Skip to content
OpenAdvisories

Archive

21 February 2025

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Medium 6.8
    CVE-2019-8900 Public exploit EPSS 70%

    A vulnerability in the SecureROM of some Apple devices can be exploited by an unauthenticated local attacker to execute…

  • Medium 6.4
    CVE-2025-1489 Public exploit

    WP-Appbox <= 4.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via appbox Shortcode

    The WP-Appbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's appbox shortcode in all versions up to, and including, 4.5.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it…

  • High 7.5
    CVE-2025-26794 Public exploit EPSS 78%

    Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote SQL injection. (Resolving SQL…

  • Critical 9.8
    CVE-2025-26014 Public exploit

    A Remote Code Execution (RCE) vulnerability in Loggrove v.1.0 allows a remote attacker to execute arbitrary code via th…