Skip to content
OpenAdvisories

Archive

14 February 2025

Vulnerabilities first published on this day (UTC), newest first.

← January 2025 2025 / February /14 March 2025 →
  1. 139
  2. 24
  3. 3187
  4. 4151
  5. 5119
  6. 699
  7. 7120
  8. 87
  9. 94
  10. 1081
  11. 11283
  12. 12265
  13. 13132
  14. 14134
  15. 1524
  16. 1640
  17. 1748
  18. 18162
  19. 19125
  20. 20120
  21. 2192
  22. 2234
  23. 2330
  24. 24119
  25. 25144
  26. 26795
  27. 27275
  28. 2887
All Critical High Medium Low Exploited only Public exploit

134 results · Feed

  • Medium 5.5
    CVE-2025-25740

    D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the PSK parameter…

  • Medium 5.1
    CVE-2025-25991

    SQL Injection vulnerability in hooskcms v.1.7.1 allows a remote attacker to obtain sensitive information via the /insta…

  • Medium 4.8
    CVE-2025-25988

    Cross Site Scripting vulnerability in hooskcms v.1.8 allows a remote attacker to cause a denial of service via the cust…

  • High 7.5
    CVE-2025-25994

    SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information via the par…

  • Medium 6.1
    CVE-2025-25990

    Cross Site Scripting vulnerability in hooskcms v.1.7.1 allows a remote attacker to obtain sensitive information via the…

  • High 8.8
    CVE-2025-25745

    D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the Password para…

  • High 8.6
    CVE-2025-26819

    Monero through 0.18.3.4 before ec74ff4 does not have response limits on HTTP server connections.

    getmonero Monero monero monero Debian Ubuntu
  • High 8.8
    CVE-2025-26156

    A SQL Injection vulnerability was found in /shopping/track-orders.php in PHPGurukul Online Shopping Portal v2.1, which …

  • High 8.1
    CVE-2025-26519

    musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv…

    musl -libc musl musl musl Debian Ubuntu Alpine
  • Medium 4.5
    CVE-2025-26791

    DOMPurify allows Cross-site Scripting (XSS)

    DOMPurify before 3.2.4 has an incorrect template literal regular expression, sometimes leading to mutation cross-site scripting (mXSS).

    cure53 DOMPurify grafana-image-renderer dompurify Debian Ubuntu Wolfi npm
  • Medium 5.9
    CVE-2025-26157

    A SQL Injection vulnerability was found in /bpms/index.php in Source Code and Project Beauty Parlour Management System …

  • High 8.4
    CVE-2025-26788 Public exploit

    StrongKey FIDO Server before 4.15.1 treats a non-discoverable (namedcredential) flow as a discoverable transaction.

    StrongKey FIDO Server
  • Medium 6.9
    CVE-2025-26789

    An issue was discovered in Logpoint AgentX before 1.5.0. A vulnerability caused by limited access controls allowed li-a…

    Logpoint AgentX
  • Medium 5.6
    CVE-2025-26158

    A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the manage-employee.php page of Kashipara Online At…