Skip to content
OpenAdvisories

Archive

3 February 2025

Vulnerabilities first published on this day (UTC), newest first.

← January 2025 2025 / February /3 March 2025 →
  1. 139
  2. 24
  3. 3187
  4. 4151
  5. 5119
  6. 699
  7. 7120
  8. 87
  9. 94
  10. 1081
  11. 11283
  12. 12265
  13. 13132
  14. 14134
  15. 1524
  16. 1640
  17. 1748
  18. 18162
  19. 19125
  20. 20120
  21. 2192
  22. 2234
  23. 2330
  24. 24119
  25. 25144
  26. 26795
  27. 27275
  28. 2887
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 2.6
    CVE-2025-0148

    Zoom Jenkins Marketplace plugin - Missing Password Field Masking

    Missing password field masking in the Zoom Jenkins Marketplace plugin before version 1.6 may allow an unauthenticated user to conduct a disclosure of information via adjacent network access.

    Zoom Communications Zoom Jenkins Marketplace plugin io.jenkins.plugins:zoom Web / CMS Maven
  • Low 1.0
    CVE-2025-24959

    Environment Variable Injection for dotenv API in zx

    zx is a tool for writing better scripts. An attacker with control over environment variable values can inject unintended environment variables into `process.env`. This can lead to arbitrary command execution or unexpected behavior in applications that rely on…

    Google zx zx node-zx Ubuntu npm
  • Low 3.5
    CVE-2025-0972

    Zenvia Movidesk New Ticket cross site scripting

    A vulnerability classified as problematic has been found in Zenvia Movidesk up to 25.01.22. This affects an unknown part of the component New Ticket Handler. The manipulation of the argument subject leads to cross site scripting. It is possible to initiate th…

    Zenvia Movidesk