Skip to content
OpenAdvisories

Archive

24 February 2025

Vulnerabilities first published on this day (UTC), newest first.

← January 2025 2025 / February /24 March 2025 →
  1. 139
  2. 24
  3. 3187
  4. 4151
  5. 5119
  6. 699
  7. 7120
  8. 87
  9. 94
  10. 1081
  11. 11283
  12. 12265
  13. 13132
  14. 14134
  15. 1524
  16. 1640
  17. 1748
  18. 18162
  19. 19125
  20. 20120
  21. 2192
  22. 2234
  23. 2330
  24. 24119
  25. 25144
  26. 26795
  27. 27275
  28. 2887
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Low 3.1
    CVE-2025-26532

    Teachers can evade trusttext config when restoring glossary entries

    Additional checks were required to ensure trusttext is applied (when enabled) to glossary entries being restored.

    Moodle moodle moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Low 3.1
    CVE-2025-26531

    IDOR in badges allows disabling of arbitrary badges

    Insufficient capability checks made it possible to disable badges a user does not have permission to access.

    Moodle moodle moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Low 3.4
    CVE-2025-26528

    Stored XSS in ddimageortext question type

    The drag-and-drop onto image (ddimageortext) question type required additional sanitizing to prevent a stored XSS risk.

    Moodle moodle moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Low 3.3
    CVE-2025-1632

    libarchive bsdunzip.c list null pointer dereference

    A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The e…

    libarchive libarchive libarchive libarchive Debian Ubuntu Azure Linux Alpine Wolfi
  • Low 3.1
    CVE-2025-1412

    Session Persistence After User-to-Bot Conversion

    Mattermost versions 9.11.x <= 9.11.6, 10.4.x <= 10.4.1 fail to invalidate all active sessions when converting a user to a bot, with allows the converted user to escalate their privileges depending on the permissions granted to the bot.

    Mattermost Mattermost github.com/mattermost/mattermost-server github.com/mattermost/mattermost-server/v6 Go
  • Low 3.5
    CVE-2025-1629

    Excitel Broadband Private my Excitel App One-Time Password excessive authentication

    A vulnerability was found in Excitel Broadband Private my Excitel App 3.13.0 on Android. It has been classified as problematic. Affected is an unknown function of the component One-Time Password Handler. The manipulation leads to improper restriction of exces…

    Excitel Broadband Private my Excitel App
  • Low 2.4
    CVE-2025-1617

    Netis WF2780 Wireless 2.4G Menu cross site scripting

    A vulnerability, which was classified as problematic, was found in Netis WF2780 2.1.41925. This affects an unknown part of the component Wireless 2.4G Menu. The manipulation of the argument SSID leads to cross site scripting. It is possible to initiate the at…

    Netis WF2780
  • Low 2.4
    CVE-2025-1615

    FiberHome AN5506-01A ONU GPON NAT Submenu cross site scripting

    A vulnerability classified as problematic was found in FiberHome AN5506-01A ONU GPON RP2511. Affected by this vulnerability is an unknown functionality of the component NAT Submenu. The manipulation of the argument Description leads to cross site scripting. T…

    FiberHome AN5506-01A ONU GPON
  • Low 2.4
    CVE-2025-1614

    FiberHome AN5506-01A ONU GPON Port Forwarding Submenu portForwardingCfg cross site scripting

    A vulnerability classified as problematic has been found in FiberHome AN5506-01A ONU GPON RP2511. Affected is an unknown function of the file /goform/portForwardingCfg of the component Port Forwarding Submenu. The manipulation of the argument pf_Description l…

    FiberHome AN5506-01A ONU GPON
  • Low 2.4
    CVE-2025-1613

    FiberHome AN5506-01A ONU GPON URL Filtering Submenu URL_filterCfg cross site scripting

    A vulnerability was found in FiberHome AN5506-01A ONU GPON RP2511. It has been rated as problematic. This issue affects some unknown processing of the file /goform/URL_filterCfg of the component URL Filtering Submenu. The manipulation of the argument url_IP l…

    FiberHome AN5506-01A ONU GPON
  • Low 3.5
    CVE-2025-1612

    Edimax BR-6288ACL wireless5g_basic.asp cross site scripting

    A vulnerability was found in Edimax BR-6288ACL 1.30. It has been declared as problematic. This vulnerability affects unknown code of the file wireless5g_basic.asp. The manipulation of the argument SSID leads to cross site scripting. The attack can be initiate…

    Edimax BR-6288ACL