Skip to content
OpenAdvisories

Archive

12 February 2026

Vulnerabilities first published on this day (UTC), newest first.

128 results · Feed

  • High 7.5

    p2r3 Bareiron commit: 8e4d4020d is vulnerable to Buffer Overflow, which allows unauthenticated remote attackers to caus…

  • Medium 6.5

    @farmfe/core is Missing Origin Validation in WebSocket

    npm @farmfe/core before 1.7.6 is Missing Origin Validation in WebSocket. The development (hot module reloading) server does not validate origin when connecting to a WebSocket client. This allows attackers to surveil developers running Farm who visit their web…

  • Critical 9.8

    CordysCRM 1.4.1 is vulnerable to SQL Injection in the employee list query interface (/user/list) via the departmentIds …

  • Medium 6.1

    lty628 aidigu v1.9.1 is vulnerable to Cross Site Scripting (XSS) exists in the /setting/ page where the "intro" field i…

  • Critical 9.8

    webfsd 1.21 is vulnerable to a Buffer Overflow via a crafted request. This is due to the filename variable

  • High 7.5
    CVE-2025-70886 Public exploit

    An issue in halo v.2.22.4 and before allows a remote attacker to cause a denial of service via a crafted payload to the…

  • Medium 5.5

    A cross-site scripting (XSS) vulnerability in the Item Kits function of OpenSourcePOS v3.4.1 allows attackers to execut…

  • Medium 5.4

    grub-btrfs through 2026-01-31 (on Arch Linux and derivative distributions) allows initramfs OS command injection becaus…