Skip to content
OpenAdvisories

Archive

15 February 2025

Vulnerabilities first published on this day (UTC), newest first.

← January 2025 2025 / February /15 March 2025 →
  1. 139
  2. 24
  3. 3187
  4. 4151
  5. 5119
  6. 699
  7. 7120
  8. 87
  9. 94
  10. 1081
  11. 11283
  12. 12265
  13. 13132
  14. 14134
  15. 1524
  16. 1640
  17. 1748
  18. 18162
  19. 19125
  20. 20120
  21. 2192
  22. 2234
  23. 2330
  24. 24119
  25. 25144
  26. 26795
  27. 27275
  28. 2887
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2024-13488 Public exploit

    LTL Freight Quotes – Estes Edition <= 3.3.7 - Unauthenticated SQL Injection

    The LTL Freight Quotes – Estes Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropship_edit_id' and 'edit_id' parameters in all versions up to, and including, 3.3.7 due to insufficient escaping on the user supplied parameter and lack of …

    Eniture technology LTL Freight Quotes – Estes Edition Web / CMS
  • Critical 9.8
    CVE-2024-13513 Public exploit

    Oliver POS – A WooCommerce Point of Sale (POS) <= 2.4.2.3 - Sensitive Information Exposure to Privilege Escalation

    The Oliver POS – A WooCommerce Point of Sale (POS) plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.4.2.3 via the logging functionality. This makes it possible for unauthenticated attackers to extrac…

    oliverpos Oliver POS – A WooCommerce Point of Sale (POS) Web / CMS
  • Critical 9.8
    CVE-2025-1302 Public exploit Scanner template EPSS 10%

    JSONPath Plus allows Remote Code Execution

    Versions of the package jsonpath-plus before 10.3.0 are vulnerable to Remote Code Execution (RCE) due to improper input sanitization. An attacker can execute aribitrary code on the system by exploiting the unsafe default usage of eval='safe' mode. **Note:** T…

    katib-suggestion-hyperopt katib-earlystopping katib-suggestion-hyperband katib-suggestion-optuna-enas Wolfi npm