Skip to content
OpenAdvisories

Archive

16 February 2025

Vulnerabilities first published on this day (UTC), newest first.

← January 2025 2025 / February /16 March 2025 →
  1. 139
  2. 24
  3. 3187
  4. 4151
  5. 5119
  6. 699
  7. 7120
  8. 87
  9. 94
  10. 1081
  11. 11283
  12. 12265
  13. 13132
  14. 14134
  15. 1524
  16. 1640
  17. 1748
  18. 18162
  19. 19125
  20. 20120
  21. 2192
  22. 2234
  23. 2330
  24. 24119
  25. 25144
  26. 26795
  27. 27275
  28. 2887
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • High 7.8
    CVE-2025-0591

    Out-of-bounds Read vulnerability in CX-Programmer

    Out-of-bounds Read vulnerability (CWE-125) was found in CX-Programmer. Attackers may be able to read sensitive information or cause an application crash by abusing this vulnerability.

    Omron FA Integrated Tool Package CX-One ICS / OT
  • High 7.1
    CVE-2025-26759

    WordPress Content Snippet Manager plugin <= 1.1.5 - CSRF to Stored XSS vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in alexvtn Content Snippet Manager content-snippet-manager allows Stored XSS.This issue affects Content Snippet Manager: from n/a through <= 1.1.5.

    alexvtn Content Snippet Manager
  • High 7.1
    CVE-2025-26768

    WordPress what3words Address Field plugin <= 4.0.15 - CSRF to Stored XSS vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in what3words what3words Address Field 3-word-address-validation-field allows Stored XSS.This issue affects what3words Address Field: from n/a through <= 4.0.15.

    what3words what3words Address Field
  • High 7.1
    CVE-2025-22680

    WordPress Ad Inserter Pro plugin <= 2.7.39 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Ad Inserter Pro allows Reflected XSS. This issue affects Ad Inserter Pro: from n/a through 2.7.39.

    NotFound Ad Inserter Pro
  • High 7.6
    CVE-2025-26755

    WordPress WP Airbnb Review Slider Plugin <= 3.9 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in jgwhite33 WP Airbnb Review Slider wp-airbnb-review-slider allows Blind SQL Injection.This issue affects WP Airbnb Review Slider: from n/a through <= 3.9.

    jgwhite33 WP Airbnb Review Slider
  • High 7.1
    CVE-2024-44044

    WordPress Oshine Modules plugin < 3.3.8 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brandexponents Oshine Modules oshine-modules allows Reflected XSS.This issue affects Oshine Modules: from n/a through < 3.3.8.

    Brandexponents Oshine Modules
  • High 7.1
    CVE-2025-22286

    WordPress LTL Freight Quotes – Worldwide Express Edition plugin <= 5.0.21 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in enituretechnology LTL Freight Quotes – Worldwide Express Edition ltl-freight-quotes-worldwide-express-edition allows Reflected XSS.This issue affects LTL Fre…

    Eniture technology LTL Freight Quotes – Worldwide Express Edition
  • High 7.1
    CVE-2025-22284

    WordPress LTL Freight Quotes – Unishippers Edition plugin <= 2.5.8 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in enituretechnology LTL Freight Quotes – Unishippers Edition ltl-freight-quotes-unishippers-edition allows Reflected XSS.This issue affects LTL Freight Quotes …

    Eniture technology LTL Freight Quotes – Unishippers Edition
  • High 7.3
    CVE-2025-1355

    needyamin Library Card System Add Picture signup.php unrestricted upload

    A vulnerability was found in needyamin Library Card System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /signup.php of the component Add Picture. The manipulation leads to unrestricted upload. T…

    needyamin Library Card System
  • High 7.0
    CVE-2025-1353

    Kong Insomnia profapi.dll untrusted search path

    A vulnerability was found in Kong Insomnia up to 10.3.0 and classified as critical. This issue affects some unknown processing in the library profapi.dll. The manipulation leads to untrusted search path. An attack has to be approached locally. The complexity …

    Kong Insomnia
  • High 8.8
    CVE-2025-1340 EPSS 17%

    TOTOLINK X18 cstecgi.cgi setPasswordCfg stack-based overflow

    A vulnerability classified as critical has been found in TOTOLINK X18 9.1.0cu.2024_B20220329. Affected is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi. The manipulation as part of String leads to stack-based buffer overflow. It is possible to …

    Toto Link X18
  • High 7.3
    CVE-2025-1338 Public exploit Scanner template EPSS 51%

    NUUO Camera handle_config.php print_file command injection

    A vulnerability was found in NUUO Camera up to 20250203. It has been declared as critical. This vulnerability affects the function print_file of the file /handle_config.php. The manipulation of the argument log leads to command injection. The attack can be in…

    NUUO Camera