İçeriğe atla
Noroxi

Yayın tarihine göre

Şubat 2025: sömürülen ve yeni ciddi CVE kayıtları

189 kayıt · 15 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 2

  • CVE-2024-13097
    21İzleyin

    WP Finance <= 1.3.6 - Reflected XSS

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    mch0lic · wp finance1 Şub 2025

  • CVE-2024-13098
    21İzleyin

    WP Email Newsletter <= 1.1 - Reflected XSS

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    megamindstechnologies · wordpress email newsletter1 Şub 2025

  • CVE-2024-13099
    21İzleyin

    Widget4call <= 1.0.7 - Reflected XSS

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    apidaze · widget4call1 Şub 2025

  • CVE-2025-25062
    18İzleyin

    An XSS issue was discovered in Backdrop CMS 1.28.x before 1.28.5 and 1.29.x before 1.29.3.

    OrtaCVSS 4,4Kavram kanıtıEPSS %1

    backdropcms · backdrop cms3 Şub 2025

  • CVE-2025-25066
    33İzleyin

    nDPI through 4.12 has a potential stack-based buffer overflow in ndpi_address_cache_restore in lib/ndpi_cache.c.

    YüksekCVSS 8,4İstismar yokEPSS %0

    ntop · ndpi3 Şub 2025

  • CVE-2024-57522
    25İzleyin

    SourceCodester Packers and Movers Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in Users.php.

    OrtaCVSS 6,4Kavram kanıtıEPSS %1

    oretnom23 · packers and movers management system3 Şub 2025

  • CVE-2024-36437
    26İzleyin

    The com.enflick.android.TextNow (aka TextNow: Call + Text Unlimited) application 24.17.0.2 for Android enables any installed application (wi

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    3 Şub 2025

  • CVE-2024-53942
    24İzleyin

    An issue was discovered on NRadio N8-180 NROS-1.9.2.n3.c5 devices.

    OrtaCVSS 4,8İstismar yokEPSS %15

    3 Şub 2025

  • CVE-2024-57175
    21İzleyin

    A Stored Cross-Site Scripting (XSS) vulnerability was identified in the PHPGURUKUL Online Birth Certificate System v1.0 via the profile name

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    phpgurukul · online birth certificate system3 Şub 2025

  • CVE-2024-57004
    36İzleyin

    Cross-Site Scripting (XSS) vulnerability in Roundcube Webmail 1.6.9 allows remote authenticated users to upload a malicious file as an email

    OrtaCVSS 6,1İstismar yokEPSS %39

    roundcube · webmail3 Şub 2025

  • CVE-2024-57968
    75Bu hafta

    Advantive VeraCore before 2024.4.2.1 allows remote authenticated users to upload files to unintended folders (e.g., ones that are accessible

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %32

    advantive · veracore3 Şub 2025

  • CVE-2025-25064
    46Planlayın

    SQL injection vulnerability in the ZimbraSync Service SOAP endpoint in Zimbra Collaboration 10.0.x before 10.0.12 and 10.1.x before 10.1.4 d

    YüksekCVSS 8,8Kavram kanıtıEPSS %36

    synacor · zimbra collaboration suite3 Şub 2025

  • CVE-2025-25181
    77Bu hafta

    A SQL injection vulnerability in timeoutWarning.asp in Advantive VeraCore through 2025.1.0 allows remote attackers to execute arbitrary SQL

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %55

    advantive · veracore3 Şub 2025

  • CVE-2023-52163
    94Hemen

    Digiever DS-2105 Pro 3.1.0.71-11 devices allow time_tzsetup.cgi Command Injection.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %96

    digiever · ds-2105 pro firmware3 Şub 2025

  • CVE-2024-56898
    36İzleyin

    Broken access control vulnerability in Geovision GV-ASWeb with version v6.1.0.0 or less.

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    3 Şub 2025

  • CVE-2024-56901
    36İzleyin

    A Cross-Site Request Forgery (CSRF) vulnerability in Geovision GV-ASWeb application with the version 6.1.1.0 or less that allows attackers t

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    3 Şub 2025

  • CVE-2024-56902
    37İzleyin

    Information disclosure vulnerability in Geovision GV-ASManager web application with the version v6.1.0.0 or less, which discloses account in

    YüksekCVSS 7,5Kavram kanıtıEPSS %23

    3 Şub 2025

  • CVE-2024-13114
    24İzleyin

    WP Projects Portfolio with Client Testimonials <= 3.0 - Reflected XSS

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    phptechie · wp projects portfolio with client testimonials4 Şub 2025

  • CVE-2024-13325
    24İzleyin

    Glossy <= 2.3.5 - Reflected XSS

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    croberts · glossy4 Şub 2025

  • CVE-2024-13326
    24İzleyin

    iBuildApp <= 0.2.0 - Reflected XSS

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    ibuildapp · ibuildapp4 Şub 2025

  • CVE-2024-13327
    24İzleyin

    Musicbox <= 2.0.3 - Reflected XSS

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    webdesignby · musicbox4 Şub 2025

  • CVE-2024-13328
    24İzleyin

    Giga Messenger Bots <= 2.3.1 - Reflected XSS

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    tanng · giga messenger4 Şub 2025

  • CVE-2024-13330
    28İzleyin

    Justrows Free <= 0.2 - Reflected XSS

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    canaveralstudio · justrows free4 Şub 2025

  • CVE-2024-13331
    24İzleyin

    WP Dream Carousel <= 1.0.1b - Reflected XSS

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    neoloki · wp dream carousel4 Şub 2025

  • CVE-2024-40890
    71Bu hafta

    **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the CGI program of the legacy DSL CPE Zyxel VMG4325-B

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %20

    zyxel · vmg1312-b10a firmware4 Şub 2025

  • CVE-2024-40891
    72Bu hafta

    **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel V

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %21

    zyxel · vmg1312-b10a firmware4 Şub 2025

  • CVE-2025-0890
    43Planlayın

    **UNSUPPORTED WHEN ASSIGNED** Insecure default credentials for the Telnet function in the legacy DSL CPE Zyxel VMG4325-B10A firmware version

    KritikCVSS 9,8Kavram kanıtıEPSS %13

    zyxel · vmg4325-b10a firmware4 Şub 2025

  • CVE-2025-1015
    21İzleyin

    Unsanitized address book fields

    OrtaCVSS 5,4Kavram kanıtıEPSS %1

    mozilla · thunderbird4 Şub 2025

  • CVE-2024-9643
    40Planlayın

    Four-Faith F3x36 Hidden Debug Credentials

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    four-faith · f3x36 firmware4 Şub 2025

  • CVE-2025-0364
    40Planlayın

    BigAntSoft BigAnt Server Account Registration Bypass to File Upload RCE

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    bigantsoft · bigant server4 Şub 2025

  • CVE-2025-24971
    39İzleyin

    OS Command Injection endpoint '/upload/init' parameter 'filename' (RCE) in DumpDrop

    KritikCVSS 9,5Kavram kanıtıEPSS %3

    dumbwareio · dumbdrop4 Şub 2025

  • CVE-2025-24963
    31İzleyin

    Browser mode serves arbitrary files in vitest

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    vitest.dev · vitest4 Şub 2025

  • CVE-2024-11467
    31İzleyin

    Omnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability due to a logic flaw.

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    omnissa · omnissa horizon client for macos4 Şub 2025

  • CVE-2024-48445
    40Planlayın

    An issue in compop.ca ONLINE MALL v.3.5.3 allows a remote attacker to execute arbitrary code via the rid, tid, et, and ts parameters.

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    4 Şub 2025

  • CVE-2025-1025
    36İzleyin

    Versions of the package cockpit-hq/cockpit before 2.4.1 are vulnerable to Arbitrary File Upload where an attacker can use different extensio

    YüksekCVSS 7,7Kavram kanıtıEPSS %18

    5 Şub 2025

  • CVE-2024-2878
    36İzleyin

    Allocation of Resources Without Limits or Throttling in GitLab

    YüksekCVSS 7,5İstismar yokEPSS %19

    gitlab · gitlab5 Şub 2025

  • CVE-2025-0725
    30İzleyin

    gzip integer overflow

    YüksekCVSS 7,3İstismar yokEPSS %1

    netapp · hci baseboard management controller5 Şub 2025

  • CVE-2025-20124
    34İzleyin

    Cisco Identity Services Engine Java Deserialization Vulnerability

    YüksekCVSS 7,2Kavram kanıtıEPSS %18

    cisco · identity services engine5 Şub 2025

  • CVE-2025-20125
    33İzleyin

    Cisco Identity Services Engine Insufficient Authorization Bypass Vulnerability

    YüksekCVSS 7,2Kavram kanıtıEPSS %16

    cisco · identity services engine5 Şub 2025

  • CVE-2024-7595
    26İzleyin

    GRE and GRE6 Protocols (RFC2784) do not validate or verify the source of a network packet

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    ietf · generic routing encapsulation5 Şub 2025

  • CVE-2025-20029
    36İzleyin

    BIG-IP iControl REST and tmsh vulnerability

    YüksekCVSS 8,7Kavram kanıtıEPSS %7

    f5 · big-ip access policy manager5 Şub 2025

  • CVE-2025-23419
    22İzleyin

    TLS Session Resumption Vulnerability

    OrtaCVSS 5,3Kavram kanıtıEPSS %2

    f5 · nginx5 Şub 2025

  • CVE-2025-0994
    73Bu hafta

    Trimble Cityworks versions prior to 15.8.9 and Cityworks with office companion versions prior to 23.10 are vulnerable to a deserialization v

    YüksekCVSS 8,6KEVSilahlaştırılmışEPSS %31

    trimble · cityworks6 Şub 2025

  • CVE-2022-40490
    19İzleyin

    Tiny File Manager v2.4.7 and below was discovered to contain a Cross Site Scripting (XSS) vulnerability.

    OrtaCVSS 4,8Kavram kanıtıEPSS %0

    prasathmani · tiny file manager6 Şub 2025

  • CVE-2022-40916
    39İzleyin

    Tiny File Manager v2.4.7 and below is vulnerable to session fixation.

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    prasathmani · tiny file manager6 Şub 2025

  • CVE-2024-57427
    24İzleyin

    PHPJabbers Cinema Booking System v2.0 is vulnerable to reflected cross-site scripting (XSS).

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    phpjabbers · cinema booking system6 Şub 2025

  • CVE-2024-57428
    37İzleyin

    A stored cross-site scripting (XSS) vulnerability in PHPJabbers Cinema Booking System v2.0 exists due to unsanitized input in file upload fi

    KritikCVSS 9,3Kavram kanıtıEPSS %0

    phpjabbers · cinema booking system6 Şub 2025

  • CVE-2024-57429
    21İzleyin

    A cross-site request forgery (CSRF) vulnerability in the pjActionUpdate function of PHPJabbers Cinema Booking System v2.0 allows remote atta

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    phpjabbers · cinema booking system6 Şub 2025

  • CVE-2024-57430
    39İzleyin

    An SQL injection vulnerability in the pjActionGetUser function of PHPJabbers Cinema Booking System v2.0 allows attackers to manipulate datab

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    phpjabbers · cinema booking system6 Şub 2025

  • CVE-2024-57610
    30İzleyin

    A rate limiting issue in Sylius v2.0.2 allows a remote attacker to perform unrestricted brute-force attacks on user accounts, significantly

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    sylius · sylius6 Şub 2025

  • CVE-2024-57523
    18İzleyin

    Cross Site Request Forgery (CSRF) in Users.php in SourceCodester Packers and Movers Management System 1.0 allows attackers to create unautho

    OrtaCVSS 4,5Kavram kanıtıEPSS %0

    oretnom23 · packers and movers management system6 Şub 2025

  • CVE-2025-24786
    37İzleyin

    Path traversal opening Sqlite3 database in WhoDB

    KritikCVSS 9,1Kavram kanıtıEPSS %2

    clidey · whodb6 Şub 2025

  • CVE-2024-48589
    25İzleyin

    Cross Site Scripting vulnerability in Gilnei Moraes phpABook v.0.9 allows a remote attacker to execute arbitrary code via the rol parameter

    OrtaCVSS 6,3Kavram kanıtıEPSS %0

    6 Şub 2025

  • CVE-2024-53586
    22İzleyin

    An issue in the relPath parameter of WebFileSys version 2.31.0 allows attackers to perform directory traversal via a crafted HTTP request.

    OrtaCVSS 5,3Kavram kanıtıEPSS %1

    6 Şub 2025

  • CVE-2024-56889
    30İzleyin

    Incorrect access control in the endpoint /admin/m_delete.php of CodeAstro Complaint Management System v1.0 allows unauthorized attackers to

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    codeastro · complaint management system6 Şub 2025

  • CVE-2025-0674
    38İzleyin

    Elber Communications Equipment Authentication Bypass Using an Alternate Path or Channel

    KritikCVSS 9,3Kavram kanıtıEPSS %3

    elber · signum dvb-s/s2 ird6 Şub 2025

  • CVE-2024-13352
    28İzleyin

    Legull <= 1.2.2 - Reflected XSS

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    alwayscurious · legull7 Şub 2025

  • CVE-2024-13492
    24İzleyin

    Guten Free Options <= 0.9.5 - Reflected XSS

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    wordquest · guten free options7 Şub 2025

  • CVE-2025-25101
    38İzleyin

    WordPress Munk Sites plugin <= 1.0.7 - CSRF to Arbitrary Plugin Installation vulnerability

    KritikCVSS 9,6Kavram kanıtıEPSS %0

    metricthemes · munk sites7 Şub 2025

  • CVE-2025-25163
    40Planlayın

    WordPress Plugin A/B Image Optimizer Plugin <= 3.3 - Arbitrary File Download vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    pluginab · plugin a\/b image optimizer7 Şub 2025

  • CVE-2024-35106
    18İzleyin

    NEXTU FLETA AX1500 WIFI6 v1.0.3 was discovered to contain a buffer overflow at /boafrm/formIpQoS.

    OrtaCVSS 4,6Kavram kanıtıEPSS %0

    7 Şub 2025

  • CVE-2025-1103
    32İzleyin

    D-Link DIR-823X HTTP POST Request set_wifi_blacklists null pointer dereference

    YüksekCVSS 7,1İstismar yokEPSS %14

    dlink · dir-823x firmware7 Şub 2025

  • CVE-2024-55215
    39İzleyin

    An issue in trojan v.2.0.0 through v.2.15.3 allows a remote attacker to escalate privileges via the initialization interface /auth/register.

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    jrohy · trojan7 Şub 2025

  • CVE-2025-0316
    39İzleyin

    WP Directorybox Manager <= 2.5 - Authentication Bypass

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    chimpstudio · wp directorybox manager8 Şub 2025

  • CVE-2024-13059
    34İzleyin

    Path Traversal in mintplex-labs/anything-llm

    YüksekCVSS 7,2İstismar yokEPSS %21

    mintplexlabs · anythingllm10 Şub 2025

  • CVE-2025-24200
    55Planlayın

    An authorization issue was addressed with improved state management.

    OrtaCVSS 6,1KEVSilahlaştırılmışEPSS %4

    apple · ipados10 Şub 2025

  • CVE-2025-21692
    31İzleyin

    net: sched: fix ets qdisc OOB Indexing

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    linux · linux kernel10 Şub 2025

  • CVE-2025-24016
    97Hemen

    Remote code execution in Wazuh server

    KritikCVSS 9,9KEVSilahlaştırılmışEPSS %93

    wazuh · wazuh10 Şub 2025

  • CVE-2025-0054
    21İzleyin

    Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server Java

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    sap_se · sap netweaver application server java10 Şub 2025

  • CVE-2024-13543
    24İzleyin

    Zarinpal Paid Downloads <= 2.3 - Reflected XSS

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    amini7 · zarinpal paid download11 Şub 2025

  • CVE-2024-13570
    24İzleyin

    Stray Random Quotes <= 1.9.9 - Reflected XSS

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    unalignedcode · stray random quotes11 Şub 2025

  • CVE-2024-47908
    35İzleyin

    OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privilege

    YüksekCVSS 7,2İstismar yokEPSS %22

    ivanti · cloud services appliance11 Şub 2025

  • CVE-2024-27781
    44Planlayın

    An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 4.4.0 through

    KritikCVSS 9,0İstismar yokEPSS %28

    fortinet · fortisandbox11 Şub 2025

  • CVE-2024-40586
    26İzleyin

    An Improper Access Control vulnerability [CWE-284] in FortiClient Windows version 7.4.0, version 7.2.6 and below, version 7.0.13 and below m

    OrtaCVSS 6,7Kavram kanıtıEPSS %0

    fortinet · forticlient11 Şub 2025

  • CVE-2025-24472
    64Bu hafta

    An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS 7.0.0 through 7.0.16 and FortiProxy 7.

    YüksekCVSS 8,1KEVSilahlaştırılmışEPSS %7

    fortinet · fortiproxy11 Şub 2025

  • CVE-2025-21377
    38İzleyin

    NTLM Hash Disclosure Spoofing Vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %39

    microsoft · windows 10 150711 Şub 2025

  • CVE-2025-21391
    59Planlayın

    Windows Storage Elevation of Privilege Vulnerability

    YüksekCVSS 7,1KEVSilahlaştırılmışEPSS %2

    microsoft · windows 10 150711 Şub 2025

  • CVE-2025-21400
    42Planlayın

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    YüksekCVSS 8,0İstismar yokEPSS %34

    microsoft · sharepoint server11 Şub 2025

  • CVE-2025-21418
    61Bu hafta

    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %1

    microsoft · windows 10 160711 Şub 2025

  • CVE-2025-21420
    32İzleyin

    Windows Disk Cleanup Tool Elevation of Privilege Vulnerability

    YüksekCVSS 7,8Kavram kanıtıEPSS %3

    microsoft · windows 10 150711 Şub 2025

  • CVE-2025-24434
    41Planlayın

    Adobe Commerce | Incorrect Authorization (CWE-863)

    KritikCVSS 9,1İstismar yokEPSS %17

    adobe · commerce11 Şub 2025

  • CVE-2025-1044
    62Bu hafta

    Logsign Unified SecOps Platform Authentication Bypass Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %75

    logsign · unified secops platform11 Şub 2025

  • CVE-2024-51324
    15İzleyin

    An issue in the BdApiUtil driver of Baidu Antivirus v5.2.3.116083 allows attackers to terminate arbitrary process via executing a BYOVD (Bri

    DüşükCVSS 3,8Kavram kanıtıEPSS %0

    11 Şub 2025

  • CVE-2024-57241
    26İzleyin

    Dedecms 5.71sp1 and earlier is vulnerable to URL redirect.

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    dedecms · dedecms11 Şub 2025

  • CVE-2025-1240
    38İzleyin

    WinZip 7Z File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %10

    winzip · winzip11 Şub 2025

  • CVE-2024-54772
    21İzleyin

    An issue was discovered in the Winbox service of MikroTik RouterOS long-term release v6.43.13 through v6.49.13 and stable v6.43 through v7.1

    OrtaCVSS 5,4Kavram kanıtıEPSS %1

    mikrotik · routeros11 Şub 2025

  • CVE-2024-54916
    27İzleyin

    An issue in the SharedConfig class of Telegram Android APK v.11.7.0 allows a physically proximate attacker to bypass authentication and esca

    OrtaCVSS 6,8Kavram kanıtıEPSS %0

    11 Şub 2025

  • CVE-2024-13800
    32İzleyin

    Popup Plugin For WordPress - ConvertPlus <= 3.5.30 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    convertplug · convertplus12 Şub 2025

  • CVE-2024-54160
    25İzleyin

    dashboards-reporting (aka Dashboards Reports) before 2.19.0.0, as shipped in OpenSearch before 2.19, allows XSS because Markdown is not sani

    OrtaCVSS 6,4Kavram kanıtıEPSS %0

    lf projects · opensearch12 Şub 2025

  • CVE-2025-25198
    35İzleyin

    mailcow: dockerized vulnerable to password reset poisoning

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    mailcow · mailcow\12 Şub 2025

  • CVE-2025-25200
    36İzleyin

    Koa has Inefficient Regular Expression Complexity

    KritikCVSS 9,2Kavram kanıtıEPSS %0

    koajs · koa12 Şub 2025

  • CVE-2025-1146
    32İzleyin

    CrowdStrike Falcon Sensor for Linux TLS Issue

    YüksekCVSS 8,1İstismar yokEPSS %0

    crowdstrike · falcon sensor for linux12 Şub 2025

  • CVE-2025-1215
    9İzleyin

    vim main.c memory corruption

    DüşükCVSS 2,4İstismar yokEPSS %0

    vim · vim12 Şub 2025

  • CVE-2025-25205
    60Bu hafta

    Remote Authentication-Bypass can lead to server crash or limited information disclosure due to faulty pattern matching

    YüksekCVSS 8,2SilahlaştırılmışEPSS %4

    audiobookshelf · audiobookshelf12 Şub 2025

  • CVE-2025-0108
    95Hemen

    PAN-OS: Authentication Bypass in the Management Web Interface

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %98

    paloaltonetworks · pan-os12 Şub 2025

  • CVE-2025-0111
    59Planlayın

    PAN-OS: Authenticated File Read Vulnerability in the Management Web Interface

    YüksekCVSS 7,1KEVSilahlaştırılmışEPSS %1

    paloaltonetworks · pan-os12 Şub 2025

  • CVE-2024-10763
    40Planlayın

    Campress <= 1.35 - Unauthenticated Local File Inclusion

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    apuswp · campress13 Şub 2025

  • CVE-2024-13346
    40Planlayın

    Avada Theme <= 7.11.13 - Unauthenticated Arbitrary Shortcode Execution

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    theme-fusion · avada13 Şub 2025

  • CVE-2025-1094
    60Bu hafta

    PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

    YüksekCVSS 8,1SilahlaştırılmışEPSS %90

    13 Şub 2025

  • CVE-2025-26543
    28İzleyin

    WordPress Simple Responsive Menu plugin <= 2.1 - CSRF to Stored XSS vulnerability

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    pukhraj suthar · simple responsive menu13 Şub 2025