Skip to content
OpenAdvisories

Archive

3 February 2025

Vulnerabilities first published on this day (UTC), newest first.

← January 2025 2025 / February /3 March 2025 →
  1. 139
  2. 24
  3. 3187
  4. 4151
  5. 5119
  6. 699
  7. 7120
  8. 87
  9. 94
  10. 1081
  11. 11283
  12. 12265
  13. 13132
  14. 14134
  15. 1524
  16. 1640
  17. 1748
  18. 18162
  19. 19125
  20. 20120
  21. 2192
  22. 2234
  23. 2330
  24. 24119
  25. 25144
  26. 26795
  27. 27275
  28. 2887
All Critical High Medium Low Exploited only Public exploit

187 results · Feed

  • Critical 9.8
    CVE-2024-57450

    ChestnutCMS <=1.5.0 is vulnerable to File Upload via the Create template function.

  • Medium 4.2
    CVE-2024-57967

    PVWA (Password Vault Web Access) in CyberArk Privileged Access Manager Self-Hosted before 14.4 has potentially elevated…

    cyberark Privileged Access Manager
  • High 7.5
    CVE-2024-57669

    Directory Traversal vulnerability in Zrlog backup-sql-file.jar v.3.0.31 allows a remote attacker to obtain sensitive in…

  • Critical 9.8
    CVE-2024-57098

    Moss v0.1.3 version has an SQL injection vulnerability that allows attackers to inject carefully designed payloads into…

  • Critical 9.9
    CVE-2024-57968 Exploited EPSS 32%

    Advantive VeraCore before 2024.4.2.1 allows remote authenticated users to upload files to unintended folders (e.g., one…

    Advantive VeraCore
    KEV Mar 10, 2025
  • Medium 6.3
    CVE-2024-57237

    Prolink 4G LTE Mobile Wi-Fi DL-7203E V4.0.0B05 is vulnerable to Cross Site Scripting (XSS) in the /reqproc/proc_get end…

  • Medium 6.4
    CVE-2024-57522 Public exploit

    SourceCodester Packers and Movers Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in Users.php. An a…

  • Medium 6.1
    CVE-2024-57004 EPSS 41%

    Cross-Site Scripting (XSS) vulnerability in Roundcube Webmail 1.6.9 allows remote authenticated users to upload a malic…

    roundcube roundcube Debian Ubuntu
  • Medium 5.0
    CVE-2024-57966

    libarchiveplugin.cpp in KDE ark before 24.12.0 can extract to an absolute path from an archive.

    KDE ark ark ark Debian Ubuntu
  • High 7.3
    CVE-2024-57238

    Prolink 4G LTE Mobile Wi-Fi DL-7203E V4.0.0B05 is vulnerable to SQL Injection in in the /reqproc/proc_get endpoint. The…

  • Critical 9.8
    CVE-2024-57099

    ClassCMS v4.8 has a code execution vulnerability. Attackers can exploit this vulnerability by constructing a payload in…

  • Medium 6.1
    CVE-2024-44449

    Cross Site Scripting vulnerability in Quorum onQ OS v.6.0.0.5.2064 allows a remote attacker to obtain sensitive informa…

  • Medium 4.2
    CVE-2024-54840

    PVWA (Password Vault Web Access) in CyberArk Privileged Access Manager Self-Hosted before 14.4 does not properly addres…

    cyberark Privileged Access Manager
  • High 8.8
    CVE-2024-56901 Public exploit

    A Cross-Site Request Forgery (CSRF) vulnerability in Geovision GV-ASWeb application with the version 6.1.1.0 or less th…

  • High 8.1
    CVE-2024-56903

    Geovision GV-ASWeb with the version 6.1.1.0 or less allows attackers to modify POST request method with the GET against…

  • High 8.8
    CVE-2024-56898 Public exploit

    Broken access control vulnerability in Geovision GV-ASWeb with version v6.1.0.0 or less. This vulnerability allows low …

  • High 7.5
    CVE-2024-56921

    An issue was discovered in Open5gs v2.7.2. InitialUEMessage, Registration request sent at a specific time can crash AMF…

  • High 7.5
    CVE-2024-56902 Public exploit EPSS 27%

    Information disclosure vulnerability in Geovision GV-ASManager web application with the version v6.1.0.0 or less, which…

  • Medium 5.3
    CVE-2024-56946

    Denial of service in DNS-over-QUIC in Technitium DNS Server <= v13.2.2 allows remote attackers to permanently stop the …

  • High 8.1
    CVE-2025-25066

    nDPI through 4.12 has a potential stack-based buffer overflow in ndpi_address_cache_restore in lib/ndpi_cache.c.

    ntop nDPI ndpi Ubuntu
  • Medium 4.4
    CVE-2025-25063

    An XSS issue was discovered in Backdrop CMS 1.28.x before 1.28.5 and 1.29.x before 1.29.3. It does not sufficiently val…

    BackdropCMS Backdrop
  • High 8.8
    CVE-2025-25064 Public exploit EPSS 37%

    SQL injection vulnerability in the ZimbraSync Service SOAP endpoint in Zimbra Collaboration 10.0.x before 10.0.12 and 1…

  • Medium 4.4
    CVE-2025-25062 Public exploit

    An XSS issue was discovered in Backdrop CMS 1.28.x before 1.28.5 and 1.29.x before 1.29.3. It doesn't sufficiently isol…

    BackdropCMS Backdrop
  • Medium 5.3
    CVE-2025-25065

    SSRF vulnerability in the RSS feed parser in Zimbra Collaboration 9.0.0 before Patch 43, 10.0.x before 10.0.12, and 10.…

  • Medium 5.8
    CVE-2025-25181 Exploited EPSS 55%

    A SQL injection vulnerability in timeoutWarning.asp in Advantive VeraCore through 2025.1.0 allows remote attackers to e…

    Advantive VeraCore
    KEV Mar 10, 2025
  • High 7.5
    CVE-2025-22918

    Polycom RealPresence Group 500 <=20 has Insecure Permissions due to automatically loaded cookies. This allows for the u…

  • Critical 9.8
    CVE-2025-22978

    eladmin <=2.7 is vulnerable to CSV Injection in the exception log download module.