Skip to content
OpenAdvisories

Archive

7 February 2025

Vulnerabilities first published on this day (UTC), newest first.

← January 2025 2025 / February /7 March 2025 →
  1. 139
  2. 24
  3. 3187
  4. 4151
  5. 5119
  6. 699
  7. 7120
  8. 87
  9. 94
  10. 1081
  11. 11283
  12. 12265
  13. 13132
  14. 14134
  15. 1524
  16. 1640
  17. 1748
  18. 18162
  19. 19125
  20. 20120
  21. 2192
  22. 2234
  23. 2330
  24. 24119
  25. 25144
  26. 26795
  27. 27275
  28. 2887
All Critical High Medium Low Exploited only Public exploit

54 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-23085

    A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification. Addition…

    Node.js node nodejs nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 4.3
    CVE-2024-13841

    Builder Shortcode Extras – WordPress Shortcodes Collection to Save You Time <= 1.0.0 - Authenticated (Contributor+) Post Disclosure

    The Builder Shortcode Extras – WordPress Shortcodes Collection to Save You Time plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.0 via the 'bse-elementor-template' shortcode due to insufficient restrictions …

    daveshine Builder Shortcode Extras – WordPress Shortcodes Collection to Save You Time Web / CMS
  • Medium 6.1
    CVE-2024-13492 Scanner template

    Guten Free Options <= 0.9.5 - Reflected XSS

    The Guten Free Options WordPress plugin through 0.9.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

    Web / CMS
  • Medium 6.5
    CVE-2025-1072

    Allocation of Resources Without Limits or Throttling in GitLab

    A Denial of Service (DoS) issue has been discovered in GitLab CE/EE affecting all versions starting from 7.14.1 prior to 17.3.7, 17.4 prior to 17.4.4, and 17.5 prior to 17.5.2. A denial of service could occur upon importing maliciously crafted content using t…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 5.3
    CVE-2025-1086

    Safetytest Cloud-Master Server static path traversal

    A vulnerability has been found in Safetytest Cloud-Master Server up to 1.1.1 and classified as critical. This vulnerability affects unknown code of the file /static/. The manipulation leads to path traversal: '../filedir'. The attack can be initiated remotely…

    Safetytest Cloud-Master Server
  • Medium 4.3
    CVE-2025-1085

    Animati PACS login cross site scripting

    A vulnerability, which was classified as problematic, was found in Animati PACS up to 1.24.12.09.03. This affects an unknown part of the file /login. The manipulation of the argument p leads to cross site scripting. It is possible to initiate the attack remot…

    Animati PACS
  • Medium 6.5
    CVE-2024-55213

    Directory Traversal vulnerability in dhtmlxFileExplorer v.8.4.6 allows a remote attacker to obtain sensitive informatio…

  • Medium 6.5
    CVE-2024-55214

    Local File Inclusion vulnerability in dhtmlxFileExplorer v.8.4.6 allows a remote attacker to obtain sensitive informati…

  • Medium 4.6
    CVE-2024-35106 Public exploit

    NEXTU FLETA AX1500 WIFI6 v1.0.3 was discovered to contain a buffer overflow at /boafrm/formIpQoS. This vulnerability al…

  • Medium 5.4
    CVE-2024-57279

    A reflected Cross-Site Scripting (XSS) vulnerability has been identified in the LDAP User Manager <= ce92321, specifica…

  • Medium 6.5
    CVE-2024-57249

    Incorrect Access Control in the Preview Function of Gleamtech FileVista 9.2.0.0 allows remote attackers to gain unautho…

  • Medium 5.4
    CVE-2024-57278

    A reflected Cross-Site Scripting (XSS) vulnerability exists in /webscan/sqlmap/index.html in QingScan <=v1.8.0. The vul…

  • Medium 6.3
    CVE-2024-57248

    Directory Traversal in File Upload in Gleamtech FileVista 9.2.0.0 allows remote attackers to achieve Code Execution, In…

  • Medium 6.1
    CVE-2024-52882

    An issue was discovered in AudioCodes One Voice Operations Center (OVOC) before 8.4.582. Due to improper neutralization…