Skip to content
OpenAdvisories

Archive

13 February 2025

Vulnerabilities first published on this day (UTC), newest first.

← January 2025 2025 / February /13 March 2025 →
  1. 139
  2. 24
  3. 3187
  4. 4151
  5. 5119
  6. 699
  7. 7120
  8. 87
  9. 94
  10. 1081
  11. 11283
  12. 12265
  13. 13132
  14. 14134
  15. 1524
  16. 1640
  17. 1748
  18. 18162
  19. 19125
  20. 20120
  21. 2192
  22. 2234
  23. 2330
  24. 24119
  25. 25144
  26. 26795
  27. 27275
  28. 2887
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.6
    CVE-2025-22896 Public exploit

    mySCADA myPRO Manager Cleartext Storage of Sensitive Information

    mySCADA myPRO Manager stores credentials in cleartext, which could allow an attacker to obtain sensitive information.

    mySCADA myPRO Manager
  • Critical 10.0
    CVE-2025-24865 Public exploit

    mySCADA myPRO Manager Missing Authentication for Critical Function

    The administrative web interface of mySCADA myPRO Manager can be accessed without authentication which could allow an unauthorized attacker to retrieve sensitive information and upload files without the associated password.

    mySCADA myPRO Manager
  • High 7.1
    CVE-2025-26543 Public exploit

    WordPress Simple Responsive Menu plugin <= 2.1 - CSRF to Stored XSS vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Pukhraj Suthar Simple Responsive Menu simple-responsive-menu allows Stored XSS.This issue affects Simple Responsive Menu: from n/a through <= 2.1.

    Pukhraj Suthar Simple Responsive Menu
  • High 8.1
    CVE-2025-1094 Public exploit EPSS 90%

    PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

    Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn() allows a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL …

    postgresql-15 postgresql-9.3 postgresql-17 postgresql15 Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.3
    CVE-2024-13346 Public exploit

    Avada Theme <= 7.11.13 - Unauthenticated Arbitrary Shortcode Execution

    The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 7.11.13. This is due to the software allowing users to execute an action that does not properly va…

    ThemeFusion Avada | Website Builder For WordPress & WooCommerce Web / CMS
  • High 7.3
    CVE-2024-57378 Public exploit

    Wazuh SIEM version 4.8.2 is affected by a broken access control vulnerability. This issue allows the unauthorized creat…

  • Medium 5.4
    CVE-2024-54951 Public exploit

    Monica 4.1.2 is vulnerable to Cross Site Scripting (XSS). A malicious user can create a malformed contact and use that …