Skip to content
OpenAdvisories

Archive

27 February 2025

Vulnerabilities first published on this day (UTC), newest first.

← January 2025 2025 / February /27 March 2025 →
  1. 139
  2. 24
  3. 3187
  4. 4151
  5. 5119
  6. 699
  7. 7120
  8. 87
  9. 94
  10. 1081
  11. 11283
  12. 12265
  13. 13132
  14. 14134
  15. 1524
  16. 1640
  17. 1748
  18. 18162
  19. 19125
  20. 20120
  21. 2192
  22. 2234
  23. 2330
  24. 24119
  25. 25144
  26. 26795
  27. 27275
  28. 2887
All Critical High Medium Low Exploited only Public exploit

19 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-21805

    RDMA/rtrs: Add missing deinit() call

    In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: Add missing deinit() call A warning is triggered when repeatedly connecting and disconnecting the rnbd: list_add corruption. prev->next should be next (ffff88800b13e480), but was f…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Critical 9.8
    CVE-2024-13148

    SQLi in Yukseloglu Filter's B2B Login Platform

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yukseloglu Filter B2B Login Platform allows SQL Injection. This issue affects B2B Login Platform: before 16.01.2025.

    Yukseloglu Filter B2B Login Platform
  • Critical 9.8
    CVE-2025-1751

    SQL Injection CIGES

    A SQL Injection vulnerability has been found in Ciges 2.15.5 from ATISoluciones. This vulnerability allows an attacker to retrieve, create, update and delete database via $idServicio parameter in /modules/ajaxBloqueaCita.php endpoint.

    ATISoluciones CIGES
  • Critical 9.8
    CVE-2025-21796

    nfsd: clear acl_access/acl_default after releasing them

    In the Linux kernel, the following vulnerability has been resolved: nfsd: clear acl_access/acl_default after releasing them If getting acl_default fails, acl_access and acl_default will be released simultaneously. However, acl_access will still retain a point…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2025-21748

    ksmbd: fix integer overflows on 32 bit systems

    In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix integer overflows on 32 bit systems On 32bit systems the addition operations in ipc_msg_alloc() can potentially overflow leading to memory corruption. Add bounds checking using KSM…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Critical 9.6
    CVE-2024-58006

    PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar()

    In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar() In commit 4284c88fff0e ("PCI: designware-ep: Allow pci_epc_set_bar() update inbound map address") set_bar() was modified to …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2025-21707

    mptcp: consolidate suboption status

    In the Linux kernel, the following vulnerability has been resolved: mptcp: consolidate suboption status MPTCP maintains the received sub-options status is the bitmask carrying the received suboptions and in several bitfields carrying per suboption additional …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2024-55160

    GFast between v2 to v3.2 was discovered to contain a SQL injection vulnerability via the OrderBy parameter at /system/o…

  • Critical 9.8
    CVE-2024-53944 EPSS 40%

    An issue was discovered on Tuoshi/Dionlink LT15D 4G Wi-Fi devices through M7628NNxlSPv2xUI_v1.0.1802.10.08_P4 and LT21B…

  • Critical 9.8
    CVE-2024-38292

    In Extreme Networks XIQ-SE before 24.2.11, due to a missing access control check, a path traversal is possible, which m…

  • Critical 9.8
    CVE-2024-36047

    Infoblox NIOS through 8.6.4 and 9.x through 9.0.3 has Improper Input Validation.

  • Critical 9.8
    CVE-2024-36046

    Infoblox NIOS through 8.6.4 executes with more privileges than required.

  • Critical 9.8
    CVE-2024-51139

    Buffer Overflow vulnerability in Vigor2620/LTE200 3.9.8.9 and earlier and Vigor2860/2925 3.9.8 and earlier and Vigor286…

  • Critical 9.8
    CVE-2024-51138

    Vigor165/166 4.2.7 and earlier; Vigor2620/LTE200 3.9.8.9 and earlier; Vigor2860/2925 3.9.8 and earlier; Vigor2862/2926 …

  • Critical 9.8
    CVE-2024-37566

    Infoblox NIOS through 8.6.4 has Improper Authentication for Grids.

  • Critical 9.1
    CVE-2024-37567

    Infoblox NIOS through 8.6.4 has Improper Access Control for Grids.

  • Critical 9.8
    CVE-2025-25570 Scanner template

    Vue Vben Admin 2.10.1 allows unauthorized login to the backend due to an issue with hardcoded credentials.

  • Critical 9.8
    CVE-2025-22952 Scanner template

    Memos Server-Side Request Forgery (SSRF)

    elestio memos v0.23.0 is vulnerable to Server-Side Request Forgery (SSRF) due to insufficient validation of user-supplied URLs, which can be exploited to perform SSRF attacks.

    github.com/usememos/memos Go
  • Critical 9.8
    CVE-2025-26325

    ShopXO 6.4.0 is vulnerable to File Upload in ThemeDataService.php.