Skip to content
OpenAdvisories

Archive

20 February 2025

Vulnerabilities first published on this day (UTC), newest first.

← January 2025 2025 / February /20 March 2025 →
  1. 139
  2. 24
  3. 3187
  4. 4151
  5. 5119
  6. 699
  7. 7120
  8. 87
  9. 94
  10. 1081
  11. 11283
  12. 12265
  13. 13132
  14. 14134
  15. 1524
  16. 1640
  17. 1748
  18. 18162
  19. 19125
  20. 20120
  21. 2192
  22. 2234
  23. 2330
  24. 24119
  25. 25144
  26. 26795
  27. 27275
  28. 2887
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-24893 Exploited Public exploit Scanner template EPSS 100%

    Remote code execution as guest via SolrSearchMacros request in xwiki

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any guest can perform arbitrary remote code execution through a request to `SolrSearch`. This impacts the confidentiality, integrity and availability of t…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-search-solr-ui Maven
    KEV Oct 30, 2025
  • Critical 9.3
    CVE-2025-0868 Public exploit Scanner template EPSS 17%

    Remote Code Execution in DocsGPT

    A vulnerability, that could result in Remote Code Execution (RCE), has been found in DocsGPT. Due to improper parsing of JSON data using eval() an unauthorized attacker could send arbitrary Python code to be executed via /api/remote endpoint.. This issue affe…

    arc53 DocsGPT docsgpt npm
  • Medium 6.5
    CVE-2024-55457 Public exploit Scanner template

    MasterSAM Star Gate 11 is vulnerable to directory traversal via /adama/adama/downloadService. An attacker can exploit t…

  • Critical 9.8
    CVE-2024-54756 Public exploit

    A remote code execution (RCE) vulnerability in the ZScript function of ZDoom Team GZDoom v4.13.1 allows attackers to ex…

  • Medium 5.3
    CVE-2025-27218 Public exploit Scanner template EPSS 65%

    Sitecore Experience Manager (XM) and Experience Platform (XP) 10.4 before KB1002844 allow remote code execution through…

  • Medium 6.0
    CVE-2025-25968 Public exploit

    DDSN Interactive cm3 Acora CMS version 10.1.1 contains an improper access control vulnerability. An editor-privileged u…