Skip to content
OpenAdvisories

Archive

20 February 2025

Vulnerabilities first published on this day (UTC), newest first.

← January 2025 2025 / February /20 March 2025 →
  1. 139
  2. 24
  3. 3187
  4. 4151
  5. 5119
  6. 699
  7. 7120
  8. 87
  9. 94
  10. 1081
  11. 11283
  12. 12265
  13. 13132
  14. 14134
  15. 1524
  16. 1640
  17. 1748
  18. 18162
  19. 19125
  20. 20120
  21. 2192
  22. 2234
  23. 2330
  24. 24119
  25. 25144
  26. 26795
  27. 27275
  28. 2887
All Critical High Medium Low Exploited only Public exploit

71 results · Clear filters · Feed

  • Medium 5.4
    CVE-2023-51306

    PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "name, title"…

  • Medium 6.5
    CVE-2023-51324

    PHPJabbers Shared Asset Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to ex…

  • Medium 4.3
    CVE-2023-51310

    A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Car Park Booking System v3.0 a…

  • Medium 5.4
    CVE-2023-51318

    PHPJabbers Bus Reservation System v1.1 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "title, name"…

  • Medium 6.5
    CVE-2023-51327

    A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software v1.0 allows attackers…

  • Medium 6.5
    CVE-2023-51326

    A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software v1.0 allows attackers…

  • Medium 5.4
    CVE-2023-51337

    PHPJabbers Event Ticketing System v1.0 is vulnerable to Reflected Cross-Site Scripting (XSS) in "lid" parameter in inde…

  • Medium 5.4
    CVE-2023-51312

    PHPJabbers Restaurant Booking System v3.0 is vulnerable to Reflected Cross-Site Scripting (XSS) in Reservations menu, S…

  • Medium 6.5
    CVE-2023-51339

    A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Event Ticketing System v1.0 allows attackers to …

  • Medium 6.5
    CVE-2023-51335

    PHPJabbers Cinema Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "title, name" …

  • Medium 6.5
    CVE-2023-51323

    A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Shared Asset Booking System v1.0 allows attacker…

  • Medium 6.5
    CVE-2024-55457 Public exploit Scanner template

    MasterSAM Star Gate 11 is vulnerable to directory traversal via /adama/adama/downloadService. An attacker can exploit t…

  • Medium 6.5
    CVE-2024-54961

    Nagios XI 2024R1.2.2 has an Information Disclosure vulnerability, which allows unauthenticated users to access multiple…

  • Medium 6.1
    CVE-2024-54959

    Nagios XI 2024R1.2.2 is vulnerable to a Cross-Site Request Forgery (CSRF) attack through the Favorites component, enabl…

  • Medium 6.1
    CVE-2024-54958

    Nagios XI 2024R1.2.2 is susceptible to a stored Cross-Site Scripting (XSS) vulnerability in the Tools page. This flaw a…

  • Medium 6.5
    CVE-2024-54960

    A SQL Injection vulnerability in Nagios XI 2024R1.2.2 allows a remote attacker to execute SQL injection via a crafted p…

  • Medium 5.3
    CVE-2025-24946

    The hash table used to manage connections in picoquic before b80fd3f uses a weak hash function, allowing remote attacke…

    privateoctopus picoquic
  • Medium 5.3
    CVE-2025-24947

    A hash collision vulnerability (in the hash table used to manage connections) in LSQUIC (aka LiteSpeed QUIC) before 4.2…

    litespeedtech lsquic
  • Medium 5.3
    CVE-2025-27218 Public exploit Scanner template EPSS 65%

    Sitecore Experience Manager (XM) and Experience Platform (XP) 10.4 before KB1002844 allow remote code execution through…

  • Medium 5.3
    CVE-2025-23020

    Kwik hash collision vulnerability

    An issue was discovered in Kwik before 0.10.1. A hash collision vulnerability (in the hash table used to manage connections) allows remote attackers to cause a considerable CPU load on the server (a Hash DoS attack) by initiating connections with colliding So…

    ptrd Kwik tech.kwik:kwik Maven
  • Medium 5.4
    CVE-2025-25958

    Cross Site Scripting vulnerabilities in phpcmsv9 v.9.6.3 allows a remote attacker to escalate privileges via a crafted …

  • Medium 6.1
    CVE-2025-25960

    Cross Site Scripting vulnerability in phpcmsv9 v.9.6.3 allows a remote attacker to escalate privileges via the menu int…

  • Medium 6.5
    CVE-2025-25973

    A stored Cross Site Scripting vulnerability in the "related recommendations" feature in Ppress v.0.0.9 allows a remote …

  • Medium 6.0
    CVE-2025-25968 Public exploit

    DDSN Interactive cm3 Acora CMS version 10.1.1 contains an improper access control vulnerability. An editor-privileged u…

  • Medium 6.1
    CVE-2025-25957

    Cross Site Scripting vulnerabilities in Xunruicms v.4.6.3 and before allows a remote attacker to escalate privileges vi…

  • Medium 6.5
    CVE-2025-26307

    A memory leak has been identified in the parseSWF_IMPORTASSETS2 function in util/parser.c of libming v0.4.8, which allo…

    ming Ubuntu
  • Medium 6.5
    CVE-2025-26310

    Multiple memory leaks have been identified in the ABC file parsing functions (parseABC_CONSTANT_POOL and `parseABC_FILE…

    ming Ubuntu
  • Medium 6.5
    CVE-2025-26311

    Multiple memory leaks have been identified in the clip actions parsing functions (parseSWF_CLIPACTIONS and parseSWF_CLI…

    ming Ubuntu
  • Medium 6.5
    CVE-2025-26309

    A memory leak has been identified in the parseSWF_DEFINESCENEANDFRAMEDATA function in util/parser.c of libming v0.4.8, …

    ming Ubuntu
  • Medium 6.5
    CVE-2025-26306

    A memory leak has been identified in the readSizedString function in util/read.c of libming v0.4.8, which allows attack…

    ming Ubuntu
  • Medium 6.5
    CVE-2025-26308

    A memory leak has been identified in the parseSWF_FILTERLIST function in util/parser.c of libming v0.4.8, which allows …

    ming Ubuntu