Skip to content
OpenAdvisories

Archive

February 2025

Vulnerabilities first published in this month (UTC), newest first.

← January 2025 2025 / February March 2025 →
  1. 139
  2. 24
  3. 3187
  4. 4151
  5. 5119
  6. 699
  7. 7120
  8. 87
  9. 94
  10. 1081
  11. 11283
  12. 12265
  13. 13132
  14. 14134
  15. 1524
  16. 1640
  17. 1748
  18. 18162
  19. 19125
  20. 20120
  21. 2192
  22. 2234
  23. 2330
  24. 24119
  25. 25144
  26. 26795
  27. 27275
  28. 2887
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-24893 Exploited Public exploit Scanner template EPSS 100%

    Remote code execution as guest via SolrSearchMacros request in xwiki

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any guest can perform arbitrary remote code execution through a request to `SolrSearch`. This impacts the confidentiality, integrity and availability of t…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-search-solr-ui Maven
    KEV Oct 30, 2025
  • High 8.2
    CVE-2025-24989 Exploited

    Microsoft Power Pages Elevation of Privilege Vulnerability

    An improper access control vulnerability in Power Pages allows an unauthorized attacker to elevate privileges over a network potentially bypassing the user registration control. This vulnerability has already been mitigated in the service and all affected cus…

    Microsoft Microsoft Power Pages
    KEV Feb 21, 2025
  • Medium 5.9
    CVE-2025-0111 Exploited

    PAN-OS: Authenticated File Read Vulnerability in the Management Web Interface

    An authenticated file read vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker with network access to the management web interface to read files on the PAN-OS filesystem that are readable by the “nobody” user. You can gre…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
    KEV Feb 20, 2025
  • Medium 5.9
    CVE-2025-0108 Exploited Public exploit Scanner template EPSS 98%

    PAN-OS: Authentication Bypass in the Management Web Interface

    An authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to bypass the authentication otherwise required by the PAN-OS management web interface and invoke certai…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
    KEV Feb 18, 2025
  • High 7.8
    CVE-2025-21418 Exploited

    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Feb 11, 2025
  • High 7.1
    CVE-2025-21391 Exploited

    Windows Storage Elevation of Privilege Vulnerability

    Windows Storage Elevation of Privilege Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Feb 11, 2025
  • High 8.1
    CVE-2025-24472 Exploited · Ransomware Public exploit

    An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS 7.0.0 through 7.0…

    Fortinet FortiOS FortiProxy Network devices
    KEV Mar 18, 2025
  • Critical 9.9
    CVE-2025-24016 Exploited Public exploit Scanner template EPSS 94%

    Remote code execution in Wazuh server

    Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.9.1, an unsafe deserialization vulnerability allows for remote code execution on Wazuh servers. DistributedAPI param…

    wazuh wazuh github.com/wazuh/wazuh Go
    KEV Jun 10, 2025
  • Medium 6.1
    CVE-2025-24200 Exploited

    An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.…

    Apple iOS and iPadOS iPadOS iOS
    KEV Feb 12, 2025
  • High 8.6
    CVE-2025-0994 Exploited Public exploit EPSS 31%

    Trimble Cityworks versions prior to 15.8.9 and Cityworks with office companion versions prior to 23.10 are vulnerable t…

    Trimble Cityworks (with office companion) Cityworks
    KEV Feb 7, 2025
  • High 8.8
    CVE-2024-40891 Exploited Public exploit EPSS 23%

    **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the l…

    Zyxel VMG4325-B10A firmware Network devices
    KEV Feb 11, 2025
  • High 8.8
    CVE-2024-40890 Exploited EPSS 21%

    **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the CGI program of the legacy DS…

    Zyxel VMG4325-B10A firmware Network devices
    KEV Feb 11, 2025
  • High 8.8
    CVE-2023-52163 Exploited Scanner template EPSS 97%

    Digiever DS-2105 Pro 3.1.0.71-11 devices allow time_tzsetup.cgi Command Injection. NOTE: This vulnerability only affect…

    KEV Dec 22, 2025
  • Critical 9.9
    CVE-2024-57968 Exploited EPSS 32%

    Advantive VeraCore before 2024.4.2.1 allows remote authenticated users to upload files to unintended folders (e.g., one…

    Advantive VeraCore
    KEV Mar 10, 2025
  • Medium 5.8
    CVE-2025-25181 Exploited EPSS 55%

    A SQL injection vulnerability in timeoutWarning.asp in Advantive VeraCore through 2025.1.0 allows remote attackers to e…

    Advantive VeraCore
    KEV Mar 10, 2025