Archive

18 February 2025

Vulnerabilities first published on this day (UTC), newest first.

← January 2025 2025 / February /18 March 2025 →

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

Low 3.8

CVE-2024-4028

Keycloak-core: stored xss in keycloak when creating a items in admin console

A vulnerability was found in Keycloak. This issue may allow a privileged attacker to use a malicious payload as the permission while creating items (Resource and Permissions) from the admin console, leading to a stored cross-site scripting (XSS) attack.

Red Hat Red Hat Single Sign-On 7 Red Hat Build of Keycloak org.keycloak:keycloak-core Wolfi Maven

Feb 18, 2025
Low 1.3

CVE-2025-25300

smartbanner.js rel noopener XSS vulnerability

smartbanner.js is a customizable smart app banner for iOS and Android. Prior to version 1.14.1, clicking on smartbanner `View` link and navigating to 3rd party page leaves `window.opener` exposed. It may allow hostile third parties to abuse `window.opener`, e…

ain smartbanner.js smartbanner.js npm

Feb 18, 2025
Low 2.0

CVE-2024-57257

A stack consumption issue in sqfs_size in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with d…

denx U-Boot u-boot u-boot Debian Ubuntu

Feb 18, 2025
Low 2.9

CVE-2025-27113

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.

xmlsoft libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux Alpine Wolfi

Feb 18, 2025