Skip to content
OpenAdvisories

Archive

18 February 2025

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 6.8
    CVE-2025-26465 Public exploit

    Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled

    A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific cond…

  • Medium 5.4
    CVE-2024-56882 Public exploit

    Sage DPW before 2024_12_000 is vulnerable to Cross Site Scripting (XSS). Low-privileged Sage users with employee role p…

  • High 8.1
    CVE-2024-56883 Public exploit

    Sage DPW before 2024_12_001 is vulnerable to Incorrect Access Control. The implemented role-based access controls are n…