Skip to content
OpenAdvisories

Archive

6 February 2025

Vulnerabilities first published on this day (UTC), newest first.

← January 2025 2025 / February /6 March 2025 →
  1. 139
  2. 24
  3. 3187
  4. 4151
  5. 5119
  6. 699
  7. 7120
  8. 87
  9. 94
  10. 1081
  11. 11283
  12. 12265
  13. 13132
  14. 14134
  15. 1524
  16. 1640
  17. 1748
  18. 18162
  19. 19125
  20. 20120
  21. 2192
  22. 2234
  23. 2330
  24. 24119
  25. 25144
  26. 26795
  27. 27275
  28. 2887
All Critical High Medium Low Exploited only Public exploit

99 results · Feed

  • High 7.5
    CVE-2024-57392

    Buffer Overflow vulnerability in Proftpd commit 4017eff8 allows a remote attacker to execute arbitrary code and can cau…

    proftpd-dfsg proftpd-dfsg Debian Ubuntu
  • Critical 9.8
    CVE-2024-57430 Public exploit

    An SQL injection vulnerability in the pjActionGetUser function of PHPJabbers Cinema Booking System v2.0 allows attacker…

  • High 8.8
    CVE-2024-57668

    In Code-projects Shopping Portal v1.0, the insert-product.php page has an arbitrary file upload vulnerability.

  • Medium 4.5
    CVE-2024-57523 Public exploit

    Cross Site Request Forgery (CSRF) in Users.php in SourceCodester Packers and Movers Management System 1.0 allows attack…

  • Medium 5.5
    CVE-2024-57672

    An issue in floodlight v1.2 allows a local attacker to cause a denial of service via the Topology Manager module, Topol…

  • Medium 6.1
    CVE-2024-57427 Public exploit

    PHPJabbers Cinema Booking System v2.0 is vulnerable to reflected cross-site scripting (XSS). Multiple endpoints imprope…

  • High 7.5
    CVE-2024-57610 Public exploit

    A rate limiting issue in Sylius v2.0.2 allows a remote attacker to perform unrestricted brute-force attacks on user acc…

  • Medium 5.5
    CVE-2024-57673

    An issue in floodlight v1.2 allows a local attacker to cause a denial of service via the Topology Manager module and Li…

  • High 8.6
    CVE-2024-57609

    An issue in Kanaries Inc Pygwalker before v.0.4.9.9 allows a remote attacker to obtain sensitive information and execut…

  • Medium 5.4
    CVE-2024-57429 Public exploit

    A cross-site request forgery (CSRF) vulnerability in the pjActionUpdate function of PHPJabbers Cinema Booking System v2…

  • Critical 9.3
    CVE-2024-57428 Public exploit

    A stored cross-site scripting (XSS) vulnerability in PHPJabbers Cinema Booking System v2.0 exists due to unsanitized in…

  • Medium 4.8
    CVE-2024-57599

    Cross Site Scripting vulnerability in DouPHP v.1.8 Release 20231203 allows attackers to execute arbitrary code via a cr…

  • Medium 5.3
    CVE-2024-25883

    The mstatus register in RSD commit 3d13a updates incorrectly, leading to processing errors.

  • High 8.1
    CVE-2024-54909

    A vulnerability has been identified in GoldPanKit eva-server v4.1.0. It affects the path parameter of the /api/resource…

  • High 7.5
    CVE-2024-56889 Public exploit

    Incorrect access control in the endpoint /admin/m_delete.php of CodeAstro Complaint Management System v1.0 allows unaut…

  • High 8.8
    CVE-2025-23093

    The Platform component of Mitel OpenScape 4000 and OpenScape 4000 Manager through V10 R1.54.1 and V11 through R0.22.1 c…

  • High 7.3
    CVE-2025-23094

    The Platform component of Mitel OpenScape 4000 and OpenScape 4000 Manager V11 R0.22.0 through V11 R0.22.1, V10 R1.54.0 …

  • Medium 5.7
    CVE-2025-22936

    An issue in Smartcom Bulgaria AD Smartcom Ralink CPE/WiFi router SAM-4G1G-TT-W-VC, SAM-4F1F-TT-W-A1 allows a remote att…

  • Critical 9.8
    CVE-2025-22992

    A SQL Injection vulnerability exists in the /feed/insert.json endpoint of the Emoncms project >= 11.6.9. The vulnerabil…