Skip to content
OpenAdvisories

Archive

14 February 2025

Vulnerabilities first published on this day (UTC), newest first.

← January 2025 2025 / February /14 March 2025 →
  1. 139
  2. 24
  3. 3187
  4. 4151
  5. 5119
  6. 699
  7. 7120
  8. 87
  9. 94
  10. 1081
  11. 11283
  12. 12265
  13. 13132
  14. 14134
  15. 1524
  16. 1640
  17. 1748
  18. 18162
  19. 19125
  20. 20120
  21. 2192
  22. 2234
  23. 2330
  24. 24119
  25. 25144
  26. 26795
  27. 27275
  28. 2887
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.2
    CVE-2025-26506

    Certain HP LaserJet Pro, HP LaserJet Enterprise, HP LaserJet Managed Printers – Potential Remote Code Execution and Potential Elevation of Privilege

    Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job.

    HP Certain HP LaserJet Pro, HP LaserJet Enterprise, HP LaserJet Managed Printers
  • Critical 9.8
    CVE-2024-56180

    Apache EventMesh: raft Hessian Deserialization Vulnerability allowing remote code execution

    CWE-502 Deserialization of Untrusted Data at the eventmesh-meta-raft plugin module in Apache EventMesh master branch without release version on windows\linux\mac os e.g. platforms allows attackers to send controlled message and remote code execute via hessian…

    Apache Software Foundation Apache EventMesh org.apache.eventmesh:eventmesh-meta-raft Maven
  • Critical 10.0
    CVE-2024-13152

    SQLi in BSS Software's Mobuy Online Machinery Monitoring Panel

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BSS Software Mobuy Online Machinery Monitoring Panel allows SQL Injection. This issue affects Mobuy Online Machinery Monitoring Panel: before 2.0.

    BSS Software Mobuy Online Machinery Monitoring Panel
  • Critical 9.9
    CVE-2025-0867

    Privilege Escalation in MEAC300

    The standard user uses the run as function to start the MEAC applications with administrative privileges. To ensure that the system can startup on its own, the credentials of the administrator were stored. Consequently, the EPC2 user can execute any command w…

    SICK SICK MEAC300
  • Critical 9.5
    CVE-2024-52577

    Apache Ignite: Possible RCE when deserializing incoming messages by the server node

    In Apache Ignite versions from 2.6.0 and before 2.17.0, configured Class Serialization Filters are ignored for some Ignite endpoints. The vulnerability could be exploited if an attacker manually crafts an Ignite message containing a vulnerable object whose cl…

    Apache Software Foundation Apache Ignite trino trino-plugin-opensearch Wolfi Maven
  • Critical 9.8
    CVE-2025-1298

    Logic vulnerability in the mobile application (com.transsion.carlcare) may lead to the risk of account takeover.

    TECNO com.transsion.carlcare
  • Critical 9.9
    CVE-2025-22630

    WordPress Widget Options Plugin <= 4.1.0 - Arbitrary Code Execution vulnerability

    Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Marketing Fire Widget Options widget-options allows OS Command Injection.This issue affects Widget Options: from n/a through <= 4.1.0.

    Marketing Fire Widget Options
  • Critical 9.8
    CVE-2024-56973

    Insecure Permissions vulnerability in Alvaria, Inc Unified IP Unified Director before v.7.2SP2 allows a remote attacker…