# CVEs published 2025-02-05

118 CVEs were published on February 5, 2025: 7 critical, 60 high. Days are UTC.

- [CVE-2024-49800](https://cve.now/CVE-2024-49800.md): IBM ApplinX Information Disclosure (CVSS 4.3, IBM ApplinX)
- [CVE-2024-49798](https://cve.now/CVE-2024-49798.md): IBM ApplinX Information Disclosure (CVSS 4.3, IBM ApplinX)
- [CVE-2024-49797](https://cve.now/CVE-2024-49797.md): IBM ApplinX Information Disclosure (CVSS 5.9, IBM ApplinX)
- [CVE-2024-49796](https://cve.now/CVE-2024-49796.md): IBM ApplinX Clickjacking (CVSS 5.4, IBM ApplinX)
- [CVE-2024-49795](https://cve.now/CVE-2024-49795.md): IBM ApplinX Cross-Site Request Forgery (CVSS 4.3, IBM ApplinX)
- [CVE-2024-49794](https://cve.now/CVE-2024-49794.md): IBM ApplinX Cross-Site Request Forgery (CVSS 4.3, IBM ApplinX)
- [CVE-2025-1066](https://cve.now/CVE-2025-1066.md): CVE-2025-1066 (CVSS 9.8, OpenPLC)
- [CVE-2024-49793](https://cve.now/CVE-2024-49793.md): IBM ApplinX Cross-Site Scripting (CVSS 5.4, IBM ApplinX)
- [CVE-2024-49792](https://cve.now/CVE-2024-49792.md): IBM ApplinX Cross-Site Scripting (CVSS 5.4, IBM ApplinX)
- [CVE-2024-49791](https://cve.now/CVE-2024-49791.md): IBM ApplinX Cross-Site Scripting (CVSS 6.4, IBM ApplinX)
- [CVE-2024-56473](https://cve.now/CVE-2024-56473.md): IBM Aspera Shares Data Manipulation (CVSS 5.3, IBM Aspera Shares)
- [CVE-2024-56472](https://cve.now/CVE-2024-56472.md): IBM Aspera Shares Cross-Site Scripting (CVSS 6.4, IBM Aspera Shares)
- [CVE-2024-56471](https://cve.now/CVE-2024-56471.md): IBM Aspera Shares Server-Side Request Forgery (CVSS 5.4, IBM Aspera Shares)
- [CVE-2024-56470](https://cve.now/CVE-2024-56470.md): IBM Aspera Shares Server-Side Request Forgery (CVSS 5.4, IBM Aspera Shares)
- [CVE-2024-38318](https://cve.now/CVE-2024-38318.md): IBM Aspera Shares HTML injection (CVSS 4.8, IBM Aspera Shares)
- [CVE-2024-38317](https://cve.now/CVE-2024-38317.md): IBM Aspera Shares Cross-Site Scripting (CVSS 4.8, IBM Aspera Shares)
- [CVE-2024-38316](https://cve.now/CVE-2024-38316.md): IBM Aspera Shares Denial of Service (CVSS 4.3, IBM Aspera Shares)
- [CVE-2025-24803](https://cve.now/CVE-2025-24803.md): Stored Cross-Site Scripting (XSS) in MobSF (CVSS 8.4, Mobile-Security-Framework-MobSF · mobsf)
- [CVE-2025-24804](https://cve.now/CVE-2025-24804.md): Partial Denial of Service (DoS) in MobSF (CVSS 4.8, Mobile-Security-Framework-MobSF · mobsf)
- [CVE-2025-24805](https://cve.now/CVE-2025-24805.md): Local Privilege Escalation in MobSF (CVSS 8.5, Mobile-Security-Framework-MobSF · mobsf)
- [CVE-2025-24372](https://cve.now/CVE-2025-24372.md): XSS vector in user uploaded images in group/org and user profiles in ckan (CVSS 7.3, ckan)
- [CVE-2024-56135](https://cve.now/CVE-2024-56135.md): Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. (CVSS 8.4, Progress LoadMaster)
- [CVE-2024-56134](https://cve.now/CVE-2024-56134.md): Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. (CVSS 8.4, Progress LoadMaster)
- [CVE-2024-56133](https://cve.now/CVE-2024-56133.md): Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. (CVSS 8.4, Progress LoadMaster)
- [CVE-2024-56132](https://cve.now/CVE-2024-56132.md): Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. (CVSS 8.4, Progress LoadMaster)
- [CVE-2024-56131](https://cve.now/CVE-2024-56131.md): Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. (CVSS 8.4, Progress LoadMaster)
- [CVE-2024-7596](https://cve.now/CVE-2024-7596.md): Generic UDP Encapsulation (GUE) (IETF Draft) do not validate or verify the source of a network packet (CVSS 5.3, draft-ietf-intarea-gue-09)
- [CVE-2024-7595](https://cve.now/CVE-2024-7595.md): GRE and GRE6 Protocols (RFC2784) do not validate or verify the source of a network packet (CVSS 5.3, IETF RFC2784 - Generic Routing Encapsulation)
- [CVE-2025-23419](https://cve.now/CVE-2025-23419.md): TLS Session Resumption Vulnerability (CVSS 4.3, F5 NGINX Open Source · F5 NGINX Plus)
- [CVE-2025-23413](https://cve.now/CVE-2025-23413.md): BIG-IP Next Central Manager vulnerability (CVSS 4.4, F5 BIG-IP Next Central Manager)
- [CVE-2025-20029](https://cve.now/CVE-2025-20029.md): BIG-IP iControl REST and tmsh vulnerability (CVSS 8.8, F5 BIG-IP)
- [CVE-2025-24319](https://cve.now/CVE-2025-24319.md): BIG-IP Next Central Manager vulnerability (CVSS 6.5, F5 BIG-IP Next Central Manager)
- [CVE-2025-24320](https://cve.now/CVE-2025-24320.md): BIG-IP Configuration utility vulnerability (CVSS 5.1, F5 BIG-IP)
- [CVE-2025-24497](https://cve.now/CVE-2025-24497.md): BIG-IP PEM vulnerability (CVSS 7.5, F5 BIG-IP)
- [CVE-2025-24312](https://cve.now/CVE-2025-24312.md): BIG-IP AFM vulnerability (CVSS 7.5, F5 BIG-IP)
- [CVE-2025-22846](https://cve.now/CVE-2025-22846.md): BIG-IP SIP Vulnerability (CVSS 7.5, F5 BIG-IP)
- [CVE-2025-23412](https://cve.now/CVE-2025-23412.md): BIG-IP APM access profile vulnerability (CVSS 7.5, F5 BIG-IP)
- [CVE-2025-23239](https://cve.now/CVE-2025-23239.md): BIG-IP iControl REST vulnerability (CVSS 8.7, F5 BIG-IP)
- [CVE-2025-24326](https://cve.now/CVE-2025-24326.md): BIG-IP Advanced WAF/ASM BADoS vulnerability (CVSS 7.5, F5 BIG-IP)
- [CVE-2025-20045](https://cve.now/CVE-2025-20045.md): BIG-IP SIP MRF Vulnerability (CVSS 7.5, F5 BIG-IP)
- [CVE-2025-22891](https://cve.now/CVE-2025-22891.md): BIG-IP PEM Vulnerability (CVSS 7.5, F5 BIG-IP)
- [CVE-2025-20058](https://cve.now/CVE-2025-20058.md): BIG-IP message routing vulnerability (CVSS 7.5, F5 BIG-IP)
- [CVE-2025-23415](https://cve.now/CVE-2025-23415.md): BIG-IP APM Endpoint Inspection vulnerability (CVSS 3.1, F5 BIG-IP)
- [CVE-2025-21091](https://cve.now/CVE-2025-21091.md): BIG-IP SNMP vulnerability (CVSS 7.5, F5 BIG-IP)
- [CVE-2025-21087](https://cve.now/CVE-2025-21087.md): TMM Vulnerability (CVSS 7.5, F5 BIG-IP)
- [CVE-2025-20169](https://cve.now/CVE-2025-20169.md): A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause (CVSS 7.7, Cisco IOS)
- [CVE-2025-20175](https://cve.now/CVE-2025-20175.md): A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause (CVSS 7.7, Cisco IOS)
- [CVE-2025-20174](https://cve.now/CVE-2025-20174.md): A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause (CVSS 7.7, Cisco IOS)
- [CVE-2025-20170](https://cve.now/CVE-2025-20170.md): A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause (CVSS 7.7, Cisco IOS)
- [CVE-2025-20171](https://cve.now/CVE-2025-20171.md): A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause (CVSS 7.7, Cisco IOS)
- [CVE-2025-20176](https://cve.now/CVE-2025-20176.md): A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause (CVSS 7.7, Cisco IOS)
- [CVE-2025-20172](https://cve.now/CVE-2025-20172.md): A vulnerability in the SNMP subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an authenticated, (CVSS 7.7, Cisco IOS)
- [CVE-2025-20173](https://cve.now/CVE-2025-20173.md): A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause (CVSS 7.7, Cisco IOS)
- [CVE-2025-20207](https://cve.now/CVE-2025-20207.md): Cisco Secure Email Gateway, Cisco Secure Email and Web Appliance and Cisco Secure Web Appliance SNMP Polling Information Disclosure Vulnerability (CVSS 4.3, Cisco Secure Email · Cisco Secure Web Appliance)
- [CVE-2025-20205](https://cve.now/CVE-2025-20205.md): Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) guest portals could allow an authenti (CVSS 4.8, Cisco Identity Services Engine Software)
- [CVE-2025-20204](https://cve.now/CVE-2025-20204.md): Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) guest portals could allow an authenti (CVSS 4.8, Cisco Identity Services Engine Software)
- [CVE-2025-20185](https://cve.now/CVE-2025-20185.md): Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Privilege Escalation Vulnerability (CVSS 3.4, Cisco Secure Email · Cisco Secure Web Appliance)
- [CVE-2025-20184](https://cve.now/CVE-2025-20184.md): Cisco Secure Email and Web Manager and Secure Web Appliance Command Injection Vulnerability (CVSS 6.5, Cisco Secure Email · Cisco Secure Web Appliance)
- [CVE-2025-20183](https://cve.now/CVE-2025-20183.md): Cisco Secure Web Appliance Range Request Bypass Vulnerability (CVSS 5.8, Cisco Secure Web Appliance)
- [CVE-2025-20180](https://cve.now/CVE-2025-20180.md): Cisco Secure Email and Web Manager and Secure Email Gateway Cross-Site Scripting Vulnerability (CVSS 4.8, Cisco Secure Email)
- [CVE-2025-20179](https://cve.now/CVE-2025-20179.md): Cisco Expressway Series Cross-Site Scripting Vulnerability (CVSS 6.1, Cisco TelePresence Video Communication Server (VCS) Express…)
- [CVE-2025-20125](https://cve.now/CVE-2025-20125.md): Cisco Identity Services Engine Insufficient Authorization Bypass Vulnerability (CVSS 9.1, Cisco Identity Services Engine Software · Cisco ISE Passive…)
- [CVE-2025-20124](https://cve.now/CVE-2025-20124.md): Cisco Identity Services Engine Java Deserialization Vulnerability (CVSS 9.9, Cisco Identity Services Engine Software · Cisco ISE Passive…)
- [CVE-2024-39564](https://cve.now/CVE-2024-39564.md): Junos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to RPD crash (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2024-42207](https://cve.now/CVE-2024-42207.md): HCL iAutomate is affected by a session fixation vulnerability (CVSS 5.5, HCL Software iAutomate)
- [CVE-2025-0858](https://cve.now/CVE-2025-0858.md): Certain Poly Devices – Path Traversal Vulnerability - Arbitrary File Access by Unauthorized User (CVSS 5.8, HP Certain Poly Devices)
- [CVE-2025-21117](https://cve.now/CVE-2025-21117.md): Dell Avamar, version 19.4 or later, contains an access token reuse vulnerability in the AUI. (CVSS 6.6, Dell Avamar)
- [CVE-2024-9097](https://cve.now/CVE-2024-9097.md): IDOR (CVSS 3.5, ManageEngine Endpoint Central)
- [CVE-2024-2878](https://cve.now/CVE-2024-2878.md): Allocation of Resources Without Limits or Throttling in GitLab (CVSS 7.5, GitLab)
- [CVE-2024-3976](https://cve.now/CVE-2024-3976.md): Missing Authorization in GitLab (CVSS 6.5, GitLab)
- [CVE-2024-49348](https://cve.now/CVE-2024-49348.md): IBM Cloud Pak for Business Automation incorrect privilege assignment (CVSS 4.3, IBM Cloud Pak for Business Automation)
- [CVE-2024-52365](https://cve.now/CVE-2024-52365.md): IBM Cloud Pak for Business Automation cross-site scripting (CVSS 6.4, IBM Cloud Pak for Business Automation)
- [CVE-2024-52364](https://cve.now/CVE-2024-52364.md): IBM Cloud Pak for Business Automation cross-site scripting (CVSS 5.4, IBM Cloud Pak for Business Automation)
- [CVE-2024-49352](https://cve.now/CVE-2024-49352.md): IBM Cognos Anaytics XML external entity injection (CVSS 7.1, IBM Cognos Analytics)
- [CVE-2024-5528](https://cve.now/CVE-2024-5528.md): Incomplete Comparison with Missing Factors in GitLab (CVSS 3.5, GitLab)
- [CVE-2024-9631](https://cve.now/CVE-2024-9631.md): Inefficient Algorithmic Complexity in GitLab (CVSS 7.5, GitLab)
- [CVE-2024-6356](https://cve.now/CVE-2024-6356.md): Incorrect User Management in GitLab (CVSS 4.4, GitLab)
- [CVE-2024-1539](https://cve.now/CVE-2024-1539.md): Missing Authorization in GitLab (CVSS 4.3, GitLab)
- [CVE-2023-6386](https://cve.now/CVE-2023-6386.md): Allocation of Resources Without Limits or Throttling in GitLab (CVSS 6.5, GitLab)
- [CVE-2025-0725](https://cve.now/CVE-2025-0725.md): gzip integer overflow (CVSS 7.3, curl)
- [CVE-2025-0665](https://cve.now/CVE-2025-0665.md): eventfd double close (CVSS 7.0, curl)
- [CVE-2025-0167](https://cve.now/CVE-2025-0167.md): netrc and default credential leak (CVSS 3.4, curl)
- [CVE-2023-52925](https://cve.now/CVE-2023-52925.md): netfilter: nf\_tables: don't fail inserts if duplicate has expired (CVSS 6.2, Linux)
- [CVE-2023-52924](https://cve.now/CVE-2023-52924.md): netfilter: nf\_tables: don't skip expired elements during walk (no CVSS, Linux)
- [CVE-2024-13829](https://cve.now/CVE-2024-13829.md): WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto \<= 8.0.8 - Unauthenticated Sensitive Information Exposure (CVSS 5.3, WordPress form builder plugin for contact forms, surveys an…)
- [CVE-2025-1025](https://cve.now/CVE-2025-1025.md): Versions of the package cockpit-hq/cockpit before 2.4.1 are vulnerable to Arbitrary File Upload where an attacker can use different extensio (CVSS 8.7, cockpit-hq/cockpit)
- [CVE-2025-1022](https://cve.now/CVE-2025-1022.md): Versions of the package spatie/browsershot before 5.0.5 are vulnerable to Improper Input Validation in the setHtml function, invoked by Brow (CVSS 8.8, spatie/browsershot)
- [CVE-2025-1026](https://cve.now/CVE-2025-1026.md): Versions of the package spatie/browsershot before 5.0.5 are vulnerable to Improper Input Validation due to improper URL validation through t (CVSS 7.7, spatie/browsershot)
- [CVE-2025-1028](https://cve.now/CVE-2025-1028.md): Contact Manager \<= 8.6.4 - Unauthenticated Arbitrary Double File Extension Upload (CVSS 8.1, kleor Contact Manager)
- [CVE-2025-23114](https://cve.now/CVE-2025-23114.md): A vulnerability in Veeam Updater component allows Man-in-the-Middle attackers to execute arbitrary code on the affected server. (CVSS 9.0, Veeam Backup for AWS · Veeam Backup for Microsoft Azure +4)
- [CVE-2020-36084](https://cve.now/CVE-2020-36084.md): SQL Injection vulnerability in SourceCodester Responsive E-Learning System 1.0 allows remote attackers to inject sql query in /elearning/del (CVSS 9.8)
- [CVE-2024-48394](https://cve.now/CVE-2024-48394.md): A Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in the driver of the NDD Print solution, which could allow an unpr (CVSS 7.8)
- [CVE-2024-54853](https://cve.now/CVE-2024-54853.md): A Stored Cross-Site Scripting (XSS) vulnerability was identified affecting Skybox Change Manager versions 13.2.170 and earlier that allows r (CVSS 5.4)
- [CVE-2024-57063](https://cve.now/CVE-2024-57063.md): A prototype pollution in the lib function of php-date-formatter v1.3.6 allows attackers to cause a Denial of Service (DoS) via supplying a c (CVSS 7.5)
- [CVE-2024-57064](https://cve.now/CVE-2024-57064.md): A prototype pollution in the lib.setValue function of @syncfusion/ej2-spreadsheet v27.2.2 allows attackers to cause a Denial of Service (DoS (CVSS 7.5)
- [CVE-2024-57065](https://cve.now/CVE-2024-57065.md): A prototype pollution in the lib.createPath function of utile v0.3.0 allows attackers to cause a Denial of Service (DoS) via supplying a cra (CVSS 7.5)
- [CVE-2024-57066](https://cve.now/CVE-2024-57066.md): A prototype pollution in the lib.deep function of @ndhoule/defaults v2.0.1 allows attackers to cause a Denial of Service (DoS) via supplying (CVSS 7.5, @ndhoule/defaults)
- [CVE-2024-57067](https://cve.now/CVE-2024-57067.md): A prototype pollution in the lib.parse function of dot-qs v0.2.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted (CVSS 7.5)
- [CVE-2024-57068](https://cve.now/CVE-2024-57068.md): A prototype pollution in the lib.mutateMergeDeep function of @tanstack/form-core v0.35.0 allows attackers to cause a Denial of Service (DoS) (CVSS 7.5, @tanstack/form-core)
- [CVE-2024-57069](https://cve.now/CVE-2024-57069.md): A prototype pollution in the lib function of expand-object v0.4.2 allows attackers to cause a Denial of Service (DoS) via supplying a crafte (CVSS 7.5)
- [CVE-2024-57071](https://cve.now/CVE-2024-57071.md): A prototype pollution in the lib.combine function of php-parser v3.2.1 allows attackers to cause a Denial of Service (DoS) via supplying a c (CVSS 7.5)
- [CVE-2024-57072](https://cve.now/CVE-2024-57072.md): A prototype pollution in the lib.requireFromString function of module-from-string v3.3.1 allows attackers to cause a Denial of Service (DoS) (CVSS 7.5, module-from-string)
- [CVE-2024-57074](https://cve.now/CVE-2024-57074.md): A prototype pollution in the lib.merge function of xe-utils v3.5.31 allows attackers to cause a Denial of Service (DoS) via supplying a craf (CVSS 7.5)
- [CVE-2024-57075](https://cve.now/CVE-2024-57075.md): A prototype pollution in the lib.Logger function of eazy-logger v4.0.1 allows attackers to cause a Denial of Service (DoS) via supplying a c (CVSS 7.5, eazy-logger)
- [CVE-2024-57076](https://cve.now/CVE-2024-57076.md): A prototype pollution in the lib.post function of ajax-request v1.2.3 allows attackers to cause a Denial of Service (DoS) via supplying a cr (CVSS 7.5)
- [CVE-2024-57077](https://cve.now/CVE-2024-57077.md): The latest version of utils-extend (1.0.8) is vulnerable to Prototype Pollution through the entry function(s) lib.extend. (CVSS 9.1, utils-extend)
- [CVE-2024-57078](https://cve.now/CVE-2024-57078.md): A prototype pollution in the lib.merge function of cli-util v1.1.27 allows attackers to cause a Denial of Service (DoS) via supplying a craf (CVSS 7.5)
- [CVE-2024-57079](https://cve.now/CVE-2024-57079.md): A prototype pollution in the lib.deepMerge function of @zag-js/core v0.50.0 allows attackers to cause a Denial of Service (DoS) via supplyin (CVSS 7.5, @zag-js/core)
- [CVE-2024-57080](https://cve.now/CVE-2024-57080.md): A prototype pollution in the lib.install function of vxe-table v4.8.10 allows attackers to cause a Denial of Service (DoS) via supplying a c (CVSS 7.5, vxe-table)
- [CVE-2024-57081](https://cve.now/CVE-2024-57081.md): A prototype pollution in the lib.fromQuery function of underscore-contrib v0.3.0 allows attackers to cause a Denial of Service (DoS) via sup (CVSS 7.5)
- [CVE-2024-57082](https://cve.now/CVE-2024-57082.md): A prototype pollution in the lib.createUploader function of @rpldy/uploader v1.8.1 allows attackers to cause a Denial of Service (DoS) via s (CVSS 6.5, @rpldy/uploader)
- [CVE-2024-57084](https://cve.now/CVE-2024-57084.md): A prototype pollution in the function lib.parse of dot-properties v1.0.1 allows attackers to cause a Denial of Service (DoS) via supplying a (CVSS 7.5)
- [CVE-2024-57085](https://cve.now/CVE-2024-57085.md): A prototype pollution in the function deepMerge of @stryker-mutator/util v8.6.0 allows attackers to cause a Denial of Service (DoS) via supp (CVSS 7.5, @stryker-mutator/util)
- [CVE-2024-57086](https://cve.now/CVE-2024-57086.md): A prototype pollution in the function fieldsToJson of node-opcua-alarm-condition v2.134.0 allows attackers to cause a Denial of Service (DoS (CVSS 7.5, node-opcua-alarm-condition)
- [CVE-2024-57520](https://cve.now/CVE-2024-57520.md): Insecure Permissions vulnerability in asterisk v22 allows a remote attacker to execute arbitrary code via the action\_createconfig function. (CVSS 9.8)
- [CVE-2024-57598](https://cve.now/CVE-2024-57598.md): A floating point exception (divide-by-zero) vulnerability was discovered in Bento4 1.6.0-641 in function AP4\_TfraAtom() of Ap4TfraAtom.cpp w (CVSS 6.5)
- [CVE-2024-57699](https://cve.now/CVE-2024-57699.md): A security issue was found in Netplex Json-smart 2.5.0 through 2.5.1. (CVSS 7.5, net.minidev:json-smart)
- [CVE-2025-25246](https://cve.now/CVE-2025-25246.md): NETGEAR XR1000 before 1.0.0.74, XR1000v2 before 1.1.0.22, and XR500 before 2.3.2.134 allow remote code execution by unauthenticated users. (CVSS 8.1, NETGEAR XR1000 · NETGEAR XR1000v2 +1)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-02-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.