Vulnerabilities > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2025-02-25 | CVE-2024-12368 | Unspecified vulnerability in Odoo 15.0 Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAuth tokens of other users. | 8.8 |
| 2025-02-25 | CVE-2025-23046 | Incorrect Implementation of Authentication Algorithm vulnerability in Glpi-Project Glpi GLPI is a free asset and IT management software package. | 7.5 |
| 2025-02-25 | CVE-2025-1674 | Unspecified vulnerability in Zephyrproject Zephyr A lack of input validation allows for out of bounds reads caused by malicious or malformed packets. | 8.2 |
| 2025-02-25 | CVE-2025-1648 | SQL Injection vulnerability in Yawave The Yawave plugin for WordPress is vulnerable to SQL Injection via the 'lbid' parameter in all versions up to, and including, 2.9.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. | 7.5 |
| 2025-02-25 | CVE-2025-1673 | Unspecified vulnerability in Zephyrproject Zephyr A malicious or malformed DNS packet without a payload can cause an out-of-bounds read, resulting in a crash (denial of service) or an incorrect computation. | 8.2 |
| 2025-02-25 | CVE-2025-1642 | Resource Injection vulnerability in Modernasistemas Modernanet A vulnerability was found in Benner ModernaNet up to 1.1.0. | 7.5 |
| 2025-02-25 | CVE-2025-1643 | Missing Authorization vulnerability in Modernasistemas Modernanet A vulnerability was found in Benner ModernaNet up to 1.1.0. | 8.8 |
| 2025-02-24 | CVE-2025-27133 | SQL Injection vulnerability in Wegia 3.2.13/3.2.14 WeGIA is a Web manager for charitable institutions. | 8.8 |
| 2025-02-24 | CVE-2025-26803 | Unspecified vulnerability in Phusion Passenger The http parser in Phusion Passenger 6.0.21 through 6.0.25 before 6.0.26 allows a denial of service during parsing of a request with an invalid HTTP method. | 7.5 |
| 2025-02-24 | CVE-2024-12916 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Agito Computer Life4All allows SQL Injection.This issue affects Life4All: before 10.01.2025. | 8.8 |