Archive
February 2025
Vulnerabilities first published in this month (UTC), newest first.
3,720 results · Feed
-
Unscored —
udp: Deal with race between UDP socket address change and rehash
In the Linux kernel, the following vulnerability has been resolved: udp: Deal with race between UDP socket address change and rehash If a UDP socket changes its local address while it's receiving datagrams, as a result of connect(), there is a period during w…
-
Medium 5.5
rtc: tps6594: Fix integer overflow on 32bit systems
In the Linux kernel, the following vulnerability has been resolved: rtc: tps6594: Fix integer overflow on 32bit systems The problem is this multiply in tps6594_rtc_set_offset() tmp = offset * TICKS_PER_HOUR; The "tmp" variable is an s64 but "offset" is a long…
-
Critical 9.8
GFast between v2 to v3.2 was discovered to contain a SQL injection vulnerability via the OrderBy parameter at /system/o…
-
Critical 9.8CVE-2024-53944 EPSS 40%
An issue was discovered on Tuoshi/Dionlink LT15D 4G Wi-Fi devices through M7628NNxlSPv2xUI_v1.0.1802.10.08_P4 and LT21B…
-
Medium 5.4
AVE System Web Client v2.1.131.13992 was discovered to contain a cross-site scripting (XSS) vulnerability.
-
Critical 9.8
In Extreme Networks XIQ-SE before 24.2.11, due to a missing access control check, a path traversal is possible, which m…
-
Medium 5.3
In XIQ-SE before 24.2.11, a server misconfiguration may allow user enumeration when specific conditions are met.
-
High 8.8
In XIQ-SE before 24.2.11, a low-privileged user may be able to access admin passwords, which could lead to privilege es…
-
Critical 9.8
Infoblox NIOS through 8.6.4 and 9.x through 9.0.3 has Improper Input Validation.
-
Critical 9.8
Infoblox NIOS through 8.6.4 executes with more privileges than required.
-
High 7.5
Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, V…
-
High 8.8
An issue in the CGI endpoint used to upload configurations in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 262…
-
High 7.5
A NULL pointer dereference in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigo…
-
High 8.8
Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, V…
-
High 8.4
An issue in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior …
-
High 7.5
Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, V…
-
Critical 9.8
Buffer Overflow vulnerability in Vigor2620/LTE200 3.9.8.9 and earlier and Vigor2860/2925 3.9.8 and earlier and Vigor286…
-
Critical 9.8
Vigor165/166 4.2.7 and earlier; Vigor2620/LTE200 3.9.8.9 and earlier; Vigor2860/2925 3.9.8 and earlier; Vigor2862/2926 …
-
Critical 9.8
Infoblox NIOS through 8.6.4 has Improper Authentication for Grids.
-
Critical 9.1
Infoblox NIOS through 8.6.4 has Improper Access Control for Grids.
-
Medium 6.1
Nagios XI 2024R1.2.2 is vulnerable to an open redirect flaw on the Tools page, exploitable by users with read-only perm…
-
Medium 5.5
An issue in Beitatong Technology LianJia iOS 9.83.50 allows attackers to access sensitive user information via supplyin…
-
Medium 5.5
An issue in Shandong Provincial Big Data Center AiShanDong iOS 5.0.0 allows attackers to access sensitive user informat…
-
Medium 5.5
An issue in Yibin Fengguan Network Technology Co., Ltd YuPao DirectHire iOS 8.8.0 allows attackers to access sensitive …
-
Medium 6.2
Bosscomm IF740 Firmware versions:11001.7078 & v11001.0000 and System versions: 6.25 & 6.00 were discovered to store pas…
-
Medium 5.5
An issue in Merchants Union Consumer Finance Company Limited Merchants Union Finance iOS 6.19.0 allows attackers to acc…
-
High 7.5
An issue in the component admin_template.php of SUCMS v1.0 allows attackers to execute a directory traversal and arbitr…
-
High 8.1
A host header injection vulnerability in SysPass 3.2x allows an attacker to load malicious JS files from an arbitrary d…
-
Medium 5.5
An issue in Tencent Technology (Beijing) Company Limited Tencent MicroVision iOS 8.137.0 allows attackers to access sen…
-
Medium 5.5
An issue in Suning Commerce Group Suning EMall iOS 9.5.198 allows attackers to access sensitive user information via su…
-
High 7.5
An issue in IKEA CN iOS 4.13.0 allows attackers to access sensitive user information via supplying a crafted link.
-
Medium 6.5
Bosscomm IF740 Firmware versions:11001.7078 & v11001.0000 and System versions: 6.25 & 6.00 were discovered to send comm…
-
Medium 5.5
An issue in Qianjin Network Information Technology (Shanghai) Co., Ltd 51Job iOS 14.22.0 allows attackers to access sen…
-
High 7.5
An information disclosure vulnerability in Bosscomm IF740 Firmware versions:11001.7078 & v11001.0000 and System version…
-
Critical 9.8CVE-2025-25570 Scanner template
Vue Vben Admin 2.10.1 allows unauthorized login to the backend due to an issue with hardcoded credentials.
-
Medium 4.6
An issue in Motorola Mobility Droid Razr HD (Model XT926) System Version: 9.18.94.XT926.Verizon.en.US allows physically…
-
Medium 5.5
An issue in Boohee Technology Boohee Health iOS 13.0.13 allows attackers to access sensitive user information via suppl…
-
High 7.2
HkCms v2.3.2.240702 was discovered to contain an arbitrary file write vulnerability in the component Appcenter.php.
-
High 7.5
A Server-Side Request Forgery (SSRF) in the component admin_webgather.php of SUCMS v1.0 allows attackers to access inte…
-
Critical 9.8CVE-2025-22952 Scanner template
Memos Server-Side Request Forgery (SSRF)
elestio memos v0.23.0 is vulnerable to Server-Side Request Forgery (SSRF) due to insufficient validation of user-supplied URLs, which can be exploited to perform SSRF attacks.