAPTCHA bypass5.3CNA v3.10.3%2025-02-25Fix
CVE-2025-1204Contec Health CMS8000 Patient Monitor hidden functionality7.7CNA v4.00.5%2025-02-25
CVE-2025-1128Everest Forms WordPress plugin unauthenticated arbitrary file upload, read, and deletion9.8CNA v3.142.4%2025-02-25Fix
CVE-2025-1068There is a code injection vulnerability in Esri ArcGIS AllSource7.3CNA v3.10.2%2025-02-25Fix
CVE-2025-1067There is a code injection vulnerability in ArcGIS Pro7.3CNA v3.10.2%2025-02-25Fix
CVE-2025-1063Classified Listing WordPress plugin information disclosure5.3CNA v3.10.4%2025-02-25Fix
CVE-2025-0514The Document Foundation LibreOffice improper input validation7.2CNA v4.00.3%2025-02-25Fix
CVE-2025-27364Caldera OS command injection10.0CNA v3.125.9%2025-02-24Emerging ThreatsKCV
CVE-2025-27357Önceki Yazı Link WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-02-24
CVE-2025-27356Sticky Header On Scroll WordPress plugin broken access control5.4CNA v3.10.3%2025-02-24
CVE-2025-27355Woocommerce Loi Hamon WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-02-24
CVE-2025-27353Namaste! LMS WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-02-24
CVE-2025-27352无觅相关文章插件 WordPress plugin CSRF to cross-site scripting (XSS)7.1CNA v3.10.2%2025-02-24
CVE-2025-27351Local Search SEO Contact Page WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-02-24
CVE-2025-27349Get Posts WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.2%2025-02-24
CVE-2025-27348WP Social SEO Booster WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-02-24
CVE-2025-27347Direct Checkout Button for WooCommerce WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-02-24
CVE-2025-27344Phee's LinkPreview WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-02-24
CVE-2025-27342WooCommerce Recargo de Equivalencia WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-02-24
CVE-2025-27341Reactive Mortgage Calculator WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.2%2025-02-24
CVE-2025-27340F12-Profiler WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.2%2025-02-24Fix
CVE-2025-27339Minimum Password Strength WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-02-24
CVE-2025-27336Just Variables WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-02-24
CVE-2025-27335Auto Tag Links WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-02-24
CVE-2025-27332Smart Maintenance and Countdown WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-02-24
CVE-2025-27331WooCommerce Display Products by Tags WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-02-24
CVE-2025-27330PlayerJS WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-02-24Fix
CVE-2025-27329EZ InLinkz linkup WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-02-24
CVE-2025-27328WP-PostRatings Cheater WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-02-24
CVE-2025-27327Live Streaming Video Player by SRS Player WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-02-24
CVE-2025-27325Video.js HLS Player WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-02-24
CVE-2025-27323WP About Author WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-02-24Fix
CVE-2025-27321Blightly Explorer WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-02-24
CVE-2025-27320Profile Widget Ninja WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-02-24
CVE-2025-27318Simple Google Sitemap WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-02-24
CVE-2025-27317RAYS Grid WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-02-24
CVE-2025-27316JPG, PNG Compression and Optimization WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-02-24
CVE-2025-27315All-In-One Cufon WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-02-24
CVE-2025-27312WP Sitemap WordPress plugin SQL injection8.5CNA v3.10.4%2025-02-24
CVE-2025-27311Bulk Content Creator WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-02-24
CVE-2025-27307Quotes llama WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.3%2025-02-24Fix
CVE-2025-27306Pathomation WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.3%2025-02-24
CVE-2025-27305Table of Contents Block WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-02-24
CVE-2025-27304Contact Form 7 Star Rating with font Awesome WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-02-24
CVE-2025-27303Contact Form 7 Star Rating WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-02-24
CVE-2025-27301NHR Options Table Manager WordPress plugin deserialization of untrusted data7.2CNA v3.10.7%2025-02-24Fix
CVE-2025-27300ADFO WordPress plugin deserialization of untrusted data7.2CNA v3.10.7%2025-02-24
CVE-2025-27298WP Video Posts WordPress plugin CSRF to remote code execution (RCE)8.3CNA v3.10.3%2025-02-24
CVE-2025-27297Bravo Search and Replace WordPress plugin SQL injection7.6CNA v3.10.5%2025-02-24
CVE-2025-27296Auto Ad Inserter WordPress plugin revenueflex missing authorization7.2CNA v3.10.5%2025-02-24Fix
CVE-2025-27294WP-Asambleas WordPress plugin arbitrary shortcode execution vulnerability4.8CNA v3.10.3%2025-02-24
CVE-2025-27290Select Erima Zarinpal Donate WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-02-24
CVE-2025-27280Archive Page WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-02-24Fix
CVE-2025-27277tiefpunkt Add Linked Images To Gallery cross-site request forgery7.1CNA v3.10.2%2025-02-24
CVE-2025-27276Photo Gallery ( Responsive ) WordPress plugin CSRF to privilege escalation8.8CNA v3.10.2%2025-02-24
CVE-2025-27272VG PostCarousel WordPress plugin local file inclusion7.5CNA v3.10.8%2025-02-24
CVE-2025-27266Hover Image Button WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-02-24
CVE-2025-27265Google Maps for WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-02-24
CVE-2025-27144go-jose go JOSE's Parsing vulnerable to denial of service6.6CNA v4.00.4%2025-02-24Fix
CVE-2025-27143better-auth beter Auth has an open redirect via Scheme-Less Callback parameter6.9CNA v4.00.4%2025-02-24Fix
CVE-2025-27141Metabase Enterprise Edition allows cached questions to leak data to impersonated users4.8CNA v4.00.4%2025-02-24Fix
CVE-2025-27140WeGIA vulnerable to OS command injection at endpoint importar_dump.php parameter import (RCE)10.0CNA v4.02.9%2025-02-24Fix
CVE-2025-27137Dependency-Track vulnerable to local file inclusion via custom notification templates4.4CNA v3.10.2%2025-02-24Fix
CVE-2025-27133WeGIA has SQL injection endpoint at dao/pet/adicionar_tipo_exame.php parameter tipo_exame9.4CNA v4.00.6%2025-02-24Fix
CVE-2025-27112Navidrome has authentication bypass in Subsonic API with non-existent username6.9CNA v4.01.0%2025-02-24NucleiFix
CVE-2025-26883Animated Text Block WordPress plugin broken access control6.5CNA v3.10.4%2025-02-24Fix
CVE-2025-26803Phusion Passenger denial of service7.5v3.10.6%2025-02-24Fix
CVE-2025-26533moodle SQL injection risk in course search module list filter9.8NVD v3.10.6%2025-02-24Fix
CVE-2025-26532moodle teachers can evade trusttext config when restoring glossary entries4.3NVD v3.10.3%2025-02-24Fix
CVE-2025-26531moodle IDOR in badges allows disabling of arbitrary badges5.3NVD v3.10.3%2025-02-24Fix
CVE-2025-26530moodle reflected XSS via question bank filter6.1NVD v3.10.4%2025-02-24Fix
CVE-2025-26529moodle stored XSS risk in admin live log6.1NVD v3.10.5%2025-02-24Exploit codeFix
CVE-2025-26528moodle stored XSS in ddimageortext question type6.1NVD v3.10.3%2025-02-24Fix
CVE-2025-26527moodle non-searchable tags can still be discovered on the tag search page and in the tags block5.3CNA v3.10.4%2025-02-24Fix
CVE-2025-26526moodle feedback response viewing and deletions did not respect Separate Groups mode6.5CNA v3.10.3%2025-02-24Fix
CVE-2025-26525moodle arbitrary file read risk through pdfTeX8.6CNA v3.10.4%2025-02-24Fix
CVE-2025-26201GreaterWMS staff route authentication bypass9.1CISA ADP v3.10.6%2025-02-24
CVE-2025-26200SLIMS Senayan Library Management System SQL injection7.2CISA ADP v3.10.5%2025-02-24
CVE-2025-25513Seacms SQL injection9.8v3.10.5%2025-02-24
CVE-2025-25460FlatPress cross-site scripting4.8CISA ADP v3.10.5%2025-02-24Exploit code
CVE-2025-25279Arbitrary file read in Mattermost Boards via import and export board archive9.9CNA v3.124.2%2025-02-24Fix
CVE-2025-24526Mattermost channel export permitted on archived channel when viewing archived channels is disabled4.3CNA v3.10.3%2025-02-24Fix
CVE-2025-24490SQL injection in Mattermost Boards via board category ID reordering9.6CNA v3.10.4%2025-02-24Fix
CVE-2025-23017workos Hosted AuthKit authentication bypass6.0CNA v3.10.3%2025-02-24Fix
CVE-2025-22974Seacms SQL injection9.8CISA ADP v3.10.8%2025-02-24
CVE-2025-22495Eaton Network M2 OS command injection8.4CNA v3.10.4%2025-02-24Fix
CVE-2025-20051Arbitrary file read via block duplication in Mattermost Boards9.9CNA v3.10.6%2025-02-24Fix
CVE-2025-1632libarchive bsdunzip.c list null pointer dereference5.5v3.10.3%2025-02-24Fix
CVE-2025-1629Excitel Broadband Private my Excitel App One-Time Password excessive authentication5.1CNA v4.00.2%2025-02-24
CVE-2025-1618VTiger CRM index.php cross-site scripting6.1v3.10.4%2025-02-24
CVE-2025-1617Netis WF2780 Wireless 2.4G menu cross-site scripting4.8CNA v4.00.3%2025-02-24
CVE-2025-1616FiberHome An5506-01a ONU GPON Diagnosis os command injection9.8v3.17.7%2025-02-24
CVE-2025-1615FiberHome AN5506-01A ONU GPON NAT Submenu cross-site scripting4.8v3.10.6%2025-02-24
CVE-2025-1614FiberHome AN5506-01A ONU GPON Port Forwarding Submenu portForwardingCfg cross-site scripting4.8v3.10.8%2025-02-24
CVE-2025-1613FiberHome AN5506-01A ONU GPON URL Filtering Submenu URL_filterCfg cross-site scripting4.8v3.10.8%2025-02-24
CVE-2025-1612Edimax BR-6288ACL wireless5g_basic.asp cross-site scripting6.1v3.10.4%2025-02-24
CVE-2025-1611ShopXO Template ThemeAdminService.php injection5.1CNA v4.00.6%2025-02-24
CVE-2025-1610LB-LINK AC1900 Router set_blacklist websGetVar os command injection9.8v3.113.2%2025-02-24
CVE-2025-1609LB-LINK AC1900 Router set_cmd websGetVar os command injection9.8v3.110.2%2025-02-24
CVE-2025-1608LB-LINK AC1900 Router set_manpwd websGetVar os command injection9.8v3.110.2%2025-02-24
CVE-2025-1607SourceCodester Best Employee Management System salary_slip.php authorization5.3CNA v4.00.6%2025-02-24
CVE-2025-1606SourceCodester Best Employee Management System backups.php information disclosure7.5v3.10.7%2025-02-24
CVE-2025-1599SourceCodester Best Church Management Software profile_crud.php path traversal9.1v3.11.1%2025-02-24
CVE-2025-1598SourceCodester Best Church Management Software asset_crud.php unrestricted upload9.8v3.10.7%2025-02-24
CVE-2025-1488WPO365 MICROSOFT 365 GRAPH MAILER WordPress plugin open redirect via redirect_to parameter6.1v3.10.3%2025-02-24Fix
CVE-2025-1412Mattermost Session Persistence after User-to-Bot Conversion3.1CNA v3.10.3%2025-02-24Fix
CVE-2025-0690Red Hat Enterprise Linux 9 grub2: Read: Integer overflow may lead to out-of-bounds write6.1CNA v3.10.7%2025-02-24Fix
CVE-2025-0545XSS in Tekrom Technology's T-Soft E-Commerce4.7CNA v3.10.3%2025-02-24Fix
CVE-2025-22635Eventer - WordPress Event and Booking Manager plugin reflected cross-site scripting (XSS)6.1NVD v3.10.2%2025-02-23Fix
CVE-2025-22633Give Divi Donation Modules WordPress plugin sensitive data exposure5.8CNA v3.10.3%2025-02-23Fix
CVE-2025-22632WooCommerce Pricing Product Pricing WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-02-23Fix
CVE-2025-22631Marketing Automation WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-02-23Fix
CVE-2025-1597SourceCodester Best Church Management Software redirect.php cross-site scripting6.1v3.10.4%2025-02-23
CVE-2025-1596SourceCodester Best Church Management Software fpassword.php SQL injection9.8v3.10.6%2025-02-23Fix
CVE-2025-1595Anhui Xufan Information Technology EasyCVR getbaseconfig information disclosure6.9CNA v4.01.1%2025-02-23Nuclei
CVE-2025-1594FFmpeg AAC Encoder aacenc_tns.c ff_aac_search_for_tns stack-based overflow8.8v3.10.6%2025-02-23Fix
CVE-2025-1593SourceCodester Best Employee Management System Profile Picture unrestricted upload9.8v3.10.5%2025-02-23
CVE-2025-1592SourceCodester Best Employee Management System Add Role Page Role.php cross-site scripting6.1v3.10.4%2025-02-23
CVE-2025-1591SourceCodester Employee Management System Department page department.php cross-site scripting6.1v3.10.3%2025-02-23
CVE-2025-1590SourceCodester E-Learning System List of Lessons page index.php unrestricted upload7.2v3.10.4%2025-02-23
CVE-2025-1589SourceCodester E-Learning System User Registration register.php cross-site scripting6.1v3.10.5%2025-02-23
CVE-2025-1588PHPGurukul Online Nurse Hiring System manage-nurse.php path traversal9.1v3.10.8%2025-02-23
CVE-2025-1587SourceCodester Telecom Billing Management System Add New Record main.cpp addrecords buffer overflow7.8v3.10.3%2025-02-23
CVE-2025-1586code-projects Blood Bank System A-.php cross-site scripting6.1v3.10.5%2025-02-23
CVE-2025-1585otale header.html OptionsService cross-site scripting5.4v3.10.4%2025-02-23
CVE-2025-1584opensolon Solon StaticMappings.java path traversal5.3CNA v4.00.6%2025-02-23Fix
CVE-2025-1583PHPGurukul Online Nurse Hiring System search-report-details.php SQL injection9.8v3.10.6%2025-02-23
CVE-2025-1582PHPGurukul Online Nurse Hiring System all-request.php SQL injection9.8v3.10.6%2025-02-23
CVE-2025-1581PHPGurukul Online Nurse Hiring System book-nurse.php SQL injection9.8v3.10.5%2025-02-23
CVE-2025-1580PHPGurukul Nipah Virus Testing Management System search-report-result.php SQL injection9.8v3.10.5%2025-02-23
CVE-2025-1579code-projects Blood Bank System user.php cross-site scripting6.1v3.10.4%2025-02-23
CVE-2025-1578PHPGurukul/Campcodes Online Shopping Portal search-result.php SQL injection7.5v3.10.4%2025-02-23
CVE-2025-1577code-projects Blood Bank System prostatus.php cross-site scripting5.4v3.10.3%2025-02-23
CVE-2025-1576code-projects Real Estate Property Management System ajax_state.php SQL injection9.8v3.10.6%2025-02-23
CVE-2025-1575Harpia DiagSystem atualatendimento_jpeg.php resource injection5.3CNA v4.00.5%2025-02-23
CVE-2025-1467tarteaucitronjs tarteaucitron cross-site scripting (XSS)5.1CNA v4.00.3%2025-02-23Fix
CVE-2025-27012A1POST.BG Shipping for Woo WordPress plugin CSRF to privilege escalation8.8CNA v3.10.2%2025-02-22Fix
CVE-2025-26973Social Warfare WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-02-22Fix
CVE-2025-26776Chaty Pro WordPress plugin arbitrary file upload10.0CNA v3.10.6%2025-02-22Fix
CVE-2025-26774Responsive Modal Builder for High Conversion Easy Popups WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-02-22Fix
CVE-2025-26764Distance Based Shipping Calculator WordPress plugin settings Change vulnerability6.5CNA v3.10.3%2025-02-22Fix
CVE-2025-26763Responsive Slider by MetaSlider WordPress plugin deserialization of untrusted data9.8CNA v3.10.7%2025-02-22Fix
CVE-2025-26760Calculator Builder WordPress plugin local file inclusion7.5CNA v3.10.6%2025-02-22Fix
CVE-2025-26757FULL Cliente WordPress plugin local file inclusion7.5CNA v3.10.6%2025-02-22Fix
CVE-2025-26756Magic the Gathering Card Tooltips WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-02-22Fix
CVE-2025-26750Vitepos WordPress plugin broken access control6.5CNA v3.10.3%2025-02-22Fix
CVE-2025-21704Linux kernel CDC-ACM USB driver out-of-bounds write7.8NVD v3.10.4%2025-02-22Fix
CVE-2025-1557OFCMS cross-site request forgery5.3CNA v4.00.3%2025-02-22
CVE-2025-1556westboy CicadasCMS Template Management system deserialization9.8v3.10.7%2025-02-22
CVE-2025-1553pankajindevops scale project cross-site scripting5.1CNA v4.00.3%2025-02-22
CVE-2025-1510Custom Post Type Date Archives do_shortcode action code injection9.8v3.10.6%2025-02-22
CVE-2025-1509Show Me The Cookies WordPress plugin unauthenticated arbitrary shortcode execution9.8v3.10.6%2025-02-22
CVE-2025-1361IP2Location Country Blocker WordPress plugin information disclosure5.3NVD v3.11.3%2025-02-22NucleiFix
CVE-2025-0957Vulnerability: SMTP for Amazon SES WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.5%2025-02-22Fix
CVE-2025-0953SMTP for Sendinblue YaySMTP WordPress plugin unauthenticated stored cross-site scripting6.1NVD v3.10.4%2025-02-22Fix
CVE-2025-0918SMTP for SendGrid YaySMTP WordPress plugin unauthenticated stored cross-site scripting6.1NVD v3.10.4%2025-02-22Fix
CVE-2025-27109solidjs solid lack of Escaping of HTML in JSX Fragments allows for cross-site scripting in solid-js7.3CNA v3.10.3%2025-02-21Fix
CVE-2025-27108Cross-site scripting vulnerability due to improper use of string.replace in dom-expressions7.3CNA v3.10.3%2025-02-21Fix
CVE-2025-27106Code injection in binance-trading-bot7.7CNA v4.02.0%2025-02-21Fix
CVE-2025-27105AugAssign evaluation order causing OOB write within the object in Vyper2.3CNA v4.00.6%2025-02-21Fix
CVE-2025-27104Double eval in for List Iter in Vyper2.3CNA v4.00.4%2025-02-21Fix
CVE-2025-27100An authenticated user can crash lakeFS by exhausting server memory6.5CNA v3.10.4%2025-02-21Fix
CVE-2025-26794Exim SQLite hints and ETRN serialization SQL injection9.8NVD v3.177.5%2025-02-21Emerging ThreatsExploit codeFix
CVE-2025-26622Sqrt doesn't define rounding behavior in Vyper2.3CNA v4.00.3%2025-02-21Fix
CVE-2025-26014olajowon Loggrove remote code execution9.8CISA ADP v3.11.1%2025-02-21Exploit code
CVE-2025-26013olajowon Loggrove sensitive information in source code8.2CISA ADP v3.10.4%2025-02-21
CVE-2025-25878Angeljudesuarez Simple ChatBox SQL injection3.8CISA ADP v3.10.3%2025-02-21
CVE-2025-25877Angeljudesuarez Simple ChatBox SQL injection3.8CISA ADP v3.10.3%2025-02-21
CVE-2025-25876Angeljudesuarez Simple ChatBox SQL injection7.2CISA ADP v3.10.5%2025-02-21
CVE-2025-25875Angeljudesuarez Simple ChatBox SQL injection6.4CISA ADP v3.10.4%2025-02-21
CVE-2025-25772Ujcms Jspxcms component /back/UserController.java cross-site request forgery5.1CISA ADP v3.10.2%2025-02-21
CVE-2025-25770wangmarket cross-site request forgery6.8CISA ADP v3.10.2%2025-02-21
CVE-2025-25769wangmarket cross-site request forgery8.0CISA ADP v3.10.2%2025-02-21
CVE-2025-25768MRCMS command injection5.4CISA ADP v3.10.3%2025-02-21
CVE-2025-25767MRCMS component /controller/UserController.java privilege escalation4.8CISA ADP v3.10.3%2025-02-21
CVE-2025-25766MRCMS component /file/savefile.do arbitrary file upload4.8CISA ADP v3.10.3%2025-02-21
CVE-2025-25765MRCMS arbitrary file write4.0CISA ADP v3.10.2%2025-02-21
CVE-2025-25605TOTOLINK X5000R command injection6.5CISA ADP v3.10.8%2025-02-21
CVE-2025-25604TOTOLINK X5000R command injection6.5CISA ADP v3.10.8%2025-02-21
CVE-2025-25510Tenda AC8 buffer overflow6.5CISA ADP v3.10.3%2025-02-21
CVE-2025-25507Tenda AC6 There is a remote code execution6.5CISA ADP v3.10.5%2025-02-21
CVE-2025-25505Tenda AC6 buffer overflow6.5CISA ADP v3.10.3%2025-02-21
CVE-2025-25282Potential insecure direct object reference (IDOR) vulnerability in ragflow8.1CNA v3.00.5%2025-02-21
CVE-2025-1555hzmanyun Education and Training System saveImage unrestricted upload9.8v3.10.7%2025-02-21
CVE-2025-1548iteachyou Dreamer CMS edit cross-site scripting4.6v3.10.3%2025-02-21
CVE-2025-1546BDCOM Behavior Management and Auditing System operate.mds log_operate_clear os command injection6.9CNA v4.02.7%2025-02-21
CVE-2025-1544dingfanzu CMS loadShopInfo.php SQL injection5.3CNA v4.00.3%2025-02-21
CVE-2025-1543iteachyou Dreamer CMS ueditor- path traversal5.3CNA v4.00.8%2025-02-21
CVE-2025-1539D-Link DAP-1320 storagein.pd-XXXXXX replace_special_char stack-based overflow9.8v3.11.6%2025-02-21
CVE-2025-1538D-Link DAP-1320 API set_ws_action heap-based overflow8.7CNA v4.01.5%2025-02-21
CVE-2025-1537Harpia DiagSystem atualatendimento_jpeg.php SQL injection5.3CNA v4.00.4%2025-02-21
CVE-2025-1536Raisecom Multi-Service Intelligent Gateway vpn_template_style.php OS command injection6.9CNA v4.03.2%2025-02-21
CVE-2025-1535Baiyi Cloud Asset Management System admin.ticket.close.php SQL injection6.9CNA v4.00.4%2025-02-21
CVE-2025-1489WP-Appbox WordPress plugin stored cross-site scripting5.4v3.10.3%2025-02-21Exploit codeFix
CVE-2025-1471Eclipse Omr: Buffer overflow7.1CNA v4.00.2%2025-02-21Fix
CVE-2025-1470Eclipse Omr: Null pointer dereference5.1CNA v4.00.2%2025-02-21
CVE-2025-1410Events Calendar Made Simple Pie Calendar WordPress plugin stored cross-site scripting5.4v3.10.3%2025-02-21Fix
CVE-2025-1407AMO Team Showcase WordPress plugin stored cross-site scripting5.4v3.10.2%2025-02-21
CVE-2025-1406Newpost Catch WordPress plugin stored cross-site scripting5.4v3.10.3%2025-02-21Fix
CVE-2025-1403IBM Qiskit SDK denial of service8.6CNA v3.10.7%2025-02-21Fix
CVE-2025-1402stellarwp Event Tickets and Registration ticket deletion handler missing authorization5.3CNA v3.10.4%2025-02-21Fix
CVE-2025-1001Medixant RadiAnt DICOM Viewer improper certificate validation5.7CNA v4.00.1%2025-02-21Fix
CVE-2025-0838Heap buffer overflow in Abseil5.9CNA v4.00.6%2025-02-21Fix
CVE-2025-0728Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflow5.3CNA v4.00.8%2025-02-21Fix
CVE-2025-0727Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflow5.3CNA v4.00.8%2025-02-21Fix
CVE-2025-0726Eclipse ThreadX NetX Duo HTTP server denial of service7.1CNA v4.00.8%2025-02-21Fix
CVE-2025-27218Sitecore Experience Manager and Experience Platform insecure deserialization5.3CISA ADP v3.165.0%2025-02-20NucleiMetasploitEmerging ThreatsExploit code
CVE-2025-27098The Guild GraphQL Mesh static file handler path traversal5.8CNA v3.10.4%2025-02-20Fix
CVE-2025-27097The Guild GraphQL Mesh query document cache vulnerability5.1CNA v4.00.4%2025-02-20Fix
CVE-2025-27096SQL injection endpoint html/personalizacao_upload.php parameter id_campo in WeGIA9.4CNA v4.00.6%2025-02-20Fix
CVE-2025-27091Cisco OpenH264 Decoding functions heap overflow8.6CNA v4.00.7%2025-02-20Fix
CVE-2025-27088Reflected cross-site scripting (XSS) in template implementation in oxyno-zeta/s3-proxy8.4CNA v4.00.5%2025-02-20Fix
CVE-2025-26856I-O DATA DEVICE UD-LT2 OS command improper neutralization7.2CNA v3.01.1%2025-02-20
CVE-2025-26618SSH SFTP packet size not verified properly in Erlang OTP7.0CNA v4.00.5%2025-02-20Fix
CVE-2025-26311Libming clip actions parsing functions memory leak6.5CISA ADP v3.10.4%2025-02-20
CVE-2025-26310Libming denial of service6.5CISA ADP v3.10.4%2025-02-20
CVE-2025-26309Libming parseSWF_DEFINESCENEANDFRAMEDATA function memory leak6.5CISA ADP v3.10.4%2025-02-20
CVE-2025-26308Libming parseSWF_FILTERLIST function in util/parser.c memory leak6.5CISA ADP v3.10.4%2025-02-20
CVE-2025-26307Libming parseSWF_IMPORTASSETS2 function memory leak6.5CISA ADP v3.10.4%2025-02-20
CVE-2025-26306Libming readSizedString function in util/read.c memory leak6.5CISA ADP v3.10.4%2025-02-20
CVE-2025-26305Libming parseSWF_SOUNDINFO function in util/parser.c memory leak8.2CISA ADP v3.10.4%2025-02-20
CVE-2025-26304Libming parseSWF_EXPORTASSETS function memory leak8.2CISA ADP v3.10.4%2025-02-20
CVE-2025-25973Yandaozi Ppress "related recommendations" feature stored cross-site scripting6.5CISA ADP v3.10.5%2025-02-20
CVE-2025-25968Ddsn CM3 Acora Content Management System improper access control6.0CISA ADP v3.11.0%2025-02-20
CVE-2025-25960Phpcms cross-site scripting6.1CISA ADP v3.10.3%2025-02-20
CVE-2025-25958Phpcms cross-site scripting5.4CISA ADP v3.10.3%2025-02-20
CVE-2025-25957XunRuiCMS cross-site scripting6.1CISA ADP v3.10.3%2025-02-20
CVE-2025-25679Tenda i12 stack-based buffer overflow8.0CISA ADP v3.10.3%2025-02-20
CVE-2025-25678Tenda i12 buffer overflow9.8CISA ADP v3.10.5%2025-02-20
CVE-2025-25676Tenda i12 buffer overflow9.8CISA ADP v3.10.5%2025-02-20
CVE-2025-25675Tenda AC10 command injection9.8v3.11.3%2025-02-20
CVE-2025-25674Tenda AC10 buffer overflow9.8v3.10.4%2025-02-20
CVE-2025-25668Tenda AC8 buffer overflow9.8v3.10.5%2025-02-20
CVE-2025-25667Tenda AC8 buffer overflow9.8v3.10.6%2025-02-20
CVE-2025-25664Tenda AC8 buffer overflow9.8v3.10.5%2025-02-20
CVE-2025-25663Tenda AC8 buffer overflow9.8v3.10.5%2025-02-20Emerging Threats
CVE-2025-25662Tenda O4 buffer overflow9.8CISA ADP v3.10.5%2025-02-20
CVE-2025-25299ckeditor5 cross-site scripting (XSS) in the real-time collaboration package2.3CNA v4.00.6%2025-02-20Fix
CVE-2025-24947litespeedtech LSQUIC algorithmic complexity5.3CNA v3.10.7%2025-02-20Fix
CVE-2025-24946privateoctopus picoquic algorithmic complexity5.3CNA v3.10.5%2025-02-20
CVE-2025-24893XWiki Platform eval injection9.8CNA v3.199.9%2025-02-20KEVNucleiMetasploitExploit codeFix
CVE-2025-23020ptrd Kwik algorithmic complexity5.3CNA v3.10.6%2025-02-20Fix
CVE-2025-22973QiboSoft QiboCMS X1 information disclosure7.5CISA ADP v3.10.5%2025-02-20
CVE-2025-21106Dell RecoverPoint for VMs incorrect default permissions5.5CNA v3.10.1%2025-02-20Fix
CVE-2025-21105Dell RecoverPoint for VMs command execution6.6CNA v3.10.2%2025-02-20Fix
CVE-2025-20059PingAM Java Policy Agent path traversal9.2CNA v4.01.0%2025-02-20
CVE-2025-1492Uncontrolled recursion in Wireshark7.8CNA v3.10.3%2025-02-20Fix
CVE-2025-1483LTL Freight Quotes WordPress plugin unauthorized access5.3CNA v3.10.3%2025-02-20Fix
CVE-2025-1328Typed JS: A typewriter style animation WordPress plugin stored cross-site scripting5.4v3.10.3%2025-02-20
CVE-2025-1293HashiCorp Hermes improperly Validates AWS ALB JWTs, which may lead to authentication bypass8.2CNA v3.10.3%2025-02-20Fix
CVE-2025-1265Elseta Vinci Protocol Analyzer OS command injection9.4CNA v4.01.4%2025-02-20Fix
CVE-2025-1223Citrix Secure Access Client uncontrolled search path5.8CNA v4.00.2%2025-02-20Fix
CVE-2025-1222Citrix Secure Access Client privilege escalation5.8CNA v4.00.2%2025-02-20Fix
CVE-2025-1064Login/Signup Popup ( Inline Form + Woocommerce ) WordPress plugin stored cross-site scripting5.4v3.10.3%2025-02-20Fix
CVE-2025-1043Embed Any Document WordPress plugin server-side request forgery6.4CNA v3.10.3%2025-02-20Fix
CVE-2025-1039Lenix Elementor Leads addon WordPress plugin unauthenticated stored cross-site scripting6.1NVD v3.10.4%2025-02-20Fix
CVE-2025-0897Modal Window WordPress plugin stored cross-site scripting5.4v3.10.3%2025-02-20Fix
CVE-2025-0868Remote code execution in DocsGPT9.3CNA v4.017.1%2025-02-20NucleiEmerging ThreatsExploit code
CVE-2025-0866Legoeso PDF Manager WordPress plugin authenticated (Author+) SQL injection via checkedVals parameter6.5CNA v3.10.4%2025-02-20
CVE-2025-0352Rapid Response Monitoring My Security Account App authorization bypass through user-controlled key8.7CNA v4.00.4%2025-02-20Fix
CVE-2025-0161IBM Security Verify Access Appliance code injection7.8CNA v3.10.2%2025-02-20Fix
CVE-2025-0112Cortex XDR Agent: Local Windows User can Disable the Agent6.8CNA v4.00.2%2025-02-20Fix
CVE-2025-27092Path traversal vulnerability in GHOSTS Photo Retrieval endpoint8.7CNA v4.00.6%2025-02-19Fix
CVE-2025-27090Server-side request forgery (SSRF) in sliver teamserver6.9CNA v4.00.6%2025-02-19Fix
CVE-2025-27089Overlapping policies allow update to non-allowed fields in directus5.4CNA v3.10.2%2025-02-19Fix
CVE-2025-25947Axiosys Bento4 improper initialization5.5CISA ADP v3.10.2%2025-02-19
CVE-2025-25946Axiosys Bento4 memory leak5.5CISA ADP v3.10.2%2025-02-19
CVE-2025-25945Axiosys Bento4 information disclosure6.5CISA ADP v3.10.4%2025-02-19
CVE-2025-25944Axiosys Bento4 buffer overflow7.3CISA ADP v3.10.2%2025-02-19
CVE-2025-25943Axiosys Bento4 buffer overflow7.8CISA ADP v3.10.2%2025-02-19
CVE-2025-25942Axiosys Bento4 information disclosure6.5CISA ADP v3.10.4%2025-02-19
CVE-2025-25196OpenFGA authorization bypass5.8CNA v4.00.4%2025-02-19Fix
CVE-2025-25054Six Apart Movable Type (8.4.x series) user information edit page reflected cross-site scripting6.1CNA v3.00.3%2025-02-19
CVE-2025-24989Microsoft Power Pages improper access control8.2CNA v3.11.6%2025-02-19KEVFix
CVE-2025-24965Krun_config.json symlink attack creates or overwrites file on the host in crun8.5CNA v4.00.6%2025-02-19Fix
CVE-2025-24841Six Apart Movable Type (8.4.x series) Movable Type contains a stored cross-site scripting5.4CNA v3.00.2%2025-02-19
CVE-2025-24806Regulation applies separately to Username-based logins to Email-based logins in authelia2.3CNA v4.00.4%2025-02-19Fix
CVE-2025-22888Six Apart Movable Type (8.4.x series) Movable Type contains a stored cross-site scripting5.4CNA v3.00.2%2025-02-19
CVE-2025-22622Age Verification reflected cross-site scripting (XSS)4.3CNA v3.10.3%2025-02-19Fix
CVE-2025-21355Microsoft Bing remote code execution8.6CNA v3.11.7%2025-02-19Fix
CVE-2025-20211Cisco BroadWorks Application Delivery Platform software cross-site scripting6.1CNA v3.10.3%2025-02-19Fix
CVE-2025-20158Cisco Video Phone 8875 and Desk Phone 9800 Series information disclosure4.4CNA v3.10.2%2025-02-19Fix
CVE-2025-20153Cisco ESA mail Bypass5.8CNA v3.10.4%2025-02-19Fix
CVE-2025-1465Lmxcms Maintenance db.inc.php code injection6.6v3.10.5%2025-02-19
CVE-2025-1464Baiyi Cloud Asset Management System admin.house.collect.php SQL injection6.9CNA v4.00.5%2025-02-19
CVE-2025-1448Synway SMG Gateway Management Software 9-12ping.php command injection6.9CNA v4.02.7%2025-02-19
CVE-2025-1447kasuganosoras Pigeon index.php server-side request forgery5.3CNA v4.00.4%2025-02-19Fix
CVE-2025-1441Royal Elementor Addons and Templates WordPress plugin cross-site request forgery8.8v3.10.2%2025-02-19Fix
CVE-2025-1426Google Chrome GPU heap-based buffer overflow8.8CISA ADP v3.10.6%2025-02-19Fix
CVE-2025-1135SQL injection in ChurchCRM CurrentFundraiser parameter via BatchWinnerEntry.php7.2NVD v3.10.8%2025-02-19
CVE-2025-1134SQL injection in ChurchCRM CurrentFundraiser parameter via DonatedItemEditor.php7.2NVD v3.10.8%2025-02-19
CVE-2025-1133SQL injection in ChurchCRM EID parameter via EditEventAttendees.php7.2NVD v3.10.6%2025-02-19
CVE-2025-1132SQL injection in ChurchCRM EN_tyid parameter via EditEventAttendees.php8.8NVD v3.10.6%2025-02-19
CVE-2025-1118GRUB2 dump command information disclosure4.4CNA v3.10.3%2025-02-19Fix
CVE-2025-1075Checkmk LDAP credentials logged to Apache error log5.6CNA v4.00.3%2025-02-19Fix
CVE-2025-1065Visualizer: Tables and Charts Manager for WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-02-19Fix
CVE-2025-1024ChurchCRM improper authentication4.8NVD v3.10.3%2025-02-19
CVE-2025-1007Eclipse Foundation OpenVSX namespace details API improper authorization6.9CNA v4.00.5%2025-02-19
CVE-2025-1006Google Chrome Network use-after-free8.8CISA ADP v3.10.5%2025-02-19Fix
CVE-2025-0999Google Chrome V8 heap-based buffer overflow8.8CISA ADP v3.10.6%2025-02-19Fix
CVE-2025-0968ElementsKit Elementor addons WordPress plugin unauthenticated information exposure5.3CNA v3.10.5%2025-02-19Fix
CVE-2025-0916YaySMTP - unauthenticated stored cross-site scripting6.1NVD v3.10.4%2025-02-19Fix
CVE-2025-0893Symantec Diagnostic Tool improper privilege management7.8CNA v3.10.2%2025-02-19Fix
CVE-2025-0865WP Media Category Management - cross-site request forgery to Settings Update6.5CNA v3.10.3%2025-02-19Fix
CVE-2025-0677GRUB2 UFS module out-of-bounds write6.4CNA v3.10.3%2025-02-19Fix
CVE-2025-0633iniparser heap overflow in iniparser.c5.1CNA v4.00.2%2025-02-19Fix
CVE-2025-0624GRUB2 network boot configuration search out-of-bounds write7.6CNA v3.11.4%2025-02-19Fix
CVE-2025-27113libxml2 null pointer dereference7.5v3.11.0%2025-02-18Fix
CVE-2025-27016Drivr Lite Google Drive WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.2%2025-02-18
CVE-2025-27013MediCenter WordPress theme sensitive data exposure5.3CNA v3.10.3%2025-02-18Fix
CVE-2025-26624Local privilege escalation in Rufus and previous versions6.8CNA v4.00.2%2025-02-18Fix
CVE-2025-26623Exiv2 allows use-after-free5.3CNA v4.00.9%2025-02-18Fix
CVE-2025-26620DuendeSoftware foss time-of-check time-of-use race condition6.3CNA v4.00.4%2025-02-18Fix
CVE-2025-26617SQL injection endpoint historico_paciente.php parameter id_fichamedica in WeGIA10.0CNA v4.00.6%2025-02-18Fix
CVE-2025-26616Path traversal endpoint exportar_dump.php parameter file in WeGIA10.0CNA v4.00.7%2025-02-18Fix
CVE-2025-26615Path traversal endpoint examples.php parameter src in WeGIA10.0CNA v3.10.8%2025-02-18Fix
CVE-2025-26614SQL injection endpoint deletar_documento.php parameter id_cargo in WeGIA9.4CNA v4.00.6%2025-02-18Fix
CVE-2025-26613OS command injection endpoint gerenciar_backup.php parameter file (RCE) in WeGIA10.0CNA v4.02.5%2025-02-18Fix
CVE-2025-26612SQL injection endpoint adicionar_almoxarife.php parameter id_almoxarifado, id_funcionario in WeGIA10.0CNA v4.00.6%2025-02-18Fix
CVE-2025-26611SQL injection endpoint remover_produto.php parameter id_produto in WeGIA10.0CNA v4.00.6%2025-02-18Fix
CVE-2025-26610SQL injection endpoint restaurar_produto_desocultar.php parameter id_produto in WeGIA9.4CNA v4.00.6%2025-02-18Fix
CVE-2025-26609SQL injection endpoint familiar_docfamiliar.php parameter id_dependente, id_doc in WeGIA10.0CNA v4.00.6%2025-02-18Fix
CVE-2025-26608SQL injection endpoint dependente_docdependente.php parameter id_dependente, id_doc in WeGIA10.0CNA v4.00.6%2025-02-18Fix
CVE-2025-26607SQL injection endpoint documento_excluir.php parameter id_funcionario in WeGIA10.0CNA v4.00.6%2025-02-18Fix
CVE-2025-26606SQL injection endpoint informacao_adicional.php parameter id_descricao in WeGIA10.0CNA v4.00.6%2025-02-18Fix
CVE-2025-26605SQL injection endpoint deletar_cargo.php parameter id_cargo in WeGIA9.4CNA v4.00.5%2025-02-18Fix
CVE-2025-26604Discord-Agora Kernel code execution8.3CNA v3.10.4%2025-02-18
CVE-2025-26603Heap-use-after-free in function str_to_reg in Vim/Vim4.2CNA v3.10.2%2025-02-18Fix
CVE-2025-26465OpenSSH: Machine-in-the-middle attack if verifyhostkeydns is enabled6.8NVD v3.17.7%2025-02-18Fix
CVE-2025-26058Webkul QloApps sensitive query strings4.2CISA ADP v3.10.2%2025-02-18
CVE-2025-25896D-Link DSL-3782 stack-based buffer overflow5.7CISA ADP v3.10.5%2025-02-18Emerging Threats
CVE-2025-25895D-Link DSL-3782 OS command injection8.0CISA ADP v3.11.0%2025-02-18
CVE-2025-25894D-Link DSL-3782 OS command injection8.0CISA ADP v3.11.0%2025-02-18
CVE-2025-25893D-Link DSL-3782 OS command injection8.0CISA ADP v3.11.0%2025-02-18
CVE-2025-25892D-Link DSL-3782 stack-based buffer overflow5.7CISA ADP v3.10.3%2025-02-18
CVE-2025-25891D-Link DSL-3782 stack-based buffer overflow5.7CISA ADP v3.10.3%2025-02-18
CVE-2025-25475OFFIS DCMTK component /libsrc/dcrleccd.cc null pointer dereference7.5CISA ADP v3.10.6%2025-02-18Fix
CVE-2025-25474OFFIS DCMTK buffer overflow6.5CISA ADP v3.10.4%2025-02-18Fix
CVE-2025-25473FFmpeg memory allocator memory leak5.3CISA ADP v3.10.4%2025-02-18Fix
CVE-2025-25472OFFIS DCMTK A buffer overflow5.3CISA ADP v3.10.4%2025-02-18Fix
CVE-2025-25471FFmpeg MOV demuxer null pointer dereference4.3CISA ADP v3.10.3%2025-02-18
CVE-2025-25469FFmpeg libavutil/iamf.c memory leak6.5CISA ADP v3.10.3%2025-02-18
CVE-2025-25468FFmpeg libavutil/mem.c memory leak6.5CISA ADP v3.10.4%2025-02-18
CVE-2025-25467libx264 AAC decoder vulnerability9.8CISA ADP v3.10.7%2025-02-18
CVE-2025-25305SSL validation for outgoing requests in Home Assistant Core and used libs not correct7.0CNA v3.10.3%2025-02-18Fix
CVE-2025-25300smartbanner.js rel noopener XSS1.3CNA v4.00.4%2025-02-18Fix
CVE-2025-25284Path traversal and Local File Read via VRT (Virtual Format) in ZOO-Project WPS Implementation8.7CNA v4.00.6%2025-02-18
CVE-2025-25224LuxSoft The LuxCal Web Calendar missing authentication7.5v3.10.6%2025-02-18Fix
CVE-2025-25223LuxSoft The LuxCal Web Calendar path traversal5.3v3.10.6%2025-02-18Fix
CVE-2025-25222LuxSoft The LuxCal Web Calendar SQL injection9.8v3.10.5%2025-02-18Fix
CVE-2025-25221LuxSoft The LuxCal Web Calendar SQL injection9.8v3.10.5%2025-02-18Fix
CVE-2025-25055JIP InfoBridge FileMegane authentication bypass by spoofing5.3CNA v3.00.4%2025-02-18
CVE-2025-24928libxml2 stack-based buffer overflow7.7v3.10.4%2025-02-18Fix
CVE-2025-24895italia cie-aspnetcore SAML Response signature verification Bypass in CIE.AspNetCore.Authentication9.1CNA v3.10.6%2025-02-18Fix
CVE-2025-24894italia spid-aspnetcore SAML Response signature verification Bypass in SPID.AspNetCore.Authentication9.1CNA v3.10.6%2025-02-18Fix
CVE-2025-22921FFmpeg null pointer dereference6.5CISA ADP v3.10.4%2025-02-18Fix
CVE-2025-22920FFmpeg A heap-based buffer overflow5.3CISA ADP v3.10.3%2025-02-18Fix
CVE-2025-22919FFmpeg git-master commit N-113007-g8d24a28d06 reachable assertion6.5CISA ADP v3.10.4%2025-02-18Fix
CVE-2025-22663Paid Videochat Turnkey Site WordPress plugin arbitrary file deletion8.6CNA v3.10.6%2025-02-18Fix
CVE-2025-22657Atarim WordPress plugin arbitrary content deletion vulnerability7.5CNA v3.10.4%2025-02-18Fix
CVE-2025-22656Cookie Monster WordPress plugin local file inclusion8.1CNA v3.10.7%2025-02-18
CVE-2025-22654Simplified WordPress plugin arbitrary file upload10.0CNA v3.11.0%2025-02-18Fix
CVE-2025-22650Smartarget WordPress plugin cross-site scripting6.5CNA v3.10.2%2025-02-18Fix
CVE-2025-22645Real Estate Manager WordPress plugin Captcha bypass vulnerability vulnerability5.3CNA v3.10.3%2025-02-18
CVE-2025-22639Distance Rate Shipping for WooCommerce WordPress plugin SQL injection8.5CNA v3.10.4%2025-02-18
CVE-2025-22207Joomla! CMS Core SQL injection vulnerability in Scheduled Tasks component6.7CNA v4.00.4%2025-02-18Fix
CVE-2025-21703Linux kernel netem use-after-free7.8CNA v3.10.3%2025-02-18Fix
CVE-2025-21702In the Linux kernel, the following vulnerability has been resolved: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 Expected behaviour: In case we reach scheduler's limit, pfifo_tail_enqueue() will drop a packet in scheduler's queue and decrease scheduler's qlen by one. Then, pfifo_tail_e7.8CNA v3.10.3%2025-02-18Fix
CVE-2025-21608Forged packets over MQTT can show up in direct messages in Meshtastic Firmware5.3CNA v4.00.4%2025-02-18
CVE-2025-20075JIP InfoBridge FileMegane server-side request forgery7.2CNA v3.00.4%2025-02-18
CVE-2025-1414Mozilla memory safety bugs fixed in Firefox6.5CISA ADP v3.10.5%2025-02-18Fix
CVE-2025-1390OpenAnolis Anolis OS pam_cap: Fix potential configuration parsing error6.1CNA v3.10.2%2025-02-18Fix
CVE-2025-1269Open redirect in HAVELSAN's Open Source Project Liman MYS4.8CNA v3.10.2%2025-02-18Fix
CVE-2025-1035Path traversal in Komtera Technolgies' KLog Server5.7CNA v3.19.9%2025-02-18NucleiEmerging ThreatsFix
CVE-2025-1023SQL injection in ChurchCRM newCountName parameter via EditEventTypes.php9.8v3.12.5%2025-02-18Nuclei
CVE-2025-0981ChurchCRM Group Editor description field stored cross-site scripting6.1NVD v3.10.2%2025-02-18
CVE-2025-0864realmag777 Active Products Tables for WooCommerce reflected cross-site scripting6.1CNA v3.10.4%2025-02-18Fix
CVE-2025-0817FormCraft - Premium WordPress Form Builder plugin unauthenticated stored cross-site scripting6.1NVD v3.10.4%2025-02-18Fix
CVE-2025-0805Mortgage Calculator / Loan Calculator WordPress plugin stored cross-site scripting5.4v3.10.3%2025-02-18
CVE-2025-0796Mortgage Lead Capture System WordPress plugin cross-site request forgery4.3CNA v3.10.2%2025-02-18Fix
CVE-2025-0622GRUB2 gpg command hooks use-after-free6.4CNA v3.10.3%2025-02-18Fix
CVE-2025-0521Post SMTP WordPress plugin unauthenticated stored cross-site scripting6.1NVD v3.10.3%2025-02-18Fix
CVE-2025-0425Cordaware bestinformed Infoclient local privilege escalation via Config Manipulation8.5CNA v4.00.2%2025-02-18Fix
CVE-2025-0424Cordaware bestinformed Web multiple Authenticated stored cross-site scripting5.1CNA v4.00.4%2025-02-18Fix
CVE-2025-0423Cordaware bestinformed Web multiple Unauthenticated stored cross-site scripting5.3CNA v4.00.5%2025-02-18Fix
CVE-2025-0422Cordaware bestinformed Web authenticated remote code execution via ScriptVar8.6CNA v4.00.9%2025-02-18Fix
CVE-2025-26778Gallery Custom Links WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-02-17Fix
CVE-2025-26775BEAR WordPress plugin cross-site scripting (XSS)4.8v3.10.2%2025-02-17Fix
CVE-2025-26773Analytify WordPress plugin broken access control8.8v3.10.3%2025-02-17Fix
CVE-2025-26772DethemeKit For Elementor WordPress plugin cross-site scripting (XSS)5.4v3.10.2%2025-02-17Fix
CVE-2025-26771SKT Blocks WordPress plugin cross-site scripting (XSS)5.4v3.10.2%2025-02-17Fix
CVE-2025-26770Waymark WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-02-17Fix
CVE-2025-26769Vertex Addons for Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-02-17Fix
CVE-2025-26758Spotlight Social Feeds WordPress plugin sensitive data exposure5.3CNA v3.10.4%2025-02-17Fix
CVE-2025-26754Timeline Block WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-02-17Fix
CVE-2025-26700Siber Systems RoboForm Password Manager authentication bypass5.2CNA v3.00.3%2025-02-17
CVE-2025-23845ImageMeta WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-02-17
CVE-2025-23840WP-NOTCAPTCHA WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-17
CVE-2025-21103Dell NetWorker Management Console server-side include injection7.8CNA v3.10.2%2025-02-17Fix
CVE-2025-1392D-Link DIR-816 index.html cross-site scripting5.4v3.18.7%2025-02-17
CVE-2025-1391Improper authorization in Keycloak Organization Mapper allows Unauthorized Organization Claims5.4CNA v3.10.4%2025-02-17Fix
CVE-2025-1389Learning Digital Orca HCM SQL injection8.8CNA v3.10.5%2025-02-17Fix
CVE-2025-1388Learning Digital Orca HCM arbitrary file upload8.8CNA v3.10.5%2025-02-17Fix
CVE-2025-1387Learning Digital Orca HCM improper authentication9.8CNA v3.10.6%2025-02-17Fix
CVE-2025-1381code-projects Real Estate Property Management System ajax_city.php SQL injection7.5v3.10.6%2025-02-17
CVE-2025-1380Codezips Gym Management System del_plan.php SQL injection9.8v3.10.5%2025-02-17
CVE-2025-1379code-projects Real Estate Property Management System CustomerReport.php SQL injection9.8v3.10.5%2025-02-17
CVE-2025-1378Radare2 rasm2 rasm2.c memory corruption4.8CNA v4.00.3%2025-02-17Fix
CVE-2025-1377GNU elfutils eu-strip strip.c gelf_getsymshndx denial of service5.5v3.10.3%2025-02-17Fix
CVE-2025-1376GNU elfutils eu-strip elf_strptr.c elf_strptr denial of service4.7v3.10.3%2025-02-17Fix
CVE-2025-1374code-projects Real Estate Property Management System search.php SQL injection7.5v3.10.4%2025-02-17
CVE-2025-1373FFmpeg MOV parser mov.c mov_read_trak null pointer dereference5.5v3.10.3%2025-02-17Fix
CVE-2025-1372GNU elfutils eu-readelf readelf.c print_string_section buffer overflow7.8v3.10.3%2025-02-17Fix
CVE-2025-1371GNU elfutils eu-read readelf.c handle_dynamic_symtab null pointer dereference5.5v3.10.2%2025-02-17Fix
CVE-2025-1370MicroWorld eScan Antivirus Autoscan USB epsdaemon sprintf os command injection4.8CNA v4.02.4%2025-02-17
CVE-2025-1369MicroWord eScan Antivirus USB password os command injection2.0CNA v4.03.0%2025-02-17
CVE-2025-1368MicroWord eScan Antivirus mwav.conf ReadConfiguration buffer overflow4.6CNA v4.00.4%2025-02-17
CVE-2025-1367MicroWord eScan Antivirus USB Password sprintf buffer overflow4.8CNA v4.00.4%2025-02-17
CVE-2025-1366MicroWord eScan Antivirus VirusPopUp strcpy stack-based overflow7.8v3.10.3%2025-02-17
CVE-2025-1365GNU elfutils eu-readelf readelf.c process_symtab buffer overflow7.8v3.10.3%2025-02-17Fix
CVE-2025-0924WP Activity Log WordPress plugin unauthenticated stored cross-site scripting6.1NVD v3.11.4%2025-02-17Exploit codeFix
CVE-2025-0714Insecure storage of sensitive information in MobaXTerm6.5CNA v3.10.2%2025-02-17Fix
CVE-2025-0591OMRON FA Integrated Tool Package CX-One out-of-bounds read vulnerability in CX-Programmer7.8CNA v3.10.2%2025-02-17
CVE-2025-0001Abacus Research Abacus authenticated arbitrary file read6.5CNA v3.10.6%2025-02-17Fix
CVE-2025-26779Keep Backup Daily WordPress plugin arbitrary file download4.9CNA v3.10.5%2025-02-16Fix
CVE-2025-26768what3words Address Field WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-02-16Fix
CVE-2025-26767Qubely WordPress plugin cross-site scripting (XSS)5.4v3.10.2%2025-02-16Fix
CVE-2025-26766Leyka WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-02-16Fix
CVE-2025-26765Distance Based Shipping Calculator WordPress plugin broken access control5.4CNA v3.10.3%2025-02-16Fix
CVE-2025-26761Easy Elementor Addons WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-02-16Fix
CVE-2025-26759Content Snippet Manager WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-02-16Fix
CVE-2025-26755WP Airbnb Review Slider WordPress plugin SQL injection7.6CNA v3.10.4%2025-02-16Fix
CVE-2025-23975Botnet Attack Blocker WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-02-16
CVE-2025-22689Forex Calculators WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-02-16Fix
CVE-2025-22680Ad Inserter Pro WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-02-16Fix
CVE-2025-22676Upcasted S3 Offload WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-02-16Fix
CVE-2025-22291LTL Freight Quotes WordPress plugin enituretechnology missing authorization5.3CNA v3.10.3%2025-02-16Fix
CVE-2025-22290LTL Freight Quotes FreightQuote Edition WordPress plugin SQL injection9.3CNA v3.10.4%2025-02-16Fix
CVE-2025-22289LTL Freight Quotes Unishippers Edition WordPress plugin broken access control9.8v3.10.4%2025-02-16Fix
CVE-2025-22286LTL Freight Quotes Worldwide Express Edition WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-16Fix
CVE-2025-22284LTL Freight Quotes Unishippers Edition WordPress plugin reflected cross-site scripting (XSS)6.1NVD v3.10.3%2025-02-16Fix
CVE-2025-1364MicroWord eScan Antivirus USB Protection service passPrompt stack-based overflow6.6v3.10.4%2025-02-16
CVE-2025-1360Internet Web Solutions Sublime CRM HTTP POST request inicio.php cross-site scripting5.1CNA v4.00.3%2025-02-16
CVE-2025-1359SIAM Industria de Automação e Monitoramento qrcode.jsp cross-site scripting5.3CNA v4.00.8%2025-02-16
CVE-2025-1358Pix Software Vivaz cross-site request forgery5.3CNA v4.00.2%2025-02-16
CVE-2025-1357Seventh D-Guard HTTP GET request path traversal5.3CNA v4.00.5%2025-02-16
CVE-2025-1356needyamin Library Card System card.php SQL injection7.5v3.10.5%2025-02-16
CVE-2025-1355needyamin Library Card System Add Picture signup.php unrestricted upload9.8v3.10.9%2025-02-16
CVE-2025-1354ASUS RT-N12E RT-N10E/ cross-site scripting4.8CNA v4.00.5%2025-02-16
CVE-2025-1353Kong Insomnia profapi.dll untrusted search path7.3CNA v4.00.2%2025-02-16
CVE-2025-1352GNU elfutils eu-readelf libdw_alloc.c __libdw_thread_tail memory corruption7.5v3.10.7%2025-02-16Fix
CVE-2025-1341PMWeb setting weak password8.1v3.11.1%2025-02-16
CVE-2025-1340TOTOLINK X18 cstecgi.cgi setPasswordCfg stack-based overflow8.7CNA v4.016.7%2025-02-16
CVE-2025-1339TOTOLINK X18 cstecgi.cgi setL2tpdConfig os command injection8.8v3.12.6%2025-02-16
CVE-2025-1338NUUO Camera handle_config.php print_file command injection6.9CNA v4.051.1%2025-02-16Reported exploitedNucleiExploit code
CVE-2025-1337Eastnets PaymentSafe BIC Search cross-site scripting5.1CNA v4.00.5%2025-02-16
CVE-2025-1336CmsEasy image_admin.php deleteimg_action path traversal8.1v3.11.0%2025-02-16
CVE-2025-1335CmsEasy file_admin.php deleteimg_action path traversal8.1v3.10.9%2025-02-16
CVE-2025-1332FastCMS template menu menu cross-site scripting4.8v3.10.4%2025-02-16
CVE-2025-26819getmonero Monero resource exhaustion7.5v3.10.5%2025-02-15Fix
CVE-2025-26793Hirsch Enterphone MESH default password10.0CNA v4.02.4%2025-02-15Nuclei
CVE-2025-22209Extension JoomSky.com SQL injection in JS jobs component for Joomla4.7CISA ADP v3.10.3%2025-02-15
CVE-2025-22208Extension JoomSky.com SQL injection in JS jobs component for Joomla4.7CISA ADP v3.10.7%2025-02-15Emerging Threats
CVE-2025-21401Microsoft Edge (Chromium-based) security feature bypass4.5CNA v3.10.3%2025-02-15Fix
CVE-2025-1302jsonpath-plus JSONPath Plus allows remote code execution9.3CNA v4.010.4%2025-02-15Reported exploitedNucleiExploit codeFix
CVE-2025-1005ElementsKit Elementor addons WordPress plugin stored cross-site scripting5.4v3.10.4%2025-02-15Fix
CVE-2025-0997Google Chrome Navigation use-after-free8.1CISA ADP v3.10.4%2025-02-15Fix
CVE-2025-0996Google Chrome Browser UI inappropriate implementation5.4CISA ADP v3.10.4%2025-02-15Fix
CVE-2025-0995Google Chrome V8 use-after-free8.8CISA ADP v3.10.4%2025-02-15Fix
CVE-2025-0935Media Library Folders WordPress plugin missing authorization to plugin settings Change4.3CNA v3.10.3%2025-02-15Fix
CVE-2025-0822Bit Assist WordPress plugin path traversal to authenticated arbitrary file read6.5CNA v3.10.6%2025-02-15Fix
CVE-2025-26791DOMPurify allows cross-site scripting (XSS)6.1v3.10.6%2025-02-14Fix
CVE-2025-26789Logpoint AgentX server-side template injection6.9CNA v4.00.4%2025-02-14Fix
CVE-2025-26788StrongKey FIDO Server insecure direct object reference8.4CNA v3.10.5%2025-02-14Exploit codeFix
CVE-2025-26524No Rate Limiting vulnerability in RupeeWeb trading platform5.1CNA v4.00.4%2025-02-14Fix
CVE-2025-26523Insufficient authorization vulnerability in RupeeWeb trading platform7.4CNA v4.00.5%2025-02-14Fix
CVE-2025-26522Authentication bypass vulnerability in RupeeWeb trading platform7.5CNA v4.00.4%2025-02-14Fix
CVE-2025-26519musl-libc musl out-of-bounds write7.0v3.10.3%2025-02-14Fix
CVE-2025-26508Certain HP LaserJet Pro out-of-bounds write8.3CNA v4.01.0%2025-02-14Fix
CVE-2025-26507Certain HP LaserJet Pro stack-based buffer overflow6.3CNA v4.00.9%2025-02-14Fix
CVE-2025-26506Certain HP LaserJet Pro stack-based buffer overflow9.2CNA v4.01.1%2025-02-14Fix
CVE-2025-26158Kashipara Online Attendance Management System cross-site scripting5.6CISA ADP v3.10.3%2025-02-14
CVE-2025-26157Darkseid Beauty Parlour Management System SQL injection5.9CISA ADP v3.10.3%2025-02-14
CVE-2025-26156PHPGurukul Online Shopping Portal Project SQL injection8.8CISA ADP v3.10.8%2025-02-14
CVE-2025-25997Feminer Wms path traversal7.5CISA ADP v3.11.1%2025-02-14
CVE-2025-25994Feminer Wms SQL injection7.5CISA ADP v3.10.5%2025-02-14
CVE-2025-25993Feminer Wms SQL injection5.1CISA ADP v3.10.3%2025-02-14
CVE-2025-25992Feminer Wms SQL injection5.1CISA ADP v3.10.3%2025-02-14
CVE-2025-25991Hoosk SQL injection5.1CISA ADP v3.10.3%2025-02-14
CVE-2025-25990Hoosk cross-site scripting6.1CISA ADP v3.10.3%2025-02-14
CVE-2025-25988Hoosk cross-site scripting4.8CISA ADP v3.10.3%2025-02-14
CVE-2025-25745D-Link Dir-853 stack-based buffer overflow8.8CISA ADP v3.10.8%2025-02-14
CVE-2025-25740D-Link Dir-853 stack-based buffer overflow5.5CISA ADP v3.10.3%2025-02-14
CVE-2025-25304Vega allows cross-site scripting via the vlSelectionTuples function6.9CNA v4.00.7%2025-02-14Fix
CVE-2025-25297HumanSignal label-studio label Studio allows server-side request forgery in the S3 Storage endpoint8.6CNA v3.10.7%2025-02-14Fix
CVE-2025-25296HumanSignal label-studio label Studio allows cross-site scripting6.1CNA v3.11.9%2025-02-14NucleiExploit codeFix
CVE-2025-25295HumanSignal label-studio label Studio has a path traversal vulnerability via image field8.7CNA v4.00.8%2025-02-14Fix
CVE-2025-25290@octokit/request link header parsing denial of service5.3CNA v3.10.8%2025-02-14Fix
CVE-2025-25289@octokit/request-error authorization header parsing denial of service5.3CNA v3.10.6%2025-02-14Fix
CVE-2025-25288@octokit/plugin-paginate-rest pagination iterator denial of service5.3CNA v3.10.6%2025-02-14Fix
CVE-2025-25285@octokit/endpoint endpoint parse function denial of service5.3CNA v3.10.6%2025-02-14Fix
CVE-2025-25206elabftw incorrect input validation could allow an authenticated user to read sensitive information8.3CNA v3.10.5%2025-02-14Fix
CVE-2025-25204`gh` is GitHub’s official command line tool. Starting in version 2.49.0 and prior to version 2.67.0, under certain conditions, a bug in GitHub's Artifact Attestation cli tool `gh attestation verify` causes it to return a zero exit status when no attestations are present. This behavior is incorrect:6.3CNA v3.10.4%2025-02-14Fix
CVE-2025-24700WP Event Aggregator WordPress plugin reflected cross-site scripting (XSS)6.1NVD v3.10.3%2025-02-14Fix
CVE-2025-24699WP Coder WordPress plugin CSRF to cross-site scripting (XSS)7.1CNA v3.10.1%2025-02-14Fix
CVE-2025-24692Bulk Menu Edit WordPress plugin broken access control7.1CNA v3.10.3%2025-02-14Fix
CVE-2025-24688WP Mailster WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-14Fix
CVE-2025-24641Better WishList API WordPress plugin stored cross-site scripting (XSS)7.1CNA v3.10.2%2025-02-14Fix
CVE-2025-24617AcyMailing WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-14Fix
CVE-2025-24616Uix Page Builder WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-14Fix
CVE-2025-24615Analytics Cat WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-02-14Fix
CVE-2025-24614Post Timeline WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-14Fix
CVE-2025-24607IdeaPush WordPress plugin broken access control9.8v3.10.4%2025-02-14Fix
CVE-2025-24592SysBasics Customize My Account for WooCommerce WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-14Fix
CVE-2025-24567WP Mailster WordPress plugin sensitive data exposure6.5CNA v3.10.4%2025-02-14Fix
CVE-2025-24566Intro Tour Tutorial DeepPresentation WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-02-14Fix
CVE-2025-24565WP2LEADS WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-14Fix
CVE-2025-24564Contact Form With Shortcode WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-14Fix
CVE-2025-24558CRM Perks WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-14Fix
CVE-2025-24554AWcode Toolkit WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-14Fix
CVE-2025-23905Admin Options Pages WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-14Fix
CVE-2025-23857Essential WP Real Estate WordPress plugin reflected cross-site scripting (XSS)6.1NVD v3.10.3%2025-02-14
CVE-2025-23853NoFollow Free WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-14
CVE-2025-23851Coronavirus (COVID-19) Outbreak Data Widgets WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-14
CVE-2025-23790Easy Code Placement WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-14
CVE-2025-23789URL Shortener WooCommerce WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-14
CVE-2025-23788Easy Filter WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-02-14
CVE-2025-23787Easy Bet WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-14
CVE-2025-23786Email to Download WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-14
CVE-2025-23771Push Notification for Post and BuddyPress WordPress plugin settings Change vulnerability6.5CNA v3.10.4%2025-02-14Fix
CVE-2025-23766OPSI Israel Domestic Shipments WordPress plugin broken access control6.5CNA v3.10.4%2025-02-14Fix
CVE-2025-23751Data Dash WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-14
CVE-2025-23750Custom Widget Creator WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-14
CVE-2025-23748Singsys -Awesome Gallery WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-14
CVE-2025-23742Podamibe Twilio Private Call WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-14
CVE-2025-23658Advanced Angular Contact Form WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-14
CVE-2025-23657WordPress-to-candidate for Salesforce CRM plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-14
CVE-2025-23655Contact Form 7 Paystack Add-on WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-14
CVE-2025-23653Form To Online Booking WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-14
CVE-2025-23652Fabio Zuanon Add custom content after post reflected cross-site scripting7.1CNA v3.10.3%2025-02-14
CVE-2025-23651Scroll Top WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-14
CVE-2025-23650Tidy.ro WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-14
CVE-2025-23648AdsMiddle WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-14
CVE-2025-23647WP-Clap WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-14
CVE-2025-23646Library Instruction Recorder WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-14
CVE-2025-23598Recip.ly WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-14
CVE-2025-23571Internal Links Generator WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-14
CVE-2025-23568WP Login Attempt Log WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-14
CVE-2025-23534WPLingo WordPress plugin arbitrary content deletion vulnerability6.5CNA v3.10.4%2025-02-14
CVE-2025-23525Kv Compose Email From Dashboard WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-14
CVE-2025-23523HSS Embed Streaming Video WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-14
CVE-2025-23492CantonBolo 淘宝客插件 reflected cross-site scripting7.1CNA v3.10.3%2025-02-14
CVE-2025-23474Live Dashboard WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-14
CVE-2025-23431Envato Affiliater WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-14
CVE-2025-23428QMean WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-02-14
CVE-2025-23406DMG MORI Digital Co., LTD. and NXTech Cente TCP/IPv4 out-of-bounds read5.3CNA v3.00.4%2025-02-14
CVE-2025-22705Disqus Popular Posts WordPress plugin CSRF to reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-02-14
CVE-2025-22702Photography WordPress theme broken access control6.3CNA v3.10.3%2025-02-14
CVE-2025-22698Accessibility Suite by Ability, Inc WordPress plugin Multiple broken access control6.3CNA v3.10.3%2025-02-14Fix
CVE-2025-22630Widget Options WordPress plugin arbitrary code execution9.9CNA v3.11.1%2025-02-14Fix
CVE-2025-1298TECNO com.transsion.carlcare authentication bypass by spoofing9.8CISA ADP v3.10.5%2025-02-14
CVE-2025-1239WatchGuard Firebox stored cross-site-scripting (XSS) vulnerability in Blocked Sites List4.8CNA v4.00.6%2025-02-14Fix
CVE-2025-1071WatchGuard Firebox stored cross-site-scripting (XSS) vulnerability in spamBlocker module4.8CNA v4.00.3%2025-02-14Fix
CVE-2025-1053Brocade SANnav encryption key is logged in the debug logs8.6CNA v4.00.2%2025-02-14Fix
CVE-2025-0867Privilege escalation in MEAC3009.9CNA v3.10.6%2025-02-14Fix
CVE-2025-0821Bit Assist WordPress plugin authenticated (Subscriber+) SQL injection via id parameter6.5v3.10.6%2025-02-14Fix
CVE-2025-0593SICK Lector8xx and InspectorP8xx vulnerable for code execution8.8CNA v3.10.8%2025-02-14Fix
CVE-2025-0592SICK Lector8xx and InspectorP8xx vulnerable for code execution8.8CNA v3.10.4%2025-02-14Fix
CVE-2025-0503Mattermost Leaked User IDs and Metadata of Deleted DMs3.1CNA v3.10.3%2025-02-14Fix
CVE-2025-0178WatchGaurd Firebox host header injection5.1CNA v4.00.2%2025-02-14Fix
CVE-2025-26582TinyMCE Advanced qTranslate fix editor problems WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-02-13
CVE-2025-26580Page/Post Specific Social Share Buttons WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-02-13
CVE-2025-26578Simple Documentation WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-02-13
CVE-2025-26577DX-auto-publish WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-02-13
CVE-2025-26574Google Drive WP Media WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-02-13
CVE-2025-26572WP PHPList WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-02-13
CVE-2025-26571Wibiya Toolbar WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-02-13
CVE-2025-26570Glance That WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-02-13
CVE-2025-26569Post Thumbs WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-02-13
CVE-2025-26568Easy Amazon Product Information WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-02-13
CVE-2025-26567Font Awesome WP WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-02-13
CVE-2025-26562RSS FIlter WordPress plugin CSRF to stored cross-site scripting (XSS)7.1CNA v3.10.1%2025-02-13
CVE-2025-26561Elfsight Yottie Lite WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-02-13
CVE-2025-26558Aparat Responsive WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-02-13
CVE-2025-26552Naver Syndication V2 WordPress plugin CSRF to stored cross-site scripting7.1CNA v3.10.3%2025-02-13
CVE-2025-26551Bootstrap collapse WordPress plugin CSRF to stored cross-site scripting7.1CNA v3.10.3%2025-02-13
CVE-2025-26550Global Meta Keyword and Description WordPress plugin CSRF to cross-site scripting7.1CNA v3.10.1%2025-02-13
CVE-2025-26549WP Html Page Sitemap WordPress plugin CSRF to stored cross-site scripting7.1CNA v3.10.1%2025-02-13
CVE-2025-26547My Login Logout WordPress plugin CSRF to stored cross-site scripting7.1CNA v3.10.1%2025-02-13
CVE-2025-26545Related Posts Line-up-Exactly by Milliard WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-02-13
CVE-2025-26543Simple Responsive Menu WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-02-13
CVE-2025-26539Embed Google Map WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-02-13
CVE-2025-26538Prezi Embedder WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.2%2025-02-13
CVE-2025-26511Cassandra-Lucene-Index allows bypass of Cassandra RBAC8.8CNA v3.10.6%2025-02-13Fix
CVE-2025-26473Outback Power Mojave Inverter Use of GET request method with sensitive query strings7.5v3.10.5%2025-02-13
CVE-2025-25901TP-Link TL-WR841ND out-of-bounds write7.5v3.10.5%2025-02-13
CVE-2025-25900TP-Link Tl-wr841nd V11 buffer overflow4.9CISA ADP v3.10.4%2025-02-13
CVE-2025-25899TP-Link Tl-wr841nd V11 improper resource release3.5CISA ADP v3.10.3%2025-02-13
CVE-2025-25898TP-Link TL-WR841ND out-of-bounds write7.5v3.10.5%2025-02-13
CVE-2025-25897TP-Link TL-WR841ND out-of-bounds write7.5v3.10.5%2025-02-13
CVE-2025-25389PHPGurukul Land Record System SQL injection9.8CISA ADP v3.10.8%2025-02-13
CVE-2025-25388PHPGurukul Land Record System SQL injection9.8CISA ADP v3.10.8%2025-02-13
CVE-2025-25387PHPGurukul Land Record System SQL injection7.2CISA ADP v3.10.8%2025-02-13
CVE-2025-25357PHPGurukul Land Record System SQL injection7.2v3.10.8%2025-02-13
CVE-2025-25356PHPGurukul Land Record System SQL injection7.2v3.10.8%2025-02-13
CVE-2025-25355PHPGurukul Land Record System SQL injection7.2v3.10.8%2025-02-13
CVE-2025-25354PHPGurukul Land Record System /admin/admin-profile.php SQL injection7.2v3.10.8%2025-02-13
CVE-2025-25352PHPGurukul Land Record System SQL injection7.2v3.10.8%2025-02-13
CVE-2025-25287lakejason0 mediawiki-skins-Lakeus lakeus vulnerable to stored XSS via system messages4.7CNA v3.10.4%2025-02-13Fix
CVE-2025-25286Crayfish allows remote code execution via Homarus Authorization header9.8CNA v3.11.0%2025-02-13Fix
CVE-2025-25281Outback Power Mojave Inverter exposure of sensitive information to an unauthorized actor7.5v3.10.5%2025-02-13
CVE-2025-25195Zulip events can leak private channel names4.3CNA v3.10.4%2025-02-13
CVE-2025-25067mySCADA myPRO Manager OS command injection9.8v3.11.7%2025-02-13Fix
CVE-2025-24904libsignal-service-rs doesn't sanity check plaintext envelopes are not sanity-checked8.5CNA v3.10.2%2025-02-13
CVE-2025-24903libsignal-service-rs Doesn't Check Origin of Sync messages8.5CNA v3.10.2%2025-02-13
CVE-2025-24889freedomofpress securedrop-client path traversal in sd-log Qubes virtual machine4.5CNA v3.10.2%2025-02-13Fix
CVE-2025-24888freedomofpress securedrop-client path traversal in SecureDrop Client API.download_reply8.1CNA v3.11.0%2025-02-13Fix
CVE-2025-24865mySCADA myPRO Manager missing authentication for critical function9.8v3.17.2%2025-02-13MetasploitKCVFix