Archive

24 February 2025

Vulnerabilities first published on this day (UTC), newest first.

← January 2025 2025 / February /24 March 2025 →

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

High 8.3

CVE-2025-26529 Public exploit

Stored XSS risk in admin live log

Description information displayed in the site administration live log required additional sanitizing to prevent a stored XSS risk.

Moodle moodle moodle/moodle moodle Web / CMS Ubuntu Packagist

Feb 24, 2025
Medium 6.1

CVE-2025-0690 Public exploit

Grub2: read: integer overflow may lead to out-of-bounds write

The read command is used to read the keyboard input from the user, while reads it keeps the input length in a 32-bit integer value which is further used to reallocate the line buffer to accept the next character. During this process, with a line big enough it…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux

Feb 24, 2025
Critical 9.9

CVE-2025-25279 Public exploit EPSS 24%

Arbitrary file read in Mattermost Boards via import & export board archive

Mattermost versions 10.4.x <= 10.4.1, 9.11.x <= 9.11.7, 10.3.x <= 10.3.2, 10.2.x <= 10.2.2 fail to properly validate board blocks when importing boards which allows an attacker could read any arbitrary file on the system via importing and exporting a speciall…

Mattermost Mattermost github.com/mattermost/mattermost-server github.com/mattermost/mattermost-server/v6 Go

Feb 24, 2025
Critical 9.8

CVE-2024-54820 Public exploit

XOne Web Monitor v02.10.2024.530 framework 1.0.4.9 was discovered to contain a SQL injection vulnerability in the login…

Feb 24, 2025
Medium 4.8

CVE-2025-25460 Public exploit

A stored Cross-Site Scripting (XSS) vulnerability was identified in FlatPress 1.3.1 within the "Add Entry" feature. Thi…

Feb 24, 2025