Skip to content
OpenAdvisories

Archive

28 February 2025

Vulnerabilities first published on this day (UTC), newest first.

← January 2025 2025 / February /28 March 2025 →
  1. 139
  2. 24
  3. 3187
  4. 4151
  5. 5119
  6. 699
  7. 7120
  8. 87
  9. 94
  10. 1081
  11. 11283
  12. 12265
  13. 13132
  14. 14134
  15. 1524
  16. 1640
  17. 1748
  18. 18162
  19. 19125
  20. 20120
  21. 2192
  22. 2234
  23. 2330
  24. 24119
  25. 25144
  26. 26795
  27. 27275
  28. 2887
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.1
    CVE-2025-0159

    IBM FlashSystem authentication bypass

    IBM FlashSystem (IBM Storage Virtualize (8.5.0.0 through 8.5.0.13, 8.5.1.0, 8.5.2.0 through 8.5.2.3, 8.5.3.0 through 8.5.3.1, 8.5.4.0, 8.6.0.0 through 8.6.0.5, 8.6.1.0, 8.6.2.0 through 8.6.2.1, 8.6.3.0, 8.7.0.0 through 8.7.0.2, 8.7.1.0, 8.7.2.0 through 8.7.2.…

    IBM Storage Virtualize
  • Critical —
    GHSA-jg6f-48ff-5xrw

    IBC-Go has Non-deterministic JSON Unmarshalling of IBC Acknowledgement

    Name: ASA-2025-004: Non-deterministic JSON Unmarshalling of IBC Acknowledgement can result in a chain halt Component: IBC-Go Criticality: Critical (Considerable Impact; Almost Certain Likelihood per [ACMv1.2](https://github.com/interchainio/security/blob/main…

    github.com/cosmos/ibc-go/v4 github.com/cosmos/ibc-go/v6 github.com/cosmos/ibc-go/v5 github.com/cosmos/ibc-go/v7 Go
  • Critical 9.3
    CVE-2025-22273

    Lack of rate-limiting in password change mechanism in CyberArk Endpoint Privilege Manager

    Application does not limit the number or frequency of user interactions, such as the number of incoming requests. At the "/EPMUI/VfManager.asmx/ChangePassword" endpoint it is possible to perform a brute force attack on the current password in use. This issue …

    cyberark Endpoint Privilege Manager
  • Critical 9.8
    CVE-2024-8420

    DHVC Form <= 2.4.7 - Unauthenticated Privilege Escalation

    The DHVC Form plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.4.7. This is due to the plugin allowing a user to supply the 'role' field when registering. This makes it possible for unauthenticated attackers t…

    SiteSao DHVC Form Web / CMS
  • Critical 9.8
    CVE-2024-8425 Public exploit Scanner template

    WooCommerce Ultimate Gift Card <= 2.9.2 - Unauthenticated Arbitrary File Upload

    The WooCommerce Ultimate Gift Card plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'mwb_wgm_preview_mail' and 'mwb_wgm_woocommerce_add_cart_item_data' functions in all versions up to, and including,…

    WP Swings WooCommerce Ultimate Gift Card Web / CMS
  • Critical 9.8
    CVE-2024-9193 Scanner template

    WHMpress <= 6.3-revision-0 - Unauthenticated Local File Inclusion to Arbitrary Options Update

    The WHMpress - WHMCS WordPress Integration Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 6.3-revision-0 via the whmpress_domain_search_ajax_extended_results() function. This makes it possible for unaut…

    creativeon WHMpress - WHMCS WordPress Integration Plugin Web / CMS
  • Critical 10.0
    CVE-2025-1744

    Out-of-bounds Write in radare2

    Out-of-bounds Write vulnerability in radareorg radare2 allows heap-based buffer over-read or buffer overflow.This issue affects radare2: before <5.9.9.

    radareorg radare2 radare2 openjpeg2 Ubuntu Azure Linux
  • Critical 9.6
    CVE-2025-25379

    Cross Site Request Forgery vulnerability in 07FLYCMS v.1.3.9 allows a remote attacker to execute arbitrary code via the…