CVE-2025 list

CVE-2025 records published after 2025

Page three of six: records 2,001 to 3,000 of the 5,305 published after 2025, newest first. The first page carries the figures for After 2025.

CVE-2025 records published after 2025, newest first: records 2,001 to 3,000 of 5,305
CVE Summary CVSS EPSS Published Signals
CVE-2025-68554Keenarch WordPress theme arbitrary file upload9.9CNA v3.10.5%2026-03-05Fix
CVE-2025-68553Lendiz WordPress theme arbitrary file upload9.9CNA v3.10.5%2026-03-05Fix
CVE-2025-68515WP Booking System WordPress plugin sensitive data exposure5.8CISA ADP v3.10.3%2026-03-05Fix
CVE-2025-66319Huawei HarmonyOS permission control vulnerability in the resource scheduling module3.3CNA v3.10.1%2026-03-05Fix
CVE-2025-64166Mercurius: Incorrect Content-Type parsing can lead to CSRF attack5.4CNA v3.10.2%2026-03-05Fix
CVE-2025-55208Chamilo LMS has stored cross-site scripting on Social Networks Uploaded files9.1CNA v3.10.3%2026-03-05Fix
CVE-2025-54001Classter WordPress theme PHP object injection9.8CNA v3.10.5%2026-03-05
CVE-2025-53335Berger WordPress theme local file inclusion8.1CNA v3.10.5%2026-03-05
CVE-2025-45691RAGAS has an arbitrary file read7.5CISA ADP v3.10.6%2026-03-05Fix
CVE-2025-40931Apache::Session::Generate::MD5 versions for Perl create insecure session id9.1CISA ADP v3.10.6%2026-03-05
CVE-2025-40926Plack::Middleware::Session::Simple versions for Perl generates session ids insecurely9.8CISA ADP v3.10.5%2026-03-05Fix
CVE-2025-29165D-Link Dir-1253 improper privilege management9.8CISA ADP v3.10.7%2026-03-05
CVE-2025-13476Rakuten Viber uses broken or risky cryptographic algorithm9.8CISA ADP v3.10.4%2026-03-05Fix
CVE-2025-13350Canonical Ubuntu use-after-free7.1CNA v4.00.2%2026-03-05Fix
CVE-2025-11143Eclipse Jetty org.eclipse.Jetty:jetty-http has different parsing of invalid URIs3.7CNA v3.10.2%2026-03-05Fix
CVE-2025-7375Unauthenticated denial of service vulnerability in Omada EAP6106.9CNA v4.00.2%2026-03-05Fix
CVE-2025-71238Linux kernel qla2xxx bsg handler double free7.8NVD v3.10.2%2026-03-04Fix
CVE-2025-70342Grahampugh Erase-install incorrect permission assignment6.6CISA ADP v3.10.2%2026-03-04Exploit code
CVE-2025-70341App-auto-patch insecure permissions7.8CISA ADP v3.10.2%2026-03-04Exploit code
CVE-2025-70226D-Link DIR-513 stack-based buffer overflow9.8CISA ADP v3.10.5%2026-03-04
CVE-2025-70225D-Link DIR-513 stack-based buffer overflow9.8CISA ADP v3.10.5%2026-03-04
CVE-2025-70223D-Link DIR-513 stack-based buffer overflow9.8CISA ADP v3.10.5%2026-03-04
CVE-2025-70222D-Link DIR-513 stack-based buffer overflow9.8CISA ADP v3.10.5%2026-03-04
CVE-2025-70221D-Link DIR-513 stack-based buffer overflow9.8CISA ADP v3.10.5%2026-03-04
CVE-2025-70220D-Link DIR-513 stack-based buffer overflow9.8CISA ADP v3.10.6%2026-03-04
CVE-2025-70219D-Link DIR-513 stack-based buffer overflow9.8CISA ADP v3.13.4%2026-03-04
CVE-2025-70218D-Link DIR-513 stack-based buffer overflow9.8CISA ADP v3.10.7%2026-03-04
CVE-2025-69969Pebblepower Pebble Prism Ultra missing encryption9.6CISA ADP v3.10.5%2026-03-04
CVE-2025-68467darkreader dark Reader gives users the ability to request style sheets from local web servers3.4CNA v3.10.1%2026-03-04Fix
CVE-2025-66944databasir vran-dev databaseir v.1.0.7 and SQL injection9.8v3.10.8%2026-03-04
CVE-2025-66678Faintsnow Hardware Read & Write Utility SQL injection9.8v3.10.6%2026-03-04Exploit code
CVE-2025-66168Apache ActiveMQ is vulnerable to integer overflow or wraparound5.4CNA v3.10.8%2026-03-04Fix
CVE-2025-66024XWiki Blog Application home page vulnerable to stored XSS via Post Title8.6CNA v4.00.4%2026-03-04Fix
CVE-2025-62879Rancher Backup Operator pod's logs leak S3 tokens6.8CNA v3.10.3%2026-03-04Fix
CVE-2025-597872N Telekomunikace a.s 2N Access Commander HTTP 5XX Internal Server Errors5.3CNA v4.00.2%2026-03-04Fix
CVE-2025-597862N Access Commander session management insufficient session expiration6.0CNA v4.00.3%2026-03-04Fix
CVE-2025-597852N Telekomunikace a.s 2N Access Commander API insufficient input validation5.3CNA v4.00.2%2026-03-04Fix
CVE-2025-597842N Telekomunikace a.s 2N Access Commander Log Pollution Control Characters not Escaped6.9CNA v4.00.3%2026-03-04Fix
CVE-2025-597832N Telekomunikace a.s 2N Access Commander OS command injection over API8.8CNA v4.00.9%2026-03-04Fix
CVE-2025-46108D-Link DIR-513 buffer overflow9.8CISA ADP v3.10.6%2026-03-04
CVE-2025-41257Suprema BioStar 2 Insecure Password Change4.8CNA v3.10.3%2026-03-04
CVE-2025-40896Lack of TLS certificate validation when connecting Arc to a Guardian or CMC, in Arc6.3CNA v4.00.1%2026-03-04Fix
CVE-2025-40895HTML injection in Sensor Map in CMC2.0CNA v4.00.2%2026-03-04Fix
CVE-2025-40894HTML injection in Alerted Nodes Dashboard in Guardian/CMC2.1CNA v4.00.2%2026-03-04Fix
CVE-2025-15558Docker Desktop Docker plugins uncontrolled search path element local privilege escalation7.0CNA v4.00.5%2026-03-04Fix
CVE-2025-12801Nfs-utils: Rpc.mountd in the Nfs-utils privilege escalation6.5CNA v3.10.5%2026-03-04Fix
CVE-2025-70821renren-security SQL injection9.8CISA ADP v3.10.4%2026-03-03
CVE-2025-70241D-Link DIR-513 stack-based buffer overflow9.8v3.10.6%2026-03-03
CVE-2025-70240D-Link DIR-513 stack-based buffer overflow9.8v3.10.7%2026-03-03
CVE-2025-70239D-Link DIR-513 stack-based buffer overflow9.8v3.10.6%2026-03-03
CVE-2025-70237D-Link DIR-513 stack-based buffer overflow9.8v3.10.7%2026-03-03
CVE-2025-70236D-Link DIR-513 stack-based buffer overflow9.8v3.10.6%2026-03-03
CVE-2025-70234D-Link DIR-513 stack-based buffer overflow9.8v3.10.7%2026-03-03
CVE-2025-69765Tenda AX3 Firmware stack-based buffer overflow7.5CISA ADP v3.10.8%2026-03-03
CVE-2025-67840Cohesity Tranzman authenticated OS command injection7.2CNA v3.13.8%2026-03-03
CVE-2025-66945Zdir ZIP extraction API path traversal9.1CISA ADP v3.10.5%2026-03-03
CVE-2025-66680Wisecleaner Wise Force Deleter link following7.1CISA ADP v3.10.2%2026-03-03Exploit code
CVE-2025-66363Samsung Exynos 2200 improper initialization7.5CISA ADP v3.10.5%2026-03-03Fix
CVE-2025-64736The Biosig Project libbiosig ABF parsing functionality out-of-bounds read7.1v3.10.2%2026-03-03Fix
CVE-2025-63912Cohesity Tranzman weak cryptographic algorithm7.5v3.10.1%2026-03-03
CVE-2025-63911Cohesity Tranzman OS command injection7.2CNA v3.12.4%2026-03-03
CVE-2025-63910Cohesity Tranzman arbitrary file upload7.2CNA v3.10.4%2026-03-03
CVE-2025-63909Cohesity Tranzman improper privilege management7.8v3.10.3%2026-03-03
CVE-2025-62817Samsung Exynos 1280 null pointer dereference7.5v3.10.3%2026-03-03Fix
CVE-2025-62816Samsung Exynos 1280 denial of service5.5CISA ADP v3.10.1%2026-03-03Fix
CVE-2025-62815Samsung Exynos 1380 null pointer dereference5.5CISA ADP v3.10.2%2026-03-03Fix
CVE-2025-62814Samsung Exynos 1280 null pointer dereference7.5CISA ADP v3.10.5%2026-03-03Fix
CVE-2025-59060Apache Ranger: Hostname verification bypass in NiFiRegistryClient5.3CISA ADP v3.10.3%2026-03-03Fix
CVE-2025-59059Apache Ranger: Remote code execution vulnerability in NashornScriptEngineCreator9.8CISA ADP v3.11.3%2026-03-03Fix
CVE-2025-57622Step-Video-T2V caption and VAE API endpoints deserialization of untrusted data9.8CISA ADP v3.10.5%2026-03-03
CVE-2025-52365Stabilizer szc script command injection7.8CISA ADP v3.10.5%2026-03-03
CVE-2025-47147Gallagher Command Centre Mobile Client cleartext storage of sensitive information5.7CNA v3.10.1%2026-03-03Fix
CVE-2025-36364IBM DevOps Plan web page cache information disclosure6.2CNA v3.10.1%2026-03-03Fix
CVE-2025-36363IBM DevOps Plan is vulnerable to excessive authentication attempts5.9CNA v3.10.3%2026-03-03Fix
CVE-2025-15599DOMPurify XSS via Textarea Rawtext Bypass in SAFE_FOR_XML5.1CNA v4.00.2%2026-03-03Fix
CVE-2025-15598Dataease SQLBot JWT Token auth.py validateEmbedded signature verification5.9v3.10.2%2026-03-03
CVE-2025-15595Privilege escalation via dll hijacking in Inno Setup7.8v3.10.1%2026-03-03Fix
CVE-2025-14923IBM WebSphere Application Server Liberty could provide weaker than expected security4.7CNA v3.10.2%2026-03-03Fix
CVE-2025-14604IBM Storage Scale directory ACL handling incorrect permission assignment6.6CNA v3.10.1%2026-03-03Fix
CVE-2025-14480IBM Aspera faspio Gateway has addressed a vulnerability affected by weak cryptographic algorithms5.1CNA v3.10.2%2026-03-03Fix
CVE-2025-14456IBM MQ Appliance uses weaker than expected cryptographic algorithms5.9CISA ADP v3.10.2%2026-03-03Fix
CVE-2025-13734IBM Engineering Requirements Management DOORS Next missing authorization5.4CNA v3.10.2%2026-03-03Fix
CVE-2025-13688IBM DataStage on Cloud Pak for Data wrapped command OS command injection6.3CNA v3.10.4%2026-03-03Fix
CVE-2025-13687IBM DataStage on Cloud Pak for Data user-defined function OS command injection6.3CNA v3.10.4%2026-03-03Fix
CVE-2025-13686IBM DataStage on Cloud Pak for Data job subroutine OS command injection6.3CNA v3.10.4%2026-03-03Fix
CVE-2025-13616IBM DataStage on Cloud Pak for Data is vulnerable to sensitive information leak due to HTTP response6.5CNA v3.10.2%2026-03-03Fix
CVE-2025-13490IBM App Connect Enterprise Certified Container cleartext transmission of sensitive information5.9CNA v3.10.2%2026-03-03Fix
CVE-2025-12345LLM-Claw Agent Deployment initiate.c agent_deploy_init buffer overflow8.7CNA v4.00.7%2026-03-03
CVE-2025-70252Tenda AC6 stack-based buffer overflow7.5v3.10.4%2026-03-02
CVE-2025-66880Wethink Technology Inc cross-site scripting6.1CISA ADP v3.10.3%2026-03-02
CVE-2025-65465Skrol29 TbsZip RaiseError function reflected cross-site scripting6.1CNA v3.10.4%2026-03-02
CVE-2025-64427ZimaOS is vulnerable to server-side request forgery (SSRF)7.1CNA v3.10.2%2026-03-02Fix
CVE-2025-59603Qualcomm Snapdragon out-of-bounds write in Computer Vision7.8CNA v3.10.1%2026-03-02Fix
CVE-2025-59600Qualcomm Snapdragon buffer over-read in Graphics7.8CNA v3.10.1%2026-03-02Fix
CVE-2025-58406CGM CLININET lack of HTTP Response headers4.3v3.10.2%2026-03-02Fix
CVE-2025-58405CGM CLININET lack of protection mechanisms against clickjacking attacks6.1v3.10.2%2026-03-02Fix
CVE-2025-58402CGM CLININET insecure direct object reference Message ID7.5v3.10.2%2026-03-02Fix
CVE-2025-58107Microsoft Exchange ActiveSync cleartext transmission of sensitive information7.5CISA ADP v3.10.3%2026-03-02
CVE-2025-52998Chamilo: PHAR deserialization bypass7.0CNA v4.00.4%2026-03-02Fix
CVE-2025-52564Chamilo: HTML injection via open parameter6.9CNA v4.00.2%2026-03-02Fix
CVE-2025-52563Chamilo: Reflected XSS via page parameter5.1CNA v4.00.2%2026-03-02Fix
CVE-2025-52482Chamilo: Stored XSS in glossary function8.3CNA v3.10.4%2026-03-02Fix
CVE-2025-52476Chamilo: Reflected XSS via keyword_active parameter5.1CNA v4.00.2%2026-03-02Fix
CVE-2025-52475Chamilo: Reflected XSS via keyword_inactive parameter5.1CNA v4.00.2%2026-03-02Fix
CVE-2025-52470Chamilo: Stored cross-site scripting (XSS) via Session Category Name4.8CNA v3.10.2%2026-03-02Fix
CVE-2025-52469Chamilo: Friend Request Workflow Bypass Unauthorized Friend Addition and ID Validation Bypass7.1CNA v3.10.3%2026-03-02Fix
CVE-2025-52468Chamilo: Stored XSS vulnerability via CSV User Import8.8CNA v3.10.4%2026-03-02Fix
CVE-2025-50199Chamilo: Blind server-side request forgery (Unauth Blind SSRF)7.7CNA v4.00.4%2026-03-02Fix
CVE-2025-50198Chamilo: Deserialization of untrusted data in /plugin/vchamilo/views/import.php8.8CNA v4.00.4%2026-03-02Fix
CVE-2025-50197Chamilo: OS command injection in /main/admin/sub_language_ajax.inc.php7.1CNA v4.02.7%2026-03-02Fix
CVE-2025-50196Chamilo: OS command injection in /plugin/vchamilo/views/editinstance.php7.1CNA v4.02.8%2026-03-02Fix
CVE-2025-50195Chamilo: OS command injection in /plugin/vchamilo/views/manage.controller.php7.1CNA v4.02.7%2026-03-02Fix
CVE-2025-50194Chamilo: OS command injection in /main/cron/lang/check_parse_lang.php7.1CNA v4.02.7%2026-03-02Fix
CVE-2025-50193Chamilo vchamilo plugin import script command injection7.1CNA v4.02.7%2026-03-02Fix
CVE-2025-50192Chamilo: Time-based SQL injection in /main/webservices/registration.soap.php8.8CNA v4.00.6%2026-03-02Fix
CVE-2025-50191Chamilo: Error-based SQL injection via POST userFile with the /main/exercise/hotpotatoes.php script7.0CNA v4.00.6%2026-03-02Fix
CVE-2025-50190Chamilo: Error-based SQL injection via GET openid.assoc_handle with the /index.php script8.8CNA v4.00.6%2026-03-02Fix
CVE-2025-50189Chamilo: Error-based SQL injection7.2CNA v4.00.7%2026-03-02Fix
CVE-2025-50188Error-based SQL injection in Chamilo LMS7.0CNA v4.00.7%2026-03-02Fix
CVE-2025-50187Chamilo: Evaluation of untrusted user input leads to remote code execution9.8CNA v3.10.9%2026-03-02Fix
CVE-2025-50186Chamilo: Stored XSS via Malicious CSV Filename in user_import.php4.8CNA v3.10.3%2026-03-02Fix
CVE-2025-48654Google Android CompanionDeviceManagerService.java confused deputy7.8v3.10.1%2026-03-02Fix
CVE-2025-48653Google Android multiple files privilege escalation7.8v3.10.1%2026-03-02Fix
CVE-2025-48650Google Android multiple locations information disclosure8.4CISA ADP v3.10.1%2026-03-02Fix
CVE-2025-48646Google Android ActivityStarter.java privilege escalation7.8CISA ADP v3.10.1%2026-03-02Fix
CVE-2025-48645Google Android DeviceAdminInfo.java privilege escalation7.8NVD v3.10.2%2026-03-02Fix
CVE-2025-48644Google Android multiple locations denial of service5.5v3.10.1%2026-03-02Fix
CVE-2025-48642Google Android payload.rs information disclosure5.5v3.10.1%2026-03-02Fix
CVE-2025-48641Google Android Nfc.h use-after-free7.0v3.10.1%2026-03-02Fix
CVE-2025-48636Google Android BugreportContentProvider.java privilege escalation8.4CISA ADP v3.10.1%2026-03-02Fix
CVE-2025-48635Google Android TaskFragmentOrganizerController.java information disclosure7.7v3.10.1%2026-03-02Fix
CVE-2025-48634Google Android WindowManagerService.java privilege escalation7.3v3.10.1%2026-03-02Fix
CVE-2025-48630Google Android SkiaRenderEngine.cpp privilege escalation7.4v3.10.1%2026-03-02Fix
CVE-2025-48619Google Android ContentProvider.java privilege escalation8.4v3.10.1%2026-03-02Fix
CVE-2025-48613Google Android VBMeta privilege escalation7.8v3.10.1%2026-03-02Fix
CVE-2025-48609Google Android MmsProvider.java denial of service9.1v3.10.3%2026-03-02Fix
CVE-2025-48605Google Android KeyguardViewMediator.java privilege escalation8.4v3.10.1%2026-03-02Fix
CVE-2025-48602Google Android KeyguardViewMediator.java privilege escalation8.4v3.10.1%2026-03-02Fix
CVE-2025-48587Google Android ProfilingService.java denial of service6.2CISA ADP v3.10.1%2026-03-02Fix
CVE-2025-48585Google Android ProfilingService.java denial of service6.2CISA ADP v3.10.1%2026-03-02Fix
CVE-2025-48582Google Android multiple locations privilege escalation8.4v3.10.1%2026-03-02Fix
CVE-2025-48579Google Android MediaProvider.java insecure permissions8.4CISA ADP v3.10.1%2026-03-02Fix
CVE-2025-48578Google Android MediaProvider.java privilege escalation7.8CISA ADP v3.10.1%2026-03-02Fix
CVE-2025-48577Google Android KeyguardViewMediator.java privilege escalation7.4CISA ADP v3.10.1%2026-03-02Fix
CVE-2025-48574Google Android DisplayPolicy.java privilege escalation8.4CISA ADP v3.10.1%2026-03-02Fix
CVE-2025-48568Google Android multiple locations privilege escalation7.4CISA ADP v3.10.1%2026-03-02Fix
CVE-2025-48567Google Android multiple locations privilege escalation7.8CISA ADP v3.10.1%2026-03-02Fix
CVE-2025-47386Qualcomm Snapdragon use-after-free in Automotive Audio7.8CNA v3.10.1%2026-03-02Fix
CVE-2025-47385Qualcomm Snapdragon improper access control for Register interface in SCE-Mink7.8CNA v3.10.1%2026-03-02Fix
CVE-2025-47384Qualcomm Snapdragon reachable assertion in FW6.5CNA v3.10.1%2026-03-02Fix
CVE-2025-47383Missing cryptographic step in Data Modem7.2CNA v3.10.1%2026-03-02Fix
CVE-2025-47381Qualcomm Snapdragon use-after-free in Automotive Audio7.8CNA v3.10.1%2026-03-02Fix
CVE-2025-47379Qualcomm Snapdragon use-after-free in Automotive Audio7.8CNA v3.10.1%2026-03-02Fix
CVE-2025-47378Qualcomm Snapdragon shared VM boot loader interface information disclosure7.1CNA v3.10.1%2026-03-02Fix
CVE-2025-47377Qualcomm Snapdragon use-after-free in Automotive Audio7.8CNA v3.10.1%2026-03-02Fix
CVE-2025-47376Qualcomm Snapdragon use-after-free in Automotive Audio7.8CNA v3.10.1%2026-03-02Fix
CVE-2025-47375Qualcomm Snapdragon use-after-free in Automotive Audio7.8CNA v3.10.1%2026-03-02Fix
CVE-2025-47373Qualcomm Snapdragon out-of-bounds write in Automotive7.8CNA v3.10.1%2026-03-02Fix
CVE-2025-47371Qualcomm Snapdragon reachable assertion in Modem6.5CNA v3.10.1%2026-03-02Fix
CVE-2025-32313Google Android UsageEvents.java out-of-bounds write8.4CISA ADP v3.10.1%2026-03-02Fix
CVE-2025-30062CGM CLININET SQL injection in CheckUnitCodeAndKey.pl6.9CNA v4.00.2%2026-03-02Fix
CVE-2025-30044CGM CLININET RCE on uhcapache user permissions9.4CNA v4.00.6%2026-03-02Fix
CVE-2025-30042CGM CLININET session generation possible with certificate number only7.8NVD v3.10.1%2026-03-02Fix
CVE-2025-30035CGM CLININET lack of API authentication allowing session generation for any user9.0CNA v4.00.3%2026-03-02Fix
CVE-2025-15597Dataease SQLBot API endpoint assistant.py access control6.3v3.10.6%2026-03-02Fix
CVE-2025-14532Remote code execution via unrestricted file upload in DobryCMS9.8v3.10.6%2026-03-02Fix
CVE-2025-12462Blind SQL injection in DobryCMS9.3CNA v4.00.5%2026-03-02Fix
CVE-2025-10350SQL injection in CGM NETRAAD8.8CNA v4.00.2%2026-03-02Fix
CVE-2025-13673Tutor LMS WordPress plugin unauthenticated SQL injection via coupon_code7.5CNA v3.10.5%2026-02-28Exploit codeFix
CVE-2025-69437PublicCMS cross-site scripting8.7CISA ADP v3.10.4%2026-02-27
CVE-2025-40932Apache::SessionX versions for Perl create insecure session id8.2CISA ADP v3.10.2%2026-02-27
CVE-2025-15567vivo Health missing authentication5.1CNA v4.00.1%2026-02-27Fix
CVE-2025-15509vivo SmartRemote missing authentication7.1CNA v4.00.3%2026-02-27Fix
CVE-2025-15498SQL injection in Pro3W CMS9.3CNA v4.00.5%2026-02-27Fix
CVE-2025-14149Xpro Addons 140+ Widgets for Elementor WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-02-27Fix
CVE-2025-14142Electric Enquiries WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-02-27
CVE-2025-14040Automotive Car Dealership Business WordPress theme stored cross-site scripting6.4CNA v3.10.3%2026-02-27Fix
CVE-2025-13327Uv: Uv: Specially crafted zip archives lead to arbitrary code execution due to parsing differentials6.3NVD v3.10.2%2026-02-27Fix
CVE-2025-12981Listee WordPress theme unauthenticated privilege escalation9.8CNA v3.10.6%2026-02-27Fix
CVE-2025-12150keycloak Org.Keycloak/keycloak-services: Webauthn attestation statement verification bypass3.1CNA v3.10.2%2026-02-27Fix
CVE-2025-11950Reflected XSS in Knowhy's EduAsist6.1v3.10.2%2026-02-27Fix
CVE-2025-11252SQLi in Signum Technologies' windesk.fm9.8CNA v3.10.4%2026-02-27Fix
CVE-2025-11251SQLi in Dayneks Software's E-Commerce Platform9.8CNA v3.10.4%2026-02-27
CVE-2025-10990Red Hat Satellite rexml: Rexml: Denial of service via inefficient regex parsing7.5CNA v3.10.5%2026-02-27Fix
CVE-2025-9909Red Hat Ansible Automation Platform Gateway route creation vulnerability6.7CNA v3.10.2%2026-02-27Fix
CVE-2025-9908Red Hat Ansible Automation Platform EDA event streams information disclosure6.7CNA v3.10.2%2026-02-27Fix
CVE-2025-9907Red Hat Ansible Automation Platform EDA event stream test mode information disclosure6.7CNA v3.10.2%2026-02-27Fix
CVE-2025-9572Foreman: Satellite: Graphql API permission bypass leads to information disclosure5.0CNA v3.10.4%2026-02-27Fix
CVE-2025-71057D-Link DSL-124 Wireless N 300 ADSL2+ Modem Router session management session hijacking8.2CISA ADP v3.10.1%2026-02-26
CVE-2025-64999Checkmk cross-site scripting in HTML logs of Synthetic Monitoring test services7.3CNA v4.00.1%2026-02-26Fix
CVE-2025-56605PuneethReddyHC Event Management System register.php cross-site scripting5.4CISA ADP v3.10.2%2026-02-26Exploit code
CVE-2025-50857ZenTaoPMS AI module file upload path traversal9.8CISA ADP v3.12.3%2026-02-26
CVE-2025-14343Reflected XSS in Dokuzsoft Technology's E-Commerce Product7.6CNA v3.10.2%2026-02-26
CVE-2025-69771Killergerbah Asbplayer subtitle loading function of the cross-site scripting9.6CISA ADP v3.10.3%2026-02-25
CVE-2025-69231OpenEMR has a stored XSS in GAD-7 form that enables session hijacking and privilege escalation8.7CNA v3.13.7%2026-02-25Fix
CVE-2025-68277OpenEMR allows links sent via Secure Messaging to be opened in OpenEMR and portal7.2CNA v4.00.2%2026-02-25Fix
CVE-2025-67860SUSE harvester NeuVector scanner insecurely handles passwords as command arguments3.8CNA v3.10.1%2026-02-25Fix
CVE-2025-67752OpenEMR has Disabled SSL Certificate Verification in HTTP client8.1CNA v3.10.2%2026-02-25Fix
CVE-2025-67601Rancher CLI skips TLS verification on Rancher CLI login command8.3CNA v3.10.2%2026-02-25Fix
CVE-2025-67491OpenEMR has stored XSS in ub04 helper8.5CNA v4.00.3%2026-02-25Fix
CVE-2025-62878SUSE Rancher Local Path Provisioner vulnerable to path traversal via parameters.pathPattern9.9CNA v3.10.6%2026-02-25Exploit codeFix
CVE-2025-50180Esm.sh is vulnerable to full-response SSRF8.7CNA v4.00.4%2026-02-25Fix
CVE-2025-14742WP Recipe Maker WordPress plugin missing authorization authenticated sensitive information exposure4.3CNA v3.10.2%2026-02-25Fix
CVE-2025-14511Improper validation of specified quantity in input in GitLab7.5CNA v3.10.4%2026-02-25Fix
CVE-2025-14103Missing authorization in GitLab4.3CNA v3.10.2%2026-02-25Fix
CVE-2025-11563Wcurl path traversal with percent-encoded slashes4.6CISA ADP v3.10.4%2026-02-25Fix
CVE-2025-5781Hitachi Ops Center API Configuration Manager information disclosure5.2CNA v3.10.1%2026-02-25Exploit codeFix
CVE-2025-3525Allocation of resources without limits or throttling in GitLab6.5CNA v3.10.3%2026-02-25Fix
CVE-2025-1242Administrative Credentials can be Extracted through Gardyn API Responses9.3CNA v4.00.5%2026-02-25Exploit codeFix
CVE-2025-0976Hitachi Ops Center API Configuration Manager information disclosure4.7CNA v3.10.2%2026-02-25Fix
CVE-2025-69985FUXA has JWT authentication bypass via HTTP Referer header spoofing9.8CISA ADP v3.15.7%2026-02-24Exploit code
CVE-2025-69253free5GC vulnerable to improper error handling in NEF with information exposure6.6CNA v4.00.4%2026-02-24Fix
CVE-2025-69252free5GC has null pointer dereference in UDM, leading to service panic6.6CNA v4.00.5%2026-02-24Fix
CVE-2025-69251free5GC has improper input validation in UDM, leading to information exposure6.6CNA v4.00.5%2026-02-24Fix
CVE-2025-69250free5GC has improper error handling in UDM, leading to information exposure6.6CNA v4.00.4%2026-02-24Fix
CVE-2025-67445TOTOLINK X5000R denial of service7.5v3.10.3%2026-02-24Exploit code
CVE-2025-63409Gcomtw Gcom Epon 1GE privilege escalation8.8CISA ADP v3.10.3%2026-02-24
CVE-2025-62512Piwigo vulnerable to User Enumeration via Password Reset endpoint5.5CNA v4.00.8%2026-02-24Nuclei
CVE-2025-47904Microchip TimeProvider 4100 unsigned upgrade package5.7CNA v4.00.1%2026-02-24Fix
CVE-2025-46320Claris FileMaker Server FileMaker WebDirect custom homepage cross-site scripting6.1CISA ADP v3.10.2%2026-02-24Fix
CVE-2025-40541SolarWinds Serv-U insecure direct object reference (IDOR) remote code execution9.1CNA v3.10.6%2026-02-24Fix
CVE-2025-40540SolarWinds Serv-U type confusion remote code execution9.1CNA v3.10.5%2026-02-24Fix
CVE-2025-40539SolarWinds Serv-U type confusion remote code execution9.1CNA v3.10.5%2026-02-24Fix
CVE-2025-40538SolarWinds Serv-U broken access control remote code execution9.1CNA v3.10.5%2026-02-24Fix
CVE-2025-33181NVIDIA NVOS command injection7.3CNA v3.10.4%2026-02-24Fix
CVE-2025-33180NVIDIA NVOS command injection8.0CNA v3.10.8%2026-02-24Fix
CVE-2025-33179NVIDIA NVOS incorrect privilege assignment8.0CNA v3.10.5%2026-02-24Fix
CVE-2025-27555Apache Airflow: Connection Secrets not masked in UI when Connection are added via Airflow cli6.5CISA ADP v3.10.4%2026-02-24Fix
CVE-2025-15589MuYuCMS Template Management Template.php delete_dir_file path traversal7.2v3.10.7%2026-02-24
CVE-2025-15386Responsive Lightbox and Gallery WordPress plugin unauthenticated stored XSS8.8CISA ADP v3.10.3%2026-02-24Fix
CVE-2025-14963Trellix Endpoint HX Agent (xAgent) improper input validation6.2CNA v4.00.1%2026-02-24
CVE-2025-14577PHP function injection in Slican NPC/IPL/IPM/IPU9.8v3.10.4%2026-02-24Fix
CVE-2025-13943Zyxel EX3301-T0 firmware command injection8.8CNA v3.11.4%2026-02-24Fix
CVE-2025-13942Zyxel EX3510-B0 firmware UPnP function of the Zyxel command injection9.8CNA v3.11.1%2026-02-24Fix
CVE-2025-13776Hard-coded database credentials in Finka software7.1v3.10.2%2026-02-24Fix
CVE-2025-11848Zyxel VMG3625-T50B firmware Wake-on-LAN CGI program of the Zyxel null pointer dereference4.9CNA v3.11.9%2026-02-24Fix
CVE-2025-11847Zyxel VMG3625-T50B firmware null pointer dereference4.9CNA v3.11.8%2026-02-24Fix
CVE-2025-11846Zyxel VMG3625-T50B firmware null pointer dereference4.9CNA v3.11.2%2026-02-24Fix
CVE-2025-11845Zyxel VMG3625-T50B firmware null pointer dereference4.9CNA v3.10.8%2026-02-24Fix
CVE-2025-11165dotCMS A sandbox escape9.4CNA v4.00.3%2026-02-24Fix
CVE-2025-10010Integrity Validation Bypass in CryptoPro Secure Disk for BitLocker6.8CISA ADP v3.10.3%2026-02-24Fix
CVE-2025-9120RCE vulnerability has been discovered in OpenText™ Carbonite Safe Server Backup8.6CNA v4.00.2%2026-02-24
CVE-2025-1789Genetec Update Service local privilege escalation5.8CNA v4.00.1%2026-02-24Fix
CVE-2025-1787Genetec Update Service origin validation error5.8CNA v4.00.1%2026-02-24Fix
CVE-2025-71056GCOM EPON 1GE ONU session management session hijacking8.1CISA ADP v3.10.2%2026-02-23
CVE-2025-70329TOTOLINK X5000R OS command injection8.0CISA ADP v3.13.3%2026-02-23
CVE-2025-70328TOTOLINK X6000R OS command injection8.8v3.11.8%2026-02-23
CVE-2025-70327TOTOLINK X5000R argument injection9.8v3.10.7%2026-02-23
CVE-2025-70058Yapi disables TLS/SSL certificate validation via rejectUnauthorized: False in Axios HTTPS agent7.4CISA ADP v3.10.2%2026-02-23
CVE-2025-70045Jxcore Jxm improper certificate validation7.4CISA ADP v3.10.2%2026-02-23
CVE-2025-70044Fofolee Utools-quickcommand improper certificate validation6.5CISA ADP v3.10.1%2026-02-23
CVE-2025-70043Ayms node-To TLS socket configuration improper certificate validation9.1CISA ADP v3.10.2%2026-02-23
CVE-2025-69700Tenda FH1203 stack-based buffer overflow7.5CISA ADP v3.13.6%2026-02-23Emerging Threats
CVE-2025-69248free5GC has Array Index Out-of-bounds in AMF leading to denial of service6.6CNA v4.00.6%2026-02-23Fix
CVE-2025-69247free5GC has heap buffer overflow in UPF leading to denial of service2.7CNA v4.00.5%2026-02-23Fix
CVE-2025-69232free5GC hasProtocol Compliance Violation in UPF leading to SMF Service Disruption2.7CNA v4.00.4%2026-02-23Fix
CVE-2025-69208free5GC UDR's NEF incorrectly returns 500 for missing PFD data in Nnef_PfdManagement GET request2.7CNA v4.00.3%2026-02-23Fix
CVE-2025-68930Traccar missing origin validation in WebSockets7.1CNA v3.10.6%2026-02-23Exploit code
CVE-2025-67733Valkey affected by RESP protocol injection via Lua error_reply8.5CNA v3.10.6%2026-02-23Exploit codeFix
CVE-2025-63946Tencent PC Manager privilege escalation7.4CISA ADP v3.10.2%2026-02-23
CVE-2025-63945Tencent Ioa privilege escalation7.4CISA ADP v3.10.2%2026-02-23Exploit code
CVE-2025-61147struktur libde265 buffer overflow6.2CISA ADP v3.10.2%2026-02-23Fix
CVE-2025-61146saitoha libsixel memory leak4.0CISA ADP v3.10.1%2026-02-23
CVE-2025-61145libtiff tiffcrop double free5.0v3.10.1%2026-02-23Fix
CVE-2025-61144libtiff stack-based buffer overflow7.3NVD v3.10.3%2026-02-23Fix
CVE-2025-61143libtiff null pointer dereference5.5v3.10.1%2026-02-23Fix
CVE-2025-59873HCL Software ZIE for Web session token exposure via URL Query parameters5.9CNA v3.10.3%2026-02-23
CVE-2025-41002SQL injection in Infoticketing9.3CNA v4.00.3%2026-02-23
CVE-2025-40986Reflected cross-site scripting in PideTuCita5.1CNA v4.00.4%2026-02-23Fix
CVE-2025-40701Reflected cross-site scripting (XSS) in SOTE's SOTESHOP5.1CNA v4.00.4%2026-02-23Fix
CVE-2025-14905Red Hat Directory Server 389-ds-base: 389-ds-base: Remote code execution and denial of service7.2CNA v3.11.2%2026-02-23Fix
CVE-2025-65995Apache Airflow: Disclosure of secrets to UI via kwargs6.5CISA ADP v3.10.8%2026-02-21Fix
CVE-2025-14339weMail WordPress plugin missing authorization to unauthenticated form deletion6.5CNA v3.10.3%2026-02-21Fix
CVE-2025-70833LKW199711 Smanga authentication bypass9.4CISA ADP v3.10.4%2026-02-20
CVE-2025-70831LKW199711 Smanga OS command injection9.8CISA ADP v3.10.9%2026-02-20
CVE-2025-69410Belletrist WordPress theme local file inclusion8.1CNA v3.10.5%2026-02-20
CVE-2025-69409PJ Life and Business Coaching WordPress theme local file inclusion8.1CNA v3.10.5%2026-02-20
CVE-2025-69408HealthFirst WordPress theme local file inclusion8.1CNA v3.10.5%2026-02-20Fix
CVE-2025-69407Struktur WordPress theme local file inclusion8.1CNA v3.10.5%2026-02-20
CVE-2025-69406FreightCo WordPress theme local file inclusion8.1CNA v3.10.5%2026-02-20
CVE-2025-69405Lorem Ipsum Books and Media Store WordPress theme PHP object injection9.8CNA v3.10.4%2026-02-20
CVE-2025-69404Extreme Store WordPress theme PHP object injection9.8CNA v3.10.4%2026-02-20
CVE-2025-69403Bravis Addons WordPress plugin arbitrary file upload9.9CNA v3.10.5%2026-02-20Fix
CVE-2025-69402ThemeREX R and F local file inclusion8.1CNA v3.10.6%2026-02-20
CVE-2025-69401WooODT Lite WordPress plugin Payment bypass vulnerability vulnerability7.5CNA v3.10.3%2026-02-20Fix
CVE-2025-69400Yokoo WordPress theme local file inclusion8.1CNA v3.10.5%2026-02-20
CVE-2025-69399Cobble WordPress theme local file inclusion8.1CNA v3.10.5%2026-02-20
CVE-2025-69398Plank WordPress theme local file inclusion8.1CNA v3.10.5%2026-02-20
CVE-2025-69397Tint WordPress theme local file inclusion8.1CNA v3.10.5%2026-02-20
CVE-2025-69396Splendour WordPress theme local file inclusion8.1CNA v3.10.5%2026-02-20
CVE-2025-69395Gable WordPress theme local file inclusion8.1CNA v3.10.6%2026-02-20
CVE-2025-69394Cnvrse WordPress plugin insecure direct object references (IDOR)7.5CNA v3.10.5%2026-02-20Fix
CVE-2025-69393Exzo WordPress theme broken access control7.5CNA v3.10.3%2026-02-20
CVE-2025-69392iMoney WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2026-02-20
CVE-2025-69391Diamond WordPress theme reflected cross-site scripting (XSS)7.1CNA v3.10.2%2026-02-20
CVE-2025-69390Business Template Blocks for WPBakery Page Builder WordPress plugin reflected cross-site scripting7.1CNA v3.10.2%2026-02-20
CVE-2025-69389Visitor Maps Extended Referer Field WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2026-02-20
CVE-2025-69388Cliengo Chatbot WordPress plugin broken access control6.5CNA v3.10.3%2026-02-20Fix
CVE-2025-69387Simple Retail Menus WordPress plugin local file inclusion7.5CNA v3.10.4%2026-02-20
CVE-2025-69386RVCFDI para Woocommerce WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2026-02-20
CVE-2025-69385Cartify - WooCommerce Gutenberg WordPress theme arbitrary content deletion vulnerability6.5CNA v3.10.3%2026-02-20
CVE-2025-69384Timeline Event History WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2026-02-20
CVE-2025-69383WP shop WordPress plugin local file inclusion7.5CNA v3.10.4%2026-02-20
CVE-2025-69382Themesflat Elementor WordPress plugin PHP object injection9.8CNA v3.10.4%2026-02-20
CVE-2025-69381WooCommerce Bulk Product Editor WordPress plugin broken access control7.1CNA v3.10.2%2026-02-20
CVE-2025-69380Upload Files Anywhere WordPress plugin arbitrary file download7.5CNA v3.10.4%2026-02-20
CVE-2025-69379Upload Files Anywhere WordPress plugin arbitrary file deletion8.6CNA v3.10.4%2026-02-20
CVE-2025-69378Product Filter for WooCommerce WordPress plugin privilege escalation7.2CNA v3.10.4%2026-02-20Fix
CVE-2025-69377User Extra Fields WordPress plugin arbitrary file deletion7.7CNA v3.10.5%2026-02-20
CVE-2025-69376User Extra Fields WordPress plugin arbitrary file deletion8.6CNA v3.10.5%2026-02-20Fix
CVE-2025-69375Portfolio Builder WordPress plugin local file inclusion8.1CNA v3.10.6%2026-02-20
CVE-2025-69374Eleblog Elementor Blog And Magazine Addons WordPress plugin local file inclusion8.1CNA v3.10.6%2026-02-20
CVE-2025-69373VidoRev WordPress theme local file inclusion7.5CNA v3.10.4%2026-02-20
CVE-2025-69372SevenHills WordPress theme PHP object injection9.8CNA v3.10.4%2026-02-20
CVE-2025-69371KindlyCare WordPress theme PHP object injection9.8CNA v3.10.4%2026-02-20
CVE-2025-69370Capella WordPress theme PHP object injection9.8CNA v3.10.4%2026-02-20Fix
CVE-2025-69368SOHO - Photography WordPress theme cross-site scripting (XSS)7.1CNA v3.10.2%2026-02-20
CVE-2025-69367Oyster - Photography WordPress theme cross-site scripting (XSS)7.1CNA v3.10.3%2026-02-20
CVE-2025-69366Emerce Core WordPress plugin SQL injection9.3CNA v3.10.4%2026-02-20
CVE-2025-69365Uroan Core WordPress plugin SQL injection9.3CNA v3.10.3%2026-02-20
CVE-2025-69337Wolmart Core WordPress plugin SQL injection9.3CNA v3.10.3%2026-02-20Fix
CVE-2025-69330Prestige WordPress theme reflected cross-site scripting (XSS)7.1CNA v3.10.2%2026-02-20Fix
CVE-2025-69329Prestige WordPress theme PHP object injection9.8CNA v3.10.4%2026-02-20Fix
CVE-2025-69328Booking and Rental Manager WordPress plugin PHP object injection8.8CNA v3.10.4%2026-02-20Fix
CVE-2025-69326NEX-Forms WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2026-02-20Fix
CVE-2025-69325Primer MyData for Woocommerce WordPress plugin path traversal5.3CNA v3.10.4%2026-02-20Fix
CVE-2025-69324NEX-Forms WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-02-20Fix
CVE-2025-69323Slimstat Analytics WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2026-02-20Fix
CVE-2025-69322PeakShops WordPress theme local file inclusion8.1CNA v3.10.5%2026-02-20Fix
CVE-2025-69310Woodly Core WordPress plugin SQL injection9.3CNA v3.10.3%2026-02-20
CVE-2025-69309Saasplate Core WordPress plugin SQL injection9.3CNA v3.10.3%2026-02-20
CVE-2025-69308Nestbyte Core WordPress plugin SQL injection9.3CNA v3.10.3%2026-02-20
CVE-2025-69307Medinik Core WordPress plugin SQL injection9.3CNA v3.10.3%2026-02-20
CVE-2025-69306Electio Core WordPress plugin SQL injection9.3CNA v3.10.3%2026-02-20
CVE-2025-69305Crete Core WordPress plugin SQL injection9.3CNA v3.10.4%2026-02-20
CVE-2025-69304Allmart WordPress plugin SQL injection9.3CNA v3.10.4%2026-02-20
CVE-2025-69303ModelTheme Framework WordPress plugin broken access control7.5CNA v3.10.3%2026-02-20Fix
CVE-2025-69302DesignThemes Core Features WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2026-02-20
CVE-2025-69301PhotoMe WordPress theme PHP object injection9.8CNA v3.10.4%2026-02-20
CVE-2025-69299Oxygen WordPress theme server side request forgery (SSRF)7.2CNA v3.10.2%2026-02-20
CVE-2025-69298Gauge WordPress theme broken access control7.5CNA v3.10.2%2026-02-20
CVE-2025-69297Aardvark WordPress plugin broken access control7.5CNA v3.10.2%2026-02-20
CVE-2025-69296Aardvark WordPress theme reflected cross-site scripting (XSS)7.1CNA v3.10.2%2026-02-20
CVE-2025-69295Coven Core WordPress plugin SQL injection9.3CNA v3.10.5%2026-02-20
CVE-2025-69294PeakShops WordPress theme PHP object injection8.8CNA v3.10.5%2026-02-20
CVE-2025-69063New User Approve WordPress plugin broken access control8.6CNA v3.10.3%2026-02-20Fix
CVE-2025-69011Cool Tag Cloud WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-02-20
CVE-2025-68895AhaChat Messenger Marketing WordPress plugin broken authentication6.5CNA v3.10.4%2026-02-20
CVE-2025-68880Simple Archive Generator WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2026-02-20
CVE-2025-68863iContact for Gravity Forms WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2026-02-20
CVE-2025-68862Woo File Dropzone WordPress plugin arbitrary file deletion7.7CNA v3.10.4%2026-02-20
CVE-2025-68856Mopinion Feedback Form WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2026-02-20
CVE-2025-68855JobBoard Job listing WordPress plugin sensitive data exposure5.9CISA ADP v3.10.3%2026-02-20
CVE-2025-68854ID Arrays WordPress plugin POST-based reflected cross-site scripting (XSS)7.1CNA v3.10.2%2026-02-20
CVE-2025-68853Contact Manager WordPress plugin PHP object injection8.8CNA v3.10.4%2026-02-20
CVE-2025-68852Court Reservation WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-02-20
CVE-2025-68848amr cron manager WordPress plugin Reflecte dCross site scripting (XSS)7.1CNA v3.10.2%2026-02-20
CVE-2025-68847iSape WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2026-02-20
CVE-2025-68846Asynchronous Javascript WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2026-02-20
CVE-2025-68845eDS Responsive Menu WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2026-02-20
CVE-2025-68844Membee Login WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-02-20Fix
CVE-2025-68843FeedWordPress Advanced Filters WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2026-02-20
CVE-2025-68842Widget Logic Visual WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2026-02-20
CVE-2025-68841TopperPack Complete Elementor Addons, theme and CPT Builder WordPress plugin local file inclusion7.5CNA v3.10.4%2026-02-20Fix
CVE-2025-68837ELEX WordPress HelpDesk and Customer Ticketing System plugin broken access control6.5CNA v3.10.3%2026-02-20Fix
CVE-2025-68834Sync Master Sheet WordPress plugin Saiful Islam missing authorization7.5CNA v3.10.3%2026-02-20Fix
CVE-2025-68564Sendy WordPress plugin broken access control6.5CNA v3.10.2%2026-02-20Fix
CVE-2025-68552WooCommerce Coming Soon Product with Countdown WordPress plugin local file inclusion7.5CNA v3.10.5%2026-02-20Fix
CVE-2025-68549Wiguard WordPress theme arbitrary file upload9.9CNA v3.10.5%2026-02-20Fix
CVE-2025-68545Nika WordPress theme local file inclusion8.1CNA v3.10.5%2026-02-20Fix
CVE-2025-68543Diza WordPress theme local file inclusion8.1CNA v3.10.6%2026-02-20Fix
CVE-2025-68542Checkout Gateway for IRIS WordPress plugin broken access control6.5CNA v3.10.3%2026-02-20Fix
CVE-2025-68541Ippsum WordPress theme PHP object injection9.8CNA v3.10.4%2026-02-20Fix
CVE-2025-68539Fana WordPress theme local file inclusion8.1CNA v3.10.5%2026-02-20Fix
CVE-2025-68536Zota WordPress theme local file inclusion8.1CNA v3.10.5%2026-02-20Fix
CVE-2025-68534PDF for WPForms WordPress plugin broken access control6.5CNA v3.10.3%2026-02-20Fix
CVE-2025-68531ModelTheme Addons for WPBakery and Elementor WordPress plugin PHP object injection8.8CNA v3.10.4%2026-02-20Fix
CVE-2025-68526Modal Popup Box WordPress plugin PHP object injection8.8CNA v3.10.5%2026-02-20Fix
CVE-2025-68514Paid Member Subscriptions WordPress plugin insecure direct object references (IDOR)6.5CISA ADP v3.10.4%2026-02-20Fix
CVE-2025-68501Mollie Payments for WooCommerce WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2026-02-20Fix
CVE-2025-68495JetEngine WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2026-02-20Fix
CVE-2025-68069Directorist WordPress plugin broken access control7.1CNA v3.10.3%2026-02-20Fix
CVE-2025-68051Shiprocket WordPress plugin insecure direct object references (IDOR)7.5CNA v3.10.3%2026-02-20
CVE-2025-68050Leadpages WordPress plugin broken access control6.5CNA v3.10.2%2026-02-20Fix
CVE-2025-68048NextMove Lite WordPress plugin broken access control7.5CNA v3.10.3%2026-02-20Fix
CVE-2025-68043LottieFiles WordPress plugin broken access control7.3CNA v3.10.6%2026-02-20NucleiFix
CVE-2025-68042Travelpayouts WordPress plugin broken access control6.5CNA v3.10.2%2026-02-20Fix
CVE-2025-68037Export Media URLs WordPress plugin reflected cross-site scripting (XSS)7.1CISA ADP v3.10.3%2026-02-20Fix
CVE-2025-68032Advanced WC Analytics WordPress plugin settings Change vulnerability6.5CNA v3.10.3%2026-02-20Fix
CVE-2025-68031افزونه پیامک حرفه ای فراز اس ام اس WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2026-02-20
CVE-2025-68028GA4WP: Google Analytics for WordPress plugin broken access control6.5CNA v3.10.3%2026-02-20Fix
CVE-2025-68026LC Wizard WordPress plugin settings Change vulnerability6.5CNA v3.10.3%2026-02-20Fix
CVE-2025-68025Addonify Floating Cart For WooCommerce WordPress plugin broken access control6.5CNA v3.10.3%2026-02-20
CVE-2025-68024Addonify WooCommerce Wishlist WordPress plugin settings Change vulnerability6.5CNA v3.10.3%2026-02-20Fix
CVE-2025-68023Addonify Compare Products For WooCommerce WordPress plugin settings Change vulnerability6.5CNA v3.10.3%2026-02-20Fix
CVE-2025-68022Plugin BlueX for WooCommerce WordPress plugin broken access control7.3CNA v3.10.3%2026-02-20
CVE-2025-68021ConveyThis WordPress plugin broken access control6.5CNA v3.10.3%2026-02-20Fix
CVE-2025-68005Easy Hotel Booking WordPress plugin broken access control6.5CNA v3.10.3%2026-02-20
CVE-2025-68002Open User Map WordPress plugin arbitrary file download6.5CNA v3.10.3%2026-02-20Fix
CVE-2025-68000Testimonial Slider WordPress plugin broken access control6.5CNA v3.10.3%2026-02-20
CVE-2025-67998Miraculous Elementor WordPress plugin broken authentication8.8CNA v3.10.4%2026-02-20Fix
CVE-2025-67997Travelicious WordPress theme PHP object injection9.8CNA v3.10.4%2026-02-20Fix
CVE-2025-67996Nestin WordPress theme PHP object injection9.8CNA v3.10.4%2026-02-20Fix
CVE-2025-67995PatioTime WordPress theme PHP object injection9.8CNA v3.10.5%2026-02-20Fix
CVE-2025-67994YayCurrency WordPress plugin arbitrary content deletion vulnerability7.5CNA v3.10.3%2026-02-20Fix
CVE-2025-67993Atarim WordPress plugin broken access control6.5CNA v3.10.3%2026-02-20Fix
CVE-2025-67992PatioTime WordPress theme local file inclusion8.1CNA v3.10.5%2026-02-20Fix
CVE-2025-67991User Extra Fields WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-02-20Fix
CVE-2025-67990GMap Targeting WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-02-20Fix
CVE-2025-67988CozyStay WordPress theme local file inclusion8.1CNA v3.10.6%2026-02-20Fix
CVE-2025-67987Quiz And Survey Master WordPress plugin SQL injection8.5CNA v3.10.3%2026-02-20Fix
CVE-2025-67984NPS computy WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-02-20Fix
CVE-2025-67982Urna WordPress theme local file inclusion8.1CNA v3.10.6%2026-02-20Fix
CVE-2025-67981Besa WordPress theme local file inclusion8.1CNA v3.10.6%2026-02-20Fix
CVE-2025-67980Hara WordPress theme local file inclusion8.1CNA v3.10.6%2026-02-20Fix
CVE-2025-67979WPForms Google Sheet Connector WordPress plugin remote code execution (RCE)9.9CNA v3.10.4%2026-02-20Fix
CVE-2025-67978Educare WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-02-20Fix
CVE-2025-67977HAPPY WordPress plugin broken access control8.2CNA v3.10.3%2026-02-20Fix
CVE-2025-67975aDirectory WordPress plugin broken access control6.5CNA v3.10.3%2026-02-20Fix
CVE-2025-67974WPLegalPages WordPress plugin broken access control7.5CNA v3.10.3%2026-02-20Fix
CVE-2025-67973Sunshine Photo Cart WordPress plugin broken access control6.5CNA v3.10.2%2026-02-20Fix
CVE-2025-67972Zoho ZeptoMail WordPress plugin broken access control4.3CNA v3.10.3%2026-02-20Fix
CVE-2025-67971FluentCart WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-02-20Fix
CVE-2025-67970Schedula WordPress plugin broken access control5.9CNA v3.10.3%2026-02-20Fix
CVE-2025-67969UPI QR Code Payment Gateway for WooCommerce WordPress plugin broken access control6.5CISA ADP v3.10.3%2026-02-20Fix
CVE-2025-67624Optimize More! Images WordPress plugin broken access control6.5CNA v3.10.3%2026-02-20
CVE-2025-67547Konte WordPress theme broken access control6.5CNA v3.10.3%2026-02-20Fix
CVE-2025-67438Sync-in Server has a stored cross-site scripting (XSS)6.1CISA ADP v3.10.3%2026-02-20Fix
CVE-2025-62326HCL Digital Experience is susceptible to stored cross-site scripting (XSS)6.1CNA v3.10.2%2026-02-20Fix
CVE-2025-60183Silencesoft RSS Reader WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2026-02-20
CVE-2025-60087Extensive VC Addons for WPBakery page builder WordPress plugin local file inclusion8.1CNA v3.10.6%2026-02-20
CVE-2025-59819Zenitel alphacom_xe_audio_server authenticated arbitrary file read via filepath parameter6.5CNA v3.10.4%2026-02-20Fix
CVE-2025-53237WP Wizard Cloak WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-02-20
CVE-2025-53233Storyform WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-02-20
CVE-2025-53231Easy Taxonomy Images WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-02-20
CVE-2025-53228bbpress Simple Advert Units WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-02-20
CVE-2025-53217AIO WP Builder WordPress plugin broken access control7.6CNA v3.10.2%2026-02-20
CVE-2025-52744Inpersttion For WordPress plugin arbitrary code execution7.7CNA v3.10.3%2026-02-20
CVE-2025-52603HCL Connections is vulnerable to information disclosure3.5CNA v3.10.3%2026-02-20Fix
CVE-2025-30416Acronis Cyber Protect 16 missing authorization10.0CNA v3.00.5%2026-02-20Fix
CVE-2025-30412Acronis Cyber Protect 16 weak authentication10.0CNA v3.00.7%2026-02-20Fix
CVE-2025-30411Acronis Cyber Protect 16 weak authentication10.0CNA v3.00.8%2026-02-20Fix
CVE-2025-30410Acronis Cyber Protect Cloud Agent missing authentication9.8CNA v3.00.7%2026-02-20Fix
CVE-2025-15583detronetdip E-commerce function.php get_safe_value cross-site scripting5.4v3.10.2%2026-02-20
CVE-2025-15582detronetdip E-commerce Product Management Update authorization8.1v3.10.4%2026-02-20
CVE-2025-14547Simplicity SDK and Gecko SDK EC-JPAKE PSA Crypto API integer underflow2.3CNA v4.00.3%2026-02-20Fix
CVE-2025-14055silabs.com Simplicity SDK, Gecko SDK integer underflow in Secure NCP host2.4CNA v4.00.2%2026-02-20Fix
CVE-2025-10970SQLi in Kolay Software's Talentics9.8CNA v3.10.3%2026-02-20
CVE-2025-71244SPIP open redirect via Login form5.1CNA v4.00.2%2026-02-19Fix
CVE-2025-71243SPIP Saisies plugin remote code execution9.3CNA v4.05.1%2026-02-19Reported exploitedNucleiMetasploitExploit codeFix
CVE-2025-71242SPIP authorization bypass leading to Content Disclosure6.5v3.10.3%2026-02-19Fix
CVE-2025-71241SPIP cross-site scripting in Private Area6.1v3.10.2%2026-02-19Fix
CVE-2025-71240SPIP cross-site scripting via Code Tags4.8CNA v4.00.2%2026-02-19Fix
CVE-2025-69725Chi has an open redirect vulnerability in the RedirectSlashes middleware4.7CNA v3.10.2%2026-02-19Fix
CVE-2025-69674CDATA FD614GS3-R850 V3.2.7_P161006 buffer overflow6.4CISA ADP v3.10.2%2026-02-19
CVE-2025-67305CommScope Ruckus Network Director hard-coded cryptographic key9.8CISA ADP v3.10.5%2026-02-19Fix
CVE-2025-67304CommScope Ruckus Network Director hard-coded credentials9.8CISA ADP v3.10.5%2026-02-19Fix
CVE-2025-55853Softvision Webpdf server-side request forgery9.1CISA ADP v3.10.4%2026-02-19Exploit code
CVE-2025-41023Authentication bypass in AutoGPT de Thesamur6.9CNA v4.00.5%2026-02-19
CVE-2025-40697Reflected cross-site scripting (XSS) in Lewe WebMeasure5.1CNA v4.00.4%2026-02-19
CVE-2025-15586OpenGamePanel OGP-Website improper authentication10.0CNA v4.00.5%2026-02-19
CVE-2025-15585Adobe Fileflows SQL injection6.7CNA v4.00.2%2026-02-19Fix
CVE-2025-15563Broken access control results in denial of service in NesterSoft WorkTime5.3CISA ADP v3.10.3%2026-02-19
CVE-2025-15562Reflected cross-site scripting in NesterSoft WorkTime6.1CISA ADP v3.10.2%2026-02-19
CVE-2025-15561Local privilege escalation in NesterSoft WorkTime7.8CISA ADP v3.10.1%2026-02-19
CVE-2025-15560SQL injection in NesterSoft WorkTime8.8CISA ADP v3.10.3%2026-02-19
CVE-2025-15559Unauthenticated OS command injection in NesterSoft WorkTime9.8CISA ADP v3.10.5%2026-02-19
CVE-2025-15041BackWPup WordPress plugin privilege escalation7.2CNA v3.10.4%2026-02-19Fix
CVE-2025-14983Advanced Custom Fields: Font Awesome WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-02-19Fix
CVE-2025-14864Virusdie WordPress plugin missing authorization to authenticated (Subscriber+) API key disclosure4.3CNA v3.10.3%2026-02-19Fix
CVE-2025-14851YaMaps for WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-02-19Fix
CVE-2025-14452WP Customer Reviews WordPress plugin reflected cross-site scripting via wpcr3_fname parameter7.2CNA v3.10.3%2026-02-19Fix
CVE-2025-14445Image Hotspot by DevVN WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-02-19Fix
CVE-2025-14427Shield Security: Blocks Bots WordPress plugin unauthorized access4.3CNA v3.10.2%2026-02-19Fix
CVE-2025-14357Mega Store Woocommerce WordPress theme unauthorized access5.3CNA v3.10.2%2026-02-19
CVE-2025-14342SEO Plugin by Squirrly SEO WordPress plugin unauthorized access4.3CNA v3.10.3%2026-02-19Fix
CVE-2025-14294Razorpay for WooCommerce WordPress plugin unauthorized access5.3CNA v3.10.4%2026-02-19Fix
CVE-2025-14270OneClick Chat to Order WordPress plugin missing authorization authenticated plugin settings update2.7CNA v3.10.3%2026-02-19Fix
CVE-2025-14167akshayshah5189 Remove Post Type Slug settings update cross-site request forgery4.3CNA v3.10.2%2026-02-19
CVE-2025-14076iXML Google XML sitemap generator WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2026-02-19
CVE-2025-13930Checkout Field Manager (Checkout Manager) for WooCommerce WordPress plugin authorization bypass5.3CNA v3.10.4%2026-02-19Fix
CVE-2025-13864Breeze WordPress Cache plugin missing authorization to Cache deletion5.3CNA v3.10.4%2026-02-19Fix
CVE-2025-13851Buyent Theme (with Buyent Classified Plugin) WordPress theme unauthenticated privilege escalation9.8CNA v3.10.3%2026-02-19
CVE-2025-13842Breadcrumb NavXT WordPress plugin missing authorization to sensitive information exposure5.3CNA v3.10.3%2026-02-19Fix
CVE-2025-13738Easy Table of Contents WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2026-02-19Fix
CVE-2025-13732s2Member WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode6.4CNA v3.10.3%2026-02-19Fix
CVE-2025-13672Reflected cross-site scripting discovered in OpenText WSM Management Server7.0CNA v4.00.2%2026-02-19Fix
CVE-2025-13671Cross-site request forgery vulnerability discovered in OpenText WSM Management Server5.9CNA v4.00.2%2026-02-19Fix
CVE-2025-13617Apollo13 Framework Extension WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-02-19Fix
CVE-2025-13612Album and Image Gallery Plus Lightbox WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-02-19Fix
CVE-2025-13603WP AUDIO GALLERY WordPress plugin arbitrary file read8.8CNA v3.10.4%2026-02-19
CVE-2025-13590Authenticated arbitrary file upload via a System REST API requiring administrator permission9.1CNA v3.10.7%2026-02-19Fix
CVE-2025-13587Two Factor (2FA) Authentication via Email WordPress plugin Two-Factor authentication bypass6.5CNA v3.10.4%2026-02-19Fix
CVE-2025-13563Lizza LMS Pro WordPress plugin unauthenticated privilege escalation9.8CNA v3.10.4%2026-02-19Fix
CVE-2025-13438Page Title, Description and Open Graph Updater WordPress plugin cross-site request forgery4.3CNA v3.10.2%2026-02-19
CVE-2025-13413Country Blocker for AdSense WordPress plugin cross-site request forgery to settings update4.3CNA v3.10.2%2026-02-19
CVE-2025-13113Web Accessibility by accessiBe WordPress plugin unauthenticated sensitive information exposure5.3CNA v3.10.3%2026-02-19Fix
CVE-2025-13091Shopire WordPress theme missing authorization to authenticated (Subscriber+) limited plugin Install4.3CNA v3.10.3%2026-02-19Fix
CVE-2025-13079Popup Builder WordPress plugin authorization bypass5.3CNA v3.10.4%2026-02-19Fix
CVE-2025-13048Official StatCounter WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-02-19Fix
CVE-2025-12975CTX Feed plugin installation function missing authorization7.2CNA v3.10.9%2026-02-19Fix
CVE-2025-12884Advanced Ads WordPress plugin authorization bypass4.3CNA v3.10.3%2026-02-19Fix
CVE-2025-12882Clasifico Listing WordPress plugin unauthenticated privilege escalation9.8CNA v3.10.4%2026-02-19
CVE-2025-12845Tablesome Table WordPress plugin unauthorized access8.8CNA v3.10.4%2026-02-19Fix
CVE-2025-12821NewsBlogger WordPress theme cross-site request forgery8.8CNA v3.10.3%2026-02-19Fix
CVE-2025-12707Library Management System WordPress plugin unauthenticated SQL injection7.5CNA v3.10.5%2026-02-19Fix
CVE-2025-12500Checkout Field Manager for WooCommerce WordPress plugin unauthenticated limited file upload5.3CNA v3.10.3%2026-02-19Fix
CVE-2025-12451Easy SVG Support WordPress plugin stored cross-site scripting4.4CNA v3.10.2%2026-02-19Fix
CVE-2025-12448Smartsupp live chat, AI shopping assistant and chatbots WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-02-19Fix
CVE-2025-12375Printful Integration for WooCommerce WordPress plugin server-side request forgery6.4CNA v3.10.3%2026-02-19Fix
CVE-2025-12172Mailchimp List Subscribe Form WordPress plugin cross-site request forgery to Mailchimp List Change4.3CNA v3.10.1%2026-02-19Fix
CVE-2025-12117Renden WordPress theme authenticated (Contributor+) stored cross-site scripting via post Title6.4CNA v3.10.2%2026-02-19
CVE-2025-12116Drift WordPress theme authenticated (Contributor+) stored cross-site scripting via post Title6.4CNA v3.10.3%2026-02-19
CVE-2025-12107WSO2 Identity Server Velocity template engine template injection8.4CNA v3.10.6%2026-02-19Fix
CVE-2025-12081ACF Photo Gallery Field WordPress plugin unauthorized access4.3CNA v3.10.3%2026-02-19Fix
CVE-2025-12027Mesmerize Companion WordPress plugin missing authorization authenticated settings update4.3CNA v3.10.3%2026-02-19Fix
CVE-2025-11754GDPR Cookie Consent WordPress plugin unauthorized access7.5CNA v3.10.4%2026-02-19Fix
CVE-2025-11725Aruba HiSpeed Cache WordPress plugin unauthorized access6.5CNA v3.10.3%2026-02-19Fix
CVE-2025-11706Aruba HiSpeed Cache WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2026-02-19Fix
CVE-2025-9953SQLi in Database Software's Databank Accreditation Software9.8CNA v3.10.4%2026-02-19Fix
CVE-2025-9208Stored-XSS vulnerability discovered in OpenText WSM Management Server7.5CNA v4.00.2%2026-02-19Fix
CVE-2025-9062IDOR in MeCODE Informatics' Envanty7.3CNA v3.10.2%2026-02-19Fix
CVE-2025-8350Authentication bypass with Redirect in BiEticaret Software's BiEticaret CMS9.8CNA v3.10.6%2026-02-19
CVE-2025-8055SSRF vulnerability have been discovered in OpenText™ XM Fax5.3CNA v4.00.2%2026-02-19Fix
CVE-2025-8054Path traversal vulnerability have been discovered in OpenText™ XM Fax7.1CNA v4.00.3%2026-02-19Fix
CVE-2025-4960Epson Printer Controller Installer InstallNavi helper XPC service privilege escalation7.8CNA v3.10.1%2026-02-19
CVE-2025-4521IDonate - missing authorization to Authenticated account takeover/privilege escalation8.8CNA v3.10.3%2026-02-19Fix
CVE-2025-71237Linux kernel nilfs2 FITRIM denial of service5.5v3.10.1%2026-02-18Fix
CVE-2025-71236Linux kernel qla2xxx crash7.5CNA v3.10.3%2026-02-18Fix
CVE-2025-71235Linux kernel qla2xxx crash5.5NVD v3.10.1%2026-02-18Fix
CVE-2025-71234Linux kernel rtl8xxxu Wi-Fi driver out-of-bounds write8.8CNA v3.10.2%2026-02-18Fix
CVE-2025-71233Linux kernel PCI endpoint configfs null pointer dereference5.5v3.10.1%2026-02-18Fix
CVE-2025-71232Linux kernel qla2xxx crash5.5NVD v3.10.1%2026-02-18Fix
CVE-2025-71231Linux kernel IAA compression driver out-of-bounds read7.1v3.10.1%2026-02-18Fix
CVE-2025-71230Linux kernel HFS mount vulnerability5.5v3.10.1%2026-02-18Fix
CVE-2025-71229Linux kernel rtw88 Wi-Fi driver denial of service5.5v3.10.1%2026-02-18Fix
CVE-2025-71227Linux kernel mac80211 channel validation vulnerability5.5NVD v3.10.1%2026-02-18Fix
CVE-2025-71225Linux kernel MD RAID1 reshape race condition5.3NVD v3.10.1%2026-02-18Fix
CVE-2025-70998UTT 810 insecure default initialization9.8CISA ADP v3.10.4%2026-02-18
CVE-2025-70152Fabian Scholars Tracking System SQL injection9.8CNA v3.10.4%2026-02-18
CVE-2025-70151Fabian Scholars Tracking System unrestricted file upload8.8CISA ADP v3.10.7%2026-02-18
CVE-2025-70150CodeAstro Membership Management System missing authorization9.8CNA v3.10.7%2026-02-18
CVE-2025-70149CodeAstro Membership Management System SQL injection9.8CISA ADP v3.10.4%2026-02-18Exploit code
CVE-2025-70148CodeAstro Membership Management System print_membership_card.php missing authentication7.5CNA v3.10.4%2026-02-18
CVE-2025-70147Projectworlds Online Time Table Generator missing authentication7.5CISA ADP v3.10.5%2026-02-18
CVE-2025-70146Projectworlds Online Time Table Generator missing authentication9.1CISA ADP v3.10.6%2026-02-18
CVE-2025-70141oretnom23 Customer Support System missing authentication9.4CISA ADP v3.10.7%2026-02-18
CVE-2025-70064PHPGurukul Hospital Management System privilege escalation8.8CISA ADP v3.10.5%2026-02-18
CVE-2025-70063PHPGurukul Hospital Management System insecure direct object reference6.5CISA ADP v3.10.3%2026-02-18
CVE-2025-70062PHPGurukul Hospital Management System cross-site request forgery6.5CISA ADP v3.10.2%2026-02-18
CVE-2025-69287bsv-blockchain ts-sdk authentication bypass5.4CNA v3.10.3%2026-02-18Fix
CVE-2025-65791zoneminder OS command injection9.8CISA ADP v3.11.7%2026-02-18Exploit code
CVE-2025-65519mayswind ezBookkeeping uncontrolled recursion6.5CISA ADP v3.10.3%2026-02-18
CVE-2025-61982OpenCFD OpenFOAM Code Stream directive functionality arbitrary code execution7.8CNA v3.10.2%2026-02-18
CVE-2025-60038Bosch Rexroth IndraWorks deserialization of untrusted data7.8CNA v3.10.3%2026-02-18Fix
CVE-2025-60037Bosch Rexroth IndraWorks deserialization of untrusted data7.8CNA v3.10.3%2026-02-18Fix
CVE-2025-60036Bosch Rexroth IndraWorks deserialization of untrusted data7.8CNA v3.10.4%2026-02-18Fix
CVE-2025-60035Bosch Rexroth IndraWorks deserialization of untrusted data7.8CNA v3.10.4%2026-02-18Fix
CVE-2025-59920SQL injection in time@work from systems@work8.6CNA v4.00.3%2026-02-18Fix
CVE-2025-33253NVIDIA NeMo Framework Deserializes Untrusted Data7.8CNA v3.10.2%2026-02-18Fix
CVE-2025-33252NVIDIA NeMo Framework deserialization of untrusted data7.8CNA v3.10.2%2026-02-18Fix
CVE-2025-33251NVIDIA NeMo Framework code injection7.8CNA v3.10.2%2026-02-18Fix
CVE-2025-33250NVIDIA NeMo Framework code injection7.8CNA v3.10.2%2026-02-18Fix
CVE-2025-33249NVIDIA NeMo Framework command injection7.8CNA v3.10.2%2026-02-18Fix
CVE-2025-33246NVIDIA NeMo Framework command injection7.8CNA v3.11.0%2026-02-18Fix
CVE-2025-33245NVIDIA NeMo Framework deserialization of untrusted data8.0CNA v3.10.5%2026-02-18Fix
CVE-2025-33243NVIDIA NeMo Framework deserialization of untrusted data7.8CNA v3.10.2%2026-02-18Fix
CVE-2025-33241NVIDIA NeMo Framework deserialization of untrusted data7.8CNA v3.10.2%2026-02-18Fix
CVE-2025-33240NVIDIA Megatron Bridge code injection7.8CNA v3.10.2%2026-02-18Fix
CVE-2025-33239NVIDIA Megatron Bridge code injection7.8CNA v3.10.2%2026-02-18Fix
CVE-2025-33236NVIDIA NeMo Framework code injection7.8CNA v3.10.2%2026-02-18Fix
CVE-2025-15581orthanc-server orthanc improper authentication4.7CNA v4.00.5%2026-02-18Fix
CVE-2025-15579An insecure deserialization vulnerability has been discovered in OpenText™ Directory Services9.5CNA v4.00.3%2026-02-18Fix
CVE-2025-14876Red Hat Enterprise Linux 10 qemu-kvm: Unbounded allocation in virtio-crypto5.5CNA v3.10.1%2026-02-18Fix
CVE-2025-14799Brevo - Email, SMS, Web Push, Chat, and more. WordPress plugin unauthenticated authorization bypass6.5CNA v3.10.5%2026-02-18Fix
CVE-2025-14444metagauss RegistrationMagic PayPal payment processor insufficient verification of data authenticity5.3CNA v3.10.2%2026-02-18Fix
CVE-2025-14340Payara Platform Payara Server admin account takeover via malicious URL payload7.3CNA v4.01.0%2026-02-18NucleiExploit code
CVE-2025-14009Zip Slip vulnerability in nltk/nltk leading to remote code execution10.0CNA v3.00.9%2026-02-18Fix
CVE-2025-13959Filestack WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-02-18
CVE-2025-13727Video Share VOD WordPress plugin stored cross-site scripting4.4CNA v3.10.3%2026-02-18Fix
CVE-2025-12812Cloud Suite and privilege access service SQL injection5.3CNA v4.00.3%2026-02-18
CVE-2025-12811Cloud Suite and Privilege Access Service- HTTP request smuggling6.9CNA v4.00.3%2026-02-18
CVE-2025-12356Tickera WordPress plugin unauthorized access4.3CNA v3.10.2%2026-02-18Fix
CVE-2025-12343FFmpeg: Double free vulnerability in FFmpeg tensorflow dnn backend5.5NVD v3.10.2%2026-02-18Fix
CVE-2025-12122Popup Box Easily Create WordPress Popups plugin stored cross-site scripting6.4CNA v3.10.2%2026-02-18Fix
CVE-2025-12075Order Splitter for WooCommerce WordPress plugin unauthorized access4.3CNA v3.10.2%2026-02-18Fix
CVE-2025-12074Context Blog WordPress theme unauthenticated Private post disclosure5.3CNA v3.10.3%2026-02-18Fix
CVE-2025-12071Frontend User Notes WordPress plugin insecure direct object reference4.3CNA v3.10.2%2026-02-18Fix
CVE-2025-12037WP 404 Auto Redirect WordPress plugin authenticated (Admin+) stored cross-site scripting4.4CNA v3.10.2%2026-02-18Fix
CVE-2025-11737VK All in One Expansion Unit WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-02-18Fix
CVE-2025-11185Complianz GDPR/CCPA Cookie Consent WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-02-18Fix
CVE-2025-10256FFmpeg: Null pointer dereference in firequalizer filter (libavfilter/af_firequalizer.c)5.5NVD v3.10.3%2026-02-18Fix
CVE-2025-8860QEMU UEFI variable device information disclosure3.3CNA v3.10.2%2026-02-18Fix
CVE-2025-8781Bookster WordPress Appointment Booking plugin authenticated (Administrator+) SQL injection via raw4.9CNA v3.10.4%2026-02-18Fix
CVE-2025-8308Reflected XSS in Key Software's INFOREX6.3CNA v3.10.2%2026-02-18
CVE-2025-7630OTP Password Brute Forcing in DorukNet's Wispotter5.3CNA v3.10.2%2026-02-18Fix
CVE-2025-6460Display During Conditional Shortcode WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-02-18Fix
CVE-2025-1272Fedora Linux kernel: Secure boot does not automatically enable kernel lockdown7.7CNA v3.10.2%2026-02-18Fix
CVE-2025-0577Red Hat Enterprise Linux 10 glibc: Vdso getrandom acceleration may return predictable randomness4.8CNA v3.10.3%2026-02-18
CVE-2025-70846lty628 aidigu password add field cross-site scripting7.1CISA ADP v3.10.2%2026-02-17
CVE-2025-70830Datart Freemarker template engine code injection9.9CISA ADP v3.11.0%2026-02-17Exploit code
CVE-2025-70829running-elephant Datart information disclosure5.7CISA ADP v3.10.5%2026-02-17Exploit code
CVE-2025-70828running-elephant Datart OS command injection8.8CISA ADP v3.10.5%2026-02-17Exploit code
CVE-2025-70397jizhiCMS SQL injection7.2CISA ADP v3.10.3%2026-02-17
CVE-2025-67905Malwarebytes AdwCleaner log file deletion routine privilege escalation8.7CISA ADP v3.10.1%2026-02-17
CVE-2025-67102Jorani alldayoffs feature SQL injection7.6CISA ADP v3.10.2%2026-02-17
CVE-2025-66614Apache Tomcat: Client certificate verification bypass due to virtual host mapping9.1v3.10.2%2026-02-17Fix
CVE-2025-65753Guardian Gryphon TLS certification mechanism improper certificate validation7.5CISA ADP v3.10.4%2026-02-17Exploit code
CVE-2025-62183Adobe Pega Platform stored cross-site scripting4.8CNA v4.00.3%2026-02-17Fix
CVE-2025-59793Rocket Software Trufusion Enterprise path traversal9.4CISA ADP v4.01.1%2026-02-17KCV
CVE-2025-36598Dell Avamar Virtual Edition path traversal6.5CNA v3.10.3%2026-02-17Fix
CVE-2025-36597Dell Avamar Server path traversal4.7CNA v3.10.3%2026-02-17Fix
CVE-2025-36425IBM Db2 information disclosure5.3CNA v3.10.2%2026-02-17Fix
CVE-2025-36379IBM Security QRadar EDR ReaQta vulnerability5.9CNA v3.10.1%2026-02-17Fix
CVE-2025-36377IBM Security QRadar EDR session management vulnerability6.3CNA v3.10.2%2026-02-17Fix
CVE-2025-36376IBM Security QRadar EDR session management vulnerability6.3CNA v3.10.2%2026-02-17Fix
CVE-2025-36348IBM Sterling B2B Integrator and Sterling File Gateway dashboard information disclosure4.9CNA v3.10.3%2026-02-17Fix
CVE-2025-36247IBM Db2 XML external entity Reference7.1CNA v3.10.3%2026-02-17Fix
CVE-2025-36243IBM Concert server-side request forgery5.4CNA v3.10.1%2026-02-17Fix
CVE-2025-36183IBM watsonx.data Lakehouse unrestricted file upload3.8CNA v3.10.2%2026-02-17Fix
CVE-2025-36019IBM Concert Z hub framework cross-site scripting6.1CNA v3.10.2%2026-02-17Fix
CVE-2025-36018IBM Concert Z hub cross-site request forgery6.5CNA v3.10.1%2026-02-17Fix
CVE-2025-33135IBM Financial Transaction Manager for ACH Services and Check Services for Multi-Platform 3.0.0.0 through 3.0.5.4 Interim Fix 027 IBM Financial Transaction Manager for Check Services v3 (Multiplatforms) is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to em6.1CNA v3.10.2%2026-02-17Fix
CVE-2025-33130IBM DB2 Merge Backup buffer overflow6.5CNA v3.10.2%2026-02-17Fix
CVE-2025-33124IBM DB2 Merge Backup denial of service6.5CNA v3.10.2%2026-02-17Fix
CVE-2025-33101IBM Concert information disclosure5.9CNA v3.10.2%2026-02-17Fix
CVE-2025-33089IBM Concert hard-coded credentials6.5CNA v3.10.2%2026-02-17Fix
CVE-2025-33088IBM Concert file permissions privilege escalation7.4CNA v3.10.1%2026-02-17Fix
CVE-2025-32355Rocket Software Trufusion Enterprise server-side request forgery7.9CISA ADP v4.01.2%2026-02-17Reported exploitedNucleiKCV
CVE-2025-27904Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows6.5CNA v3.10.1%2026-02-17Fix
CVE-2025-27903Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows5.9CNA v3.10.1%2026-02-17Fix
CVE-2025-27901Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows6.5CNA v3.10.2%2026-02-17Fix
CVE-2025-27900Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows6.8CNA v3.10.1%2026-02-17Fix
CVE-2025-27899Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows5.3CNA v3.10.2%2026-02-17Fix
CVE-2025-27898Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows6.3CNA v3.10.2%2026-02-17Fix
CVE-2025-14689IBM Db2 denial of service6.5CNA v3.10.2%2026-02-17Fix
CVE-2025-14289IBM webMethods Integration Server is vulnerable to HTML injection5.4CNA v3.10.2%2026-02-17Fix
CVE-2025-13867IBM Db2 denial of service6.5CNA v3.10.2%2026-02-17Fix
CVE-2025-13691IBM DataStage on Cloud Pak for Data HTTP responses information disclosure8.1CNA v3.10.3%2026-02-17Fix
CVE-2025-13689IBM DataStage on Cloud Pak for Data unrestricted file upload8.8CNA v3.10.6%2026-02-17Fix
CVE-2025-13333IBM WebSphere Application Server could provide weaker than expected security4.4CNA v3.10.3%2026-02-17Fix
CVE-2025-13108IBM DB2 Merge Backup information disclosure5.5CNA v3.10.2%2026-02-17Fix
CVE-2025-12755IBM MQ Operator log injection4.0CNA v3.10.1%2026-02-17Fix
CVE-2025-12062WP Maps WordPress plugin authenticated (Subscriber+) limited local file inclusion8.8CNA v3.10.8%2026-02-17Fix
CVE-2025-8303XSS in EKA Software's Real Estate Script V5 (with Doping Module Store Module New Language System)6.5CNA v3.10.3%2026-02-17
CVE-2025-7706Improper access control in TUBITAK BILGEM's Liderahenk6.1CNA v3.10.3%2026-02-17Fix
CVE-2025-7631Time-based blind SQLi in Tumeva Internet Technologies' Tumeva Prime News Software8.6CNA v3.10.3%2026-02-17Fix
CVE-2025-65717Ritwickdey Live Server open redirect4.3CISA ADP v3.10.6%2026-02-16Exploit code
CVE-2025-65716shd101wyy Markdown Preview Enhanced code injection8.8CISA ADP v3.10.7%2026-02-16
CVE-2025-65715Formulahendry Coderunner code injection7.8CISA ADP v3.10.3%2026-02-16
CVE-2025-59905Reflected cross-site scripting (XSS) in Kubysoft6.1v3.10.1%2026-02-16
CVE-2025-59904Stored cross-site scripting vulnerability in Kubysoft5.4v3.10.1%2026-02-16Fix
CVE-2025-59903Stored cross-site scripting (XSS) in Kubysoft5.4v3.10.1%2026-02-16Fix
CVE-2025-15578Maypole versions from for Perl generates session ids insecurely9.8CISA ADP v3.10.3%2026-02-16
CVE-2025-14573Mattermost Team Admin Bypass of Invite Permissions via allow_open_invite field3.8CNA v3.10.2%2026-02-16Fix
CVE-2025-14350Mattermost information disclosure via channel mentions in posts4.3CNA v3.10.2%2026-02-16Fix
CVE-2025-13821Mattermost user profile update exposes password hash and MFA secrets5.7CNA v3.10.2%2026-02-16Fix
CVE-2025-2418Open redirect in TR7's Web Application Firewall4.3CNA v3.10.2%2026-02-16Fix
CVE-2025-32063Enabling SSH server on Infotainment ECU6.8CNA v3.10.2%2026-02-15
CVE-2025-32062Stack buffer overflow leading to RCE in Bluetooth stack of Infotainment ECU8.8CNA v3.10.4%2026-02-15
CVE-2025-32061Stack buffer overflow leading to RCE in Bluetooth stack of Infotainment ECU8.8CNA v3.10.4%2026-02-15
CVE-2025-32060Absence of Kernel module signature verification on Linux System of Infotainment ECU6.7CNA v3.10.1%2026-02-15
CVE-2025-32059Stack buffer overflow leading to RCE in Bluetooth stack of Infotainment ECU8.8CNA v3.10.4%2026-02-15
CVE-2025-32058Stack overflow in processing requests over INC interface on RH850 side of Infotainment ECU9.3CNA v3.10.2%2026-02-15
CVE-2025-71224Linux kernel mac80211 OCB interface vulnerability–0.2%2026-02-14Fix
CVE-2025-71223Linux kernel ksmbd SMB2 open handling vulnerability5.5v3.10.1%2026-02-14Fix
CVE-2025-71222In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: ensure skb headroom before skb_push This avoids occasional skb_under_panic Oops from wl1271_tx_work. In this case, headroom is less than needed (typically 110 - 94 = 16 bytes).5.5v3.10.1%2026-02-14Fix
CVE-2025-71221Linux kernel mmp_pdma race condition7.8CNA v3.10.1%2026-02-14Fix
CVE-2025-71220Linux kernel ksmbd SMB2 pipe creation vulnerability7.8v3.10.1%2026-02-14Fix
CVE-2025-71204Linux kernel ksmbd durable handle context parsing vulnerability7.5CNA v3.10.3%2026-02-14Fix
CVE-2025-71203Linux kernel RISC-V syscall table indexing improper array index validation7.0v3.10.1%2026-02-14Fix
CVE-2025-71202Linux kernel IOMMU shared virtual addressing vulnerability8.8CNA v3.10.1%2026-02-14Fix
CVE-2025-71201Linux kernel netfs read result collection out-of-bounds read7.1CNA v3.10.1%2026-02-14Fix
CVE-2025-71200In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode When operating in HS200 or HS400 timing modes, reducing the clock frequency below 52MHz will lead to link broken as the Rockchip DWC MSHC controller requir5.5v3.10.1%2026-02-14Fix
CVE-2025-15483Link Hopper WordPress plugin stored cross-site scripting4.4CNA v3.10.2%2026-02-14Fix
CVE-2025-14873LatePoint WordPress plugin cross-site request forgery4.3CNA v3.10.2%2026-02-14Fix
CVE-2025-14852MDirector Newsletter WordPress plugin cross-site request forgery to plugin settings update4.3CNA v3.10.2%2026-02-14Fix
CVE-2025-14608WP Last Modified Info WordPress plugin insecure direct object reference5.3CNA v3.10.2%2026-02-14Fix
CVE-2025-14067Easy Form Builder WordPress plugin unauthorized access5.3CNA v3.10.2%2026-02-14Fix
CVE-2025-13973StickEasy Protected Contact Form WordPress plugin unauthenticated information disclosure5.3CNA v3.10.3%2026-02-14Fix
CVE-2025-13681BFG Tools Extension Zipper WordPress plugin path traversal4.9CNA v3.10.4%2026-02-14Fix
CVE-2025-8572Truelysell Core WordPress plugin unauthenticated privilege escalation via Registration9.8CNA v3.10.5%2026-02-14Fix
CVE-2025-6792One to one user Chat by WPGuppy WordPress plugin unauthenticated information disclosure5.3CNA v3.10.4%2026-02-14Fix
CVE-2025-70957TON Lite Server get method continuation handling vulnerability7.5CISA ADP v3.10.4%2026-02-13
CVE-2025-70956TON Virtual Machine RUNVM instruction handling vulnerability7.5CISA ADP v3.10.5%2026-02-13
CVE-2025-70955TON Virtual Machine continuation jump instruction handling uncontrolled recursion7.5CISA ADP v3.10.6%2026-02-13
CVE-2025-70954TON Virtual Machine null pointer dereference7.5CISA ADP v3.10.6%2026-02-13
CVE-2025-70866Lavalite improper access control8.8CISA ADP v3.10.5%2026-02-13Fix
CVE-2025-70123free5gc improper input validation7.5CISA ADP v3.10.4%2026-02-13
CVE-2025-70122free5gc UPF component heap-based buffer overflow7.5CISA ADP v3.10.4%2026-02-13
CVE-2025-70121free5gc out-of-bounds read7.5CISA ADP v3.10.4%2026-02-13
CVE-2025-70095opensourcepos Open Source Point of Sale cross-site scripting6.5CISA ADP v3.10.2%2026-02-13
CVE-2025-70094opensourcepos Open Source Point of Sale Generate Item Barcode function cross-site scripting6.5CISA ADP v3.10.2%2026-02-13
CVE-2025-70093opensourcepos Open Source Point of Sale command injection7.4CISA ADP v3.10.4%2026-02-13
CVE-2025-70091opensourcepos Open Source Point of Sale Customers function cross-site scripting6.5CISA ADP v3.10.2%2026-02-13
CVE-2025-69770A zip slip vulnerability in the /DesignTools/SkinList.aspx endpoint of MojoPortal CMS v2.9.0.1 allows attackers to execute arbitrary commands via uploading a crafted zip file.10.0CISA ADP v3.10.7%2026-02-13
CVE-2025-69633Advanced Popup Creator SQL injection9.8CISA ADP v3.10.4%2026-02-13
CVE-2025-66676Iobit Unlocker denial of service6.2CISA ADP v3.10.2%2026-02-13Exploit code
CVE-2025-48023Yokogawa Electric Vnet/IP Interface Package reachable assertion6.0CNA v4.00.2%2026-02-13
CVE-2025-48022Yokogawa Electric Vnet/IP Interface Package improper length parameter handling6.0CNA v4.00.2%2026-02-13
CVE-2025-48021Yokogawa Electric Vnet/IP Interface Package integer underflow6.0CNA v4.00.2%2026-02-13
CVE-2025-48020Yokogawa Electric Vnet/IP Interface Package reachable assertion6.0CNA v4.00.2%2026-02-13
CVE-2025-48019Yokogawa Electric Vnet/IP Interface Package reachable assertion6.0CNA v4.00.2%2026-02-13
CVE-2025-40905Www::OAuth for Perl uses insecure rand function for cryptographic functions7.3CISA ADP v3.10.3%2026-02-13Fix
CVE-2025-33042Apache Avro Java SDK: Code injection on Java generated code7.3CISA ADP v3.10.6%2026-02-13Fix
CVE-2025-15520RegistrationMagic WordPress plugin Subscriber+ sensitive data disclosure4.3CISA ADP v3.10.2%2026-02-13Fix
CVE-2025-15157Starfish Review Generation and Marketing for WordPress WordPress plugin unauthorized access8.8CNA v3.10.3%2026-02-13Fix
CVE-2025-14349Business logic error in Universal Software's FlexCity/Kiosk8.8CNA v3.10.4%2026-02-13Fix
CVE-2025-9293TP-Link Systems Tapo App improper certificate validation7.7CNA v4.00.2%2026-02-13Fix
CVE-2025-9292Permissive Web Security Policy allows Cross-Origin Access Control Bypass on Omada Cloud Controllers2.0CNA v4.00.4%2026-02-13Fix
CVE-2025-1924Yokogawa Electric Vnet/IP Interface Package integer underflow6.0CNA v4.00.2%2026-02-13
CVE-2025-1790Genetec Sipelia local privilege escalation5.8CNA v4.00.1%2026-02-13Fix
CVE-2025-70981fit2cloud CordysCRM SQL injection9.8CISA ADP v3.10.3%2026-02-12
CVE-2025-70886halo denial of service7.5CISA ADP v3.10.5%2026-02-12Exploit code
CVE-2025-70845lty628 aidigu settings page intro field cross-site scripting6.1CISA ADP v3.10.2%2026-02-12
CVE-2025-70314Ourway Webfsd buffer overflow9.8CISA ADP v3.10.5%2026-02-12
CVE-2025-70092opensourcepos Open Source Point of Sale Item Kits function cross-site scripting5.5v3.10.2%2026-02-12
CVE-2025-69807p2r3 Bareiron buffer overflow7.5CISA ADP v3.10.4%2026-02-12
CVE-2025-69806p2r3 Bareiron out-of-bounds read7.5CISA ADP v3.10.3%2026-02-12
CVE-2025-69752Ideagen Q-Pulse My Details profile page insecure direct object reference4.3CISA ADP v3.10.2%2026-02-12
CVE-2025-69634Dolibarr ERP & CRM v.22.0.9 cross-site request forgery9.0CISA ADP v3.10.2%2026-02-12
CVE-2025-67433Open TFTP Server MultiThreaded processRequest function heap-based buffer overflow7.5CISA ADP v3.10.4%2026-02-12
CVE-2025-67432Monkeybread Software MBS DynaPDF Plugin ZBarcode_Encode function stack-based buffer overflow7.5CISA ADP v3.10.3%2026-02-12
CVE-2025-63421filosoft Comerc.32 Commercial Invoicing comeinst.exe code injection7.8CISA ADP v3.10.1%2026-02-12
CVE-2025-61880Infoblox NIOS deserialization of untrusted data8.8CISA ADP v3.10.6%2026-02-12Fix
CVE-2025-61879Infoblox NIOS external control of a file path7.7CISA ADP v3.10.3%2026-02-12Fix
CVE-2025-56647@farmfe/core is Missing Origin Validation in WebSocket6.5CNA v3.10.2%2026-02-12Fix
CVE-2025-55210Sangoma FreePBX API module privilege escalation2.0CNA v4.00.3%2026-02-12Fix
CVE-2025-54756BrightSign Players use of default credentials8.6CNA v4.00.1%2026-02-12
CVE-2025-54519AMD Vivado™ Documentation Navigator Installation (Windows) Doc Nav DLL hijacking7.3CNA v3.10.1%2026-02-12
CVE-2025-52533AMD EPYC™ 7003 Series Processors on-chip debug interface improper access control8.7CNA v4.00.3%2026-02-12
CVE-2025-41117XSS in Grafana Explore stack trace6.8CNA v3.10.2%2026-02-12Fix
CVE-2025-15577Valmet Dna Web server arbitrary file read access7.5v3.10.5%2026-02-12Fix
CVE-2025-15575Missing Firmware Authenticity Checks in SolaX Power Pocket WiFi models5.3CISA ADP v3.10.1%2026-02-12Fix
CVE-2025-15574Insecure Credential Generation for SolaX Power Pocket WiFi models MQTT Cloud Connection6.5CISA ADP v3.10.2%2026-02-12Fix
CVE-2025-15573Missing certificate validation for SolaX Power Pocket WiFi models MQTT Cloud Connection9.4CISA ADP v3.10.2%2026-02-12Fix
CVE-2025-14892Prime Listing Manager WordPress plugin unauthenticated privilege escalation9.8CISA ADP v3.10.4%2026-02-12
CVE-2025-14282Dropbear: Privilege escalation via unix domain socket forwardings5.4CNA v3.10.4%2026-02-12Fix
CVE-2025-14014Insecure file upload in NTN Informatics' Smart Panel9.8CNA v3.10.4%2026-02-12Fix
CVE-2025-13004IDOR in Farktor Software's E-Commerce Package6.3v3.10.3%2026-02-12
CVE-2025-13002XSS in Farktor Software's E-Commerce Package6.1NVD v3.10.2%2026-02-12
CVE-2025-10969SQLi in Farktor Software's E-Commerce Package9.8CNA v3.10.4%2026-02-12
CVE-2025-70297mealie stored cross-site scripting6.1CISA ADP v3.10.2%2026-02-11
CVE-2025-70296mealie Recipe Notes rendering component HTML injection5.4CISA ADP v3.10.2%2026-02-11
CVE-2025-70085Opensatkit stack-based buffer overflow9.8CISA ADP v3.10.6%2026-02-11Fix
CVE-2025-70084Opensatkit path traversal7.5CISA ADP v3.10.8%2026-02-11Fix
CVE-2025-70083Opensatkit stack-based buffer overflow7.8CISA ADP v3.10.2%2026-02-11Fix
CVE-2025-70029Sunbirded-portal improper certificate validation7.5CISA ADP v3.10.3%2026-02-11
CVE-2025-69874Nanotar is vulnerable to path traversal in parseTar and parseTarGzip9.8CISA ADP v3.10.9%2026-02-11
CVE-2025-69873ajv has ReDoS when using `$data` option7.5CISA ADP v3.10.5%2026-02-11Fix
CVE-2025-69872DiskCache has unsafe pickle deserialization9.8CISA ADP v3.10.5%2026-02-11Fix
CVE-2025-69871MedusaJS Medusa v2.12.2 race condition8.1CISA ADP v3.10.4%2026-02-11
CVE-2025-68663Outline has a suspended user authentication bypass via WebSocket connections6.9CNA v4.00.3%2026-02-11Fix
CVE-2025-68406QNAP Qsync Central path traversal1.3CNA v4.00.6%2026-02-11Fix
CVE-2025-67135PGST PG107 Alarm System PF-50 keyfob vulnerability9.8CISA ADP v3.10.4%2026-02-11
CVE-2025-66278QNAP File Station 5 path traversal1.3CNA v4.00.4%2026-02-11Fix
CVE-2025-66277QNAP QTS and QuTS hero link following9.2CNA v4.00.7%2026-02-11Fix
CVE-2025-66274QNAP QTS and QuTS hero null pointer dereference5.1CNA v4.00.4%2026-02-11Fix
CVE-2025-65480Pacom Unison Client report templates OS command injection8.8CISA ADP v3.10.7%2026-02-11
CVE-2025-65128Shenzhen Zhibotong Electronics ZBT WE2001 web management API missing authentication8.1CISA ADP v3.10.3%2026-02-11
CVE-2025-65127Shenzhen Zhibotong Electronics ZBT WE2001 web API missing authentication6.5CISA ADP v3.10.3%2026-02-11
CVE-2025-64487Outline is vulnerable to privilege escalation vulnerability in document sharing7.6CNA v3.10.2%2026-02-11Fix
CVE-2025-64075Zhibotong ZBT WE2001 check_token function path traversal10.0CISA ADP v3.10.7%2026-02-11
CVE-2025-64074Zhibotong ZBT WE2001 logout functionality path traversal5.3CISA ADP v3.10.4%2026-02-11
CVE-2025-62856QNAP File Station 5 path traversal1.3CNA v4.00.4%2026-02-11Fix
CVE-2025-62855QNAP File Station 5 path traversal1.3CNA v4.00.4%2026-02-11Fix
CVE-2025-62854QNAP File Station 5 denial of service1.3CNA v4.00.6%2026-02-11Fix
CVE-2025-62853QNAP File Station 5 path traversal5.2CNA v4.00.6%2026-02-11Fix
CVE-2025-61969AMD μProf incorrect permission assignment7.0CNA v4.00.1%2026-02-11
CVE-2025-59386QNAP QuTS hero null pointer dereference1.2CNA v4.00.4%2026-02-11Fix
CVE-2025-58472QNAP Qsync Central null pointer dereference1.2CNA v4.00.6%2026-02-11Fix
CVE-2025-58471QNAP Qsync Central resource exhaustion1.2CNA v4.00.5%2026-02-11Fix
CVE-2025-58470QNAP Qsync Central path traversal1.3CNA v4.00.6%2026-02-11Fix
CVE-2025-58467QNAP Qsync Central path traversal1.3CNA v4.00.4%2026-02-11Fix
CVE-2025-58466QNAP QTS and QuTS hero uninitialized variable use1.2CNA v4.00.5%2026-02-11Fix
CVE-2025-57713QNAP File Station weak authentication1.3CNA v4.00.5%2026-02-11Fix
CVE-2025-57711QNAP Qsync Central resource exhaustion3.6CNA v4.00.5%2026-02-11Fix
CVE-2025-57710QNAP Qsync Central resource exhaustion3.6CNA v4.00.5%2026-02-11Fix
CVE-2025-57709QNAP Qsync Central out-of-bounds write1.3CNA v4.00.6%2026-02-11Fix
CVE-2025-57708QNAP Qsync Central resource exhaustion2.3CNA v4.00.5%2026-02-11Fix
CVE-2025-57707QNAP Systems File Station 5 statically saved code improper neutralization1.1CNA v4.00.7%2026-02-11Fix
CVE-2025-54170QNAP Qsync Central out-of-bounds read4.9CNA v4.00.5%2026-02-11Fix
CVE-2025-54169QNAP File Station 5 out-of-bounds read4.9CNA v4.00.4%2026-02-11Fix
CVE-2025-54163QNAP File Station 5 null pointer dereference1.2CNA v4.00.5%2026-02-11Fix
CVE-2025-54162QNAP File Station 5 path traversal4.8CNA v4.00.5%2026-02-11Fix
CVE-2025-54161QNAP File Station 5 resource exhaustion3.6CNA v4.00.4%2026-02-11Fix
CVE-2025-54155QNAP File Station 5 resource exhaustion3.6CNA v4.00.4%2026-02-11Fix
CVE-2025-54152QNAP Systems Qsync Central out-of-range pointer offset1.3CNA v4.00.4%2026-02-11Fix
CVE-2025-54151QNAP Qsync Central resource exhaustion4.9CNA v4.00.3%2026-02-11Fix
CVE-2025-54150QNAP Qsync Central resource exhaustion4.9CNA v4.00.3%2026-02-11Fix
CVE-2025-54149QNAP Qsync Central resource exhaustion4.9CNA v4.00.3%2026-02-11Fix
CVE-2025-54148QNAP Qsync Central null pointer dereference1.3CNA v4.00.5%2026-02-11Fix
CVE-2025-54147QNAP Qsync Central null pointer dereference1.3CNA v4.00.4%2026-02-11Fix
CVE-2025-54146QNAP Qsync Central null pointer dereference1.3CNA v4.00.5%2026-02-11Fix
CVE-2025-53598QNAP Qsync Central null pointer dereference0.6CNA v4.00.5%2026-02-11Fix
CVE-2025-52870QNAP Qsync Central heap-based buffer overflow0.6CNA v4.00.4%2026-02-11Fix
CVE-2025-52869QNAP Qsync Central heap-based buffer overflow0.6CNA v4.00.4%2026-02-11Fix
CVE-2025-52868QNAP Qsync Central heap-based buffer overflow0.6CNA v4.00.3%2026-02-11Fix
CVE-2025-52541AMD Vivado™ Installation (Windows) DLL hijacking7.3CNA v3.10.2%2026-02-11
CVE-2025-48725QNAP QuTS hero stack-based buffer overflow0.6CNA v4.00.4%2026-02-11Fix
CVE-2025-48724QNAP Qsync Central buffer overflow0.6CNA v4.00.4%2026-02-11Fix
CVE-2025-48723QNAP Qsync Central buffer overflow0.6CNA v4.00.4%2026-02-11Fix
CVE-2025-48722QNAP Qsync Central null pointer dereference1.3CNA v4.00.4%2026-02-11Fix
CVE-2025-48518AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics improper input validation6.9CNA v4.00.1%2026-02-11
CVE-2025-48508AMD Radeon™ PRO V710 crash6.0CNA v3.10.2%2026-02-11
CVE-2025-48503AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics DLL hijacking7.8CNA v3.10.1%2026-02-11
CVE-2025-47209QNAP Qsync Central null pointer dereference1.3CNA v4.00.4%2026-02-11Fix
CVE-2025-47205QNAP QTS and QuTS hero null pointer dereference5.1CNA v4.00.4%2026-02-11Fix
CVE-2025-46310Apple macOS improper privilege management6.0CISA ADP v3.10.2%2026-02-11Fix
CVE-2025-46305Apple iOS and iPadOS HID subsystem memory corruption5.7CISA ADP v3.10.3%2026-02-11Fix
CVE-2025-46304Apple iOS and iPadOS HID subsystem denial of service5.7CISA ADP v3.10.3%2026-02-11Fix
CVE-2025-46303Apple iOS and iPadOS HID subsystem memory corruption5.7CISA ADP v3.10.3%2026-02-11Fix
CVE-2025-46302Apple iOS and iPadOS HID subsystem memory corruption5.7CISA ADP v3.10.3%2026-02-11Fix
CVE-2025-46301Apple iOS and iPadOS HID subsystem memory corruption5.7CISA ADP v3.10.3%2026-02-11Fix
CVE-2025-46300Apple iOS and iPadOS HID subsystem memory corruption5.7CISA ADP v3.10.3%2026-02-11Fix
CVE-2025-46290Apple macOS logic flaw7.5CISA ADP v3.10.9%2026-02-11Fix
CVE-2025-43537Apple iOS and iPadOS path traversal5.5NVD v3.10.5%2026-02-11Fix
CVE-2025-43417Apple macOS path traversal5.5CISA ADP v3.10.2%2026-02-11Fix
CVE-2025-43403Apple macOS improper authorization5.5CISA ADP v3.10.2%2026-02-11Fix
CVE-2025-30276QNAP Qsync Central out-of-bounds write4.9CNA v4.00.5%2026-02-11Fix
CVE-2025-30269QNAP Systems Qsync Central format string0.6CNA v4.00.3%2026-02-11Fix
CVE-2025-30266QNAP Qsync Central null pointer dereference0.6CNA v4.00.4%2026-02-11Fix
CVE-2025-15524Gallery by FooGallery WordPress plugin unauthorized access4.3CNA v3.10.2%2026-02-11Fix
CVE-2025-15440iONE360 configurator WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.4%2026-02-11
CVE-2025-15400OpenPix WordPress plugin Subscriber+ Payment Gateway settings reset6.5CISA ADP v3.10.3%2026-02-11
CVE-2025-15096Videospirecore Theme WordPress plugin privilege escalation8.8CNA v3.10.3%2026-02-11
CVE-2025-14594Authorization bypass through user-controlled key in GitLab3.5CNA v3.10.2%2026-02-11Fix
CVE-2025-14592Missing authorization in GitLab3.7CNA v3.10.3%2026-02-11Fix
CVE-2025-14560Improper neutralization of input during web page generation (cross-site scripting) in GitLab7.3CNA v3.10.2%2026-02-11Fix
CVE-2025-14541Lucky Wheel Giveaway WordPress plugin remote code execution7.2CNA v3.10.5%2026-02-11Fix
CVE-2025-13651Leak OF sensitive information ON Microcom'S ZeusWeb7.5v3.10.4%2026-02-11Fix
CVE-2025-13650Reflected cross-site scripting (XSS) ON Microcom'S ZeusWeb6.1v3.10.2%2026-02-11Fix
CVE-2025-13649Reflected cross-site scripting (XSS) ON Microcom'S ZeusWeb6.1v3.10.2%2026-02-11Fix
CVE-2025-13648Stored cross-site scripting (XSS) ON Microcom'S ZeusWeb6.1v3.10.2%2026-02-11Fix
CVE-2025-13431SlimStat Analytics WordPress plugin authenticated (Subscriber+) SQL injection via `args` parameter6.5CNA v3.10.2%2026-02-11Fix
CVE-2025-13391MooMoo Uni CPO file deletion endpoint missing authorization5.8CNA v3.10.2%2026-02-11Fix
CVE-2025-12575Server-side request forgery (SSRF) in GitLab5.4CNA v3.10.2%2026-02-11Fix
CVE-2025-12474Google libjxl: Uninitialized memory read in decoder due to incorrect optimization in patch handling2.3CNA v4.00.1%2026-02-11Fix
CVE-2025-12073Server-side request forgery (SSRF) in GitLab4.3CNA v3.10.2%2026-02-11Fix
CVE-2025-12059Improper access control in Logo Software's Logo j-Platform9.8CNA v3.10.3%2026-02-11Fix
CVE-2025-10913XSS in saastech.io's TemizlikYolda8.3CNA v3.10.3%2026-02-11Fix
CVE-2025-10912IDOR in saastech.io's TemizlikYolda5.4CNA v3.10.2%2026-02-11Fix
CVE-2025-10174Improper access control in Pan Software's PanCafe Pro8.3CNA v3.10.1%2026-02-11Fix
CVE-2025-9986Improper access control in Vadi Corporate Information System's DIGIKENT8.2CNA v3.10.2%2026-02-11
CVE-2025-8668Reflected XSS in E-Kalite Software Hardware Engineering's Turboard9.4CNA v3.10.4%2026-02-11Fix
CVE-2025-8099Allocation of resources without limits or throttling in GitLab7.5CNA v3.10.4%2026-02-11Fix
CVE-2025-8025Improper access control in Dinosoft Business Solutions' Dinosoft ERP9.8CNA v3.10.5%2026-02-11Fix
CVE-2025-7659Origin validation error in GitLab8.0CNA v3.10.2%2026-02-11Fix
CVE-2025-70347mquickjs get_mblock_size function denial of service5.5CISA ADP v3.10.2%2026-02-10
CVE-2025-68686Fortinet FortiOS exposure of sensitive information to an unauthorized actor5.3CNA v3.129.6%2026-02-10KEVFix
CVE-2025-64157Fortinet FortiOS A format string6.7CNA v3.11.4%2026-02-10Fix
CVE-2025-62676Fortinet FortiClientWindows link following6.4CNA v3.10.2%2026-02-10Exploit codeFix
CVE-2025-62439Fortinet FortiOS improper verification of communication source3.8CNA v3.10.1%2026-02-10Fix
CVE-2025-55018Fortinet FortiOS HTTP request smuggling5.2CNA v3.10.4%2026-02-10Fix
CVE-2025-54514AMD EPYC™ 9005 Series Processors improper isolation4.8CNA v4.00.1%2026-02-10Fix
CVE-2025-52536AMD EPYC processors SEV firmware vulnerability6.7CNA v4.00.1%2026-02-10
CVE-2025-52534AMD EPYC™ 9005 Series Processors improper quantity validation5.3CNA v4.00.3%2026-02-10
CVE-2025-52436Fortinet FortiSandbox cross-site scripting7.9CNA v3.17.3%2026-02-10Fix
CVE-2025-48517AMD EPYC™ 9005 Series Processors SEV firmware insufficient access control granularity4.6CNA v4.00.1%2026-02-10
CVE-2025-48515AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics integer overflow5.4CNA v4.00.1%2026-02-10
CVE-2025-48514AMD EPYC™ 9004 Series Processors SEV firmware insufficient access control granularity4.0CNA v4.00.1%2026-02-10
CVE-2025-48509AMD EPYC™ 9004 Series Processors improper initialization1.8CNA v4.00.1%2026-02-10
CVE-2025-40587Siemens Polarion V2404 cross-site scripting6.2CNA v4.00.3%2026-02-10Fix
CVE-2025-36522Intel(R) Chipset Software incorrect default permissions5.4CNA v4.00.1%2026-02-10Fix
CVE-2025-36511Intel(R) Memory and Storage Tool incorrect default permissions5.4CNA v4.00.1%2026-02-10
CVE-2025-35999Intel System Firmware Update Utility incorrect permission assignment5.4CNA v4.00.2%2026-02-10Fix
CVE-2025-35998Intel(R) Platforms privilege escalation7.0CNA v4.00.2%2026-02-10Fix
CVE-2025-35992Intel(R) NPU Drivers improper check for exceptional conditions5.7CNA v4.00.1%2026-02-10Fix
CVE-2025-33030Intel(R) NPU Drivers improper check for exceptional conditions2.0CNA v4.00.2%2026-02-10Fix
CVE-2025-32739Intel(R) Graphics Drivers and Intel LTS kernels improper check for exceptional conditions2.0CNA v4.00.1%2026-02-10Fix
CVE-2025-32735Intel(R) NPU Drivers improper check for exceptional conditions6.8CNA v4.00.1%2026-02-10Fix
CVE-2025-32467TDX Module uninitialized variable use5.6CNA v4.00.1%2026-02-10Fix
CVE-2025-32453Intel(R) Graphics Driver software incorrect default permissions5.4CNA v4.00.1%2026-02-10Fix
CVE-2025-32452AI Playground uncontrolled search path5.4CNA v4.00.1%2026-02-10Fix
CVE-2025-32092Intel(R) Graphics software insecure inherited permissions5.4CNA v4.00.1%2026-02-10Fix
CVE-2025-32008Intel(R) AMT and Intel(R) Standard Manageability firmware for the out-of-bounds write8.7CNA v4.00.3%2026-02-10Fix
CVE-2025-32007TDX out-of-bounds read5.6CNA v4.00.1%2026-02-10Fix
CVE-2025-32003100GbE Intel(R) Ethernet Network Adapter E810 firmware for some out-of-bounds read6.0CNA v4.00.3%2026-02-10Fix
CVE-2025-31944TDX Module race condition5.6CNA v4.00.1%2026-02-10Fix
CVE-2025-31655Intel(R) Battery Life Diagnostic Tool incorrect default permissions5.4CNA v4.00.1%2026-02-10Fix
CVE-2025-31648Intel Processor microcode privilege escalation1.8CNA v4.00.1%2026-02-10Fix
CVE-2025-30513TDX Module race condition8.4CNA v4.00.1%2026-02-10Fix
CVE-2025-30508Intel(R) Platforms Intel(R) Quick Assist Technology for some improper authorization6.8CNA v4.00.1%2026-02-10Fix
CVE-2025-29952AMD EPYC™ 9005 Series Processors uninitialized variable use5.9CNA v4.00.2%2026-02-10
CVE-2025-29951AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics buffer overflow7.3CNA v4.00.1%2026-02-10
CVE-2025-29950AMD EPYC™ 9004 Series Processors system management mode improper input validation7.1CNA v4.00.2%2026-02-10
CVE-2025-29949AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics out-of-bounds write4.8CNA v4.00.1%2026-02-10
CVE-2025-29948AMD EPYC™ 9005 Series Processors improper access control5.9CNA v4.00.2%2026-02-10
CVE-2025-29946AMD EPYC 9005 series processors SEV firmware IOMMU flush vulnerability4.5CNA v4.00.1%2026-02-10
CVE-2025-29939AMD EPYC™ 9004 Series Processors secure encrypted virtualization improper access control6.9CNA v4.00.1%2026-02-10
CVE-2025-27940TDX Module out-of-bounds read5.6CNA v4.00.1%2026-02-10Fix
CVE-2025-27708Intel(R) Converged Security and Management Engine (CSME) Firmware (FW) out-of-bounds read5.6CNA v4.00.1%2026-02-10Fix
CVE-2025-27572TDX information disclosure5.6CNA v4.00.1%2026-02-10Fix
CVE-2025-27560Intel(R) Platform infinite loop6.7CNA v4.00.1%2026-02-10Fix
CVE-2025-27535Intel(R) Ethernet Connection E825-C firmware for some exposed IOCTL without access control5.6CNA v4.00.1%2026-02-10Fix
CVE-2025-27243Intel(R) Ethernet Controller E810 firmware for some out-of-bounds write6.7CNA v4.00.1%2026-02-10Fix
CVE-2025-25210Server Firmware Update Utility(SysFwUpdt) improper input validation7.1CNA v4.00.1%2026-02-10Fix
CVE-2025-25058Intel(R) Ethernet 800 series improper initialization2.0CNA v4.00.1%2026-02-10Fix
CVE-2025-24851100GbE Intel(R) Ethernet Controller E810 firmware for some improper error handling6.0CNA v4.00.1%2026-02-10Fix
CVE-2025-22885Improper buffer restrictions in the firmware for the TDX Module may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirement5.6CNA v4.00.1%2026-02-10Fix
CVE-2025-22849Intel(R) Optane(TM) PMem management software incorrect default permissions5.4CNA v4.00.1%2026-02-10Fix
CVE-2025-22453Server Firmware Update Utility(SysFwUpdt) improper input validation7.1CNA v4.00.1%2026-02-10Fix
CVE-2025-20106VTune(TM) Profiler software and Intel(R) oneAPI Base Toolkits uncontrolled search path5.4CNA v4.00.1%2026-02-10Fix
CVE-2025-20080Intel(R) AMT and Intel(R) Standard Manageability firmware for some null pointer dereference8.2CNA v4.00.2%2026-02-10Fix
CVE-2025-20070Intel(R) Optane(TM) PMem management software improper check for exceptional conditions5.4CNA v4.00.1%2026-02-10Fix
CVE-2025-15572wasm3 NewCodePage memory leak5.5v3.10.2%2026-02-10
CVE-2025-15571ckolivas lrzip stream.c ucompthread null pointer dereference5.5v3.10.2%2026-02-10Fix
CVE-2025-15570ckolivas lrzip stream.c lzma_decompress_buf use-after-free7.8v3.10.2%2026-02-10Fix
CVE-2025-15569Artifex MuPDF win_main.c get_system_dpi uncontrolled search path7.3CNA v4.00.1%2026-02-10Fix
CVE-2025-15314Tanium addressed an arbitrary file deletion vulnerability in end-user-cx5.5CNA v3.10.4%2026-02-10Fix
CVE-2025-15313Tanium addressed an arbitrary file deletion vulnerability in Tanium Euss5.5CNA v3.10.2%2026-02-10Fix
CVE-2025-15310Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools7.8CNA v3.10.2%2026-02-10Fix
CVE-2025-15147WCFM Membership WordPress plugin insecure direct object reference4.3CNA v3.10.3%2026-02-10Fix
CVE-2025-14895PopupKit WordPress plugin authorization bypass5.4CNA v3.10.3%2026-02-10Fix
CVE-2025-13064Axis Communications AXIS Camera Station Pro uncaught exception4.5CNA v3.10.2%2026-02-10Fix
CVE-2025-12757Axis Communications AXIS Camera Station Pro path traversal4.6CNA v3.10.3%2026-02-10Fix
CVE-2025-12699ZOLL ePCR iOS app WebView PCR field rendering information disclosure6.7CNA v4.00.2%2026-02-10
CVE-2025-12063Axis Communications AXIS Camera Station Pro insecure direct object reference5.7CNA v3.10.2%2026-02-10Fix
CVE-2025-11547Axis Communications AXIS Camera Station Pro sensitive information in log files7.8CNA v3.10.2%2026-02-10Fix
CVE-2025-11537Red Hat Build of Keycloak keycloak-services: Sensitive headers shown in the HTTP access logs5.0CNA v3.10.1%2026-02-10Fix
CVE-2025-11242SSRF in Teknolist Computer's Okulistik9.8CNA v3.10.3%2026-02-10Fix
CVE-2025-11142Axis Communications AXIS OS OS command injection7.1CNA v3.10.5%2026-02-10Fix
CVE-2025-11004Reflected XSS vulnerability in Simplicity Device Manager tool7.5CNA v4.00.3%2026-02-10Fix
CVE-2025-7636SQLi in Ergosis Security Systems' ZEUS PDKS8.8CNA v3.10.3%2026-02-10Fix
CVE-2025-7347IDOR in Dinibh Puzzle's Dinibh Patrol Tracking System8.8CNA v3.10.3%2026-02-10
CVE-2025-6967Authentication bypass in Sarman Soft's CMS8.7CNA v3.10.5%2026-02-10
CVE-2025-0031AMD EPYC™ 9004 Series Processors SEV firmware use-after-free4.6CNA v4.00.1%2026-02-10
CVE-2025-0029AMD EPYC 9005 Series Processors SEV-SNP guest memory protection vulnerability1.8CNA v4.00.1%2026-02-10
CVE-2025-0012AMD EPYC 9005 Series Processors SMM memory overlap handling vulnerability6.8CNA v4.00.1%2026-02-10
CVE-2025-66630gofiber Fiber UUID generator vulnerability9.2CNA v4.00.5%2026-02-09Fix
CVE-2025-66608Yokogawa Electric FAST/TOOLS path traversal8.7CNA v4.00.4%2026-02-09Fix
CVE-2025-66607Yokogawa Electric FAST/TOOLS improperly implemented security check6.3CNA v4.00.2%2026-02-09Fix
CVE-2025-66606Yokogawa Electric FAST/TOOLS cross-site scripting2.1CNA v4.00.2%2026-02-09Fix
CVE-2025-66605Yokogawa Electric FAST/TOOLS personal information exposure2.1CNA v4.00.2%2026-02-09Fix
CVE-2025-66604Yokogawa Electric FAST/TOOLS cleartext transmission of sensitive information2.1CNA v4.00.1%2026-02-09Fix
CVE-2025-66603Yokogawa Electric FAST/TOOLS improperly implemented security check2.1CNA v4.00.3%2026-02-09Fix
CVE-2025-66602Yokogawa FAST/TOOLS web server IP based access vulnerability6.9CNA v4.00.3%2026-02-09Fix
CVE-2025-66601Yokogawa Electric FAST/TOOLS improperly implemented security check6.3CNA v4.00.2%2026-02-09Fix
CVE-2025-66600Yokogawa Electric FAST/TOOLS improperly implemented security check8.8CNA v4.00.3%2026-02-09Fix
CVE-2025-66599Yokogawa Electric FAST/TOOLS system information disclosure6.9CNA v4.00.3%2026-02-09Fix
CVE-2025-66598Yokogawa Electric FAST/TOOLS weak cryptographic algorithm7.1CNA v4.00.2%2026-02-09Fix
CVE-2025-66597Yokogawa Electric FAST/TOOLS weak cryptographic algorithm8.8CNA v4.00.2%2026-02-09Fix
CVE-2025-66596Yokogawa Electric FAST/TOOLS open redirect6.9CNA v4.00.2%2026-02-09Fix
CVE-2025-66595Yokogawa Electric FAST/TOOLS cross-site request forgery6.3CNA v4.00.1%2026-02-09Fix
CVE-2025-66594Yokogawa Electric FAST/TOOLS information disclosure through error messages6.9CNA v4.00.2%2026-02-09Fix
CVE-2025-63354Hitrontech HI3120 cross-site scripting4.8CISA ADP v3.10.2%2026-02-09
CVE-2025-59024Crafted delegations or IP fragments can poison cached delegations in Recursor6.5CNA v3.10.1%2026-02-09Fix
CVE-2025-59023Crafted delegations or IP fragments can poison cached delegations in Recursor8.2CNA v3.10.3%2026-02-09Fix
CVE-2025-15319Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools7.8CNA v3.10.2%2026-02-09Fix
CVE-2025-15318Tanium addressed an arbitrary file deletion vulnerability in End-user Notifications Endpoint Tools5.1CNA v3.10.2%2026-02-09Fix
CVE-2025-15317Tanium addressed an uncontrolled resource consumption vulnerability in Tanium Server6.5CNA v3.10.4%2026-02-09Fix
CVE-2025-15316Tanium addressed a local privilege escalation vulnerability in Tanium Server6.7CNA v3.10.1%2026-02-09Fix
CVE-2025-15315Tanium addressed a local privilege escalation vulnerability in Tanium Module Server6.7CNA v3.10.1%2026-02-09Fix
CVE-2025-14831Red Hat Enterprise Linux 10 gnutls: Gnutls: Denial of service5.3CNA v3.10.7%2026-02-09Fix
CVE-2025-14778Keycloak: Incorrect ownership checks in /uma-policy/5.4CNA v3.10.3%2026-02-09Fix
CVE-2025-10465Unrestricted file upload in Birtech Information Technologies' Sensaway8.8CNA v3.10.4%2026-02-09
CVE-2025-10464Cleartext password storage in Birtech Information Technologies' Sensaway6.5CNA v3.10.3%2026-02-09
CVE-2025-10463Improper authentication in Birtech Information Technologies' Sensaway7.3CNA v3.10.3%2026-02-09
CVE-2025-7799Reflected XSS in Zirve Information Technologies' e-Taxpayer Accounting Website8.6CNA v3.10.3%2026-02-09
CVE-2025-7708Sensitive data exposure in Atlas Software's k12net6.8CNA v3.10.3%2026-02-09
CVE-2025-7432silabs.com Simplicity SDK DPA countermeasures not reseeded under certain conditions1.0CNA v4.00.1%2026-02-09Fix
CVE-2025-6830SQLi in Xpoda Türkiye Information Technology's Password Module9.8CNA v3.10.4%2026-02-09Fix
CVE-2025-15100JAY Login and Register WordPress plugin privilege escalation8.8CNA v3.10.4%2026-02-08Fix
CVE-2025-15027JAY Login and Register WordPress plugin unauthenticated privilege escalation9.8CNA v3.10.4%2026-02-08Fix
CVE-2025-31990HCL DevOps Velocity is susceptible to a denial of service6.8CNA v3.10.3%2026-02-07Fix
CVE-2025-15564Mapnik value.cpp operator divide by zero5.5v3.10.2%2026-02-07Fix
CVE-2025-15491Post Slides WordPress plugin Contributor+ local file inclusion5.5CISA ADP v3.10.3%2026-02-07
CVE-2025-15477The Bucketlister WordPress plugin SQL injection6.5CNA v3.10.3%2026-02-07
CVE-2025-15476The Bucketlister WordPress plugin missing authorization authenticated Bucket List modification4.3CNA v3.10.2%2026-02-07
CVE-2025-15267Bold Page Builder WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-02-07Fix
CVE-2025-13463Bold Page Builder WordPress plugin stored DOM-based cross-site scripting in post Grid6.4CNA v3.10.3%2026-02-07Fix
CVE-2025-12803Bold Builder WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-02-07Fix
CVE-2025-12159Bold Page Builder WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-02-07Fix
CVE-2025-70963Gophish is vulnerable to Incorrect Access Control7.6CISA ADP v3.10.3%2026-02-06
CVE-2025-69216OpenSTAManager has an SQL injection in Scadenzario Print template8.7CNA v4.00.4%2026-02-06
CVE-2025-69214OpenSTAManager has a SQL injection in ajax_select.php (componenti endpoint)8.7CNA v4.00.5%2026-02-06Exploit code
CVE-2025-69212OpenSTAManager has an OS command injection in P7M File Processing9.4CNA v4.01.9%2026-02-06Exploit code
CVE-2025-68621Trilium Notes has a Timing Attack vulnerability in /API/login/sync7.4CNA v3.10.6%2026-02-06Fix
CVE-2025-64175Gogs vulnerable to 2FA Bypass via Recovery Code7.7CNA v4.00.5%2026-02-06Fix
CVE-2025-64111Gogs's update .git/config file allows remote command execution9.3CNA v4.01.4%2026-02-06Fix
CVE-2025-15566ingress-nginx auth-proxy-set-headers nginx configuration injection8.8CNA v3.10.5%2026-02-06Fix
CVE-2025-15320Tanium addressed a denial of service vulnerability in Tanium Client3.3CNA v3.10.1%2026-02-06Fix
CVE-2025-13818Local privilege escalation in ESET Management Agent for Windows8.3CNA v4.00.1%2026-02-06Fix
CVE-2025-13523Cross-site scripting (XSS) via Unescaped Display Names in Mattermost Confluence Plugin OAuth2 Flow7.7CNA v3.10.2%2026-02-06Fix
CVE-2025-10753OAuth Single Sign On SSO (OAuth Client) WordPress plugin missing authorization5.3CNA v3.10.4%2026-02-06Fix
CVE-2025-70792Microweber cross-site scripting6.1CISA ADP v3.10.3%2026-02-05Fix
CVE-2025-70791Microweber has a cross-site scripting6.1CISA ADP v3.10.3%2026-02-05Fix
CVE-2025-700731000mz ChestnutCMS code injection7.2CISA ADP v3.10.7%2026-02-05
CVE-2025-69906Monstra Cms unrestricted file upload8.8CISA ADP v3.10.8%2026-02-05Exploit code
CVE-2025-69619Zipperapp My Teditor My Text Editor v1.6.2 path traversal5.5CISA ADP v3.10.3%2026-02-05
CVE-2025-68723Axigen Mail Server cross-site scripting9.0NVD v3.10.3%2026-02-05Fix
CVE-2025-68722Axigen Mail Server cross-site request forgery8.8CISA ADP v3.10.3%2026-02-05Exploit codeFix
CVE-2025-68721Axigen Mail Server improper access control8.1CISA ADP v3.10.3%2026-02-05Exploit codeFix
CVE-2025-68643Axigen Mail Server cross-site scripting5.4v3.10.2%2026-02-05Fix
CVE-2025-68458webpack server-side request forgery3.7CNA v3.10.2%2026-02-05Fix
CVE-2025-68157webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects3.7CNA v3.10.2%2026-02-05Fix
CVE-2025-68121Unexpected session resumption in crypto/tls10.0v3.10.8%2026-02-05Fix
CVE-2025-61732Potential code smuggling via doc comments in cmd/cgo8.6CISA ADP v3.10.5%2026-02-05Fix
CVE-2025-58190Infinite parsing loop in golang.org/x/net5.3v3.10.5%2026-02-05Fix
CVE-2025-47911Quadratic parsing complexity in golang.org/x/net/html5.3v3.10.5%2026-02-05Fix