CVE-2025 records published in July 2025

This page lists the 3,582 CVE-2025 records published in July 2025, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 14 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2025 list filters these records by severity or signal.

Critical
58816.4% of these records
Listed in CISA KEV
140.4% of these records
Reported exploited
50.1% of these records
Detection signal
1283.6% of these records
Exploit code
1644.6% of these records
Actionable vendor fix
2,25462.9% of these records

Figures as of 2026-10-24 13:47 UTC. Records published in July 2025 have had from about 15 months to about 16 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.

CVE-2025 records published in July 2025, newest first: records 1 to 1,000 of 3,582
CVE Summary CVSS EPSS Published Signals
CVE-2025-54834OPEXUS FOIAXpress Public Access Link (PAL) unauthenticated username enumeration6.9CNA v4.00.5%2025-07-31Fix
CVE-2025-54833OPEXUS FOIAXpress Public Access Link (PAL) account-lockout and CAPTCHA protection bypass7.5v3.10.5%2025-07-31Fix
CVE-2025-54832OPEXUS FOIAXpress Public Access Link (PAL) state and territory list unauthorized modification5.3CNA v4.00.3%2025-07-31Fix
CVE-2025-54757Alfasado PowerCMS unrestricted file upload8.0v3.10.2%2025-07-31Fix
CVE-2025-54752Alfasado PowerCMS CSV injection8.0v3.10.2%2025-07-31Fix
CVE-2025-54589copyparty reflected XSS via Filter parameter6.3CNA v3.12.4%2025-07-31NucleiExploit codeFix
CVE-2025-54085Absolute Security Secure Access administrative console privilege escalation5.1CNA v4.00.2%2025-07-31Fix
CVE-2025-53558ZTE Japan ZXHN-F660T weak credentials8.7CNA v4.01.4%2025-07-31Reported exploitedNuclei
CVE-2025-52289MagnusSolution MagnusBilling missing authorization8.0CISA ADP v3.10.4%2025-07-31Exploit code
CVE-2025-52203DevaslanPHP project-management stored cross-site scripting7.6CISA ADP v3.10.3%2025-07-31Fix
CVE-2025-51569LB-Link BL-CPE300M A cross-site scripting6.1CISA ADP v3.10.3%2025-07-31
CVE-2025-51503Microweber has stored XSS vulnerability in User Profile fields7.6CISA ADP v3.10.5%2025-07-31
CVE-2025-51385D-Link DI-8200 stack-based buffer overflow3.5CISA ADP v3.10.4%2025-07-31Exploit code
CVE-2025-51384D-Link DI-8200 stack-based buffer overflow3.5CISA ADP v3.10.4%2025-07-31
CVE-2025-51383D-Link DI-8200 stack-based buffer overflow3.5CISA ADP v3.10.4%2025-07-31
CVE-2025-50867Vishalmathur Cloudclassroom takeassessment2.php endpoint of the SQL injection6.5CISA ADP v3.10.2%2025-07-31Exploit code
CVE-2025-50866Vishalmathur Cloudclassroom cross-site scripting6.1CISA ADP v3.10.3%2025-07-31
CVE-2025-50850Cs-cart missing brute-force protection8.6CISA ADP v3.10.2%2025-07-31
CVE-2025-50849CS-Cart user profile sticker setting insecure direct object reference8.0CISA ADP v3.10.3%2025-07-31
CVE-2025-50848Cs-cart cross-site scripting6.1CISA ADP v3.10.2%2025-07-31
CVE-2025-50847Cs-cart cross-site request forgery6.5CISA ADP v3.10.1%2025-07-31
CVE-2025-50572Archer CSV export CSV injection8.8CISA ADP v3.10.4%2025-07-31
CVE-2025-50475Russound MBX-PRE-D67F firmware version An OS command injection9.8CISA ADP v3.17.7%2025-07-31
CVE-2025-50270AnQiCMS content management stored cross-site scripting6.1CISA ADP v3.10.4%2025-07-31
CVE-2025-49084Secure Access administrative console privilege escalation5.3CNA v4.00.3%2025-07-31Fix
CVE-2025-49083Absolute Security Secure Access administrative console insecure deserialization7.0CNA v4.00.4%2025-07-31Fix
CVE-2025-49082Absolute Security Secure Access administrative console permissions bypass5.1CNA v4.00.2%2025-07-31Fix
CVE-2025-48073OpenEXR ScanLineProcess::run_fill null pointer Write in reduceMemory Mode4.6CNA v4.00.2%2025-07-31Fix
CVE-2025-48072OpenEXR's Inaccurate Pointer Arithmetic can cause an Out-of-bounds Heap6.8CNA v4.00.5%2025-07-31Fix
CVE-2025-48071OpenEXR's Forged Unpacked Size can lead to heap-based buffer overflow in Deep Scanline Parsing8.4CNA v4.00.3%2025-07-31Fix
CVE-2025-46809Multi Linux Manager epxoses the plain text HTTP Proxy user:password in logs6.9CNA v4.00.2%2025-07-31Fix
CVE-2025-46359Alfasado PowerCMS path traversal8.6CNA v4.00.6%2025-07-31Exploit codeFix
CVE-2025-45770jwt inadequate encryption strength7.0CISA ADP v3.10.1%2025-07-31
CVE-2025-45769Google php-jwt contains weak encryption6.5CISA ADP v3.10.1%2025-07-31Fix
CVE-2025-45768pyjwt missing encryption7.0CISA ADP v3.10.2%2025-07-31Fix
CVE-2025-41688MB connect line mbNET HW1 high privilege RCE via LUA sandbox escape7.2CNA v3.10.7%2025-07-31Fix
CVE-2025-41396Alfasado PowerCMS file uploading feature of multiple versions path traversal6.5v3.10.4%2025-07-31Fix
CVE-2025-41391Alfasado PowerCMS multiple versions stored cross-site scripting5.1CNA v4.00.2%2025-07-31Fix
CVE-2025-40980UltimateFosters UltimatePOS product name field stored cross-site scripting5.1CNA v4.00.5%2025-07-31
CVE-2025-37112HPE Telco Network Function Virtual Orchestrator hard-coded encryption keys found in System6.0CNA v3.10.1%2025-07-31
CVE-2025-37111HPE Telco Network Function Virtual Orchestrator Hard-Coded Authentication Keys found in System6.0CNA v3.10.1%2025-07-31
CVE-2025-37110HPE Telco Network Function Virtual Orchestrator insecure storage of sensitive information6.0CNA v3.10.1%2025-07-31
CVE-2025-37109HPE Telco Service Activator, protection mechanism failure3.5CNA v3.10.2%2025-07-31Fix
CVE-2025-37108HPE Telco Service Activator, protection mechanism failure3.5CNA v3.10.2%2025-07-31Fix
CVE-2025-36563Alfasado PowerCMS multiple versions reflected cross-site scripting5.3CNA v4.00.2%2025-07-31Fix
CVE-2025-36040IBM Aspera Faspex session fixation6.5CNA v3.10.2%2025-07-31Fix
CVE-2025-36039IBM Aspera Faspex client-side enforcement of server-side security6.5CNA v3.10.3%2025-07-31Fix
CVE-2025-34146nyariv SandboxJS prototype pollution sandbox escape DoS7.0CNA v4.00.2%2025-07-31Fix
CVE-2025-29557ExaGrid EX10 MailConfiguration API information disclosure5.4CISA ADP v3.10.2%2025-07-31
CVE-2025-29556ExaGrid EX10 account creation API vulnerability7.3CISA ADP v3.10.3%2025-07-31
CVE-2025-26064Intelbras RX 1500 cross-site scripting7.3CISA ADP v3.11.0%2025-07-31Fix
CVE-2025-26063Intelbras RX 1500 command injection9.8CISA ADP v3.11.3%2025-07-31Fix
CVE-2025-26062Intelbras RX 1500 An improper access control9.8CISA ADP v3.11.1%2025-07-31Fix
CVE-2025-24854Apache JSPWiki: Cross-site scripting (XSS) in JSPWiki Image plugin6.1CISA ADP v3.10.4%2025-07-31Fix
CVE-2025-24853Apache JSPWiki: Cross-site scripting (XSS) in JSPWiki Header Link processing7.5CISA ADP v3.10.5%2025-07-31Fix
CVE-2025-23289NVIDIA Omniverse Launcher sensitive information in log files5.5CNA v3.10.1%2025-07-31Fix
CVE-2025-8426Marvell QConvergeConsole path traversal9.4CNA v3.01.3%2025-07-31
CVE-2025-8409code-projects Vehicle Management filter.php SQL injection9.8v3.10.4%2025-07-31
CVE-2025-8408code-projects Vehicle Management filter1.php SQL injection9.8v3.10.5%2025-07-31
CVE-2025-8407code-projects Vehicle Management filter2.php SQL injection9.8v3.10.4%2025-07-31
CVE-2025-8401HT Mega Absolute Addons For Elementor WordPress plugin sensitive information exposure4.3CNA v3.10.3%2025-07-31Fix
CVE-2025-8382Campcodes Online Hotel Reservation System edit_room.php SQL injection8.8v3.10.5%2025-07-31
CVE-2025-8381Campcodes Online Hotel Reservation System add_reserve.php SQL injection8.8v3.10.5%2025-07-31
CVE-2025-8380Campcodes Online Hotel Reservation System add_query_account.php cross-site scripting5.4v3.10.3%2025-07-31
CVE-2025-8379Campcodes Online Hotel Reservation System edit_room.php unrestricted upload7.2v3.10.5%2025-07-31
CVE-2025-8378Campcodes Online Hotel Reservation System Login index.php SQL injection9.8v3.10.6%2025-07-31
CVE-2025-8376code-projects Vehicle Management updatebal.php SQL injection9.8v3.10.5%2025-07-31
CVE-2025-8375code-projects Vehicle Management addvehicle.php SQL injection9.8v3.10.5%2025-07-31
CVE-2025-8374code-projects Vehicle Management addcompany.php SQL injection9.8v3.10.4%2025-07-31
CVE-2025-8373code-projects Vehicle Management print.php SQL injection9.8v3.10.4%2025-07-31
CVE-2025-8372code-projects Exam Form Submission update_s7.php SQL injection9.8v3.10.4%2025-07-31
CVE-2025-8371code-projects Exam Form Submission update_s5.php SQL injection9.8v3.10.5%2025-07-31
CVE-2025-8370Portabilis i-Educar educar_escolaridade_lst.php cross-site scripting6.1v3.10.5%2025-07-31
CVE-2025-8369Portabilis i-Educar educar_avaliacao_desempenho_lst.php cross-site scripting6.1v3.10.5%2025-07-31
CVE-2025-8368Portabilis i-Educar pesquisa_pessoa_lst.php cross-site scripting6.1v3.10.5%2025-07-31
CVE-2025-8367Portabilis i-Educar funcionario_vinculo_lst.php cross-site scripting6.1v3.10.4%2025-07-31
CVE-2025-8366Portabilis i-Educar educar_servidor_lst.php cross-site scripting6.1v3.10.4%2025-07-31
CVE-2025-8365Portabilis i-Educar atendidos_cad.php cross-site scripting6.1v3.10.3%2025-07-31
CVE-2025-8348Kehua Charging Pile Cloud Platform home improper authentication7.5v3.10.6%2025-07-31
CVE-2025-8347Kehua Charging Pile Cloud Platform findAllTask SQL injection6.5v3.10.3%2025-07-31
CVE-2025-8346Portabilis i-Educar educar_aluno_lst.php cross-site scripting6.1v3.10.4%2025-07-31
CVE-2025-8345Shanghai Lingdang Information Technology Lingdang CRM yunzhijiaApi.php delete_user SQL injection9.8v3.10.3%2025-07-31
CVE-2025-8344openviglet shio ShStaticFileAPI.java shStaticFileUpload unrestricted upload9.8v3.10.4%2025-07-31
CVE-2025-8343openviglet shio ShStaticFileAPI.java shStaticFilePreUpload path traversal9.8v3.10.9%2025-07-31
CVE-2025-8340code-projects Intern Membership Management System email field cross-site scripting6.1v3.10.5%2025-07-31
CVE-2025-8339code-projects Intern Membership Management System student_login.php SQL injection9.8v3.10.6%2025-07-31
CVE-2025-8338Projectworlds Online Admission System adminac.php SQL injection9.8v3.10.4%2025-07-31
CVE-2025-8286Güralp Systems FMUS Series and MIN Series Devices9.3CNA v4.01.3%2025-07-31Nuclei
CVE-2025-8213NinjaScanner Virus and Malware scan WordPress plugin arbitrary file deletion7.2CNA v3.10.5%2025-07-31Fix
CVE-2025-8192Android TV race condition in AndroidTV TvSettings6.9CNA v4.00.1%2025-07-31
CVE-2025-8151HT Mega WordPress plugin path traversal4.3CNA v3.10.4%2025-07-31Fix
CVE-2025-8068HT Mega WordPress plugin unauthorized access4.3CNA v3.10.3%2025-07-31Fix
CVE-2025-7847AI Engine - Authenticated (Subscriber+) arbitrary file upload8.8CNA v3.11.1%2025-07-31Exploit codeFix
CVE-2025-7738Ansible django-ansible-base cleartext storage of sensitive information4.4CNA v3.10.2%2025-07-31Fix
CVE-2025-7205GiveWP Donation Plugin and Fundraising Platform WordPress plugin stored cross-site scripting5.4CNA v3.10.2%2025-07-31Fix
CVE-2025-5720Customer Reviews for WooCommerce WordPress plugin unauthenticated stored cross-site scripting6.4CNA v3.10.3%2025-07-31Fix
CVE-2025-2813Phoenix Contact AXL F BK PN TPS HTTP service DoS7.5CNA v3.10.6%2025-07-31Fix
CVE-2025-54656Apache Struts Extras: Improper output neutralization for logs6.5CISA ADP v3.10.6%2025-07-30
CVE-2025-54586finos git-proxy GitProxy is susceptible to a hidden commits injection attack7.1CNA v3.10.4%2025-07-30Fix
CVE-2025-54585finos git-proxy GitProxy is vulnerable to a new branch approval exploit8.2CNA v4.00.4%2025-07-30Fix
CVE-2025-54584finos git-proxy GitProxy is vulnerable to a packfile parsing exploit7.0CNA v4.00.5%2025-07-30Fix
CVE-2025-54583finos git-proxy GitProxy bypasses approvals when pushing multiple branches8.3CNA v4.00.5%2025-07-30Fix
CVE-2025-54581vproxy is vulnerable to a divide by zero DoS attack7.5CNA v3.10.6%2025-07-30Fix
CVE-2025-54576OAuth2 Proxy skip_auth_routes authentication bypass9.1CNA v3.11.2%2025-07-30Fix
CVE-2025-54575SixLabors ImageSharp GIF decoder denial of service5.3CNA v3.10.4%2025-07-30Fix
CVE-2025-54573Cvat vulnerable to email verification bypass by use of basic authentication4.3CNA v3.10.3%2025-07-30Fix
CVE-2025-54572SAML-Toolkits ruby-saml ruby SAML DOS vulnerability with large SAML response6.9CNA v4.00.4%2025-07-30Fix
CVE-2025-54433Bugsink is vulnerable to path traversal attacks via event_id in ingestion7.2CNA v4.00.6%2025-07-30Fix
CVE-2025-54430dedupe is vulnerable to secret exfiltration via `issue_comment`9.1CNA v3.10.3%2025-07-30Exploit code
CVE-2025-54425Umbraco's Delivery API allows for cached requests to be returned with an invalid API key5.3CNA v3.10.3%2025-07-30Fix
CVE-2025-54410Moby's Firewalld reload removes bridge network isolation3.3CNA v3.10.2%2025-07-30Fix
CVE-2025-54388Moby's Firewalld reload makes published container ports accessible from remote hosts5.1CNA v4.00.2%2025-07-30Fix
CVE-2025-53944AutoGPT Platform exposes Graph Execution results via Authorization Gap7.7CNA v3.10.5%2025-07-30Fix
CVE-2025-53357GLPI permits reservation modification by unauthorized users5.4CNA v3.10.2%2025-07-30Fix
CVE-2025-53113GLPI technicians can access unauthorized information through external links2.7CNA v3.10.2%2025-07-30Fix
CVE-2025-53112GLPI's incomprehensive permission checks can lead to data removal from allowed users4.3CNA v3.10.2%2025-07-30Fix
CVE-2025-53111GLPI exposes data to non-allowed users6.5CNA v3.10.3%2025-07-30Fix
CVE-2025-53022TrustedFirmware-M firmware upgrade module stack-based buffer overflow8.6CISA ADP v3.10.4%2025-07-30
CVE-2025-53008GLPI's MailCollector Receiver is vulnerable to credential exfiltration6.5CNA v3.10.3%2025-07-30Fix
CVE-2025-52897GLPI is vulnerable to XSS and open redirection attacks through planning feature6.5CNA v3.10.2%2025-07-30Fix
CVE-2025-52567GLPI has overly permissive URL verification3.5CNA v3.10.2%2025-07-30Fix
CVE-2025-52187Getprojects Create School Management System cross-site scripting8.2CISA ADP v3.10.4%2025-07-30
CVE-2025-51954Electronhub AI Playground cross-site scripting6.1CISA ADP v3.10.4%2025-07-30
CVE-2025-51951Andisearch cross-site scripting6.1CISA ADP v3.10.3%2025-07-30
CVE-2025-50777Aziot 2MP Full Hd Smart Wi-fi Cctv Home Security Camera cleartext storage of sensitive information7.8CISA ADP v3.10.2%2025-07-30Exploit code
CVE-2025-50578LinuxServer Docker-heimdall open redirect9.8CISA ADP v3.12.8%2025-07-30Nuclei
CVE-2025-50464Iptime Nas Firmware upload.cgi module of the iptime buffer overflow6.5CISA ADP v3.10.5%2025-07-30
CVE-2025-47001Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-07-30Fix
CVE-2025-46811SUSE Multi Linux Manager allows code execution via unprotected websocket endpoint9.3CNA v4.010.9%2025-07-30Exploit codeFix
CVE-2025-45620Averusa PTC310UV2 information disclosure8.1CISA ADP v3.10.7%2025-07-30Exploit code
CVE-2025-45619Averusa PTC310UV2 Firmware command injection6.5CISA ADP v3.10.7%2025-07-30Exploit code
CVE-2025-43277Apple macOS memory corruption7.8CISA ADP v3.10.3%2025-07-30Fix
CVE-2025-43276Apple macOS time-of-check time-of-use race condition5.3v3.10.4%2025-07-30Fix
CVE-2025-43275Apple macOS race condition9.8CISA ADP v3.10.6%2025-07-30Fix
CVE-2025-43274Apple macOS missing encryption4.4CISA ADP v3.10.1%2025-07-30Fix
CVE-2025-43273Apple macOS insecure permissions9.1CISA ADP v3.10.6%2025-07-30Fix
CVE-2025-43270Apple macOS unauthorized access8.8CISA ADP v3.10.2%2025-07-30Fix
CVE-2025-43267Apple macOS injection5.5CISA ADP v3.10.2%2025-07-30Fix
CVE-2025-43266Apple macOS incorrect permission assignment5.1CISA ADP v3.10.2%2025-07-30Fix
CVE-2025-43265Apple Safari out-of-bounds read4.0CISA ADP v3.10.3%2025-07-30Fix
CVE-2025-43261Apple macOS logic flaw9.8CISA ADP v3.10.8%2025-07-30Fix
CVE-2025-43260Apple macOS incorrect privilege assignment5.1CISA ADP v3.10.2%2025-07-30Fix
CVE-2025-43259Apple macOS personal information exposure4.6CISA ADP v3.10.3%2025-07-30Fix
CVE-2025-43256Apple macOS improper privilege management7.8CISA ADP v3.10.2%2025-07-30Fix
CVE-2025-43254Apple macOS out-of-bounds read7.1CISA ADP v3.10.2%2025-07-30Fix
CVE-2025-43253Apple macOS improper input validation9.8CISA ADP v3.10.7%2025-07-30Fix
CVE-2025-43252Apple macOS link following6.5CISA ADP v3.10.5%2025-07-30Fix
CVE-2025-43251Apple macOS incorrect authorization5.5CISA ADP v3.10.2%2025-07-30Fix
CVE-2025-43250Apple macOS path traversal4.0CISA ADP v3.10.2%2025-07-30Fix
CVE-2025-43249Apple macOS improper privilege management7.8CISA ADP v3.10.2%2025-07-30Fix
CVE-2025-43248Apple macOS improper privilege management7.8CISA ADP v3.10.2%2025-07-30Fix
CVE-2025-43247Apple macOS incorrect permission assignment5.5CISA ADP v3.10.5%2025-07-30Fix
CVE-2025-43246Apple macOS information disclosure5.5CISA ADP v3.10.2%2025-07-30Fix
CVE-2025-43245Apple macOS authentication bypass by spoofing9.8CISA ADP v3.10.7%2025-07-30Fix
CVE-2025-43244Apple macOS race condition9.8CISA ADP v3.10.6%2025-07-30Fix
CVE-2025-43243Apple macOS incorrect permission assignment9.8CISA ADP v3.10.7%2025-07-30Fix
CVE-2025-43241Apple macOS insecure permissions5.5CISA ADP v3.10.2%2025-07-30Fix
CVE-2025-43240Apple Safari logic flaw6.2CISA ADP v3.11.0%2025-07-30Fix
CVE-2025-43239Apple macOS out-of-bounds read7.1CISA ADP v3.10.2%2025-07-30Fix
CVE-2025-43237Apple macOS out-of-bounds write9.8CISA ADP v3.10.5%2025-07-30Fix
CVE-2025-43235Apple macOS denial of service5.5CISA ADP v3.10.2%2025-07-30Fix
CVE-2025-43234Apple macOS memory corruption9.8CISA ADP v3.11.0%2025-07-30Fix
CVE-2025-43233Apple macOS improper access control9.8CISA ADP v3.10.7%2025-07-30Fix
CVE-2025-43232Apple macOS insecure permissions9.8CISA ADP v3.10.7%2025-07-30Fix
CVE-2025-43230Apple iPadOS incorrect authorization4.0CISA ADP v3.10.2%2025-07-30Fix
CVE-2025-43229Apple Safari cross-site scripting6.1CISA ADP v3.10.3%2025-07-30Fix
CVE-2025-43228Apple Safari UI misrepresentation4.3CISA ADP v3.10.9%2025-07-30Fix
CVE-2025-43227Apple Safari personal information exposure7.5CISA ADP v3.11.2%2025-07-30Fix
CVE-2025-43226Apple iPadOS out-of-bounds read4.0CISA ADP v3.10.2%2025-07-30Fix
CVE-2025-43225Apple iPadOS sensitive information in log files5.5CISA ADP v3.10.2%2025-07-30Fix
CVE-2025-43224Apple macOS out-of-bounds write7.1CISA ADP v3.10.3%2025-07-30Fix
CVE-2025-43223Apple iPadOS denial of service7.5CISA ADP v3.11.0%2025-07-30Fix
CVE-2025-43222Apple iPadOS use-after-free9.8CISA ADP v3.10.8%2025-07-30Fix
CVE-2025-43221Apple macOS out-of-bounds read7.1CISA ADP v3.10.2%2025-07-30Fix
CVE-2025-43220Apple iPadOS link following9.8CISA ADP v3.10.8%2025-07-30Fix
CVE-2025-43218Apple macOS out-of-bounds read5.5CISA ADP v3.10.2%2025-07-30Fix
CVE-2025-43217Apple iPadOS personal information exposure4.0CISA ADP v3.10.2%2025-07-30Fix
CVE-2025-43216Apple Safari use-after-free6.5CISA ADP v3.11.1%2025-07-30Fix
CVE-2025-43215Apple macOS information disclosure5.5CISA ADP v3.10.2%2025-07-30Fix
CVE-2025-43212Apple Safari memory corruption6.5CISA ADP v3.11.0%2025-07-30Fix
CVE-2025-43211Apple Safari resource exhaustion6.2CISA ADP v3.10.4%2025-07-30Fix
CVE-2025-43209Apple iPadOS out-of-bounds write9.8CISA ADP v3.10.9%2025-07-30Fix
CVE-2025-43206Apple macOS path traversal4.0CISA ADP v3.10.2%2025-07-30Fix
CVE-2025-43199Apple macOS improper privilege management9.8CISA ADP v3.10.8%2025-07-30Fix
CVE-2025-43198Apple macOS improper access control9.8CISA ADP v3.10.6%2025-07-30Fix
CVE-2025-43197Apple macOS incorrect authorization4.0CISA ADP v3.10.2%2025-07-30Fix
CVE-2025-43196Apple macOS path traversal7.8CISA ADP v3.10.2%2025-07-30Fix
CVE-2025-43195Apple macOS information disclosure5.5CISA ADP v3.10.2%2025-07-30Fix
CVE-2025-43194Apple macOS improper access control9.8CISA ADP v3.10.8%2025-07-30Fix
CVE-2025-43193Apple macOS denial of service9.8CISA ADP v3.10.8%2025-07-30Fix
CVE-2025-43192Apple macOS improper access control9.8CISA ADP v3.10.7%2025-07-30Fix
CVE-2025-43191Apple macOS path traversal6.2CISA ADP v3.10.2%2025-07-30Fix
CVE-2025-43189Apple macOS information disclosure9.8CISA ADP v3.10.8%2025-07-30Fix
CVE-2025-43188Apple macOS improper privilege management7.8CISA ADP v3.10.2%2025-07-30Fix
CVE-2025-43186Apple macOS memory corruption9.8CISA ADP v3.11.1%2025-07-30Fix
CVE-2025-43185Apple macOS improper signature verification5.5CISA ADP v3.10.2%2025-07-30Fix
CVE-2025-43184Apple macOS improper access control9.8CISA ADP v3.10.7%2025-07-30Fix
CVE-2025-43018Certain HP LaserJet Pro Printers potential information disclosure6.9CNA v4.00.3%2025-07-30Fix
CVE-2025-38498Linux kernel mount namespace propagation vulnerability7.8CNA v3.10.2%2025-07-30Fix
CVE-2025-36611Dell Encryption link following7.3CNA v3.10.1%2025-07-30Fix
CVE-2025-36609Dell SmartFabric OS10 Software hard-coded password2.5CNA v3.10.1%2025-07-30Fix
CVE-2025-36608Dell SmartFabric OS10 Software XML external entity injection6.5CNA v3.10.5%2025-07-30Fix
CVE-2025-31281Apple macOS improper input validation9.1CISA ADP v3.11.1%2025-07-30Fix
CVE-2025-31280Apple macOS heap-based buffer overflow7.8CISA ADP v3.10.3%2025-07-30Fix
CVE-2025-31279Apple iPadOS insecure permissions9.8CISA ADP v3.11.0%2025-07-30Fix
CVE-2025-31278Apple Safari memory corruption8.8CISA ADP v3.11.2%2025-07-30Fix
CVE-2025-31276Apple iPadOS personal information exposure5.3CISA ADP v3.10.4%2025-07-30Fix
CVE-2025-31275Apple macOS improper handling of insufficient privileges6.2CISA ADP v3.10.2%2025-07-30Fix
CVE-2025-31273Apple Safari memory corruption8.8CISA ADP v3.11.1%2025-07-30Fix
CVE-2025-31243Apple macOS improper privilege management7.8CISA ADP v3.10.2%2025-07-30Fix
CVE-2025-31229Apple iOS and iPadOS weak password encoding9.1CISA ADP v3.10.8%2025-07-30Fix
CVE-2025-30480Dell PowerProtect Data Manager improper input validation6.5CNA v3.10.4%2025-07-30Fix
CVE-2025-30105Dell XtremIO sensitive information in log files8.8CNA v3.10.1%2025-07-30Fix
CVE-2025-30103Dell SmartFabric OS10 Software files accessible to external parties5.5CNA v3.10.2%2025-07-30Fix
CVE-2025-26332Dell TechAdvisor sensitive information in log files8.8CNA v3.10.1%2025-07-30Fix
CVE-2025-25692PrestaShop _getHeaders function deserialization of untrusted data6.5CISA ADP v3.10.6%2025-07-30
CVE-2025-25691PrestaShop component /themes/import deserialization of untrusted data6.5CISA ADP v3.10.8%2025-07-30
CVE-2025-25011Beats uncontrolled search path element can lead to local privilege escalation when7.0CNA v3.10.1%2025-07-30Fix
CVE-2025-24224Apple iPadOS improper check for exceptional conditions7.5CISA ADP v3.11.2%2025-07-30Fix
CVE-2025-24188Apple Safari logic flaw6.5CISA ADP v3.10.6%2025-07-30Fix
CVE-2025-24119Apple macOS improper privilege management7.8CISA ADP v3.10.2%2025-07-30Fix
CVE-2025-8353Devolutions Server unauthorized access5.9CISA ADP v3.10.4%2025-07-30Fix
CVE-2025-8337code-projects Simple Car Rental System add_vehicles.php cross-site scripting5.4v3.10.2%2025-07-30
CVE-2025-8336Campcodes Online Recruitment Management System ajax.php SQL injection9.8v3.10.4%2025-07-30
CVE-2025-8335code-projects Simple Car Rental System cross-site request forgery5.3CNA v4.00.2%2025-07-30
CVE-2025-8334Campcodes Online Recruitment Management System ajax.php SQL injection9.8v3.10.4%2025-07-30
CVE-2025-8333code-projects Online Farm System categoryvalue.php SQL injection9.8v3.10.4%2025-07-30
CVE-2025-8332code-projects Online Farm System register.php SQL injection9.8v3.10.4%2025-07-30
CVE-2025-8331code-projects Online Farm System forgot_pass.php SQL injection9.8v3.10.5%2025-07-30
CVE-2025-8330code-projects Vehicle Management edit1.php SQL injection9.8v3.10.5%2025-07-30
CVE-2025-8329code-projects Vehicle Management filter3.php SQL injection9.8v3.10.7%2025-07-30
CVE-2025-8328code-projects Exam Form Submission register.php SQL injection9.8v3.10.5%2025-07-30
CVE-2025-8327code-projects Exam Form Submission delete_s8.php SQL injection9.8v3.10.5%2025-07-30
CVE-2025-8326code-projects Exam Form Submission delete_s7.php SQL injection9.8v3.10.4%2025-07-30
CVE-2025-8323Ventem|e-School arbitrary file upload8.7CNA v4.00.6%2025-07-30Fix
CVE-2025-8322Ventem|e-School missing authorization8.7CNA v4.00.4%2025-07-30Fix
CVE-2025-8321Tesla Wall Connector arbitrary code execution6.8CNA v3.00.4%2025-07-30
CVE-2025-8320Tesla Wall Connector Content-Length header improper input validation remote code execution8.8CNA v3.00.3%2025-07-30
CVE-2025-8319Barracuda Message Archiver cross-site scripting6.1CISA ADP v3.10.2%2025-07-30Fix
CVE-2025-8312Devolutions Server PAM automatic check-in feature deadlock7.1CISA ADP v3.10.3%2025-07-30Fix
CVE-2025-8292Google Chrome Media Stream use-after-free8.8CISA ADP v3.10.4%2025-07-30Fix
CVE-2025-8217Inert Malicious script injected into Amazon Q Developer Visual Studio Code (VS Code) Extension5.1CNA v4.00.2%2025-07-30Fix
CVE-2025-6348Smart Slider 3 WordPress plugin SQL injection4.9CNA v3.10.4%2025-07-30Fix
CVE-2025-4426Insyde Software InsydeH2O SMM module information disclosure6.0CNA v3.10.2%2025-07-30Fix
CVE-2025-4425Insyde Software InsydeH2O SetupAutomationSmm: Stack overflow vulnerability in SMI handler8.2CNA v3.10.2%2025-07-30Fix
CVE-2025-4424Insyde Software InsydeH2O SMI handler improper input validation6.0CNA v3.10.2%2025-07-30Fix
CVE-2025-4423Insyde Software InsydeH2O SMM module memory corruption8.2CNA v3.10.2%2025-07-30Fix
CVE-2025-4422Insyde Software InsydeH2O SMM module out-of-bounds write8.2CNA v3.10.2%2025-07-30Fix
CVE-2025-4421Insyde Software InsydeH2O SMM module out-of-bounds write8.2CNA v3.10.3%2025-07-30Fix
CVE-2025-1394Denial of service (DoS) vulnerabilitiey in Zigbee library5.9CNA v4.00.2%2025-07-30Fix
CVE-2025-1221DoS in Zigbee device due to heavy traffic5.9CNA v4.00.2%2025-07-30Fix
CVE-2025-0712APM Server uncontrolled search path element can lead to local privilege escalation when7.0CNA v3.10.1%2025-07-30
CVE-2025-54769KL-001-2025-016: Xorux LPAR2RRD file upload directory traversal8.8CISA ADP v3.13.3%2025-07-29Exploit codeFix
CVE-2025-54768KL-001-2025-015: Xorux LPAR2RRD Read Only User Log Download Exposing Sensitive Information5.3CISA ADP v3.14.6%2025-07-29Fix
CVE-2025-54767KL-001-2025-014: Xorux LPAR2RRD Read Only User denial of service6.5CISA ADP v3.16.7%2025-07-29Fix
CVE-2025-54766Xorux XorMon-NG configuration export API information disclosure5.3CISA ADP v3.18.0%2025-07-29Fix
CVE-2025-54765KL-001-2025-013: Xorux XorMon-NG Web application privilege escalation to Administrator5.3CISA ADP v3.18.0%2025-07-29Fix
CVE-2025-54422Sandboxie exposes encrypted sandbox key during password change6.9CNA v4.00.1%2025-07-29Fix
CVE-2025-54381BentoML is vulnerable to an SSRF Attack through file upload Processing9.9CNA v3.116.1%2025-07-29Exploit codeFix
CVE-2025-54126Bytecode Alliance WebAssembly Micro Runtime iwasm address pool option improper access control6.9CNA v4.00.6%2025-07-29Fix
CVE-2025-53902Tuleap exposes artifacts to a mentioned user via email notifications4.3CNA v3.10.3%2025-07-29Fix
CVE-2025-53715TP-Link TL-WR841N Wan6to4TunnelCfgRpm.htm buffer overflow6.9CNA v4.00.3%2025-07-29
CVE-2025-53714TP-Link TL-WR841N WzdWlanSiteSurveyRpm_AP.htm buffer overflow6.9CNA v4.00.3%2025-07-29
CVE-2025-53713TP-Link TL-WR841N WlanNetworkRpm_APC.htm buffer overflow6.9CNA v4.00.3%2025-07-29
CVE-2025-53712TP-Link TL-WR841N WlanNetworkRpm_AP.htm buffer overflow6.9CNA v4.00.3%2025-07-29
CVE-2025-53711TP-Link TL-WR841N, TL-WR842ND and TL-WR949N WlanNetworkRpm.htm buffer overflow6.9CNA v4.00.3%2025-07-29
CVE-2025-53649SwitchBot App sensitive information in log files5.9CNA v4.00.1%2025-07-29
CVE-2025-53541Tuleap is vulnerable to XSS attacks when displaying the children of a parent artifact5.4CNA v3.10.2%2025-07-29Fix
CVE-2025-53102Discourse's WebAuthn challenge isn't cleared from user session after authentication8.2CNA v4.00.5%2025-07-29Fix
CVE-2025-53082Samsung Electronics Data Management Server Samsung DMS( arbitrary file deletion6.1CNA v3.10.5%2025-07-29Fix
CVE-2025-53081Samsung Electronics Data Management Server Samsung DMS( arbitrary file write6.4CNA v3.10.4%2025-07-29Fix
CVE-2025-53080Samsung Electronics Data Management Server path traversal7.1CNA v3.10.3%2025-07-29Fix
CVE-2025-53079Samsung Electronics Data Management Server Samsung DMS( absolute path traversal4.9CNA v3.10.5%2025-07-29Fix
CVE-2025-53078Samsung Electronics Data Management Server Samsung DMS( deserialization of untrusted data8.0CNA v3.10.4%2025-07-29Fix
CVE-2025-53077An execution after redirect in Samsung DMS(Data Management Server) allows attackers to execute limited functions without permissions. An attacker could compromise the integrity of the platform by executing this vulnerability.6.5CNA v3.10.3%2025-07-29Fix
CVE-2025-52899Tuleap vulnerable to user enumeration via the lost password form5.3CNA v3.10.3%2025-07-29Fix
CVE-2025-52490Couchbase Sync Gateway shows cleartext passwords in redacted and unredacted output7.3CISA ADP v3.10.2%2025-07-29Fix
CVE-2025-52358Vivaldigroup Icontrol+ Server Vivaldi United Group cross-site scripting6.3CISA ADP v3.10.3%2025-07-29
CVE-2025-52284TOTOLINK X6000R command injection6.5CISA ADP v3.12.3%2025-07-29
CVE-2025-51970PuneethReddyHC online-shopping-system-advanced action.php endpoint SQL injection7.7CISA ADP v3.10.2%2025-07-29Exploit code
CVE-2025-51045PHPGurukul Pre-School Enrollment System SQL injection6.5CISA ADP v3.10.2%2025-07-29
CVE-2025-51044PHPGurukul Nipah Virus Testing Management System SQL injection6.5CISA ADP v3.10.2%2025-07-29
CVE-2025-50738Memos has cross-site scripting (XSS) vulnerability in Image URLs9.8CISA ADP v3.12.4%2025-07-29NucleiFix
CVE-2025-46059langchain-ai GmailToolkit code injection9.8CISA ADP v3.10.7%2025-07-29
CVE-2025-45346Bacula-web SQL injection8.1CISA ADP v3.10.7%2025-07-29Fix
CVE-2025-44137Maptiler Tileserver PHP path traversal8.2CISA ADP v3.11.4%2025-07-29Nuclei
CVE-2025-44136Maptiler Tileserver PHP cross-site scripting9.8CISA ADP v3.12.5%2025-07-29Nuclei
CVE-2025-43214Apple Safari buffer overflow6.5CISA ADP v3.11.0%2025-07-29Fix
CVE-2025-43213Apple Safari buffer overflow6.5CISA ADP v3.10.7%2025-07-29Fix
CVE-2025-41241VMware vCenter denial of service4.4CNA v3.10.3%2025-07-29Fix
CVE-2025-40686Reflected cross-site scripting (XSS) vulnerability in Human Resource Management System6.1v3.10.2%2025-07-29
CVE-2025-40685Reflected cross-site scripting (XSS) vulnerability in Human Resource Management System6.1v3.10.2%2025-07-29
CVE-2025-40684Reflected cross-site scripting (XSS) vulnerability in Human Resource Management System6.1v3.10.2%2025-07-29
CVE-2025-40683Reflected cross-site scripting (XSS) vulnerability in Human Resource Management System6.1v3.10.2%2025-07-29
CVE-2025-40682SQL injection vulnerability in Human Resource Management System9.8v3.10.3%2025-07-29
CVE-2025-40600SonicWall SonicOS format string9.8CISA ADP v3.10.9%2025-07-29Fix
CVE-2025-36071IBM Db2 denial of service6.5CNA v3.10.3%2025-07-29Fix
CVE-2025-36010IBM Db2 for Linux denial of service6.5CNA v3.10.2%2025-07-29Fix
CVE-2025-33114IBM Db2 for Linux denial of service5.3CNA v3.10.3%2025-07-29Fix
CVE-2025-33092IBM Db2 for Linux code execution7.8CNA v3.10.1%2025-07-29Fix
CVE-2025-31965HCL BigFix Remote Control is affected by an authorization bypass8.2CNA v3.10.2%2025-07-29
CVE-2025-31277Apple Multiple Products buffer overflow8.8CISA ADP v3.11.7%2025-07-29KEVKCVFix
CVE-2025-28172Grandstream UCM6510 missing brute-force protection6.5CISA ADP v3.10.3%2025-07-29
CVE-2025-28171Grandstream UCM6510 insecure storage of sensitive information6.5CISA ADP v3.10.3%2025-07-29
CVE-2025-28170Grandstream GXP1628 directory listing7.6CISA ADP v3.10.3%2025-07-29
CVE-2025-27514GLPI is susceptible to stored XSS attack through project's kanban4.5CNA v3.10.2%2025-07-29Fix
CVE-2025-26400SolarWinds Web Help Desk XML external entity injection (XXE)5.3CNA v3.10.3%2025-07-29Fix
CVE-2025-8264z-push/z-push-dev SQL injection9.1CNA v4.00.4%2025-07-29Fix
CVE-2025-8216Sky Addons for Elementor WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-07-29Fix
CVE-2025-8196Magical Addons For Elementor WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-07-29Fix
CVE-2025-7849Memory corruption Issue in NI LabVIEW due to improper error handling8.5CNA v4.00.2%2025-07-29Fix
CVE-2025-7848Missing input check in lvpict.cpp used in NI LabVIEW8.5CNA v4.05.7%2025-07-29Fix
CVE-2025-7811StreamWeasels YouTube Integration WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-07-29Fix
CVE-2025-7810StreamWeasels Kick Integration WordPress plugin stored cross-site scripting5.4CNA v3.10.2%2025-07-29Fix
CVE-2025-7809StreamWeasels Twitch Integration WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-07-29Fix
CVE-2025-7689Hydra Booking - missing authorization to Authenticated privilege escalation8.8CNA v3.10.4%2025-07-29Fix
CVE-2025-7675Autodesk Shared Components 3DM File Parsing out-of-bounds write7.8CNA v3.10.2%2025-07-29Fix
CVE-2025-7497Autodesk Shared Components PRT File Parsing out-of-bounds write7.8CNA v3.10.2%2025-07-29Fix
CVE-2025-7458SQLite integer overflow in key info allocation may lead to information disclosure9.1NVD v3.10.2%2025-07-29Fix
CVE-2025-7361Code injection vulnerability in NI LabVIEW when using CIN nodes8.5CNA v4.00.3%2025-07-29Fix
CVE-2025-6730Bonanza WordPress plugin unauthorized access4.3CNA v3.10.2%2025-07-29
CVE-2025-6692YouTube Embed WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-07-29
CVE-2025-6681Fan Page WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-07-29
CVE-2025-6637Autodesk Shared Components PRT File Parsing out-of-bounds write7.8CNA v3.10.2%2025-07-29Fix
CVE-2025-6636Autodesk Shared Components PRT File Parsing use-after-free7.8CNA v3.10.2%2025-07-29Fix
CVE-2025-6635Autodesk Shared Components PRT File Parsing out-of-bounds read7.8CNA v3.10.2%2025-07-29Fix
CVE-2025-6631Autodesk Shared Components PRT File Parsing out-of-bounds write7.8CNA v3.10.2%2025-07-29Fix
CVE-2025-6505Progress Software Hybrid Data Pipeline improper authentication8.1CNA v3.10.3%2025-07-29Fix
CVE-2025-6504Progress Software Hybrid Data Pipeline possibilities of IP spoofing via X-Forwarded-For (XFF) header8.4CNA v3.10.2%2025-07-29Fix
CVE-2025-6495Bricks Builder WordPress theme unauthenticated SQL injection via `p` parameter7.5CNA v3.10.5%2025-07-29Fix
CVE-2025-6175CRLF injection in DECE Software's Geodi7.2CNA v3.10.2%2025-07-29Fix
CVE-2025-6060XSS in DECE Software's Geodi5.4CNA v3.10.2%2025-07-29Fix
CVE-2025-5922Retrievable password hash protecting TSplus admin console4.8CNA v4.00.1%2025-07-29Fix
CVE-2025-5684MetForm WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-07-29Fix
CVE-2025-5587Appzend WordPress theme stored cross-site scripting6.4CNA v3.10.3%2025-07-29Fix
CVE-2025-5043Autodesk Shared Components 3DM File Parsing heap-based overflow7.8CNA v3.10.2%2025-07-29Fix
CVE-2025-5038Autodesk Shared Components X_T File Parsing memory corruption7.8CNA v3.10.2%2025-07-29Fix
CVE-2025-4674Unexpected command execution in untrusted VCS repositories in cmd/go8.6CISA ADP v3.10.4%2025-07-29Fix
CVE-2025-4566Elementor WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-07-29Fix
CVE-2025-4370Brizy WordPress plugin missing authorization to unauthenticated limited file upload5.3CNA v3.10.3%2025-07-29Fix
CVE-2025-3075Elementor WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.2%2025-07-29Fix
CVE-2025-2928Genetec Security Center SQL injection7.2CNA v3.10.4%2025-07-29Fix
CVE-2025-2533IBM Db2 for Linux denial of service5.3CNA v3.10.3%2025-07-29Fix
CVE-2025-2179GlobalProtect App: Non Admin User can Disable the GlobalProtect App6.8CNA v4.00.1%2025-07-29Fix
CVE-2025-54569Malwarebytes Binisoft Windows Firewall Control incorrect authorization4.5CNA v3.10.1%2025-07-28Fix
CVE-2025-54538JetBrains TeamCity cleartext storage of sensitive information5.5CNA v3.10.3%2025-07-28Fix
CVE-2025-54537JetBrains TeamCity cleartext storage of sensitive information5.5CNA v3.10.3%2025-07-28Fix
CVE-2025-54536JetBrains TeamCity cross-site request forgery5.4CNA v3.10.2%2025-07-28Fix
CVE-2025-54535JetBrains TeamCity weak hash5.8CNA v3.10.2%2025-07-28Fix
CVE-2025-54534JetBrains TeamCity cross-site scripting4.8CNA v3.10.8%2025-07-28Fix
CVE-2025-54533JetBrains TeamCity incorrect authorization4.3CNA v3.10.2%2025-07-28Fix
CVE-2025-54532JetBrains TeamCity incorrect authorization4.3CNA v3.10.2%2025-07-28Fix
CVE-2025-54531JetBrains TeamCity relative path traversal7.7CNA v3.10.3%2025-07-28Fix
CVE-2025-54530JetBrains TeamCity incorrect default permissions7.5CNA v3.10.2%2025-07-28Fix
CVE-2025-54529JetBrains TeamCity cross-site request forgery3.7CNA v3.10.1%2025-07-28Fix
CVE-2025-54528JetBrains TeamCity cross-site request forgery5.4CNA v3.10.2%2025-07-28Fix
CVE-2025-54527JetBrains YouTrack clickjacking6.1CNA v3.10.3%2025-07-28Fix
CVE-2025-54429Polkadot Frontier's constructing smart contract can bypass precompile address bounding6.9CNA v4.00.5%2025-07-28Fix
CVE-2025-54428musombi123 RevelaCode-Backend insufficiently protected credentials9.8CNA v3.10.5%2025-07-28Fix
CVE-2025-54427Polkadot Frontier gas price inherent check vulnerability6.9CNA v4.00.6%2025-07-28
CVE-2025-54426Polkadot Frontier contains silent failure in Curve25519 arithmetic precompiles with malformed points9.9CNA v4.00.3%2025-07-28Fix
CVE-2025-54423copyparty has a DOM-based XSS vulnerability when displaying multimedia metadata5.4CNA v3.10.4%2025-07-28Fix
CVE-2025-54419Node-SAML Contains SAML signature verification10.0CNA v3.10.4%2025-07-28Fix
CVE-2025-54418CodeIgniter4's ImageMagick handler has command injection9.8CNA v3.11.5%2025-07-28Fix
CVE-2025-54299nobossextensions.com No Boss Testimonials component for Joomla stored cross-site scripting9.4CNA v4.00.4%2025-07-28
CVE-2025-54298Extension firecoders.com stored XSS vulnerability in CommentBox component for Joomla9.4CNA v4.00.4%2025-07-28
CVE-2025-53696Johnson Controls iSTAR Ultra download without integrity check9.3CNA v4.00.1%2025-07-28Fix
CVE-2025-53695Johnson Controls iSTAR Ultra OS command injection9.4CNA v4.00.9%2025-07-28Fix
CVE-2025-50494PHPGurukul Car Washing Management System session hijacking7.5CISA ADP v3.10.4%2025-07-28
CVE-2025-50493PHPGurukul Doctor Appointment Management System session hijacking7.5CISA ADP v3.10.3%2025-07-28
CVE-2025-50492PHPGurukul e-Diary Management System session hijacking7.5CISA ADP v3.10.4%2025-07-28
CVE-2025-50491PHPGurukul Bank Locker Management System insufficient session expiration7.1CISA ADP v3.10.3%2025-07-28
CVE-2025-50490PHPGurukul Student Result Management System session hijacking7.5CISA ADP v3.10.4%2025-07-28
CVE-2025-50489PHPGurukul Student Result Management System session hijacking7.5CISA ADP v3.10.5%2025-07-28
CVE-2025-50488PHPGurukul Online Library Management System insufficient session expiration7.1CISA ADP v3.10.3%2025-07-28
CVE-2025-50487PHPGurukul Blood Bank and Donor Management System insufficient session expiration7.1CISA ADP v3.10.3%2025-07-28
CVE-2025-50486PHPGurukul e-Diary Management System insufficient session expiration7.1CISA ADP v3.10.3%2025-07-28
CVE-2025-50485PHPGurukul Online Course Registration insufficient session expiration7.1CISA ADP v3.10.3%2025-07-28
CVE-2025-50484PHPGurukul Small CRM insufficient session expiration7.1CISA ADP v3.10.3%2025-07-28
CVE-2025-43023HP Linux Imaging And Printing Software Use of DSA Key5.9CNA v4.00.2%2025-07-28Fix
CVE-2025-40730HTML injection in Vox Media's Chorus CMS4.8CNA v4.00.3%2025-07-28
CVE-2025-38497Linux kernel USB gadget configfs out-of-bounds read7.1v3.10.2%2025-07-28Fix
CVE-2025-38496Linux kernel dm-bufio improper locking5.5v3.10.1%2025-07-28Fix
CVE-2025-38495Linux kernel HID core report buffer vulnerability8.8CNA v3.10.3%2025-07-28Fix
CVE-2025-38494Linux kernel HID core vulnerability7.8CNA v3.10.2%2025-07-28Fix
CVE-2025-38493Linux kernel osnoise timerlat tracer buffer overflow5.5v3.10.2%2025-07-28Fix
CVE-2025-38492Linux kernel netfs subsystem race condition4.7v3.10.1%2025-07-28Fix
CVE-2025-38491Linux kernel MPTCP fallback handling vulnerability8.2CNA v3.10.2%2025-07-28Fix
CVE-2025-38490Linux kernel libwx Ethernet driver double free9.8CNA v3.10.3%2025-07-28Fix
CVE-2025-38489Linux kernel s390/bpf null pointer dereference5.5v3.10.1%2025-07-28Fix
CVE-2025-38488Linux kernel SMB client message encryption use-after-free9.8CNA v3.10.7%2025-07-28Fix
CVE-2025-38487Linux kernel Aspeed LPC snoop driver null pointer dereference5.5v3.10.2%2025-07-28Fix
CVE-2025-38486In the Linux kernel, the following vulnerability has been resolved: soundwire: Revert "soundwire: qcom: Add set_channel_map api support" This reverts commit 7796c97df6b1b2206681a07f3c80f6023a6593d5. This patch broke Dragonboard 845c (sdm845). I see: Unexpected kernel BRK exception at EL17.8CNA v3.10.1%2025-07-28Fix
CVE-2025-38485Linux kernel fxls8962af accelerometer driver use-after-free7.8CNA v3.10.2%2025-07-28Fix
CVE-2025-38484Linux kernel IIO backend debugfs interface out-of-bounds write7.8CNA v3.10.2%2025-07-28Fix
CVE-2025-38483Linux kernel das16m1 driver IRQ validation out-of-bounds read7.1v3.10.2%2025-07-28Fix
CVE-2025-38482Linux kernel das6402 driver IRQ validation out-of-bounds read7.1v3.10.2%2025-07-28Fix
CVE-2025-38481Linux kernel Comedi INSNLIST ioctl vulnerability5.5v3.10.2%2025-07-28Fix
CVE-2025-38480Linux kernel Comedi digital subdevice emulation vulnerability5.5v3.10.2%2025-07-28Fix
CVE-2025-38478Linux kernel Comedi subdevice instructions vulnerability7.8CNA v3.10.2%2025-07-28Fix
CVE-2025-38477Linux kernel sch_qfq race condition7.8CNA v3.10.1%2025-07-28Fix
CVE-2025-38476Linux kernel rpl use-after-free9.8CNA v3.10.3%2025-07-28Fix
CVE-2025-38475Linux kernel SMC socket null pointer dereference7.8CNA v3.10.2%2025-07-28Fix
CVE-2025-38474In the Linux kernel, the following vulnerability has been resolved: usb: net: sierra: check for no status endpoint The driver checks for having three endpoints and having bulk in and out endpoints, but not that the third endpoint is interrupt input. Rectify the omission.5.5v3.10.2%2025-07-28Fix
CVE-2025-38473Linux kernel Bluetooth L2CAP socket null pointer dereference5.5v3.10.2%2025-07-28Fix
CVE-2025-38472Linux kernel netfilter connection tracking vulnerability9.8CNA v3.10.4%2025-07-28Fix
CVE-2025-38471Linux kernel TLS socket receive queue use-after-free9.8CNA v3.10.4%2025-07-28Fix
CVE-2025-38470Linux kernel VLAN filtering memory leak7.8CNA v3.10.2%2025-07-28Fix
CVE-2025-38469Linux kernel KVM Xen schedop poll hypercall emulation vulnerability5.5v3.10.2%2025-07-28Fix
CVE-2025-38468Linux kernel net/sched null pointer dereference5.5NVD v3.10.2%2025-07-28Fix
CVE-2025-32731MedDream PACS Premium radiationDoseReport.php functionality reflected cross-site scripting6.1CNA v3.10.7%2025-07-28Emerging Threats
CVE-2025-30133Iroadau FX2 default credentials9.8CISA ADP v3.10.5%2025-07-28
CVE-2025-30126Marbella KR8s Dashcam FF remote control interface missing authentication5.3CISA ADP v3.10.3%2025-07-28
CVE-2025-30125Marbella KR8s Dashcam FF hard-coded credentials9.8CISA ADP v3.10.4%2025-07-28
CVE-2025-30124Marbella KR8s Dashcam FF SD card storage cleartext storage of sensitive information9.8CISA ADP v3.10.3%2025-07-28
CVE-2025-29534PowerStick Wave Dual-Band Wifi Extender cgi_vista.cgi OS command injection8.8CISA ADP v3.10.6%2025-07-28
CVE-2025-27802Stored cross-site scripting in Episerver Content Management System (CMS) Edit Preview4.8CNA v4.00.3%2025-07-28Fix
CVE-2025-27801Stored cross-site scripting in Episerver Content Management System (CMS) Media Selection Preview4.6CNA v4.00.4%2025-07-28Fix
CVE-2025-27800Stored cross-site scripting in Episerver Content Management System (CMS) Admin Dashboard4.8CNA v4.00.4%2025-07-28Fix
CVE-2025-27724MedDream PACS Premium login.php functionality privilege escalation9.8v3.10.5%2025-07-28
CVE-2025-26469MedDream PACS Premium incorrect default permissions9.8v3.10.5%2025-07-28
CVE-2025-24485MedDream PACS Premium cecho.php functionality server-side request forgery7.5v3.17.7%2025-07-28Emerging Threats
CVE-2025-8283Red Hat Enterprise Linux 10 netavark: Podman: Netavark may resolve hostnames to unexpected hosts3.7CNA v3.10.3%2025-07-28Fix
CVE-2025-8279Missing authentication for critical function in GitLab Language Server8.7CNA v3.10.4%2025-07-28Fix
CVE-2025-8275bsc Peru Cocktails App improper export of android application components4.8CNA v4.00.1%2025-07-28
CVE-2025-8274Campcodes Online Recruitment Management System ajax.php SQL injection9.8v3.10.4%2025-07-28
CVE-2025-8273code-projects Exam Form Submission update_s8.php SQL injection9.8v3.10.5%2025-07-28
CVE-2025-8272code-projects Exam Form Submission update_fst.php SQL injection9.8v3.10.5%2025-07-28
CVE-2025-8271code-projects Exam Form Submission delete_s3.php SQL injection9.8v3.10.5%2025-07-28
CVE-2025-8270code-projects Exam Form Submission delete_s2.php SQL injection9.8v3.10.5%2025-07-28
CVE-2025-8269code-projects Exam Form Submission delete_s1.php SQL injection9.8v3.10.6%2025-07-28
CVE-2025-8267ssrfcheck server-side request forgery5.3NVD v3.10.5%2025-07-28Fix
CVE-2025-8266yanyutao0402 ChanCMS collect.js getArticle deserialization5.3CNA v4.01.0%2025-07-28NucleiFix
CVE-2025-8265299Ko CMS File Management view unrestricted upload5.1CNA v4.00.4%2025-07-28
CVE-2025-8262yarnpkg Yarn hosted-git-resolver.js explodeHostedGitFragment redos7.5v3.10.7%2025-07-28
CVE-2025-8261Vaelsys VaelsysV4 User Creation vgrid_server.php improper authorization9.8v3.10.6%2025-07-28
CVE-2025-8260Vaelsys VaelsysV4 Web interface vgrid_server.php weak hash7.5v3.10.2%2025-07-28Fix
CVE-2025-8259Vaelsys VaelsysV4 Web interface vgrid_server.php execute_DataObjectProc os command injection9.8v3.13.2%2025-07-28Fix
CVE-2025-8258Cool Mo Maigcal Number App improper export of android application components4.8CNA v4.00.2%2025-07-28
CVE-2025-8257Lobby Universe Lobby App improper export of android application components4.8CNA v4.00.2%2025-07-28
CVE-2025-8256code-projects Online Ordering System product.php unrestricted upload9.8v3.10.4%2025-07-28
CVE-2025-8255code-projects Exam Form Submission register.php unrestricted upload9.8v3.10.6%2025-07-28
CVE-2025-8254Campcodes Courier Management System view_parcel.php SQL injection9.8v3.10.3%2025-07-28
CVE-2025-8253code-projects Exam Form Submission delete_s6.php SQL injection9.8v3.10.5%2025-07-28
CVE-2025-8252code-projects Exam Form Submission delete_s5.php SQL injection9.8v3.10.5%2025-07-28
CVE-2025-8251code-projects Exam Form Submission delete_s4.php SQL injection9.8v3.10.5%2025-07-28
CVE-2025-8250code-projects Exam Form Submission update_s4.php SQL injection9.8v3.10.5%2025-07-28
CVE-2025-8249code-projects Exam Form Submission update_s3.php SQL injection9.8v3.10.5%2025-07-28
CVE-2025-8248code-projects Online Ordering System signup.php SQL injection9.8v3.10.4%2025-07-28
CVE-2025-8247Projectworlds Online Admission System admin.php SQL injection8.8v3.10.3%2025-07-28
CVE-2025-8194Python CPython tarfile infinite loop during parsing with negative member offset7.5CNA v3.10.7%2025-07-28Fix
CVE-2025-7676Microsoft DLL hijacking of all PE32 executables on Windows 11 for ARM CPUs5.4CNA v4.00.1%2025-07-28Fix
CVE-2025-6918SQLi in Ncvav's Virtual PBX Software9.8CNA v3.10.3%2025-07-28Fix
CVE-2025-6250Privilege Management for Windows elevation of privilege7.1CNA v4.00.2%2025-07-28Fix
CVE-2025-5997Privilege escalation in Beamsec PhishPro8.8CNA v3.10.4%2025-07-28Fix
CVE-2025-4056GLib: GLib crash after long command line7.5NVD v3.10.5%2025-07-28Fix
CVE-2025-2297Privilege Management for Windows elevation of privilege7.2CNA v4.00.1%2025-07-28Fix
CVE-2025-54597LinuxServer Heimdall cross-site scripting6.1NVD v3.10.6%2025-07-27NucleiFix
CVE-2025-8246TOTOLINK X15 HTTP POST request formRoute buffer overflow7.5v3.10.8%2025-07-27
CVE-2025-8245TOTOLINK X15 HTTP POST request formMultiAPVLAN buffer overflow7.5v3.11.1%2025-07-27
CVE-2025-8244TOTOLINK X15 HTTP POST request formMapDelDevice buffer overflow9.8v3.11.2%2025-07-27
CVE-2025-8243TOTOLINK X15 HTTP POST request formMapDel buffer overflow7.5v3.11.1%2025-07-27
CVE-2025-8242TOTOLINK X15 HTTP POST request formFilter buffer overflow7.5v3.11.1%2025-07-27
CVE-2025-82411000 Projects ABC Courier Management System report.php SQL injection9.8v3.10.5%2025-07-27
CVE-2025-8240code-projects Exam Form Submission dashboard.php SQL injection9.8v3.10.5%2025-07-27
CVE-2025-8239code-projects Exam Form Submission admin SQL injection9.8v3.10.5%2025-07-27
CVE-2025-8238code-projects Exam Form Submission update_s2.php SQL injection9.8v3.10.5%2025-07-27
CVE-2025-8237code-projects Exam Form Submission update_s1.php SQL injection9.8v3.10.5%2025-07-27
CVE-2025-8236code-projects Online Ordering System edit_product.php SQL injection9.8v3.10.5%2025-07-27
CVE-2025-8235code-projects Online Ordering System product.php SQL injection9.8v3.10.5%2025-07-27
CVE-2025-8234code-projects Online Ordering System delete_member.php SQL injection9.8v3.10.5%2025-07-27
CVE-2025-8233code-projects Online Ordering System user.php SQL injection9.8v3.10.5%2025-07-27
CVE-2025-8232code-projects Online Ordering System delete_user.php SQL injection9.8v3.10.5%2025-07-27
CVE-2025-8231D-Link DIR-890L UART Port rgbin hard-coded credentials7.0CNA v4.00.7%2025-07-27
CVE-2025-8230Campcodes Courier Management System manage_user.php SQL injection8.8v3.10.4%2025-07-27
CVE-2025-8229Campcodes Courier Management System parcel_list.php SQL injection8.8v3.10.5%2025-07-27
CVE-2025-8228yanyutao0402 ChanCMS getPages server-side request forgery8.8v3.10.6%2025-07-27Fix
CVE-2025-8227yanyutao0402 ChanCMS getArticle deserialization9.8v3.10.7%2025-07-27Fix
CVE-2025-8226yanyutao0402 ChanCMS find information disclosure9.8v3.10.6%2025-07-27
CVE-2025-8225GNU Binutils DWARF Section dwarf.c process_debug_info memory leak4.8CNA v4.00.2%2025-07-27Fix
CVE-2025-8224GNU Binutils BFD library elf.c bfd_elf_get_str_section null pointer dereference5.5NVD v3.10.3%2025-07-27Fix
CVE-2025-8223jerryshensjf JPACookieShop 蛋糕商城JPA版 AdminTypeCustController.java cross-site request forgery5.3CNA v4.00.3%2025-07-27
CVE-2025-8222jerryshensjf JPACookieShop 蛋糕商城JPA版 GoodsController.java cross-site scripting5.4v3.10.4%2025-07-27
CVE-2025-8221jerryshensjf JPACookieShop 蛋糕商城JPA版 GoodsCustController.java goodsSearch cross-site scripting6.1v3.10.5%2025-07-27
CVE-2025-8220Engeman Web Password Recovery RecoveryPass SQL injection9.4v3.10.6%2025-07-27Exploit code
CVE-2025-8219Shanghai Lingdang Information Technology Lingdang CRM tabdetail_moduleSave_dxkp.php SQL injection9.8v3.10.4%2025-07-27
CVE-2025-8104Memory Usage WordPress plugin cross-site request forgery to limited plugin installation4.3CNA v3.10.2%2025-07-27Fix
CVE-2025-6241Lakeside Software SysTrack LsiAgent service privilege escalation4.4CISA ADP v3.10.2%2025-07-27Fix
CVE-2025-5120Sandbox escape vulnerability in huggingface/smolagents10.0v3.126.3%2025-07-27Fix
CVE-2025-54416Tj-actions/branch-names Contains command injection9.1CNA v3.10.6%2025-07-26Exploit codeFix
CVE-2025-54415Dag-factory's CI/CD Workflow allows for Repository takeover and Secret Exfiltration9.1CNA v4.00.7%2025-07-26Exploit codeFix
CVE-2025-54414Anubis accepts crafted redirect URLs in pass-challenge Try Again buttons5.1CNA v4.00.5%2025-07-26Fix
CVE-2025-54413skops model deserialization arbitrary code execution8.7CNA v4.00.1%2025-07-26Fix
CVE-2025-54412skops' Inconsistent Trusted Type Validation enables Hidden `operator` Methods Execution8.7CNA v4.00.1%2025-07-26Fix
CVE-2025-54385XWiki Platform's searchDocuments API allows for SQL injection8.6CNA v4.00.6%2025-07-26Fix
CVE-2025-54380Opencast still publishes global system account credentials6.5CNA v3.10.4%2025-07-26Fix
CVE-2025-54378haxtheweb issues HAX CMS Backend lacks Comprehensive Authorization Checks8.3CNA v3.10.5%2025-07-26Fix
CVE-2025-54366FreeScout's deserialization of untrusted data leads to remote code execution8.6CNA v4.01.0%2025-07-26Fix
CVE-2025-50185DbGate allows Unauthorized File Access via CSV plugin7.0CNA v4.00.4%2025-07-26
CVE-2025-50184DbGate allows for File Traversal via file parameter7.1CNA v4.00.6%2025-07-26Fix
CVE-2025-8211Roothub SystemConfigAdminController.java edit cross-site scripting6.1v3.10.4%2025-07-26
CVE-2025-8210Yeelink Yeelight App com.yeelight.cherry component vulnerability4.4v3.10.2%2025-07-26
CVE-2025-8207Canara ai1 Mobile Banking App com.canarabank.mobility component vulnerability4.4v3.10.2%2025-07-26
CVE-2025-8206Comodo Dragon IP DNS Leakage Detector cross-site scripting4.7v3.10.5%2025-07-26
CVE-2025-8205Comodo Dragon IP DNS Leakage Detector cleartext transmission6.3CNA v4.00.5%2025-07-26
CVE-2025-8204Comodo Dragon HSTS security check3.7v3.10.6%2025-07-26
CVE-2025-8203Jingmen Zeyou Large File Upload Control index.jsp SQL injection9.8v3.10.4%2025-07-26
CVE-2025-8198MinimogWP The High Converting eCommerce WordPress theme unauthenticated Price manipulation7.5CNA v3.10.3%2025-07-26Fix
CVE-2025-8191macrozheng mall Swagger UI index.html cross-site scripting5.4NVD v3.11.8%2025-07-26NucleiExploit codeFix
CVE-2025-8190Campcodes Courier Management System print_pdets.php SQL injection8.8v3.10.4%2025-07-26
CVE-2025-8189Campcodes Courier Management System edit_user.php SQL injection8.8v3.10.4%2025-07-26
CVE-2025-8188Campcodes Courier Management System edit_staff.php SQL injection8.8v3.10.4%2025-07-26
CVE-2025-8187Campcodes Courier Management System edit_parcel.php SQL injection8.8v3.10.4%2025-07-26
CVE-2025-8186Campcodes Courier Management System edit_branch.php SQL injection8.8v3.10.4%2025-07-26
CVE-2025-81851000 Projects ABC Courier Management System getbyid.php SQL injection9.8v3.10.5%2025-07-26
CVE-2025-8184D-Link DIR-513 HTTP POST request formSetWanL2TPtriggers formSetWanL2TPcallback stack-based overflow9.8NVD v3.113.2%2025-07-26Emerging Threats
CVE-2025-8182Tenda AC18 Samba smb.conf weak password7.4v3.10.4%2025-07-26
CVE-2025-8181TOTOLINK N600R/X2000R FTP service vsftpd.conf least privilege violation8.6CNA v4.01.0%2025-07-26
CVE-2025-8180Tenda CH22 deleteUserName formdeleteUserName buffer overflow8.7CNA v4.09.6%2025-07-26
CVE-2025-8179PHPGurukul Local Services Search Engine Management System changeimage.php SQL injection9.8v3.10.5%2025-07-26
CVE-2025-8178Tenda AC10 RequestsProcessLaid heap-based overflow8.7CNA v4.00.8%2025-07-26
CVE-2025-8177LibTIFF thumbnail.c setrow buffer overflow7.8v3.10.3%2025-07-26Fix
CVE-2025-8176LibTIFF tiffmedian.c get_histogram use-after-free7.8v3.10.3%2025-07-26Fix
CVE-2025-8175D-Link DI-8400 jhttpd usb_paswd.asp null pointer dereference7.5NVD v3.11.6%2025-07-26
CVE-2025-8174code-projects Voting System candidates_add.php unrestricted upload5.3CNA v4.00.4%2025-07-26
CVE-2025-8103WPeMatico RSS Feed Fetcher WordPress plugin cross-site request forgery to plugin deactivation4.3CNA v3.10.2%2025-07-26Fix
CVE-2025-8097WoodMart WordPress theme improper input validation5.3CNA v3.10.3%2025-07-26Fix
CVE-2025-7501Wonder Slider Lite and Wonder Slider WordPress plugin Dom-based stored cross-site scripting6.4CNA v3.10.3%2025-07-26Fix
CVE-2025-6991Kallyas WordPress theme authenticated (Contributor+) local file inclusion7.5CNA v3.10.8%2025-07-26Fix
CVE-2025-6989Kallyas WordPress theme authenticated (Contributor+) arbitrary Folder deletion8.1CNA v3.10.4%2025-07-26Fix
CVE-2025-6987Advanced iFrame WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-07-26Fix
CVE-2025-6895MelaPress Login Security - authentication bypass to privilege escalation9.8CNA v3.10.7%2025-07-26Fix
CVE-2025-5529Educenter WordPress theme authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-07-26Fix
CVE-2025-54596Abnormal AI Abnormal Security incorrect authorization4.3CNA v3.10.2%2025-07-25Fix
CVE-2025-54568Akamai Rate Control incorrect behavior3.7CNA v3.10.3%2025-07-25Fix
CVE-2025-54567QEMU incorrect behavior5.4v3.10.2%2025-07-25Fix
CVE-2025-54566QEMU external control of critical state data5.4v3.10.2%2025-07-25Fix
CVE-2025-54558OpenAI Codex CLI inclusion of untrusted functionality4.1CNA v3.10.2%2025-07-25Fix
CVE-2025-52455Salesforce Tableau Server server-side request forgery5.3CISA ADP v3.10.3%2025-07-25Fix
CVE-2025-52454Salesforce Tableau Server server-side request forgery8.2CISA ADP v3.10.3%2025-07-25Fix
CVE-2025-52453Salesforce Tableau Server server-side request forgery8.2CISA ADP v3.10.3%2025-07-25Fix
CVE-2025-52452Salesforce Tableau Server path traversal8.5CISA ADP v3.10.4%2025-07-25Fix
CVE-2025-52449Salesforce Tableau Server unrestricted file upload8.5CISA ADP v3.10.3%2025-07-25Fix
CVE-2025-52448Salesforce Tableau Server insecure direct object reference8.1CISA ADP v3.10.4%2025-07-25Fix
CVE-2025-52447Salesforce Tableau Server insecure direct object reference8.1CISA ADP v3.10.4%2025-07-25Fix
CVE-2025-52446Salesforce Tableau Server insecure direct object reference8.0CISA ADP v3.10.2%2025-07-25Fix
CVE-2025-52360Koha Library Management System OPAC search feature cross-site scripting8.8CISA ADP v3.10.5%2025-07-25
CVE-2025-51411Vishalmathur Institute-of-current-students reflected cross-site scripting6.1CISA ADP v3.10.3%2025-07-25
CVE-2025-46199getgrav grav cross-site scripting9.8CISA ADP v3.10.8%2025-07-25
CVE-2025-46198getgrav grav cross-site scripting8.8CISA ADP v3.10.6%2025-07-25
CVE-2025-45960Tawk.to cross-site scripting6.1CISA ADP v3.10.4%2025-07-25
CVE-2025-45939Apwide Golive server-side request forgery6.5CISA ADP v3.10.3%2025-07-25Fix
CVE-2025-45893OpenCart cross-site scripting6.1CISA ADP v3.10.2%2025-07-25
CVE-2025-45892OpenCart cross-site scripting6.1CISA ADP v3.10.2%2025-07-25
CVE-2025-45777Abeltechsoft Chavara Matrimony improper authentication9.8CISA ADP v3.10.7%2025-07-25
CVE-2025-45467Unitree Go 1 incorrect default permissions7.1CISA ADP v3.10.3%2025-07-25Exploit code
CVE-2025-45466Unitree Go 1 hard-coded credentials8.8CISA ADP v3.10.6%2025-07-25
CVE-2025-45406CodeIgniter4 v4.6.0 A stored cross-site scripting6.1CISA ADP v3.10.3%2025-07-25Exploit code
CVE-2025-44608Vishalmathur CloudClassroom-PHP-Project SQL injection6.5CISA ADP v3.10.3%2025-07-25Exploit code
CVE-2025-43712JHipster UI misrepresentation8.0CISA ADP v3.10.3%2025-07-25
CVE-2025-38467Linux kernel Exynos7 DECON display driver null pointer dereference5.5v3.10.2%2025-07-25Fix
CVE-2025-38466Linux kernel uprobes vulnerability7.8CNA v3.10.2%2025-07-25Fix
CVE-2025-38465Linux kernel netlink socket buffer accounting memory leak5.5NVD v3.10.2%2025-07-25Fix
CVE-2025-38464Linux kernel TIPC connection handling use-after-free7.8CNA v3.10.2%2025-07-25Fix
CVE-2025-38463Linux kernel TCP send path integer underflow7.8CNA v3.10.2%2025-07-25Fix
CVE-2025-38462Linux kernel vsock transport lookup race condition4.7v3.10.1%2025-07-25Fix
CVE-2025-38461Linux kernel vsock transport assignment race condition7.0CNA v3.10.1%2025-07-25Fix
CVE-2025-38460Linux kernel ATM CLIP driver null pointer dereference7.0CNA v3.10.2%2025-07-25Fix
CVE-2025-38459Linux kernel ATM CLIP driver uncontrolled recursion7.8v3.10.2%2025-07-25Fix
CVE-2025-38458Linux kernel ATM CLIP driver null pointer dereference5.5v3.10.2%2025-07-25Fix
CVE-2025-38457In the Linux kernel, the following vulnerability has been resolved: net/sched: Abort __tc_modify_qdisc if parent class does not exist Lion's patch [1] revealed an ancient bug in the qdisc API. Whenever a user creates/modifies a qdisc specifying as a parent another qdisc, the qdisc API will, during5.5NVD v3.10.2%2025-07-25Fix
CVE-2025-38456Linux kernel IPMI message handler out-of-bounds write7.8CNA v3.10.2%2025-07-25Fix
CVE-2025-38455Linux kernel KVM SEV vCPU migration null pointer dereference7.8CNA v3.10.2%2025-07-25Fix
CVE-2025-38454Linux kernel ad1816a ALSA driver null pointer dereference5.5v3.10.1%2025-07-25Fix
CVE-2025-38453Linux kernel io_uring message ring vulnerability7.8CNA v3.10.2%2025-07-25Fix
CVE-2025-38452Linux kernel rtsn Ethernet driver null pointer dereference5.5v3.10.1%2025-07-25Fix
CVE-2025-38451Linux kernel MD bitmap statistics vulnerability5.5NVD v3.10.2%2025-07-25Fix
CVE-2025-38450Linux kernel mt7925 Wi-Fi driver null pointer dereference5.5v3.10.1%2025-07-25Fix
CVE-2025-38449Linux kernel DRM GEM framebuffer handling use-after-free7.8CNA v3.10.2%2025-07-25Fix
CVE-2025-38448Linux kernel USB gadget serial driver race condition4.7v3.10.1%2025-07-25Fix
CVE-2025-38447Linux kernel reverse mapping unmap path out-of-bounds read7.8CNA v3.10.2%2025-07-25Fix
CVE-2025-38446Linux kernel i.MX clock driver out-of-bounds read7.3CNA v3.10.2%2025-07-25Fix
CVE-2025-38445Linux kernel RAID1 driver vulnerability7.1v3.10.2%2025-07-25Fix
CVE-2025-38444Linux kernel RAID10 driver memory leak5.5v3.10.2%2025-07-25Fix
CVE-2025-38443Linux kernel nbd use-after-free7.8v3.10.2%2025-07-25Fix
CVE-2025-38442Linux kernel block device buffered I/O null pointer dereference5.5v3.10.1%2025-07-25Fix
CVE-2025-38441Linux kernel netfilter flowtable PPPoE handling vulnerability5.5v3.10.2%2025-07-25Fix
CVE-2025-38440Linux kernel net/mlx5e null pointer dereference7.8CNA v3.10.1%2025-07-25Fix
CVE-2025-38439Linux kernel bnxt_en XDP_REDIRECT DMA handling vulnerability9.8CNA v3.10.5%2025-07-25Fix
CVE-2025-38438Linux kernel SOF Intel HDA driver memory leak5.5v3.10.2%2025-07-25Fix
CVE-2025-38437Linux kernel ksmbd oplock and lease break handling use-after-free8.8CNA v3.10.4%2025-07-25Fix
CVE-2025-38436Linux kernel DRM scheduler fence signaling vulnerability5.5v3.10.1%2025-07-25Fix
CVE-2025-38435Linux kernel riscv xtheadvector context switching vulnerability7.8CNA v3.10.1%2025-07-25Fix
CVE-2025-38434Linux kernel riscv access_ok address check vulnerability7.8CNA v3.10.2%2025-07-25Fix
CVE-2025-38433Linux kernel riscv runtime constant patching null pointer dereference5.5v3.10.1%2025-07-25Fix
CVE-2025-38432Linux kernel netpoll UDP checksum handling improper initialization5.5v3.10.1%2025-07-25Fix
CVE-2025-38431Linux kernel SMB client symlink handling vulnerability5.5v3.10.1%2025-07-25Fix
CVE-2025-38430In the Linux kernel, the following vulnerability has been resolved: nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request If the request being processed is not a v4 compound request, then examining the cstate can have undefined results. This patch adds a check that the rpc procedu9.8CNA v3.10.6%2025-07-25Fix
CVE-2025-38429Linux kernel MHI endpoint ring buffer race condition10.0CNA v3.10.4%2025-07-25Fix
CVE-2025-38428Linux kernel ims-pcu firmware flashing out-of-bounds write7.8v3.10.2%2025-07-25Fix
CVE-2025-38427Linux kernel screen_info framebuffer relocation vulnerability5.5v3.10.2%2025-07-25Fix
CVE-2025-38426Linux kernel amdgpu RAS EEPROM handling vulnerability5.5v3.10.2%2025-07-25Fix
CVE-2025-38425Linux kernel Tegra I2C driver vulnerability7.8CNA v3.10.2%2025-07-25Fix
CVE-2025-38424Linux kernel perf events subsystem vulnerability7.8CNA v3.10.2%2025-07-25Fix
CVE-2025-38423Linux kernel wcd9375 codec driver double free7.8v3.10.2%2025-07-25Fix
CVE-2025-38422Linux kernel lan743x EEPROM and OTP handling vulnerability7.8CNA v3.10.2%2025-07-25Fix
CVE-2025-38421Linux kernel AMD PMF driver double free7.8CNA v3.10.2%2025-07-25Fix
CVE-2025-38420Linux kernel carl9170 Wi-Fi driver null pointer dereference5.5v3.10.2%2025-07-25Fix
CVE-2025-38419Linux kernel remoteproc core memory leak5.5v3.10.2%2025-07-25Fix
CVE-2025-38418Linux kernel remoteproc core memory leak5.5v3.10.2%2025-07-25Fix
CVE-2025-38417Linux kernel ice eswitch driver memory leak5.5v3.10.2%2025-07-25Fix
CVE-2025-38416Linux kernel NFC NCI UART driver vulnerability7.8CNA v3.10.2%2025-07-25Fix
CVE-2025-38415Linux kernel Squashfs filesystem out-of-bounds write7.8v3.10.2%2025-07-25Fix
CVE-2025-38414Linux kernel ath12k Wi-Fi driver denial of service5.5NVD v3.10.2%2025-07-25Fix
CVE-2025-38413In the Linux kernel, the following vulnerability has been resolved: virtio-net: xsk: rx: fix the frame's length check When calling buf_to_xdp, the len argument is the frame data's length without virtio header's length (vi->hdr_len). We check that len with xsk_pool_get_rx_frame_size() + vi->hdr_l7.7CNA v3.10.2%2025-07-25Fix
CVE-2025-38412In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks After retrieving WMI data blocks in sysfs callbacks, check for the validity of them before dereferencing their content.7.8CNA v3.10.2%2025-07-25Fix
CVE-2025-38411Linux kernel netfs request handling double free9.8CNA v3.10.3%2025-07-25Fix
CVE-2025-38410Linux kernel MSM DRM submit path memory leak5.5v3.10.2%2025-07-25Fix
CVE-2025-38409Linux kernel MSM DRM submit path memory leak5.5v3.10.2%2025-07-25Fix
CVE-2025-38408Linux kernel genirq/irq_sim null pointer dereference7.8CNA v3.10.2%2025-07-25Fix
CVE-2025-38407Linux kernel RISC-V SBI CPU ops denial of service5.5v3.10.2%2025-07-25Fix
CVE-2025-38406Linux kernel ath6kl Wi-Fi driver denial of service5.5v3.10.2%2025-07-25Fix
CVE-2025-38405Linux kernel NVMe target bio integrity memory leak7.5CNA v3.10.4%2025-07-25Fix
CVE-2025-38404Linux kernel USB Type-C DisplayPort alt mode driver deadlock5.5v3.10.1%2025-07-25Fix
CVE-2025-38403Linux kernel VMCI vsock transport vulnerability7.8v3.10.2%2025-07-25Fix
CVE-2025-38402Linux kernel idpf driver null pointer dereference5.5v3.10.1%2025-07-25Fix
CVE-2025-38401Linux kernel mtk-sd memory corruption7.8CNA v3.10.2%2025-07-25Fix
CVE-2025-38400Linux kernel NFS proc filesystem init vulnerability5.5NVD v3.10.2%2025-07-25Fix
CVE-2025-38399Linux kernel SCSI target persistent reservation code null pointer dereference7.5CNA v3.10.5%2025-07-25Fix
CVE-2025-38398Linux kernel spi-qpic-snand kernel panic7.8CNA v3.10.1%2025-07-25Fix
CVE-2025-38397Linux kernel NVMe multipath vulnerability5.5v3.10.1%2025-07-25Fix
CVE-2025-38396Linux kernel secretmem vulnerability7.8CNA v3.10.2%2025-07-25Fix
CVE-2025-38395Linux kernel GPIO regulator driver out-of-bounds read8.4CNA v3.10.2%2025-07-25Fix
CVE-2025-38394Linux kernel appletb-kbd memory corruption7.8v3.10.1%2025-07-25Fix
CVE-2025-38393Linux kernel NFSv4 pNFS layout draining race condition7.5CNA v3.10.4%2025-07-25Fix
CVE-2025-38392Linux kernel idpf driver improper locking5.5v3.10.2%2025-07-25Fix
CVE-2025-38391Linux kernel USB Type-C DisplayPort alt mode driver out-of-bounds read5.5v3.10.2%2025-07-25Fix
CVE-2025-38390Linux kernel ARM FF-A firmware driver memory leak5.5v3.10.2%2025-07-25Fix
CVE-2025-38389Linux kernel i915 GPU driver vulnerability7.8v3.10.2%2025-07-25Fix
CVE-2025-38388Linux kernel ARM FF-A firmware driver improper locking5.5v3.10.1%2025-07-25Fix
CVE-2025-38387Linux kernel mlx5 event subscription null pointer dereference5.5v3.10.2%2025-07-25Fix
CVE-2025-38386Linux kernel ACPICA AML interpreter use-after-free7.8CNA v3.10.2%2025-07-25Fix
CVE-2025-38385Linux kernel lan78xx USB Ethernet driver improper resource release7.8v3.10.2%2025-07-25Fix
CVE-2025-38384Linux kernel SPI NAND ECC engine driver memory leak5.5v3.10.2%2025-07-25Fix
CVE-2025-38383Linux kernel vmalloc NUMA info reporting race condition4.7v3.10.1%2025-07-25Fix
CVE-2025-38382Linux kernel Btrfs log replay vulnerability7.8CNA v3.10.2%2025-07-25Fix
CVE-2025-38381Linux kernel cs40l50 vibrator driver null pointer dereference5.5v3.10.1%2025-07-25Fix
CVE-2025-38379Linux kernel SMB client channel reconnection vulnerability7.5CNA v3.10.4%2025-07-25Fix
CVE-2025-38378Linux kernel appletb-kbd use-after-free7.8v3.10.1%2025-07-25Fix
CVE-2025-38377Linux kernel rose protocol driver use-after-free8.8CNA v3.10.2%2025-07-25Fix
CVE-2025-38376Linux kernel chipidea USB gadget controller driver denial of service5.5v3.10.2%2025-07-25Fix
CVE-2025-38375Linux kernel virtio-net XDP driver out-of-bounds read8.4CNA v3.10.2%2025-07-25Fix
CVE-2025-38374Linux kernel OP-TEE FF-A notification driver improper locking5.5v3.10.1%2025-07-25Fix
CVE-2025-38373Linux kernel mlx5 memory region deregistration deadlock5.5v3.10.1%2025-07-25Fix
CVE-2025-38372Linux kernel mlx5 on-demand paging handling vulnerability7.8CNA v3.10.2%2025-07-25Fix
CVE-2025-38371Linux kernel v3d GPU driver null pointer dereference5.5v3.10.2%2025-07-25Fix
CVE-2025-38370Linux kernel Btrfs free space tree vulnerability5.5v3.10.1%2025-07-25Fix
CVE-2025-38369Linux kernel idxd workqueue driver use-after-free7.8v3.10.2%2025-07-25Fix
CVE-2025-38368Linux kernel tps6594 PFSM driver null pointer dereference5.5v3.10.2%2025-07-25Fix
CVE-2025-38367Linux kernel EIOINTC interrupt controller improper array index validation8.8CNA v3.10.1%2025-07-25Fix
CVE-2025-38366Linux kernel EIOINTC interrupt controller vulnerability7.8CNA v3.10.1%2025-07-25Fix
CVE-2025-38365Linux kernel Btrfs directory logging race condition9.1CNA v3.10.3%2025-07-25Fix
CVE-2025-38364Linux kernel maple tree allocator null pointer dereference5.5NVD v3.10.2%2025-07-25Fix
CVE-2025-38363Linux kernel tegra display driver null pointer dereference5.5v3.10.2%2025-07-25Fix
CVE-2025-38362Linux kernel amdgpu display HDCP null pointer dereference5.5v3.10.1%2025-07-25Fix
CVE-2025-38361Linux kernel amdgpu display driver vulnerability7.8v3.10.2%2025-07-25Fix
CVE-2025-38360Linux kernel amdgpu display driver vulnerability5.5v3.10.2%2025-07-25Fix
CVE-2025-38359Linux kernel s390 secure storage access improper locking5.5NVD v3.10.1%2025-07-25Fix
CVE-2025-38358Linux kernel Btrfs reclaim worker race condition4.7v3.10.1%2025-07-25Fix
CVE-2025-38357Linux kernel FUSE filesystem vulnerability7.8CNA v3.10.2%2025-07-25Fix
CVE-2025-38356Linux kernel xe GuC driver vulnerability5.5v3.10.2%2025-07-25Fix
CVE-2025-38355Linux kernel xe GPU driver vulnerability5.5v3.10.2%2025-07-25Fix
CVE-2025-38354Linux kernel msm GPU driver vulnerability5.5v3.10.2%2025-07-25Fix
CVE-2025-38353Linux kernel xe GPU driver improper locking5.5v3.10.1%2025-07-25Fix
CVE-2025-36728SimpleHelp cross-site request forgery8.8NVD v3.10.2%2025-07-25Fix
CVE-2025-36727SimpleHelp inclusion of functionality from untrusted control sphere8.8NVD v3.10.4%2025-07-25Fix
CVE-2025-34139Sitecore XM/XP/XC and Managed Cloud arbitrary file read8.7CNA v4.00.5%2025-07-25Fix
CVE-2025-34136Commvault CommServe web server unauthenticated SQL injection6.9CNA v4.00.5%2025-07-25Fix
CVE-2025-34114OpenBlow Missing Critical Security headers8.4CNA v4.00.2%2025-07-25
CVE-2025-30135Iroadau FX2 missing authentication9.4CISA ADP v3.10.6%2025-07-25
CVE-2025-30086CNCF Harbor users API endpoint information disclosure4.9CISA ADP v3.10.6%2025-07-25Fix
CVE-2025-29631Gardyn Home Kit Firmware OS command injection9.8CISA ADP v3.12.1%2025-07-25KCVFix
CVE-2025-29629Gardyn Home Kit Firmware default credentials8.8CISA ADP v3.10.5%2025-07-25Fix
CVE-2025-29628Gardyn Home Kit Firmware improper message integrity enforcement8.1CISA ADP v3.10.3%2025-07-25Exploit codeKCVFix
CVE-2025-8183Null pointer dereference in µD3TN7.5CNA v3.10.5%2025-07-25Fix
CVE-2025-81731000 Projects ABC Courier Management System Add_reciver.php SQL injection9.8v3.10.5%2025-07-25
CVE-2025-8172itsourcecode Employee Management System index.php SQL injection8.8v3.10.4%2025-07-25
CVE-2025-8171code-projects Document Management System insert.php unrestricted upload5.3CNA v4.00.4%2025-07-25
CVE-2025-8170TOTOLINK T6 MQTT Packet meshSlaveDlfw tcpcheck_net buffer overflow8.7CNA v4.01.1%2025-07-25
CVE-2025-8169D-Link DIR-513 HTTP POST request formSetWanPPTPpath formSetWanPPTPcallback buffer overflow9.8NVD v3.11.7%2025-07-25Emerging Threats
CVE-2025-8168D-Link DIR-513 formSetWanPPPoE websAspInit buffer overflow9.8NVD v3.11.6%2025-07-25Emerging Threats
CVE-2025-8167code-projects Church Donation System edit_members.php cross-site scripting5.4v3.10.3%2025-07-25
CVE-2025-8166code-projects Church Donation System HTTP POST request index.php SQL injection9.8v3.10.5%2025-07-25
CVE-2025-8165code-projects Food Review System approve_reservation.php SQL injection8.8v3.10.5%2025-07-25
CVE-2025-8164code-projects Public Chat Room send_message.php SQL injection8.8v3.10.4%2025-07-25
CVE-2025-8163deerwms deer-wms-2 list SQL injection8.8v3.10.4%2025-07-25
CVE-2025-8162deerwms deer-wms-2 list SQL injection8.8v3.10.5%2025-07-25
CVE-2025-8161deerwms deer-wms-2 export SQL injection8.8v3.10.5%2025-07-25
CVE-2025-8160Tenda AC20 httpd SetSysTimeCfg buffer overflow8.7CNA v4.01.3%2025-07-25Emerging Threats
CVE-2025-8159D-Link DIR-513 HTTP POST request formLanguageChange stack-based overflow9.8NVD v3.116.7%2025-07-25Emerging Threats
CVE-2025-8158PHPGurukul Login and User Management System yesterday-reg-users.php SQL injection7.2v3.10.4%2025-07-25
CVE-2025-8157PHPGurukul User Registration and Login and User Management lastthirtyays-reg-users.php SQL injection7.2v3.10.5%2025-07-25
CVE-2025-8156PHPGurukul User Registration and Login and User Management lastsevendays-reg-users.php SQL injection7.2v3.10.4%2025-07-25
CVE-2025-8155D-Link DCS-6010L Management application vb.htm cross-site scripting5.4NVD v3.121.8%2025-07-25Emerging Threats
CVE-2025-8140TOTOLINK A702R HTTP POST request formWlanMultipleAP buffer overflow8.7CNA v4.08.8%2025-07-25Emerging Threats
CVE-2025-8139TOTOLINK A702R HTTP POST request formPortFw buffer overflow8.7CNA v4.01.1%2025-07-25Emerging Threats
CVE-2025-8138TOTOLINK A702R HTTP POST request formOneKeyAccessButton buffer overflow8.7CNA v4.08.8%2025-07-25Emerging Threats
CVE-2025-8137TOTOLINK A702R HTTP POST request formIpQoS buffer overflow8.7CNA v4.01.1%2025-07-25
CVE-2025-8136TOTOLINK A702R HTTP POST request formFilter buffer overflow7.5v3.11.1%2025-07-25
CVE-2025-8135itsourcecode Insurance Management System updateAgent.php SQL injection8.8v3.10.4%2025-07-25
CVE-2025-8134PHPGurukul BP Monitoring Management System bwdates-report-result.php SQL injection8.8v3.10.5%2025-07-25
CVE-2025-8133yanyutao0402 ChanCMS gather.js getArticle server-side request forgery5.3CNA v4.00.4%2025-07-25Fix
CVE-2025-8132yanyutao0402 ChanCMS utils.js delfile path traversal5.3CNA v4.00.6%2025-07-25Fix
CVE-2025-8131Tenda AC20 SetStaticRouteCfg stack-based overflow8.7CNA v4.01.1%2025-07-25
CVE-2025-8129KoaJS Koa HTTP header response.js back redirect6.1v3.10.2%2025-07-25Fix
CVE-2025-8128zhousg letao product.js unrestricted upload5.3CNA v4.00.3%2025-07-25
CVE-2025-8127deerwms deer-wms-2 list SQL injection8.8v3.10.4%2025-07-25
CVE-2025-8126deerwms deer-wms-2 export SQL injection8.8v3.10.4%2025-07-25
CVE-2025-8125deerwms deer-wms-2 allocatedList SQL injection9.8v3.10.5%2025-07-25
CVE-2025-8124deerwms deer-wms-2 unallocatedList SQL injection8.8v3.10.4%2025-07-25
CVE-2025-8101Linkify prototype pollution and HTML attribute injection (XSS)8.8CNA v4.00.5%2025-07-25Fix
CVE-2025-7742Authentication bypass in LG Innotek Camera8.3CNA v4.00.7%2025-07-25
CVE-2025-7022My Reservation System WordPress plugin reflected XSS6.1CISA ADP v3.10.3%2025-07-25
CVE-2025-5835Droip WordPress plugin missing authorization to authenticated (Subscriber+) Many actions8.8CNA v3.10.4%2025-07-25Fix
CVE-2025-5831Droip WordPress plugin authenticated (Subscriber+) arbitrary file upload8.8CNA v3.10.6%2025-07-25Fix
CVE-2025-5449Libssh: Integer overflow in libssh sftp server packet length validation leading to denial of service6.5NVD v3.10.9%2025-07-25Fix
CVE-2025-5254Stored XSS in Kron Technologies' Kron PAM6.1CNA v3.10.4%2025-07-25Fix
CVE-2025-5253DoS in Kron Technologies' Kron PAM6.5CNA v3.10.4%2025-07-25Fix
CVE-2025-3873silabs.com WiseConnect buffer overflow in Si91x crypto APIs6.0CNA v4.00.3%2025-07-25Fix
CVE-2025-3508Certain HP DesignJet products information disclosure6.0CNA v4.00.9%2025-07-25Fix
CVE-2025-2329High traffic causes corrupt SPI packets in OpenThread leading to denial of service5.3CNA v4.00.2%2025-07-25Fix
CVE-2025-0253HCL IEM is affected by a cookie attribute not set vulnerability2.0CNA v3.10.2%2025-07-25Fix
CVE-2025-0252HCL IEM cleartext transmission2.6CNA v3.10.1%2025-07-25Fix
CVE-2025-0251HCL IEM session fixation2.6CNA v3.10.2%2025-07-25Fix
CVE-2025-0250HCL IEM is affected by an authorization token sent in cookie vulnerability2.2CNA v3.10.2%2025-07-25Fix
CVE-2025-0249HCL IEM is affected by an improper invalidation of access or JWT token vulnerability3.3CNA v3.10.2%2025-07-25Fix
CVE-2025-54379eKuiper API endpoints handling SQL queries with user-controlled table names8.9CNA v4.00.8%2025-07-24Fix
CVE-2025-54369Node-SAML SAML authentication bypass9.3CNA v4.00.5%2025-07-24Fix
CVE-2025-53940Quiet uses insecure, inconsistent verification on local backend token8.5CNA v4.03.6%2025-07-24Fix
CVE-2025-53084WWBN AVideo videosList page parameter functionality cross-site scripting6.1NVD v3.10.7%2025-07-24
CVE-2025-51089Tenda AC8 heap-based buffer overflow6.5CISA ADP v3.17.4%2025-07-24Emerging Threats
CVE-2025-51088Tenda AC8 stack-based buffer overflow5.3CISA ADP v3.17.4%2025-07-24Emerging Threats
CVE-2025-51087Tenda AC8 stack-based buffer overflow8.6CISA ADP v3.111.0%2025-07-24Emerging Threats
CVE-2025-51085Tenda AC8 stack-based buffer overflow5.3CISA ADP v3.17.4%2025-07-24Emerging Threats
CVE-2025-51082Tenda AC8 stack-based buffer overflow5.3CISA ADP v3.10.4%2025-07-24Emerging Threats
CVE-2025-50128WWBN AVideo videoNotFound cross-site scripting6.1NVD v3.10.8%2025-07-24
CVE-2025-48732WWBN AVideo incomplete denylist9.8v3.11.1%2025-07-24
CVE-2025-47061Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-07-24Fix
CVE-2025-46996Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-07-24Fix
CVE-2025-46993Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-07-24Fix
CVE-2025-46410WWBN AVideo cross-site scripting6.1NVD v3.10.8%2025-07-24
CVE-2025-457312FAuth group deletion race condition6.5v3.10.3%2025-07-24
CVE-2025-45702Softperfect Connection Quality Monitor plaintext password storage6.5CISA ADP v3.10.2%2025-07-24
CVE-2025-41420WWBN AVideo userLogin cancelUri parameter functionality cross-site scripting9.6CNA v3.11.2%2025-07-24
CVE-2025-41240VMware bitnamicharts/appsmith files accessible to external parties10.0CNA v3.10.7%2025-07-24Fix
CVE-2025-40680Encryption of sensitive data in CapillaryScope missing6.9CNA v4.00.1%2025-07-24Fix
CVE-2025-36548WWBN AVideo cross-site scripting9.6v3.11.0%2025-07-24
CVE-2025-36005IBM MQ Operator information disclosure5.9CNA v3.10.2%2025-07-24Fix
CVE-2025-33109IBM i privilege escalation7.5CNA v3.10.4%2025-07-24Fix
CVE-2025-33013IBM MQ Operator information disclosure6.2CNA v3.10.1%2025-07-24Fix
CVE-2025-32429XWiki Platform vulnerable to SQL injection through getdeleteddocuments.vm template sort parameter9.3CNA v4.087.0%2025-07-24Reported exploitedNucleiExploit codeFix
CVE-2025-31955HCL iAutomate is affected by a sensitive data exposure7.6CNA v3.10.3%2025-07-24Fix
CVE-2025-31953HCL iAutomate is affected by hard-coded credentials7.1CNA v3.10.3%2025-07-24Fix
CVE-2025-31952HCL iAutomate is affected by an insufficient session expiration7.1CNA v3.10.3%2025-07-24Fix
CVE-2025-26397SolarWinds Observability Self-Hosted deserialization of untrusted data local privilege escalation7.8CNA v3.10.3%2025-07-24Fix
CVE-2025-25214WWBN AVideo race condition7.5v3.11.0%2025-07-24
CVE-2025-22165Atlassian Sourcetree improper privilege management5.9CNA v4.00.1%2025-07-24Fix
CVE-2025-8123deerwms deer-wms-2 edit SQL injection8.8v3.10.4%2025-07-24
CVE-2025-8115PHPGurukul Taxi Stand Management System new-autoortaxi-entry-form.php cross-site scripting5.4v3.10.4%2025-07-24
CVE-2025-8114Libssh: Null pointer dereference in libssh kex session id calculation4.7NVD v3.10.2%2025-07-24Fix
CVE-2025-8107OB OceanBase Server improper privilege management6.3CNA v3.10.3%2025-07-24Fix
CVE-2025-8071Mine CloudVod WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2025-07-24Fix
CVE-2025-8009Security Ninja Secure Firewall and Secure Malware Scanner - Authenticated arbitrary file read4.9CNA v3.10.6%2025-07-24Fix
CVE-2025-7966Get Youtube Subs WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2025-07-24
CVE-2025-7959Station Pro WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2025-07-24
CVE-2025-7852WPBookit WordPress plugin unauthenticated arbitrary file upload via image_upload_handle function9.8CNA v3.11.5%2025-07-24Fix
CVE-2025-7835iThoughts Advanced Code Editor WordPress plugin cross-site request forgery to settings update4.3CNA v3.10.2%2025-07-24
CVE-2025-7822WP Wallcreeper WordPress plugin missing authorization authenticated Cache Enable/Disable4.3CNA v3.10.3%2025-07-24
CVE-2025-7780AI Engine WordPress plugin missing URL Scheme validation to authenticated arbitrary file read6.5CNA v3.10.5%2025-07-24Fix
CVE-2025-7745ABB AC500 V2 modbus TCP buffer overread6.9CNA v4.00.4%2025-07-24Fix
CVE-2025-7695Dataverse Integration - missing authorization to Authenticated privilege escalation8.8CNA v3.10.6%2025-07-24Fix
CVE-2025-7690Affiliate Plus WordPress plugin cross-site request forgery to stored cross-site scripting6.1CNA v3.10.2%2025-07-24
CVE-2025-7640hiWeb Export Posts WordPress plugin cross-site request forgery to arbitrary file deletion8.1CNA v3.10.9%2025-07-24
CVE-2025-7437Ebook Store WordPress plugin unauthenticated arbitrary file upload9.8CNA v3.11.3%2025-07-24Fix
CVE-2025-7404Calibre Web and Autocaliweb have OS command injection9.8v3.12.8%2025-07-24Exploit codeFix
CVE-2025-7001Insufficient granularity of access control in GitLab4.3CNA v3.10.4%2025-07-24Fix
CVE-2025-6998Calibre Web and Autocaliweb ReDoS8.7CNA v4.00.8%2025-07-24Exploit codeFix
CVE-2025-6588FunnelCockpit WordPress plugin reflected cross-site scripting via `error` parameter6.1CNA v3.10.4%2025-07-24Fix
CVE-2025-6539Voltax Video Player WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-07-24
CVE-2025-6441tobias_conrad WebinarIgnition missing authorization9.8CNA v3.11.0%2025-07-24Fix
CVE-2025-6387WP Get The Table WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2025-07-24Fix
CVE-2025-6385WP Applink WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-07-24
CVE-2025-6382Taeggie Feed WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2025-07-24Fix
CVE-2025-6380ONLYOFFICE Docs - missing authorization to unauthenticated privilege escalation9.8CNA v3.10.7%2025-07-24Fix
CVE-2025-6262muse.ai video embedding WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2025-07-24Fix
CVE-2025-6260Network Thermostat X-Series WiFi Thermostats missing authentication for critical function9.3CNA v4.00.5%2025-07-24Fix
CVE-2025-5243Arbitrary file upload in SMG Software's Information Portal10.0CNA v3.11.5%2025-07-24Fix
CVE-2025-5084Post Grid Master WordPress plugin reflected cross-site scripting via argsArray['read_more_text']6.1CNA v3.10.5%2025-07-24Fix
CVE-2025-5039Autodesk AutoCAD privilege Ecalation due to untrusted search path7.8CNA v3.10.2%2025-07-24Fix
CVE-2025-4976Exposure of sensitive information due to incompatible policies in GitLab4.3CNA v3.10.4%2025-07-24Fix
CVE-2025-4968WPBakery Page Builder WordPress plugin stored cross-site scripting5.4v3.10.3%2025-07-24Fix
CVE-2025-4822SQLi in Bayraktar Solar Energies' ScadaWatt Otopilot9.8CNA v3.10.7%2025-07-24Fix
CVE-2025-4784SQLi in Moderec's Tourtella9.8CNA v3.10.5%2025-07-24Fix
CVE-2025-4608Structured Content WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2025-07-24Fix
CVE-2025-4395Medtronic MyCareLink Patient Monitor built-in user account vulnerability6.8CNA v3.10.3%2025-07-24Fix
CVE-2025-4394Medtronic MyCareLink Patient Monitor internal storage filesystem cleartext storage6.8CNA v3.10.2%2025-07-24Fix
CVE-2025-4393Medtronic MyCareLink Patient Monitor deserialization6.5CNA v3.10.2%2025-07-24Fix
CVE-2025-3669Supreme Addons for Beaver Builder WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2025-07-24
CVE-2025-3614ElementsKit Elementor Addons and Templates WordPress plugin stored cross-site scripting5.4v3.10.3%2025-07-24Fix
CVE-2025-1299Missing authorization in GitLab4.3CNA v3.10.3%2025-07-24Fix
CVE-2025-0765Incorrect authorization in GitLab4.3CNA v3.10.4%2025-07-24Fix
CVE-2025-54455Samsung Electronics MagicINFO 9 Server hard-coded credentials9.1CNA v3.10.6%2025-07-23
CVE-2025-54454Samsung Electronics MagicINFO 9 Server hard-coded credentials9.1CNA v3.10.5%2025-07-23Fix
CVE-2025-54453Samsung Electronics MagicINFO 9 Server path traversal8.8CNA v3.134.3%2025-07-23
CVE-2025-54452Samsung Electronics MagicINFO 9 Server improper authentication7.3CNA v3.10.4%2025-07-23Fix
CVE-2025-54451Samsung Electronics MagicINFO 9 Server code injection9.8CNA v3.10.6%2025-07-23Fix
CVE-2025-54450Samsung Electronics MagicINFO 9 Server path traversal7.2CNA v3.10.6%2025-07-23
CVE-2025-54449Samsung Electronics MagicINFO 9 Server unrestricted file upload9.8CNA v3.10.6%2025-07-23
CVE-2025-54448Samsung Electronics MagicINFO 9 Server unrestricted file upload9.8CNA v3.10.6%2025-07-23
CVE-2025-54447Samsung Electronics MagicINFO 9 Server unrestricted file upload8.1CNA v3.10.5%2025-07-23
CVE-2025-54446Samsung Electronics MagicINFO 9 Server path traversal9.8CNA v3.10.6%2025-07-23
CVE-2025-54445Samsung Electronics MagicINFO 9 Server XML external entity injection8.2CNA v3.117.7%2025-07-23Fix
CVE-2025-54444Samsung Electronics MagicINFO 9 Server unrestricted file upload9.8CNA v3.10.6%2025-07-23
CVE-2025-54443Samsung Electronics MagicINFO 9 Server path traversal9.8CNA v3.10.6%2025-07-23
CVE-2025-54442Samsung Electronics MagicINFO 9 Server unrestricted file upload9.8CNA v3.10.5%2025-07-23
CVE-2025-54441Samsung Electronics MagicINFO 9 Server unrestricted file upload8.8CNA v3.115.4%2025-07-23
CVE-2025-54440Samsung Electronics MagicINFO 9 Server unrestricted file upload9.8CNA v3.10.5%2025-07-23
CVE-2025-54439Samsung Electronics MagicINFO 9 Server unrestricted file upload8.8CNA v3.113.5%2025-07-23Fix
CVE-2025-54438Samsung Electronics MagicINFO 9 Server path traversal9.8CNA v3.10.6%2025-07-23Fix
CVE-2025-54377RooCodeInc Roo-Code Roo Code lacks Line Break Validation in its command execution tool7.8CNA v3.11.1%2025-07-23Fix
CVE-2025-54365Fastapi-guard patch contains bypassable RegEx7.8CNA v4.00.8%2025-07-23Fix
CVE-2025-54297Extension compojoom.com stored XSS vulnerability in CComment component for Joomla7.0CNA v4.00.2%2025-07-23
CVE-2025-54296Extension mooj.org stored XSS vulnerability in ProFiles component for Joomla7.0CNA v4.00.2%2025-07-23
CVE-2025-54295Extension dj-extensions.com reflected XSS vulnerability in DJ-Reviews component for Joomla5.1CNA v4.00.3%2025-07-23
CVE-2025-54294Extension Stackideas.com SQLi vulnerability in Komento component for Joomla9.3CNA v4.00.3%2025-07-23
CVE-2025-54139haxtheweb issues HAX CMS' application pages are vulnerable to clickjacking4.3CNA v3.10.3%2025-07-23Fix
CVE-2025-54120PCL-Community PCL2-CE PCL Community Edition exposes login credentials in logs9.3CNA v4.00.1%2025-07-23Fix
CVE-2025-54090Apache HTTP Server: RewriteCond expr always evaluates to true in6.3CISA ADP v3.10.8%2025-07-23Fix
CVE-2025-53942authentik has an insufficient check for account active status during OAuth/SAML authentication7.1CNA v4.00.5%2025-07-23Fix
CVE-2025-53882SUSE openSUSE Tumbleweed reliance on untrusted input in a security decision4.8CNA v4.00.1%2025-07-23Fix
CVE-2025-53537LibHTP's memory leak with lzma can lead to resource starvation7.5CNA v3.10.4%2025-07-23Fix
CVE-2025-50481Mezzanine CMS vulnerable to cross-site scripting4.8CISA ADP v3.10.6%2025-07-23Exploit code
CVE-2025-50477lbry-desktop v0.53.9 A open redirect5.4CISA ADP v3.10.3%2025-07-23
CVE-2025-50127Extension dj-extensions.com SQLi vulnerability in DJ-Flyer component for Joomla8.5CNA v4.00.3%2025-07-23
CVE-2025-47281Kyverno's Improper JMESPath Variable Evaluation leads to denial of service7.7CNA v3.10.5%2025-07-23Fix
CVE-2025-47187A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones through 6.4 SP4 (R6.4.0.4006), and the 6970 Conference Unit through 6.4 SP4 (R6.4.0.4006) or version V1 R0.1.0, could allow an unauthenticated attacker to perform a file upload attack due to missing authentication mec7.5CISA ADP v3.10.8%2025-07-23Emerging ThreatsFix
CVE-2025-46686Redis multi-bulk command handling memory leak3.5CNA v3.10.3%2025-07-23Fix
CVE-2025-46171vBulletin denial of service5.4CISA ADP v3.10.3%2025-07-23
CVE-2025-46099pluck-cms Pluck unrestricted file upload7.2NVD v3.10.5%2025-07-23
CVE-2025-44109Pinokio v3.6.23 A open redirect5.4CISA ADP v3.10.3%2025-07-23
CVE-2025-43881SYNCK GRAPHICA Real-time Bus Tracking System input issue exists improper input validation5.3CNA v4.00.3%2025-07-23
CVE-2025-43489HP Poly Clariti Manager insecure deserialization2.0CNA v4.00.3%2025-07-23Fix
CVE-2025-43488HP Poly Clariti Manager cross-site scripting2.0CNA v4.00.2%2025-07-23Fix
CVE-2025-43487HP Poly Clariti Manager Sudo configuration privilege escalation6.9CNA v4.00.2%2025-07-23Fix
CVE-2025-43486HP Poly Clariti Manager stored cross-site scripting5.7CNA v4.00.2%2025-07-23Fix
CVE-2025-43485HP Poly Clariti Manager log files information disclosure5.7CNA v4.00.2%2025-07-23Fix
CVE-2025-43484HP Poly Clariti Manager reflected cross-site scripting6.0CNA v4.00.2%2025-07-23Fix
CVE-2025-43483HP Poly Clariti Manager hard-coded cryptographic key5.9CNA v4.00.2%2025-07-23Fix
CVE-2025-42947Code injection vulnerability in SAP FICA ODN framework5.5CNA v3.10.3%2025-07-23Fix
CVE-2025-41687Weidmueller: Unauthenticated stack-based buffer overflow in u-link Management API9.8CNA v3.10.7%2025-07-23Fix
CVE-2025-41684Weidmueller: Root command injection via Unsanitized Input in tls_iotgen_setting endpoint8.8CNA v3.10.7%2025-07-23Fix
CVE-2025-41683Weidmueller: Root command injection via Unsanitized Input in event_mail_test endpoint8.8CNA v3.10.7%2025-07-23Fix
CVE-2025-40599SonicWall SMA 100 Series arbitrary file upload9.1CISA ADP v3.19.7%2025-07-23Fix
CVE-2025-40598SonicWall SMA 100 Series SMA100 series web interface reflected cross-site scripting6.1CISA ADP v3.146.2%2025-07-23Emerging ThreatsFix
CVE-2025-40597SonicWall SMA 100 Series SMA100 series web interface heap-based buffer overflow7.5CISA ADP v3.122.7%2025-07-23Emerging ThreatsFix
CVE-2025-40596SonicWall SMA 100 Series SMA100 series web interface stack-based buffer overflow7.3CISA ADP v3.145.0%2025-07-23Emerging ThreatsFix
CVE-2025-36117IBM Db2 Mirror for i session fixation6.3CNA v3.10.2%2025-07-23Fix
CVE-2025-36116IBM Db2 Mirror for i cross-site websocket hijacking6.3CNA v3.10.2%2025-07-23Fix
CVE-2025-33077IBM Engineering Systems Design Rhapsody code execution8.8CNA v3.10.4%2025-07-23Fix
CVE-2025-33076IBM Engineering Systems Design Rhapsody code execution8.8CNA v3.10.4%2025-07-23Fix
CVE-2025-33020IBM Engineering Systems Design Rhapsody information disclosure5.9CNA v3.10.1%2025-07-23Fix
CVE-2025-32019Harbor's repository description page allows for XSS4.1CNA v3.10.3%2025-07-23Fix
CVE-2025-31701Dahua IPC buffer overflow8.1CNA v3.10.8%2025-07-23
CVE-2025-31700Dahua IPC buffer overflow8.1CNA v3.10.9%2025-07-23Exploit code
CVE-2025-27930ManageEngine Applications Manager stored XSS6.4CNA v3.10.4%2025-07-23Fix
CVE-2025-8070ASUSTOR ABP and AES unquoted service path9.2CNA v4.00.2%2025-07-23Fix
CVE-2025-8069Local privilege escalation vulnerability in AWS Client VPN Windows Client7.3CNA v4.00.2%2025-07-23Fix
CVE-2025-8060Tenda AC23 httpd setMacFilterCfg sub_46C940 stack-based overflow8.7CNA v4.00.8%2025-07-23
CVE-2025-8058The GNU C Library glibc double free5.9CNA v4.00.2%2025-07-23Fix
CVE-2025-8021files-bucket-server vulnerable to directory traversal8.7CNA v4.00.8%2025-07-23
CVE-2025-8020private-ip vulnerable to server-side request forgery8.8CNA v4.00.3%2025-07-23
CVE-2025-7722Social Streams WordPress plugin authenticated (Subscriber+) privilege escalation8.8CNA v3.10.4%2025-07-23
CVE-2025-6261Fleetwire Fleet Management WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-07-23Fix
CVE-2025-6215Omnishop /users/register endpoint missing authorization5.3CNA v3.10.3%2025-07-23
CVE-2025-6214Omnishop WordPress plugin cross-site request forgery to arbitrary user deletion6.5CNA v3.10.2%2025-07-23
CVE-2025-6190Realty Portal Agent WordPress plugin missing authorization authenticated privilege escalation8.8CNA v3.10.5%2025-07-23
CVE-2025-6174WordPress Qwizcards plugin reflected XSS6.1CISA ADP v3.10.5%2025-07-23NucleiFix
CVE-2025-6054YANewsflash WordPress plugin cross-site request forgery to stored cross-site scripting6.1CNA v3.10.1%2025-07-23
CVE-2025-6018Pam-config: Lpe from unprivileged to allow_active in pam7.8CNA v3.11.1%2025-07-23Exploit codeKCVFix
CVE-2025-5818Featured Image Plus Quick and Bulk Edit with Unsplash WordPress plugin server-side request forgery5.5CNA v3.10.3%2025-07-23Fix
CVE-2025-5753Valuation Calculator WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-07-23Fix
CVE-2025-4700Improper neutralization of input during web page generation (cross-site scripting) in GitLab8.7CNA v3.10.2%2025-07-23Fix
CVE-2025-4439Improper neutralization of input during web page generation (cross-site scripting) in GitLab7.7CNA v3.10.3%2025-07-23Fix
CVE-2025-4411XSS in Dataprom Informatics' PACS-ACSS6.5CNA v3.10.3%2025-07-23Fix
CVE-2025-4296Open redirect in HotelRunner's B2B4.7CNA v3.10.2%2025-07-23Fix
CVE-2025-2634Out-of-bounds read vulnerability in NI LabVIEW when building font map7.3CNA v4.00.2%2025-07-23Fix
CVE-2025-2633Out-of-bounds read vulnerability in NI LabVIEW when loading fonts7.3CNA v4.00.2%2025-07-23Fix
CVE-2025-54141ViewVC's standalone server exposes arbitrary server filesystem content7.5CNA v3.10.9%2025-07-22Fix
CVE-2025-54140pyLoad has path traversal vulnerability in json/upload endpoint that allows arbitrary file write7.5CNA v3.10.7%2025-07-22Fix
CVE-2025-54138LibreNMS has authenticated local file inclusion in ajax_form.php that allows RCE7.5CNA v3.11.1%2025-07-22Fix
CVE-2025-54137haxtheweb issues NodeJS version of the HAX CMS application is distributed with Default Secrets7.3CNA v3.10.3%2025-07-22Fix
CVE-2025-54072yt-dlp OS command injection7.5CNA v3.10.6%2025-07-22Fix
CVE-2025-53703DuraComm DP-10iN-100-MU cleartext transmission of sensitive information8.7CNA v4.00.1%2025-07-22Fix
CVE-2025-53538Suricata's mishandling of data on HTTP2 stream 0 can lead to resource starvation7.5CNA v3.10.5%2025-07-22Fix
CVE-2025-53472ELECOM WRC-BE36QS-B OS command injection8.6CNA v4.01.1%2025-07-22
CVE-2025-52580Gift Pad "region PAY" App sensitive information in log files2.4CNA v4.00.2%2025-07-22
CVE-2025-51867Deepfiction AI insecure direct object reference6.5CISA ADP v3.10.3%2025-07-22
CVE-2025-51865Ai2 Playground insecure direct object reference8.8CISA ADP v3.10.4%2025-07-22Exploit code
CVE-2025-51864AIBOX LLM chat reflected cross-site scripting6.5CISA ADP v3.10.4%2025-07-22
CVE-2025-51863ChatGPT Unli Self cross-site scripting6.1CISA ADP v3.10.3%2025-07-22
CVE-2025-51862TelegAI insecure direct object reference6.1CISA ADP v3.10.2%2025-07-22
CVE-2025-51860TelegAI stored cross-site scripting6.1CISA ADP v3.10.3%2025-07-22
CVE-2025-51859Chaindesk thru stored cross-site scripting6.5CISA ADP v3.10.4%2025-07-22
CVE-2025-51858ChatPlayground.ai Self cross-site scripting6.1CISA ADP v3.10.3%2025-07-22Exploit code
CVE-2025-51482letta remote code execution8.8CISA ADP v3.11.9%2025-07-22Reported exploitedNucleiExploit code
CVE-2025-51481Dagster local file inclusion6.6CISA ADP v3.10.5%2025-07-22Fix
CVE-2025-51480onnx allows arbitrary file overwrite in download_model_with_test_data8.8CISA ADP v3.10.6%2025-07-22Fix
CVE-2025-51479onyx update_user_group authorization bypass5.4CISA ADP v3.10.3%2025-07-22
CVE-2025-51475SuperAGI arbitrary file write5.0CISA ADP v3.10.8%2025-07-22
CVE-2025-51472SuperAGI code injection6.5CISA ADP v3.10.4%2025-07-22
CVE-2025-51471Ollama vulnerable to Cross-Domain token exposure6.9CISA ADP v3.118.5%2025-07-22Exploit code
CVE-2025-51464Aim vulnerable to cross-site scripting8.8CISA ADP v3.10.6%2025-07-22
CVE-2025-51463Aimstack aim restore_run_backup path traversal7.0CISA ADP v3.10.5%2025-07-22
CVE-2025-51462infiniflow ragflow api.apps.dialog_app.set_dialog stored cross-site scripting6.1CISA ADP v3.10.3%2025-07-22
CVE-2025-51459DB-GPT command injection6.5CISA ADP v3.10.3%2025-07-22
CVE-2025-51458DB-GPT editor_sql_run and query_ex in eosphoros-ai SQL injection6.5CISA ADP v3.10.3%2025-07-22Exploit code
CVE-2025-48964iputils integer overflow6.5CNA v3.10.4%2025-07-22Fix
CVE-2025-48733DuraComm DP-10iN-100-MU missing authentication for critical function8.7CNA v4.00.4%2025-07-22Fix
CVE-2025-48498Bloomberg Comdb2 Distributed Transaction component null pointer dereference7.5CNA v3.10.6%2025-07-22
CVE-2025-46354Bloomberg Comdb2 denial of service7.5CNA v3.10.8%2025-07-22Emerging Threats
CVE-2025-46267ELECOM WRC-BE36QS-B hidden functionality6.9CNA v4.00.3%2025-07-22
CVE-2025-43022HP Poly Clariti Manager SQL injection7.3CNA v4.00.3%2025-07-22Fix
CVE-2025-43021HP Poly Clariti Manager default credentials5.9CNA v4.00.2%2025-07-22Fix
CVE-2025-43020HP Poly Clariti Manager command injection5.7CNA v4.00.3%2025-07-22Fix
CVE-2025-41425DuraComm DP-10iN-100-MU cross-site scripting7.2CNA v4.00.4%2025-07-22Fix
CVE-2025-38352Linux Kernel time-of-check time-of-use (TOCTOU) race condition7.8CNA v3.11.3%2025-07-22KEVExploit codeFix
CVE-2025-36520Bloomberg Comdb2 null pointer dereference7.5CNA v3.10.9%2025-07-22Emerging Threats
CVE-2025-36512Bloomberg Comdb2 A denial of service7.5CNA v3.10.5%2025-07-22
CVE-2025-35966Bloomberg Comdb2 CDB2SQLQUERY protocol buffer message handling null pointer dereference7.5CNA v3.10.6%2025-07-22
CVE-2025-34143ETQ Reliance CG authentication bypass via Trailing Space RCE9.3CNA v4.038.0%2025-07-22NucleiFix
CVE-2025-34142ETQ Reliance CG (legacy) XML external entity injection6.9CNA v4.00.9%2025-07-22Fix
CVE-2025-34141ETQ Reliance CG (legacy) reflected cross-site scripting5.1CNA v4.01.9%2025-07-22NucleiFix
CVE-2025-34140ETQ Reliance CG/NXG API authorization bypass via ;localized-text URI Suffix8.7CNA v4.00.6%2025-07-22Fix
CVE-2025-31513An issue was discovered in AlertEnterprise Guardian 4.1.14.2.2.1. One can elevate to administrator privileges via the IsAdminApprover parameter in a Request%20Building%20Access requestSubmit API call. The vendor has stated that the system is protected by updating to a version equal to or greater tha6.5CISA ADP v3.10.3%2025-07-22
CVE-2025-31512An issue was discovered in AlertEnterprise Guardian 4.1.14.2.2.1. One can bypass manager approval via isAddedByApprover in a Request%20Building%20Access requestSubmit API call. The vendor has stated that the system is protected by updating to a version equal to or greater than one of the following b7.3CISA ADP v3.10.4%2025-07-22
CVE-2025-31511An issue was discovered in AlertEnterprise Guardian 4.1.14.2.2.1. One can bypass manager approval by changing the user ID in a Request%20Building%20Access requestSubmit API call. The vendor has stated that the system is protected by updating to a version equal to or greater than one of the following7.3CISA ADP v3.10.4%2025-07-22
CVE-2025-8044Mozilla memory safety bugs fixed in Firefox 141 and Thunderbird 1419.8CISA ADP v3.10.4%2025-07-22Fix
CVE-2025-8043Mozilla Firefox incorrect URL truncation9.8CISA ADP v3.10.4%2025-07-22Fix
CVE-2025-8040Mozilla memory safety bugs fixed in Firefox ESR, Thunderbird ESR, Firefox 141 and Thunderbird 1418.8CISA ADP v3.10.3%2025-07-22Fix
CVE-2025-8039Mozilla Firefox search terms persisted in URL bar8.1CISA ADP v3.10.3%2025-07-22Fix
CVE-2025-8038Mozilla Firefox CSP frame-src was not correctly enforced for paths9.8CISA ADP v3.10.2%2025-07-22Fix
CVE-2025-8037Mozilla Firefox nameless cookies shadow secure cookies9.1CISA ADP v3.10.2%2025-07-22Fix
CVE-2025-8036Mozilla Firefox DNS rebinding circumvents CORS8.1CISA ADP v3.10.4%2025-07-22Fix
CVE-2025-8035Mozilla Firefox memory safety bugs8.8CISA ADP v3.10.4%2025-07-22Fix
CVE-2025-8034Mozilla Firefox memory safety bugs8.8CISA ADP v3.10.4%2025-07-22Fix
CVE-2025-8033Mozilla Firefox incorrect JavaScript state machine for generators6.5CISA ADP v3.10.4%2025-07-22Fix
CVE-2025-8032Mozilla Firefox XSLT documents could bypass CSP8.1CISA ADP v3.10.3%2025-07-22Fix
CVE-2025-8031Mozilla Firefox incorrect URL stripping in CSP reports9.8CISA ADP v3.10.5%2025-07-22Fix
CVE-2025-8030Mozilla Firefox potential user-assisted code execution in Copy as cURL command8.1CISA ADP v3.10.3%2025-07-22Fix
CVE-2025-8029Mozilla Firefox javascript: URLs executed on object and embed tags8.1CISA ADP v3.10.3%2025-07-22Fix
CVE-2025-8028Mozilla Firefox large branch table could lead to truncated instruction9.8CISA ADP v3.10.5%2025-07-22Fix
CVE-2025-8027Mozilla Firefox JavaScript engine only wrote partial return value to stack6.5CISA ADP v3.10.4%2025-07-22Fix
CVE-2025-8019Shenzhen Libituo Technology LBT-T300-T310 appy.cgi sub_40B6F0 buffer overflow8.7CNA v4.00.8%2025-07-22
CVE-2025-8018code-projects Food Ordering Review System reservation_page.php SQL injection8.8v3.10.4%2025-07-22Exploit code
CVE-2025-8017Tenda AC7 httpd setMacFilterCfg formSetMacFilterCfg stack-based overflow8.7CNA v4.013.2%2025-07-22Emerging Threats
CVE-2025-8015Shortcodes Ultimate WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-07-22Fix
CVE-2025-8011Google Chrome V8 type confusion8.8CISA ADP v3.10.3%2025-07-22Fix
CVE-2025-8010Google Chrome V8 type confusion8.8CISA ADP v3.10.3%2025-07-22Fix
CVE-2025-7953Sanluan PublicCMS viewer.html redirect6.1v3.10.3%2025-07-22
CVE-2025-7952TOTOLINK T6 MQTT Packet wireless.so ckeckKeepAlive command injection8.8v3.124.5%2025-07-22Emerging Threats
CVE-2025-7951code-projects Public Chat Room send_message.php cross-site scripting5.4v3.10.3%2025-07-22
CVE-2025-7950code-projects Public Chat Room login.php SQL injection9.8v3.10.5%2025-07-22
CVE-2025-7949Sanluan PublicCMS preview.html redirect6.1v3.10.3%2025-07-22
CVE-2025-7948jshERP updatePwd password recovery6.5v3.10.4%2025-07-22
CVE-2025-7947jshERP Account delete improper authorization8.1v3.10.4%2025-07-22
CVE-2025-7946PHPGurukul Apartment Visitors Management System search-visitor.php cross-site scripting6.1v3.10.5%2025-07-22
CVE-2025-7945D-Link DIR-513 formSetWanDhcpplus buffer overflow8.7CNA v4.07.1%2025-07-22Emerging Threats
CVE-2025-7900Insecure direct object reference in extension femanager (femanager)5.3CNA v4.00.2%2025-07-22Fix
CVE-2025-7899Insecure direct object reference in extension powermail (powermail)6.0CNA v4.00.3%2025-07-22Fix
CVE-2025-7766Lantronix Provisioning Manager improper restriction of XML external entity reference8.6CNA v4.01.8%2025-07-22Exploit codeFix
CVE-2025-7724Unauthenticated command injection on VIGI NVR1104H-4P V1 and VIGI NVR2016H-16MP V28.7CNA v4.00.9%2025-07-22Fix
CVE-2025-7723Authenticated command injection on VIGI NVR1104H-4P V1 and VIGI NVR2016H-16MP V28.5CNA v4.00.8%2025-07-22Fix
CVE-2025-7705ABB Switch Actuator 4 DU-83330 authentication bypass due to compatibility mode enabled by default8.6CNA v4.00.2%2025-07-22
CVE-2025-7692Orion Login with SMS WordPress plugin authentication bypass via Weak OTP8.1CNA v3.10.5%2025-07-22
CVE-2025-7687Latest Post Accordian Slider WordPress plugin cross-site request forgery6.1CNA v3.10.1%2025-07-22
CVE-2025-7685Like and Share My Site WordPress plugin cross-site request forgery to stored cross-site scripting6.1CNA v3.10.1%2025-07-22
CVE-2025-7645Extensions For CF7 WordPress plugin unauthenticated arbitrary file deletion Triggered8.1CNA v3.10.8%2025-07-22Fix
CVE-2025-7644Pixel Gallery Addons for Elementor WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-07-22Fix
CVE-2025-7495WP-Members WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-07-22Fix
CVE-2025-7427Uncontrolled search path element in Arm Development Studio5.9v3.10.2%2025-07-22Fix
CVE-2025-7371Okta On-Premises Provisioning Agent sensitive information in log files6.8CNA v3.10.3%2025-07-22Fix
CVE-2025-6831User Registration WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-07-22Fix
CVE-2025-6741Devolutions Server secure message component improper access control7.1CNA v4.00.4%2025-07-22Fix
CVE-2025-6585WP JobHunt WordPress plugin insecure direct object reference to arbitrary account deletion8.1CNA v3.10.4%2025-07-22
CVE-2025-6523Devolutions Server emergency authentication component weak credentials9.5CNA v4.00.4%2025-07-22Fix
CVE-2025-6213Nginx Cache Purge Preload WordPress plugin authenticated (Administrator+) remote code execution7.2CNA v3.10.7%2025-07-22Fix
CVE-2025-6187bSecure - missing authorization to unauthenticated privilege escalation via order_info REST endpoint9.8CNA v3.10.7%2025-07-22
CVE-2025-6082Birth Chart Compatibility WordPress plugin unauthenticated full path exposure5.3CNA v3.11.6%2025-07-22Exploit code
CVE-2025-5240CRM and Lead Management by vcita WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-07-22Fix
CVE-2025-5042Autodesk Revit RFA File Parsing out-of-bounds read7.8CNA v3.10.2%2025-07-22Fix