Skip to content
OpenAdvisories

Archive

23 February 2026

Vulnerabilities first published on this day (UTC), newest first.

← January 2026 2026 / February /23 March 2026 →
  1. 134
  2. 2158
  3. 3337
  4. 4253
  5. 5119
  6. 6204
  7. 762
  8. 875
  9. 9166
  10. 10282
  11. 11325
  12. 12128
  13. 1368
  14. 14163
  15. 1531
  16. 1688
  17. 17103
  18. 18239
  19. 19397
  20. 20380
  21. 2165
  22. 2259
  23. 2397
  24. 24225
  25. 25239
  26. 26174
  27. 27185
  28. 2818
All Critical High Medium Low Exploited only Public exploit

97 results · Feed

  • High 7.4
    CVE-2025-63945 Public exploit

    A privilege escalation (PE) vulnerability in the Tencent iOA app thru 210.9.28693.621001 on Windows devices enables a l…

  • Medium 5.5
    CVE-2025-61143

    libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c.

    tiff tiff qtwebengine-opensource-src libtiff Debian Ubuntu Azure Linux
  • Medium 6.2
    CVE-2025-61147

    strukturag libde265 commit d9fea9d wa discovered to contain a segmentation fault via the component decoder_context::com…

    libde265 libde265 Debian Ubuntu
  • Critical 9.8
    CVE-2025-61144

    libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.

    tiff tiff qtwebengine-opensource-src libtiff Debian Ubuntu Azure Linux
  • Medium 4.0
    CVE-2025-61146

    saitoha libsixel until v1.8.7 was discovered to contain a memory leak via the component malloc_stub.c.

    libsixel libsixel Debian Ubuntu
  • Medium 5.5
    CVE-2025-61145

    libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.

    tiff tiff qtwebengine-opensource-src libtiff Debian Ubuntu Azure Linux
  • High 8.1
    CVE-2025-71056

    Improper session management in GCOM EPON 1GE ONU version C00R371V00B01 allows attackers to execute a session hijacking …

  • High 7.5
    CVE-2025-69700

    Tenda FH1203 V2.0.1.6 contains a stack-based buffer overflow vulnerability in the modify_add_client_prio function, whic…

  • High 8.0
    CVE-2025-70329

    TOTOLink X5000R v9.1.0cu_2415_B20250515 contains an OS command injection vulnerability in the setIptvCfg handler of the…

  • Medium 6.5
    CVE-2025-70044

    An issue pertaining to CWE-295: Improper Certificate Validation was discovered in fofolee uTools-quickcommand 5.0.3.

  • High 7.4
    CVE-2025-70058

    yapi disables TLS/SSL certificate validation via rejectUnauthorized: false in Axios HTTPS agent

    An issue pertaining to CWE-295: Improper Certificate Validation was discovered in YMFE yapi v1.12.0. The application disables TLS/SSL certificate validation by setting 'rejectUnauthorized': false in the HTTPS agent configuration for Axios requests

    yapi-vendor npm
  • Critical 9.8
    CVE-2025-70327

    TOTOLINK X5000R v9.1.0cu_2415_B20250515 contains an argument injection vulnerability in the setDiagnosisCfg handler of …

  • Critical 9.1
    CVE-2025-70043

    An issue pertaining to CWE-295: Improper Certificate Validation was discovered in Ayms node-To master. The application …

  • High 8.8
    CVE-2025-70328

    TOTOLINK X6000R v9.4.0cu.1498_B20250826 contains an OS command injection vulnerability in the NTPSyncWithHost handler o…

  • High 7.4
    CVE-2025-70045

    An issue pertaining to CWE-295: Improper Certificate Validation was discovered in jxcore jxm master. The application di…

  • Medium 4.0
    CVE-2026-26365

    Akamai Ghost on Akamai CDN edge servers before 2026-02-06 mishandles processing of custom hop-by-hop HTTP headers, wher…

    Akamai Ghost
  • Medium 6.1
    CVE-2026-26464

    Stored Cross-Site Scripting (XSS) was found in the /admin/edit_user.php page of Society Management System Portal V1.0, …