| 2025-02-25 | CVE-2025-1674 | Unspecified vulnerability in Zephyrproject Zephyr
A lack of input validation allows for out of bounds reads caused by malicious or malformed packets. | 8.2 |
| 2025-02-25 | CVE-2025-1648 | SQL Injection vulnerability in Yawave
The Yawave plugin for WordPress is vulnerable to SQL Injection via the 'lbid' parameter in all versions up to, and including, 2.9.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. | 7.5 |
| 2025-02-25 | CVE-2025-1673 | Unspecified vulnerability in Zephyrproject Zephyr
A malicious or malformed DNS packet without a payload can cause an out-of-bounds read, resulting in a crash (denial of service) or an incorrect computation. | 8.2 |
| 2025-02-25 | CVE-2025-1642 | Resource Injection vulnerability in Modernasistemas Modernanet
A vulnerability was found in Benner ModernaNet up to 1.1.0. | 7.5 |
| 2025-02-25 | CVE-2025-1643 | Missing Authorization vulnerability in Modernasistemas Modernanet
A vulnerability was found in Benner ModernaNet up to 1.1.0. | 8.8 |
| 2025-02-24 | CVE-2025-27133 | SQL Injection vulnerability in Wegia 3.2.13/3.2.14
WeGIA is a Web manager for charitable institutions. | 8.8 |
| 2025-02-24 | CVE-2025-26803 | Unspecified vulnerability in Phusion Passenger
The http parser in Phusion Passenger 6.0.21 through 6.0.25 before 6.0.26 allows a denial of service during parsing of a request with an invalid HTTP method. | 7.5 |
| 2025-02-24 | CVE-2024-12916 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Agito Computer Life4All allows SQL Injection.This issue affects Life4All: before 10.01.2025. | 8.8 |
| 2025-02-24 | CVE-2024-12917 | Files or Directories Accessible to External Parties vulnerability in Agito Computer Health4All allows Exploiting Incorrectly Configured Access Control Security Levels, Authentication Abuse.This issue affects Health4All: before 10.01.2025. | 8.3 |
| 2025-02-24 | CVE-2024-12918 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Agito Computer Health4All allows SQL Injection.This issue affects Health4All: before 10.01.2025. | 8.8 |