February 2025
Published in February 2025
- criticalGitLab Patch Release: 17.9.1, 17.8.4, 17.7.6gitlab
- known exploitedpublic exploitCVE-2017-3066
- criticalGitLab Patch Release: 17.9.1, 17.8.4, 17.7.6gitlab
- known exploitedpublic exploitCVE-2018-19410
- criticalexploitedCVE-2023-34192: Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2018-9276
- criticalexploitedCVE-2025-0111: Palo Alto Networks PAN-OS File Read Vulnerabilitycisa-kev
- known exploitedCVE-2020-15069
- criticalDrupal core - Moderately critical - Gadget Chain - SA-CORE-2025-003drupal
- known exploitedCVE-2020-29574
- criticalDrupal core - Moderately critical - Access bypass - SA-CORE-2025-002drupal
- known exploitedCVE-2022-23748
- criticalDrupal core - Critical - Cross site scripting - SA-CORE-2025-001drupal
- known exploitedpublic exploitCVE-2023-34192
- criticalexploitedCVE-2025-0108: Palo Alto Networks PAN-OS Authentication Bypass Vulnerabilitycisa-kev
- known exploitedCVE-2024-20953
- criticalexploitedCVE-2024-57727: SimpleHelp Path Traversal Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2024-21413
- criticalGitLab Patch Release: 17.8.2, 17.7.4, 17.6.5gitlab
- known exploitedpublic exploitCVE-2024-29059
- criticalGitLab Patch Release: 17.8.2, 17.7.4, 17.6.5gitlab
- known exploitedCVE-2024-40890
- criticalexploitedCVE-2024-41710: Mitel SIP Phones Argument Injection Vulnerabilitycisa-kev
- known exploitedCVE-2024-40891
- criticalexploitedCVE-2025-21391: Microsoft Windows Storage Link Following Vulnerabilitycisa-kev
- known exploitedCVE-2024-41710
- criticalexploitedCVE-2024-40890: Zyxel DSL CPE OS Command Injection Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2024-45195
- criticalexploitedCVE-2025-0994: Trimble Cityworks Deserialization Vulnerabilitycisa-kev
- known exploitedCVE-2024-49035
- criticalexploitedCVE-2022-23748: Dante Discovery Process Control Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2024-53104
- criticalexploitedCVE-2024-21413: Microsoft Outlook Improper Input Validation Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2024-53704
- known exploitedpublic exploitCVE-2024-57727
- known exploitedpublic exploitCVE-2025-0108
- known exploitedCVE-2025-0111
- known exploitedpublic exploitCVE-2025-0411
- known exploitedpublic exploitCVE-2025-0994
- known exploitedCVE-2025-21391
- known exploitedCVE-2025-21418
- known exploitedCVE-2025-23209
- known exploitedCVE-2025-24200
- known exploitedCVE-2025-24989