CVE-2025 records published in July 2025
Page two of four: records 1,001 to 2,000 of the 3,582 published in July 2025, newest first. The first page carries the figures for July 2025.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2025-4878 | Red Hat Enterprise Linux 9 libssh: Use of uninitialized variable in privatekey_from_file | 3.6CNA v3.1 | 0.2% | 2025-07-22 | Fix |
| CVE-2025-4295 | Host header injection in HotelRunner's B2B | 4.6CNA v3.1 | 0.1% | 2025-07-22 | Fix |
| CVE-2025-4294 | XSS in HotelRunner's B2B | 4.8CNA v3.1 | 0.2% | 2025-07-22 | Fix |
| CVE-2025-4285 | SQLi in Rolantis Information Technologies' Agentis | 10.0CNA v3.1 | 0.3% | 2025-07-22 | Fix |
| CVE-2025-4284 | Reflected XSS in Rolantis Information Technologies' Agentis | 6.1CNA v3.1 | 0.2% | 2025-07-22 | Fix |
| CVE-2025-54352 | WordPress incorrect resource transfer | 3.7CNA v3.1 | 0.3% | 2025-07-21 | Exploit code |
| CVE-2025-54134 | haxtheweb issues HAX CMS NodeJs's improper error handling leads to denial of service | 7.1CNA v4.0 | 0.4% | 2025-07-21 | Fix |
| CVE-2025-54129 | haxtheweb issues response discrepancy | 4.3CNA v3.1 | 0.3% | 2025-07-21 | Fix |
| CVE-2025-54128 | haxtheweb issues HAX CMS NodeJs's Disabled Content Security Policy enables cross-site scripting | 7.2CNA v4.0 | 0.2% | 2025-07-21 | Fix |
| CVE-2025-54127 | haxtheweb issues HAXcms's insecure default Configuration leads to unauthenticated access | 9.3CNA v4.0 | 0.4% | 2025-07-21 | Fix |
| CVE-2025-54122 | Manager-io/Manager allows unauthenticated full read server-side request forgery in proxy endpoint | 10.0CNA v3.1 | 0.9% | 2025-07-21 | Fix |
| CVE-2025-54121 | Starlette has possible denial of service vector when parsing large files in multipart forms | 5.3CNA v3.1 | 0.6% | 2025-07-21 | Fix |
| CVE-2025-54082 | nova-tiptap has an unauthenticated arbitrary file upload | 8.1CNA v4.0 | 0.8% | 2025-07-21 | Fix |
| CVE-2025-54071 | RomM's authenticated arbitrary file write vulnerability can lead to remote code execution | 9.4CNA v4.0 | 0.7% | 2025-07-21 | Fix |
| CVE-2025-53832 | @translated/lara-mcp vulnerable to command injection in import_tmx tool | 7.5CNA v3.1 | 10.9% | 2025-07-21 | Fix |
| CVE-2025-53528 | Cadwyn is vulnerable to an XSS attack through its docs page | 7.6CNA v3.1 | 0.2% | 2025-07-21 | Fix |
| CVE-2025-52575 | EspoCRM vulnerable to LDAP injection through improper neutralization of Special Elements | 6.5CNA v3.1 | 0.7% | 2025-07-21 | Fix |
| CVE-2025-52374 | hMailServer Encryption.cs hard-coded cryptographic key | 4.6CISA ADP v3.1 | 0.2% | 2025-07-21 | |
| CVE-2025-52373 | hMailServer BlowFish.cpp hard-coded cryptographic key | 4.6CISA ADP v3.1 | 0.3% | 2025-07-21 | |
| CVE-2025-52372 | hMailServer information disclosure | 5.1CISA ADP v3.1 | 0.2% | 2025-07-21 | |
| CVE-2025-52362 | PHProxy proxurl parameter server-side request forgery | 9.1CISA ADP v3.1 | 0.5% | 2025-07-21 | |
| CVE-2025-51869 | Liner thru insecure direct object reference | 7.5CISA ADP v3.1 | 0.4% | 2025-07-21 | Exploit code |
| CVE-2025-51868 | Dippy insecure direct object reference | 7.5CISA ADP v3.1 | 0.4% | 2025-07-21 | |
| CVE-2025-51403 | livehelperchat stored cross-site scripting | 6.5CISA ADP v3.1 | 1.5% | 2025-07-21 | Exploit code |
| CVE-2025-51401 | livehelperchat stored cross-site scripting | 5.4CISA ADP v3.1 | 0.9% | 2025-07-21 | Exploit code |
| CVE-2025-51400 | livehelperchat stored cross-site scripting | 5.4CISA ADP v3.1 | 0.9% | 2025-07-21 | Exploit code |
| CVE-2025-51398 | livehelperchat stored cross-site scripting | 5.4CISA ADP v3.1 | 0.9% | 2025-07-21 | Exploit code |
| CVE-2025-51397 | livehelperchat stored cross-site scripting | 5.4CISA ADP v3.1 | 0.9% | 2025-07-21 | Exploit code |
| CVE-2025-51396 | livehelperchat Live Helper Chat v4.60 stored cross-site scripting | 5.4CISA ADP v3.1 | 1.0% | 2025-07-21 | Exploit code |
| CVE-2025-50151 | Apache Jena: Configuration files uploaded by administrative users are not check properly | 8.8CISA ADP v3.1 | 1.0% | 2025-07-21 | Fix |
| CVE-2025-49656 | Apache Jena Fuseki admin UI path traversal | 7.5CISA ADP v3.1 | 1.5% | 2025-07-21 | Fix |
| CVE-2025-46123 | Ruckus Wireless Ruckus Zonedirector format string | 7.2CISA ADP v3.1 | 1.1% | 2025-07-21 | |
| CVE-2025-46122 | Ruckus Wireless RUCKUS Unleashed command injection | 9.1CISA ADP v3.1 | 1.1% | 2025-07-21 | |
| CVE-2025-46121 | Ruckus Wireless RUCKUS Unleashed format string | 9.8CISA ADP v3.1 | 1.3% | 2025-07-21 | |
| CVE-2025-46120 | Ruckus Wireless Ruckus Zonedirector path traversal | 9.8CISA ADP v3.1 | 1.0% | 2025-07-21 | |
| CVE-2025-46119 | Ruckus Unleashed and ZoneDirector admin/_cmdstat.jsp management endpoint information disclosure | 6.3CISA ADP v3.1 | 0.4% | 2025-07-21 | |
| CVE-2025-46118 | Ruckus Wireless Ruckus Zonedirector hard-coded credentials | 5.3CISA ADP v3.1 | 0.5% | 2025-07-21 | |
| CVE-2025-46117 | Ruckus Wireless Ruckus Zonedirector OS command injection | 9.1CISA ADP v3.1 | 0.8% | 2025-07-21 | |
| CVE-2025-46116 | Ruckus Wireless Ruckus Zonedirector execution with unnecessary privileges | 8.8CISA ADP v3.1 | 0.5% | 2025-07-21 | |
| CVE-2025-44658 | NETGEAR RAX30 unrestricted file upload | 9.8CISA ADP v3.1 | 1.0% | 2025-07-21 | Fix |
| CVE-2025-44657 | Linksys EA6350 unauthorized access | 3.9CISA ADP v3.1 | 0.3% | 2025-07-21 | |
| CVE-2025-44655 | TOTOLINK A7100RU incorrect privilege assignment | 9.8CISA ADP v3.1 | 0.3% | 2025-07-21 | |
| CVE-2025-44654 | Linksys E2500 unauthorized access | 9.8CISA ADP v3.1 | 1.0% | 2025-07-21 | |
| CVE-2025-44653 | H3C GR-2200 denial of service | 7.5CISA ADP v3.1 | 0.4% | 2025-07-21 | |
| CVE-2025-44652 | NETGEAR RAX30 resource exhaustion | 7.5CISA ADP v3.1 | 0.6% | 2025-07-21 | Fix |
| CVE-2025-44651 | TRENDnet TPL-430AP denial of service | 7.5CISA ADP v3.1 | 0.4% | 2025-07-21 | |
| CVE-2025-44650 | NETGEAR EAX80 denial of service | 7.5CISA ADP v3.1 | 0.5% | 2025-07-21 | Fix |
| CVE-2025-44649 | TRENDnet TEW-WLC100P cleartext storage of sensitive information | 7.5CISA ADP v3.1 | 0.2% | 2025-07-21 | |
| CVE-2025-44647 | TRENDnet TEW-WLC100P insecure default initialization | 7.3CISA ADP v3.1 | 0.3% | 2025-07-21 | |
| CVE-2025-43977 | Sktelecom Com.skt.prod.dialer missing authorization | 5.5v3.1 | 0.1% | 2025-07-21 | |
| CVE-2025-43976 | Textnow 2ndline missing authorization | 5.5v3.1 | 0.2% | 2025-07-21 | |
| CVE-2025-43720 | H-mdm Headwind Mdm missing authorization | 6.5CISA ADP v3.1 | 0.4% | 2025-07-21 | |
| CVE-2025-41681 | MB connect line mbNET.mini persistent cross-site scripting | 4.8CNA v3.1 | 0.3% | 2025-07-21 | Fix |
| CVE-2025-41679 | MB connect line mbNET.mini Conftool service out-of-bounds write | 7.5v3.1 | 0.7% | 2025-07-21 | Fix |
| CVE-2025-41678 | MB connect line mbNET.mini SQL injection | 7.2v3.1 | 0.6% | 2025-07-21 | Fix |
| CVE-2025-41677 | MB connect line mbNET.mini resource exhaustion via POST requests to send-mail action | 4.9CNA v3.1 | 0.6% | 2025-07-21 | Fix |
| CVE-2025-41676 | MB connect line mbNET.mini resource exhaustion via POST requests to send-sms action | 4.9CNA v3.1 | 0.6% | 2025-07-21 | Fix |
| CVE-2025-41675 | MB connect line mbNET.mini remote command injection | 7.2CNA v3.1 | 0.6% | 2025-07-21 | Fix |
| CVE-2025-41674 | MB connect line mbNET.mini diagnostic action OS command injection | 7.2CNA v3.1 | 0.6% | 2025-07-21 | Fix |
| CVE-2025-41673 | MB connect line mbNET.mini send_sms action OS command injection | 7.2CNA v3.1 | 0.6% | 2025-07-21 | Fix |
| CVE-2025-41459 | Two App Studio Journey local authentication component authentication bypass | 7.8CNA v3.1 | 0.2% | 2025-07-21 | |
| CVE-2025-41458 | Insecure data storage vulnerability in Two App Studio Journey for iOS | 5.5CNA v3.1 | 0.1% | 2025-07-21 | |
| CVE-2025-41100 | ParkingDoor improper authentication | 5.9CNA v4.0 | 0.2% | 2025-07-21 | |
| CVE-2025-36846 | Eveo Urve Web Manager OS command injection | 9.8CISA ADP v3.1 | 5.0% | 2025-07-21 | |
| CVE-2025-36845 | Eveo Urve Web Manager server-side request forgery | 8.6CISA ADP v3.1 | 1.6% | 2025-07-21 | Nuclei |
| CVE-2025-36603 | Dell AppSync XML external entity injection | 4.2CNA v3.1 | 0.1% | 2025-07-21 | Fix |
| CVE-2025-36107 | IBM Cognos Analytics Mobile (iOS) information disclosure | 5.9CNA v3.1 | 0.2% | 2025-07-21 | Fix |
| CVE-2025-36106 | IBM Cognos Analytics Mobile (iOS) information disclosure | 6.5CNA v3.1 | 0.2% | 2025-07-21 | Fix |
| CVE-2025-36062 | IBM Cognos Analytics Mobile (iOS) information disclosure | 5.9CNA v3.1 | 0.2% | 2025-07-21 | Fix |
| CVE-2025-36057 | IBM Cognos Analytics Mobile (iOS) authentication bypass | 5.2CNA v3.1 | 0.2% | 2025-07-21 | Fix |
| CVE-2025-32744 | Dell AppSync unrestricted file upload | 6.6CNA v3.1 | 0.4% | 2025-07-21 | Fix |
| CVE-2025-30477 | Dell PowerScale OneFS weak cryptographic algorithm | 4.4CNA v3.1 | 0.2% | 2025-07-21 | Fix |
| CVE-2025-30192 | A Recursor configured to send out ECS enabled queries can be sensitive to spoofing attempts | 7.5CNA v3.1 | 0.2% | 2025-07-21 | Fix |
| CVE-2025-24938 | Nokia WaveSuite NOC insufficient Validation of Input while user creation | 8.4CISA ADP v3.1 | 0.3% | 2025-07-21 | Fix |
| CVE-2025-24937 | Nokia WaveSuite NOC access to local file system and its content | 9.0CISA ADP v3.1 | 0.2% | 2025-07-21 | Fix |
| CVE-2025-24936 | Nokia WaveSuite NOC Insufficient Validation of Input in the URL | 9.0CISA ADP v3.1 | 0.4% | 2025-07-21 | Fix |
| CVE-2025-7962 | Jakarta Mail vulnerable to SMTP injection | 6.0CNA v4.0 | 0.8% | 2025-07-21 | Fix |
| CVE-2025-7944 | PHPGurukul Taxi Stand Management System search.php cross-site scripting | 6.1v3.1 | 0.4% | 2025-07-21 | |
| CVE-2025-7943 | PHPGurukul Taxi Stand Management System search-autoortaxi.php cross-site scripting | 6.1v3.1 | 0.3% | 2025-07-21 | |
| CVE-2025-7942 | PHPGurukul Taxi Stand Management System admin-profile.php cross-site scripting | 5.4v3.1 | 0.2% | 2025-07-21 | |
| CVE-2025-7941 | PHPGurukul Time Table Generator System profile.php cross-site scripting | 5.4v3.1 | 0.3% | 2025-07-21 | |
| CVE-2025-7940 | Genshin Albedo Cat House App com.house.auscat component vulnerability | 4.8CNA v4.0 | 0.1% | 2025-07-21 | |
| CVE-2025-7939 | jerryshensjf JPACookieShop 蛋糕商城JPA版 GoodsController.java addGoods unrestricted upload | 8.8v3.1 | 0.4% | 2025-07-21 | |
| CVE-2025-7938 | jerryshensjf JPACookieShop 蛋糕商城JPA版 GoodsController.java updateGoods authorization | 5.3CNA v4.0 | 0.4% | 2025-07-21 | |
| CVE-2025-7936 | fuyang_lipengjun platform ScheduleJobLogController.java queryPage SQL injection | 8.8v3.1 | 0.4% | 2025-07-21 | |
| CVE-2025-7935 | fuyang_lipengjun platform SysLogController.java SysLogController SQL injection | 8.8v3.1 | 0.4% | 2025-07-21 | |
| CVE-2025-7934 | fuyang_lipengjun platform ScheduleJobController.java queryPage SQL injection | 8.8v3.1 | 0.4% | 2025-07-21 | |
| CVE-2025-7933 | Campcodes Sales and Inventory System setting settings_update.php SQL injection | 9.8v3.1 | 0.6% | 2025-07-21 | |
| CVE-2025-7932 | D-Link DIR‑817L ssdpcgi lxmldbc_system command injection | 8.8NVD v3.1 | 5.0% | 2025-07-21 | |
| CVE-2025-7931 | code-projects Church Donation System admin_pic.php unrestricted upload | 6.9CNA v4.0 | 0.5% | 2025-07-21 | |
| CVE-2025-7930 | code-projects Church Donation System add_members.php SQL injection | 9.8v3.1 | 0.5% | 2025-07-21 | |
| CVE-2025-7929 | code-projects Church Donation System edit_Members.php SQL injection | 9.8v3.1 | 0.5% | 2025-07-21 | |
| CVE-2025-7928 | code-projects Church Donation System edit_user.php SQL injection | 9.8v3.1 | 0.5% | 2025-07-21 | |
| CVE-2025-7927 | PHPGurukul Online Banquet Booking System view-user-queries.php SQL injection | 8.8v3.1 | 0.5% | 2025-07-21 | |
| CVE-2025-7926 | PHPGurukul Online Banquet Booking System booking-search.php cross-site scripting | 5.4v3.1 | 0.3% | 2025-07-21 | |
| CVE-2025-7925 | PHPGurukul Online Banquet Booking System login.php cross-site scripting | 6.1v3.1 | 0.5% | 2025-07-21 | |
| CVE-2025-7924 | PHPGurukul Online Banquet Booking System admin-profile.php cross-site scripting | 5.4v3.1 | 0.3% | 2025-07-21 | |
| CVE-2025-7921 | ASKEY｜modem stack-based buffer overflow | 9.3CNA v4.0 | 0.8% | 2025-07-21 | Fix |
| CVE-2025-7920 | Simopro Technology｜WinMatrix3 Web package reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2025-07-21 | Fix |
| CVE-2025-7919 | Simopro Technology｜WinMatrix3 Web package SQL injection | 7.1CNA v4.0 | 0.4% | 2025-07-21 | Fix |
| CVE-2025-7918 | Simopro Technology｜WinMatrix3 Web package SQL injection | 9.3CNA v4.0 | 0.4% | 2025-07-21 | Fix |
| CVE-2025-7917 | Simopro Technology｜WinMatrix3 Web package arbitrary file upload | 8.6CNA v4.0 | 0.5% | 2025-07-21 | Fix |
| CVE-2025-7916 | Simopro Technology｜WinMatrix3 insecure deserialization | 9.3CNA v4.0 | 0.8% | 2025-07-21 | Fix |
| CVE-2025-7915 | Chanjet CRM Login page mailinactive.php SQL injection | 9.8v3.1 | 0.5% | 2025-07-21 | |
| CVE-2025-7914 | Tenda AC6 httpd setparentcontrolinfo buffer overflow | 8.7CNA v4.0 | 0.9% | 2025-07-21 | |
| CVE-2025-7913 | TOTOLINK T6 MQTT service updateWifiInfo buffer overflow | 8.7CNA v4.0 | 0.8% | 2025-07-21 | |
| CVE-2025-7717 | File Download Moderately critical Access bypass SA-CONTRIB-2025-089 | 7.5CISA ADP v3.1 | 0.4% | 2025-07-21 | Fix |
| CVE-2025-7716 | Real-time SEO for Drupal Moderately critical cross-site scripting SA-CONTRIB-2025-091 | 6.1CISA ADP v3.1 | 0.2% | 2025-07-21 | Fix |
| CVE-2025-7715 | Block Attributes Moderately critical cross-site scripting SA-CONTRIB-2025-090 | 6.1CISA ADP v3.1 | 0.2% | 2025-07-21 | Fix |
| CVE-2025-7624 | Sophos Firewall legacy SQL injection | 9.8CNA v3.1 | 10.5% | 2025-07-21 | Fix |
| CVE-2025-7486 | Ebook Store WordPress plugin stored cross-site scripting | 4.4CNA v3.1 | 0.2% | 2025-07-21 | Fix |
| CVE-2025-7393 | Mail Login Critical Access bypass SA-CONTRIB-2025-088 | 9.8CISA ADP v3.1 | 0.5% | 2025-07-21 | Fix |
| CVE-2025-7392 | Cookies Addons Moderately critical cross-site scripting SA-CONTRIB-2025-087 | 6.1CISA ADP v3.1 | 0.2% | 2025-07-21 | Fix |
| CVE-2025-7382 | Sophos Firewall WebAdmin command injection | 8.8CNA v3.1 | 4.8% | 2025-07-21 | Fix |
| CVE-2025-7369 | Shortcodes Ultimate WordPress plugin cross-site request forgery to arbitrary shortcode execution | 6.1CNA v3.1 | 0.2% | 2025-07-21 | Fix |
| CVE-2025-7354 | WP Shortcodes Plugin Shortcodes Ultimate WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-07-21 | Fix |
| CVE-2025-7344 | Digiwin｜EAI privilege escalation | 8.7CNA v4.0 | 0.5% | 2025-07-21 | Fix |
| CVE-2025-7343 | Digiwin｜SFT SQL injection | 9.3CNA v4.0 | 0.6% | 2025-07-21 | Fix |
| CVE-2025-7325 | IrfanView CADImage Plugin DXF File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7324 | IrfanView CADImage Plugin DXF File Parsing out-of-bounds read remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7323 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7322 | IrfanView CADImage Plugin DWG File Parsing out-of-bounds read remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7321 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7320 | IrfanView CADImage Plugin DXF File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7319 | IrfanView CADImage Plugin DWG File Parsing out-of-bounds read remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7318 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7317 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7316 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7315 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7314 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7313 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7312 | IrfanView CADImage Plugin DWG File Parsing out-of-bounds read remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7311 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7310 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7309 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7308 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7307 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7306 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7305 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7304 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7303 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7302 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7301 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7300 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7299 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7298 | IrfanView CADImage Plugin DXF File Parsing out-of-bounds read remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7297 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7296 | IrfanView CADImage Plugin DXF File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7295 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7294 | IrfanView CADImage Plugin DXF File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7293 | IrfanView CADImage Plugin DXF File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7292 | IrfanView CADImage Plugin DXF File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7291 | IrfanView CADImage Plugin DXF File Parsing out-of-bounds read remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7290 | IrfanView CADImage Plugin DXF File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7289 | IrfanView CADImage Plugin DXF File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7288 | IrfanView CADImage Plugin DXF File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7287 | IrfanView CADImage Plugin DXF File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7286 | IrfanView CADImage Plugin DXF File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7285 | IrfanView CADImage Plugin DXF File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7284 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7283 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7282 | IrfanView CADImage Plugin DXF File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7281 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7280 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7279 | IrfanView CADImage Plugin CGM File Parsing out-of-bounds read remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7278 | IrfanView CADImage Plugin DXF File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7277 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7276 | IrfanView CADImage Plugin DXF File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7275 | IrfanView CADImage Plugin CGM File Parsing out-of-bounds read remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7274 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7273 | IrfanView CADImage Plugin DXF File Parsing out-of-bounds read remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7272 | IrfanView CADImage Plugin DXF File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7271 | IrfanView CADImage Plugin DXF File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7270 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7269 | IrfanView CADImage Plugin DXF File Parsing out-of-bounds read remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7268 | IrfanView CADImage Plugin DXF File Parsing out-of-bounds read remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7267 | IrfanView CADImage Plugin DXF File Parsing out-of-bounds read remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7266 | IrfanView CADImage Plugin DXF File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7265 | IrfanView CADImage Plugin CGM File Parsing out-of-bounds read remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7264 | IrfanView CADImage Plugin CGM File Parsing out-of-bounds read remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7263 | IrfanView CADImage Plugin CGM File Parsing out-of-bounds read remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7262 | IrfanView CADImage Plugin DWG File Parsing out-of-bounds read remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7261 | IrfanView CADImage Plugin DWG File Parsing out-of-bounds read remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7260 | IrfanView CADImage Plugin DXF File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7258 | IrfanView CADImage Plugin DWG File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7257 | IrfanView CADImage Plugin DXF File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7256 | IrfanView CADImage Plugin DXF File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7255 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7254 | IrfanView CADImage Plugin DXF File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7253 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7252 | IrfanView CADImage Plugin DWG File Parsing out-of-bounds read remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7251 | IrfanView CADImage Plugin DWG File Parsing out-of-bounds read remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7250 | IrfanView CADImage Plugin DWG File Parsing out-of-bounds read remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7249 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7248 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7247 | IrfanView CADImage Plugin DXF File Parsing out-of-bounds read remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7246 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7244 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7243 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7242 | IrfanView CADImage Plugin DWG File Parsing out-of-bounds read remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7241 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7240 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7239 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7238 | IrfanView CADImage Plugin DXF File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7237 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7236 | IrfanView CADImage Plugin DWG File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7235 | IrfanView CADImage Plugin DXF File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7234 | IrfanView CADImage Plugin CGM File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7233 | IrfanView CADImage Plugin DWG File Parsing out-of-bounds read information disclosure | 5.5v3.1 | 0.2% | 2025-07-21 | |
| CVE-2025-7231 | INVT VT-Designer PM3 File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7230 | INVT VT-Designer PM3 File Parsing type confusion remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7229 | INVT VT-Designer PM3 File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7228 | INVT VT-Designer PM3 File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7227 | INVT VT-Designer PM3 File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7226 | INVT HMITool VPM File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7225 | INVT HMITool VPM File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7224 | INVT HMITool VPM File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7223 | INVT HMITool VPM File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | |
| CVE-2025-7222 | Luxion KeyShot 3DM File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 0.2% | 2025-07-21 | Fix |
| CVE-2025-6704 | Sophos Firewall OS command injection | 9.8CNA v3.1 | 11.8% | 2025-07-21 | Fix |
| CVE-2025-6235 | ExtremeControl (NAC) onmouseover XSS | 5.3CNA v4.0 | 0.2% | 2025-07-21 | Fix |
| CVE-2025-5681 | IDOR in Turtek Software's Eyotek | 6.5CNA v3.1 | 0.3% | 2025-07-21 | Fix |
| CVE-2025-4685 | Gutentor WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-07-21 | Fix |
| CVE-2025-4570 | ASUS MyASUS hard-coded credentials | 6.9CNA v4.0 | 0.4% | 2025-07-21 | Fix |
| CVE-2025-4569 | ASUS MyASUS hard-coded credentials | 7.7CNA v4.0 | 0.4% | 2025-07-21 | Fix |
| CVE-2025-4130 | Hard-coded credentials in PAVO Inc.'s PAVO Pay | 7.5CNA v3.1 | 0.4% | 2025-07-21 | Fix |
| CVE-2025-4129 | IDOR in PAVO Inc.'s PAVO Pay | 7.5CNA v3.1 | 0.4% | 2025-07-21 | Fix |
| CVE-2025-4049 | Hard-coded SQLite password in FARA | 8.6CNA v4.0 | 0.2% | 2025-07-21 | |
| CVE-2025-4040 | IDOR in Turpak's Automatic Station Monitoring System | 7.1CNA v3.1 | 0.3% | 2025-07-21 | Fix |
| CVE-2025-2301 | IDOR in Akbim Software's Online Exam Registration | 4.4CNA v3.1 | 0.4% | 2025-07-21 | Fix |
| CVE-2025-1469 | IDOR in Turtek Software's Eyotek | 7.5CNA v3.1 | 0.4% | 2025-07-21 | Fix |
| CVE-2025-0664 | Trellix Endpoint Security (HX) Agent code injection | 6.7CNA v4.0 | 0.2% | 2025-07-21 | |
| CVE-2025-54319 | Westermo WeOS sensitive information in log files | 6.3CNA v3.1 | 0.3% | 2025-07-20 | |
| CVE-2025-54317 | Logpoint relative path traversal | 8.4CNA v3.1 | 0.6% | 2025-07-20 | Fix |
| CVE-2025-54316 | Logpoint cross-site scripting | 4.9CNA v3.1 | 0.2% | 2025-07-20 | Fix |
| CVE-2025-54314 | Ruby on Rails Thor OS command injection | 2.8CNA v3.1 | 0.2% | 2025-07-20 | Fix |
| CVE-2025-53771 | Microsoft SharePoint server spoofing | 6.5CNA v3.1 | 99.8% | 2025-07-20 | Reported exploitedNucleiMetasploitExploit codeKCVFix |
| CVE-2025-53770 | Microsoft SharePoint deserialization of untrusted data | 9.8CNA v3.1 | 100.0% | 2025-07-20 | KEVNucleiMetasploitExploit codeKCVFix |
| CVE-2025-49087 | mbedtls timing side channel | 3.7NVD v3.1 | 0.4% | 2025-07-20 | Fix |
| CVE-2025-48965 | mbedtls incorrect behavior order | 7.5v3.1 | 0.5% | 2025-07-20 | Fix |
| CVE-2025-47917 | mbedtls use-after-free | 9.8v3.1 | 2.1% | 2025-07-20 | Exploit codeFix |
| CVE-2025-46385 | Emby Windows server-side request forgery | 8.6CNA v3.1 | 0.3% | 2025-07-20 | |
| CVE-2025-46384 | Emby Windows unrestricted file upload | 8.8CNA v3.1 | 0.3% | 2025-07-20 | |
| CVE-2025-46383 | Emby Windows cross-site scripting | 6.1CNA v3.1 | 0.2% | 2025-07-20 | |
| CVE-2025-46382 | CyberArk IDP information disclosure | 5.3CNA v3.1 | 0.3% | 2025-07-20 | |
| CVE-2025-7912 | TOTOLINK T6 MQTT service recvSlaveUpgstatus buffer overflow | 8.7CNA v4.0 | 1.1% | 2025-07-20 | |
| CVE-2025-7911 | D-Link DI-8100 jhttpd upnp_ctrl.asp sprintf stack-based overflow | 9.8v3.1 | 1.5% | 2025-07-20 | |
| CVE-2025-7910 | D-Link DIR-513 Boa Webserver formSetWanNonLogin sprintf stack-based overflow | 8.7CNA v4.0 | 1.3% | 2025-07-20 | |
| CVE-2025-7909 | D-Link DIR-513 Boa Webserver formLanSetupRouterSettings sprintf stack-based overflow | 8.7CNA v4.0 | 1.3% | 2025-07-20 | |
| CVE-2025-7908 | D-Link DI-8100 jhttpd ddns.asp sprintf stack-based overflow | 8.7CNA v4.0 | 1.3% | 2025-07-20 | |
| CVE-2025-7907 | yangzongzhuan RuoYi Druid application-druid.yml default credentials | 5.3CNA v4.0 | 0.4% | 2025-07-20 | |
| CVE-2025-7906 | yangzongzhuan RuoYi CommonController.java uploadFile unrestricted upload | 5.4v3.1 | 0.3% | 2025-07-20 | |
| CVE-2025-7905 | itsourcecode Insurance Management System insertPayment.php SQL injection | 8.8v3.1 | 0.5% | 2025-07-20 | |
| CVE-2025-7904 | itsourcecode Insurance Management System insertNominee.php SQL injection | 8.8v3.1 | 0.4% | 2025-07-20 | |
| CVE-2025-7903 | yangzongzhuan RuoYi Image Source UI layer | 5.4v3.1 | 0.3% | 2025-07-20 | |
| CVE-2025-7902 | yangzongzhuan RuoYi SysNoticeController.java addSave cross-site scripting | 5.4v3.1 | 0.3% | 2025-07-20 | |
| CVE-2025-7901 | yangzongzhuan RuoYi Swagger UI index.html cross-site scripting | 6.1v3.1 | 0.8% | 2025-07-20 | Nuclei |
| CVE-2025-7898 | CodeCanyon iDentSoft Account setting page updateSetting unrestricted upload | 7.2v3.1 | 0.4% | 2025-07-20 | |
| CVE-2025-7897 | harry0703 MoneyPrinterTurbo API endpoint base.py verify_token missing authentication | 9.8v3.1 | 0.7% | 2025-07-20 | |
| CVE-2025-7896 | harry0703 MoneyPrinterTurbo video.py delete_video path traversal | 7.5v3.1 | 0.5% | 2025-07-20 | |
| CVE-2025-7895 | harry0703 MoneyPrinterTurbo file extension video.py upload_bgm_file unrestricted upload | 9.8v3.1 | 0.4% | 2025-07-20 | |
| CVE-2025-7894 | Onyx Chat interface a3_generate_simple_sql.py generate_simple_sql SQL injection | 9.8v3.1 | 0.5% | 2025-07-20 | |
| CVE-2025-7893 | Foresight News App pro.foresightnews.appa component vulnerability | 5.5v3.1 | 0.3% | 2025-07-20 | |
| CVE-2025-7892 | IDnow App de.Idnow AndroidManifest.xml improper export of android application components | 5.5v3.1 | 0.3% | 2025-07-20 | Exploit code |
| CVE-2025-7891 | InstantBits Web Video Cast App com.instantbits.cast.webvideo component vulnerability | 5.5v3.1 | 0.3% | 2025-07-20 | |
| CVE-2025-7890 | Dunamu StockPlus App com.dunamu.stockplus component vulnerability | 5.5v3.1 | 0.3% | 2025-07-20 | |
| CVE-2025-7889 | CallApp Caller ID App caller.id.phone.number.block component vulnerability | 5.5v3.1 | 0.2% | 2025-07-20 | |
| CVE-2025-7888 | TDuckCloud tduck-platform UserFormDataMapper.java UserFormDataMapper SQL injection | 9.8v3.1 | 0.5% | 2025-07-20 | |
| CVE-2025-7887 | Zavy86 WikiDocs template.inc.php cross-site scripting | 6.1v3.1 | 0.6% | 2025-07-20 | |
| CVE-2025-7886 | pmTicket Project-Management-Software class.database.php getUserLanguage SQL injection | 6.9CNA v4.0 | 0.4% | 2025-07-20 | |
| CVE-2025-7885 | Huashengdun WebSSH login page cross-site scripting | 6.1v3.1 | 0.5% | 2025-07-20 | Fix |
| CVE-2025-7884 | Eluktronics Control Center REG file data authenticity | 7.8v3.1 | 0.1% | 2025-07-20 | |
| CVE-2025-7883 | Eluktronics Control Center Powershell script command command injection | 8.5CNA v4.0 | 1.7% | 2025-07-20 | |
| CVE-2025-7882 | Mercusys MW301R Login excessive authentication | 2.3CNA v4.0 | 0.3% | 2025-07-20 | |
| CVE-2025-7881 | Mercusys MW301R Web interface password recovery | 5.1CNA v4.0 | 0.3% | 2025-07-20 | |
| CVE-2025-7880 | Metasoft 美特软件 MetaCRM sendsms.jsp unrestricted upload | 8.8v3.1 | 0.4% | 2025-07-20 | |
| CVE-2025-7879 | Metasoft 美特软件 MetaCRM mobileupload.jsp unrestricted upload | 9.8v3.1 | 0.5% | 2025-07-20 | |
| CVE-2025-7878 | Metasoft 美特软件 MetaCRM upload2.jsp unrestricted upload | 8.8v3.1 | 0.5% | 2025-07-20 | |
| CVE-2025-7877 | Metasoft 美特软件 MetaCRM sendfile.jsp unrestricted upload | 9.8v3.1 | 0.5% | 2025-07-20 | |
| CVE-2025-7876 | Metasoft 美特软件 MetaCRM download.jsp AnalyzeParam deserialization | 9.8v3.1 | 0.7% | 2025-07-20 | |
| CVE-2025-7875 | Metasoft 美特软件 MetaCRM debug.jsp improper authentication | 7.5v3.1 | 0.7% | 2025-07-20 | |
| CVE-2025-7874 | Metasoft 美特软件 MetaCRM env.jsp information disclosure | 9.1v3.1 | 0.8% | 2025-07-20 | |
| CVE-2025-7873 | Metasoft 美特软件 MetaCRM mcc_login.jsp SQL injection | 9.8v3.1 | 0.4% | 2025-07-20 | |
| CVE-2025-7872 | Portabilis i-Diario justificativas-de-falta cross-site scripting | 5.4NVD v3.1 | 0.3% | 2025-07-20 | |
| CVE-2025-7871 | Portabilis i-Diario conteudos cross-site scripting | 5.4NVD v3.1 | 0.3% | 2025-07-20 | |
| CVE-2025-7870 | Portabilis i-Diario justificativas-de-falta endpoint doc_uploader.rb cross-site scripting | 5.4NVD v3.1 | 0.3% | 2025-07-20 | |
| CVE-2025-7869 | Portabilis i-Educar Turma module educar_turma_tipo_det.php cross-site scripting | 5.4v3.1 | 0.2% | 2025-07-20 | |
| CVE-2025-7868 | Portabilis i-Educar Calendar educar_calendario_dia_motivo_cad.php cross-site scripting | 5.4v3.1 | 0.2% | 2025-07-20 | |
| CVE-2025-7867 | Portabilis i-Educar Agenda agenda.php cross-site scripting | 5.4v3.1 | 0.3% | 2025-07-20 | |
| CVE-2025-7866 | Portabilis i-Educar Disabilities module educar_deficiencia_lst.php cross-site scripting | 5.4v3.1 | 0.3% | 2025-07-20 | |
| CVE-2025-7865 | thinkgem JeeSite XSS Filter EncodeUtils.java xssFilter cross-site scripting | 5.4v3.1 | 0.3% | 2025-07-20 | |
| CVE-2025-7864 | thinkgem JeeSite FileUploadController.java upload unrestricted upload | 5.4v3.1 | 0.3% | 2025-07-20 | |
| CVE-2025-7863 | thinkgem JeeSite ServletUtils.java redirectUrl | 5.1CNA v4.0 | 0.4% | 2025-07-20 | |
| CVE-2025-7862 | TOTOLINK T6 Telnet service cstecgi.cgi setTelnetCfg missing authentication | 9.8v3.1 | 1.1% | 2025-07-20 | |
| CVE-2025-7861 | code-projects Church Donation System search.php SQL injection | 9.8v3.1 | 0.4% | 2025-07-20 | |
| CVE-2025-7860 | code-projects Church Donation System login_admin.php SQL injection | 9.8v3.1 | 0.4% | 2025-07-20 | |
| CVE-2025-7859 | code-projects Church Donation System update_password_admin.php SQL injection | 9.8v3.1 | 0.4% | 2025-07-20 | |
| CVE-2025-7858 | PHPGurukul Apartment Visitors Management System admin-profile.php cross-site scripting | 5.4v3.1 | 0.2% | 2025-07-20 | |
| CVE-2025-54313 | Prettier eslint-config-prettier embedded malicious code | 7.5CNA v3.1 | 5.1% | 2025-07-19 | KEVFix |
| CVE-2025-52924 | One Identity OneLogin SQL injection | 4.0CNA v3.1 | 0.2% | 2025-07-19 | Fix |
| CVE-2025-38351 | Linux kernel KVM Hyper-V TLB flush vulnerability | 5.5v3.1 | 0.2% | 2025-07-19 | Fix |
| CVE-2025-38350 | Linux kernel net/sched use-after-free | 7.8CNA v3.1 | 0.3% | 2025-07-19 | Fix |
| CVE-2025-29757 | Growatt https://oss.growatt.com the 'plant transfer' function of the incorrect authorization | 9.4CNA v4.0 | 0.4% | 2025-07-19 | Fix |
| CVE-2025-7857 | PHPGurukul Apartment Visitors Management System bwdates-passreports-details.php cross-site scripting | 5.4v3.1 | 0.2% | 2025-07-19 | |
| CVE-2025-7856 | PHPGurukul Apartment Visitors Management System pass-details.php cross-site scripting | 5.4v3.1 | 0.3% | 2025-07-19 | |
| CVE-2025-7855 | Tenda FH451 qossetting fromqossetting stack-based overflow | 8.7CNA v4.0 | 1.1% | 2025-07-19 | |
| CVE-2025-7854 | Tenda FH451 VirtualSer fromVirtualSer stack-based overflow | 8.7CNA v4.0 | 1.1% | 2025-07-19 | |
| CVE-2025-7853 | Tenda FH451 SetIpBind fromSetIpBind stack-based overflow | 8.7CNA v4.0 | 0.8% | 2025-07-19 | |
| CVE-2025-7840 | Campcodes Online Movie Theater Seat Reservation System reserve seat page cross-site scripting | 6.1v3.1 | 0.4% | 2025-07-19 | Exploit code |
| CVE-2025-7838 | Campcodes Online Movie Theater Seat Reservation System manage_seat.php SQL injection | 9.8v3.1 | 0.6% | 2025-07-19 | |
| CVE-2025-7837 | TOTOLINK T6 MQTT service recvSlaveStaInfo buffer overflow | 8.7CNA v4.0 | 1.1% | 2025-07-19 | |
| CVE-2025-7836 | D-Link DIR-816L Environment variable cgibin lxmldbc_system command injection | 8.8v3.1 | 5.2% | 2025-07-19 | |
| CVE-2025-7834 | PHPGurukul Complaint Management System cross-site request forgery | 5.3CNA v4.0 | 0.2% | 2025-07-19 | |
| CVE-2025-7833 | code-projects Church Donation System giving.php SQL injection | 9.8v3.1 | 0.4% | 2025-07-19 | |
| CVE-2025-7832 | code-projects Church Donation System offering.php SQL injection | 9.8v3.1 | 0.4% | 2025-07-19 | |
| CVE-2025-7831 | code-projects Church Donation System Tithes.php SQL injection | 9.8v3.1 | 0.4% | 2025-07-19 | |
| CVE-2025-7830 | code-projects Church Donation System reg.php SQL injection | 9.8v3.1 | 0.4% | 2025-07-19 | |
| CVE-2025-7829 | code-projects Church Donation System login.php SQL injection | 9.8v3.1 | 0.4% | 2025-07-19 | |
| CVE-2025-7824 | Jinher OA XmlHttp.aspx XML external entity reference | 9.8v3.1 | 0.5% | 2025-07-19 | |
| CVE-2025-7823 | Jinher OA ProjectScheduleDelete.aspx XML external entity reference | 9.8v3.1 | 0.5% | 2025-07-19 | |
| CVE-2025-7819 | PHPGurukul Apartment Visitors Management System create-pass.php cross-site scripting | 5.4v3.1 | 0.2% | 2025-07-19 | |
| CVE-2025-7818 | PHPGurukul Apartment Visitors Management System HTTP POST request category.php cross-site scripting | 5.4v3.1 | 0.3% | 2025-07-19 | |
| CVE-2025-7817 | PHPGurukul Apartment Visitors Management System bwdates-reports.php cross-site scripting | 5.4v3.1 | 0.3% | 2025-07-19 | |
| CVE-2025-7816 | PHPGurukul Apartment Visitors Management System visitor-detail.php cross-site scripting | 5.4v3.1 | 0.3% | 2025-07-19 | |
| CVE-2025-7815 | PHPGurukul Apartment Visitors Management System manage-newvisitors.php cross-site scripting | 5.4v3.1 | 0.2% | 2025-07-19 | |
| CVE-2025-7697 | Integration for Google Sheets and Contact Form 7 WordPress plugin PHP object injection | 9.8CNA v3.1 | 1.1% | 2025-07-19 | Fix |
| CVE-2025-7696 | Integration for Pipedrive and Contact Form 7 WordPress plugin PHP object injection | 9.8CNA v3.1 | 1.0% | 2025-07-19 | Fix |
| CVE-2025-7669 | Avishi WP PayPal Payment Button WordPress plugin cross-site request forgery | 6.1CNA v3.1 | 0.2% | 2025-07-19 | |
| CVE-2025-7661 | Partnerský systém Martinus WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-07-19 | |
| CVE-2025-7658 | Temporarily Hidden Content WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-07-19 | |
| CVE-2025-7655 | Live Stream Badger WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-07-19 | |
| CVE-2025-7653 | EPay.bg Payments WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-07-19 | |
| CVE-2025-6997 | ThemeREX Addons WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.2% | 2025-07-19 | Fix |
| CVE-2025-6721 | Vchasno Kasa WordPress plugin missing authorization to unauthenticated Invoice Generation | 5.3CNA v3.1 | 0.4% | 2025-07-19 | Fix |
| CVE-2025-6720 | Vchasno Kasa WordPress plugin unauthenticated Log file Clearing | 5.3CNA v3.1 | 0.4% | 2025-07-19 | Fix |
| CVE-2025-54310 | qBittorrent incorrect resource transfer | 5.3v3.1 | 0.4% | 2025-07-18 | Fix |
| CVE-2025-54309 | CrushFTP unprotected alternate channel | 9.8v3.1 | 94.9% | 2025-07-18 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2025-54079 | WeGIA vulnerable to SQL injection in endpoint Profile_Atendido.php parameter idatendido | 9.4CNA v4.0 | 0.4% | 2025-07-18 | Fix |
| CVE-2025-54078 | WeGIA personalizacao_imagem.php reflected cross-site scripting | 6.5CNA v3.1 | 0.2% | 2025-07-18 | Fix |
| CVE-2025-54077 | WeGIA reflected cross-site scripting vulnerability in endpoint personalizacao.php parameter err | 6.5CNA v3.1 | 0.2% | 2025-07-18 | Fix |
| CVE-2025-54076 | WeGIA pre_cadastro_atendido.php reflected cross-site scripting | 6.5CNA v3.1 | 0.2% | 2025-07-18 | Fix |
| CVE-2025-54075 | mdc vulnerable to XSS in markdown rendering bypassing HTML filter. (N°4) | 8.3CNA v3.1 | 0.3% | 2025-07-18 | Fix |
| CVE-2025-54073 | mcp-package-docs vulnerable to command injection in several tools | 7.5CNA v3.1 | 11.3% | 2025-07-18 | Fix |
| CVE-2025-54059 | melange creates SBOM files in APKs with world-writable permissions | 4.4CNA v3.1 | 0.1% | 2025-07-18 | Fix |
| CVE-2025-53945 | apko has incorrect permission (0666) in /etc/ld.so.cache and other files | 7.0CNA v3.1 | 0.1% | 2025-07-18 | Fix |
| CVE-2025-53901 | Wasmtime has host panic with `fd_renumber` WASIp1 function | 3.5CNA v3.1 | 0.3% | 2025-07-18 | Fix |
| CVE-2025-53888 | RIOT-OS link-layer address filter buffer overflow | 6.6CNA v4.0 | 0.7% | 2025-07-18 | |
| CVE-2025-53762 | Microsoft Purview elevation of privilege | 8.7CNA v3.1 | 0.8% | 2025-07-18 | Fix |
| CVE-2025-52169 | Agorum core open reflected cross-site scripting | 7.1CISA ADP v3.1 | 0.2% | 2025-07-18 | |
| CVE-2025-52168 | Agorum core open dynawebservice improper access control | 6.5CISA ADP v3.1 | 0.2% | 2025-07-18 | |
| CVE-2025-52166 | Agorum core open privilege escalation | 6.5CISA ADP v3.1 | 0.2% | 2025-07-18 | |
| CVE-2025-52164 | Agorum core open plaintext password storage | 8.2CISA ADP v3.1 | 0.2% | 2025-07-18 | |
| CVE-2025-52163 | Agorum core open TunnelServlet server-side request forgery | 6.5CISA ADP v3.1 | 0.2% | 2025-07-18 | |
| CVE-2025-52162 | Agorum core open RSSReader endpoint XML external entity injection | 6.5CISA ADP v3.1 | 0.2% | 2025-07-18 | |
| CVE-2025-50708 | Perplexity AI Perplexity shared chat link information disclosure | 7.5CISA ADP v3.1 | 0.4% | 2025-07-18 | |
| CVE-2025-50586 | DayCloud StudentManage cross-site request forgery | 6.5CISA ADP v3.1 | 0.2% | 2025-07-18 | |
| CVE-2025-50585 | DayCloud StudentManage SQL injection | 8.8CISA ADP v3.1 | 0.3% | 2025-07-18 | |
| CVE-2025-50584 | DayCloud StudentManage cross-site scripting | 4.8CISA ADP v3.1 | 0.2% | 2025-07-18 | |
| CVE-2025-50583 | DayCloud StudentManage cross-site scripting | 4.8CISA ADP v3.1 | 0.2% | 2025-07-18 | |
| CVE-2025-50582 | DayCloud StudentManage cross-site scripting | 4.8CISA ADP v3.1 | 0.2% | 2025-07-18 | |
| CVE-2025-50581 | MRCMS cross-site scripting | 4.8CISA ADP v3.1 | 0.2% | 2025-07-18 | |
| CVE-2025-50126 | Extension rsjoomla.com stored XSS vulnerability RSBlog! component for Joomla | 5.3CNA v4.0 | 0.3% | 2025-07-18 | |
| CVE-2025-50058 | Extension rsjoomla.com stored XSS vulnerability in RSDirectory! component for Joomla | 5.1CNA v4.0 | 0.4% | 2025-07-18 | |
| CVE-2025-50057 | Extension rsjoomla.com DOS vulnerability RSFiles! component for Joomla | 6.9CNA v4.0 | 0.4% | 2025-07-18 | |
| CVE-2025-50056 | Extension rsjoomla.com reflected XSS vulnerability RSMail! component for Joomla | 5.1CNA v4.0 | 0.4% | 2025-07-18 | |
| CVE-2025-49747 | Microsoft Azure Machine Learning elevation of privilege | 9.9CNA v3.1 | 0.7% | 2025-07-18 | Fix |
| CVE-2025-49746 | Microsoft Azure Machine Learning elevation of privilege | 9.9CNA v3.1 | 0.7% | 2025-07-18 | Fix |
| CVE-2025-49486 | Extension balbooa.com stored XSS in Balbooa Gallery component for Joomla | 8.6CNA v4.0 | 0.3% | 2025-07-18 | |
| CVE-2025-49485 | Extension balbooa.com SQL injection in Balbooa Forms component for Joomla | 8.6CNA v4.0 | 0.3% | 2025-07-18 | |
| CVE-2025-49484 | Extension joomsky.com SQL injection in JS jobs component for Joomla | 8.7CNA v4.0 | 3.8% | 2025-07-18 | Exploit code |
| CVE-2025-47995 | Microsoft Azure Machine Learning elevation of privilege | 6.5CNA v3.1 | 0.6% | 2025-07-18 | Fix |
| CVE-2025-47158 | Microsoft Azure DevOps server elevation of privilege | 9.0CNA v3.1 | 0.7% | 2025-07-18 | Fix |
| CVE-2025-46732 | OpenCTI's GraphQL IDOR enables authenticated users to modify or delete notifications of other users | 5.4CNA v3.1 | 0.2% | 2025-07-18 | Fix |
| CVE-2025-46002 | Simogeo File Manager Filemanager is vulnerable to relative path traversal through filemanager.php | 6.5CISA ADP v3.1 | 1.7% | 2025-07-18 | Exploit codeFix |
| CVE-2025-46001 | Simogeo/filemanager arbitrary file upload | 9.8CISA ADP v3.1 | 0.7% | 2025-07-18 | Exploit code |
| CVE-2025-46000 | Simogeo File Manager arbitrary file upload | 6.5CISA ADP v3.1 | 0.5% | 2025-07-18 | |
| CVE-2025-45157 | Splashin insecure permissions | 6.5CISA ADP v3.1 | 0.2% | 2025-07-18 | |
| CVE-2025-45156 | Splashin location update interval enforcement vulnerability | 5.3CISA ADP v3.1 | 0.3% | 2025-07-18 | |
| CVE-2025-38349 | Linux kernel eventpoll subsystem use-after-free | 7.8CNA v3.1 | 0.2% | 2025-07-18 | Fix |
| CVE-2025-33014 | IBM Sterling B2B Integrator and IBM Sterling File Gateway link injection | 5.4CNA v3.1 | 0.2% | 2025-07-18 | Fix |
| CVE-2025-27210 | Node.js Node path traversal | 7.5CNA v3.0 | 15.3% | 2025-07-18 | Exploit codeFix |
| CVE-2025-27209 | Node.js Node algorithmic complexity | 7.5CNA v3.0 | 1.2% | 2025-07-18 | Fix |
| CVE-2025-26855 | Extension joomcar.net SQL injection in Articles Calendar for Joomla | 9.8CISA ADP v3.1 | 0.4% | 2025-07-18 | |
| CVE-2025-26854 | Extension joomcar.net SQL injection in Articles Good Search for Joomla | 9.8CISA ADP v3.1 | 0.4% | 2025-07-18 | |
| CVE-2025-7814 | code-projects Food Ordering Review System signup_function.php SQL injection | 9.8v3.1 | 0.4% | 2025-07-18 | |
| CVE-2025-7807 | Tenda FH451 SafeUrlFilter fromSafeUrlFilter stack-based overflow | 8.7CNA v4.0 | 0.9% | 2025-07-18 | |
| CVE-2025-7806 | Tenda FH451 SafeClientFilter fromSafeClientFilter stack-based overflow | 8.7CNA v4.0 | 0.9% | 2025-07-18 | |
| CVE-2025-7805 | Tenda FH451 PPTPUserSetting fromPptpUserSetting stack-based overflow | 8.7CNA v4.0 | 0.9% | 2025-07-18 | |
| CVE-2025-7803 | descreekert wx-discuz wx.php validToken cross-site scripting | 5.1CNA v4.0 | 0.3% | 2025-07-18 | |
| CVE-2025-7802 | PHPGurukul Complaint Management System complaint-search.php cross-site scripting | 5.4v3.1 | 0.3% | 2025-07-18 | |
| CVE-2025-7801 | BossSoft CRM HNDCBas_customPrmSearchDtl.jsp SQL injection | 6.9CNA v4.0 | 0.3% | 2025-07-18 | |
| CVE-2025-7800 | cgpandey hotelmis HTTP GET request admin.php cross-site scripting | 5.1CNA v4.0 | 0.2% | 2025-07-18 | |
| CVE-2025-7798 | Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System SQL injection | 5.3CNA v4.0 | 0.2% | 2025-07-18 | |
| CVE-2025-7797 | GPAC dash_client.c gf_dash_download_init_segment null pointer dereference | 6.9CNA v4.0 | 1.0% | 2025-07-18 | |
| CVE-2025-7796 | Tenda FH451 PPTPDClient fromPptpUserAdd stack-based overflow | 8.7CNA v4.0 | 0.8% | 2025-07-18 | |
| CVE-2025-7795 | Tenda FH451 P2pListFilter fromP2pListFilter stack-based overflow | 8.7CNA v4.0 | 3.1% | 2025-07-18 | Exploit code |
| CVE-2025-7794 | Tenda FH451 NatStaticSetting fromNatStaticSetting stack-based overflow | 8.7CNA v4.0 | 1.1% | 2025-07-18 | |
| CVE-2025-7793 | Tenda FH451 webtypelibrary formWebTypeLibrary stack-based overflow | 8.7CNA v4.0 | 1.1% | 2025-07-18 | |
| CVE-2025-7792 | Tenda FH451 SafeEmailFilter formSafeEmailFilter stack-based overflow | 8.7CNA v4.0 | 1.1% | 2025-07-18 | |
| CVE-2025-7791 | PHPGurukul Online Security Guards Hiring System search.php cross-site scripting | 5.4v3.1 | 0.2% | 2025-07-18 | |
| CVE-2025-7790 | D-Link DI-8100 HTTP request menu_nat.asp stack-based overflow | 6.5NVD v3.1 | 0.9% | 2025-07-18 | |
| CVE-2025-7789 | Xuxueli xxl-job Token Generation IndexController.java makeToken weak password hash | 6.3CNA v4.0 | 0.3% | 2025-07-18 | Fix |
| CVE-2025-7788 | Xuxueli xxl-job SampleXxlJob.java commandJobHandler os command injection | 8.8v3.1 | 4.9% | 2025-07-18 | |
| CVE-2025-7787 | Xuxueli xxl-job SampleXxlJob.java httpJobHandler server-side request forgery | 8.8v3.1 | 0.4% | 2025-07-18 | |
| CVE-2025-7786 | Gnuboard g6 Post Reply qa cross-site scripting | 5.4v3.1 | 0.2% | 2025-07-18 | |
| CVE-2025-7785 | thinkgem JeeSite SsoController.java sso redirect | 5.3CNA v4.0 | 0.4% | 2025-07-18 | |
| CVE-2025-7784 | Org.keycloak/keycloak-services: Privilege escalation in keycloak admin console (fgapv2 enabled) | 6.5CNA v3.1 | 0.4% | 2025-07-18 | Fix |
| CVE-2025-7783 | Usage of unsafe random function in form-data for choosing boundary | 9.4CNA v4.0 | 1.8% | 2025-07-18 | Exploit codeFix |
| CVE-2025-7772 | Malcure Malware Scanner WordPress plugin arbitrary file read | 6.5CNA v3.1 | 0.3% | 2025-07-18 | Fix |
| CVE-2025-7767 | PHPGurukul Art Gallery Management System edit-art-medium-detail.php cross-site scripting | 5.4v3.1 | 0.3% | 2025-07-18 | |
| CVE-2025-7660 | Map My Locations WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-07-18 | |
| CVE-2025-7648 | Ruven Themes: Shortcodes WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-07-18 | |
| CVE-2025-7643 | Attachment Manager WordPress plugin unauthenticated arbitrary file deletion | 9.1CNA v3.1 | 0.8% | 2025-07-18 | |
| CVE-2025-7638 | Forminator Forms Contact Form, Payment Form and Custom Form Builder WordPress plugin SQL injection | 4.9CNA v3.1 | 0.3% | 2025-07-18 | Fix |
| CVE-2025-7444 | LoginPress Pro WordPress plugin authentication bypass via WordPress.com OAuth provider | 9.8CNA v3.1 | 0.6% | 2025-07-18 | Fix |
| CVE-2025-7438 | MasterStudy LMS Online Courses, eLearning PRO Plus WordPress plugin arbitrary file upload | 7.5CNA v3.1 | 0.6% | 2025-07-18 | Fix |
| CVE-2025-7431 | Knowledge Base WordPress plugin stored cross-site scripting | 4.4CNA v3.1 | 0.3% | 2025-07-18 | Fix |
| CVE-2025-7396 | wolfSSL Curve25519 timing side channel | 5.6CNA v4.0 | 0.2% | 2025-07-18 | |
| CVE-2025-7395 | wolfSSL Domain Name Validation Bypass with Apple Native Certificate Validation | 9.2CNA v4.0 | 0.2% | 2025-07-18 | Fix |
| CVE-2025-7394 | wolfSSL insufficient randomness | 7.0CNA v4.0 | 0.4% | 2025-07-18 | Fix |
| CVE-2025-6813 | aaPanel WP Toolkit - missing authorization to Authenticated privilege escalation | 8.8CNA v3.1 | 0.4% | 2025-07-18 | Fix |
| CVE-2025-6781 | Copymatic WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.1% | 2025-07-18 | |
| CVE-2025-6726 | Block Editor Gallery Slider WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.2% | 2025-07-18 | Fix |
| CVE-2025-6719 | Terms descriptions WordPress plugin authenticated (Admin+) stored cross-site scripting | 4.4CNA v3.1 | 0.2% | 2025-07-18 | Fix |
| CVE-2025-6718 | B1.lt for WooCommerce WordPress plugin missing authorization authenticated arbitrary SQL injection | 8.8CNA v3.1 | 0.3% | 2025-07-18 | Fix |
| CVE-2025-6717 | B1.lt for WooCommerce WordPress plugin authenticated (Subscriber+) SQL injection | 6.5CNA v3.1 | 0.3% | 2025-07-18 | Fix |
| CVE-2025-6233 | Mattermost arbitrary file read by system admin via path traversal | 6.8CNA v3.1 | 0.4% | 2025-07-18 | Fix |
| CVE-2025-6227 | Mattermost invite token is used as part of the secure communication | 2.2CNA v3.1 | 0.2% | 2025-07-18 | Fix |
| CVE-2025-6226 | Mattermost IDOR in CreatePost API allows for timeboxed message disclosure | 6.5CNA v3.1 | 0.3% | 2025-07-18 | Fix |
| CVE-2025-6222 | WP Swings Refund And Exchange with RMA order exchange attachment arbitrary file upload | 9.8CNA v3.1 | 0.6% | 2025-07-18 | Fix |
| CVE-2025-6197 | Grafana open redirect | 4.2CNA v3.1 | 70.1% | 2025-07-18 | NucleiFix |
| CVE-2025-6185 | Leviton AcquiSuite and Energy Monitoring Hub cross-site scripting | 8.7CNA v4.0 | 0.3% | 2025-07-18 | |
| CVE-2025-6053 | Zuppler Online Ordering WordPress plugin cross-site request forgery to stored cross-site scripting | 6.1CNA v3.1 | 0.1% | 2025-07-18 | |
| CVE-2025-6023 | Grafana is vulnerable to XSS attacks through open redirects and path traversal | 7.6CNA v3.1 | 57.7% | 2025-07-18 | Emerging ThreatsFix |
| CVE-2025-5816 | Plugin Pengiriman WooCommerce Kurir Reguler WordPress plugin insecure direct object reference | 4.3CNA v3.1 | 0.2% | 2025-07-18 | |
| CVE-2025-5811 | Listly: Listicles For WordPress plugin unauthenticated arbitrary Transient deletion | 5.3CNA v3.1 | 0.3% | 2025-07-18 | |
| CVE-2025-5800 | Testimonial Post type WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-07-18 | |
| CVE-2025-5767 | Crowdfunding for WooCommerce WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-07-18 | |
| CVE-2025-5754 | Useful Tab Block Responsive and AMP-Compatible WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-07-18 | |
| CVE-2025-5752 | Vertical scroll image slideshow gallery WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-07-18 | |
| CVE-2025-3740 | School Management System for Wordpress plugin local file inclusion to privilege escalation | 8.8CNA v3.1 | 0.7% | 2025-07-18 | Fix |
| CVE-2025-2425 | TOCTOU race condition vulnerability in ESET products on Windows | 5.1CNA v4.0 | 0.1% | 2025-07-18 | |
| CVE-2025-54070 | OpenZeppelin Contracts Bytes library lastIndexOf function out-of-bounds read | 6.9CNA v4.0 | 0.4% | 2025-07-17 | Fix |
| CVE-2025-54068 | Laravel Livewire code injection | 9.2CNA v4.0 | 96.3% | 2025-07-17 | KEVNucleiExploit codeFix |
| CVE-2025-54066 | DiracX-Web login page has open redirect | 4.7CNA v3.1 | 0.4% | 2025-07-17 | Fix |
| CVE-2025-54064 | Rucio Apache access log information disclosure | 6.9CNA v4.0 | 0.4% | 2025-07-17 | Fix |
| CVE-2025-54062 | WeGIA SQL injection vulnerability in id_dependente parameter on profile_dependente.php endpoint | 9.4CNA v4.0 | 0.5% | 2025-07-17 | Fix |
| CVE-2025-54061 | WeGIA dependente_editarDoc.php SQL injection | 9.4CNA v4.0 | 0.5% | 2025-07-17 | Fix |
| CVE-2025-54060 | LabRedesCefetRJ WeGIA dependente_editarInfoPessoal.php SQL injection | 9.4CNA v4.0 | 0.5% | 2025-07-17 | Fix |
| CVE-2025-54058 | LabRedesCefetRJ WeGIA dependente_editarEndereco.php SQL injection | 9.4CNA v4.0 | 0.5% | 2025-07-17 | Fix |
| CVE-2025-53964 | Goldendict exposed dangerous method | 9.6CISA ADP v3.1 | 0.4% | 2025-07-17 | Fix |
| CVE-2025-53946 | WeGIA vulnerable to SQL injection in endpoint profile_paciente.php parameter id_fichamedica | 9.4CNA v4.0 | 0.4% | 2025-07-17 | Fix |
| CVE-2025-53941 | Hollo renders posts received with form elements and allows submission | 6.1CNA v3.1 | 0.2% | 2025-07-17 | Fix |
| CVE-2025-53928 | MaxKB has RCE in MCP call | 4.6CNA v3.1 | 0.4% | 2025-07-17 | Fix |
| CVE-2025-53927 | MaxKB sandbox bypass | 4.6CNA v3.1 | 0.2% | 2025-07-17 | Fix |
| CVE-2025-53909 | Mailcow: Dockerized vulnerable to SSTI in Quota and Quarantine Notification template | 9.1CNA v3.1 | 0.5% | 2025-07-17 | Fix |
| CVE-2025-53867 | Island Lake WebBatch remote code execution | 9.8CISA ADP v3.1 | 0.6% | 2025-07-17 | |
| CVE-2025-53817 | GHSL-2025-059 7-Zip null pointer array write attempt in NArchive::NCom::CHandler::GetStream | 7.5NVD v3.1 | 0.6% | 2025-07-17 | Fix |
| CVE-2025-53816 | GHSL-2025-058 7-Zip Multi-byte write heap buffer overflow in NCompress::NRar5::CDecoder | 7.5NVD v3.1 | 0.7% | 2025-07-17 | Fix |
| CVE-2025-53644 | OpenCV contains a use-after-free buffer write due to an uninitialized pointer | 9.8NVD v3.1 | 0.4% | 2025-07-17 | Fix |
| CVE-2025-53638 | Solady lacks extcodesize validation on implementation in ERC4337Factory | 6.9CNA v4.0 | 0.3% | 2025-07-17 | Fix |
| CVE-2025-52046 | TOTOLINK A3300R command injection | 9.8v3.1 | 5.2% | 2025-07-17 | |
| CVE-2025-51630 | TOTOLINK N350RT buffer overflow | 9.8CISA ADP v3.1 | 0.5% | 2025-07-17 | |
| CVE-2025-51497 | Adguard For Safari sensitive information in log files | 5.5CISA ADP v3.1 | 0.1% | 2025-07-17 | |
| CVE-2025-50240 | nbcio-boot v1.0.3 was discovered to contain a SQL injection vulnerability via the userIds parameter at /sys/user/deleteRecycleBin. | 9.8CISA ADP v3.1 | 0.3% | 2025-07-17 | |
| CVE-2025-47189 | Netwrix Directory Manager authentication error messages cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2025-07-17 | |
| CVE-2025-46102 | Beakon Learning Management System Sharable Content Object Reference Model cross-site scripting | 5.4CISA ADP v3.1 | 0.3% | 2025-07-17 | |
| CVE-2025-40924 | Catalyst::Plugin::Session before for Perl generates session ids insecurely | 6.5CISA ADP v3.1 | 0.3% | 2025-07-17 | Fix |
| CVE-2025-25257 | Fortinet FortiWeb SQL injection | 9.6CNA v3.1 | 99.9% | 2025-07-17 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2025-23270 | NVIDIA Jetson Orin, IGX Orin and Xavier Devices side-channel information leak | 7.1CNA v3.1 | 0.2% | 2025-07-17 | Fix |
| CVE-2025-23269 | NVIDIA Jetson Orin and Xavier Devices information disclosure | 4.7CNA v3.1 | 0.1% | 2025-07-17 | Fix |
| CVE-2025-23267 | NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook | 8.5CNA v3.1 | 0.8% | 2025-07-17 | Fix |
| CVE-2025-23266 | NVIDIA Container Toolkit for all platforms contains an untrusted search path | 9.0CNA v3.1 | 3.3% | 2025-07-17 | Exploit codeFix |
| CVE-2025-23263 | NVIDIA DOCA-Host and Mellanox OFED privilege escalation | 7.6CNA v3.1 | 0.2% | 2025-07-17 | Fix |
| CVE-2025-7765 | code-projects Online Appointment Booking System addmanagerclinic.php SQL injection | 9.8v3.1 | 0.4% | 2025-07-17 | |
| CVE-2025-7764 | code-projects Online Appointment Booking System deletedoctorclinic.php SQL injection | 9.8v3.1 | 0.4% | 2025-07-17 | |
| CVE-2025-7763 | thinkgem JeeSite Site Controller SiteController.java select redirect | 5.3CNA v4.0 | 0.4% | 2025-07-17 | |
| CVE-2025-7762 | D-Link DI-8100 HTTP request menu_nat_more.asp stack-based overflow | 6.5NVD v3.1 | 6.7% | 2025-07-17 | |
| CVE-2025-7759 | thinkgem JeeSite UEditor Image Grabber ActionEnter.java server-side request forgery | 8.8v3.1 | 0.3% | 2025-07-17 | |
| CVE-2025-7758 | TOTOLINK T6 HTTP POST request cstecgi.cgi setDiagnosisCfg buffer overflow | 8.7CNA v4.0 | 0.8% | 2025-07-17 | |
| CVE-2025-7757 | PHPGurukul Land Record System edit-property.php SQL injection | 9.8v3.1 | 0.5% | 2025-07-17 | |
| CVE-2025-7756 | code-projects E-Commerce Site cross-site request forgery | 5.3CNA v4.0 | 0.3% | 2025-07-17 | |
| CVE-2025-7755 | code-projects Online Ordering System edit_product.php unrestricted upload | 8.8v3.1 | 0.4% | 2025-07-17 | |
| CVE-2025-7754 | code-projects Patient Record Management System xray_form.php SQL injection | 7.5v3.1 | 0.3% | 2025-07-17 | |
| CVE-2025-7753 | code-projects Online Appointment Booking System adddoctor.php SQL injection | 9.8v3.1 | 0.4% | 2025-07-17 | Exploit code |
| CVE-2025-7752 | code-projects Online Appointment Booking System deletedoctor.php SQL injection | 9.8v3.1 | 0.4% | 2025-07-17 | |
| CVE-2025-7751 | code-projects Online Appointment Booking System addclinic.php SQL injection | 9.8v3.1 | 0.4% | 2025-07-17 | |
| CVE-2025-7750 | code-projects Online Appointment Booking System adddoctorclinic.php SQL injection | 9.8v3.1 | 0.4% | 2025-07-17 | |
| CVE-2025-7749 | code-projects Online Appointment Booking System getmanagerregion.php SQL injection | 9.8v3.1 | 0.5% | 2025-07-17 | |
| CVE-2025-7748 | ZCMS Create Article page cross-site scripting | 5.1CNA v4.0 | 0.3% | 2025-07-17 | |
| CVE-2025-7747 | Tenda FH451 POST Request WizardHandle fromWizardHandle buffer overflow | 8.7CNA v4.0 | 0.9% | 2025-07-17 | |
| CVE-2025-7735 | UNIMAX｜Hospital Information System SQL injection | 8.7CNA v4.0 | 0.4% | 2025-07-17 | Fix |
| CVE-2025-7729 | Scada-LTS usersProfiles.shtm cross-site scripting | 5.4v3.1 | 0.3% | 2025-07-17 | |
| CVE-2025-7728 | Scada-LTS users.shtm cross-site scripting | 5.4v3.1 | 0.3% | 2025-07-17 | |
| CVE-2025-7712 | Madara - Core WordPress plugin unauthenticated arbitrary file deletion | 9.1CNA v3.1 | 0.8% | 2025-07-17 | Fix |
| CVE-2025-7472 | Sophos Intercept X A local privilege escalation | 7.5CNA v3.1 | 0.1% | 2025-07-17 | Fix |
| CVE-2025-7433 | Sophos Intercept X A local privilege escalation | 8.8CNA v3.1 | 0.1% | 2025-07-17 | Fix |
| CVE-2025-7398 | Broadcom Brocade ASCG medium Strength Cipher Suites detected on port on ports 9000 and 8036 | 8.6CNA v4.0 | 0.2% | 2025-07-17 | Fix |
| CVE-2025-7397 | Broadcom Brocade ASCG CLI history displays inline passwords | 6.8CNA v4.0 | 0.1% | 2025-07-17 | Fix |
| CVE-2025-7339 | on-headers vulnerable to HTTP response header manipulation | 3.4CNA v3.1 | 0.2% | 2025-07-17 | Fix |
| CVE-2025-7338 | Multer vulnerable to denial of service via unhandled exception from malformed request | 7.5CNA v3.1 | 0.8% | 2025-07-17 | Fix |
| CVE-2025-6391 | Broadcom Brocade ASCG JSON Web Token (JWT) Exposure in Log files | 7.1CNA v4.0 | 0.2% | 2025-07-17 | Fix |
| CVE-2025-6249 | Lenovo FileZ Client client-side enforcement of server-side security | 8.4CNA v4.0 | 0.2% | 2025-07-17 | Fix |
| CVE-2025-6248 | Lenovo Browser cross-site scripting | 7.1CNA v4.0 | 0.3% | 2025-07-17 | |
| CVE-2025-6232 | Lenovo Vantage argument injection | 8.5CNA v4.0 | 0.2% | 2025-07-17 | Fix |
| CVE-2025-6231 | Lenovo Vantage argument injection | 8.5CNA v4.0 | 0.2% | 2025-07-17 | Fix |
| CVE-2025-6230 | Lenovo Vantage SQL injection | 4.8CNA v4.0 | 0.2% | 2025-07-17 | Fix |
| CVE-2025-5396 | Bears Backup WordPress plugin unauthenticated remote code execution | 9.8CNA v3.1 | 0.8% | 2025-07-17 | Fix |
| CVE-2025-5346 | Bluebird kr.co.bluebird.android.bbsettings improper export of Android application components | 5.1CNA v4.0 | 0.1% | 2025-07-17 | Fix |
| CVE-2025-5345 | Bluebird com.bluebird.filemanagers improper export of Android application components | 6.3CNA v4.0 | 0.1% | 2025-07-17 | Fix |
| CVE-2025-5344 | Exposed AIDL service allowing for tampering of system secure settings in Bluebird kiosk application | 8.5CNA v4.0 | 0.1% | 2025-07-17 | Fix |
| CVE-2025-4657 | Lenovo PC Manager heap-based buffer overflow | 8.4CNA v4.0 | 0.2% | 2025-07-17 | Fix |
| CVE-2025-4302 | Stop User Enumeration WordPress plugin Protection bypass | 5.3CISA ADP v3.1 | 0.9% | 2025-07-17 | NucleiFix |
| CVE-2025-3753 | Open Source Robotics Foundation Robot Operating System unsafe use of eval method in rosbag tool | 7.8CNA v3.1 | 0.2% | 2025-07-17 | |
| CVE-2025-3415 | Grafana's insecure DingDing Alert integration exposes sensitive information | 4.3CNA v3.1 | 1.0% | 2025-07-17 | NucleiFix |
| CVE-2025-2818 | Motorola Smart Connect Android Application cleartext transmission of sensitive information | 5.1CNA v4.0 | 0.1% | 2025-07-17 | Fix |
| CVE-2025-1729 | Lenovo TrackPoint Quick Menu uncontrolled search path | 5.4CNA v4.0 | 0.1% | 2025-07-17 | Fix |
| CVE-2025-1713 | Xen deadlock potential with VT-d and legacy PCI device pass-through | 7.5CISA ADP v3.1 | 0.7% | 2025-07-17 | Fix |
| CVE-2025-1700 | Motorola Software Fix uncontrolled search path | 7.1CNA v4.0 | 0.1% | 2025-07-17 | Fix |
| CVE-2025-0886 | Lenovo Elliptic Virtual Lock Sensor privilege escalation | 8.5CNA v4.0 | 0.2% | 2025-07-17 | Exploit codeFix |
| CVE-2025-54051 | LightBox Block WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-07-16 | Fix |
| CVE-2025-54050 | Responsive Addons for Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2025-07-16 | Fix |
| CVE-2025-54047 | Cost Calculator WordPress plugin broken access control | 4.3CNA v3.1 | 0.2% | 2025-07-16 | Fix |
| CVE-2025-54043 | SMTP for Amazon SES WordPress plugin SQL injection | 7.6CNA v3.1 | 0.3% | 2025-07-16 | Fix |
| CVE-2025-54042 | WP Post Hide WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.1% | 2025-07-16 | Fix |
| CVE-2025-54041 | Wallet System for WooCommerce WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.1% | 2025-07-16 | Fix |
| CVE-2025-54039 | Animator WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.1% | 2025-07-16 | Fix |
| CVE-2025-54038 | Restaurant Menu by MotoPress WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.1% | 2025-07-16 | Fix |
| CVE-2025-54037 | News Kit Elementor Addons WordPress plugin broken access control | 5.4CNA v3.1 | 0.2% | 2025-07-16 | Fix |
| CVE-2025-54036 | Webba Booking WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.1% | 2025-07-16 | Fix |
| CVE-2025-54035 | Newsletters WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.1% | 2025-07-16 | Fix |
| CVE-2025-54033 | Theme Builder For Elementor WordPress plugin cross-site request forgery (CSRF) | 6.5CNA v3.1 | 0.1% | 2025-07-16 | Fix |
| CVE-2025-54030 | WooCommerce Google Sheet Connector WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.1% | 2025-07-16 | Fix |
| CVE-2025-54026 | GymBase Theme Classes WordPress theme SQL injection | 8.5CNA v3.1 | 0.3% | 2025-07-16 | Fix |
| CVE-2025-54024 | WPAdverts WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-07-16 | Fix |
| CVE-2025-54023 | WP Delicious WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-07-16 | Fix |
| CVE-2025-54022 | Coupon Affiliates WordPress plugin cross-site request forgery (CSRF) | 6.5CNA v3.1 | 0.2% | 2025-07-16 | Fix |
| CVE-2025-54020 | AntiSpam for Contact Form 7 WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.1% | 2025-07-16 | Fix |
| CVE-2025-54018 | CM Pop-Up banners WordPress plugin broken access control | 4.3CNA v3.1 | 0.2% | 2025-07-16 | Fix |
| CVE-2025-54016 | Videopack WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-07-16 | Fix |
| CVE-2025-54015 | HT Contact Form 7 WordPress plugin local file inclusion | 6.6CNA v3.1 | 0.5% | 2025-07-16 | Fix |
| CVE-2025-54013 | Welcart e-Commerce WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.2% | 2025-07-16 | Fix |
| CVE-2025-54011 | SMTP2GO WordPress plugin broken access control | 4.3CNA v3.1 | 0.2% | 2025-07-16 | Fix |
| CVE-2025-54010 | FluentSnippets WordPress plugin cross-site request forgery (CSRF) | 9.6CNA v3.1 | 0.2% | 2025-07-16 | Fix |
| CVE-2025-54009 | JetSmartFilters WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-07-16 | Fix |
| CVE-2025-54006 | Bold Page Builder WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-07-16 | Fix |
| CVE-2025-53997 | Houzez WordPress theme broken access control | 4.3CNA v3.1 | 0.2% | 2025-07-16 | Fix |
| CVE-2025-53996 | JetSearch WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-07-16 | Fix |
| CVE-2025-53995 | JetPopup WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-07-16 | Fix |
| CVE-2025-53994 | JetPopup WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-07-16 | Fix |
| CVE-2025-53991 | JetTricks WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-07-16 | Fix |
| CVE-2025-53990 | JetFormBuilder WordPress plugin PHP object injection | 7.2CNA v3.1 | 0.5% | 2025-07-16 | Fix |
| CVE-2025-53989 | JetBlocks For Elementor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-07-16 | Fix |
| CVE-2025-53986 | Hestia WordPress theme broken access control | 5.3CNA v3.1 | 0.3% | 2025-07-16 | Fix |
| CVE-2025-53984 | JetTabs WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-07-16 | Fix |
| CVE-2025-53982 | JetElements For Elementor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-07-16 | Fix |
| CVE-2025-53943 | Death1Clown VoidBot Open-Source command handler incorrect authorization | 8.7CNA v4.0 | 0.3% | 2025-07-16 | Fix |
| CVE-2025-53938 | WeGIA vulnerable to authentication bypass due to Missing Session Validation in multiple endpoints | 6.9CNA v4.0 | 0.6% | 2025-07-16 | Fix |
| CVE-2025-53937 | WeGIA has SQL injection vulnerability in `cargo` parameter on `control.php` endpoint | 9.4CNA v4.0 | 0.5% | 2025-07-16 | Fix |
| CVE-2025-53936 | WeGIA vulnerable to reflected cross-site scripting | 6.4CNA v4.0 | 0.3% | 2025-07-16 | Fix |
| CVE-2025-53935 | WeGIA vulnerable to reflected cross-site scripting | 6.4CNA v4.0 | 0.3% | 2025-07-16 | Fix |
| CVE-2025-53934 | WeGIA vulnerable to stored cross-site scripting | 6.4CNA v4.0 | 0.3% | 2025-07-16 | Fix |
| CVE-2025-53933 | WeGIA vulnerable to stored cross-site scripting | 6.4CNA v4.0 | 0.3% | 2025-07-16 | Fix |
| CVE-2025-53932 | WeGIA vulnerable to reflected cross-site scripting via endpoint cadastro_adotante.php parameter cpf | 6.4CNA v4.0 | 0.3% | 2025-07-16 | Fix |
| CVE-2025-53931 | WeGIA vulnerable to stored cross-site scripting via endpoint `adicionar_raca.php` parameter `raca` | 6.4CNA v4.0 | 0.3% | 2025-07-16 | Fix |
| CVE-2025-53930 | WeGIA vulnerable to stored cross-site scripting | 6.4CNA v4.0 | 0.3% | 2025-07-16 | Fix |
| CVE-2025-53929 | WeGIA vulnerable to stored cross-site scripting | 6.4CNA v4.0 | 0.3% | 2025-07-16 | Fix |
| CVE-2025-53926 | Emlog has stored cross-site scripting vulnerability due to error | 6.1CNA v3.1 | 0.3% | 2025-07-16 | |
| CVE-2025-53925 | Emlog has stored cross-site scripting vulnerability in file upload functionality | 5.4CNA v3.1 | 0.3% | 2025-07-16 | |
| CVE-2025-53924 | Emlog vulnerable to stored cross-site scripting in links functionality | 6.9CNA v3.1 | 0.3% | 2025-07-16 | |
| CVE-2025-53923 | Emlog vulnerable to reflected cross-site scripting in admin panel | 8.2CNA v3.1 | 0.4% | 2025-07-16 | |
| CVE-2025-53908 | RomM vulnerable to authenticated path traversal | 8.3CNA v4.0 | 0.5% | 2025-07-16 | Fix |
| CVE-2025-53904 | the-scratch-channel.github.io the Scratch Channel has potential reflected cross-site scripting (XSS) | 1.3CNA v4.0 | 0.3% | 2025-07-16 | |
| CVE-2025-53892 | Intlify Vue I18n's escapeParameterHtml does not prevent DOM-based XSS | 5.3CNA v4.0 | 0.7% | 2025-07-16 | Fix |
| CVE-2025-53842 | ZEXELON ZWX-2000CSW2-HN hard-coded credentials | 6.8CNA v4.0 | 0.2% | 2025-07-16 | |
| CVE-2025-53840 | Icinga DB web exposure of sensitive information to an unauthorized actor | 2.4CNA v3.1 | 0.3% | 2025-07-16 | Fix |
| CVE-2025-53758 | Digisol DG-GR6821AC router web management interface hard-coded credentials | 5.1CNA v4.0 | 0.1% | 2025-07-16 | Fix |
| CVE-2025-53757 | Insecure Cookie Flags vulnerability in Digisol DG-GR6821AC Router | 8.7CNA v4.0 | 0.3% | 2025-07-16 | Fix |
| CVE-2025-53756 | Cleartext transmission vulnerability in Digisol DG-GR6821AC Router | 8.7CNA v4.0 | 0.3% | 2025-07-16 | Fix |
| CVE-2025-53755 | Cleartext storage vulnerability in Digisol DG-GR6821AC Router | 5.1CNA v4.0 | 0.1% | 2025-07-16 | Fix |
| CVE-2025-53754 | Hard-coded credentials vulnerability in Digisol DG-GR6821AC Router | 5.1CNA v4.0 | 0.2% | 2025-07-16 | Fix |
| CVE-2025-52836 | WordPress The E-Commerce ERP plugin privilege escalation | 9.8CNA v3.1 | 0.4% | 2025-07-16 | |
| CVE-2025-52819 | Pakke Envíos WordPress plugin SQL injection | 8.5CNA v3.1 | 0.3% | 2025-07-16 | |
| CVE-2025-52804 | Nuss WordPress theme broken access control | 7.5CNA v3.1 | 0.3% | 2025-07-16 | |
| CVE-2025-52803 | Sala WordPress theme broken access control | 7.5CNA v3.1 | 0.3% | 2025-07-16 | |
| CVE-2025-52787 | Tennis Court Bookings WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-07-16 | |
| CVE-2025-52786 | Media Folder WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-07-16 | |
| CVE-2025-52779 | Dot html,php,xml etc pages WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-07-16 | |
| CVE-2025-52777 | Pay with Contact Form 7 WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-07-16 | |
| CVE-2025-52714 | Traveler WordPress theme SQL injection | 9.3CNA v3.1 | 0.4% | 2025-07-16 | Fix |
| CVE-2025-52690 | Command injection vulnerability in the OmniAccess Stellar over UDP service | 8.1CNA v3.1 | 14.4% | 2025-07-16 | Emerging Threats |
| CVE-2025-52689 | Weak Session ID Check in the OmniAccess Stellar Web Management interface | 9.8CNA v3.1 | 16.7% | 2025-07-16 | Emerging Threats |
| CVE-2025-52688 | Command injection vulnerability in the OmniAccess Stellar Web Management interface | 9.8CNA v3.1 | 36.3% | 2025-07-16 | Emerging ThreatsExploit code |
| CVE-2025-52687 | JavaScript injection vulnerability in the OmniAccess Stellar Web Management interface | 2.4CNA v3.1 | 0.2% | 2025-07-16 | |
| CVE-2025-50028 | Ultimate Push Notifications WordPress plugin broken access control | 6.5CNA v3.1 | 0.3% | 2025-07-16 | Fix |
| CVE-2025-49888 | PW WooCommerce On Sale! WordPress plugin broken access control | 7.1CNA v3.1 | 0.2% | 2025-07-16 | Fix |
| CVE-2025-49884 | Internal Linking of Related Contents WordPress plugin broken access control | 6.5CNA v3.1 | 0.3% | 2025-07-16 | Fix |
| CVE-2025-49876 | ProfileGrid WordPress plugin SQL injection | 8.5CNA v3.1 | 0.3% | 2025-07-16 | Fix |
| CVE-2025-49319 | WordPress Wishlist for WooCommerce plugin broken access control | 6.5CNA v3.1 | 0.3% | 2025-07-16 | Fix |
| CVE-2025-49034 | Funnel Builder by FunnelKit WordPress plugin SQL injection | 7.6CNA v3.1 | 0.3% | 2025-07-16 | Fix |
| CVE-2025-49031 | SMu Manual DoFollow WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-07-16 | |
| CVE-2025-48345 | Contact Form 7 Editor Button WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-07-16 | |
| CVE-2025-48339 | WordPress Profiler - What Slowing Down Your WP plugin broken access control | 6.5CNA v3.1 | 0.2% | 2025-07-16 | |
| CVE-2025-48301 | SMTP for SendGrid YaySMTP WordPress plugin SQL injection | 7.6CNA v3.1 | 0.4% | 2025-07-16 | Fix |
| CVE-2025-48300 | Groundhogg WordPress plugin arbitrary file upload | 9.1CNA v3.1 | 0.4% | 2025-07-16 | Fix |
| CVE-2025-48299 | YayExtra WordPress plugin SQL injection | 7.6CNA v3.1 | 0.4% | 2025-07-16 | Fix |
| CVE-2025-48295 | Easy Elementor Addons WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-07-16 | Fix |
| CVE-2025-48294 | FG Drupal to WordPress plugin server side request forgery (SSRF) | 4.4CNA v3.1 | 0.2% | 2025-07-16 | Fix |
| CVE-2025-48291 | WordPress Contest Gallery plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-07-16 | Fix |
| CVE-2025-48167 | Chatbox Manager WordPress plugin broken access control | 5.4CNA v3.1 | 0.2% | 2025-07-16 | Fix |
| CVE-2025-48166 | WordPress Stop and Block bots plugin Anti bots broken access control | 5.3CNA v3.1 | 0.3% | 2025-07-16 | Fix |
| CVE-2025-48161 | YaySMTP WordPress plugin SQL injection | 7.6CNA v3.1 | 0.4% | 2025-07-16 | Fix |
| CVE-2025-48156 | Image Wall WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-07-16 | Fix |
| CVE-2025-48155 | Residential Address Detection WordPress plugin broken access control | 5.3CNA v3.1 | 0.3% | 2025-07-16 | Fix |
| CVE-2025-48153 | Import CDN-Remote Images WordPress plugin cross-site request forgery (CSRF) | 7.1CNA v3.1 | 0.1% | 2025-07-16 | Fix |
| CVE-2025-48150 | Missing Authorization vulnerability in sminozzi Real Estate Property 2024 Create Your Own Fields and Search Bar WP Plugin real-estate-right-now allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Real Estate Property 2024 Create Your Own Fields and Search Bar W | 4.3CNA v3.1 | 0.2% | 2025-07-16 | Fix |
| CVE-2025-47652 | Infility Global WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-07-16 | Fix |
| CVE-2025-47645 | ELEX WooCommerce Advanced Bulk Edit Products, Prices and Attributes WordPress plugin SQL injection | 8.5CNA v3.1 | 0.3% | 2025-07-16 | Fix |
| CVE-2025-47554 | CSS3 Compare Pricing Tables for WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-07-16 | Fix |
| CVE-2025-47053 | Adobe Experience Manager cross-site scripting (DOM-based XSS) | 5.4CNA v3.1 | 0.3% | 2025-07-16 | Fix |
| CVE-2025-46959 | Adobe Experience Manager cross-site scripting (DOM-based XSS) | 5.4CNA v3.1 | 0.3% | 2025-07-16 | Fix |
| CVE-2025-46500 | Wordpress Auto Spinner plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-07-16 | |
| CVE-2025-40985 | SQL injection in SCATI Vision Web | 8.3CNA v4.0 | 0.3% | 2025-07-16 | |
| CVE-2025-40923 | Plack-Middleware-Session before for Perl generates session ids insecurely | 7.3CISA ADP v3.1 | 0.4% | 2025-07-16 | Fix |
| CVE-2025-40919 | Authen::DigestMD5 for Perl generate the cnonce insecurely | 6.5CISA ADP v3.1 | 0.3% | 2025-07-16 | |
| CVE-2025-40918 | Authen::SASL::Perl::DIGEST_MD5 for Perl generates the cnonce insecurely | 6.5CISA ADP v3.1 | 0.4% | 2025-07-16 | Fix |
| CVE-2025-40913 | Net::Dropbear versions for Perl contains a dependency that may be susceptible to an integer overflow | 6.5CISA ADP v3.1 | 0.3% | 2025-07-16 | |
| CVE-2025-40777 | ISC BIND 9 A possible assertion failure when stale-answer-client-timeout is set to 0 | 7.5CNA v3.1 | 0.9% | 2025-07-16 | Fix |
| CVE-2025-40776 | ISC BIND 9 Birthday Attack against Resolvers supporting ECS | 8.6CNA v3.1 | 0.2% | 2025-07-16 | Fix |
| CVE-2025-40724 | Stored cross-site scripting (XSS) in Pharmacy POS PHP Script | 5.1CNA v4.0 | 0.4% | 2025-07-16 | |
| CVE-2025-37107 | HPE AutoPass License Server An authentication bypass | 7.3CNA v3.1 | 0.4% | 2025-07-16 | Fix |
| CVE-2025-37106 | HPE AutoPass License Server improper authentication | 7.3CNA v3.1 | 0.4% | 2025-07-16 | Fix |
| CVE-2025-37105 | HPE AutoPass License Server hsqldb-related remote code execution | 7.5CNA v3.1 | 0.6% | 2025-07-16 | Fix |
| CVE-2025-37104 | HPE Telco Service Orchestrator software, authenticated SQL injection | 7.1CNA v3.1 | 0.2% | 2025-07-16 | Fix |
| CVE-2025-36097 | IBM WebSphere Application Server denial of service | 7.5CNA v3.1 | 0.4% | 2025-07-16 | Fix |
| CVE-2025-34300 | Sawtooth Software Lighthouse Studio Pre-authentication RCE | 10.0CNA v4.0 | 80.3% | 2025-07-16 | NucleiMetasploitExploit codeFix |
| CVE-2025-34132 | LILIN DVR command injection via NTPUpdate in dvr_box | 9.3CNA v4.0 | 1.7% | 2025-07-16 | Emerging ThreatsFix |
| CVE-2025-34130 | LILIN DVR arbitrary file read via net_html.cgi | 8.7CNA v4.0 | 1.1% | 2025-07-16 | Fix |
| CVE-2025-34129 | LILIN DVR RCE via Malicious FTP/NTP Configuration | 8.7CNA v4.0 | 1.1% | 2025-07-16 | Fix |
| CVE-2025-34128 | X360 VideoPlayer ActiveX Control buffer overflow via ConvertFile | 8.6CNA v4.0 | 1.3% | 2025-07-16 | Exploit code |
| CVE-2025-34127 | Achat SEH buffer overflow via UDP | 9.3CNA v4.0 | 1.6% | 2025-07-16 | Exploit code |
| CVE-2025-34126 | RIPS Scanner path traversal | 8.7CNA v4.0 | 2.1% | 2025-07-16 | Exploit code |
| CVE-2025-34125 | D-Link DSP-W110A1 Cookie command injection | 9.3CNA v4.0 | 4.5% | 2025-07-16 | MetasploitExploit code |
| CVE-2025-34124 | Heroes of Might and Magic III .h3m Map file buffer overflow | 8.4CNA v4.0 | 0.5% | 2025-07-16 | Exploit code |
| CVE-2025-34123 | VideoCharge Studio SEH buffer overflow via .VSC file | 8.4CNA v4.0 | 0.5% | 2025-07-16 | Exploit code |
| CVE-2025-34121 | Idera Up.Time post2file.php arbitrary file upload RCE | 9.3CNA v4.0 | 2.4% | 2025-07-16 | MetasploitExploit code |
| CVE-2025-34120 | LimeSurvey LimeSurvey+ -+ unauthenticated arbitrary file download via Serialized Backup Payload | 8.7CNA v4.0 | 1.8% | 2025-07-16 | Fix |
| CVE-2025-34119 | EasyCafe Server Remote File Disclosure via Opcode 0x43 | 8.8CNA v4.0 | 2.2% | 2025-07-16 | Exploit code |
| CVE-2025-34118 | Linknat VOS Manager path traversal File Disclosure | 8.7CNA v4.0 | 2.1% | 2025-07-16 | |
| CVE-2025-34117 | Netcore / Netis Routers RCE via UDP Port 53413 backdoor | 9.3CNA v4.0 | 20.8% | 2025-07-16 | MetasploitExploit code |
| CVE-2025-32874 | Kaseya Rapid Fire Tools Network Detective inadequate encryption strength | 7.5CISA ADP v3.1 | 0.1% | 2025-07-16 | |
| CVE-2025-32574 | WPGYM WordPress plugin SQL injection | 8.5CNA v3.1 | 0.3% | 2025-07-16 | |
| CVE-2025-32353 | Kaseya Rapid Fire Tools Network Detective cleartext storage of sensitive information | 8.2CISA ADP v3.1 | 0.1% | 2025-07-16 | |
| CVE-2025-31427 | Invico - WordPress Consulting Business theme cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-07-16 | |
| CVE-2025-31422 | Visual Art Gallery WordPress theme PHP object injection | 8.8CNA v3.1 | 0.5% | 2025-07-16 | |
| CVE-2025-31072 | Ofiz - Business Consulting WordPress theme cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-07-16 | |
| CVE-2025-31070 | HTML5 Radio Player - WPBakery Page Builder Addon WordPress plugin arbitrary file download | 7.5CNA v3.1 | 0.5% | 2025-07-16 | Fix |
| CVE-2025-31055 | Electrician - Electrical Service WordPress theme cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-07-16 | |
| CVE-2025-30973 | CoSchool LMS WordPress plugin PHP object injection | 9.8CNA v3.1 | 0.5% | 2025-07-16 | |
| CVE-2025-30959 | WordPress Product XML Feed Manager for WooCommerce plugin broken access control | 6.5CNA v3.1 | 0.3% | 2025-07-16 | Fix |
| CVE-2025-30955 | ListingEasy WordPress theme reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-07-16 | |
| CVE-2025-30949 | Site Chat on Telegram WordPress plugin PHP object injection | 9.8CNA v3.1 | 0.5% | 2025-07-16 | Fix |
| CVE-2025-30936 | Torod WordPress plugin SQL injection | 9.3CNA v3.1 | 0.4% | 2025-07-16 | |
| CVE-2025-29009 | WordPress Medical Prescription Attachment Plugin for WooCommerce arbitrary file upload | 10.0CNA v3.1 | 0.5% | 2025-07-16 | Exploit code |
| CVE-2025-29000 | Multi-language Responsive Contact Form WordPress plugin broken access control | 7.5CNA v3.1 | 0.4% | 2025-07-16 | |
| CVE-2025-28982 | WP Pipes WordPress plugin SQL injection | 9.8v3.1 | 0.4% | 2025-07-16 | |
| CVE-2025-28965 | WordPress URL Shortener plugin broken access control | 8.6CNA v3.1 | 0.3% | 2025-07-16 | |
| CVE-2025-28961 | WordPress URL Shortener plugin PHP object injection | 9.8CNA v3.1 | 0.5% | 2025-07-16 | |
| CVE-2025-28959 | WordPress URL Shortener plugin SQL injection | 9.3CNA v3.1 | 0.4% | 2025-07-16 | |
| CVE-2025-28955 | Easy Video Player Wordpress and WooCommerce theme arbitrary file download | 7.5CNA v3.1 | 0.5% | 2025-07-16 | |
| CVE-2025-27465 | Xen x86: Incorrect stubs exception handling for flags recovery | 4.3CISA ADP v3.1 | 0.6% | 2025-07-16 | Fix |
| CVE-2025-24779 | Yogi WordPress theme PHP object injection | 8.8CNA v3.1 | 0.5% | 2025-07-16 | Fix |
| CVE-2025-24777 | Hillter WordPress theme PHP object injection | 8.8CNA v3.1 | 0.5% | 2025-07-16 | |
| CVE-2025-24759 | WordPress WP-BusinessDirectory plugin SQL injection | 9.3CNA v3.1 | 0.4% | 2025-07-16 | Fix |
| CVE-2025-22227 | Authentication leak on Redirect with Reactor Netty HTTP client | 6.1CNA v3.1 | 0.4% | 2025-07-16 | Fix |
| CVE-2025-20337 | Cisco Identity Services Engine injection | 10.0CNA v3.1 | 74.5% | 2025-07-16 | KEVEmerging ThreatsFix |
| CVE-2025-20288 | Cisco Unified Intelligence Center server-side request forgery | 5.8CNA v3.1 | 0.3% | 2025-07-16 | Fix |
| CVE-2025-20285 | Cisco Identity Services Engine IP Access Restriction feature vulnerability | 4.1CNA v3.1 | 0.4% | 2025-07-16 | Fix |
| CVE-2025-20284 | Cisco Identity Services Engine Authenticated remote code execution | 6.5CNA v3.1 | 25.1% | 2025-07-16 | Fix |
| CVE-2025-20283 | Cisco Identity Services Engine Authenticated remote code execution | 6.5CNA v3.1 | 13.2% | 2025-07-16 | Fix |
| CVE-2025-20274 | Cisco Unified Intelligence Center arbitrary file upload | 6.3CNA v3.1 | 0.4% | 2025-07-16 | Fix |
| CVE-2025-20272 | Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure blind SQL injection | 4.3CNA v3.1 | 0.3% | 2025-07-16 | Fix |
| CVE-2025-7703 | TECNO tech.palm.id improper authentication | 3.1CISA ADP v3.1 | 0.3% | 2025-07-16 | |
| CVE-2025-7699 | An improper access control vulnerability was found in the EZ Sync Manager of ADM | 7.1CNA v4.0 | 0.3% | 2025-07-16 | Fix |
| CVE-2025-7673 | Zyxel VMG8825-T50K firmware buffer overflow | 9.8CNA v3.1 | 0.5% | 2025-07-16 | Fix |
| CVE-2025-7359 | Counter live visitors for WooCommerce WordPress plugin arbitrary file deletion | 8.2CNA v3.1 | 0.5% | 2025-07-16 | Fix |
| CVE-2025-7357 | Plaintext storage of a password in LITEON IC48A and IC80A EV Chargers | 8.7CNA v4.0 | 0.4% | 2025-07-16 | Fix |
| CVE-2025-7035 | Media Library Assistant WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-07-16 | Fix |
| CVE-2025-6993 | Ultimate WP Mail - missing authorization to Authenticated privilege escalation | 8.8v3.1 | 0.5% | 2025-07-16 | Fix |
| CVE-2025-6983 | Clickjacking vulnerability on the management web application of TP-LINK Archer C1200 | 5.1CNA v4.0 | 0.4% | 2025-07-16 | |
| CVE-2025-6982 | Hard-coded DES Decryption Keys in TP-Link Archer C50 V3/V4/V5 and C20 V5 | 6.9CNA v4.0 | 0.3% | 2025-07-16 | Fix |
| CVE-2025-6977 | ProfileGrid User Profiles, Groups and Communities WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.3% | 2025-07-16 | Fix |
| CVE-2025-6747 | Avada (Fusion) Builder WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-07-16 | Fix |
| CVE-2025-6043 | Malcure Malware Scanner #1 Toolset for WordPress Malware Removal plugin arbitrary file deletion | 8.1CNA v3.1 | 0.6% | 2025-07-16 | Fix |
| CVE-2025-5994 | NLnet Labs Unbound cache poisoning via the ECS-enabled Rebirthday Attack | 8.7CNA v4.0 | 0.2% | 2025-07-16 | Fix |
| CVE-2025-5845 | Affiliate Reviews WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-07-16 | Fix |
| CVE-2025-5843 | Brandfolder WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-07-16 | Fix |
| CVE-2025-5284 | Master Addons WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-07-16 | Fix |
| CVE-2025-3871 | Broken access control leads to limited denial of service in GoAnywhere MFT | 5.3CNA v3.1 | 0.3% | 2025-07-16 | Fix |
| CVE-2025-2800 | WP Event Manager WordPress plugin unauthenticated stored cross-site scripting via organizer_name | 6.1NVD v3.1 | 0.3% | 2025-07-16 | Fix |
| CVE-2025-2799 | WP Event Manager WordPress plugin authenticated (Administrator+) stored cross-site scripting | 4.8v3.1 | 0.2% | 2025-07-16 | Fix |
| CVE-2025-53959 | JetBrains YouTrack missing authorization | 7.6CNA v3.1 | 0.3% | 2025-07-15 | Fix |
| CVE-2025-53906 | Vim has path traversal issue with zip.Vim and special crafted zip archives | 4.1CNA v3.1 | 0.8% | 2025-07-15 | Fix |
| CVE-2025-53905 | Vim has path traversial issue with tar.Vim and special crafted tar files | 4.1CNA v3.1 | 0.3% | 2025-07-15 | Fix |
| CVE-2025-53903 | the-scratch-channel.github.io the Scratch Channel has potential cross-site scripting (XSS) | 1.3CNA v4.0 | 0.3% | 2025-07-15 | |
| CVE-2025-53895 | ZITADEL has broken authN and authZ in session API and resulting session tokens | 7.7CNA v4.0 | 0.4% | 2025-07-15 | Fix |
| CVE-2025-53893 | File Browser file read endpoint vulnerability | 7.7CNA v4.0 | 0.4% | 2025-07-15 | |
| CVE-2025-53891 | TimeLineOfficial Time-Line TIME LINE has Improper File Validation in Upload Section | 4.3CNA v3.1 | 0.4% | 2025-07-15 | Fix |
| CVE-2025-53890 | pyLoad vulnerable to remote code execution through js2py onCaptchaResult | 9.8CNA v3.1 | 1.3% | 2025-07-15 | Fix |
| CVE-2025-53889 | Directus missing permission checks for manual trigger Flows | 6.5CNA v3.1 | 0.4% | 2025-07-15 | Fix |
| CVE-2025-53887 | Directus's exact version number is exposed by the OpenAPI Spec | 5.3CNA v3.1 | 1.0% | 2025-07-15 | NucleiFix |
| CVE-2025-53886 | Directus doesn't redact tokens in Flow logs | 4.5CNA v3.1 | 0.4% | 2025-07-15 | Fix |
| CVE-2025-53885 | Directus doesn't redact sensitive user data when logging via event hooks | 4.2CNA v3.1 | 0.2% | 2025-07-15 | Fix |
| CVE-2025-53839 | DRACOON Branding service vulnerable to cross-site scripting | 4.0CNA v3.1 | 0.2% | 2025-07-15 | Fix |
| CVE-2025-53836 | XWiki Rendering is vulnerable to RCE attacks when processing nested macros | 10.0CNA v3.1 | 0.6% | 2025-07-15 | Fix |
| CVE-2025-53826 | FileBrowser has Insecure JWT Handling which allows Session Replay Attacks after Logout | 7.7CNA v4.0 | 0.5% | 2025-07-15 | |
| CVE-2025-53622 | DSpace has path traversal vulnerability in Simple Archive Format package import | 5.2CNA v3.1 | 0.5% | 2025-07-15 | Fix |
| CVE-2025-53621 | DSpace vulnerable to XML external entity injection in import | 6.9CNA v3.1 | 0.4% | 2025-07-15 | Fix |
| CVE-2025-53032 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 0.5% | 2025-07-15 | Fix |
| CVE-2025-53031 | Oracle Financial Services Analytical Applications Infrastructure information disclosure | 5.3CNA v3.1 | 0.3% | 2025-07-15 | Fix |
| CVE-2025-53030 | Oracle VM VirtualBox Core component unauthorized data access | 6.0CNA v3.1 | 0.3% | 2025-07-15 | Fix |
| CVE-2025-53029 | Oracle VM VirtualBox Core component information disclosure | 2.3CNA v3.1 | 0.2% | 2025-07-15 | Fix |
| CVE-2025-53028 | Oracle VM VirtualBox Core component takeover | 8.2CNA v3.1 | 0.3% | 2025-07-15 | Fix |
| CVE-2025-53027 | Oracle VM VirtualBox Core component takeover | 8.2CNA v3.1 | 0.3% | 2025-07-15 | Fix |
| CVE-2025-53026 | Oracle VM VirtualBox Core component unauthorized data access | 6.0CNA v3.1 | 0.3% | 2025-07-15 | Fix |
| CVE-2025-53025 | Oracle VM VirtualBox Core component unauthorized data access | 6.0CNA v3.1 | 0.3% | 2025-07-15 | Fix |
| CVE-2025-53024 | Oracle VM VirtualBox Core component takeover | 8.2CNA v3.1 | 0.3% | 2025-07-15 | Fix |
| CVE-2025-53023 | Oracle MySQL Server Replication component denial of service | 4.9CNA v3.1 | 0.6% | 2025-07-15 | Fix |
| CVE-2025-52379 | Nexxt Solutions NCM-X1800 Mesh Router firmware update feature command injection | 5.4CISA ADP v3.1 | 15.7% | 2025-07-15 | Emerging Threats |
| CVE-2025-52378 | Nexxt Solutions NCM-X1800 Mesh Router device alias field vulnerability | 5.4CISA ADP v3.1 | 17.2% | 2025-07-15 | Emerging Threats |
| CVE-2025-52377 | Nexxt Solutions NCM-X1800 Mesh Router ping and traceroute function command injection | 5.4CISA ADP v3.1 | 14.4% | 2025-07-15 | Emerging Threats |
| CVE-2025-52376 | Nexxt Solutions NCM-X1800 Mesh Router firmware open telnet endpoint authentication bypass | 9.8CISA ADP v3.1 | 13.8% | 2025-07-15 | |
| CVE-2025-52082 | NETGEAR XR300 stack-based buffer overflow | 6.5CISA ADP v3.1 | 0.3% | 2025-07-15 | |
| CVE-2025-52081 | NETGEAR XR300 stack-based buffer overflow | 6.5CISA ADP v3.1 | 0.3% | 2025-07-15 | |
| CVE-2025-52080 | NETGEAR XR300 stack-based buffer overflow | 6.5CISA ADP v3.1 | 0.3% | 2025-07-15 | |
| CVE-2025-50819 | beiyuouo arxiv-daily thru path traversal | 7.1CISA ADP v3.1 | 0.3% | 2025-07-15 | |
| CVE-2025-50108 | Oracle Hyperion Financial Reporting Workspace component unauthorized data modification | 5.4CNA v3.1 | 0.2% | 2025-07-15 | Fix |
| CVE-2025-50107 | Oracle E-Business Suite Universal Work Queue unauthorized data modification | 6.1CNA v3.1 | 0.3% | 2025-07-15 | Fix |
| CVE-2025-50106 | Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition 2D component takeover | 8.1CNA v3.1 | 0.7% | 2025-07-15 | Fix |
| CVE-2025-50105 | Oracle E-Business Suite Universal Work Queue unauthorized data access | 8.1CNA v3.1 | 0.4% | 2025-07-15 | Fix |
| CVE-2025-50104 | Oracle MySQL Server DDL component denial of service | 2.7CNA v3.1 | 0.5% | 2025-07-15 | Fix |
| CVE-2025-50103 | Oracle MySQL Server Security LDAP Auth component denial of service | 4.4CNA v3.1 | 0.4% | 2025-07-15 | Fix |
| CVE-2025-50102 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 0.5% | 2025-07-15 | Fix |
| CVE-2025-50101 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 0.5% | 2025-07-15 | Fix |
| CVE-2025-50100 | Oracle MySQL Server Thread Pooling component denial of service | 2.2CNA v3.1 | 0.4% | 2025-07-15 | Fix |
| CVE-2025-50099 | Oracle MySQL Server InnoDB component denial of service | 4.9CNA v3.1 | 0.5% | 2025-07-15 | Fix |
| CVE-2025-50098 | Oracle MySQL Server Optimizer component denial of service | 2.7CNA v3.1 | 0.5% | 2025-07-15 | Fix |
| CVE-2025-50097 | Oracle MySQL Server Security Encryption component denial of service | 4.9CNA v3.1 | 0.5% | 2025-07-15 | Fix |
| CVE-2025-50096 | Oracle MySQL Server InnoDB component denial of service | 4.4CNA v3.1 | 0.2% | 2025-07-15 | Fix |
| CVE-2025-50095 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 0.5% | 2025-07-15 | Fix |
| CVE-2025-50094 | Oracle MySQL Server DDL component denial of service | 4.9CNA v3.1 | 0.6% | 2025-07-15 | Fix |
| CVE-2025-50093 | Oracle MySQL Server DDL component denial of service | 4.9CNA v3.1 | 0.6% | 2025-07-15 | Fix |
| CVE-2025-50092 | Oracle MySQL Server InnoDB component denial of service | 4.9CNA v3.1 | 0.6% | 2025-07-15 | Fix |
| CVE-2025-50091 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 0.6% | 2025-07-15 | Fix |
| CVE-2025-50090 | Oracle E-Business Suite Applications Framework unauthorized data modification | 5.4CNA v3.1 | 0.2% | 2025-07-15 | Fix |
| CVE-2025-50089 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 0.6% | 2025-07-15 | Fix |
| CVE-2025-50088 | Oracle MySQL Server InnoDB component denial of service | 4.9CNA v3.1 | 0.6% | 2025-07-15 | Fix |
| CVE-2025-50087 | Oracle MySQL Server Optimizer component unauthorized data modification | 4.9CNA v3.1 | 0.5% | 2025-07-15 | Fix |
| CVE-2025-50086 | Oracle MySQL Server components services component denial of service | 4.9CNA v3.1 | 0.6% | 2025-07-15 | Fix |
| CVE-2025-50085 | Oracle MySQL Server InnoDB component unauthorized data modification | 5.5CNA v3.1 | 0.5% | 2025-07-15 | Fix |
| CVE-2025-50084 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 0.6% | 2025-07-15 | Fix |
| CVE-2025-50083 | Oracle MySQL Server Optimizer component denial of service | 6.5CNA v3.1 | 0.6% | 2025-07-15 | Fix |
| CVE-2025-50082 | Oracle MySQL Server Optimizer component denial of service | 6.5CNA v3.1 | 0.6% | 2025-07-15 | Fix |
| CVE-2025-50081 | Oracle MySQL Client mysqldump component unauthorized data modification | 3.1CNA v3.1 | 0.3% | 2025-07-15 | Fix |
| CVE-2025-50080 | Oracle MySQL Server Stored Procedure component denial of service | 4.9CNA v3.1 | 0.6% | 2025-07-15 | Fix |
| CVE-2025-50079 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 0.6% | 2025-07-15 | Fix |
| CVE-2025-50078 | Oracle MySQL Server DML component denial of service | 6.5CNA v3.1 | 0.6% | 2025-07-15 | Fix |
| CVE-2025-50077 | Oracle MySQL Server InnoDB component denial of service | 4.9CNA v3.1 | 0.6% | 2025-07-15 | Fix |
| CVE-2025-50076 | Oracle MySQL Server DML component denial of service | 6.5CNA v3.1 | 0.6% | 2025-07-15 | Fix |
| CVE-2025-50073 | Oracle WebLogic Server Web Container component unauthorized data modification | 6.1CNA v3.1 | 0.3% | 2025-07-15 | Fix |
| CVE-2025-50072 | Oracle WebLogic Server Core component unauthorized data modification | 4.0CNA v3.1 | 0.2% | 2025-07-15 | Fix |
| CVE-2025-50071 | Oracle E-Business Suite Applications Framework unauthorized data modification | 6.4CNA v3.1 | 0.3% | 2025-07-15 | Fix |
| CVE-2025-50070 | Oracle JDBC improper access control | 5.3CNA v3.1 | 0.1% | 2025-07-15 | Fix |
| CVE-2025-50069 | Oracle Database Server improper privilege management | 7.7CNA v3.1 | 0.4% | 2025-07-15 | Fix |
| CVE-2025-50068 | Oracle MySQL Cluster General component takeover | 6.7CNA v3.1 | 0.2% | 2025-07-15 | Fix |
| CVE-2025-50067 | Oracle Application Express open redirect | 9.0CNA v3.1 | 0.3% | 2025-07-15 | Fix |
| CVE-2025-50066 | Oracle Database Server improper privilege management | 2.7CNA v3.1 | 0.3% | 2025-07-15 | Fix |
| CVE-2025-50065 | Oracle GraalVM for JDK Native Image component denial of service | 3.7CNA v3.1 | 0.3% | 2025-07-15 | Fix |
| CVE-2025-50064 | Oracle WebLogic Server Core component unauthorized data modification | 4.8CNA v3.1 | 0.2% | 2025-07-15 | Fix |
| CVE-2025-50063 | Oracle Java SE takeover | 7.3CNA v3.1 | 0.3% | 2025-07-15 | Fix |
| CVE-2025-50062 | Oracle PeopleSoft Enterprise HCM Global Payroll Core unauthorized data access | 8.1CNA v3.1 | 0.3% | 2025-07-15 | Fix |
| CVE-2025-50061 | Oracle Primavera P6 Enterprise Project Portfolio Management unauthorized data modification | 5.4CNA v3.1 | 0.2% | 2025-07-15 | Fix |
| CVE-2025-50060 | Oracle BI Publisher Web Server component unauthorized data access | 8.1CNA v3.1 | 0.3% | 2025-07-15 | Fix |
| CVE-2025-50059 | Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition unauthorized data access | 8.6CNA v3.1 | 0.6% | 2025-07-15 | Fix |
| CVE-2025-49841 | GHSL-2025-053: GPT-SoVITS deserialization of untrusted data | 9.8NVD v3.1 | 0.7% | 2025-07-15 | |
| CVE-2025-49840 | GHSL-2025-052: GPT-SoVITS deserialization of untrusted data | 9.8NVD v3.1 | 0.7% | 2025-07-15 | |
| CVE-2025-49839 | GHSL-2025-051: GPT-SoVITS deserialization of untrusted data | 9.8NVD v3.1 | 0.7% | 2025-07-15 | |
| CVE-2025-49838 | GHSL-2025-050: GPT-SoVITS deserialization of untrusted data | 9.8NVD v3.1 | 0.7% | 2025-07-15 | |
| CVE-2025-49837 | GHSL-2025-049: GPT-SoVITS deserialization of untrusted data | 9.8NVD v3.1 | 0.7% | 2025-07-15 | |
| CVE-2025-49836 | GHSL-2025-048: GPT-SoVITS command injection | 9.8NVD v3.1 | 3.3% | 2025-07-15 | |
| CVE-2025-49835 | GHSL-2025-047: GPT-SoVITS command injection | 9.8NVD v3.1 | 3.4% | 2025-07-15 | |
| CVE-2025-49834 | GHSL-2025-046: GPT-SoVITS command injection | 9.8NVD v3.1 | 3.3% | 2025-07-15 | |
| CVE-2025-49833 | GHSL-2025-045: GPT-SoVITS command injection | 9.8NVD v3.1 | 3.4% | 2025-07-15 | |
| CVE-2025-49831 | CyberArk Conjur IAM authenticator authentication bypass | 9.1CNA v4.0 | 1.2% | 2025-07-15 | Fix |
| CVE-2025-49830 | Conjur OSS and Secrets Manager, Self-Hosted vulnerable to path traversal and file disclosure | 7.1CNA v4.0 | 0.6% | 2025-07-15 | Fix |
| CVE-2025-49829 | Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) missing validations | 6.0CNA v4.0 | 0.4% | 2025-07-15 | Fix |
| CVE-2025-49828 | Conjur OSS and Secrets Manager, Self-Hosted vulnerable to remote code execution | 8.6CNA v4.0 | 2.1% | 2025-07-15 | Fix |
| CVE-2025-49827 | Conjur OSS and Secrets Manager, Self-Hosted vulnerable to Bypass of IAM Authenticator | 9.1CNA v4.0 | 1.4% | 2025-07-15 | Fix |
| CVE-2025-48795 | Apache CXF: Denial of service and sensitive data exposure in logs | 5.6CISA ADP v3.1 | 0.7% | 2025-07-15 | Fix |
| CVE-2025-41239 | VMware ESXi, Workstation, Fusion and Tools vSockets information disclosure | 7.1CNA v3.1 | 3.0% | 2025-07-15 | Fix |
| CVE-2025-41238 | VMware ESXi, Workstation and Fusion PVSCSI controller out-of-bounds write | 9.3CNA v3.1 | 0.5% | 2025-07-15 | Fix |
| CVE-2025-41237 | VMware ESXi VMCI integer-underflow | 9.3CNA v3.1 | 0.5% | 2025-07-15 | Fix |
| CVE-2025-41236 | VMware ESXi, Workstation and Fusion VMXNET3 virtual network adapter integer overflow | 9.3CNA v3.1 | 2.6% | 2025-07-15 | Fix |
| CVE-2025-34116 | IPFire Core Update 101 proxy.cgi RCE | 8.7CNA v4.0 | 1.8% | 2025-07-15 | MetasploitExploit codeFix |
| CVE-2025-34115 | OP5 Monitor Authenticated command execution via command_test.php | 8.7CNA v4.0 | 3.5% | 2025-07-15 | MetasploitExploit code |
| CVE-2025-34113 | Tiki Wiki CMS authenticated command injection in Calendar module | 8.7CNA v4.0 | 3.0% | 2025-07-15 | MetasploitExploit codeFix |
| CVE-2025-34112 | Riverbed SteelCentral NetProfiler / NetExpress RCE | 10.0CNA v4.0 | 2.9% | 2025-07-15 | MetasploitExploit code |
| CVE-2025-34111 | Tiki Wiki ELFinder unauthenticated file upload RCE | 9.8v3.1 | 2.2% | 2025-07-15 | MetasploitExploit codeFix |
| CVE-2025-34110 | ColoradoFTP Server Build 8 path traversal information disclosure | 9.3CNA v4.0 | 1.9% | 2025-07-15 | MetasploitExploit code |
| CVE-2025-34109 | Panda Security PSEvents.exe Insecure DLL Loading privilege escalation | 8.5CNA v4.0 | 0.4% | 2025-07-15 | Exploit codeFix |
| CVE-2025-34108 | Disk Pulse Enterprise Login stack buffer overflow | 8.6CNA v4.0 | 1.4% | 2025-07-15 | MetasploitExploit code |
| CVE-2025-34107 | WinaXe FTP Client remote buffer overflow | 8.7CNA v4.0 | 1.2% | 2025-07-15 | Exploit code |
| CVE-2025-34106 | PDF Shaper/ buffer overflow via Convert to Image feature | 8.4CNA v4.0 | 0.4% | 2025-07-15 | Exploit code |
| CVE-2025-34105 | DiskBoss Enterprise stack-based buffer overflow RCE | 10.0CNA v4.0 | 1.6% | 2025-07-15 | MetasploitExploit code |
| CVE-2025-34104 | Piwik Authenticated RCE via Custom plugin upload | 9.4CNA v4.0 | 1.8% | 2025-07-15 | Exploit codeFix |
| CVE-2025-34103 | WePresent WiPG-1000 unauthenticated command injection in via rdfs.cgi | 9.3CNA v4.0 | 6.0% | 2025-07-15 | MetasploitExploit codeFix |
| CVE-2025-34068 | Samsung WLAN AP WEA453e unauthenticated RCE via command1 and command2 parameters | 9.3CNA v4.0 | 1.0% | 2025-07-15 | Fix |
| CVE-2025-33097 | IBM QRadar SIEM cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-07-15 | Fix |
| CVE-2025-30762 | Oracle WebLogic Server Core component unauthorized data access | 7.5CNA v3.1 | 0.4% | 2025-07-15 | Fix |
| CVE-2025-30761 | Oracle Java SE, Oracle GraalVM Enterprise Edition Scripting component unauthorized data modification | 5.9CNA v3.1 | 5.2% | 2025-07-15 | Fix |
| CVE-2025-30760 | Oracle JD Edwards EnterpriseOne Tools Web Runtime SEC component unauthorized data modification | 5.4CNA v3.1 | 0.2% | 2025-07-15 | Fix |
| CVE-2025-30759 | Oracle Business Intelligence Enterprise Edition unauthorized data modification | 6.1CNA v3.1 | 0.2% | 2025-07-15 | Fix |
| CVE-2025-30758 | Oracle Siebel CRM End User interface component information disclosure | 5.3CNA v3.1 | 0.3% | 2025-07-15 | Fix |
| CVE-2025-30756 | Oracle REST Data Services cross-site request forgery | 6.1CNA v3.1 | 0.1% | 2025-07-15 | Fix |
| CVE-2025-30754 | Oracle Java SE improper access control | 4.8CNA v3.1 | 0.4% | 2025-07-15 | Fix |
| CVE-2025-30753 | Oracle WebLogic Server Core component denial of service | 6.5CNA v3.1 | 0.4% | 2025-07-15 | Fix |
| CVE-2025-30752 | Oracle Java SE, Oracle GraalVM for JDK Compiler component denial of service | 3.7CNA v3.1 | 0.6% | 2025-07-15 | Fix |
| CVE-2025-30751 | Oracle Database Server incorrect authorization | 8.8CNA v3.1 | 0.4% | 2025-07-15 | Fix |
| CVE-2025-30750 | Oracle Database Server incorrect authorization | 2.4CNA v3.1 | 0.3% | 2025-07-15 | Fix |
| CVE-2025-30749 | Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition 2D component takeover | 8.1CNA v3.1 | 1.3% | 2025-07-15 | Fix |
| CVE-2025-30748 | Oracle PeopleSoft Enterprise PeopleTools unauthorized data modification | 6.1CNA v3.1 | 0.2% | 2025-07-15 | Fix |
| CVE-2025-30747 | Oracle PeopleSoft Enterprise PeopleTools PIA Core Technology component information disclosure | 4.3CNA v3.1 | 0.3% | 2025-07-15 | Fix |
| CVE-2025-30746 | Oracle E-Business Suite iStore Shopping Cart component unauthorized data modification | 6.1CNA v3.1 | 0.2% | 2025-07-15 | Fix |
| CVE-2025-30745 | Oracle MES for Process Manufacturing Device Integration component unauthorized data modification | 6.1CNA v3.1 | 0.2% | 2025-07-15 | Fix |
| CVE-2025-30744 | Oracle E-Business Suite Mobile Field Service unauthorized data access | 8.1CNA v3.1 | 0.3% | 2025-07-15 | Fix |
| CVE-2025-30743 | Oracle Lease and Finance Management Internal Operations component unauthorized data access | 8.1CNA v3.1 | 0.3% | 2025-07-15 | Fix |
| CVE-2025-30739 | Oracle E-Business Suite CRM Technical Foundation unauthorized data modification | 5.5CNA v3.1 | 0.3% | 2025-07-15 | Fix |
| CVE-2025-30483 | Dell ECS sensitive information in log files | 5.5CNA v3.1 | 0.1% | 2025-07-15 | Fix |
| CVE-2025-26186 | OS4ED Opensis SQL injection | 8.1CISA ADP v3.1 | 0.5% | 2025-07-15 | |
| CVE-2025-24477 | Fortinet FortiOS A heap-based buffer overflow | 4.0CNA v3.1 | 0.2% | 2025-07-15 | Fix |
| CVE-2025-7672 | Stored-XSS possibility in Namo CrossEditor4 | 2.3CNA v4.0 | 0.2% | 2025-07-15 | Fix |
| CVE-2025-7667 | josxha Restrict File Access restrict-file-access page cross-site request forgery | 8.1CNA v3.1 | 0.3% | 2025-07-15 | |
| CVE-2025-7657 | Google Chrome WebRTC use-after-free | 8.8CISA ADP v3.1 | 0.5% | 2025-07-15 | Fix |
| CVE-2025-7656 | Google Chrome V8 integer overflow | 8.8CISA ADP v3.1 | 11.0% | 2025-07-15 | Fix |
| CVE-2025-7367 | Strong Testimonials WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-07-15 | Fix |
| CVE-2025-7360 | HasThemes HT Contact Form handle_files_upload function path traversal | 9.8v3.1 | 1.4% | 2025-07-15 | Fix |
| CVE-2025-7341 | HasThemes HT Contact Form temp_file_delete function vulnerability | 9.8v3.1 | 1.1% | 2025-07-15 | Fix |
| CVE-2025-7340 | HasThemes HT Contact Form Widget for Elementor temp_file_upload function arbitrary file upload | 9.8CNA v3.1 | 1.7% | 2025-07-15 | Exploit codeFix |
| CVE-2025-7042 | Dassault Systèmes SOLIDWORKS eDrawings IPT file reading procedure use-after-free | 7.8CNA v3.1 | 0.2% | 2025-07-15 | |
| CVE-2025-6981 | GitHub Enterprise Server Contractors API incorrect authorization | 5.3CNA v4.0 | 0.3% | 2025-07-15 | Fix |
| CVE-2025-6974 | Dassault Systèmes SOLIDWORKS eDrawings JT file reading procedure uninitialized variable use | 7.8CNA v3.1 | 0.2% | 2025-07-15 | |
| CVE-2025-6973 | Dassault Systèmes SOLIDWORKS eDrawings JT file reading procedure use-after-free | 7.8CNA v3.1 | 0.2% | 2025-07-15 | |
| CVE-2025-6972 | Dassault Systèmes SOLIDWORKS eDrawings CATPRODUCT file reading procedure use-after-free | 7.8CNA v3.1 | 0.2% | 2025-07-15 | |
| CVE-2025-6971 | Dassault Systèmes SOLIDWORKS eDrawings CATPRODUCT file reading procedure use-after-free | 7.8CNA v3.1 | 0.2% | 2025-07-15 | |
| CVE-2025-6965 | SQLitePCLRaw.lib.e_sqlite3 has a vulnerable dependency on SQLite | 7.7NVD v3.1 | 73.3% | 2025-07-15 | Exploit codeFix |
| CVE-2025-6558 | Google Chromium ANGLE and GPU improper input validation | 8.8CISA ADP v3.1 | 10.9% | 2025-07-15 | KEVExploit codeFix |
| CVE-2025-6265 | Zyxel NWA50AX PRO firmware file_upload-cgi CGI program path traversal | 7.2CNA v3.1 | 0.6% | 2025-07-15 | Fix |
| CVE-2025-5394 | Bearsthemes Alone theme plugin installer function missing authorization | 9.8CNA v3.1 | 51.3% | 2025-07-15 | Reported exploitedNucleiExploit codeFix |
| CVE-2025-5393 | Alone WordPress theme arbitrary file deletion | 9.1CNA v3.1 | 0.6% | 2025-07-15 | Fix |
| CVE-2025-4369 | Companion Auto Update WordPress plugin stored cross-site scripting | 5.5CNA v3.1 | 0.3% | 2025-07-15 | Fix |
| CVE-2025-3621 | Remote code execution in ProTNS ActADUR | 9.4CNA v4.0 | 0.7% | 2025-07-15 | Fix |
| CVE-2025-0831 | Dassault Systèmes SOLIDWORKS eDrawings JT file reading procedure out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2025-07-15 | |
| CVE-2025-53835 | XWiki Rendering is vulnerable to XSS attacks through insecure XHTML syntax | 9.1CNA v3.1 | 0.4% | 2025-07-14 | Fix |
| CVE-2025-53834 | Caido Toast vulnerable to reflected cross-site scripting | 6.3CNA v3.1 | 0.2% | 2025-07-14 | Fix |
| CVE-2025-53833 | LaRecipe is vulnerable to server-side template injection attacks | 10.0CNA v3.1 | 10.1% | 2025-07-14 | NucleiExploit codeFix |
| CVE-2025-53825 | Dokploy's Preview Deployments are vulnerable to remote code execution | 9.4CNA v3.1 | 0.6% | 2025-07-14 | Fix |
| CVE-2025-53824 | WeGIA ReflectedCross-Site Scripting (XSS) vulnerability in endpoint cadastro_pet.php parameter msg | 6.4CNA v4.0 | 0.2% | 2025-07-14 | Fix |
| CVE-2025-53823 | WeGIA vulnerable to SQL injection in `processa_deletar_socio.php` parameter `id_socio` | 10.0CNA v4.0 | 0.5% | 2025-07-14 | Fix |
| CVE-2025-53822 | LabRedesCefetRJ WeGIA relatorio_geracao.php reflected cross-site scripting | 6.5CNA v3.1 | 0.3% | 2025-07-14 | Fix |
| CVE-2025-53821 | WeGIA vulnerable to open redirect in endpoint control.php parameter nextPage | 4.7CNA v3.1 | 0.2% | 2025-07-14 | Fix |
| CVE-2025-53820 | WeGIA vulnerable to cross-site scripting (XSS) Reflected via endpoint index.php parameter erro | 6.5CNA v3.1 | 0.3% | 2025-07-14 | Fix |
| CVE-2025-53819 | Nix's privilege dropping to build user broke for macOS | 7.9CNA v3.1 | 0.1% | 2025-07-14 | |
| CVE-2025-53818 | github-kanban-mcp-server command injection | 8.9CNA v4.0 | 1.4% | 2025-07-14 | |
| CVE-2025-53689 | Apache Jackrabbit: XXE vulnerability in jackrabbit-spi-commons | 8.8CISA ADP v3.1 | 0.5% | 2025-07-14 | Fix |
| CVE-2025-53643 | aio-libs aiohttp HTTP parser HTTP request smuggling | 1.7CNA v4.0 | 0.3% | 2025-07-14 | Fix |
| CVE-2025-53640 | Indico vulnerable to user enumeration via API endpoint | 5.3CNA v4.0 | 0.6% | 2025-07-14 | Exploit codeFix |
| CVE-2025-53639 | Metersphere has SQL injection vulnerability in Sorting field | 5.1CNA v4.0 | 0.4% | 2025-07-14 | Fix |
| CVE-2025-53623 | Shopify job-iteration job Iteration API is vulnerable to OS command injection attack | 8.1CNA v4.0 | 0.8% | 2025-07-14 | Fix |
| CVE-2025-53101 | ImageMagick has stack buffer overflow in image.c | 7.4CNA v3.1 | 0.9% | 2025-07-14 | Fix |
| CVE-2025-53019 | ImageMagick has memory leak in magick stream | 3.7CNA v3.1 | 0.5% | 2025-07-14 | Fix |
| CVE-2025-53015 | ImageMagick has XMP profile write that triggers hang due to unbounded loop | 7.5CNA v3.1 | 0.8% | 2025-07-14 | Fix |
| CVE-2025-53014 | ImageMagick has heap buffer overflow in InterpretImageFilename | 3.7CNA v3.1 | 0.7% | 2025-07-14 | Fix |
| CVE-2025-52363 | Tenda CP3 Pro Firmware hard-coded credentials | 6.8CISA ADP v3.1 | 0.2% | 2025-07-14 | |
| CVE-2025-51660 | SEMCMS SQL injection | 5.4v3.1 | 0.2% | 2025-07-14 | |
| CVE-2025-51659 | SEMCMS SQL injection | 5.4v3.1 | 0.2% | 2025-07-14 | |
| CVE-2025-51658 | SEMCMS SQL injection | 5.4v3.1 | 0.2% | 2025-07-14 | |
| CVE-2025-51657 | SEMCMS SQL injection | 5.4v3.1 | 0.2% | 2025-07-14 | |
| CVE-2025-51656 | SEMCMS SQL injection | 5.4v3.1 | 0.2% | 2025-07-14 | |
| CVE-2025-51655 | SEMCMS SQL injection | 5.4v3.1 | 0.2% | 2025-07-14 | |
| CVE-2025-51654 | SEMCMS SQL injection | 5.4v3.1 | 0.2% | 2025-07-14 | |
| CVE-2025-51653 | SEMCMS SQL injection | 5.4v3.1 | 0.2% | 2025-07-14 | |
| CVE-2025-51652 | SEMCMS SQL injection | 5.4v3.1 | 0.2% | 2025-07-14 | |
| CVE-2025-51651 | chshcms mccms component /admin/Backups.php arbitrary file read | 5.5CISA ADP v3.1 | 0.2% | 2025-07-14 | |
| CVE-2025-51650 | qianfox FoxCMS component /controller/PicManager.php arbitrary file upload | 5.6CISA ADP v3.1 | 0.3% | 2025-07-14 | |
| CVE-2025-50756 | WAVLINK WN535K3 command injection | 9.8CISA ADP v3.1 | 1.8% | 2025-07-14 | |
| CVE-2025-29606 | py-libp2p is vulnerable to DoS attacks through use of large RSA keys | 4.3CNA v3.1 | 0.4% | 2025-07-14 | Fix |
| CVE-2025-27582 | One Identity Password Manager inclusion of untrusted functionality | 7.6CNA v3.1 | 0.2% | 2025-07-14 | Fix |
| CVE-2025-25180 | GPU DDK Insufficient validation in RGXCREATEFREELIST creates corrupt freelist | 7.8CISA ADP v3.1 | 0.1% | 2025-07-14 | Fix |
| CVE-2025-24391 | OTRS external interface vulnerability | 5.3CNA v3.1 | 0.3% | 2025-07-14 | |
| CVE-2025-7628 | YiJiuSmile kkFileViewOfficeEdit deleteFile path traversal | 8.1v3.1 | 0.8% | 2025-07-14 | |
| CVE-2025-7627 | YiJiuSmile kkFileViewOfficeEdit fileUpload unrestricted upload | 9.8v3.1 | 0.5% | 2025-07-14 | |
| CVE-2025-7626 | YiJiuSmile kkFileViewOfficeEdit onlinePreview path traversal | 7.5v3.1 | 0.6% | 2025-07-14 | |
| CVE-2025-7625 | YiJiuSmile kkFileViewOfficeEdit download path traversal | 5.3CNA v4.0 | 0.5% | 2025-07-14 | |
| CVE-2025-7620 | DSIC｜Cross-browser Components for Official Document Creation remote code execution | 8.6CNA v4.0 | 0.3% | 2025-07-14 | Fix |
| CVE-2025-7619 | WellChoose｜BatchSignCS arbitrary file write through path traversal | 8.7CNA v4.0 | 0.8% | 2025-07-14 | Fix |
| CVE-2025-7618 | A stored cross-site scripting (XSS) vulnerability exists in the File Explorer and Text Editor of ADM | 4.8CNA v4.0 | 0.3% | 2025-07-14 | Fix |
| CVE-2025-7616 | gmg137 snap7-rs Public API pthread_cond_destroy memory corruption | 7.5v3.1 | 0.4% | 2025-07-14 | |
| CVE-2025-7615 | TOTOLINK T6 HTTP POST request cstecgi.cgi clearPairCfg command injection | 8.8v3.1 | 2.4% | 2025-07-14 | |
| CVE-2025-7614 | TOTOLINK T6 HTTP POST request cstecgi.cgi delDevice command injection | 8.8v3.1 | 2.4% | 2025-07-14 | |
| CVE-2025-7613 | TOTOLINK T6 HTTP POST request cstecgi.cgi CloudSrvVersionCheck command injection | 8.8v3.1 | 2.4% | 2025-07-14 | |
| CVE-2025-7612 | code-projects Mobile Shop login.php SQL injection | 9.8v3.1 | 0.5% | 2025-07-14 | |
| CVE-2025-7611 | code-projects Wedding Reservation global.php SQL injection | 9.8v3.1 | 0.5% | 2025-07-14 | |
| CVE-2025-7610 | code-projects Electricity Billing System change_password.php SQL injection | 9.8v3.1 | 0.5% | 2025-07-14 | |
| CVE-2025-7609 | code-projects Simple Shopping Cart register.php SQL injection | 9.8v3.1 | 0.5% | 2025-07-14 | |
| CVE-2025-7608 | code-projects Simple Shopping Cart userlogin.php SQL injection | 9.8v3.1 | 0.5% | 2025-07-14 | |
| CVE-2025-7607 | code-projects Simple Shopping Cart save_order.php SQL injection | 9.8v3.1 | 0.5% | 2025-07-14 | |
| CVE-2025-7606 | code-projects AVL Rooms city.php SQL injection | 9.8v3.1 | 0.5% | 2025-07-14 | |
| CVE-2025-7605 | code-projects AVL Rooms profile.php SQL injection | 9.8v3.1 | 0.5% | 2025-07-14 | |
| CVE-2025-7604 | PHPGurukul Hospital Management System user-login.php SQL injection | 9.8v3.1 | 0.4% | 2025-07-14 | |
| CVE-2025-7603 | D-Link DI-8100 HTTP request jingx.asp stack-based overflow | 8.6CNA v4.0 | 1.2% | 2025-07-14 | |
| CVE-2025-7602 | D-Link DI-8100 HTTP request arp_sys.asp stack-based overflow | 8.6CNA v4.0 | 1.2% | 2025-07-14 | |
| CVE-2025-7601 | PHPGurukul Online Library Management System student-history.php cross-site scripting | 5.4v3.1 | 0.3% | 2025-07-14 | |
| CVE-2025-7600 | PHPGurukul Online Library Management System student-history.php SQL injection | 8.8v3.1 | 0.4% | 2025-07-14 | |
| CVE-2025-7599 | PHPGurukul Dairy Farm Shop Management System invoice.php SQL injection | 8.8v3.1 | 0.4% | 2025-07-14 | |
| CVE-2025-7598 | Tenda AX1803 setWifiFilterCfg formSetWifiMacFilterCfg stack-based overflow | 8.7CNA v4.0 | 0.9% | 2025-07-14 | |
| CVE-2025-7597 | Tenda AX1803 setMacFilterCfg formSetMacFilterCfg stack-based overflow | 8.7CNA v4.0 | 0.9% | 2025-07-14 | |
| CVE-2025-7596 | Tenda FH1205 WifiExtraSet formWifiExtraSet stack-based overflow | 8.7CNA v4.0 | 0.9% | 2025-07-14 | Emerging Threats |
| CVE-2025-7595 | code-projects Job Diary view-cad.php SQL injection | 9.8v3.1 | 0.4% | 2025-07-14 | |
| CVE-2025-7594 | code-projects Job Diary view-emp.php SQL injection | 9.8v3.1 | 0.4% | 2025-07-14 | |
| CVE-2025-7593 | code-projects Job Diary view-all.php SQL injection | 9.8v3.1 | 0.4% | 2025-07-14 | |
| CVE-2025-7592 | PHPGurukul Dairy Farm Shop Management System invoices.php SQL injection | 8.8v3.1 | 0.4% | 2025-07-14 | |
| CVE-2025-7591 | PHPGurukul Dairy Farm Shop Management System view-invoice.php SQL injection | 8.8v3.1 | 0.4% | 2025-07-14 | |
| CVE-2025-7590 | PHPGurukul Dairy Farm Shop Management System edit-category.php SQL injection | 8.8v3.1 | 0.4% | 2025-07-14 | |
| CVE-2025-7589 | PHPGurukul Dairy Farm Shop Management System edit-company.php SQL injection | 8.8v3.1 | 0.4% | 2025-07-14 | |
| CVE-2025-7588 | PHPGurukul Dairy Farm Shop Management System edit-product.php SQL injection | 8.8v3.1 | 0.4% | 2025-07-14 | |
| CVE-2025-7587 | code-projects Online Appointment Booking System cover.php SQL injection | 9.8v3.1 | 0.5% | 2025-07-14 | |
| CVE-2025-7586 | Tenda AC500 setWtpData formSetAPCfg stack-based overflow | 8.7CNA v4.0 | 1.2% | 2025-07-14 | |
| CVE-2025-7585 | PHPGurukul Online Fire Reporting System manage-site.php SQL injection | 8.8v3.1 | 0.4% | 2025-07-14 | |
| CVE-2025-7584 | PHPGurukul Online Fire Reporting System add-team.php SQL injection | 8.8v3.1 | 0.4% | 2025-07-14 | |
| CVE-2025-7583 | PHPGurukul Online Fire Reporting System all-requests.php SQL injection | 8.8v3.1 | 0.4% | 2025-07-14 | |
| CVE-2025-7582 | PHPGurukul Online Fire Reporting System assigned-requests.php SQL injection | 8.8v3.1 | 0.4% | 2025-07-14 | |
| CVE-2025-7581 | code-projects Voting System positions_edit.php SQL injection | 8.8v3.1 | 0.4% | 2025-07-14 | |
| CVE-2025-7580 | code-projects Voting System positions_row.php SQL injection | 8.8v3.1 | 0.4% | 2025-07-14 | |
| CVE-2025-7579 | chinese-poetry server.js redos | 5.3CNA v4.0 | 0.4% | 2025-07-14 | |
| CVE-2025-7578 | Teledyne FLIR FB-Series O/FLIR FH-Series ID runcmd.sh sendCommand command injection | 2.3CNA v4.0 | 1.4% | 2025-07-14 | |
| CVE-2025-7577 | Teledyne FLIR FB-Series O/FLIR FH-Series ID hard-coded password | 6.3CNA v4.0 | 0.4% | 2025-07-14 | |
| CVE-2025-7576 | Teledyne FLIR FB-Series O/FLIR FH-Series ID Production tools production.html access control | 6.9CNA v4.0 | 0.4% | 2025-07-14 | |
| CVE-2025-7575 | Zavy86 WikiDocs submit.php image_delete_ajax path traversal | 5.1CNA v4.0 | 0.4% | 2025-07-14 | Fix |
| CVE-2025-7574 | LB-LINK BL-WR9000 Web interface lighttpd.cgi restore improper authentication | 9.3CNA v4.0 | 0.8% | 2025-07-14 | |
| CVE-2025-7573 | LB-LINK BL-WR9000 lighttpd.cgi bs_GetManPwd information disclosure | 6.9CNA v4.0 | 0.4% | 2025-07-14 | |
| CVE-2025-7572 | LB-LINK BL-WR9000 lighttpd.cgi bs_GetHostInfo information disclosure | 6.9CNA v4.0 | 0.4% | 2025-07-14 | |
| CVE-2025-7571 | UTT HiPER 840G aspApBasicConfigUrcp buffer overflow | 8.7CNA v4.0 | 0.9% | 2025-07-14 | |
| CVE-2025-7570 | UTT HiPER 840G aspRemoteApConfTempSend buffer overflow | 8.7CNA v4.0 | 1.2% | 2025-07-14 | |
| CVE-2025-7569 | Bigotry OneBase think_exception.tpl parse_args cross-site scripting | 5.1CNA v4.0 | 0.3% | 2025-07-14 | |
| CVE-2025-7568 | qianfox FoxCMS Video.php batchCope SQL injection | 8.8v3.1 | 0.4% | 2025-07-14 | |
| CVE-2025-7567 | ShopXO header.html cross-site scripting | 5.3CNA v4.0 | 0.4% | 2025-07-14 | |
| CVE-2025-7566 | jshERP SystemConfigController.java exportExcelByParam path traversal | 7.2v3.1 | 0.7% | 2025-07-14 | |
| CVE-2025-7565 | LB-LINK BL-AC3600 Web Management interface lighttpd.cgi geteasycfg information disclosure | 7.5v3.1 | 0.7% | 2025-07-14 | |
| CVE-2025-7564 | LB-LINK BL-AC3600 shadow hard-coded credentials | 8.5CNA v4.0 | 0.3% | 2025-07-14 | |
| CVE-2025-7563 | PHPGurukul Online Fire Reporting System completed-requests.php SQL injection | 8.8v3.1 | 0.4% | 2025-07-14 | |
| CVE-2025-7562 | PHPGurukul Online Fire Reporting System new-requests.php SQL injection | 8.8v3.1 | 0.4% | 2025-07-14 | |
| CVE-2025-7561 | PHPGurukul Online Fire Reporting System team-ontheway-requests.php SQL injection | 8.8v3.1 | 0.4% | 2025-07-14 | |
| CVE-2025-7560 | PHPGurukul Online Fire Reporting System workin-progress-requests.php SQL injection | 8.8v3.1 | 0.4% | 2025-07-14 | |
| CVE-2025-7559 | PHPGurukul Online Fire Reporting System bwdates-report-result.php SQL injection | 8.8v3.1 | 0.4% | 2025-07-14 | |
| CVE-2025-7558 | code-projects Voting System positions_add.php SQL injection | 8.8v3.1 | 0.4% | 2025-07-14 | Exploit code |
| CVE-2025-7557 | code-projects Voting System voters_row.php SQL injection | 8.8v3.1 | 0.4% | 2025-07-14 | |
| CVE-2025-7556 | code-projects Voting System voters_edit.php SQL injection | 8.8v3.1 | 0.4% | 2025-07-14 | |
| CVE-2025-7555 | code-projects Voting System voters_add.php SQL injection | 8.8v3.1 | 0.4% | 2025-07-14 | |
| CVE-2025-7554 | Sapido RB-1802 URL Filtering page urlfilter.asp cross-site scripting | 4.8CNA v4.0 | 0.3% | 2025-07-14 | |
| CVE-2025-7553 | D-Link DIR-818LW System Time page os command injection | 7.2v3.1 | 3.7% | 2025-07-14 | |
| CVE-2025-7552 | Dromara Northstar Path AuthorizationInterceptor.java preHandle access control | 5.3CNA v4.0 | 0.3% | 2025-07-14 | Fix |
| CVE-2025-7551 | Tenda FH1201 PPTPDClient fromPptpUserAdd stack-based overflow | 8.7CNA v4.0 | 1.2% | 2025-07-14 | |
| CVE-2025-7519 | polkit XML policy parser out-of-bounds write | 6.7CNA v3.1 | 0.2% | 2025-07-14 | Fix |
| CVE-2025-7451 | HGiga｜iSherlock OS command injection | 9.3CNA v4.0 | 1.4% | 2025-07-14 | Fix |
| CVE-2025-7380 | A stored cross-site scripting (XSS) vulnerability exists in the Access Control of ADM | 4.8CNA v4.0 | 0.3% | 2025-07-14 | Fix |
| CVE-2025-1384 | OMRON Sysmac Studio Software least privilege violation | 7.0CNA v3.1 | 0.2% | 2025-07-14 | |
| CVE-2025-53865 | Roundup is vulnerable to XSS through interactions between URLs and issue tracker templates | 6.4CNA v3.1 | 0.2% | 2025-07-13 | Fix |
| CVE-2025-7550 | Tenda FH1201 GstDhcpSetSer fromGstDhcpSetSer stack-based overflow | 8.7CNA v4.0 | 0.9% | 2025-07-13 | |
| CVE-2025-7549 | Tenda FH1201 L7Prot frmL7ProtForm stack-based overflow | 8.7CNA v4.0 | 0.9% | 2025-07-13 | |
| CVE-2025-7548 | Tenda FH1201 SafeEmailFilter formSafeEmailFilter stack-based overflow | 8.7CNA v4.0 | 0.9% | 2025-07-13 | |
| CVE-2025-7547 | Campcodes Online Movie Theater Seat Reservation System save_movie function unrestricted file upload | 9.8v3.1 | 0.5% | 2025-07-13 | |
| CVE-2025-7546 | GNU Binutils elf.c bfd_elf_set_group_contents out-of-bounds write | 7.8NVD v3.1 | 0.2% | 2025-07-13 | Fix |
| CVE-2025-7545 | GNU Binutils objcopy.c copy_section heap-based overflow | 7.8NVD v3.1 | 0.3% | 2025-07-13 | Fix |
| CVE-2025-7544 | Tenda AC1206 setMacFilterCfg formSetMacFilterCfg stack-based overflow | 8.7CNA v4.0 | 1.7% | 2025-07-13 | |
| CVE-2025-7543 | PHPGurukul User Registration and Login and User Management System manage-users.php SQL injection | 8.8v3.1 | 0.4% | 2025-07-13 | |
| CVE-2025-7542 | PHPGurukul User Registration and Login and User Management System user-profile.php SQL injection | 9.8v3.1 | 0.5% | 2025-07-13 | |
| CVE-2025-7541 | code-projects Online Appointment Booking System get_town.php SQL injection | 9.8v3.1 | 0.5% | 2025-07-13 | |
| CVE-2025-7540 | code-projects Online Appointment Booking System getclinic.php SQL injection | 9.8v3.1 | 0.5% | 2025-07-13 | |
| CVE-2025-7539 | code-projects Online Appointment Booking System getdoctordaybooking.php SQL injection | 9.8v3.1 | 0.5% | 2025-07-13 | |
| CVE-2025-7538 | Campcodes Sales and Inventory System product_update.php unrestricted upload | 9.8v3.1 | 0.5% | 2025-07-13 | |
| CVE-2025-7537 | Campcodes Sales and Inventory System product_update.php SQL injection | 9.8v3.1 | 0.4% | 2025-07-13 | |
| CVE-2025-7536 | Campcodes Sales and Inventory System receipt_credit.php SQL injection | 9.8v3.1 | 0.6% | 2025-07-13 | |
| CVE-2025-7535 | Campcodes Sales and Inventory System reprint_cash.php SQL injection | 9.8v3.1 | 0.6% | 2025-07-13 | |
| CVE-2025-7534 | PHPGurukul Student Result Management System GET parameter notice-details.php SQL injection | 9.8v3.1 | 0.5% | 2025-07-13 | |
| CVE-2025-7533 | code-projects Job Diary view-details.php SQL injection | 9.8v3.1 | 0.4% | 2025-07-13 | |
| CVE-2025-7532 | Tenda FH1202 webExcptypemanFilter fromwebExcptypemanFilter stack-based overflow | 8.7CNA v4.0 | 1.2% | 2025-07-13 | |
| CVE-2025-7531 | Tenda FH1202 PPTPUserSetting fromPptpUserSetting stack-based overflow | 8.7CNA v4.0 | 1.1% | 2025-07-13 | |
| CVE-2025-7530 | Tenda FH1202 PPTPDClient fromPptpUserAdd stack-based overflow | 8.7CNA v4.0 | 0.9% | 2025-07-13 | |
| CVE-2025-7529 | Tenda FH1202 Natlimit fromNatlimit stack-based overflow | 8.7CNA v4.0 | 0.9% | 2025-07-13 | |
| CVE-2025-7528 | Tenda FH1202 GstDhcpSetSer fromGstDhcpSetSer stack-based overflow | 8.7CNA v4.0 | 0.9% | 2025-07-13 |