CVE-2025 records published in February 2025
Page two of two: records 1,001 to 1,793 of the 1,793 published in February 2025, newest first. The first page carries the figures for February 2025.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2025-24861 | Outback Power Mojave Inverter command injection | 9.8v3.1 | 0.5% | 2025-02-13 | |
| CVE-2025-24836 | Qardio Heart Health IOS and Android Application and QardioARM A100 uncaught exception | 6.1CNA v4.0 | 0.2% | 2025-02-13 | |
| CVE-2025-23421 | Qardio iOS and Android applications files or directories accessible to external parties | 6.9CNA v4.0 | 0.2% | 2025-02-13 | |
| CVE-2025-23411 | mySCADA myPRO Manager cross-site request forgery | 6.5v3.1 | 0.6% | 2025-02-13 | Fix |
| CVE-2025-22962 | GatesAir Maxiva UAXT and VAXT transmitters debug mode JSON endpoint command injection | 7.2CISA ADP v3.1 | 0.9% | 2025-02-13 | |
| CVE-2025-22961 | GatesAir Maxiva UAXT and VAXT transmitters database backup files information disclosure | 8.0CISA ADP v3.1 | 0.4% | 2025-02-13 | |
| CVE-2025-22960 | GatesAir Maxiva UAXT and VAXT transmitters debug log files information disclosure | 8.0CISA ADP v3.1 | 0.4% | 2025-02-13 | |
| CVE-2025-22896 | mySCADA myPRO Manager cleartext storage of sensitive information | 7.5NVD v3.1 | 3.6% | 2025-02-13 | MetasploitKCVFix |
| CVE-2025-22480 | Dell SupportAssist OS Recovery symlink following | 7.0CNA v3.1 | 0.2% | 2025-02-13 | Fix |
| CVE-2025-21701 | Linux kernel ethtool netlink channel configuration race condition | 7.8CNA v3.1 | 0.2% | 2025-02-13 | Fix |
| CVE-2025-21700 | Linux kernel sched use-after-free | 7.8CNA v3.1 | 0.2% | 2025-02-13 | Fix |
| CVE-2025-20615 | Qardio Heart Health iOS app plist file information disclosure | 6.6v3.1 | 0.2% | 2025-02-13 | |
| CVE-2025-1283 | Dingtian DT-R0 Series authentication bypass using an alternate path or channel | 9.8v3.1 | 0.6% | 2025-02-13 | |
| CVE-2025-1271 | Reflected cross-site scripting (XSS) vulnerability in H6Web | 6.1CNA v3.1 | 0.3% | 2025-02-13 | Fix |
| CVE-2025-1270 | Insecure direct object reference (IDOR) vulnerability in H6Web | 7.1NVD v3.1 | 0.4% | 2025-02-13 | Fix |
| CVE-2025-1247 | Io.quarkus:quarkus-rest: Quarkus rest endpoint request parameter leakage due to shared instance | 8.3CNA v3.1 | 0.8% | 2025-02-13 | Fix |
| CVE-2025-1198 | Insufficient session expiration in GitLab | 4.2CNA v3.1 | 0.3% | 2025-02-13 | Fix |
| CVE-2025-1127 | Lexmark CX path traversal | 9.1CNA v3.1 | 0.5% | 2025-02-13 | Fix |
| CVE-2025-1094 | PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation | 8.1CNA v3.1 | 90.0% | 2025-02-13 | Reported exploitedMetasploitEmerging ThreatsExploit codeKCVFix |
| CVE-2025-1070 | Schneider Electric ASCO 5310 Single-Channel Remote Annunciator unrestricted file upload | 7.2CNA v4.0 | 0.5% | 2025-02-13 | |
| CVE-2025-1060 | CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists that could result in the exposure of data when network traffic is being sniffed by an attacker. | 8.7CNA v4.0 | 0.2% | 2025-02-13 | |
| CVE-2025-1059 | Schneider Electric ASCO 5310 Single-Channel Remote Annunciator resource exhaustion | 8.7CNA v4.0 | 0.5% | 2025-02-13 | |
| CVE-2025-1058 | Schneider Electric ASCO 5310 Single-Channel Remote Annunciator download without integrity check | 7.2CNA v4.0 | 0.2% | 2025-02-13 | |
| CVE-2025-0896 | Orthanc server missing authentication for critical function | 9.2CNA v4.0 | 2.5% | 2025-02-13 | Fix |
| CVE-2025-0837 | Puzzles WordPress theme authenticated (Contributor+) stored cross-site scripting via shortcode | 5.4v3.1 | 0.3% | 2025-02-13 | Fix |
| CVE-2025-0816 | Schneider Electric Enerlin’X IFE interface (LV434001) improper input validation | 7.1CNA v4.0 | 0.2% | 2025-02-13 | |
| CVE-2025-0815 | Schneider Electric Enerlin’X IFE interface (LV434001) improper input validation | 7.1CNA v4.0 | 0.2% | 2025-02-13 | |
| CVE-2025-0814 | Schneider Electric Enerlin’X IFE interface (LV434001) improper input validation | 6.9CNA v4.0 | 0.4% | 2025-02-13 | Fix |
| CVE-2025-0692 | Simple Video Management System WordPress plugin Admin+ stored XSS | 3.5CISA ADP v3.1 | 0.3% | 2025-02-13 | |
| CVE-2025-0661 | DethemeKit For Elementor WordPress plugin authenticated (Contributor+) Protected post disclosure | 4.3CNA v3.1 | 0.3% | 2025-02-13 | Fix |
| CVE-2025-0426 | Node denial of service via kubelet Checkpoint API | 6.2CNA v3.1 | 0.4% | 2025-02-13 | Fix |
| CVE-2025-0327 | Schneider Electric EcoStruxure Process Expert improper privilege management | 8.5CNA v4.0 | 0.2% | 2025-02-13 | Fix |
| CVE-2025-26520 | Cacti host templates page SQL injection | 9.8v3.1 | 0.5% | 2025-02-12 | Fix |
| CVE-2025-26378 | Q-Free MaxTime missing authorization | 8.8NVD v3.1 | 0.6% | 2025-02-12 | |
| CVE-2025-26377 | Q-Free MaxTime missing authorization | 8.1CNA v3.1 | 0.5% | 2025-02-12 | |
| CVE-2025-26376 | Q-Free MaxTime missing authorization | 6.5NVD v3.1 | 0.3% | 2025-02-12 | |
| CVE-2025-26375 | Q-Free MaxTime missing authorization | 8.8NVD v3.1 | 0.6% | 2025-02-12 | |
| CVE-2025-26374 | Q-Free MaxTime missing authorization | 4.3NVD v3.1 | 0.3% | 2025-02-12 | |
| CVE-2025-26373 | Q-Free MaxTime missing authorization | 6.5CNA v3.1 | 0.4% | 2025-02-12 | |
| CVE-2025-26372 | Q-Free MaxTime missing authorization | 8.1NVD v3.1 | 0.4% | 2025-02-12 | |
| CVE-2025-26371 | Q-Free MaxTime missing authorization | 8.8NVD v3.1 | 0.6% | 2025-02-12 | |
| CVE-2025-26370 | Q-Free MaxTime missing authorization | 7.1CNA v3.1 | 0.4% | 2025-02-12 | |
| CVE-2025-26369 | Q-Free MaxTime missing authorization | 8.8NVD v3.1 | 0.6% | 2025-02-12 | |
| CVE-2025-26368 | Q-Free MaxTime missing authorization | 8.1NVD v3.1 | 0.5% | 2025-02-12 | |
| CVE-2025-26367 | Q-Free MaxTime missing authorization | 4.3NVD v3.1 | 0.3% | 2025-02-12 | |
| CVE-2025-26366 | Q-Free MaxTime missing authentication | 7.5CNA v3.1 | 0.6% | 2025-02-12 | |
| CVE-2025-26365 | Q-Free MaxTime missing authentication | 7.5CNA v3.1 | 0.6% | 2025-02-12 | |
| CVE-2025-26364 | Q-Free MaxTime missing authentication | 7.5CNA v3.1 | 0.6% | 2025-02-12 | |
| CVE-2025-26363 | Q-Free MaxTime missing authentication | 7.5CNA v3.1 | 0.6% | 2025-02-12 | |
| CVE-2025-26362 | Q-Free MaxTime missing authentication | 7.5CNA v3.1 | 0.6% | 2025-02-12 | |
| CVE-2025-26361 | Q-Free MaxTime missing authentication | 9.1CNA v3.1 | 0.9% | 2025-02-12 | |
| CVE-2025-26360 | Q-Free MaxTime missing authentication | 5.3NVD v3.1 | 0.5% | 2025-02-12 | |
| CVE-2025-26359 | Q-Free MaxTime missing authentication | 9.8CNA v3.1 | 0.9% | 2025-02-12 | |
| CVE-2025-26358 | Q-Free MaxTime external control of a configuration setting | 5.5CNA v3.1 | 0.5% | 2025-02-12 | |
| CVE-2025-26357 | Q-Free MaxTime path traversal | 4.9CNA v3.1 | 0.8% | 2025-02-12 | |
| CVE-2025-26356 | Q-Free MaxTime path traversal | 7.2CNA v3.1 | 0.8% | 2025-02-12 | |
| CVE-2025-26355 | Q-Free MaxTime path traversal | 6.5CNA v3.1 | 0.9% | 2025-02-12 | |
| CVE-2025-26354 | Q-Free MaxTime path traversal | 7.2CNA v3.1 | 0.8% | 2025-02-12 | |
| CVE-2025-26353 | Q-Free MaxTime path traversal | 4.9CNA v3.1 | 0.9% | 2025-02-12 | |
| CVE-2025-26352 | Q-Free MaxTime path traversal | 6.5CNA v3.1 | 1.1% | 2025-02-12 | |
| CVE-2025-26351 | Q-Free MaxTime path traversal | 4.9CNA v3.1 | 0.9% | 2025-02-12 | |
| CVE-2025-26350 | Q-Free MaxTime unrestricted file upload | 8.8NVD v3.1 | 0.9% | 2025-02-12 | |
| CVE-2025-26349 | Q-Free MaxTime relative path traversal | 7.2CNA v3.1 | 2.9% | 2025-02-12 | |
| CVE-2025-26348 | Q-Free MaxTime SQL injection | 7.6NVD v3.1 | 0.7% | 2025-02-12 | |
| CVE-2025-26347 | Q-Free MaxTime missing authentication | 9.8CNA v3.1 | 1.1% | 2025-02-12 | |
| CVE-2025-26346 | Q-Free MaxTime SQL injection | 7.6NVD v3.1 | 0.7% | 2025-02-12 | |
| CVE-2025-26345 | Q-Free MaxTime missing authentication | 9.8CNA v3.1 | 1.1% | 2025-02-12 | |
| CVE-2025-26344 | Q-Free MaxTime missing authentication | 9.8CNA v3.1 | 1.1% | 2025-02-12 | |
| CVE-2025-26343 | Q-Free MaxTime weak authentication | 8.1CNA v3.1 | 0.9% | 2025-02-12 | |
| CVE-2025-26342 | Q-Free MaxTime missing authentication | 9.8CNA v3.1 | 1.1% | 2025-02-12 | |
| CVE-2025-26341 | Q-Free MaxTime missing authentication | 9.8CNA v3.1 | 1.1% | 2025-02-12 | |
| CVE-2025-26340 | Q-Free MaxTime hard-coded cryptographic key | 8.8CNA v3.1 | 1.2% | 2025-02-12 | |
| CVE-2025-26339 | Q-Free MaxTime missing authentication | 9.8CNA v3.1 | 1.1% | 2025-02-12 | |
| CVE-2025-25746 | D-Link Dir-853 out-of-bounds write | 9.8v3.1 | 0.6% | 2025-02-12 | |
| CVE-2025-25744 | D-Link Dir-853 out-of-bounds write | 9.8v3.1 | 0.6% | 2025-02-12 | |
| CVE-2025-25743 | D-Link Dir-853 command injection | 7.2v3.1 | 1.7% | 2025-02-12 | |
| CVE-2025-25742 | D-Link Dir-853 out-of-bounds write | 9.8v3.1 | 0.6% | 2025-02-12 | |
| CVE-2025-25741 | D-Link Dir-853 stack-based buffer overflow | 5.4CISA ADP v3.1 | 0.5% | 2025-02-12 | |
| CVE-2025-25351 | PHPGurukul Daily Expense Tracker System SQL injection | 9.8v3.1 | 0.5% | 2025-02-12 | |
| CVE-2025-25349 | PHPGurukul Daily Expense Tracker System SQL injection | 9.8v3.1 | 0.5% | 2025-02-12 | |
| CVE-2025-25343 | Tenda AC6 buffer overflow | 9.8v3.1 | 0.7% | 2025-02-12 | |
| CVE-2025-25283 | parse-duration has a Regex denial of service that results in event loop delay and out of memory | 7.5CNA v3.1 | 0.8% | 2025-02-12 | Fix |
| CVE-2025-25205 | Audiobookshelf authentication middleware authentication bypass | 8.2CNA v3.1 | 4.8% | 2025-02-12 | MetasploitFix |
| CVE-2025-25201 | nitrokey-3-firmware improper validation of Admin Key in PIV Smartcard | 4.0CNA v3.1 | 0.1% | 2025-02-12 | |
| CVE-2025-25200 | Koa has inefficient regular expression complexity | 9.2CNA v4.0 | 0.8% | 2025-02-12 | Exploit codeFix |
| CVE-2025-25199 | Microsoft go-crypto-winnative BCryptGenerateSymmetricKey memory leak | 7.5CNA v3.1 | 1.4% | 2025-02-12 | Fix |
| CVE-2025-25198 | Mailcow: Dockerized vulnerable to password reset poisoning | 7.1CNA v3.1 | 1.1% | 2025-02-12 | Exploit codeFix |
| CVE-2025-25184 | Possible log injection in Rack::CommonLogger | 5.7CNA v4.0 | 1.2% | 2025-02-12 | Fix |
| CVE-2025-25182 | Stroom Authentication/authorization bypass when using AWS ALB | 9.4CNA v3.1 | 0.7% | 2025-02-12 | Fix |
| CVE-2025-23359 | NVIDIA Container Toolkit time-of-check time-of-use race condition | 8.3CNA v3.1 | 3.7% | 2025-02-12 | Fix |
| CVE-2025-21699 | In the Linux kernel, the following vulnerability has been resolved: gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag Truncate an inode's address space when flipping the GFS2_DIF_JDATA flag: depending on that flag, the pages in the address space will either use buffer heads or iomap_f | 7.8CNA v3.1 | 0.3% | 2025-02-12 | Fix |
| CVE-2025-21697 | Linux kernel V3D DRM driver vulnerability | 7.8CNA v3.1 | 0.3% | 2025-02-12 | Fix |
| CVE-2025-21696 | Linux kernel userfaultfd write-protect handling vulnerability | 5.5NVD v3.1 | 0.2% | 2025-02-12 | Fix |
| CVE-2025-21695 | Linux kernel dell-uart-backlight null pointer dereference | 4.7v3.1 | 0.2% | 2025-02-12 | Fix |
| CVE-2025-21694 | Linux kernel vmcore reader denial of service | 5.5NVD v3.1 | 0.2% | 2025-02-12 | Fix |
| CVE-2025-20097 | Intel(R) Server M50FCP Family and Intel(R) Server D50DNP Family improper error handling | 5.3CNA v4.0 | 0.5% | 2025-02-12 | Fix |
| CVE-2025-1244 | Red Hat Enterprise Linux 7 Extended Lifecycle Support text editor Emacs command injection | 8.8CNA v3.1 | 2.6% | 2025-02-12 | Fix |
| CVE-2025-1243 | Field in api-go proxy not transformed before | 2.0CNA v4.0 | 0.1% | 2025-02-12 | Fix |
| CVE-2025-1230 | Cross-site scripting (XSS) vulnerability in PrestaShop | 4.8CNA v3.1 | 0.3% | 2025-02-12 | |
| CVE-2025-1229 | olajowon Loggrove page os command injection | 5.3CNA v4.0 | 1.4% | 2025-02-12 | |
| CVE-2025-1228 | olajowon Loggrove Logfile Update page path traversal | 5.3CNA v4.0 | 0.6% | 2025-02-12 | |
| CVE-2025-1227 | ywoa AddressDao.xml selectList SQL injection | 8.8v3.1 | 0.5% | 2025-02-12 | |
| CVE-2025-1226 | ywoa setup.jsp improper authorization | 9.8v3.1 | 0.8% | 2025-02-12 | |
| CVE-2025-1225 | ywoa WXCallBack Interface XMLParse.java extract XML external entity reference | 5.3CNA v4.0 | 0.4% | 2025-02-12 | |
| CVE-2025-1224 | ywoa UserMapper.xml listNameBySql SQL injection | 8.8v3.1 | 0.4% | 2025-02-12 | |
| CVE-2025-1216 | ywoa OaNoticeMapper.xml selectNoticeList SQL injection | 8.8v3.1 | 0.5% | 2025-02-12 | |
| CVE-2025-1215 | Vim main.c memory corruption | 7.8v3.1 | 0.5% | 2025-02-12 | Fix |
| CVE-2025-1214 | pihome-shc PiHome Role-Based Access Control user_accounts.php authorization | 8.8v3.1 | 0.6% | 2025-02-12 | |
| CVE-2025-1213 | pihome-shc PiHome index.php cross-site scripting | 5.4v3.1 | 0.5% | 2025-02-12 | |
| CVE-2025-1212 | Exposure of sensitive system information to an unauthorized control sphere in GitLab | 4.3CNA v3.1 | 0.4% | 2025-02-12 | Fix |
| CVE-2025-1210 | code-projects Wazifa System control.php SQL injection | 8.8v3.1 | 0.5% | 2025-02-12 | |
| CVE-2025-1209 | code-projects Wazifa System search_resualts.php searchuser cross-site scripting | 5.4v3.1 | 0.3% | 2025-02-12 | |
| CVE-2025-1208 | code-projects Wazifa System Profile.php cross-site scripting | 5.4v3.1 | 0.3% | 2025-02-12 | |
| CVE-2025-1207 | phjounin TFTPD64 DNS denial of service | 2.3CNA v4.0 | 0.3% | 2025-02-12 | |
| CVE-2025-1206 | Codezips Gym Management System viewdetailroutine.php SQL injection | 8.8v3.1 | 0.5% | 2025-02-12 | |
| CVE-2025-1202 | SourceCodester Best Church Management Software edit_slider.php SQL injection | 6.5v3.1 | 0.4% | 2025-02-12 | |
| CVE-2025-1201 | SourceCodester Best Church Management Software profile_crud.php SQL injection | 6.5v3.1 | 0.5% | 2025-02-12 | |
| CVE-2025-1200 | SourceCodester Best Church Management Software slider_crud.php SQL injection | 8.8v3.1 | 0.6% | 2025-02-12 | |
| CVE-2025-1199 | SourceCodester Best Church Management Software role_crud.php SQL injection | 6.5v3.1 | 0.4% | 2025-02-12 | |
| CVE-2025-1197 | code-projects Real Estate Property Management System load_user-profile.php SQL injection | 7.5v3.1 | 0.4% | 2025-02-12 | |
| CVE-2025-1196 | code-projects Real Estate Property Management System search.php cross-site scripting | 5.4v3.1 | 0.4% | 2025-02-12 | |
| CVE-2025-1195 | code-projects Real Estate Property Management System EditCategory cross-site scripting | 5.4v3.1 | 0.3% | 2025-02-12 | |
| CVE-2025-1192 | SourceCodester Multi Restaurant Table Reservation System select-menu.php SQL injection | 8.8v3.1 | 0.4% | 2025-02-12 | |
| CVE-2025-1191 | SourceCodester Multi Restaurant Table Reservation System approve-reject.php SQL injection | 8.8v3.1 | 0.5% | 2025-02-12 | |
| CVE-2025-1190 | code-projects Job Recruitment load_user-profile.php cross-site scripting | 6.1v3.1 | 0.4% | 2025-02-12 | |
| CVE-2025-1189 | 1000 Projects Attendance Tracking Management System chart1.php SQL injection | 8.8v3.1 | 0.5% | 2025-02-12 | |
| CVE-2025-1188 | Codezips Gym Management System updateroutine.php SQL injection | 9.8v3.1 | 0.6% | 2025-02-12 | |
| CVE-2025-1187 | code-projects Police FIR Record Management System Delete Record stack-based overflow | 7.8v3.1 | 0.3% | 2025-02-12 | |
| CVE-2025-1186 | dayrui XunRuiCMS Api.php deserialization | 9.8v3.1 | 0.7% | 2025-02-12 | |
| CVE-2025-1185 | pihome-shc PiHome ajax.php SQL injection | 8.8v3.1 | 0.6% | 2025-02-12 | |
| CVE-2025-1184 | pihome-shc PiHome ajax.php SQL injection | 8.8v3.1 | 0.5% | 2025-02-12 | |
| CVE-2025-1183 | CodeZips Gym Management System more-userprofile.php SQL injection | 9.8v3.1 | 0.6% | 2025-02-12 | |
| CVE-2025-1146 | CrowdStrike Falcon sensor TLS improper certificate validation | 8.1CNA v3.1 | 0.3% | 2025-02-12 | Fix |
| CVE-2025-1102 | Q-Free MaxTime origin validation error | 7.1NVD v3.1 | 0.1% | 2025-02-12 | |
| CVE-2025-1101 | Q-Free MaxTime response discrepancy | 5.3CNA v3.1 | 0.7% | 2025-02-12 | |
| CVE-2025-1100 | Q-Free MaxTime hard-coded password | 9.8CNA v3.1 | 0.8% | 2025-02-12 | |
| CVE-2025-1042 | Files or directories accessible to external parties in GitLab | 4.9CNA v3.1 | 0.4% | 2025-02-12 | Fix |
| CVE-2025-0937 | Nomad vulnerable to Event Stream Namespace ACL Policy Bypass through Wildcard Namespace | 7.1CNA v3.1 | 0.4% | 2025-02-12 | Fix |
| CVE-2025-0808 | Houzez Property Feed WordPress plugin cross-site request forgery to Property Feed export deletion | 5.4v3.1 | 0.2% | 2025-02-12 | Fix |
| CVE-2025-0556 | Telerik Report Server Clear Text Transmission of agent commands | 8.8CNA v3.1 | 0.3% | 2025-02-12 | Fix |
| CVE-2025-0516 | Incorrect authorization in GitLab | 4.3CNA v3.1 | 0.3% | 2025-02-12 | Fix |
| CVE-2025-0511 | Welcart e-Commerce WordPress plugin unauthenticated stored cross-site scripting via name parameter | 6.1NVD v3.1 | 0.4% | 2025-02-12 | Fix |
| CVE-2025-0506 | Rise Blocks A Complete Gutenberg Page Builder WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-02-12 | Fix |
| CVE-2025-0376 | Improper neutralization of input during web page generation (cross-site scripting) in GitLab | 8.7CNA v3.1 | 0.4% | 2025-02-12 | Fix |
| CVE-2025-0332 | Progress UI for WinForms decompression path traversal | 7.8CNA v3.1 | 0.4% | 2025-02-12 | Fix |
| CVE-2025-0113 | Cortex XDR Broker VM: Unauthorized access to Broker VM Docker Containers | 5.3CNA v4.0 | 0.3% | 2025-02-12 | Fix |
| CVE-2025-0111 | Palo Alto Networks PAN-OS arbitrary file read | 7.1CNA v4.0 | 2.0% | 2025-02-12 | KEVKCVFix |
| CVE-2025-0110 | PAN-OS OpenConfig Plugin: Command injection vulnerability in OpenConfig Plugin | 8.6CNA v4.0 | 1.3% | 2025-02-12 | Fix |
| CVE-2025-0109 | PAN-OS: Unauthenticated file deletion vulnerability on the Management Web interface | 6.9CNA v4.0 | 0.6% | 2025-02-12 | Fix |
| CVE-2025-0108 | Palo Alto Networks PAN-OS authentication bypass | 8.8CNA v4.0 | 98.5% | 2025-02-12 | KEVNucleiEmerging ThreatsExploit codeKCVFix |
| CVE-2025-26495 | Sensitive data exposure in Tableau Server | 7.5CISA ADP v3.1 | 0.3% | 2025-02-11 | Fix |
| CVE-2025-26494 | Server side request forgery vulnerability in Tableau Server | 7.7CISA ADP v3.1 | 0.6% | 2025-02-11 | Fix |
| CVE-2025-26493 | JetBrains TeamCity cross-site scripting | 4.6CNA v3.1 | 0.4% | 2025-02-11 | Fix |
| CVE-2025-26492 | JetBrains TeamCity insufficiently protected credentials | 7.7CNA v3.1 | 0.4% | 2025-02-11 | Fix |
| CVE-2025-26411 | Wattsense Bridge Authenticated arbitrary Python file upload via Plugin Manager | 8.8CISA ADP v3.1 | 0.7% | 2025-02-11 | Fix |
| CVE-2025-26410 | Wattsense Bridge weak hard-coded credentials | 9.8CISA ADP v3.1 | 0.7% | 2025-02-11 | Fix |
| CVE-2025-26409 | Wattsense Bridge Access to Bootloader and Shell over Serial interface | 6.8CISA ADP v3.1 | 0.3% | 2025-02-11 | Fix |
| CVE-2025-26408 | Wattsense Bridge unprotected JTAG interface | 6.1CISA ADP v3.1 | 0.3% | 2025-02-11 | Fix |
| CVE-2025-25530 | Digital China DCBI-Netlog-LAB Gateway buffer overflow | 9.8CISA ADP v3.1 | 0.9% | 2025-02-11 | |
| CVE-2025-25529 | Digital China DCBC Gateway buffer overflow | 5.1CISA ADP v3.1 | 0.2% | 2025-02-11 | |
| CVE-2025-25528 | WAVLINK Wl-wn575a3 buffer overflow | 5.1CISA ADP v3.1 | 3.9% | 2025-02-11 | |
| CVE-2025-25527 | Ruijie Rg-nbr2600s buffer overflow | 5.1CISA ADP v3.1 | 0.2% | 2025-02-11 | |
| CVE-2025-25526 | Mercury MIPC552W Camera PPTP server configuration buffer overflow | 5.1CISA ADP v3.1 | 0.2% | 2025-02-11 | |
| CVE-2025-25525 | H3C FA3010L access points firewall rule configuration buffer overflow | 5.1CISA ADP v3.1 | 0.2% | 2025-02-11 | |
| CVE-2025-25524 | TOTOLINK X6000R buffer overflow | 5.1CISA ADP v3.1 | 0.2% | 2025-02-11 | |
| CVE-2025-25523 | TRENDnet Teg-40128 buffer overflow | 5.9CISA ADP v3.1 | 0.2% | 2025-02-11 | |
| CVE-2025-25522 | Linksys WAP610N buffer overflow | 7.3CISA ADP v3.1 | 0.2% | 2025-02-11 | |
| CVE-2025-25243 | Path traversal vulnerability in SAP Supplier Relationship Management | 8.6CNA v3.1 | 0.7% | 2025-02-11 | Fix |
| CVE-2025-25241 | Missing authorization check in SAP Fiori Apps Reference Library (My Overtime requests) | 5.4CNA v3.1 | 0.2% | 2025-02-11 | Fix |
| CVE-2025-25203 | Ctrlpanel-gg panel ctrlpanel has stored XSS vulnerability in TicketsController priority field | 8.1CNA v3.1 | 0.4% | 2025-02-11 | Fix |
| CVE-2025-25202 | Alembic Ash Authentication token revocation improper privilege management | 6.3CNA v4.0 | 0.3% | 2025-02-11 | Fix |
| CVE-2025-24976 | Distribution's token authentication allows attacker to inject an untrusted signing key in a JWT | 6.6CNA v4.0 | 0.4% | 2025-02-11 | Fix |
| CVE-2025-24973 | Concorde not removing authentication tokens after logging out | 9.4CNA v3.1 | 0.2% | 2025-02-11 | Fix |
| CVE-2025-24956 | Siemens OpenV2G buffer overflow | 6.9CNA v4.0 | 0.4% | 2025-02-11 | Fix |
| CVE-2025-24900 | Concorde CSRF vulnerability due to insecure configuration of authentication cookie attributes | 8.6CNA v3.1 | 0.4% | 2025-02-11 | Fix |
| CVE-2025-24897 | Misskey CSRF vulnerability due to insecure configuration of authentication cookie attributes | 8.2CNA v3.1 | 0.1% | 2025-02-11 | Fix |
| CVE-2025-24896 | Misskey allows token to remain valid in cookie after signing out | 8.1CNA v3.1 | 0.6% | 2025-02-11 | Fix |
| CVE-2025-24876 | Authentication bypass via authorization code injection in SAP Approuter | 8.1CNA v3.1 | 0.5% | 2025-02-11 | Fix |
| CVE-2025-24875 | SameSite Defense in Depth not applied for some cookies in SAP Commerce | 6.8CNA v3.1 | 0.2% | 2025-02-11 | Fix |
| CVE-2025-24874 | Missing Defense in Depth against clickjacking in SAP Commerce Backoffice | 6.8CNA v3.1 | 0.3% | 2025-02-11 | Fix |
| CVE-2025-24872 | Missing authorization check in SAP ABAP Platform (ABAP Build Framework) | 4.3CNA v3.1 | 0.3% | 2025-02-11 | Fix |
| CVE-2025-24870 | Insecure Key and Secret Management vulnerability in SAP GUI for Windows | 6.0CNA v3.1 | 0.2% | 2025-02-11 | Fix |
| CVE-2025-24869 | Information disclosure vulnerability in SAP NetWeaver Application Server Java | 4.3CNA v3.1 | 0.3% | 2025-02-11 | Fix |
| CVE-2025-24868 | Open redirect vulnerability in SAP HANA extended application services, advanced model | 7.1CNA v3.1 | 0.2% | 2025-02-11 | Fix |
| CVE-2025-24867 | Cross-site scripting vulnerability in SAP BusinessObjects Business Intelligence platform | 6.1CNA v3.1 | 0.3% | 2025-02-11 | Fix |
| CVE-2025-24812 | Siemens SIMATIC S7-1200 CPU 1211C AC/DC/Rly improper syntax validation | 7.1CNA v4.0 | 0.5% | 2025-02-11 | Fix |
| CVE-2025-24811 | Siemens SIMATIC S7-1200 CPU 1211C AC/DC/Rly improper resource release | 8.7CNA v4.0 | 0.6% | 2025-02-11 | Fix |
| CVE-2025-24807 | eProsima Fast-DDS fast DDS does not verify Permissions CA | 4.5CNA v4.0 | 0.2% | 2025-02-11 | Fix |
| CVE-2025-24532 | Siemens SCALANCE WAB762-1 improper access control | 5.3CNA v4.0 | 0.3% | 2025-02-11 | Fix |
| CVE-2025-24499 | Siemens SCALANCE WAB762-1 improper input validation | 7.5CNA v4.0 | 0.9% | 2025-02-11 | Fix |
| CVE-2025-24472 | Fortinet FortiOS and FortiProxy authentication bypass | 8.1CNA v3.1 | 7.2% | 2025-02-11 | KEVExploit codeFix |
| CVE-2025-24470 | An Improper Resolution of Path Equivalence vulnerability [CWE-41] in FortiPortal 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.11 may allow a remote unauthenticated attacker to retrieve source code via crafted HTTP requests. | 8.1CNA v3.1 | 1.3% | 2025-02-11 | Fix |
| CVE-2025-24438 | Adobe Commerce cross-site scripting (stored XSS) | 8.7CNA v3.1 | 0.8% | 2025-02-11 | Fix |
| CVE-2025-24437 | Adobe Commerce incorrect authorization | 5.4CNA v3.1 | 0.4% | 2025-02-11 | Fix |
| CVE-2025-24436 | Adobe Commerce incorrect authorization | 4.3CNA v3.1 | 0.5% | 2025-02-11 | Fix |
| CVE-2025-24435 | Adobe Commerce improper access control | 4.3CNA v3.1 | 0.5% | 2025-02-11 | Fix |
| CVE-2025-24434 | Adobe Commerce incorrect authorization | 9.1CNA v3.1 | 17.2% | 2025-02-11 | Fix |
| CVE-2025-24432 | Adobe Commerce time-of-check time-of-use (TOCTOU) race condition | 3.7CNA v3.1 | 0.4% | 2025-02-11 | Fix |
| CVE-2025-24430 | Adobe Commerce time-of-check time-of-use (TOCTOU) race condition | 3.7CNA v3.1 | 0.4% | 2025-02-11 | Fix |
| CVE-2025-24429 | Adobe Commerce improper access control | 3.5CNA v3.1 | 0.5% | 2025-02-11 | Fix |
| CVE-2025-24428 | Adobe Commerce cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2025-02-11 | Fix |
| CVE-2025-24427 | Adobe Commerce improper access control | 6.5CNA v3.1 | 0.6% | 2025-02-11 | Fix |
| CVE-2025-24426 | Adobe Commerce improper access control | 6.5CNA v3.1 | 0.8% | 2025-02-11 | Fix |
| CVE-2025-24425 | Adobe Commerce Business Logic Errors | 5.3CNA v3.1 | 0.6% | 2025-02-11 | Fix |
| CVE-2025-24424 | Adobe Commerce improper access control | 6.5CNA v3.1 | 0.8% | 2025-02-11 | Fix |
| CVE-2025-24423 | Adobe Commerce improper access control | 4.3CNA v3.1 | 0.5% | 2025-02-11 | Fix |
| CVE-2025-24422 | Adobe Commerce improper access control | 6.5CNA v3.1 | 0.8% | 2025-02-11 | Fix |
| CVE-2025-24421 | Adobe Commerce incorrect authorization | 4.3CNA v3.1 | 0.5% | 2025-02-11 | Fix |
| CVE-2025-24420 | Adobe Commerce incorrect authorization | 4.3CNA v3.1 | 0.6% | 2025-02-11 | Fix |
| CVE-2025-24419 | Adobe Commerce incorrect authorization | 4.3CNA v3.1 | 0.6% | 2025-02-11 | Fix |
| CVE-2025-24418 | Adobe Commerce improper authorization | 8.1CNA v3.1 | 1.0% | 2025-02-11 | Fix |
| CVE-2025-24417 | Adobe Commerce cross-site scripting (stored XSS) | 8.7CNA v3.1 | 0.7% | 2025-02-11 | Fix |
| CVE-2025-24416 | Adobe Commerce cross-site scripting (stored XSS) | 8.7CNA v3.1 | 0.7% | 2025-02-11 | Fix |
| CVE-2025-24415 | Adobe Commerce cross-site scripting (stored XSS) | 8.7CNA v3.1 | 0.7% | 2025-02-11 | Fix |
| CVE-2025-24414 | Adobe Commerce cross-site scripting (stored XSS) | 8.7CNA v3.1 | 0.7% | 2025-02-11 | Fix |
| CVE-2025-24413 | Adobe Commerce cross-site scripting (stored XSS) | 8.7CNA v3.1 | 0.7% | 2025-02-11 | Fix |
| CVE-2025-24412 | Adobe Commerce cross-site scripting (stored XSS) | 8.7CNA v3.1 | 0.7% | 2025-02-11 | Fix |
| CVE-2025-24411 | Adobe Commerce improper access control | 8.1CNA v3.1 | 0.9% | 2025-02-11 | Fix |
| CVE-2025-24410 | Adobe Commerce cross-site scripting (stored XSS) | 8.7CNA v3.1 | 0.7% | 2025-02-11 | Fix |
| CVE-2025-24409 | Adobe Commerce incorrect authorization | 8.2CNA v3.1 | 0.7% | 2025-02-11 | Fix |
| CVE-2025-24408 | Adobe Commerce information exposure | 6.5CNA v3.1 | 1.0% | 2025-02-11 | Fix |
| CVE-2025-24407 | Adobe Commerce incorrect authorization | 7.1CNA v3.1 | 0.8% | 2025-02-11 | Fix |
| CVE-2025-24406 | Adobe Commerce improper limitation of a pathname to a restricted directory (path traversal) | 7.5CNA v3.1 | 1.4% | 2025-02-11 | Fix |
| CVE-2025-24042 | Microsoft Visual Studio Code JS Debug extension elevation of privilege | 7.3CNA v3.1 | 0.7% | 2025-02-11 | Fix |
| CVE-2025-24039 | Microsoft Visual Studio Code elevation of privilege | 7.3CNA v3.1 | 0.8% | 2025-02-11 | Fix |
| CVE-2025-24036 | Microsoft AutoUpdate (MAU) elevation of privilege | 7.0CNA v3.1 | 0.4% | 2025-02-11 | Fix |
| CVE-2025-23403 | Siemens SIMATIC IPC DiagBase incorrect permission assignment | 7.3CNA v4.0 | 0.1% | 2025-02-11 | |
| CVE-2025-23363 | Siemens Teamcenter open redirect | 6.1CNA v4.0 | 0.6% | 2025-02-11 | Fix |
| CVE-2025-23193 | Information disclosure vulnerability in SAP NetWeaver Application Server ABAP | 5.3CNA v3.1 | 0.3% | 2025-02-11 | Fix |
| CVE-2025-23191 | Cache poisoning through header manipulation vulnerability in SAP Fiori for SAP ERP | 3.1CNA v3.1 | 0.2% | 2025-02-11 | Fix |
| CVE-2025-23190 | Missing authorization check in SAP NetWeaver and ABAP platform (ST-PI) | 4.3CNA v3.1 | 0.3% | 2025-02-11 | Fix |
| CVE-2025-23189 | Missing authorization Check in SAP NetWeaver and ABAP Platform (SDCCN) | 4.3CNA v3.1 | 0.2% | 2025-02-11 | Fix |
| CVE-2025-23187 | Missing authorization Check in SAP NetWeaver and ABAP Platform (SDCCN) | 5.3CNA v3.1 | 0.3% | 2025-02-11 | Fix |
| CVE-2025-22467 | Ivanti Connect Secure stack-based buffer overflow | 9.9CNA v3.1 | 4.7% | 2025-02-11 | Fix |
| CVE-2025-22399 | Dell UCC Edge server-side request forgery | 7.9CNA v3.1 | 0.2% | 2025-02-11 | Fix |
| CVE-2025-21420 | Microsoft Windows Disk Cleanup tool elevation of privilege | 7.8CNA v3.1 | 3.7% | 2025-02-11 | Exploit codeFix |
| CVE-2025-21419 | Microsoft Windows Setup Files Cleanup elevation of privilege | 7.1CNA v3.1 | 0.7% | 2025-02-11 | Fix |
| CVE-2025-21418 | Microsoft Windows Ancillary function driver for WinSock heap-based buffer overflow | 7.8CNA v3.1 | 1.6% | 2025-02-11 | KEVFix |
| CVE-2025-21414 | Microsoft Windows Core Messaging elevation of privileges | 7.0CNA v3.1 | 0.6% | 2025-02-11 | Fix |
| CVE-2025-21410 | Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution | 8.8CNA v3.1 | 1.8% | 2025-02-11 | Fix |
| CVE-2025-21407 | Microsoft Windows Telephony service remote code execution | 8.8CNA v3.1 | 1.8% | 2025-02-11 | Fix |
| CVE-2025-21406 | Microsoft Windows Telephony service remote code execution | 8.8CNA v3.1 | 1.8% | 2025-02-11 | Fix |
| CVE-2025-21400 | Microsoft SharePoint server remote code execution | 8.0CNA v3.1 | 34.5% | 2025-02-11 | Fix |
| CVE-2025-21397 | Microsoft Office remote code execution | 7.8CNA v3.1 | 0.8% | 2025-02-11 | Fix |
| CVE-2025-21394 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 0.8% | 2025-02-11 | Fix |
| CVE-2025-21392 | Microsoft Office remote code execution | 7.8CNA v3.1 | 0.8% | 2025-02-11 | Fix |
| CVE-2025-21391 | Microsoft Windows Storage link following | 7.1CNA v3.1 | 2.3% | 2025-02-11 | KEVFix |
| CVE-2025-21390 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 0.8% | 2025-02-11 | Fix |
| CVE-2025-21387 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 0.9% | 2025-02-11 | Fix |
| CVE-2025-21386 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 0.8% | 2025-02-11 | Fix |
| CVE-2025-21383 | Microsoft Excel information disclosure | 7.8CNA v3.1 | 1.0% | 2025-02-11 | Fix |
| CVE-2025-21381 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 1.1% | 2025-02-11 | Fix |
| CVE-2025-21379 | Microsoft Windows DHCP client service remote code execution | 7.1CNA v3.1 | 0.9% | 2025-02-11 | Fix |
| CVE-2025-21377 | Microsoft Windows NTLM hash disclosure spoofing | 6.5CNA v3.1 | 39.9% | 2025-02-11 | Fix |
| CVE-2025-21376 | Microsoft Windows Lightweight Directory Access Protocol (LDAP) remote code execution | 8.1CNA v3.1 | 9.4% | 2025-02-11 | Fix |
| CVE-2025-21375 | Microsoft Windows kernel Streaming WOW Thunk service driver elevation of privilege | 7.8CNA v3.1 | 0.6% | 2025-02-11 | Fix |
| CVE-2025-21373 | Microsoft Windows Installer elevation of privilege | 7.8CNA v3.1 | 0.8% | 2025-02-11 | Fix |
| CVE-2025-21371 | Microsoft Windows Telephony service remote code execution | 8.8CNA v3.1 | 2.5% | 2025-02-11 | Fix |
| CVE-2025-21369 | Microsoft Digest Authentication remote code execution | 8.8CNA v3.1 | 2.2% | 2025-02-11 | Fix |
| CVE-2025-21368 | Microsoft Digest Authentication remote code execution | 8.8CNA v3.1 | 2.2% | 2025-02-11 | Fix |
| CVE-2025-21367 | Microsoft Windows Win32 Kernel subsystem elevation of privilege | 7.8CNA v3.1 | 0.6% | 2025-02-11 | Fix |
| CVE-2025-21359 | Microsoft Windows Kernel security feature bypass | 7.8CNA v3.1 | 0.6% | 2025-02-11 | Fix |
| CVE-2025-21358 | Microsoft Windows Core Messaging elevation of privileges | 7.8CNA v3.1 | 0.8% | 2025-02-11 | Fix |
| CVE-2025-21352 | Microsoft Windows Internet Connection Sharing (ICS) denial of service | 6.5CNA v3.1 | 1.0% | 2025-02-11 | Fix |
| CVE-2025-21351 | Microsoft Windows Active Directory Domain Services API denial of service | 7.5CNA v3.1 | 2.5% | 2025-02-11 | Fix |
| CVE-2025-21350 | Microsoft Windows Kerberos denial of service | 5.9CNA v3.1 | 2.1% | 2025-02-11 | Fix |
| CVE-2025-21349 | Microsoft Windows Remote Desktop Configuration service tampering | 6.8CNA v3.1 | 1.2% | 2025-02-11 | Fix |
| CVE-2025-21347 | Microsoft Windows Deployment services denial of service | 6.0CNA v3.1 | 0.7% | 2025-02-11 | Fix |
| CVE-2025-21337 | Microsoft Windows NTFS elevation of privilege | 3.3CNA v3.1 | 0.6% | 2025-02-11 | Fix |
| CVE-2025-21322 | Microsoft PC Manager elevation of privilege | 7.8CNA v3.1 | 0.7% | 2025-02-11 | Fix |
| CVE-2025-21259 | Microsoft Outlook spoofing | 5.3CNA v3.1 | 1.2% | 2025-02-11 | Fix |
| CVE-2025-21254 | Microsoft Windows Internet Connection Sharing (ICS) denial of service | 6.5CNA v3.1 | 1.0% | 2025-02-11 | Fix |
| CVE-2025-21216 | Microsoft Windows Internet Connection Sharing (ICS) denial of service | 6.5CNA v3.1 | 1.0% | 2025-02-11 | Fix |
| CVE-2025-21212 | Microsoft Windows Internet Connection Sharing (ICS) denial of service | 6.5CNA v3.1 | 1.0% | 2025-02-11 | Fix |
| CVE-2025-21208 | Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution | 8.8CNA v3.1 | 1.8% | 2025-02-11 | Fix |
| CVE-2025-21206 | Visual Studio Installer elevation of privilege | 7.3CNA v3.1 | 0.7% | 2025-02-11 | Fix |
| CVE-2025-21201 | Microsoft Windows Telephony Server remote code execution | 8.8CNA v3.1 | 1.8% | 2025-02-11 | Fix |
| CVE-2025-21200 | Microsoft Windows Telephony service remote code execution | 8.8CNA v3.1 | 1.8% | 2025-02-11 | Fix |
| CVE-2025-21198 | Microsoft High Performance Compute (HPC) Pack remote code execution | 9.0CNA v3.1 | 0.9% | 2025-02-11 | Fix |
| CVE-2025-21194 | Microsoft Surface security feature bypass | 7.1CNA v3.1 | 0.8% | 2025-02-11 | Fix |
| CVE-2025-21190 | Microsoft Windows Telephony service remote code execution | 8.8CNA v3.1 | 1.8% | 2025-02-11 | Fix |
| CVE-2025-21188 | Microsoft Azure Network Watcher VM Extension elevation of privilege | 6.0CNA v3.1 | 0.7% | 2025-02-11 | Fix |
| CVE-2025-21184 | Microsoft Windows Core Messaging elevation of privileges | 7.0CNA v3.1 | 0.6% | 2025-02-11 | Fix |
| CVE-2025-21183 | Microsoft Windows Resilient File System (ReFS) Deduplication service elevation of privilege | 7.4CNA v3.1 | 0.5% | 2025-02-11 | Fix |
| CVE-2025-21182 | Microsoft Windows Resilient File System (ReFS) Deduplication service elevation of privilege | 7.4CNA v3.1 | 0.5% | 2025-02-11 | Fix |
| CVE-2025-21181 | Microsoft Message Queuing (MSMQ) denial of service | 7.5CNA v3.1 | 3.5% | 2025-02-11 | Fix |
| CVE-2025-21179 | Microsoft Windows DHCP client service denial of service | 4.8CNA v3.1 | 0.7% | 2025-02-11 | Fix |
| CVE-2025-21163 | Adobe Illustrator stack-based buffer overflow | 7.8CNA v3.1 | 0.4% | 2025-02-11 | Fix |
| CVE-2025-21162 | Adobe Photoshop Elements Creation of Temporary file in Directory with incorrect permissions | 5.5CNA v3.1 | 0.3% | 2025-02-11 | Fix |
| CVE-2025-21161 | Adobe Substance3D Designer out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2025-02-11 | Fix |
| CVE-2025-21160 | Adobe Illustrator integer underflow (wrap or wraparound) | 7.8CNA v3.1 | 0.4% | 2025-02-11 | Fix |
| CVE-2025-21159 | Adobe Illustrator use-after-free | 7.8CNA v3.1 | 0.4% | 2025-02-11 | Fix |
| CVE-2025-21158 | Adobe InDesign Desktop integer underflow (wrap or wraparound) | 7.8CNA v3.1 | 0.3% | 2025-02-11 | Fix |
| CVE-2025-21157 | Adobe InDesign Desktop out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2025-02-11 | Fix |
| CVE-2025-21156 | Adobe InCopy integer underflow (wrap or wraparound) | 7.8CNA v3.1 | 0.3% | 2025-02-11 | Fix |
| CVE-2025-21155 | Adobe Substance3D Stager null pointer dereference | 5.5CNA v3.1 | 0.3% | 2025-02-11 | Fix |
| CVE-2025-21126 | Adobe InDesign Desktop improper input validation | 5.5CNA v3.1 | 0.3% | 2025-02-11 | Fix |
| CVE-2025-21125 | Adobe InDesign Desktop null pointer dereference | 5.5CNA v3.1 | 0.3% | 2025-02-11 | Fix |
| CVE-2025-21124 | Adobe InDesign Desktop out-of-bounds read | 5.5CNA v3.1 | 0.3% | 2025-02-11 | Fix |
| CVE-2025-21123 | Adobe InDesign Desktop heap-based buffer overflow | 7.8CNA v3.1 | 0.3% | 2025-02-11 | Fix |
| CVE-2025-21121 | Adobe InDesign Desktop out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2025-02-11 | Fix |
| CVE-2025-1240 | WinZip 7Z File Parsing out-of-bounds write remote code execution | 8.8v3.1 | 10.3% | 2025-02-11 | |
| CVE-2025-1231 | Devolutions Server improper authentication | 5.4CISA ADP v3.1 | 0.4% | 2025-02-11 | Fix |
| CVE-2025-1211 | Server-side request forgery (SSRF) in hackney | 6.3CNA v4.0 | 0.5% | 2025-02-11 | Fix |
| CVE-2025-1182 | GNU Binutils ld elflink.c bfd_elf_reloc_symbol_deleted_p memory corruption | 2.3CNA v4.0 | 0.6% | 2025-02-11 | Fix |
| CVE-2025-1181 | GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec memory corruption | 2.3CNA v4.0 | 0.7% | 2025-02-11 | Fix |
| CVE-2025-1180 | GNU Binutils ld elf-eh-frame.c _bfd_elf_write_section_eh_frame memory corruption | 2.3CNA v4.0 | 0.7% | 2025-02-11 | Fix |
| CVE-2025-1179 | GNU Binutils ld libbfd.c bfd_putl64 memory corruption | 7.5v3.1 | 0.6% | 2025-02-11 | Fix |
| CVE-2025-1178 | GNU Binutils ld libbfd.c bfd_putl64 memory corruption | 6.3CNA v4.0 | 0.8% | 2025-02-11 | Fix |
| CVE-2025-1177 | dayrui XunRuiCMS Linkage.php import_add deserialization | 9.8v3.1 | 0.7% | 2025-02-11 | |
| CVE-2025-1176 | GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec heap-based overflow | 5.0v3.1 | 0.7% | 2025-02-11 | Fix |
| CVE-2025-1174 | 1000 Projects Bookstore Management System Add Book page process_book_add.php cross-site scripting | 4.8v3.1 | 0.5% | 2025-02-11 | |
| CVE-2025-1173 | 1000 Projects Bookstore Management System process_users_del.php SQL injection | 7.2v3.1 | 0.7% | 2025-02-11 | |
| CVE-2025-1172 | 1000 Projects Bookstore Management System addtocart.php SQL injection | 8.8v3.1 | 0.5% | 2025-02-11 | |
| CVE-2025-1171 | code-projects Real Estate Property Management System CustomerReport.php cross-site scripting | 6.1v3.1 | 0.4% | 2025-02-11 | |
| CVE-2025-1170 | code-projects Real Estate Property Management System Category.php cross-site scripting | 5.4v3.1 | 0.4% | 2025-02-11 | |
| CVE-2025-1169 | SourceCodester Image Compressor Tool compressor.php cross-site scripting | 6.1v3.1 | 0.4% | 2025-02-11 | |
| CVE-2025-1168 | SourceCodester Contact Manager with Export to VCF delete-contact.php SQL injection | 9.8v3.1 | 0.5% | 2025-02-11 | |
| CVE-2025-1167 | Mayuri K Employee Management System Update_User.php SQL injection | 9.8v3.1 | 0.5% | 2025-02-11 | |
| CVE-2025-1166 | SourceCodester Food Menu Manager update.php unrestricted upload | 8.8v3.1 | 0.5% | 2025-02-11 | |
| CVE-2025-1165 | Lumsoft ERP FileUploadApi.ashx DoWebUpload unrestricted upload | 6.9CNA v4.0 | 0.5% | 2025-02-11 | |
| CVE-2025-1164 | code-projects Police FIR Record Management System Add Record stack-based overflow | 5.5v3.1 | 0.3% | 2025-02-11 | |
| CVE-2025-1163 | code-projects Vehicle Parking Management System Authentication login stack-based overflow | 7.5v3.1 | 0.5% | 2025-02-11 | |
| CVE-2025-1145 | NetVision Information ISOinsight reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2025-02-11 | Fix |
| CVE-2025-1144 | Quanxun School Affairs System exposure of sensitive information | 9.8CISA ADP v3.1 | 0.5% | 2025-02-11 | Fix |
| CVE-2025-1143 | Billion Electric M120N use of hard-coded credentials | 8.4CNA v3.1 | 0.2% | 2025-02-11 | Fix |
| CVE-2025-1126 | Lexmark has identified a vulnerability in our Lexmark Print Management Client (LPMC) | 9.3CNA v3.1 | 0.3% | 2025-02-11 | Fix |
| CVE-2025-1052 | Mintty Sixel Image Parsing heap-based buffer overflow remote code execution | 8.8v3.1 | 1.0% | 2025-02-11 | |
| CVE-2025-1044 | Logsign Unified SecOps Platform authentication bypass | 9.8v3.1 | 75.3% | 2025-02-11 | Fix |
| CVE-2025-0911 | PDF-XChange Editor U3D File Parsing out-of-bounds read information disclosure | 8.8v3.1 | 0.7% | 2025-02-11 | |
| CVE-2025-0910 | PDF-XChange Editor U3D File Parsing out-of-bounds write remote code execution | 8.8v3.1 | 0.8% | 2025-02-11 | |
| CVE-2025-0909 | PDF-XChange Editor XPS File Parsing out-of-bounds read information disclosure | 8.8v3.1 | 0.7% | 2025-02-11 | |
| CVE-2025-0908 | PDF-XChange Editor U3D File Parsing out-of-bounds read information disclosure | 8.8v3.1 | 0.8% | 2025-02-11 | |
| CVE-2025-0907 | PDF-XChange Editor JB2 File Parsing out-of-bounds read information disclosure | 8.8v3.1 | 0.7% | 2025-02-11 | |
| CVE-2025-0906 | PDF-XChange Editor JB2 File Parsing out-of-bounds read information disclosure | 8.8v3.1 | 0.7% | 2025-02-11 | |
| CVE-2025-0905 | PDF-XChange Editor JB2 File Parsing out-of-bounds read information disclosure | 8.8v3.1 | 0.7% | 2025-02-11 | |
| CVE-2025-0904 | PDF-XChange Editor XPS File Parsing out-of-bounds read information disclosure | 8.8v3.1 | 0.7% | 2025-02-11 | |
| CVE-2025-0903 | PDF-XChange Editor RTF File Parsing heap-based buffer overflow remote code execution | 8.8v3.1 | 0.8% | 2025-02-11 | |
| CVE-2025-0902 | PDF-XChange Editor XPS File Parsing out-of-bounds read information disclosure | 8.8v3.1 | 0.7% | 2025-02-11 | |
| CVE-2025-0901 | PDF-XChange Editor Doc object out-of-bounds read remote code execution | 8.8v3.1 | 0.8% | 2025-02-11 | |
| CVE-2025-0899 | PDF-XChange Editor AcroForm use-after-free remote code execution | 8.8v3.1 | 0.8% | 2025-02-11 | |
| CVE-2025-0862 | SuperSaaS online appointment scheduling WordPress plugin stored cross-site scripting | 4.9CNA v3.1 | 0.4% | 2025-02-11 | Fix |
| CVE-2025-0589 | Octopus Deploy Octopus Server incorrect use of privileged APIs | 6.9CNA v4.0 | 0.4% | 2025-02-11 | Fix |
| CVE-2025-0588 | Octopus Deploy Octopus Server HTTP response splitting | 5.9CNA v4.0 | 0.4% | 2025-02-11 | Fix |
| CVE-2025-0526 | Octopus Deploy Octopus Server missing authorization | 2.3CNA v4.0 | 0.4% | 2025-02-11 | Fix |
| CVE-2025-0525 | Octopus Deploy Octopus Server information disclosure | 2.3CNA v4.0 | 0.4% | 2025-02-11 | Fix |
| CVE-2025-0513 | Octopus Deploy Octopus Server cross-site scripting | 1.8CNA v4.0 | 0.2% | 2025-02-11 | Fix |
| CVE-2025-0181 | WP Foodbakery WordPress plugin authentication bypass in foodbakery_parse_request | 9.8CNA v3.1 | 0.6% | 2025-02-11 | |
| CVE-2025-0180 | WP Foodbakery WordPress plugin privilege escalation | 9.8CNA v3.1 | 0.5% | 2025-02-11 | Fix |
| CVE-2025-0064 | Improper authorization in SAP BusinessObjects Business Intelligence platform | 8.7CNA v3.1 | 0.4% | 2025-02-11 | Fix |
| CVE-2025-0054 | Cross-site scripting (XSS) vulnerability in SAP NetWeaver Application Server Java | 5.4CNA v3.1 | 0.3% | 2025-02-11 | Fix |
| CVE-2025-25247 | Apache Felix Webconsole: XSS in services console | 6.1CISA ADP v3.1 | 0.7% | 2025-02-10 | Fix |
| CVE-2025-25194 | LemmyNet lemmy server-side request forgery (SSRF) in activitypub_federation | 4.0CNA v3.1 | 0.4% | 2025-02-10 | |
| CVE-2025-25193 | Denial of service attack on windows app using Netty | 5.5CNA v3.1 | 0.4% | 2025-02-10 | Fix |
| CVE-2025-25190 | Cross-site scripting (XSS) via EchoProcess service in ZOO-Project WPS Server | 5.5CNA v4.0 | 0.6% | 2025-02-10 | Fix |
| CVE-2025-25189 | Reflected cross-site scripting via jobid parameter in ZOO-Project WPS publish.py CGI script | 5.5CNA v4.0 | 0.5% | 2025-02-10 | Fix |
| CVE-2025-25188 | hickory-dns DNSSEC validation may accept broken authentication chains | 5.7CNA v4.0 | 0.3% | 2025-02-10 | Fix |
| CVE-2025-25186 | ruby net-imap Net::IMAP vulnerable to possible DoS by memory exhaustion | 6.5CNA v3.1 | 0.6% | 2025-02-10 | Fix |
| CVE-2025-24970 | netty SslHandler doesn't correctly validate packets which can lead to native crash when | 7.5CNA v3.1 | 2.2% | 2025-02-10 | Fix |
| CVE-2025-24892 | OpenProject stored HTML injection | 3.5CNA v3.1 | 0.3% | 2025-02-10 | Fix |
| CVE-2025-24200 | Apple iOS and iPadOS incorrect authorization | 6.1v3.1 | 4.5% | 2025-02-10 | KEVFix |
| CVE-2025-24032 | OpenSC pam_pkcs11 cert_policy default setting authentication bypass | 9.2CNA v4.0 | 0.7% | 2025-02-10 | Fix |
| CVE-2025-24031 | OpenSC pam_pkcs11 PAM-PKCS#11 vulnerable to segmentation fault on ctrl-c/ctrl-d when asked for PIN | 5.1CNA v4.0 | 0.1% | 2025-02-10 | Fix |
| CVE-2025-24016 | Wazuh Server deserialization of untrusted data | 9.9CNA v3.1 | 93.8% | 2025-02-10 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2025-21693 | Linux kernel zswap use-after-free | 7.8CNA v3.1 | 0.2% | 2025-02-10 | Fix |
| CVE-2025-21692 | Linux kernel sched local privilege escalation | 7.8CNA v3.1 | 0.6% | 2025-02-10 | Exploit codeFix |
| CVE-2025-21691 | Linux kernel cachestat system call vulnerability | 5.5v3.1 | 0.2% | 2025-02-10 | Fix |
| CVE-2025-21690 | Linux kernel storvsc denial of service | 5.5v3.1 | 0.2% | 2025-02-10 | Fix |
| CVE-2025-21689 | Linux kernel Quatech2 USB serial driver null pointer dereference | 5.5v3.1 | 0.2% | 2025-02-10 | Fix |
| CVE-2025-21688 | Linux kernel V3D DRM driver race condition | 4.7v3.1 | 0.2% | 2025-02-10 | Fix |
| CVE-2025-21687 | Linux kernel VFIO platform driver vulnerability | 7.8CNA v3.1 | 0.2% | 2025-02-10 | Fix |
| CVE-2025-1193 | Devolutions Remote Desktop Manager improper certificate validation | 8.1CISA ADP v3.1 | 0.4% | 2025-02-10 | Fix |
| CVE-2025-1175 | Cross-site scripting (XSS) vulnerability in Kelio Visio | 6.1CNA v3.1 | 0.3% | 2025-02-10 | |
| CVE-2025-1162 | code-projects Job Recruitment load\_user-profile.php SQL injection | 7.5v3.1 | 0.6% | 2025-02-10 | |
| CVE-2025-1160 | SourceCodester Employee Management System index.php default credentials | 9.8v3.1 | 0.9% | 2025-02-10 | |
| CVE-2025-1159 | CampCodes School Management Software academic-calendar cross-site scripting | 5.4v3.1 | 0.4% | 2025-02-10 | |
| CVE-2025-1158 | ESAFENET CDG addPolicyToSafetyGroup.jsp SQL injection | 5.3CNA v4.0 | 0.3% | 2025-02-10 | |
| CVE-2025-1157 | Allims lab.online model_recuperar_senha.php SQL injection | 5.3CNA v4.0 | 0.3% | 2025-02-10 | |
| CVE-2025-1156 | Pix Software Vivaz servlet SQL injection | 6.9CNA v4.0 | 0.4% | 2025-02-10 | |
| CVE-2025-1155 | Webkul QloApps Your Location Search stores cross-site scripting | 6.1v3.1 | 0.5% | 2025-02-10 | |
| CVE-2025-1154 | xxyopen Novel books SQL injection | 5.3CNA v4.0 | 0.3% | 2025-02-10 | |
| CVE-2025-1153 | GNU Binutils format.c bfd_set_format memory corruption | 5.9v3.1 | 1.4% | 2025-02-10 | Fix |
| CVE-2025-1152 | GNU Binutils ld xstrdup.c xstrdup memory leak | 3.7v3.1 | 0.6% | 2025-02-10 | Fix |
| CVE-2025-1151 | GNU Binutils ld xmemdup.c xmemdup memory leak | 2.3CNA v4.0 | 0.6% | 2025-02-10 | Fix |
| CVE-2025-1150 | GNU Binutils ld libbfd.c bfd_malloc memory leak | 3.1v3.1 | 0.6% | 2025-02-10 | Fix |
| CVE-2025-1149 | GNU Binutils ld xmalloc.c xstrdup memory leak | 3.1v3.1 | 0.6% | 2025-02-10 | Fix |
| CVE-2025-1148 | GNU Binutils ld ldelfgen.c link_order_scan memory leak | 3.1v3.1 | 0.6% | 2025-02-10 | Fix |
| CVE-2025-1147 | GNU Binutils nm nm.c internal_strlen buffer overflow | 5.3v3.1 | 0.7% | 2025-02-10 | Fix |
| CVE-2025-1099 | Information disclosure vulnerability in TP-Link Tapo C500 Wi-Fi Camera | 7.0CNA v4.0 | 0.3% | 2025-02-10 | Fix |
| CVE-2025-1002 | MicroDicom DICOM Viewer improper certificate validation | 5.3v3.1 | 0.1% | 2025-02-10 | Fix |
| CVE-2025-21685 | Linux kernel lenovo-yoga-tab2-pro-1380-fastcharger null pointer dereference | 4.7v3.1 | 0.2% | 2025-02-09 | Fix |
| CVE-2025-21684 | Linux kernel Xilinx GPIO driver improper locking | 5.5v3.1 | 0.2% | 2025-02-09 | Fix |
| CVE-2025-1117 | CoinRemitter SQL injection | 6.9CNA v4.0 | 0.4% | 2025-02-08 | Fix |
| CVE-2025-1116 | Dreamvention Live AJAX Search Free live_search.searchresults search SQL injection | 6.9CNA v4.0 | 0.4% | 2025-02-08 | |
| CVE-2025-1115 | RT-Thread lwp_syscall.c sys_timer_settime information disclosure | 5.5v3.1 | 0.3% | 2025-02-08 | |
| CVE-2025-0316 | WP Directorybox Manager WordPress plugin authentication bypass | 9.8CNA v3.1 | 0.7% | 2025-02-08 | Exploit code |
| CVE-2025-0169 | DWT - Directory and Listing WordPress theme stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-02-08 | Fix |
| CVE-2025-25187 | Cross-site scripting in Goto Anything allows arbitrary code execution in Joplin | 7.8CNA v3.1 | 0.5% | 2025-02-07 | Fix |
| CVE-2025-25183 | vLLM using built-in hash from Python leads to predictable hash collisions in vLLM prefix cache | 2.6CNA v3.1 | 0.2% | 2025-02-07 | Fix |
| CVE-2025-25168 | BookPress For Book Authors WordPress plugin CSRF to stored XSS | 6.1NVD v3.1 | 0.2% | 2025-02-07 | |
| CVE-2025-25167 | BookPress For Book Authors WordPress plugin broken access control | 9.8v3.1 | 0.5% | 2025-02-07 | |
| CVE-2025-25166 | InLocation WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.1% | 2025-02-07 | |
| CVE-2025-25163 | Plugin A/B Image Optimizer WordPress plugin arbitrary file download | 9.8NVD v3.1 | 2.0% | 2025-02-07 | |
| CVE-2025-25160 | Style Tweaker WordPress plugin CSRF to stored XSS | 6.1NVD v3.1 | 0.1% | 2025-02-07 | |
| CVE-2025-25159 | WP doodlez WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-02-07 | |
| CVE-2025-25156 | Quote Comments WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.1% | 2025-02-07 | |
| CVE-2025-25155 | Music Sheet Viewer WordPress plugin arbitrary file read | 7.5CNA v3.1 | 0.5% | 2025-02-07 | |
| CVE-2025-25154 | Custom Comment Notifications WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.1% | 2025-02-07 | |
| CVE-2025-25153 | Simple Auto Tag WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.1% | 2025-02-07 | |
| CVE-2025-25152 | Smart DoFollow WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.1% | 2025-02-07 | |
| CVE-2025-25151 | uListing WordPress plugin SQL injection | 8.5CNA v3.1 | 0.5% | 2025-02-07 | Fix |
| CVE-2025-25149 | Login-box WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.1% | 2025-02-07 | |
| CVE-2025-25148 | Read More Copy Link WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.1% | 2025-02-07 | |
| CVE-2025-25147 | Auto SEO WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.1% | 2025-02-07 | Fix |
| CVE-2025-25146 | Songkick Concerts and Festivals WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-02-07 | Fix |
| CVE-2025-25145 | Infusionsoft Analytics WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.2% | 2025-02-07 | |
| CVE-2025-25144 | Theasys WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.3% | 2025-02-07 | |
| CVE-2025-25143 | GlobalQuran WordPress plugin CSRF to settings Change | 4.3CNA v3.1 | 0.1% | 2025-02-07 | |
| CVE-2025-25141 | Fami Sales Popup WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.7% | 2025-02-07 | |
| CVE-2025-25140 | Simple User Profile WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.1% | 2025-02-07 | |
| CVE-2025-25139 | WP Custom Post RSS Feed WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.1% | 2025-02-07 | |
| CVE-2025-25138 | On Page SEO + Social Live Chat (Formerly OPS) WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2025-02-07 | Fix |
| CVE-2025-25136 | Optimate Ads WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-02-07 | |
| CVE-2025-25135 | Custom Links On Admin Dashboard Toolbar WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.1% | 2025-02-07 | |
| CVE-2025-25128 | Facilita Form Tracker WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2025-02-07 | |
| CVE-2025-25126 | ZMSEO WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.1% | 2025-02-07 | |
| CVE-2025-25125 | Fyrebox Quizzes WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2025-02-07 | |
| CVE-2025-25123 | Easy Related Posts WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2025-02-07 | |
| CVE-2025-25120 | Slide Banners WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2025-02-07 | |
| CVE-2025-25117 | Smart Countdown FX WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-02-07 | |
| CVE-2025-25116 | Link to URL / Post WordPress plugin SQL injection | 7.6CNA v3.1 | 0.5% | 2025-02-07 | |
| CVE-2025-25111 | WP Spell Check WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.2% | 2025-02-07 | Fix |
| CVE-2025-25110 | Event Kikfyre WordPress plugin broken access control | 5.4CNA v3.1 | 0.4% | 2025-02-07 | |
| CVE-2025-25107 | OneStore Sites WordPress plugin CSRF to arbitrary plugin installation | 9.6CNA v3.1 | 0.2% | 2025-02-07 | |
| CVE-2025-25106 | Starter Templates by FancyWP WordPress plugin CSRF to arbitrary plugin installation | 9.6CNA v3.1 | 0.2% | 2025-02-07 | |
| CVE-2025-25105 | Pop Up WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2025-02-07 | |
| CVE-2025-25104 | URL-Preview-Box WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2025-02-07 | |
| CVE-2025-25103 | Indeed API WordPress plugin CSRF to settings Change | 4.3CNA v3.1 | 0.2% | 2025-02-07 | |
| CVE-2025-25101 | Munk Sites WordPress plugin CSRF to arbitrary plugin installation | 9.6CNA v3.1 | 0.6% | 2025-02-07 | Exploit code |
| CVE-2025-25098 | Links in Captions WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-02-07 | |
| CVE-2025-25097 | External Video for Everybody WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-02-07 | |
| CVE-2025-25096 | RSS in Page WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-02-07 | |
| CVE-2025-25095 | reverbnationdev ReverbNation Widgets stored cross-site scripting | 6.5CNA v3.1 | 0.3% | 2025-02-07 | |
| CVE-2025-25094 | Breaking News Ticker WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-02-07 | |
| CVE-2025-25093 | Child Themes Helper WordPress plugin CSRF to arbitrary file deletion | 6.1CNA v3.1 | 0.2% | 2025-02-07 | |
| CVE-2025-25091 | NextGen Cooliris Gallery WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-02-07 | |
| CVE-2025-25088 | WP Keyword Monitor WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2025-02-07 | |
| CVE-2025-25085 | WP SimpleWeather WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-02-07 | |
| CVE-2025-25082 | flexIDX Home Search WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-02-07 | |
| CVE-2025-25081 | Embed RSS WordPress plugin arbitrary shortcode execution vulnerability | 4.8CNA v3.1 | 0.2% | 2025-02-07 | |
| CVE-2025-25080 | Kona Gallery Block WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-02-07 | |
| CVE-2025-25079 | Simple Select All Text Box WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-02-07 | |
| CVE-2025-25078 | Google Earth Embed WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-02-07 | |
| CVE-2025-25077 | Easy Chart Builder for WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-02-07 | |
| CVE-2025-25076 | Graceful Email Obfuscation WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-02-07 | |
| CVE-2025-25075 | Show notice or message on admin area WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2025-02-07 | |
| CVE-2025-25074 | WP Social Stream WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2025-02-07 | |
| CVE-2025-25073 | Easy WP Tiles WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2025-02-07 | |
| CVE-2025-25072 | WP Admin Custom Page WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2025-02-07 | |
| CVE-2025-25071 | Vignette Ads WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.1% | 2025-02-07 | |
| CVE-2025-25069 | Apache Kvrocks server-side request forgery | 6.5CISA ADP v3.1 | 0.8% | 2025-02-07 | Fix |
| CVE-2025-24980 | Pimcore Admin Classic Bundle password reset vulnerability | 6.9CNA v4.0 | 0.5% | 2025-02-07 | Fix |
| CVE-2025-24366 | Insufficient sanitization of user provided rsync command in SFTPGo | 7.5CNA v3.1 | 0.7% | 2025-02-07 | Fix |
| CVE-2025-24028 | Cross-site scripting (XSS) in Rich Text Editor allows arbitrary code execution in Joplin | 7.8CNA v3.1 | 0.5% | 2025-02-07 | Fix |
| CVE-2025-23085 | Node.js Node memory leak | 5.3CNA v3.0 | 1.4% | 2025-02-07 | Fix |
| CVE-2025-22880 | Heap-based buffer overflow in CNCSoft-G2 | 7.8CNA v3.1 | 0.2% | 2025-02-07 | Fix |
| CVE-2025-22402 | Dell Update Manager Plugin cross-site scripting | 2.6CNA v3.1 | 0.2% | 2025-02-07 | Fix |
| CVE-2025-1114 | newbee-mall Add Category page save cross-site scripting | 5.4v3.1 | 0.3% | 2025-02-07 | |
| CVE-2025-1113 | taisan tarzan-cms Add theme admin#themes upload deserialization | 9.8v3.1 | 0.5% | 2025-02-07 | |
| CVE-2025-1108 | Insufficient data authenticity vulnerability in Janto | 8.6CNA v3.1 | 0.2% | 2025-02-07 | Fix |
| CVE-2025-1107 | Unverified password change vulnerability in Janto | 9.9CNA v3.1 | 0.4% | 2025-02-07 | Fix |
| CVE-2025-1106 | CmsEasy database_admin.php restore_action path traversal | 6.5v3.1 | 1.0% | 2025-02-07 | |
| CVE-2025-1105 | SiberianCMS HTTP GET request flat cross-site scripting | 6.1v3.1 | 0.4% | 2025-02-07 | |
| CVE-2025-1104 | D-Link DHP-W310AV authentication spoofing | 9.8v3.1 | 3.0% | 2025-02-07 | |
| CVE-2025-1103 | D-Link DIR-823X HTTP POST request set_wifi_blacklists null pointer dereference | 6.5NVD v3.1 | 14.1% | 2025-02-07 | |
| CVE-2025-1086 | Safetytest Cloud-Master Server static path traversal | 6.9CNA v4.0 | 0.8% | 2025-02-07 | |
| CVE-2025-1085 | Animati PACS login cross-site scripting | 5.3CNA v4.0 | 0.4% | 2025-02-07 | |
| CVE-2025-1084 | Mindskip xzs-mysql 学之思开源考试系统 cross-site request forgery | 5.3CNA v4.0 | 0.3% | 2025-02-07 | |
| CVE-2025-1077 | Remote code execution vulnerability in IBL Software Engineering Visual Weather and derived products | 9.5CNA v4.0 | 0.9% | 2025-02-07 | |
| CVE-2025-1072 | Allocation of resources without limits or throttling in GitLab | 6.5CNA v3.1 | 0.5% | 2025-02-07 | Fix |
| CVE-2025-1061 | Nextend Social Login Pro WordPress plugin authentication bypass via Apple OAuth provider | 9.8CNA v3.1 | 0.7% | 2025-02-07 | Fix |
| CVE-2025-0675 | Elber Communications Equipment hidden functionality | 8.7CNA v4.0 | 0.5% | 2025-02-07 | |
| CVE-2025-0674 | Elber Communications Equipment authentication bypass using an alternate path or channel | 9.3CNA v4.0 | 3.7% | 2025-02-07 | Nuclei |
| CVE-2025-0304 | OpenHarmony liteos_a has an use-after-free | 8.8CNA v3.1 | 0.2% | 2025-02-07 | Fix |
| CVE-2025-0303 | OpenHarmony liteos_a has a buffer overflow | 8.8CNA v3.1 | 0.2% | 2025-02-07 | |
| CVE-2025-0302 | OpenHarmony liteos_a has an integer overflow read | 5.5CNA v3.1 | 0.2% | 2025-02-07 | |
| CVE-2025-24981 | Parsed HTML anchor links in Markdown provided to parseMarkdown can result in XSS in @nuxtjs/mdc | 9.3CNA v3.1 | 0.7% | 2025-02-06 | Fix |
| CVE-2025-24845 | Humming Heads Defense Platform Home Edition command improper neutralization | 5.5v3.1 | 0.2% | 2025-02-06 | Fix |
| CVE-2025-24787 | Parameter injection in DB connection URIs leading to local file inclusion in WhoDB | 8.6CNA v3.1 | 0.6% | 2025-02-06 | Fix |
| CVE-2025-24786 | Path traversal opening Sqlite3 database in WhoDB | 10.0CNA v3.1 | 2.7% | 2025-02-06 | NucleiFix |
| CVE-2025-24483 | Humming Heads Defense Platform Home Edition null pointer dereference | 5.5v3.1 | 0.2% | 2025-02-06 | Fix |
| CVE-2025-23236 | Humming Heads Defense Platform Home Edition buffer overflow | 8.8CNA v3.0 | 0.2% | 2025-02-06 | Fix |
| CVE-2025-23217 | mitmproxy Mitmweb API authentication bypass using Proxy Server | 8.2CNA v4.0 | 0.8% | 2025-02-06 | Fix |
| CVE-2025-23094 | Mitel OpenScape 4000 and OpenScape 4000 Manager Platform component command injection | 7.3CISA ADP v3.1 | 1.2% | 2025-02-06 | Fix |
| CVE-2025-23093 | Mitel OpenScape 4000 and OpenScape 4000 Manager Platform component privilege escalation | 8.8CISA ADP v3.1 | 0.6% | 2025-02-06 | Fix |
| CVE-2025-22992 | Openenergymonitor Emoncms /feed/insert.json endpoint of the SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2025-02-06 | |
| CVE-2025-22936 | Smartcom Bulgaria AD Ralink CPE/WiFi router WiFi password generation algorithm weak credentials | 5.7CISA ADP v3.1 | 0.2% | 2025-02-06 | |
| CVE-2025-22894 | Humming Heads Defense Platform Windows messaging channel vulnerability | 8.8v3.1 | 0.1% | 2025-02-06 | Fix |
| CVE-2025-22890 | Humming Heads Defense Platform Home Edition execution with unnecessary privileges | 8.8v3.1 | 0.2% | 2025-02-06 | Fix |
| CVE-2025-22867 | Arbitrary code execution during build on darwin in cmd/go | 7.5CISA ADP v3.1 | 0.6% | 2025-02-06 | Fix |
| CVE-2025-22866 | Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec | 4.0CISA ADP v3.1 | 0.3% | 2025-02-06 | Fix |
| CVE-2025-21408 | Microsoft Edge (Chromium-based) remote code execution | 8.8CNA v3.1 | 1.3% | 2025-02-06 | Fix |
| CVE-2025-21404 | Microsoft Edge (Chromium-based) spoofing | 4.3CNA v3.1 | 1.1% | 2025-02-06 | Fix |
| CVE-2025-21342 | Microsoft Edge (Chromium-based) remote code execution | 8.8CNA v3.1 | 1.3% | 2025-02-06 | Fix |
| CVE-2025-21283 | Microsoft Edge (Chromium-based) remote code execution | 6.5CNA v3.1 | 1.5% | 2025-02-06 | Fix |
| CVE-2025-21279 | Microsoft Edge (Chromium-based) remote code execution | 6.5CNA v3.1 | 1.6% | 2025-02-06 | Fix |
| CVE-2025-21267 | Microsoft Edge (Chromium-based) spoofing | 4.4CNA v3.1 | 0.6% | 2025-02-06 | Fix |
| CVE-2025-21253 | Microsoft Edge for IOS and Android spoofing | 5.3CNA v3.1 | 1.2% | 2025-02-06 | Fix |
| CVE-2025-21177 | Microsoft Dynamics 365 Sales elevation of privilege | 8.7CNA v3.1 | 1.1% | 2025-02-06 | Fix |
| CVE-2025-20094 | Unprotected Windows messaging channel ('Shatter') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker sends a specially crafted message to the specific process of the Windows system where the product is running, arbitrary code may be executed with SYSTEM privilege. | 8.8CNA v3.0 | 0.2% | 2025-02-06 | Fix |
| CVE-2025-1083 | Mindskip xzs-mysql 学之思开源考试系统 CORS cross-domain policy | 6.8v3.1 | 0.3% | 2025-02-06 | |
| CVE-2025-1082 | Mindskip xzs-mysql 学之思开源考试系统 Exam Edit edit cross-site scripting | 5.4v3.1 | 0.4% | 2025-02-06 | |
| CVE-2025-1081 | Bharti Airtel Xstream Fiber WiFi password weak credentials | 2.3CNA v4.0 | 0.3% | 2025-02-06 | |
| CVE-2025-1078 | AppHouseKitchen AlDente Charge Limiter XPC service helper improper authorization | 4.8CNA v4.0 | 0.2% | 2025-02-06 | |
| CVE-2025-1076 | Stored cross-site scripting vulnerability in Holded | 4.8CNA v3.1 | 0.2% | 2025-02-06 | |
| CVE-2025-1074 | Webkul QloApps URL mylogout cross-site request forgery | 5.3CNA v4.0 | 0.3% | 2025-02-06 | |
| CVE-2025-1066 | OpenPLC unrestricted file upload | 9.8CISA ADP v3.1 | 0.5% | 2025-02-06 | |
| CVE-2025-1004 | Certain HP LaserJet Pro Printers potential denial of service | 6.9CNA v4.0 | 0.4% | 2025-02-06 | Fix |
| CVE-2025-0994 | Trimble Cityworks deserialization | 8.8NVD v3.1 | 31.1% | 2025-02-06 | KEVFix |
| CVE-2025-0982 | Sandbox escape in Google Cloud Application Integration's JavaScript Task (Rhino Engine) | 9.4CNA v4.0 | 0.3% | 2025-02-06 | Fix |
| CVE-2025-0859 | Post and Page Builder by BoldGrid WordPress plugin path traversal | 6.5CNA v3.1 | 0.7% | 2025-02-06 | Fix |
| CVE-2025-0799 | IBM App Connect Enterprise arbitrary file write | 6.5CNA v3.1 | 0.5% | 2025-02-06 | Fix |
| CVE-2025-0522 | LikeBot Decentralized like-system WordPress plugin Admin+ stored XSS via CSRF | 4.7CISA ADP v3.1 | 0.2% | 2025-02-06 | |
| CVE-2025-0158 | IBM EntireX denial of service | 5.5CNA v3.1 | 0.1% | 2025-02-06 | Fix |
| CVE-2025-25246 | NETGEAR XR1000 code injection | 8.1CNA v3.1 | 0.7% | 2025-02-05 | Fix |
| CVE-2025-24805 | Local privilege escalation in MobSF | 8.5CNA v4.0 | 0.4% | 2025-02-05 | Fix |
| CVE-2025-24804 | Partial denial of service (DoS) in MobSF | 4.8CNA v4.0 | 0.5% | 2025-02-05 | Fix |
| CVE-2025-24803 | Stored cross-site scripting (XSS) in MobSF | 8.4CNA v4.0 | 0.4% | 2025-02-05 | Fix |
| CVE-2025-24497 | F5 BIG-IP Policy Enforcement Manager URL categorization out-of-bounds read | 8.7CNA v4.0 | 0.4% | 2025-02-05 | Fix |
| CVE-2025-24372 | XSS vector in user uploaded images in group/org and user profiles in ckan | 7.3CNA v3.1 | 0.5% | 2025-02-05 | Fix |
| CVE-2025-24326 | BIG-IP Advanced WAF/ASM BADoS vulnerability | 8.9CNA v4.0 | 0.4% | 2025-02-05 | Fix |
| CVE-2025-24320 | F5 BIG-IP undisclosed page of the stored cross-site scripting | 5.1CNA v4.0 | 0.4% | 2025-02-05 | Fix |
| CVE-2025-24319 | F5 BIG-IP Next Central Manager API denial of service | 7.1CNA v4.0 | 0.4% | 2025-02-05 | Fix |
| CVE-2025-24312 | F5 BIG-IP Advanced Firewall Manager protocol inspection profile resource exhaustion | 8.7CNA v4.0 | 0.4% | 2025-02-05 | Fix |
| CVE-2025-23419 | F5 NGINX Open Source TLS Session Resumption vulnerability | 5.3CNA v4.0 | 2.8% | 2025-02-05 | Fix |
| CVE-2025-23415 | BIG-IP APM Endpoint Inspection vulnerability | 2.3CNA v4.0 | 0.1% | 2025-02-05 | Fix |
| CVE-2025-23413 | F5 BIG-IP Next Central Manager pgaudit log files information disclosure | 6.7CNA v4.0 | 0.2% | 2025-02-05 | Fix |
| CVE-2025-23412 | F5 BIG-IP Access Policy Manager vulnerability | 8.7CNA v4.0 | 0.4% | 2025-02-05 | Fix |
| CVE-2025-23239 | F5 BIG-IP iControl REST endpoint command injection | 8.5CNA v4.0 | 0.8% | 2025-02-05 | Fix |
| CVE-2025-23114 | Veeam Backup for AWS improper certificate validation | 9.0CNA v3.0 | 0.6% | 2025-02-05 | |
| CVE-2025-22891 | F5 BIG-IP PEM Diameter Endpoint listener vulnerability | 8.7CNA v4.0 | 0.4% | 2025-02-05 | Fix |
| CVE-2025-22846 | F5 BIG-IP SIP Session and Router ALG profile vulnerability | 8.7CNA v4.0 | 0.4% | 2025-02-05 | Fix |
| CVE-2025-21117 | Dell Avamar operation on a released resource | 6.6CNA v3.1 | 0.2% | 2025-02-05 | Fix |
| CVE-2025-21091 | F5 BIG-IP SNMP memory leak | 8.7CNA v4.0 | 0.5% | 2025-02-05 | Fix |
| CVE-2025-21087 | F5 BIG-IP TMM resource exhaustion | 8.9CNA v4.0 | 0.4% | 2025-02-05 | Fix |
| CVE-2025-20207 | Cisco Secure Email and Web Appliance SNMP polling information disclosure | 4.3CNA v3.1 | 0.3% | 2025-02-05 | Fix |
| CVE-2025-20205 | Cisco Identity Services Engine Software cross-site scripting | 4.8CNA v3.1 | 0.3% | 2025-02-05 | Fix |
| CVE-2025-20204 | Cisco Identity Services Engine Software cross-site scripting | 4.8CNA v3.1 | 0.3% | 2025-02-05 | Fix |
| CVE-2025-20185 | Cisco AsyncOS remote access password generation privilege escalation | 3.4CNA v3.1 | 0.2% | 2025-02-05 | Fix |
| CVE-2025-20184 | Cisco Secure Email and Web Manager and Secure Web Appliance command injection | 6.5CNA v3.1 | 0.9% | 2025-02-05 | Fix |
| CVE-2025-20183 | Cisco Secure Web Appliance Range Request Bypass vulnerability | 5.8CNA v3.1 | 0.4% | 2025-02-05 | Fix |
| CVE-2025-20180 | Cisco Secure Email and Web Manager and Secure Email Gateway cross-site scripting | 4.8CNA v3.1 | 0.3% | 2025-02-05 | Fix |
| CVE-2025-20179 | Cisco Expressway Series cross-site scripting | 6.1CNA v3.1 | 0.4% | 2025-02-05 | Fix |
| CVE-2025-20176 | Cisco IOS uncaught exception | 7.7CNA v3.1 | 0.8% | 2025-02-05 | |
| CVE-2025-20175 | Cisco IOS buffer access with incorrect length | 7.7CNA v3.1 | 0.8% | 2025-02-05 | |
| CVE-2025-20174 | Cisco IOS buffer access with incorrect length | 7.7CNA v3.1 | 0.8% | 2025-02-05 | |
| CVE-2025-20173 | Cisco IOS uncaught exception | 7.7CNA v3.1 | 0.8% | 2025-02-05 | |
| CVE-2025-20172 | Cisco IOS uncaught exception | 7.7CNA v3.1 | 0.8% | 2025-02-05 | |
| CVE-2025-20171 | Cisco IOS uncaught exception | 7.7CNA v3.1 | 0.8% | 2025-02-05 | |
| CVE-2025-20170 | Cisco IOS buffer access with incorrect length | 7.7CNA v3.1 | 0.8% | 2025-02-05 | |
| CVE-2025-20169 | Cisco IOS buffer access with incorrect length | 7.7CNA v3.1 | 0.8% | 2025-02-05 | |
| CVE-2025-20125 | Cisco Identity Services Engine insufficient authorization Bypass | 9.1CNA v3.1 | 16.4% | 2025-02-05 | Exploit codeFix |
| CVE-2025-20124 | Cisco Identity Services Engine Java deserialization | 9.9CNA v3.1 | 18.5% | 2025-02-05 | Exploit codeFix |
| CVE-2025-20058 | F5 BIG-IP message routing profile resource exhaustion | 8.9CNA v4.0 | 0.4% | 2025-02-05 | Fix |
| CVE-2025-20045 | F5 BIG-IP SIP ALG profile null pointer dereference | 8.7CNA v4.0 | 0.4% | 2025-02-05 | Fix |
| CVE-2025-20029 | BIG-IP iControl REST and tmsh vulnerability | 8.7CNA v4.0 | 7.2% | 2025-02-05 | Exploit codeFix |
| CVE-2025-1028 | Contact Manager WordPress plugin unauthenticated arbitrary double file Extension upload | 8.1CNA v3.1 | 0.8% | 2025-02-05 | Fix |
| CVE-2025-1026 | Browsershot local file inclusion | 7.7CNA v4.0 | 0.5% | 2025-02-05 | Fix |
| CVE-2025-1025 | Cockpit arbitrary file upload | 8.7CNA v4.0 | 18.9% | 2025-02-05 | NucleiEmerging ThreatsFix |
| CVE-2025-1022 | Browsershot path traversal | 8.8CNA v4.0 | 0.5% | 2025-02-05 | Fix |
| CVE-2025-0858 | Certain Poly Devices path traversal vulnerability arbitrary File Access by Unauthorized User | 5.8CNA v4.0 | 0.3% | 2025-02-05 | |
| CVE-2025-0725 | curl gzip integer overflow | 7.3CISA ADP v3.1 | 1.8% | 2025-02-05 | Fix |
| CVE-2025-0665 | curl eventfd double close | 7.0CISA ADP v3.1 | 1.3% | 2025-02-05 | Fix |
| CVE-2025-0413 | Parallels Desktop Technical Data Reporter link following local privilege escalation | 7.8CNA v3.0 | 0.4% | 2025-02-05 | Fix |
| CVE-2025-0167 | curl netrc and default credential leak | 3.4CISA ADP v3.1 | 0.7% | 2025-02-05 | Fix |
| CVE-2025-25039 | HPE Aruba Networking ClearPass Policy Manager web-based management interface OS command injection | 4.7CNA v3.1 | 0.6% | 2025-02-04 | Fix |
| CVE-2025-24982 | SWIT Activity Log WinterLock cross-site request forgery | 4.3CNA v3.0 | 0.2% | 2025-02-04 | Fix |
| CVE-2025-24971 | DumbWareio DumbDrop OS command injection endpoint /upload/init parameter filename (RCE) in DumpDrop | 9.5CNA v4.0 | 3.1% | 2025-02-04 | Exploit codeFix |
| CVE-2025-24968 | Business Logic and Unrestricted Project Deletion lead to Take over the System in reNgine | 8.8CNA v3.1 | 0.6% | 2025-02-04 | |
| CVE-2025-24967 | Stored XSS on Admin Panel when Deleting a User in reNgine | 7.4CNA v4.0 | 0.3% | 2025-02-04 | |
| CVE-2025-24966 | HTML injection in reNgine | 5.3CNA v4.0 | 0.3% | 2025-02-04 | |
| CVE-2025-24964 | Remote code execution when accessing a malicious website while Vitest API server is listening | 9.7CNA v3.1 | 0.7% | 2025-02-04 | Fix |
| CVE-2025-24963 | Browser mode serves arbitrary files in vitest | 5.9CNA v3.1 | 2.4% | 2025-02-04 | NucleiFix |
| CVE-2025-24860 | Apache Cassandra incorrect authorization | 5.4CISA ADP v3.1 | 1.1% | 2025-02-04 | Fix |
| CVE-2025-24677 | Post/Page Copying Tool WordPress plugin wpspin code injection | 9.9CNA v3.1 | 0.5% | 2025-02-04 | Fix |
| CVE-2025-24648 | Admin and Site Enhancements (ASE) WordPress plugin privilege escalation | 7.5CNA v3.1 | 0.4% | 2025-02-04 | Fix |
| CVE-2025-24602 | WP24 Domain Check WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-04 | Fix |
| CVE-2025-24599 | Newsletters WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-04 | Fix |
| CVE-2025-24598 | WP Mailster WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2025-02-04 | Fix |
| CVE-2025-24373 | Unrestricted Access to PDF Documents via URL Manipulation in woocommerce-pdf-invoices-packing-slips | 6.3CNA v4.0 | 0.5% | 2025-02-04 | Fix |
| CVE-2025-23645 | Find Content IDs WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-04 | |
| CVE-2025-23060 | Sensitive data exposure vulnerability in HPE Aruba Networking ClearPass Policy Manager (CPPM) | 6.6CNA v3.1 | 0.2% | 2025-02-04 | Fix |
| CVE-2025-23059 | Sensitive information disclosure in HPE Aruba Networking ClearPass Policy Manager | 6.8CNA v3.1 | 0.6% | 2025-02-04 | Fix |
| CVE-2025-23058 | Aruba ClearPass Policy Manager web-based management interface privilege escalation | 8.8CNA v3.1 | 0.7% | 2025-02-04 | Fix |
| CVE-2025-23023 | Anonymous cache poisoning via request headers in Discourse | 8.2CNA v3.1 | 0.3% | 2025-02-04 | Fix |
| CVE-2025-23015 | Apache Cassandra unsafe privilege definition | 8.8CISA ADP v3.1 | 1.0% | 2025-02-04 | Fix |
| CVE-2025-22794 | World Cup Predictor WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-04 | |
| CVE-2025-22730 | Ksher WordPress plugin broken access control | 6.5CNA v3.1 | 0.3% | 2025-02-04 | Fix |
| CVE-2025-22700 | Traveler Code WordPress plugin Subscriber+ arbitrary SQL execution vulnerability | 8.5CNA v3.1 | 0.4% | 2025-02-04 | Fix |
| CVE-2025-22699 | Traveler Code WordPress plugin unauthenticated arbitrary SQL execution vulnerability | 9.0CNA v3.1 | 0.4% | 2025-02-04 | Fix |
| CVE-2025-22697 | Responsive Blocks WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2025-02-04 | Fix |
| CVE-2025-22696 | Document Block WordPress plugin WPDeveloper missing authorization | 5.4CNA v3.1 | 0.3% | 2025-02-04 | |
| CVE-2025-22675 | Alert Box Block WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-02-04 | Fix |
| CVE-2025-22674 | Product Blocks for WooCommerce WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-02-04 | Fix |
| CVE-2025-22664 | Survey Maker WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.2% | 2025-02-04 | Fix |
| CVE-2025-22662 | SendPulse Email Marketing Newsletter WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-02-04 | Fix |
| CVE-2025-22653 | Music Press Pro WordPress plugin stored cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-02-04 | |
| CVE-2025-22643 | OnePress WordPress theme broken access control | 4.3CNA v3.1 | 0.3% | 2025-02-04 | Fix |
| CVE-2025-22642 | Dynamic Conditions WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-02-04 | Fix |
| CVE-2025-22641 | FM Notification Bar WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.2% | 2025-02-04 | |
| CVE-2025-22602 | Stored DOM-based XSS (without CSP) via video placeholders in Discourse | 6.5CNA v3.1 | 0.4% | 2025-02-04 | Fix |
| CVE-2025-22601 | Client Side path traversal using activate account route in Discourse | 3.1CNA v3.1 | 0.4% | 2025-02-04 | |
| CVE-2025-22475 | Dell PowerProtect DD tampering | 3.7CNA v3.1 | 0.2% | 2025-02-04 | Fix |
| CVE-2025-22206 | Extension JoomSky.com SQL injection in JS jobs component for Joomla | 4.7CISA ADP v3.1 | 9.5% | 2025-02-04 | Emerging Threats |
| CVE-2025-22205 | Extension Admiror-design-studio.com path traversal in the Admiror Gallery component for Joomla | 7.5CISA ADP v3.1 | 0.5% | 2025-02-04 | |
| CVE-2025-22204 | Extension Regularlabs.com remote code execution vulnerability in the Sourcerer extensions for Joomla | 9.8CISA ADP v3.1 | 0.8% | 2025-02-04 | |
| CVE-2025-20907 | Samsung Mobile Devices improper privilege management | 6.0CNA v3.1 | 0.1% | 2025-02-04 | Fix |
| CVE-2025-20906 | Samsung Mobile Devices settings improper export of Android application components | 5.5CNA v3.1 | 0.1% | 2025-02-04 | |
| CVE-2025-20905 | Samsung Mobile Devices mPOS TUI trustlet out-of-bounds read | 6.3CNA v3.1 | 0.2% | 2025-02-04 | Fix |
| CVE-2025-20904 | Samsung Mobile Devices mPOS TUI trustlet out-of-bounds write | 6.3CNA v3.1 | 0.2% | 2025-02-04 | Fix |
| CVE-2025-20902 | Samsung Mobile Media Controller improper access control | 5.1CNA v3.1 | 0.1% | 2025-02-04 | |
| CVE-2025-20901 | Samsung Mobile Blockchain Keystore out-of-bounds read | 4.4CNA v3.1 | 0.2% | 2025-02-04 | Fix |
| CVE-2025-20900 | Samsung Mobile Blockchain Keystore out-of-bounds write | 6.3CNA v3.1 | 0.1% | 2025-02-04 | Fix |
| CVE-2025-20899 | Samsung Mobile PushNotification improper access control | 4.0CNA v3.1 | 0.1% | 2025-02-04 | |
| CVE-2025-20898 | Samsung Mobile Samsung Members improper input validation | 4.6CNA v3.1 | 0.2% | 2025-02-04 | Fix |
| CVE-2025-20897 | Samsung Mobile Secure Folder improper access control | 6.8CNA v3.1 | 0.2% | 2025-02-04 | |
| CVE-2025-20896 | Samsung Mobile EasySetup implicit intent for sensitive communication | 4.0CNA v3.1 | 0.1% | 2025-02-04 | Fix |
| CVE-2025-20895 | Samsung Mobile Galaxy Store authentication bypass | 3.2CNA v3.1 | 0.2% | 2025-02-04 | Fix |
| CVE-2025-20894 | Samsung Mobile Samsung Email improper access control | 4.6CNA v3.1 | 0.2% | 2025-02-04 | Fix |
| CVE-2025-20893 | Samsung Mobile Devices NotificationManager improper access control | 5.1CNA v3.1 | 0.1% | 2025-02-04 | Fix |
| CVE-2025-20892 | Samsung Mobile Devices bootloader protection mechanism failure | 5.9CNA v3.1 | 0.2% | 2025-02-04 | Fix |
| CVE-2025-20891 | Samsung Mobile Devices out-of-bounds read | 5.3CNA v3.1 | 0.1% | 2025-02-04 | Fix |
| CVE-2025-20890 | Samsung Mobile Devices decoding frame buffer in libsthmbc.so out-of-bounds write | 7.0CNA v3.1 | 0.2% | 2025-02-04 | Fix |
| CVE-2025-20889 | Samsung Mobile Devices out-of-bounds read | 5.3CNA v3.1 | 0.1% | 2025-02-04 | Fix |
| CVE-2025-20888 | Samsung Mobile Devices out-of-bounds write | 7.0CNA v3.1 | 0.2% | 2025-02-04 | Fix |
| CVE-2025-20887 | Samsung Mobile Devices out-of-bounds read | 5.3CNA v3.1 | 0.1% | 2025-02-04 | Fix |
| CVE-2025-20886 | Samsung Mobile Devices insecure storage of sensitive information | 4.1CNA v3.1 | 0.1% | 2025-02-04 | Fix |
| CVE-2025-20885 | Samsung Mobile Devices softsim trustlet out-of-bounds write | 6.4CNA v3.1 | 0.1% | 2025-02-04 | Fix |
| CVE-2025-20884 | Samsung Mobile Devices improper access control | 4.6CNA v3.1 | 0.2% | 2025-02-04 | Fix |
| CVE-2025-20883 | Samsung Mobile Devices SoundPicker improper access control | 4.6CNA v3.1 | 0.2% | 2025-02-04 | Fix |
| CVE-2025-20882 | Samsung Mobile Devices out-of-bounds write | 7.0CNA v3.1 | 0.2% | 2025-02-04 | Fix |
| CVE-2025-20881 | Samsung Mobile Devices out-of-bounds write | 7.0CNA v3.1 | 0.2% | 2025-02-04 | Fix |
| CVE-2025-1020 | Mozilla memory safety bugs fixed in Firefox 135 and Thunderbird 135 | 9.8NVD v3.1 | 0.5% | 2025-02-04 | Fix |
| CVE-2025-1019 | Mozilla Firefox fullscreen notification not properly displayed | 4.3NVD v3.1 | 0.4% | 2025-02-04 | Fix |
| CVE-2025-1018 | Mozilla Firefox fullscreen notification is not displayed when fullscreen is re-requested | 5.3NVD v3.1 | 0.4% | 2025-02-04 | Fix |
| CVE-2025-1017 | Mozilla memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR, and Thunderbird | 9.8NVD v3.1 | 0.6% | 2025-02-04 | Fix |
| CVE-2025-1016 | Mozilla Firefox memory safety bugs | 9.8NVD v3.1 | 0.6% | 2025-02-04 | Fix |
| CVE-2025-1015 | Mozilla Thunderbird unsanitized address book fields | 5.4v3.1 | 1.4% | 2025-02-04 | Exploit codeFix |
| CVE-2025-1014 | Mozilla Firefox certificate length was not properly checked | 8.8NVD v3.1 | 0.4% | 2025-02-04 | Fix |
| CVE-2025-1013 | Mozilla Firefox potential opening of private browsing tabs in normal browsing windows | 6.5CISA ADP v3.1 | 0.3% | 2025-02-04 | Fix |
| CVE-2025-1012 | Mozilla Firefox use-after-free during concurrent delazification | 7.5NVD v3.1 | 0.5% | 2025-02-04 | Fix |
| CVE-2025-1011 | Mozilla Firefox A bug in WebAssembly code generation could result in a crash | 8.8NVD v3.1 | 0.6% | 2025-02-04 | Fix |
| CVE-2025-1010 | Mozilla Firefox use-after-free in Custom Highlight | 8.8NVD v3.1 | 0.5% | 2025-02-04 | Fix |
| CVE-2025-1009 | Mozilla Firefox use-after-free in XSLT | 9.8NVD v3.1 | 1.2% | 2025-02-04 | Fix |
| CVE-2025-1003 | HP Anyware Agent for Linux potential authentication bypass | 8.5CNA v4.0 | 0.2% | 2025-02-04 | |
| CVE-2025-0960 | AutomationDirect C-more EA9 HMI Classic buffer overflow | 9.3CNA v4.0 | 0.9% | 2025-02-04 | Fix |
| CVE-2025-0890 | Zyxel VMG4325-B10A firmware improper authentication | 9.8CNA v3.1 | 13.5% | 2025-02-04 | Reported exploitedEmerging ThreatsExploit codeKCV |
| CVE-2025-0825 | CRLF injection in Cpp-httplib | 5.3NVD v3.1 | 0.4% | 2025-02-04 | Fix |
| CVE-2025-0630 | Western Telematic Inc NPS Series, DSM Series, CPM Series external control of file name or path | 6.0CNA v4.0 | 0.4% | 2025-02-04 | Fix |
| CVE-2025-0510 | Mozilla Thunderbird address of e-mail sender can be spoofed by malicious email | 6.5v3.1 | 0.2% | 2025-02-04 | Fix |
| CVE-2025-0509 | Sparkle Signing Checks Bypass | 6.8NVD v3.1 | 0.9% | 2025-02-04 | Fix |
| CVE-2025-0466 | Sensei LMS WordPress plugin unauthenticated sensei_email/sensei_message disclosure | 5.3CISA ADP v3.1 | 0.4% | 2025-02-04 | Fix |
| CVE-2025-0451 | Google Chrome Extensions API inappropriate implementation | 6.3CISA ADP v3.1 | 0.4% | 2025-02-04 | Fix |
| CVE-2025-0445 | Google Chrome V8 use-after-free | 5.4CISA ADP v3.1 | 0.4% | 2025-02-04 | Fix |
| CVE-2025-0444 | Google Chrome Skia use-after-free | 6.3CISA ADP v3.1 | 0.5% | 2025-02-04 | Fix |
| CVE-2025-0368 | Banner Garden Plugin for WordPress reflected XSS | 6.1CISA ADP v3.1 | 0.3% | 2025-02-04 | |
| CVE-2025-0364 | BigAntSoft BigAnt Server Account Registration Bypass to file upload RCE | 9.8CNA v3.1 | 1.9% | 2025-02-04 | Exploit code |
| CVE-2025-25181 | Advantive VeraCore SQL injection | 7.5v3.1 | 55.5% | 2025-02-03 | KEVEmerging ThreatsFix |
| CVE-2025-25066 | ntop nDPI stack-based buffer overflow | 8.4v3.1 | 0.2% | 2025-02-03 | |
| CVE-2025-25065 | Synacor Zimbra Collaboration Suite server-side request forgery | 5.3CISA ADP v3.1 | 0.6% | 2025-02-03 | Fix |
| CVE-2025-25064 | Synacor Zimbra Collaboration Suite SQL injection | 8.8CISA ADP v3.1 | 36.7% | 2025-02-03 | Fix |
| CVE-2025-25063 | backdropcms Backdrop An cross-site scripting | 4.4CNA v3.1 | 0.2% | 2025-02-03 | Fix |
| CVE-2025-25062 | backdropcms Backdrop An cross-site scripting | 4.4CNA v3.1 | 1.7% | 2025-02-03 | NucleiExploit codeFix |
| CVE-2025-24962 | Command injection in reNgine | 8.7CNA v4.0 | 0.7% | 2025-02-03 | |
| CVE-2025-24961 | Insecure path traversal in filesystem and filesystem-nio2 storage backends in org.gaul S3Proxy | 6.0CNA v4.0 | 0.5% | 2025-02-03 | Fix |
| CVE-2025-24960 | Missing Input validation for filename in backups endpoint in Jellystat | 8.7CNA v3.1 | 0.5% | 2025-02-03 | Fix |
| CVE-2025-24959 | Google Environment variable injection for dotenv API in zx | 1.0CNA v4.0 | 0.2% | 2025-02-03 | Fix |
| CVE-2025-24958 | SQL injection endpoint salvar_tag.php parameter id_tag in WeGIA | 9.4CNA v4.0 | 0.6% | 2025-02-03 | Fix |
| CVE-2025-24957 | SQL injection endpoint get_detalhes_socio.php parameter id_socio in WeGIA | 10.0CNA v4.0 | 0.6% | 2025-02-03 | Fix |
| CVE-2025-24906 | SQL injection endpoint get_detalhes_cobranca.php parameter codigo in WeGIA | 10.0CNA v4.0 | 0.6% | 2025-02-03 | Fix |
| CVE-2025-24905 | SQL injection endpoint get_codigobarras_cobranca.php parameter codigo in WeGIA | 10.0CNA v4.0 | 0.5% | 2025-02-03 | Fix |
| CVE-2025-24902 | SQL injection endpoint salvar_cargo.php parameter id_cargo in WeGIA | 9.4CNA v4.0 | 0.6% | 2025-02-03 | Fix |
| CVE-2025-24901 | SQL injection endpoint deletar_permissao.php parameter c, a, r in WeGIA | 9.4CNA v4.0 | 0.6% | 2025-02-03 | Fix |
| CVE-2025-24899 | Disclosure of Sensitive User Information via API in reNgine | 7.1CNA v4.0 | 0.5% | 2025-02-03 | Fix |
| CVE-2025-24898 | sfackler rust-openssl rust openssl SSL::select_next_proto use-after-free | 6.3CNA v4.0 | 0.7% | 2025-02-03 | Fix |
| CVE-2025-24781 | WPJobBoard WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2025-24707 | gt3themes Photo Gallery reflected cross-site scripting | 7.1CNA v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2025-24697 | Image Gallery Responsive Photo Gallery WordPress plugin broken access control | 6.5CNA v3.1 | 0.4% | 2025-02-03 | Fix |
| CVE-2025-24684 | Media Downloader WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2025-24676 | Custom WP Store Locator WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2025-24661 | Taxi Booking Manager for WooCommerce WordPress plugin PHP object injection | 8.8CNA v3.1 | 0.6% | 2025-02-03 | Fix |
| CVE-2025-24660 | Simple Membership Custom Messages WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2025-24656 | Realtyna Provisioning WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2025-24646 | XML for Avito WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2025-24643 | WPGuppy WordPress plugin broken authentication | 6.5CNA v3.1 | 0.4% | 2025-02-03 | Fix |
| CVE-2025-24642 | Setup Default Featured Image WordPress plugin broken access control | 6.5CNA v3.1 | 0.4% | 2025-02-03 | Fix |
| CVE-2025-24639 | Korea for WooCommerce WordPress plugin sensitive data exposure | 6.5CNA v3.1 | 0.5% | 2025-02-03 | Fix |
| CVE-2025-24631 | BP Email Assign Templates WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2025-24630 | Sikshya LMS WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2025-24629 | Import Excel to Gravity Forms WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2025-24620 | AIO Shortcodes WordPress plugin stored cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2025-24605 | WOLF WordPress plugin path traversal | 7.2v3.1 | 0.7% | 2025-02-03 | Fix |
| CVE-2025-24576 | Landing Page Cat WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2025-24574 | PeproDev WooCommerce Receipt Uploader WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2025-24569 | PDF Generator Addon for Elementor Page Builder WordPress plugin arbitrary file read | 7.5CNA v3.1 | 0.6% | 2025-02-03 | Fix |
| CVE-2025-24559 | WP Mailster WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2025-24557 | PlainInventory WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2025-24556 | MooWoodle WordPress plugin sensitive data exposure | 7.5CNA v3.1 | 0.5% | 2025-02-03 | Fix |
| CVE-2025-24545 | BSK Forms Validation WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2025-24544 | Bitcoin and Altcoin Wallets WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2025-24541 | DK White Label WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2025-24536 | ThriveDesk WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2025-24371 | Malicious peer can make node stuck in blocksync in github.com/cometbft/cometbft | 7.1CNA v4.0 | 0.5% | 2025-02-03 | Fix |
| CVE-2025-24370 | Django-Unicorn Class Pollution vulnerability, leading to XSS, DoS and authentication bypass | 9.3CNA v4.0 | 0.5% | 2025-02-03 | Fix |
| CVE-2025-24029 | Artifact permissions are not verified in the Cross Tracker Search widget in Tuleap | 5.3CNA v3.1 | 0.4% | 2025-02-03 | Fix |
| CVE-2025-23984 | Dynamic URL SEO WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2025-23923 | Lockets WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-03 | |
| CVE-2025-23920 | ApplicantPro WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2025-23819 | WP Cloud WordPress plugin arbitrary file deletion | 7.5CNA v3.1 | 0.6% | 2025-02-03 | |
| CVE-2025-23799 | TUBE Video Curator WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-03 | |
| CVE-2025-23755 | PAFacile WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-03 | |
| CVE-2025-23747 | Awesome Timeline WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-02-03 | |
| CVE-2025-23685 | RomanCart On WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-03 | |
| CVE-2025-23614 | WordPress Additional Logins plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-03 | |
| CVE-2025-23599 | eMarksheet WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2025-23594 | Google Map With Fancybox WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-03 | |
| CVE-2025-23593 | EmailPress WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-03 | |
| CVE-2025-23591 | blu Logistics WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-03 | |
| CVE-2025-23590 | Dezdy WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-03 | |
| CVE-2025-23588 | WOW Best CSS Compiler WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-03 | |
| CVE-2025-23582 | Bulk Categories Assign WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-03 | |
| CVE-2025-23581 | Demo User DZS WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-02-03 | |
| CVE-2025-23561 | MLL Audio Player MP3 Ajax WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-02-03 | |
| CVE-2025-23527 | WC Wallet WordPress plugin arbitrary content deletion vulnerability | 6.5CNA v3.1 | 0.5% | 2025-02-03 | |
| CVE-2025-23491 | VSTEMPLATE Creator WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-03 | |
| CVE-2025-23210 | PhpSpreadsheet allows bypassing of XSS sanitizer | 4.8CNA v4.0 | 0.4% | 2025-02-03 | Fix |
| CVE-2025-22978 | eladmin CSV injection | 9.8CISA ADP v3.1 | 0.6% | 2025-02-03 | |
| CVE-2025-22918 | Polycom RealPresence Group 500 information disclosure | 7.5CISA ADP v3.1 | 0.4% | 2025-02-03 | |
| CVE-2025-22775 | Catalog Importer, Scraper and Crawler WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2025-22704 | Signature WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-03 | |
| CVE-2025-22703 | Forge Front-End Page Builder WordPress plugin CSRF to stored cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-02-03 | |
| CVE-2025-22701 | Traveler Layout Essential For Elementor WordPress plugin server side request forgery (SSRF) | 5.4CNA v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2025-22695 | Nirweb support WordPress plugin broken access control | 4.3CNA v3.1 | 0.4% | 2025-02-03 | |
| CVE-2025-22694 | Hide Shipping Method For WooCommerce WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2025-22693 | Contest Gallery WordPress plugin SQL injection | 7.2v3.1 | 0.6% | 2025-02-03 | Fix |
| CVE-2025-22691 | WP Travel WordPress plugin SQL injection | 7.6CNA v3.1 | 0.5% | 2025-02-03 | Fix |
| CVE-2025-22690 | DigiTimber cPanel Integration WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2025-02-03 | Fix |
| CVE-2025-22688 | Unlimited Page Sidebars WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2025-02-03 | Fix |
| CVE-2025-22686 | CF7 Google Sheets Connector WordPress plugin broken access control | 5.3CNA v3.1 | 0.4% | 2025-02-03 | Fix |
| CVE-2025-22685 | Tags to Keywords WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2025-02-03 | Fix |
| CVE-2025-22684 | WP BASE Booking WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2025-22683 | NotificationX WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2025-22682 | Hesabfa Accounting WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2025-22681 | Content Cloner WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2025-22679 | Job Board Manager WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-02-03 | |
| CVE-2025-22677 | Uix Shortcodes WordPress plugin arbitrary shortcode execution vulnerability | 4.8CNA v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2025-22292 | Powerful Auto Chat WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-02-03 | |
| CVE-2025-22260 | Meta Tag Manager WordPress plugin broken access control | 4.3CNA v3.1 | 0.4% | 2025-02-03 | Fix |
| CVE-2025-22129 | Enalean Tuleap Taskboard REST card representation information disclosure | 4.3CNA v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2025-20643 | MediaTek chipsets debug messages revealing unnecessary information in Flash Tool V5 old-arch Lib | 3.9NVD v3.1 | 0.1% | 2025-02-03 | Fix |
| CVE-2025-20642 | MediaTek chipsets out-of-bounds write in Flash Tool V5 old-arch Lib | 6.6v3.1 | 0.1% | 2025-02-03 | Fix |
| CVE-2025-20641 | MediaTek chipsets out-of-bounds write in Flash Tool V5 old-arch Lib | 6.6NVD v3.1 | 0.1% | 2025-02-03 | Fix |
| CVE-2025-20640 | MediaTek chipsets out-of-bounds read in Flash Tool V5 Lib adaptor | 4.3v3.1 | 0.1% | 2025-02-03 | Fix |
| CVE-2025-20639 | MediaTek chipsets out-of-bounds write in Flash Tool V5 Lib adaptor | 6.6v3.1 | 0.1% | 2025-02-03 | Fix |
| CVE-2025-20638 | MediaTek chipsets use of uninitialized variable in Flash Tool V5 DA | 4.3v3.1 | 0.1% | 2025-02-03 | Fix |
| CVE-2025-20637 | MediaTek MT7981, MT7986 uncaught exception in network | 7.5v3.1 | 0.6% | 2025-02-03 | Fix |
| CVE-2025-20636 | MediaTek chipsets out-of-bounds write in secmem | 6.7v3.1 | 0.1% | 2025-02-03 | Fix |
| CVE-2025-20635 | MediaTek chipsets out-of-bounds write in DA | 6.6v3.1 | 0.1% | 2025-02-03 | Fix |
| CVE-2025-20634 | MediaTek chipsets out-of-bounds write in Modem | 9.8v3.1 | 0.7% | 2025-02-03 | Fix |
| CVE-2025-20633 | MediaTek chipsets out-of-bounds write in wlan | 8.8v3.1 | 0.3% | 2025-02-03 | Fix |
| CVE-2025-20632 | MediaTek chipsets out-of-bounds write in wlan | 7.8CISA ADP v3.1 | 0.2% | 2025-02-03 | Fix |
| CVE-2025-20631 | MediaTek chipsets out-of-bounds write in wlan | 7.8CISA ADP v3.1 | 0.2% | 2025-02-03 | Fix |
| CVE-2025-0974 | MaxD Lightning Module deserialization | 2.3CNA v4.0 | 0.4% | 2025-02-03 | Fix |
| CVE-2025-0973 | CmsEasy index.php backAll_action path traversal | 6.5v3.1 | 0.9% | 2025-02-03 | |
| CVE-2025-0972 | Zenvia Movidesk New Ticket handler cross-site scripting | 5.4v3.1 | 0.4% | 2025-02-03 | |
| CVE-2025-0971 | Zenvia Movidesk Profile Editing EditProfile cross-site scripting | 5.4v3.1 | 0.3% | 2025-02-03 | |
| CVE-2025-0148 | Zoom Jenkins Marketplace plugin Missing Password Field Masking | 2.6CNA v3.1 | 0.2% | 2025-02-03 | Fix |
| CVE-2025-0015 | Mali GPU Kernel Driver allows improper GPU processing operations | 7.8CISA ADP v3.1 | 0.2% | 2025-02-03 | Fix |
| CVE-2025-0970 | Zenvia Movidesk login page open redirect | 6.1v3.1 | 0.4% | 2025-02-02 | |
| CVE-2025-0967 | code-projects Chat System add_chatroom.php SQL injection | 7.5v3.1 | 0.6% | 2025-02-02 | |
| CVE-2025-23091 | Ubiquiti UDM improper certificate validation | 5.9CNA v3.0 | 0.2% | 2025-02-01 | Fix |
| CVE-2025-0961 | code-projects Job Recruitment load_job-details.php cross-site scripting | 5.4v3.1 | 0.4% | 2025-02-01 | |
| CVE-2025-0950 | itsourcecode Tailoring Management System staffview.php SQL injection | 9.8v3.1 | 0.5% | 2025-02-01 | |
| CVE-2025-0949 | itsourcecode Tailoring Management System partview.php SQL injection | 8.8v3.1 | 0.5% | 2025-02-01 | |
| CVE-2025-0948 | itsourcecode Tailoring Management System incview.php SQL injection | 8.8v3.1 | 0.4% | 2025-02-01 | |
| CVE-2025-0947 | itsourcecode Tailoring Management System expview.php SQL injection | 8.8v3.1 | 0.4% | 2025-02-01 | |
| CVE-2025-0946 | itsourcecode Tailoring Management System templatedelete.php SQL injection | 9.8v3.1 | 0.5% | 2025-02-01 | |
| CVE-2025-0945 | itsourcecode Tailoring Management System typedelete.php SQL injection | 9.8v3.1 | 0.5% | 2025-02-01 | |
| CVE-2025-0944 | itsourcecode Tailoring Management System customerview.php SQL injection | 9.8v3.1 | 1.1% | 2025-02-01 | |
| CVE-2025-0943 | itsourcecode Tailoring Management System deldoc.php SQL injection | 9.8v3.1 | 0.6% | 2025-02-01 | |
| CVE-2025-0939 | MagicForm - WordPress Form Builder plugin missing authorization | 6.3CNA v3.1 | 0.3% | 2025-02-01 | Fix |
| CVE-2025-0366 | Jupiter X Core WordPress plugin SVG upload to local file inclusion (remote code execution) | 8.8CNA v3.1 | 1.6% | 2025-02-01 | Fix |
| CVE-2025-0365 | Jupiterx Core WordPress plugin authenticated (Contributor+) arbitrary file read | 6.5CNA v3.1 | 0.7% | 2025-02-01 | Fix |