Skip to content
OpenAdvisories

Archive

10 February 2025

Vulnerabilities first published on this day (UTC), newest first.

← January 2025 2025 / February /10 March 2025 →
  1. 139
  2. 24
  3. 3187
  4. 4151
  5. 5119
  6. 699
  7. 7120
  8. 87
  9. 94
  10. 1081
  11. 11283
  12. 12265
  13. 13132
  14. 14134
  15. 1524
  16. 1640
  17. 1748
  18. 18162
  19. 19125
  20. 20120
  21. 2192
  22. 2234
  23. 2330
  24. 24119
  25. 25144
  26. 26795
  27. 27275
  28. 2887
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.9
    CVE-2025-24016 Exploited Public exploit Scanner template EPSS 94%

    Remote code execution in Wazuh server

    Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.9.1, an unsafe deserialization vulnerability allows for remote code execution on Wazuh servers. DistributedAPI param…

    wazuh wazuh github.com/wazuh/wazuh Go
    KEV Jun 10, 2025
  • Critical 9.8
    CVE-2024-13011

    WP Foodbakery <= 4.7 - Unauthenticated Arbitrary File Upload

    The WP Foodbakery plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'upload_publisher_profile_image' function in versions up to, and including, 4.7. This makes it possible for unauthenticated attacker…

    Chimpstudio WP Foodbakery Web / CMS
  • Critical 9.2
    CVE-2025-24032

    PAM-PKCS#11 vulnerable to authentication bypass with default value for `cert_policy` (`none`)

    PAM-PKCS#11 is a Linux-PAM login module that allows a X.509 certificate based user login. Prior to version 0.6.13, if cert_policy is set to none (the default value), then pam_pkcs11 will only check if the user is capable of logging into the token. An attacker…

    OpenSC pam_pkcs11 pam-pkcs11 pam-pkcs11 Debian Ubuntu