February 2025

8 results · Clear filters · Feed

• High 8.2
  CVE-2025-24989 Exploited

  Microsoft Power Pages Elevation of Privilege Vulnerability

  An improper access control vulnerability in Power Pages allows an unauthorized attacker to elevate privileges over a network potentially bypassing the user registration control. This vulnerability has already been mitigated in the service and all affected cus…

  Microsoft Microsoft Power Pages
  Feb 19, 2025

  KEV Feb 21, 2025
• High 7.8
  CVE-2025-21418 Exploited

  Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

  Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Feb 11, 2025

  KEV Feb 11, 2025
• High 7.1
  CVE-2025-21391 Exploited

  Windows Storage Elevation of Privilege Vulnerability

  Windows Storage Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Feb 11, 2025

  KEV Feb 11, 2025
• High 8.1
  CVE-2025-24472 Exploited · Ransomware Public exploit

  An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS 7.0.0 through 7.0…

  Fortinet FortiOS FortiProxy Network devices
  Feb 11, 2025

  KEV Mar 18, 2025
• High 8.6
  CVE-2025-0994 Exploited Public exploit EPSS 31%

  Trimble Cityworks versions prior to 15.8.9 and Cityworks with office companion versions prior to 23.10 are vulnerable t…

  Trimble Cityworks (with office companion) Cityworks
  Feb 6, 2025

  KEV Feb 7, 2025
• High 8.8
  CVE-2024-40891 Exploited Public exploit EPSS 23%

  **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the l…

  Zyxel VMG4325-B10A firmware Network devices
  Feb 4, 2025

  KEV Feb 11, 2025
• High 8.8
  CVE-2024-40890 Exploited EPSS 21%

  **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the CGI program of the legacy DS…

  Zyxel VMG4325-B10A firmware Network devices
  Feb 4, 2025

  KEV Feb 11, 2025
• High 8.8
  CVE-2023-52163 Exploited Scanner template EPSS 97%

  Digiever DS-2105 Pro 3.1.0.71-11 devices allow time_tzsetup.cgi Command Injection. NOTE: This vulnerability only affect…

  Feb 3, 2025

  KEV Dec 22, 2025