Skip to content
OpenAdvisories

Archive

19 February 2025

Vulnerabilities first published on this day (UTC), newest first.

← January 2025 2025 / February /19 March 2025 →
  1. 139
  2. 24
  3. 3187
  4. 4151
  5. 5119
  6. 699
  7. 7120
  8. 87
  9. 94
  10. 1081
  11. 11283
  12. 12265
  13. 13132
  14. 14134
  15. 1524
  16. 1640
  17. 1748
  18. 18162
  19. 19125
  20. 20120
  21. 2192
  22. 2234
  23. 2330
  24. 24119
  25. 25144
  26. 26795
  27. 27275
  28. 2887
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.9
    CVE-2024-37361

    Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data

    The application deserializes untrusted data without sufficiently verifying that the resulting data will be valid. (CWE-502)   Hitachi Vantara Pentaho Business Analytics Server versions before 10.2.0.0 and 9.3.0.9, including 8.3.x, deserialize untrusted JSON d…

    Hitachi Vantara Pentaho Business Analytics Server Pentaho Data Integration & Analytics
  • Critical 9.3
    CVE-2025-1135

    SQL Injection in ChurchCRM CurrentFundraiser Parameter via BatchWinnerEntry.php

    A vulnerability exists in ChurchCRM 5.13.0. and prior that allows an attacker to execute arbitrary SQL queries by exploiting a boolean-based and time-based blind SQL Injection vulnerability in the BatchWinnerEntry functionality. The CurrentFundraiser paramete…

    ChurchCRM ChurchCRM
  • Critical 9.3
    CVE-2025-1134

    SQL Injection in ChurchCRM CurrentFundraiser Parameter via DonatedItemEditor.php

    A vulnerability exists in ChurchCRM 5.13.0 and prior that allows an attacker to execute arbitrary SQL queries by exploiting a boolean-based and time-based blind SQL Injection vulnerability in the DonatedItemEditor functionality. The CurrentFundraiser paramete…

    ChurchCRM ChurchCRM
  • Critical 9.3
    CVE-2025-1133

    SQL Injection in ChurchCRM EID Parameter via EditEventAttendees.php

    A vulnerability exists in ChurchCRM 5.13.0 and prior that allows an attacker to execute arbitrary SQL queries by exploiting a boolean-based blind SQL Injection vulnerability in the EditEventAttendees functionality. The EID parameter is directly concatenated i…

    ChurchCRM ChurchCRM
  • Critical 9.3
    CVE-2025-1132

    SQL Injection in ChurchCRM EN_tyid Parameter via EditEventAttendees.php

    A time-based blind SQL Injection vulnerability exists in the ChurchCRM 5.13.0 and prior EditEventAttendees.php within the EN_tyid parameter. The parameter is directly inserted into an SQL query without proper sanitization, allowing attackers to inject malicio…

    ChurchCRM ChurchCRM
  • Critical 9.1
    CVE-2020-35546

    Lexmark MX6500 LW75.JD.P296 and previous devices have Incorrect Access Control via the access control settings.

  • Critical 9.8
    CVE-2023-46271

    Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has a buffer overflow. This issue arises f…