Skip to content
OpenAdvisories

Archive

27 February 2025

Vulnerabilities first published on this day (UTC), newest first.

← January 2025 2025 / February /27 March 2025 →
  1. 139
  2. 24
  3. 3187
  4. 4151
  5. 5119
  6. 699
  7. 7120
  8. 87
  9. 94
  10. 1081
  11. 11283
  12. 12265
  13. 13132
  14. 14134
  15. 1524
  16. 1640
  17. 1748
  18. 18162
  19. 19125
  20. 20120
  21. 2192
  22. 2234
  23. 2330
  24. 24119
  25. 25144
  26. 26795
  27. 27275
  28. 2887
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Low 3.8
    CVE-2025-0914

    Velociraptor Shell Plugin Prevent_execve Bypass

    An improper access control issue in the VQL shell feature in Velociraptor Versions < 0.73.4 allowed authenticated users to execute the execve() plugin in deployments where this was explicitly forbidden by configuring the prevent_execve flag in the configurati…

    Rapid7 Velociraptor
  • Low 3.3
    CVE-2025-0759

    IBM EntireX race condition

    IBM EntireX 11.1 could allow a local user to unintentionally modify data timestamp integrity due to improper shared resource synchronization.

    IBM EntireX
  • Low 3.3
    CVE-2024-56810

    IBM EntireX information disclosure

    IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system.

    IBM EntireX
  • Low 3.3
    CVE-2024-56496

    IBM EntireX information disclosure

    IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system.

    IBM EntireX
  • Low 3.3
    CVE-2024-56495

    IBM EntireX information disclosure

    IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system.

    IBM EntireX
  • Low 3.3
    CVE-2024-56811

    IBM EntireX information disclosure

    IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system.

    IBM EntireX
  • Low 3.3
    CVE-2024-56493

    IBM EntireX information disclosure

    IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system.

    IBM EntireX
  • Low 3.3
    CVE-2024-56494

    IBM EntireX information disclosure

    IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system.

    IBM EntireX
  • Low 3.3
    CVE-2024-56812

    IBM EntireX information disclosure

    IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system.

    IBM EntireX
  • Low 3.9
    CVE-2025-1693

    MongoDB Shell may be susceptible to control character Injection via shell output

    The MongoDB Shell may be susceptible to control character injection where an attacker with control over the database cluster contents can inject control characters into the shell output. This may result in the display of falsified messages that appear to orig…

    MongoDB mongosh mongosh npm