CVE-2025 list

CVE-2025 records published in July 2025

Page three of four: records 2,001 to 3,000 of the 3,582 published in July 2025, newest first. The first page carries the figures for July 2025.

CVE-2025 records published in July 2025, newest first: records 2,001 to 3,000 of 3,582
CVE Summary CVSS EPSS Published Signals
CVE-2025-7527Tenda FH1202 AdvSetWan fromAdvSetWan stack-based overflow8.7CNA v4.00.9%2025-07-13
CVE-2025-7525TOTOLINK T6 HTTP POST request cstecgi.cgi setTracerouteCfg command injection8.8v3.12.9%2025-07-13
CVE-2025-7524TOTOLINK T6 HTTP POST request cstecgi.cgi setDiagnosisCfg command injection8.8v3.12.9%2025-07-13
CVE-2025-7523Jinher OA DelTemp.aspx XML external entity reference9.8v3.10.7%2025-07-13
CVE-2025-7522PHPGurukul Vehicle Parking Management System bwdates-reports-details.php SQL injection8.8v3.10.4%2025-07-13
CVE-2025-7521PHPGurukul Vehicle Parking Management System index.php SQL injection9.8v3.10.6%2025-07-13
CVE-2025-7520PHPGurukul Vehicle Parking Management System manage-category.php SQL injection8.8v3.10.4%2025-07-13
CVE-2025-7517code-projects Online Appointment Booking System getDay.php SQL injection9.8v3.10.4%2025-07-13
CVE-2025-7516code-projects Online Appointment Booking System cancelbookingpatient.php SQL injection9.8v3.10.4%2025-07-13
CVE-2025-7515code-projects Online Appointment Booking System ulocateus.php SQL injection9.8v3.10.4%2025-07-13
CVE-2025-7514code-projects Modern Bag contact-list.php SQL injection9.8v3.10.4%2025-07-13
CVE-2025-7513code-projects Modern Bag slideupdate.php SQL injection9.8v3.10.4%2025-07-13
CVE-2025-7512code-projects Modern Bag contact-back.php SQL injection9.8v3.10.5%2025-07-13
CVE-2025-7511code-projects Chat System update_account.php SQL injection6.5v3.10.3%2025-07-13
CVE-2025-7510code-projects Modern Bag productadd_back.php SQL injection9.8v3.10.4%2025-07-13
CVE-2025-7509code-projects Modern Bag slide.php SQL injection9.8v3.10.4%2025-07-13
CVE-2025-7508code-projects Modern Bag product-update.php SQL injection9.8v3.10.5%2025-07-13
CVE-2025-7012Cato Networks Linux Client local privilege escalation via Symlink8.6CNA v4.00.2%2025-07-13Fix
CVE-2025-6491Null pointer dereference in PHP SOAP extension via Large XML Namespace Prefix5.9CNA v3.11.0%2025-07-13Fix
CVE-2025-1735PHP pgsql extension does not check for errors during escaping5.9CNA v3.11.0%2025-07-13Fix
CVE-2025-1220PHP null byte termination in hostnames3.7CNA v3.10.6%2025-07-13Fix
CVE-2025-36104IBM Storage Scale information disclosure6.5CNA v3.10.3%2025-07-12Fix
CVE-2025-24294resolv vulnerable to DoS via insufficient DNS domain name length validation7.5CISA ADP v3.10.6%2025-07-12Fix
CVE-2025-7518RSFirewall! WordPress plugin authenticated (Admin+) arbitrary file read4.9CNA v3.10.4%2025-07-12Fix
CVE-2025-7506Tenda FH451 HTTP POST Request Natlimit fromNatlimit stack-based overflow8.7CNA v4.00.9%2025-07-12
CVE-2025-7505Tenda FH451 HTTP POST Request L7Prot frmL7ProtForm stack-based overflow8.7CNA v4.00.9%2025-07-12
CVE-2025-7504Friends Authenticated (Subscriber+) PHP object injection8.8v3.10.7%2025-07-12Fix
CVE-2025-7492PHPGurukul Vehicle Parking Management System manage-incomingvehicle.php SQL injection8.8v3.10.4%2025-07-12
CVE-2025-7491PHPGurukul Vehicle Parking Management System manage-outgoingvehicle.php SQL injection8.8v3.10.4%2025-07-12
CVE-2025-7490PHPGurukul Vehicle Parking Management System reg-users.php SQL injection8.8v3.10.4%2025-07-12
CVE-2025-7489PHPGurukul Vehicle Parking Management System search-vehicle.php SQL injection8.8v3.10.4%2025-07-12
CVE-2025-7488JoeyBling SpringBoot_MyBatisPlus download path traversal5.3CNA v4.00.4%2025-07-12
CVE-2025-7487JoeyBling SpringBoot_MyBatisPlus upload SysFileController unrestricted upload5.3CNA v4.00.3%2025-07-12
CVE-2025-7485Open5GS SCTP Partial message recv_handler assertion4.8CNA v4.00.2%2025-07-12
CVE-2025-7484PHPGurukul Vehicle Parking Management System view-outgoingvehicle-detail.php SQL injection8.8v3.10.4%2025-07-12
CVE-2025-7483PHPGurukul Vehicle Parking Management System forgot-password.php SQL injection9.8v3.10.5%2025-07-12
CVE-2025-7482PHPGurukul Vehicle Parking Management System print.php SQL injection8.8v3.10.4%2025-07-12
CVE-2025-7481PHPGurukul Vehicle Parking Management System profile.php SQL injection8.8v3.10.4%2025-07-12
CVE-2025-7480PHPGurukul Vehicle Parking Management System signup.php SQL injection9.8v3.10.5%2025-07-12
CVE-2025-7479PHPGurukul Vehicle Parking Management System view--detail.php SQL injection8.8v3.10.4%2025-07-12
CVE-2025-7478code-projects Modern Bag category-list.php SQL injection9.8v3.10.5%2025-07-12
CVE-2025-7477code-projects Simple Car Rental System add_cars.php unrestricted upload7.2v3.10.5%2025-07-12
CVE-2025-7476code-projects Simple Car Rental System approve.php SQL injection9.8v3.10.5%2025-07-12
CVE-2025-7475code-projects Simple Car Rental System pay.php SQL injection9.8v3.10.5%2025-07-12
CVE-2025-7474code-projects Job Diary search.php SQL injection9.8v3.10.4%2025-07-12
CVE-2025-7471code-projects Modern Bag login-back.php SQL injection9.8v3.10.4%2025-07-12
CVE-2025-7470Campcodes Sales and Inventory System product_add.php unrestricted upload9.8v3.10.5%2025-07-12
CVE-2025-7469Campcodes Sales and Inventory System product_add.php SQL injection9.8v3.10.4%2025-07-12
CVE-2025-7468Tenda FH1201 HTTP POST request fromSafeUrlFilter buffer overflow8.7CNA v4.00.9%2025-07-12
CVE-2025-7467code-projects Modern Bag product-detail.php SQL injection9.8v3.10.5%2025-07-12
CVE-2025-74661000projects ABC Courier Management add_dealerrequest.php SQL injection9.8v3.10.5%2025-07-12
CVE-2025-7465Tenda FH1201 HTTP POST request fromRouteStatic buffer overflow8.7CNA v4.00.9%2025-07-12
CVE-2025-7464osrg GoBGP rtr.go SplitRTR out-of-bounds6.3CNA v4.00.4%2025-07-12Fix
CVE-2025-7463Tenda FH1201 HTTP POST Request AdvSetWrlsafeset formWrlsafeset buffer overflow8.7CNA v4.01.1%2025-07-12
CVE-2025-7462Artifex GhostPDL New Output File Open Error gdevpdf.c pdf_ferror null pointer dereference5.3CNA v4.00.4%2025-07-12Fix
CVE-2025-7461code-projects Modern Bag action.php SQL injection9.8v3.10.5%2025-07-12Exploit code
CVE-2025-6423BeeTeam368 Extensions WordPress plugin authenticated (Subscriber+) arbitrary file upload8.8CNA v3.10.6%2025-07-12Fix
CVE-2025-6058WPBookit WordPress plugin unauthenticated arbitrary file upload9.8CNA v3.16.0%2025-07-12NucleiExploit codeFix
CVE-2025-6057WPBookit WordPress plugin authenticated (Subscriber+) arbitrary file upload8.8CNA v3.10.7%2025-07-12Fix
CVE-2025-5199LPE on Multipass for macOS7.3CNA v3.10.2%2025-07-12Fix
CVE-2025-1313Nokri - Job Board WordPress theme privilege escalation8.8CNA v3.10.4%2025-07-12Fix
CVE-2025-53864Nimbus JOSE + JWT is vulnerable to DoS attacks when processing deeply nested JSON5.8CNA v3.10.9%2025-07-11Fix
CVE-2025-53862Red Hat Ansible Automation Platform automation hub API information disclosure3.5CNA v3.10.2%2025-07-11
CVE-2025-53861Red Hat Ansible Automation Platform 2 aap: Sensitive cookie(s) set without security flags3.1CNA v3.10.1%2025-07-11
CVE-2025-53642PSU HAXcms logout function insufficient session expiration4.8CNA v3.10.2%2025-07-11Fix
CVE-2025-53641gitroomhq postiz-app postiz allows header mutation in middleware facilitates resulting in SSRF8.2CNA v3.10.3%2025-07-11Fix
CVE-2025-53636Open OnDemand Shell App closed websocket DoS5.4CNA v3.10.3%2025-07-11Fix
CVE-2025-53519Advantech iView cross-site scripting5.1CNA v4.00.2%2025-07-11Fix
CVE-2025-53515Advantech iView SQL injection8.7CNA v4.00.6%2025-07-11Fix
CVE-2025-53509Advantech iView argument injection7.1CNA v4.00.3%2025-07-11Fix
CVE-2025-53475Advantech iView SQL injection8.7CNA v4.07.4%2025-07-11Fix
CVE-2025-53471Emerson ValveLink Products improper input validation5.9CNA v4.00.2%2025-07-11Fix
CVE-2025-53397Advantech iView cross-site scripting6.1v3.10.2%2025-07-11Fix
CVE-2025-52994phpThumb is vulnerable to command injection through its gif_outputAsJpeg function4.9CNA v3.10.7%2025-07-11
CVE-2025-52989Juniper Networks Junos OS Evolved improper neutralization6.8CNA v4.00.1%2025-07-11Fix
CVE-2025-52988Junos OS and Junos OS Evolved: Privilege escalation to root via CLI command request system logout8.4CNA v4.00.4%2025-07-11Fix
CVE-2025-52986Juniper Networks Junos OS routing protocol daemon memory leak6.8CNA v4.00.1%2025-07-11Fix
CVE-2025-52985Juniper Networks Junos OS Evolved firewall filter prefix-list matching vulnerability6.9CNA v4.00.3%2025-07-11Fix
CVE-2025-52984Juniper Networks Junos OS routing protocol daemon null pointer dereference8.2CNA v4.00.4%2025-07-11Fix
CVE-2025-52983Junos OS: After removing SSH public key authentication root can still log in8.6CNA v4.00.6%2025-07-11Fix
CVE-2025-52982Junos OS: MX Series: When specific SIP packets are processed the MS-MPC will crash8.2CNA v4.00.4%2025-07-11Fix
CVE-2025-52981Junos OS: SRX Series: Sequence of specific PIM packets causes a flowd crash8.7CNA v4.00.5%2025-07-11Fix
CVE-2025-52980Junos OS: SRX300 Series: Rpd will crash upon receiving a specific, valid BGP UPDATE message8.7CNA v4.00.5%2025-07-11Fix
CVE-2025-52964Juniper Networks Junos OS Routing protocol daemon reachable assertion7.1CNA v4.00.3%2025-07-11Fix
CVE-2025-52963Junos OS: A low-privileged user can disable an interface6.8CNA v4.00.1%2025-07-11Fix
CVE-2025-52958Juniper Networks Junos OS routing protocol daemon reachable assertion6.0CNA v4.00.2%2025-07-11Fix
CVE-2025-52955Juniper Networks Junos OS routing protocol daemon incorrect buffer size calculation7.1CNA v4.00.3%2025-07-11Fix
CVE-2025-52954Juniper Networks Junos OS Evolved internal virtual routing and forwarding missing authorization8.5CNA v4.00.2%2025-07-11Fix
CVE-2025-52953Juniper Networks Junos OS routing protocol daemon expected behavior violation7.1CNA v4.00.3%2025-07-11Fix
CVE-2025-52952Juniper Networks Junos OS connectivity fault management out-of-bounds write7.1CNA v4.00.3%2025-07-11Fix
CVE-2025-52951Junos OS: IPv6 firewall filter fails to match payload-protocol6.9CNA v4.00.4%2025-07-11Fix
CVE-2025-52950Juniper Security Director: Insufficient authorization for multiple endpoints in web interface6.4CNA v4.00.4%2025-07-11Fix
CVE-2025-52949Juniper Networks Junos OS routing protocol daemon improper length parameter handling7.1CNA v4.00.3%2025-07-11Fix
CVE-2025-52948Juniper Networks Junos OS Berkeley Packet Filter improper exception handling8.2CNA v4.00.5%2025-07-11Fix
CVE-2025-52947Juniper Networks Junos OS route processing improper exception handling7.1CNA v4.00.3%2025-07-11Fix
CVE-2025-52946Juniper Networks Junos OS routing protocol daemon use-after-free8.7CNA v4.00.5%2025-07-11Fix
CVE-2025-52579Emerson ValveLink Products cleartext storage of sensitive information in memory9.3CNA v4.00.4%2025-07-11Fix
CVE-2025-52577Advantech iView SQL injection8.7CNA v4.00.6%2025-07-11Fix
CVE-2025-52459Advantech iView argument injection7.1CNA v4.00.3%2025-07-11Fix
CVE-2025-52089TOTOLINK N300RB Firmware missing authentication8.8CISA ADP v3.19.7%2025-07-11Exploit code
CVE-2025-51591JGM Pandoc v3.6.4 server-side request forgery3.7CISA ADP v3.10.7%2025-07-11Exploit code
CVE-2025-50125Schneider Electric EcoStruxure™ IT Data Center Expert server-side request forgery6.3CNA v4.00.5%2025-07-11Fix
CVE-2025-50124Schneider Electric EcoStruxure™ IT Data Center Expert improper privilege management7.2CNA v4.00.2%2025-07-11Fix
CVE-2025-50123Schneider Electric EcoStruxure™ IT Data Center Expert code injection7.2CNA v4.00.4%2025-07-11Fix
CVE-2025-50122Schneider Electric EcoStruxure™ IT Data Center Expert insufficient entropy8.9CNA v4.00.2%2025-07-11Fix
CVE-2025-50121Schneider Electric EcoStruxure™ IT Data Center Expert OS command injection9.5CNA v4.022.1%2025-07-11Fix
CVE-2025-50109Emerson ValveLink Products cleartext storage of sensitive information in memory8.5CNA v4.00.1%2025-07-11Fix
CVE-2025-48924Apache Commons Lang is vulnerable to uncontrolled recursion when processing long inputs5.3CISA ADP v3.12.6%2025-07-11Fix
CVE-2025-48891Advantech iView SQL injection7.2CNA v4.00.3%2025-07-11Fix
CVE-2025-48496Emerson ValveLink Products uncontrolled search path element5.9CNA v4.00.2%2025-07-11Fix
CVE-2025-47964Microsoft Edge (Chromium-based) spoofing5.4CNA v3.10.4%2025-07-11Fix
CVE-2025-47963Microsoft Edge (Chromium-based) spoofing6.3CNA v3.10.6%2025-07-11Fix
CVE-2025-47182Microsoft Edge (Chromium-based) elevation of privilege5.6CNA v3.10.3%2025-07-11Fix
CVE-2025-46704Advantech iView path traversal5.3CNA v4.05.7%2025-07-11Fix
CVE-2025-46358Emerson ValveLink Products protection mechanism failure8.5CNA v4.00.2%2025-07-11Fix
CVE-2025-45582GNU tar path traversal4.1CNA v3.10.5%2025-07-11Fix
CVE-2025-43856immich allows account hijacking through oauth27.3CNA v4.00.4%2025-07-11Fix
CVE-2025-41442Advantech iView cross-site scripting5.1CNA v4.00.2%2025-07-11Fix
CVE-2025-30661Junos OS: Low-privileged user can cause script to run as root, leading to privilege escalation8.5CNA v4.00.2%2025-07-11Fix
CVE-2025-30403mvfst QUIC session message handling vulnerability8.1CISA ADP v3.10.3%2025-07-11Fix
CVE-2025-30402ExecuTorch vulnerable to heap-based buffer overflow attack8.1CISA ADP v3.10.4%2025-07-11Fix
CVE-2025-30026Axis Communications AXIS Camera Station authentication bypass5.3CNA v4.00.6%2025-07-11Fix
CVE-2025-30025Axis Communications AXIS Device Manager deserialization of untrusted data4.8CNA v4.00.2%2025-07-11Fix
CVE-2025-30024Axis Communications AXIS Device Manager improper certificate validation6.8CNA v3.10.4%2025-07-11Fix
CVE-2025-30023Axis Communications AXIS Camera Station Pro deserialization of untrusted data9.0CNA v3.10.6%2025-07-11Fix
CVE-2025-7503Shenzhen Liandian Communication Technology V380 IP Camera / AppFHE1_V1.0.6.0 hard-coded credentials10.0CNA v4.00.6%2025-07-11
CVE-2025-7460TOTOLINK T6 HTTP POST request cstecgi.cgi setWiFiAclRules buffer overflow8.7CNA v4.00.9%2025-07-11
CVE-2025-7459code-projects Mobile Shop EditMobile.php SQL injection9.8v3.10.5%2025-07-11
CVE-2025-7457Campcodes Online Movie Theater Seat Reservation System manage_movie.php SQL injection9.8v3.10.5%2025-07-11
CVE-2025-7456Campcodes Online Movie Theater Seat Reservation System reserve.php SQL injection9.8v3.10.5%2025-07-11
CVE-2025-7455Campcodes Online Movie Theater Seat Reservation System manage_reserve.php SQL injection9.8v3.10.5%2025-07-11
CVE-2025-7454Campcodes Online Movie Theater Seat Reservation System manage_theater.php SQL injection9.8v3.10.5%2025-07-11
CVE-2025-7453saltbo zpan JSON Web Token token.go NewToken hard-coded password6.3CNA v4.00.4%2025-07-11Fix
CVE-2025-7452kone-net go-chat endpoint file_controller.go GetFile path traversal5.3CNA v4.00.4%2025-07-11
CVE-2025-7450letseeqiji gorobbs API user.go ResetUserAvatar path traversal5.3CNA v4.00.4%2025-07-11
CVE-2025-7442WPGYM - Wordpress Gym Management System plugin unauthenticated SQL injection7.5CNA v3.10.3%2025-07-11Fix
CVE-2025-7436Campcodes Online Recruitment Management System ajax.php SQL injection9.8v3.10.5%2025-07-11
CVE-2025-7435LiveHelperChat lhc-php-resque Extension List list cross-site scripting5.1CNA v4.00.3%2025-07-11
CVE-2025-7434Tenda FH451 POST request addressNat fromAddressNat stack-based overflow8.7CNA v4.00.9%2025-07-11
CVE-2025-7423Tenda O3V2 httpd setWrlFilterList formWifiMacFilterSet stack-based overflow8.7CNA v4.00.9%2025-07-11
CVE-2025-7422Tenda O3V2 httpd setNetworkService setAutoReboot stack-based overflow8.7CNA v4.00.9%2025-07-11
CVE-2025-7421Tenda O3V2 httpd operateMacFilter fromMacFilterModify stack-based overflow8.7CNA v4.00.9%2025-07-11
CVE-2025-7420Tenda O3V2 httpd setWrlBasicInfo formWifiBasicSet stack-based overflow8.7CNA v4.00.9%2025-07-11
CVE-2025-7401Premium Age Verification / Restriction for WordPress WordPress plugin arbitrary file read9.8CNA v3.10.6%2025-07-11Exploit code
CVE-2025-7029GIGABYTE UEFI firmware overclock configuration SMI handler privilege escalation8.2CISA ADP v3.10.3%2025-07-11
CVE-2025-7028GIGABYTE UEFI firmware flash management SMI handler vulnerability7.8CISA ADP v3.10.2%2025-07-11
CVE-2025-7027GIGABYTE UEFI-GenericComponentSmmEntry CommandRcx1 SMI handler vulnerability8.2CISA ADP v3.10.2%2025-07-11
CVE-2025-7026GIGABYTE UEFI-GenericComponentSmmEntry SMM arbitrary Write via Unchecked RBX Pointer in CommandRcx08.2CISA ADP v3.10.2%2025-07-11
CVE-2025-6851Broken Link Notifier WordPress plugin unauthenticated server-side request forgery6.5NVD v3.10.7%2025-07-11NucleiFix
CVE-2025-6838Broken Link Notifier WordPress plugin authenticated (Contributor+) CSV injection4.1CNA v3.10.2%2025-07-11Fix
CVE-2025-6788Schneider Electric EcoStruxure Power Monitoring Expert resource exposure5.3CNA v4.00.3%2025-07-11Fix
CVE-2025-6745WoodMart WordPress theme unauthenticated post disclosure5.3CNA v3.10.3%2025-07-11Fix
CVE-2025-6716Contest Gallery WordPress plugin authenticated (Author+) stored cross-site scripting6.4CNA v3.10.2%2025-07-11Fix
CVE-2025-6549Junos OS: SRX Series: J-Web can be exposed on additional interfaces6.9CNA v4.00.2%2025-07-11Fix
CVE-2025-6438Schneider Electric EcoStruxure™ IT Data Center Expert XML external entity injection5.9CNA v4.00.4%2025-07-11Fix
CVE-2025-6200GeoDirectory WordPress plugin Contributor+ stored XSS5.9CISA ADP v3.10.2%2025-07-11Fix
CVE-2025-6068FooGallery WordPress plugin stored cross-site scripting5.4v3.10.2%2025-07-11Fix
CVE-2025-5992Qt ICC profile parsing denial of service2.3CNA v4.00.3%2025-07-11Fix
CVE-2025-5530WPC Smart Compare for WooCommerce WordPress plugin stored cross-site scripting5.4v3.10.2%2025-07-11Fix
CVE-2025-5392GB Forms DB WordPress plugin unauthenticated remote code execution9.8CNA v3.10.9%2025-07-11Fix
CVE-2025-5241Denial of service vulnerability in MELSEC iQ-F Series5.3CNA v3.10.4%2025-07-11
CVE-2025-5028Arbitrary file deletion vulnerability in ESET product installers6.8CNA v4.00.1%2025-07-11
CVE-2025-4593WP Register Profile With Shortcode WordPress plugin sensitive information exposure6.5CNA v3.10.3%2025-07-11Fix
CVE-2025-3933Regular expression denial of service (ReDoS) in huggingface/Transformers5.3v3.10.4%2025-07-11Fix
CVE-2025-3631IBM MQ denial of service6.5CNA v3.10.4%2025-07-11Fix
CVE-2025-2942tychesoftwares Order Delivery Date for WooCommerce information disclosure4.3CISA ADP v3.10.3%2025-07-11Fix
CVE-2025-53709Access control issues impacting secure-upload service5.4CNA v3.10.2%2025-07-10Fix
CVE-2025-53637Meshtastic allows command injection in GitHub action4.1CNA v3.10.4%2025-07-10Fix
CVE-2025-53634Chall-Manager's HTTP Gateway have no header check timeout leading to potential slow loris attacks8.7CNA v4.00.5%2025-07-10Fix
CVE-2025-53633Chall-Manager's scenario decoding process does not check for zip bombs8.7CNA v4.00.5%2025-07-10Fix
CVE-2025-53632Chall-Manager's scenario decoding process does not check for zip slips8.8CNA v4.00.8%2025-07-10Exploit codeFix
CVE-2025-53630ggml-org llama.cpp integer overflow in GGUF parser can lead to heap out-of-bounds read/Write in gguf8.9CNA v4.00.3%2025-07-10Fix
CVE-2025-53629cpp-httplib Unbounded Memory Allocation in Chunked/No-Length requests vulnerability7.5CNA v3.10.6%2025-07-10Fix
CVE-2025-53628cpp-httplib does not limit the length of a line6.3CNA v4.00.5%2025-07-10Fix
CVE-2025-53626pdfme has sandbox escape and prototype pollution vulnerabilities in pdfme expression evaluation6.1CNA v3.10.3%2025-07-10Fix
CVE-2025-53625DynamicPageList3 exposes hidden/suppressed usernames8.7CNA v4.00.5%2025-07-10Fix
CVE-2025-53549matrix-org matrix-rust-sdk matrix Rust SDK allows SQL injection in the EventCache implementation5.2CNA v4.00.3%2025-07-10Fix
CVE-2025-53542Kubernetes Headlamp allows arbitrary command injection in macOS Process headlamp@codeSign7.8CNA v3.10.6%2025-07-10Fix
CVE-2025-53506Apache Tomcat: DoS via excessive h2 streams at connection start7.5CISA ADP v3.12.0%2025-07-10Fix
CVE-2025-53503Trend Micro Cleaner One Pro privilege escalation7.8CNA v3.10.2%2025-07-10Fix
CVE-2025-53378Trend Micro Worry-Free Business Security Services A missing authentication7.6CNA v3.10.8%2025-07-10Fix
CVE-2025-53371DiscordNotifications allows DOS, SSRF, and possible RCE through requests to user-controlled URLs9.1CNA v3.10.4%2025-07-10
CVE-2025-53364parse-community parse-server parse Server exposes the data schema via GraphQL API5.3CNA v3.10.9%2025-07-10NucleiFix
CVE-2025-53020Apache HTTP Server: HTTP/2 DoS by Memory Increase7.5CISA ADP v3.14.9%2025-07-10Exploit codeFix
CVE-2025-52837Trend Micro Password Manager link following7.8CNA v3.10.2%2025-07-10Fix
CVE-2025-52521Trend Micro Security (Consumer) link following7.8CNA v3.10.4%2025-07-10Fix
CVE-2025-52520Apache Tomcat: DoS via integer overflow in multipart file upload7.5CISA ADP v3.12.1%2025-07-10Fix
CVE-2025-52473liboqs secret-dependent branching in HQC reference implementation when compiled with Clang 17-205.9CNA v3.10.2%2025-07-10Fix
CVE-2025-52434Apache Tomcat: APR/Native Connector crash leading to DoS7.5CISA ADP v3.12.0%2025-07-10Fix
CVE-2025-49812Apache HTTP Server: Mod_ssl TLS upgrade attack7.4CISA ADP v3.10.6%2025-07-10Fix
CVE-2025-49630Apache HTTP Server: Mod_proxy_http2 denial of service7.5CISA ADP v3.11.3%2025-07-10Fix
CVE-2025-49464Zoom Clients for Windows- Classic buffer overflow6.5CNA v3.10.7%2025-07-10Fix
CVE-2025-49463Zoom Clients for iOS insufficient control flow management6.5CNA v3.10.5%2025-07-10Fix
CVE-2025-49462Zoom Clients cross-site scripting3.5CNA v3.10.2%2025-07-10Fix
CVE-2025-47813Wing FTP Server information disclosure4.3CNA v3.163.1%2025-07-10KEVNucleiEmerging ThreatsKCVFix
CVE-2025-47812Wing FTP Server improper neutralization of Null Byte or NUL Character10.0CNA v3.193.9%2025-07-10KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix
CVE-2025-47811wftpserver Wing FTP Server unsafe privilege definition6.6v3.16.2%2025-07-10
CVE-2025-46835j6t git-gui git GUI can create and overwrite files for which the user has write permission8.5CNA v3.10.6%2025-07-10Fix
CVE-2025-46789Zoom Clients for Windows Classic buffer overflow6.5CNA v3.10.5%2025-07-10
CVE-2025-46788Zoom Workplace for Linux improper certificate validation7.4CNA v3.10.3%2025-07-10Fix
CVE-2025-46406A Privilege Context Switching Error (CWE-270) in the Command Center Server could allow a privileged Operator with high level access in one Division to perform limited privileged activities across the Division boundary. This issue affects Command Centre Server: 9.30 prior to 9.30.1874 (MR1), 9.205.6CNA v3.10.1%2025-07-10Fix
CVE-2025-46334j6t git-gui git GUI malicious command injection on Windows8.6CNA v3.10.3%2025-07-10Fix
CVE-2025-45662Nnproject Mpgram Web cross-site scripting6.1CISA ADP v3.10.3%2025-07-10
CVE-2025-44251Ecovacs Deebot T10 pairing process cleartext transmission of sensitive information7.5CISA ADP v3.10.2%2025-07-10
CVE-2025-44003Gallagher T-Series Readers missing resource release4.3CNA v3.10.2%2025-07-10Fix
CVE-2025-38348Linux kernel p54 Wi-Fi driver out-of-bounds write7.8v3.10.2%2025-07-10Fix
CVE-2025-38347Linux kernel F2FS filesystem vulnerability5.5v3.10.2%2025-07-10Fix
CVE-2025-38346Linux kernel ftrace kallsyms lookup use-after-free7.8CNA v3.10.2%2025-07-10Fix
CVE-2025-38345Linux kernel ACPICA operand cache memory leak5.5v3.10.2%2025-07-10Fix
CVE-2025-38344Linux kernel ACPICA parser cache memory leak5.5v3.10.2%2025-07-10Fix
CVE-2025-38343Linux kernel mt76 Wi-Fi driver vulnerability8.3CNA v3.10.2%2025-07-10Fix
CVE-2025-38342Linux kernel software node subsystem out-of-bounds read7.0CNA v3.10.2%2025-07-10Fix
CVE-2025-38341Linux kernel fbnic Ethernet driver double free7.8CNA v3.10.2%2025-07-10Fix
CVE-2025-38340Linux kernel cs_dsp firmware driver out-of-bounds read7.1v3.10.1%2025-07-10Fix
CVE-2025-38339Linux kernel powerpc BPF trampoline JIT compiler vulnerability7.8CNA v3.10.1%2025-07-10Fix
CVE-2025-38338Linux kernel NFS client empty folio handling double free7.8v3.10.2%2025-07-10Fix
CVE-2025-38337Linux kernel JBD2 journal metadata dirtying null pointer dereference5.5v3.10.2%2025-07-10Fix
CVE-2025-38336In the Linux kernel, the following vulnerability has been resolved: ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330 The controller has a hardware bug that can hard hang the system when doing ATAPI DMAs without any trace of what happened. Depending on the device attached, it can also pr5.5v3.10.2%2025-07-10Fix
CVE-2025-38335Linux kernel gpio-keys input driver interrupt handler improper locking5.5v3.10.1%2025-07-10Fix
CVE-2025-38334Linux kernel SGX enclave page reclaimer vulnerability5.5v3.10.1%2025-07-10Fix
CVE-2025-38333Linux kernel F2FS segment allocation vulnerability7.8CNA v3.10.2%2025-07-10Fix
CVE-2025-38332Linux kernel lpfc SCSI driver BIOS version handling vulnerability5.5v3.10.2%2025-07-10Fix
CVE-2025-38331Linux kernel Cortina Ethernet driver TCP offload engine denial of service7.5CNA v3.10.3%2025-07-10Fix
CVE-2025-38330Linux kernel cs_dsp firmware control cache out-of-bounds read7.1v3.10.1%2025-07-10Fix
CVE-2025-38329Linux kernel cs_dsp firmware wmfw info parsing out-of-bounds read7.1v3.10.2%2025-07-10Fix
CVE-2025-38328Linux kernel JFFS2 node reference allocation null pointer dereference5.5v3.10.2%2025-07-10Fix
CVE-2025-38327Linux kernel ftrace function graph tracer options vulnerability5.5v3.10.2%2025-07-10Fix
CVE-2025-38326In the Linux kernel, the following vulnerability has been resolved: aoe: clean device rq_list in aoedev_downdev() An aoe device's rq_list contains accepted block requests that are waiting to be transmitted to the aoe target. This queue was added as part of the conversion to blk_mq. However, the qu5.5v3.10.2%2025-07-10Fix
CVE-2025-38325Linux kernel ksmbd SMB direct transport handling denial of service9.8CNA v3.10.4%2025-07-10Fix
CVE-2025-38324Linux kernel MPLS route input handling vulnerability5.5v3.10.2%2025-07-10Fix
CVE-2025-38323Linux kernel atm use-after-free7.8v3.10.2%2025-07-10Fix
CVE-2025-38322Linux kernel Intel topdown performance monitoring denial of service5.5NVD v3.10.2%2025-07-10Fix
CVE-2025-38321Linux kernel SMB client cached directory handling vulnerability7.8CNA v3.10.2%2025-07-10Fix
CVE-2025-38320Linux kernel arm64 ptrace kernel stack accessor out-of-bounds read7.1v3.10.2%2025-07-10Fix
CVE-2025-38319Linux kernel drm/amd/pp null pointer dereference5.5v3.10.1%2025-07-10Fix
CVE-2025-38318Linux kernel arm-ni performance monitor driver vulnerability5.5v3.10.1%2025-07-10Fix
CVE-2025-38317Linux kernel ath12k debugfs interface buffer overflow7.8CNA v3.10.2%2025-07-10Fix
CVE-2025-38316Linux kernel mt7996 Wi-Fi driver null pointer dereference5.5v3.10.1%2025-07-10Fix
CVE-2025-38315Linux kernel btintel Bluetooth driver stack buffer overflow5.5v3.10.1%2025-07-10Fix
CVE-2025-38314Linux kernel virtio-pci admin command completion vulnerability7.3CNA v3.10.1%2025-07-10Fix
CVE-2025-38313Linux kernel fsl-mc bus driver double free7.8v3.10.2%2025-07-10Fix
CVE-2025-38312Linux kernel fbcvt video mode calculation divide by zero5.5NVD v3.10.2%2025-07-10Fix
CVE-2025-38311Linux kernel iavf driver deadlock5.5v3.10.1%2025-07-10Fix
CVE-2025-38310Linux kernel seg6 nexthop address validation vulnerability5.5v3.10.1%2025-07-10Fix
CVE-2025-38309Linux kernel drm/xe/vm uninitialized resource use5.5v3.10.1%2025-07-10Fix
CVE-2025-38308Linux kernel Intel AVS ASoC driver null pointer dereference5.5v3.10.1%2025-07-10Fix
CVE-2025-38307Linux kernel Intel AVS ASoC driver null pointer dereference5.5v3.10.1%2025-07-10Fix
CVE-2025-38306Linux kernel file handle decoding race condition7.8CNA v3.10.1%2025-07-10Fix
CVE-2025-38305Linux kernel PTP virtual clock vulnerability5.5v3.10.2%2025-07-10Fix
CVE-2025-38304Linux kernel Bluetooth EIR service data parsing null pointer dereference5.5v3.10.1%2025-07-10Fix
CVE-2025-38303Linux kernel Bluetooth EIR advertising data vulnerability7.8CNA v3.10.2%2025-07-10Fix
CVE-2025-38302Linux kernel zone write plug deadlock5.5v3.10.1%2025-07-10Fix
CVE-2025-38301Linux kernel ZynqMP nvmem driver null pointer dereference5.5v3.10.1%2025-07-10Fix
CVE-2025-38300Linux kernel sun8i-ce cipher driver memory leak5.5v3.10.1%2025-07-10Fix
CVE-2025-38299Linux kernel MediaTek mt8195 ASoC driver null pointer dereference5.5v3.10.1%2025-07-10Fix
CVE-2025-38298Linux kernel skx_common EDAC driver out-of-bounds write7.8v3.10.2%2025-07-10Fix
CVE-2025-38297Linux kernel energy model cost calculation divide by zero5.5v3.10.1%2025-07-10Fix
CVE-2025-38296Linux kernel ACPI platform profile driver improper initialization5.5v3.10.1%2025-07-10Fix
CVE-2025-38295Linux kernel Amlogic DDR PMU driver vulnerability7.8v3.10.2%2025-07-10Fix
CVE-2025-38294Linux kernel ath12k Wi-Fi driver null pointer dereference5.5v3.10.1%2025-07-10Fix
CVE-2025-38293Linux kernel ath11k Wi-Fi driver denial of service8.8CNA v3.10.3%2025-07-10Fix
CVE-2025-38292Linux kernel ath12k Wi-Fi driver use-after-free8.8CNA v3.10.3%2025-07-10Fix
CVE-2025-38291Linux kernel ath12k Wi-Fi driver denial of service8.8CNA v3.10.2%2025-07-10Fix
CVE-2025-38290Linux kernel ath12k Wi-Fi driver race condition8.8CNA v3.10.2%2025-07-10Fix
CVE-2025-38289Linux kernel lpfc use-after-free7.8v3.10.2%2025-07-10Fix
CVE-2025-38288Linux kernel smartpqi SCSI driver vulnerability7.8v3.10.2%2025-07-10Fix
CVE-2025-38287In the Linux kernel, the following vulnerability has been resolved: IB/cm: Drop lockdep assert and WARN when freeing old msg The send completion handler can run after cm_id has advanced to another message. The cm_id lock is not needed in this case, but a recent change re-used cm_free_priv_msg(),7.5CNA v3.10.3%2025-07-10Fix
CVE-2025-38286Linux kernel at91 out-of-bounds read7.1v3.10.2%2025-07-10Fix
CVE-2025-38285Linux kernel BPF raw tracepoint handler reachable assertion5.5NVD v3.10.2%2025-07-10Fix
CVE-2025-38284Linux kernel rtw89 PCIe driver null pointer dereference5.5NVD v3.10.2%2025-07-10Fix
CVE-2025-38283In the Linux kernel, the following vulnerability has been resolved: hisi_acc_vfio_pci: bugfix live migration function without VF device driver If the VF device driver is not loaded in the Guest OS and we attempt to perform device data migration, the address of the migrated data will be NULL. The l8.8CNA v3.10.2%2025-07-10Fix
CVE-2025-38282Linux kernel kernfs vulnerability5.5v3.10.2%2025-07-10Fix
CVE-2025-38281Linux kernel mt7996 Wi-Fi driver thermal management null pointer dereference5.5v3.10.1%2025-07-10Fix
CVE-2025-38280Linux kernel BPF JIT compiler vulnerability7.8NVD v3.10.2%2025-07-10Fix
CVE-2025-38279Linux kernel BPF verifier vulnerability7.8NVD v3.10.2%2025-07-10Fix
CVE-2025-38278Linux kernel octeontx2 QoS traffic control vulnerability7.8CNA v3.10.2%2025-07-10Fix
CVE-2025-38277Linux kernel MXIC NAND ECC engine driver use of uninitialized variable5.5v3.10.2%2025-07-10Fix
CVE-2025-38276Linux kernel DAX filesystem improper locking7.8CNA v3.10.1%2025-07-10Fix
CVE-2025-38275Linux kernel qcom-qmp-usb null pointer dereference5.5v3.10.2%2025-07-10Fix
CVE-2025-38274Linux kernel FPGA manager null pointer dereference5.5v3.10.2%2025-07-10Fix
CVE-2025-38273Linux kernel TIPC network stack use-after-free7.8CNA v3.10.2%2025-07-10Fix
CVE-2025-38272Linux kernel b53 Ethernet switch driver denial of service5.5NVD v3.10.2%2025-07-10Fix
CVE-2025-38271Linux kernel net null pointer dereference5.5v3.10.1%2025-07-10Fix
CVE-2025-38270In the Linux kernel, the following vulnerability has been resolved: net: drv: netdevsim: don't napi_complete() from netpoll netdevsim supports netpoll. Make sure we don't call napi_complete() from it, since it may not be scheduled. Breno reports hitting a warning in napi_complete_done(): WARNING:7.8CNA v3.10.2%2025-07-10Fix
CVE-2025-38269Linux kernel Btrfs extent I/O tree null pointer dereference5.5v3.10.2%2025-07-10Fix
CVE-2025-38268Linux kernel USB Type-C port manager (TCPM) deadlock5.5v3.10.1%2025-07-10Fix
CVE-2025-38267Linux kernel ring buffer out-of-bounds write7.8v3.10.2%2025-07-10Fix
CVE-2025-38266Linux kernel MediaTek pinctrl EINT driver null pointer dereference5.5v3.10.2%2025-07-10Fix
CVE-2025-38265Linux kernel JSM serial driver null pointer dereference5.5v3.10.2%2025-07-10Fix
CVE-2025-36090IBM Analytics Content Hub information disclosure4.3CNA v3.10.3%2025-07-10Fix
CVE-2025-35983Gallagher Controller 7000 improper certificate validation6.5CNA v3.10.2%2025-07-10Fix
CVE-2025-34102CryptoLog unauthenticated RCE via SQL injection and command injection9.3CNA v4.09.7%2025-07-10MetasploitExploit codeFix
CVE-2025-34101Serviio Media Server Unauthenticated command injection via checkStreamUrl VIDEO parameter9.3CNA v4.04.4%2025-07-10MetasploitExploit code
CVE-2025-34100BuilderEngine RCE via unauthenticated arbitrary file upload9.3CNA v4.03.6%2025-07-10MetasploitExploit code
CVE-2025-34099VICIdial vicidial_sales_viewer.php unauthenticated command injection via Basic Auth Password9.3CNA v4.01.7%2025-07-10MetasploitExploit code
CVE-2025-34098Riverbed SteelHead VCX authenticated arbitrary file read via Log Filter injection7.1CNA v4.01.2%2025-07-10Exploit code
CVE-2025-34097ProcessMaker authenticated plugin upload RCE8.6CNA v4.01.6%2025-07-10Exploit codeFix
CVE-2025-34096Easy File Sharing HTTP Server buffer overflow via POST to /sendemail.ghp9.3CNA v4.01.7%2025-07-10Exploit code
CVE-2025-34095Mako Server and OS command injection via examples/save.lsp9.3CNA v4.06.3%2025-07-10MetasploitExploit code
CVE-2025-34093Polycom HDX Series Telnet command injection via lan traceroute7.5CNA v4.02.9%2025-07-10MetasploitExploit codeFix
CVE-2025-32990GnuTLS: Vulnerability in GnuTLS certtool template parsing8.2NVD v3.10.8%2025-07-10Fix
CVE-2025-32989GnuTLS: Vulnerability in GnuTLS sct extension parsing5.3CNA v3.11.5%2025-07-10Fix
CVE-2025-32988GnuTLS: Vulnerability in GnuTLS othername san export8.2NVD v3.11.5%2025-07-10Fix
CVE-2025-31267Apple App Store Connect improper authentication4.6CISA ADP v3.10.2%2025-07-10Fix
CVE-2025-28245Alteryx Server cross-site scripting6.1CISA ADP v3.10.3%2025-07-10
CVE-2025-28244Alteryx Server Local Storage insecure permissions8.8CISA ADP v3.10.5%2025-07-10
CVE-2025-28243Alteryx Server cross-site scripting8.0CISA ADP v3.10.3%2025-07-10
CVE-2025-27889wftpserver Wing FTP Server external control of a configuration setting8.8v3.10.4%2025-07-10KCVFix
CVE-2025-27614Gitk allows arbitrary command execution8.6CNA v3.10.4%2025-07-10Fix
CVE-2025-27613Gitk can create and truncate files in the user's home directory3.6CNA v3.10.6%2025-07-10Fix
CVE-2025-24798Meshtastic crashes via an unimplemented routing module reply4.3CNA v3.10.4%2025-07-10Fix
CVE-2025-23048Apache HTTP Server: Mod_ssl access control bypass with session resumption9.1CISA ADP v3.11.0%2025-07-10Fix
CVE-2025-7425Libxslt: Libxml2: Heap use-after-free in libxslt caused by atype corruption in xmlattrptr7.8CNA v3.10.4%2025-07-10Fix
CVE-2025-7424Libxslt: Type confusion in xmlnode.psvi between stylesheet and source nodes7.5NVD v3.11.3%2025-07-10Fix
CVE-2025-7419Tenda O3V2 httpd setRateTest fromSpeedTestSet stack-based overflow8.7CNA v4.00.9%2025-07-10
CVE-2025-7418Tenda O3V2 httpd setPing fromPingResultGet stack-based overflow8.7CNA v4.00.9%2025-07-10
CVE-2025-7417Tenda O3V2 httpd setPingInfo fromNetToolGet stack-based overflow8.7CNA v4.00.9%2025-07-10
CVE-2025-7416Tenda O3V2 httpd setSysTimeInfo fromSysToolTime stack-based overflow8.7CNA v4.00.9%2025-07-10
CVE-2025-7415Tenda O3V2 httpd getTraceroute fromTraceroutGet command injection8.8v3.13.4%2025-07-10
CVE-2025-7414Tenda O3V2 httpd setPingInfo fromNetToolGet os command injection8.8v3.112.8%2025-07-10
CVE-2025-7413code-projects Library System profile.php unrestricted upload8.8v3.10.4%2025-07-10
CVE-2025-7412code-projects Library System profile.php unrestricted upload8.8v3.10.4%2025-07-10
CVE-2025-7411code-projects LifeStyle Store success.php SQL injection9.8v3.10.5%2025-07-10
CVE-2025-7410code-projects LifeStyle Store cart_remove.php SQL injection9.8v3.10.5%2025-07-10
CVE-2025-7409code-projects Mobile Shop LoginAsAdmin.php SQL injection9.8v3.10.5%2025-07-10
CVE-2025-7408SourceCodester Zoo Management System animal_form_template.php cross-site scripting5.4v3.10.3%2025-07-10
CVE-2025-7407Netgear D6400 diag.cgi os command injection8.8v3.112.1%2025-07-10Emerging Threats
CVE-2025-7387Lana Downloads Manager WordPress plugin authenticated (Administrator+) stored cross-site scripting5.5CNA v3.10.3%2025-07-10Fix
CVE-2025-7365Keycloak: Phishing attack via email verification step in first login flow7.1CNA v3.10.3%2025-07-10Fix
CVE-2025-7021OpenAI Operator API spoofing through Locking Operator on FullScreen6.5NVD v3.10.3%2025-07-10
CVE-2025-6948Improper neutralization of input during web page generation (cross-site scripting) in GitLab8.7CNA v3.10.5%2025-07-10Fix
CVE-2025-6395Red Hat Enterprise Linux 10 gnutls: Null pointer dereference in _gnutls_figure_common_ciphersuite6.5CNA v3.10.8%2025-07-10Fix
CVE-2025-6392Broadcom Brocade SANnav daily data dump collector information disclosure6.7CNA v4.00.1%2025-07-10Fix
CVE-2025-6390Cleartext storage of sensitive information in Brocade SANnav server audit logs5.1CNA v4.00.1%2025-07-10Fix
CVE-2025-6236Hostel WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.2%2025-07-10Fix
CVE-2025-6234Hostel WordPress plugin reflected XSS6.1CISA ADP v3.10.2%2025-07-10Fix
CVE-2025-6211MD5 Hash Collision in run-llama/llama_index6.5CNA v3.00.3%2025-07-10Fix
CVE-2025-6168Incorrect authorization in GitLab2.7CNA v3.10.3%2025-07-10Fix
CVE-2025-5807Gwolle Guestbook WordPress plugin unauthenticated stored cross-site scripting6.1CNA v3.10.2%2025-07-10Fix
CVE-2025-5040Autodesk Revit RTE File Parsing heap-based overflow7.8CNA v3.10.2%2025-07-10Fix
CVE-2025-5037Autodesk Revit RFA File Parsing memory corruption7.8CNA v3.10.4%2025-07-10Fix
CVE-2025-5023Mitsubishi Electric PV-DR004J hard-coded credentials7.1CNA v3.10.2%2025-07-10Fix
CVE-2025-5022Mitsubishi Electric PV-DR004J weak password requirements6.5CNA v3.10.6%2025-07-10Fix
CVE-2025-4972Incorrect authorization in GitLab2.7CNA v3.10.4%2025-07-10Fix
CVE-2025-4662Broadcom Brocade SANnav audit logging information disclosure5.1CNA v4.00.1%2025-07-10Fix
CVE-2025-4406wpForo Forum WordPress plugin stored cross-site scripting5.4CNA v3.10.2%2025-07-10Fix
CVE-2025-3947Honeywell C300 PCNT02 integer underflow8.2CNA v3.10.3%2025-07-10Fix
CVE-2025-3946Honeywell C300 PCNT02 incorrect response generation during FTEB protocol processing8.2CNA v3.10.5%2025-07-10Fix
CVE-2025-3396Incorrect authorization in GitLab4.3CNA v3.10.3%2025-07-10Fix
CVE-2025-2523Honeywell C300 PCNT02 lack of buffer clearing before reuse may result in incorrect system behavior9.4CNA v3.10.8%2025-07-10Fix
CVE-2025-2522Honeywell FIM4 lack of buffer clearing before reuse may result in incorrect system behavior6.5CNA v3.10.3%2025-07-10Fix
CVE-2025-2521Honeywell C300 PCNT02 improper index validation8.6CNA v3.10.5%2025-07-10Fix
CVE-2025-2520Honeywell C300 PCNT02 dereferencing of an uninitialized pointer leads to denial of service7.5CNA v3.10.4%2025-07-10Fix
CVE-2025-1727End-of-Train and Head-of-Train remote linking protocol weak authentication7.2CNA v4.00.6%2025-07-10
CVE-2025-53743Jenkins Applitools Eyes Plugin vulnerability does not mask API keys on its job configuration form5.3CISA ADP v3.10.3%2025-07-09Fix
CVE-2025-53742Jenkins Applitools Eyes Plugin vulnerability exposes unencrypted keys to certain authenticated users6.5CISA ADP v3.10.2%2025-07-09Fix
CVE-2025-53678Jenkins User1st uTester Plugin vulnerability exposes unencrypted token to authenticated users6.5CISA ADP v3.10.2%2025-07-09Fix
CVE-2025-53677Jenkins Xooa Plugin vulnerability does not mask its Xooa Deployment Token5.3CISA ADP v3.10.3%2025-07-09Fix
CVE-2025-53676Jenkins Xooa Plugin vulnerability exposes unencrypted tokens to authenticated users6.5CISA ADP v3.10.2%2025-07-09Fix
CVE-2025-53675Jenkins Warrior Framework Plugin plaintext password storage6.5CISA ADP v3.10.3%2025-07-09Fix
CVE-2025-53674Jenkins Sensedia API Platform Plugin vulnerability exposes unencrypted tokens5.3CISA ADP v3.10.3%2025-07-09Fix
CVE-2025-53673Jenkins Sensedia Api Platform tools Plugin missing encryption6.5CISA ADP v3.10.2%2025-07-09Fix
CVE-2025-53672Jenkins Kryptowire Plugin vulnerability stores unencrypted Kryptowire API key6.5CISA ADP v3.10.3%2025-07-09Fix
CVE-2025-53671Jenkins Nouvola DiveCloud Plugin vulnerability does not mask keys on its job configuration form6.5CISA ADP v3.10.2%2025-07-09Fix
CVE-2025-53670Jenkins Nouvola DiveCloud Plugin vulnerability stores unencrypted credentials6.5CISA ADP v3.10.1%2025-07-09Fix
CVE-2025-53669Jenkins VAddy Plugin vulnerability exposes plaintext keys on its job configuration form4.3CISA ADP v3.10.2%2025-07-09Fix
CVE-2025-53668Jenkins VAddy Plugin vulnerability exposes unencrypted keys to certain authenticated users6.5CISA ADP v3.10.2%2025-07-09Fix
CVE-2025-53667Jenkins Dead Man's Snitch Plugin vulnerability does not mask tokens5.3CISA ADP v3.10.3%2025-07-09Fix
CVE-2025-53666Jenkins Dead Man's Snitch Plugin vulnerability stores tokens in plain text6.5CISA ADP v3.10.2%2025-07-09Fix
CVE-2025-53665Jenkins Apica Loadtest Plugin vulnerability exposes authentication tokens4.3CISA ADP v3.10.3%2025-07-09Fix
CVE-2025-53664Jenkins Apica Loadtest Plugin vulnerability exposes authentication tokens6.5CISA ADP v3.10.4%2025-07-09Fix
CVE-2025-53663Jenkins IBM Cloud DevOps Plugin vulnerability exposes SonarQube authentication tokens6.5CISA ADP v3.10.2%2025-07-09Fix
CVE-2025-53662Jenkins IFTTT Build Notifier Plugin vulnerability exposes IFTTT Maker Channel Keys6.5CISA ADP v3.10.3%2025-07-09Fix
CVE-2025-53661Jenkins Testsigma Test Plan vulnerability exposes API keys via job configuration form4.3CISA ADP v3.10.3%2025-07-09Fix
CVE-2025-53660Jenkins QMetry Test Management Plugin vulnerability exposes API keys4.3CISA ADP v3.10.3%2025-07-09Fix
CVE-2025-53659Jenkins QMetry Test Management Plugin stores unencrypted API keys6.5CISA ADP v3.10.2%2025-07-09Fix
CVE-2025-53658Jenkins Applitools Eyes Plugin vulnerable to XSS through its Build page5.4CISA ADP v3.10.3%2025-07-09Fix
CVE-2025-53657Jenkins ReadyAPI Functional Testing Plugin insufficiently protected credentials4.3CISA ADP v3.10.3%2025-07-09Fix
CVE-2025-53656Jenkins ReadyAPI Functional Testing Plugin plaintext password storage6.5CISA ADP v3.10.4%2025-07-09Fix
CVE-2025-53655Jenkins Statistics Gatherer Plugin does not mask AWS Secret Key5.3CISA ADP v3.10.3%2025-07-09Fix
CVE-2025-53654Jenkins Statistics Gatherer Plugin vulnerability exposes AWS Secret Key6.5CISA ADP v3.10.4%2025-07-09Fix
CVE-2025-53653Jenkins Aqua Security Scanner Plugin missing encryption4.3CISA ADP v3.10.2%2025-07-09Fix
CVE-2025-53652Jenkins Git Parameter Plugin vulnerable to code injection due to inexhaustive parameter check8.2CISA ADP v3.10.7%2025-07-09Fix
CVE-2025-53651Jenkins HTML Publisher Plugin vulnerability displays controller file system information in its logs6.3CISA ADP v3.10.5%2025-07-09Fix
CVE-2025-53650Jenkins Credentials Binding Plugin vulnerability can expose sensitive information in logger messages7.3CISA ADP v3.10.4%2025-07-09Fix
CVE-2025-53645Zimbra Collaboration (ZCS) before 9.0.0 Patch 46, 10.0.x before 10.0.15, and 10.1.x before 10.1.9 is vulnerable to a denial of service condition due to improper handling of excessive, comma-separated path segments in the Admin Console. An unauthenticated remote attacker can send specially crafted GE7.5CISA ADP v3.11.5%2025-07-09Fix
CVE-2025-53624docusaurus-plugin-content-gists exposes GitHub Personal Access Token10.0CNA v3.12.0%2025-07-09NucleiFix
CVE-2025-53620Qwik's unhandled exception vulnerabilty can cause server crashes from malicious requests9.2CNA v4.00.3%2025-07-09Fix
CVE-2025-53548@clerk/backend Performs insufficient verification of data authenticity7.5CNA v3.10.2%2025-07-09Fix
CVE-2025-53546Folo allows secrets exfiltration via `pull_request_target`9.1CNA v3.10.3%2025-07-09Exploit code
CVE-2025-52364Tenda CP3 Pro Firmware insecure permissions7.5CISA ADP v3.10.5%2025-07-09
CVE-2025-52357FiberHome FD602GW-DX-R410 router ping diagnostic feature cross-site scripting4.1CISA ADP v3.10.3%2025-07-09
CVE-2025-49604Realtek AmebaD Wi-Fi driver frame defragmentation buffer overflow5.4CISA ADP v3.10.4%2025-07-09
CVE-2025-44526Realtek Rtl8762ekf-evb improper permissions6.5CISA ADP v3.10.3%2025-07-09
CVE-2025-44525Texas Instruments SimpleLink CC13XX CC26XX SDK Bluetooth Low Energy stack improper access control6.5CISA ADP v3.10.2%2025-07-09
CVE-2025-44177Wss Protop path traversal8.2CISA ADP v3.14.4%2025-07-09NucleiExploit code
CVE-2025-38264Linux kernel NVMe over TCP R2T handling vulnerability9.8CNA v3.10.3%2025-07-09Fix
CVE-2025-38263Linux kernel bcache cache set flush null pointer dereference5.5v3.10.2%2025-07-09Fix
CVE-2025-38262Linux kernel UARTLite serial driver null pointer dereference7.8CNA v3.10.2%2025-07-09Fix
CVE-2025-38261Linux kernel RISC-V context switch denial of service7.8CNA v3.10.2%2025-07-09Fix
CVE-2025-38260Linux kernel btrfs checksum tree recovery null pointer dereference5.5v3.10.1%2025-07-09Fix
CVE-2025-38259Linux kernel wcd9335 audio codec driver memory leak7.8v3.10.1%2025-07-09Fix
CVE-2025-38258Linux kernel DAMON sysfs scheme filter memory leak5.5v3.10.1%2025-07-09Fix
CVE-2025-38257Linux kernel s390 pkey ioctl vulnerability7.3CNA v3.10.2%2025-07-09Fix
CVE-2025-38256Linux kernel io_uring buffer unpinning denial of service5.5v3.10.1%2025-07-09Fix
CVE-2025-38255Linux kernel CPU group allocation null pointer dereference5.5v3.10.1%2025-07-09Fix
CVE-2025-38254Linux kernel AMD display EDID handling vulnerability5.5v3.10.1%2025-07-09Fix
CVE-2025-38253Linux kernel Wacom AES battery handler vulnerability8.8CNA v3.10.2%2025-07-09Fix
CVE-2025-38252Linux kernel CXL RAS CPER handler denial of service7.8CNA v3.10.1%2025-07-09Fix
CVE-2025-38251Linux kernel ATM CLIP driver null pointer dereference5.5v3.10.2%2025-07-09Fix
CVE-2025-38250Linux kernel Bluetooth virtual HCI driver use-after-free7.8CNA v3.10.2%2025-07-09Fix
CVE-2025-38249Linux kernel USB audio UAC3 driver out-of-bounds read7.1v3.10.2%2025-07-09Fix
CVE-2025-38248Linux kernel bridge multicast router ports use-after-free7.8CNA v3.10.3%2025-07-09Exploit codeFix
CVE-2025-38247Linux kernel open_tree_attr mount syscall vulnerability5.5v3.10.1%2025-07-09Fix
CVE-2025-38246Linux kernel bnxt XDP redirect lists denial of service9.8CNA v3.10.3%2025-07-09Fix
CVE-2025-38245Linux kernel ATM device registration race condition7.8v3.10.2%2025-07-09Fix
CVE-2025-38244Linux kernel SMB client channel reconnection deadlock7.5CNA v3.10.3%2025-07-09Fix
CVE-2025-38243Linux kernel btrfs log replay null pointer dereference5.5v3.10.1%2025-07-09Fix
CVE-2025-38242Linux kernel userfaultfd move race condition7.8CNA v3.10.1%2025-07-09Fix
CVE-2025-38241Linux kernel improper locking5.5v3.10.1%2025-07-09Fix
CVE-2025-38239Linux kernel megaraid_sas driver improper array index validation7.3CNA v3.10.2%2025-07-09Fix
CVE-2025-38238Linux kernel fnic FDMI handling vulnerability8.8CNA v3.10.2%2025-07-09Fix
CVE-2025-36599Dell PowerFlex Manager VM sensitive information in log files4.3CNA v3.10.3%2025-07-09Fix
CVE-2025-34077WordPress Pie Register Plugin authentication bypass RCE10.0CNA v4.016.1%2025-07-09NucleiMetasploitExploit codeFix
CVE-2025-27028Read access of deprivileged Radiflow iSAP Smart Collector user6.8CNA v3.10.3%2025-07-09Fix
CVE-2025-27027Restricted shell evasion in Radiflow iSAP Smart Collector4.1CNA v3.10.3%2025-07-09Fix
CVE-2025-7381Exposure of sensitive PHP information to an unauthorized control sphere in Mautic/Mautic images5.3CNA v3.10.3%2025-07-09
CVE-2025-7379A security bypass vulnerability was found in DataSync Center installed on ADM5.2CNA v4.00.2%2025-07-09Fix
CVE-2025-7378An improper input validation vulnerability was found on manipulating configuration of ADM6.0CNA v4.00.1%2025-07-09Fix
CVE-2025-7220Campcodes Payroll Management System ajax.php SQL injection9.8v3.10.4%2025-07-09
CVE-2025-7219Campcodes Payroll Management System ajax.php SQL injection9.8v3.10.4%2025-07-09
CVE-2025-7218Campcodes Payroll Management System ajax.php SQL injection9.8v3.10.4%2025-07-09
CVE-2025-7217Campcodes Payroll Management System ajax.php SQL injection9.8v3.10.4%2025-07-09
CVE-2025-7216lty628 Aidigu PHP object common.php checkUserCookie deserialization6.9CNA v4.00.4%2025-07-09
CVE-2025-7215FNKvision FNK-GU2 wpa_supplicant.conf cleartext storage1.0CNA v4.00.1%2025-07-09
CVE-2025-7214FNKvision FNK-GU2 MD5 shadow risky encryption1.0CNA v4.00.1%2025-07-09
CVE-2025-7213FNKvision FNK-GU2 UART interface on-chip debug and test interface with improper access control5.4CNA v4.00.2%2025-07-09
CVE-2025-7212itsourcecode Insurance Management System insertAgent.php SQL injection8.8v3.10.4%2025-07-09
CVE-2025-7211code-projects LifeStyle Store cart_add.php SQL injection9.8v3.10.5%2025-07-09
CVE-2025-7210Code-projects/Fabian Ros Library Management System profile_update.php unrestricted upload8.8v3.10.4%2025-07-09
CVE-2025-72099fans plan9port x509.c value_decode null pointer dereference5.5v3.10.2%2025-07-09
CVE-2025-72089fans plan9port x509.c edump heap-based overflow9.8v3.10.6%2025-07-09
CVE-2025-7207mruby nregs codegen.c scope_new heap-based overflow5.5v3.10.2%2025-07-09Fix
CVE-2025-7206D-Link DIR-825 httpd switch_language.cgi sub_410DDC stack-based overflow9.3CNA v4.021.7%2025-07-09Emerging Threats
CVE-2025-7204Exposure of password hashes via API responses in ConnectWise PSA6.5CNA v3.10.3%2025-07-09Fix
CVE-2025-7059Simple Featured Image WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-07-09
CVE-2025-6976Events Manager WordPress plugin stored cross-site scripting5.4v3.10.2%2025-07-09Fix
CVE-2025-6975Events Manager WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2025-07-09Fix
CVE-2025-6970Events Manager WordPress plugin unauthenticated SQL injection via `orderby` parameter7.5CNA v3.156.1%2025-07-09NucleiExploit codeFix
CVE-2025-6742SureForms WordPress plugin PHP object injection7.5CNA v3.10.5%2025-07-09Fix
CVE-2025-6691SureForms WordPress plugin arbitrary file deletion8.1CNA v3.11.0%2025-07-09Fix
CVE-2025-6514OS command injection in mcp-remote when connecting to untrusted MCP servers9.6CNA v3.177.7%2025-07-09Exploit codeFix
CVE-2025-6377Arena® Simulation out-of-bounds write remote code execution7.1CNA v4.00.2%2025-07-09Fix
CVE-2025-6376Arena® Simulation out-of-bounds write remote code execution7.1CNA v4.00.2%2025-07-09Fix
CVE-2025-5678Gutenberg Blocks with AI by Kadence WP WordPress plugin stored cross-site scripting5.4v3.10.2%2025-07-09Fix
CVE-2025-4855Support Board WordPress plugin unauthenticated authorization bypass due to use of Default Secret Key9.8CNA v3.10.4%2025-07-09Fix
CVE-2025-4828Support Board WordPress plugin unauthenticated arbitrary file deletion9.8CNA v3.10.9%2025-07-09Fix
CVE-2025-4606Sala - Startup and SaaS WordPress theme unauthenticated privilege escalation9.8CNA v3.10.6%2025-07-09Exploit code
CVE-2025-3780WCFM WordPress plugin unauthorized access6.5CNA v3.10.3%2025-07-09Fix
CVE-2025-3499Unauthenticated execution of arbitrary commands in Radiflow iSAP Smart Collector10.0CNA v3.11.0%2025-07-09Fix
CVE-2025-3498Unauthenticated modification of Radiflow iSAP Smart Collector configuration9.9CNA v3.10.3%2025-07-09Fix
CVE-2025-3497Radiflow iSAP Smart Collector Linux distribution unmaintained8.7CNA v3.10.4%2025-07-09Fix
CVE-2025-2670IBM OpenPages information disclosure4.3CNA v3.10.2%2025-07-09Fix
CVE-2025-1112IBM OpenPages with Watson information disclosure4.3CNA v3.10.2%2025-07-09Fix
CVE-2025-0141GlobalProtect App: Privilege escalation (PE)8.4CNA v4.00.2%2025-07-09Fix
CVE-2025-0140GlobalProtect App: Non Admin User can Disable the GlobalProtect App6.8CNA v4.00.1%2025-07-09Fix
CVE-2025-0139Autonomous Digital Experience Manager: Privilege escalation (PE)6.3CNA v4.00.1%2025-07-09Fix
CVE-2025-53547Helm vulnerable to code injection through malicious chart.yaml content8.5CNA v3.10.4%2025-07-08Exploit codeFix
CVE-2025-53545frappe press improper authentication6.9CNA v4.00.3%2025-07-08
CVE-2025-53513Juju zip slip vulnerability via authenticated endpoint8.8CNA v3.10.7%2025-07-08Fix
CVE-2025-53512Sensitive log retrieval in Juju6.5CNA v3.10.4%2025-07-08Fix
CVE-2025-53480Wikimedia Foundation Mediawiki CheckUser: Reflected cross-site scripting in Special:Investigate5.4CISA ADP v3.10.2%2025-07-08Fix
CVE-2025-53479Wikimedia Foundation Mediawiki CheckUser: Reflected cross-site scripting in Special:CheckUser5.4CISA ADP v3.10.2%2025-07-08Fix
CVE-2025-53372node-code-sandbox-mcp has a sandbox escape via command injection7.5CNA v3.11.0%2025-07-08Fix
CVE-2025-53355mcp-server-kubernetes vulnerable to command injection in several tools7.5CNA v3.12.2%2025-07-08Fix
CVE-2025-50130FUJI ELECTRIC CO., LTD. / Hakko Electronics TELLUS heap-based buffer overflow8.4CNA v4.00.2%2025-07-08
CVE-2025-49760Microsoft Windows Storage spoofing3.5CNA v3.11.4%2025-07-08Fix
CVE-2025-49756Microsoft 365 Apps for Enterprise office Developer Platform security feature bypass3.3CNA v3.10.2%2025-07-08Fix
CVE-2025-49753Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.8CNA v3.10.8%2025-07-08Fix
CVE-2025-49744Microsoft Windows Graphics component elevation of privilege7.0CNA v3.10.8%2025-07-08Exploit codeFix
CVE-2025-49742Microsoft Windows Graphics component remote code execution7.8CNA v3.10.3%2025-07-08Fix
CVE-2025-49740Microsoft Windows SmartScreen security feature bypass8.8CNA v3.10.8%2025-07-08Fix
CVE-2025-49739Visual Studio elevation of privilege8.8CNA v3.10.9%2025-07-08Fix
CVE-2025-49738Microsoft PC Manager elevation of privilege7.8CNA v3.10.4%2025-07-08Fix
CVE-2025-49737Microsoft Teams elevation of privilege7.0CNA v3.10.2%2025-07-08Fix
CVE-2025-49735Microsoft Windows KDC Proxy Service (KPSSVC) remote code execution8.1CNA v3.11.1%2025-07-08Fix
CVE-2025-49733Microsoft Windows win32k elevation of privilege7.8CNA v3.10.3%2025-07-08Fix
CVE-2025-49732Microsoft Windows Graphics component elevation of privilege7.8CNA v3.10.3%2025-07-08Fix
CVE-2025-49731Microsoft Teams elevation of privilege3.1CNA v3.10.4%2025-07-08Fix
CVE-2025-49730Microsoft Windows QoS Scheduler driver elevation of privilege7.8CNA v3.10.6%2025-07-08Exploit codeFix
CVE-2025-49729Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.8CNA v3.10.6%2025-07-08Fix
CVE-2025-49727Microsoft Windows win32k elevation of privilege7.0CNA v3.10.4%2025-07-08Fix
CVE-2025-49726Microsoft Windows Notification elevation of privilege7.8CNA v3.10.4%2025-07-08Fix
CVE-2025-49725Microsoft Windows Notification elevation of privilege7.8CNA v3.10.3%2025-07-08Fix
CVE-2025-49724Microsoft Windows Connected Devices Platform service remote code execution8.8CNA v3.19.8%2025-07-08Fix
CVE-2025-49723Microsoft Windows StateRepository API Server file tampering8.8CNA v3.10.3%2025-07-08Fix
CVE-2025-49722Microsoft Windows Print Spooler denial of service5.7CNA v3.10.6%2025-07-08Fix
CVE-2025-49721Microsoft Windows Fast FAT File System driver elevation of privilege7.8CNA v3.10.5%2025-07-08Fix
CVE-2025-49719Microsoft SQL server information disclosure7.5CNA v3.115.5%2025-07-08Fix
CVE-2025-49718Microsoft SQL Server information disclosure7.5CNA v3.13.7%2025-07-08Fix
CVE-2025-49717Microsoft SQL Server remote code execution8.5CNA v3.11.1%2025-07-08Fix
CVE-2025-49716Microsoft Windows Netlogon denial of service7.5CNA v3.11.5%2025-07-08Fix
CVE-2025-49714Microsoft Visual Studio Code Python extension remote code execution7.8CNA v3.10.4%2025-07-08Fix
CVE-2025-49711Microsoft Excel remote code execution7.8CNA v3.10.5%2025-07-08Fix
CVE-2025-49706Microsoft SharePoint improper authentication6.5CNA v3.199.1%2025-07-08KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix
CVE-2025-49705Microsoft PowerPoint remote code execution7.8CNA v3.10.4%2025-07-08Fix
CVE-2025-49704Microsoft SharePoint code injection8.8CNA v3.1100.0%2025-07-08KEVMetasploitExploit codeKCVFix
CVE-2025-49703Microsoft Word remote code execution7.8CNA v3.10.7%2025-07-08Fix
CVE-2025-49702Microsoft Office remote code execution7.8CNA v3.10.6%2025-07-08Fix
CVE-2025-49701Microsoft SharePoint remote code execution8.8CNA v3.11.2%2025-07-08Fix
CVE-2025-49700Microsoft Word remote code execution7.8CNA v3.10.4%2025-07-08Fix
CVE-2025-49699Microsoft Office remote code execution7.0CNA v3.10.3%2025-07-08Fix
CVE-2025-49698Microsoft Word remote code execution7.8CNA v3.10.6%2025-07-08Fix
CVE-2025-49697Microsoft Office remote code execution8.4CNA v3.10.5%2025-07-08Fix
CVE-2025-49696Microsoft Office remote code execution8.4CNA v3.10.6%2025-07-08Fix
CVE-2025-49695Microsoft Office remote code execution8.4CNA v3.10.7%2025-07-08Fix
CVE-2025-49694Microsoft Brokering File System elevation of privilege7.8CNA v3.10.4%2025-07-08Fix
CVE-2025-49693Microsoft Brokering File System elevation of privilege7.8CNA v3.10.4%2025-07-08Fix
CVE-2025-49691Microsoft Windows Miracast Wireless Display remote code execution8.0CNA v3.10.5%2025-07-08Fix
CVE-2025-49690Microsoft Windows capability Access Management service (camsvc) elevation of privilege7.4CNA v3.10.3%2025-07-08Fix
CVE-2025-49689Microsoft Virtual Hard Disk elevation of privilege7.8CNA v3.10.7%2025-07-08Fix
CVE-2025-49688Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.8CNA v3.10.9%2025-07-08Fix
CVE-2025-49687Microsoft Windows Input Method Editor (IME) elevation of privilege8.8CNA v3.10.4%2025-07-08Fix
CVE-2025-49686Microsoft Windows TCP/IP driver elevation of privilege7.8CNA v3.10.4%2025-07-08Fix
CVE-2025-49685Microsoft Windows Search service elevation of privilege7.0CNA v3.10.3%2025-07-08Fix
CVE-2025-49684Microsoft Windows Storage Port driver information disclosure5.5CNA v3.10.5%2025-07-08Fix
CVE-2025-49683Microsoft Virtual Hard Disk remote code execution7.8CNA v3.11.9%2025-07-08Exploit codeFix
CVE-2025-49682Microsoft Windows Media elevation of privilege7.3CNA v3.10.5%2025-07-08Fix
CVE-2025-49681Microsoft Windows Routing and Remote Access Service (RRAS) information disclosure6.5CNA v3.11.1%2025-07-08Fix
CVE-2025-49680Microsoft Windows Performance Recorder (WPR) denial of service7.3CNA v3.10.5%2025-07-08Fix
CVE-2025-49679Microsoft Windows Shell elevation of privilege7.8CNA v3.10.4%2025-07-08Fix
CVE-2025-49678Microsoft Windows NTFS elevation of privilege7.0CNA v3.10.2%2025-07-08Fix
CVE-2025-49677Microsoft Brokering File System elevation of privilege7.0CNA v3.11.0%2025-07-08Exploit codeFix
CVE-2025-49676Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.8CNA v3.10.9%2025-07-08Fix
CVE-2025-49675Microsoft Windows kernel Streaming WOW Thunk service driver elevation of privilege7.8CNA v3.10.4%2025-07-08Fix
CVE-2025-49674Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.8CNA v3.10.8%2025-07-08Fix
CVE-2025-49673Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.8CNA v3.10.8%2025-07-08Fix
CVE-2025-49672Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.8CNA v3.10.9%2025-07-08Fix
CVE-2025-49671Microsoft Windows Routing and Remote Access Service (RRAS) information disclosure6.5CNA v3.11.1%2025-07-08Fix
CVE-2025-49670Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution6.5CNA v3.10.9%2025-07-08Fix
CVE-2025-49669Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.8CNA v3.10.8%2025-07-08Fix
CVE-2025-49668Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.8CNA v3.10.8%2025-07-08Fix
CVE-2025-49667Microsoft Windows Win32 Kernel subsystem elevation of privilege7.8CNA v3.10.5%2025-07-08Fix
CVE-2025-49666Microsoft Windows Server Setup and Boot Event Collection remote code execution7.2CNA v3.11.4%2025-07-08Fix
CVE-2025-49665Microsoft Windows workspace Broker elevation of privilege7.8CNA v3.10.3%2025-07-08Fix
CVE-2025-49664Microsoft Windows User-Mode Driver Framework host information disclosure5.5CNA v3.10.6%2025-07-08Fix
CVE-2025-49663Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.8CNA v3.10.8%2025-07-08Fix
CVE-2025-49661Microsoft Windows Ancillary function driver for WinSock elevation of privilege7.8CNA v3.10.4%2025-07-08Fix
CVE-2025-49660Microsoft Windows Event Tracing elevation of privilege7.8CNA v3.10.4%2025-07-08Fix
CVE-2025-49659Microsoft Windows Transport driver Interface (TDI) Translation driver elevation of privilege7.8CNA v3.10.4%2025-07-08Fix
CVE-2025-49658Microsoft Windows Transport driver Interface (TDI) Translation driver information disclosure5.5CNA v3.10.5%2025-07-08Fix
CVE-2025-49657Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.8CNA v3.11.0%2025-07-08Fix
CVE-2025-49551Adobe ColdFusion use of hard-coded credentials8.8CNA v3.10.3%2025-07-08Fix
CVE-2025-49547Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.2%2025-07-08Fix
CVE-2025-49546Adobe ColdFusion improper access control2.4CNA v3.10.4%2025-07-08Fix
CVE-2025-49545Adobe ColdFusion server-side request forgery (SSRF)6.2CNA v3.10.4%2025-07-08Fix
CVE-2025-49544Adobe ColdFusion improper restriction of XML external entity reference (XXE)6.8CNA v3.10.7%2025-07-08Fix
CVE-2025-49543Adobe ColdFusion cross-site scripting (stored XSS)4.3CNA v3.10.8%2025-07-08Fix
CVE-2025-49542Adobe ColdFusion cross-site scripting (reflected XSS)5.2CNA v3.11.2%2025-07-08Fix
CVE-2025-49541Adobe ColdFusion cross-site scripting (stored XSS)4.3CNA v3.10.8%2025-07-08Fix
CVE-2025-49540Adobe ColdFusion cross-site scripting (stored XSS)4.3CNA v3.10.8%2025-07-08Fix
CVE-2025-49539Adobe ColdFusion improper restriction of XML external entity reference (XXE)4.5CNA v3.10.5%2025-07-08Fix
CVE-2025-49538Adobe ColdFusion XML injection (aka blind XPath injection)7.4CNA v3.12.2%2025-07-08Fix
CVE-2025-49537Adobe ColdFusion improper neutralization of special elements used in an OS command7.9CNA v3.12.4%2025-07-08Fix
CVE-2025-49536Adobe ColdFusion incorrect authorization7.3CNA v3.10.3%2025-07-08Fix
CVE-2025-49535Adobe ColdFusion improper restriction of XML external entity reference (XXE)9.3CNA v3.10.6%2025-07-08Fix
CVE-2025-49534Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.2%2025-07-08Fix
CVE-2025-49533Adobe Experience Manager (MS) deserialization of untrusted data9.8CNA v3.151.7%2025-07-08NucleiEmerging ThreatsFix
CVE-2025-49532Adobe Illustrator integer underflow (wrap or wraparound)7.8CNA v3.10.2%2025-07-08Fix
CVE-2025-49531Adobe Illustrator integer overflow or wraparound7.8CNA v3.10.2%2025-07-08Fix
CVE-2025-49530Adobe Illustrator out-of-bounds write7.8CNA v3.10.2%2025-07-08Fix
CVE-2025-49529Adobe Illustrator access of uninitialized pointer7.8CNA v3.10.2%2025-07-08Fix
CVE-2025-49528Adobe Illustrator stack-based buffer overflow7.8CNA v3.10.3%2025-07-08Fix
CVE-2025-49527Adobe Illustrator stack-based buffer overflow7.8CNA v3.10.3%2025-07-08Fix
CVE-2025-49526Adobe Illustrator out-of-bounds write7.8CNA v3.10.2%2025-07-08Fix
CVE-2025-49525Adobe Illustrator out-of-bounds read5.5CNA v3.10.2%2025-07-08Fix
CVE-2025-49524Adobe Illustrator null pointer dereference5.5CNA v3.10.2%2025-07-08Fix
CVE-2025-48824Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.8CNA v3.11.0%2025-07-08Fix
CVE-2025-48823Microsoft Windows Cryptographic services information disclosure5.9CNA v3.10.6%2025-07-08Fix
CVE-2025-48822Microsoft Windows Hyper-V Discrete Device Assignment (DDA) remote code execution8.6CNA v3.10.7%2025-07-08Fix
CVE-2025-48821Microsoft Windows Universal Plug and Play (UPnP) device host elevation of privilege7.1CNA v3.10.5%2025-07-08Fix
CVE-2025-48820Microsoft Windows AppX Deployment service elevation of privilege7.8CNA v3.10.4%2025-07-08Fix
CVE-2025-48819Microsoft Windows Universal Plug and Play (UPnP) device host elevation of privilege7.1CNA v3.10.4%2025-07-08Fix
CVE-2025-48818Microsoft Windows BitLocker security feature bypass6.8CNA v3.10.5%2025-07-08Fix
CVE-2025-48817Microsoft Remote Desktop client remote code execution8.8CNA v3.11.0%2025-07-08Fix
CVE-2025-48816Microsoft Windows HID class driver elevation of privilege7.8CNA v3.10.4%2025-07-08Fix
CVE-2025-48815Microsoft Windows Simple Search and Discovery Protocol (SSDP) service elevation of privilege7.8CNA v3.10.4%2025-07-08Fix
CVE-2025-48814Microsoft Windows remote Desktop Licensing service security feature bypass7.5CNA v3.11.1%2025-07-08Fix
CVE-2025-48812Microsoft Excel information disclosure5.5CNA v3.10.5%2025-07-08Fix
CVE-2025-48811Microsoft Windows Virtualization-Based Security (VBS) Enclave elevation of privilege6.7CNA v3.10.3%2025-07-08Fix
CVE-2025-48810Microsoft Windows Secure Kernel Mode information disclosure5.5CNA v3.10.5%2025-07-08Fix
CVE-2025-48809Microsoft Windows Secure Kernel Mode information disclosure5.5CNA v3.10.5%2025-07-08Fix
CVE-2025-48808Microsoft Windows Kernel information disclosure5.5CNA v3.10.5%2025-07-08Fix
CVE-2025-48806Microsoft MPEG-2 Video extension remote code execution7.8CNA v3.10.4%2025-07-08Fix
CVE-2025-48805Microsoft MPEG-2 Video extension remote code execution7.8CNA v3.10.4%2025-07-08Fix
CVE-2025-48804Microsoft Windows BitLocker security feature bypass6.8CNA v3.10.6%2025-07-08Exploit codeFix
CVE-2025-48803Microsoft Windows Virtualization-Based Security (VBS) elevation of privilege6.7CNA v3.10.3%2025-07-08Fix
CVE-2025-48802Microsoft Windows SMB server spoofing6.5CNA v3.10.8%2025-07-08Fix
CVE-2025-48800Microsoft Windows BitLocker security feature bypass6.8CNA v3.10.6%2025-07-08Fix
CVE-2025-48799Microsoft Windows Update service elevation of privilege7.8CNA v3.11.2%2025-07-08Exploit codeFix
CVE-2025-48386Git allows a buffer overflow in wincred credential helper6.3CNA v3.10.4%2025-07-08Fix
CVE-2025-48385Git alllows arbitrary file writes via bundle-uri parameter injection8.6CNA v4.01.0%2025-07-08Fix
CVE-2025-48384Git link following8.1CNA v3.14.4%2025-07-08KEVExploit codeFix
CVE-2025-48003Microsoft Windows BitLocker security feature bypass6.8CNA v3.10.6%2025-07-08Fix
CVE-2025-48002Microsoft Windows Hyper-V information disclosure5.7CNA v3.10.6%2025-07-08Fix
CVE-2025-48001Microsoft Windows BitLocker security feature bypass6.8CNA v3.10.4%2025-07-08Fix
CVE-2025-48000Microsoft Windows Connected Devices Platform service elevation of privilege7.8CNA v3.10.3%2025-07-08Fix
CVE-2025-47999Microsoft Windows Hyper-V denial of service6.8CNA v3.10.4%2025-07-08Fix
CVE-2025-47998Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.8CNA v3.11.0%2025-07-08Fix
CVE-2025-47996Microsoft Windows MBT Transport driver elevation of privilege7.8CNA v3.10.4%2025-07-08Fix
CVE-2025-47994Microsoft Office elevation of privilege7.8CNA v3.13.0%2025-07-08Fix
CVE-2025-47993Microsoft PC Manager elevation of privilege7.8CNA v3.10.4%2025-07-08Fix
CVE-2025-47991Microsoft Windows Input Method Editor (IME) elevation of privilege7.8CNA v3.10.3%2025-07-08Fix
CVE-2025-47988Microsoft Azure Monitor Agent remote code execution7.5CNA v3.11.0%2025-07-08Fix
CVE-2025-47987Microsoft Windows Credential Security Support Provider Protocol (CredSSP) elevation of privilege7.8CNA v3.11.7%2025-07-08Exploit codeFix
CVE-2025-47986Microsoft Windows universal Print Management service elevation of privilege8.8CNA v3.10.4%2025-07-08Fix
CVE-2025-47985Microsoft Windows Event Tracing elevation of privilege7.8CNA v3.10.4%2025-07-08Fix
CVE-2025-47984Microsoft Windows GDI information disclosure7.5CNA v3.123.3%2025-07-08Fix
CVE-2025-47982Microsoft Windows Storage VSP driver elevation of privilege7.8CNA v3.10.4%2025-07-08Fix
CVE-2025-47981Microsoft Windows SPNEGO Extended Negotiation (NEGOEX) Security Mechanism remote code execution9.8CNA v3.141.1%2025-07-08Fix
CVE-2025-47980Microsoft Windows Imaging component information disclosure6.2CNA v3.10.6%2025-07-08Fix
CVE-2025-47978Microsoft Windows Kerberos denial of service6.5CNA v3.12.0%2025-07-08Fix
CVE-2025-47976Microsoft Windows Simple Search and Discovery Protocol (SSDP) service elevation of privilege7.8CNA v3.10.4%2025-07-08Fix
CVE-2025-47975Microsoft Windows Simple Search and Discovery Protocol (SSDP) service elevation of privilege7.0CNA v3.10.3%2025-07-08Fix
CVE-2025-47973Microsoft Virtual Hard Disk elevation of privilege7.8CNA v3.10.5%2025-07-08Fix
CVE-2025-47972Microsoft Windows Input Method Editor (IME) elevation of privilege8.0CNA v3.10.6%2025-07-08Fix
CVE-2025-47971Microsoft Virtual Hard Disk elevation of privilege7.8CNA v3.10.5%2025-07-08Fix
CVE-2025-47422Advanced Installer privilege escalation7.5CISA ADP v3.10.5%2025-07-08
CVE-2025-47178Microsoft Configuration Manager remote code execution8.0CNA v3.12.7%2025-07-08Exploit codeFix
CVE-2025-47159Microsoft Windows Virtualization-Based Security (VBS) elevation of privilege7.8CNA v3.10.4%2025-07-08Fix
CVE-2025-47136Adobe InDesign Desktop integer underflow (wrap or wraparound)7.8CNA v3.10.2%2025-07-08Fix
CVE-2025-47135Adobe Dimension out-of-bounds read5.5CNA v3.10.2%2025-07-08Fix
CVE-2025-47134Adobe InDesign Desktop heap-based buffer overflow7.8CNA v3.10.3%2025-07-08Fix
CVE-2025-47133Adobe FrameMaker out-of-bounds write7.8CNA v3.10.2%2025-07-08Fix
CVE-2025-47132Adobe FrameMaker out-of-bounds write7.8CNA v3.10.2%2025-07-08Fix
CVE-2025-47131Adobe FrameMaker heap-based buffer overflow7.8CNA v3.10.2%2025-07-08Fix
CVE-2025-47130Adobe FrameMaker integer underflow (wrap or wraparound)7.8CNA v3.10.2%2025-07-08Fix
CVE-2025-47129Adobe FrameMaker out-of-bounds write7.8CNA v3.10.2%2025-07-08Fix
CVE-2025-47128Adobe FrameMaker integer underflow (wrap or wraparound)7.8CNA v3.10.2%2025-07-08Fix
CVE-2025-47127Adobe FrameMaker out-of-bounds write7.8CNA v3.10.2%2025-07-08Fix
CVE-2025-47126Adobe FrameMaker out-of-bounds write7.8CNA v3.10.2%2025-07-08Fix
CVE-2025-47125Adobe FrameMaker heap-based buffer overflow7.8CNA v3.10.2%2025-07-08Fix
CVE-2025-47124Adobe FrameMaker out-of-bounds write7.8CNA v3.10.2%2025-07-08Fix
CVE-2025-47123Adobe FrameMaker heap-based buffer overflow7.8CNA v3.10.2%2025-07-08Fix
CVE-2025-47122Adobe FrameMaker heap-based buffer overflow7.8CNA v3.10.2%2025-07-08Fix
CVE-2025-47121Adobe FrameMaker access of uninitialized pointer7.8CNA v3.10.2%2025-07-08Fix
CVE-2025-47120Adobe FrameMaker stack-based buffer overflow5.5CNA v3.10.2%2025-07-08Fix
CVE-2025-47119Adobe FrameMaker null pointer dereference5.5CNA v3.10.2%2025-07-08Fix
CVE-2025-47109Adobe After Effects null pointer dereference5.5CNA v3.10.2%2025-07-08Fix
CVE-2025-47103Adobe InDesign Desktop heap-based buffer overflow7.8CNA v3.10.3%2025-07-08Fix
CVE-2025-47099Adobe InCopy heap-based buffer overflow7.8CNA v3.10.2%2025-07-08Fix
CVE-2025-47098Adobe InCopy access of uninitialized pointer7.8CNA v3.10.2%2025-07-08Fix
CVE-2025-47097Adobe InCopy integer underflow (wrap or wraparound)7.8CNA v3.10.2%2025-07-08Fix
CVE-2025-43594Adobe InDesign Desktop out-of-bounds write7.8CNA v3.10.2%2025-07-08Fix
CVE-2025-43592Adobe InDesign Desktop access of uninitialized pointer7.8CNA v3.10.2%2025-07-08Fix
CVE-2025-43591Adobe InDesign Desktop heap-based buffer overflow7.8CNA v3.10.3%2025-07-08Fix
CVE-2025-43587Adobe After Effects out-of-bounds read5.5CNA v3.10.3%2025-07-08Fix
CVE-2025-43584Adobe Substance3D Viewer out-of-bounds read5.5CNA v3.10.3%2025-07-08Fix
CVE-2025-43583Adobe Substance3D Viewer null pointer dereference5.5CNA v3.10.2%2025-07-08Fix
CVE-2025-43582Adobe Substance3D Viewer heap-based buffer overflow7.8CNA v3.10.2%2025-07-08Fix
CVE-2025-43580Adobe Audition access of memory location after end of buffer5.5CNA v3.10.2%2025-07-08Fix
CVE-2025-43019HP Support Assistant potential escalation of privilege5.8CNA v4.00.1%2025-07-08Fix
CVE-2025-43001Multiple privilege escalation vulnerabilities in SAPCAR6.9CNA v3.10.1%2025-07-08Fix
CVE-2025-42992Multiple privilege escalation vulnerabilities in SAPCAR6.9CNA v3.10.1%2025-07-08Fix
CVE-2025-42986Missing authorization check in SAP NetWeaver and ABAP Platform4.3CNA v3.10.2%2025-07-08Fix
CVE-2025-42985Open redirect vulnerability in SAP BusinessObjects Content Administrator workbench6.1CNA v3.10.2%2025-07-08Fix
CVE-2025-42981SAP NetWeaver Application Server ABAP Due to an open redirect6.1CNA v3.10.2%2025-07-08Fix
CVE-2025-42980Insecure deserialization in SAP NetWeaver Enterprise Portal Federated Portal Network9.1CNA v3.10.8%2025-07-08Fix
CVE-2025-42979Insecure Key and Secret Management vulnerability in SAP GUI for Windows5.6CNA v3.10.1%2025-07-08Fix
CVE-2025-42978SAP NetWeaver Application Server Java improper verification of communication source3.5CNA v3.10.1%2025-07-08Fix
CVE-2025-42974Missing authorization Check in SAP NetWeaver and ABAP Platform (SDCCN)4.3CNA v3.10.3%2025-07-08Fix
CVE-2025-42973Cross-site scripting (XSS) vulnerability in SAP Data Services (DQ Report)5.4CNA v3.10.2%2025-07-08Fix
CVE-2025-42971Memory corruption vulnerability in SAPCAR4.0CNA v3.10.1%2025-07-08Fix
CVE-2025-42970Directory traversal vulnerability in SAPCAR5.8CNA v3.10.3%2025-07-08Fix
CVE-2025-42969Cross-site scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform6.1CNA v3.10.2%2025-07-08Fix
CVE-2025-42968Missing authorization check in SAP NetWeaver (RFC enabled function module)5.0CNA v3.10.3%2025-07-08Fix
CVE-2025-42967Code injection vulnerability in SAP S/4HANA and SAP SCM (Characteristic Propagation)9.9CNA v3.11.0%2025-07-08Fix
CVE-2025-42966Insecure deserialization vulnerability in SAP NetWeaver (XML Data Archiving service)9.1CNA v3.10.7%2025-07-08Fix
CVE-2025-42965SAP BusinessObjects BI Platform server-side request forgery4.1CNA v3.10.2%2025-07-08Fix
CVE-2025-42964Insecure deserialization in SAP NetWeaver Enterprise Portal Administration9.1CNA v3.10.7%2025-07-08Fix
CVE-2025-42963Insecure deserialization in SAP NetWeaver Application Server for Java (Log Viewer )9.1CNA v3.10.7%2025-07-08Fix
CVE-2025-42962Cross-site scripting vulnerability in SAP Business Warehouse6.1CNA v3.10.2%2025-07-08Fix
CVE-2025-42961Missing authorization check in SAP NetWeaver Application Server for ABAP4.9CNA v3.10.3%2025-07-08Fix
CVE-2025-42960Missing authorization Check in SAP Business Warehouse and SAP BW/4HANA BEx Tools4.3CNA v3.10.2%2025-07-08Fix
CVE-2025-42959Missing authentication check after implementation of SAP Security Note 3007182 and 35374768.1CNA v3.10.5%2025-07-08Fix
CVE-2025-42956SAP NetWeaver Application Server ABAP cross-site scripting6.1CNA v3.10.2%2025-07-08Fix
CVE-2025-42954Denial of service (DOS) in SAP NetWeaver Business Warehouse (CCAW application)2.7CNA v3.10.4%2025-07-08Fix
CVE-2025-42953Missing authorization check in SAP NetWeaver Application Server for ABAP8.1CNA v3.10.5%2025-07-08Fix
CVE-2025-42952Missing authorization check in SAP Business Warehouse and SAP Plug-In Basis7.7CNA v3.10.4%2025-07-08Fix
CVE-2025-41668Phoenix Contact AXC F 1152 link following8.8CNA v3.10.6%2025-07-08Fix
CVE-2025-41667Phoenix Contact AXC F 1152 link following8.8CNA v3.10.6%2025-07-08Fix
CVE-2025-41666Phoenix Contact: File access due to the replacement of a critical file used by the watchdog8.8CNA v3.10.6%2025-07-08Fix
CVE-2025-41665Phoenix Contact: DoS of the PLC due to incorrect default permissions possible6.5CNA v3.10.3%2025-07-08Fix
CVE-2025-41224Siemens RUGGEDCOM RMC8388 V5.X protection mechanism failure7.7CNA v4.00.2%2025-07-08Fix
CVE-2025-41223Siemens RUGGEDCOM i800 weak cryptographic algorithm6.3CNA v4.00.1%2025-07-08Fix
CVE-2025-41222Siemens RUGGEDCOM i800 improper exception handling6.9CNA v4.00.3%2025-07-08Fix
CVE-2025-40742Siemens SIPROTEC 5 6MD84 (CP300) sensitive query strings6.0CNA v4.00.3%2025-07-08Fix
CVE-2025-40741Siemens Solid Edge SE2025 stack-based buffer overflow7.3CNA v4.00.2%2025-07-08Fix
CVE-2025-40740Siemens Solid Edge SE2025 out-of-bounds read7.3CNA v4.00.2%2025-07-08Fix
CVE-2025-40739Siemens Solid Edge SE2025 out-of-bounds read7.3CNA v4.00.2%2025-07-08Fix
CVE-2025-40738Siemens SINEC NMS path traversal8.7CNA v4.013.4%2025-07-08Fix
CVE-2025-40737Siemens SINEC NMS path traversal8.7CNA v4.013.4%2025-07-08Fix
CVE-2025-40736Siemens SINEC NMS missing authentication9.3CNA v4.00.4%2025-07-08Fix
CVE-2025-40735Siemens SINEC NMS SQL injection8.7CNA v4.00.5%2025-07-08Fix
CVE-2025-40721Reflected cross-site scripting (XSS) vulnerability in Quiter Gateway5.4v3.10.2%2025-07-08Fix
CVE-2025-40720Reflected cross-site scripting (XSS) vulnerability in Quiter Gateway6.1v3.10.2%2025-07-08Fix
CVE-2025-40719Reflected cross-site scripting (XSS) vulnerability in Quiter Gateway6.1v3.10.2%2025-07-08Fix
CVE-2025-40718Improper error handling vulnerability in Quiter Gateway7.5v3.10.4%2025-07-08Fix
CVE-2025-40717SQL injection vulnerability in Quiter Gateway9.8v3.10.4%2025-07-08Fix
CVE-2025-40716SQL injection vulnerability in Quiter Gateway9.8v3.10.4%2025-07-08Fix
CVE-2025-40715SQL injection vulnerability in Quiter Gateway9.8v3.10.4%2025-07-08Fix
CVE-2025-40714SQL injection vulnerability in Quiter Gateway9.8v3.10.4%2025-07-08Fix
CVE-2025-40713SQL injection vulnerability in Quiter Gateway9.8v3.10.4%2025-07-08Fix
CVE-2025-40712SQL injection vulnerability in Quiter Gateway9.8v3.10.4%2025-07-08Fix
CVE-2025-40711SQL injection vulnerability in Quiter Gateway9.8v3.10.5%2025-07-08Fix
CVE-2025-40593Siemens SIMATIC CN 4100 denial of service7.1CNA v4.00.4%2025-07-08Fix
CVE-2025-38237Linux kernel exynos4-is camera driver vulnerability5.5v3.10.2%2025-07-08Fix
CVE-2025-38236Linux kernel AF_UNIX out-of-band data handling use-after-free7.8CNA v3.10.3%2025-07-08Fix
CVE-2025-37103HPE Networking Instant On hard-coded credential Exposure allows unauthorized access in Web interface9.8CNA v3.11.1%2025-07-08
CVE-2025-37102Authenticated command injection vulnerability in Instant On Command Line interface7.2CNA v3.11.5%2025-07-08
CVE-2025-36600Dell Client Platform BIOS improper access control8.2CNA v3.10.2%2025-07-08Fix
CVE-2025-33054Microsoft Windows Remote Desktop spoofing8.1CNA v3.10.9%2025-07-08Fix
CVE-2025-31326HTML injection vulnerability in SAP BusinessObjects Business Intelligence Platform4.1CNA v3.10.3%2025-07-08Fix
CVE-2025-30313Adobe Illustrator out-of-bounds read5.5CNA v3.10.2%2025-07-08Fix
CVE-2025-30312Adobe Dimension out-of-bounds write7.8CNA v3.10.2%2025-07-08Fix
CVE-2025-29267Abis Adjutant Core Accounting ERP cid parameter SQL injection6.5CISA ADP v3.10.3%2025-07-08
CVE-2025-27369IBM OpenPages with Watson information disclosure4.3CNA v3.10.2%2025-07-08Fix
CVE-2025-27367IBM OpenPages with Watson improper input validation5.3CNA v3.10.3%2025-07-08Fix
CVE-2025-27203Adobe Connect deserialization of untrusted data9.6CNA v3.11.1%2025-07-08Fix
CVE-2025-27165Adobe Substance3D Stager out-of-bounds read5.5CNA v3.10.2%2025-07-08Fix
CVE-2025-27127Siemens TIA Project-Server unrestricted file upload5.3CNA v4.00.3%2025-07-08Fix
CVE-2025-27061Qualcomm Snapdragon out-of-bounds write in Video7.8CNA v3.10.1%2025-07-08Fix
CVE-2025-27058Qualcomm Snapdragon buffer copy without checking size of input in Computer Vision7.8CNA v3.10.1%2025-07-08Fix
CVE-2025-27057Qualcomm Snapdragon buffer over-read in WLAN host7.5CNA v3.10.2%2025-07-08Fix
CVE-2025-27056Qualcomm Snapdragon use-after-free in DSP service7.8CNA v3.10.1%2025-07-08Fix
CVE-2025-27055Qualcomm Snapdragon buffer over-read in Camera7.8CNA v3.10.1%2025-07-08Fix
CVE-2025-27052Qualcomm Snapdragon buffer copy without checking size of input in Core services7.8CNA v3.10.1%2025-07-08Fix
CVE-2025-27051Qualcomm Snapdragon double free in Windows WLAN host7.8CNA v3.10.1%2025-07-08Fix
CVE-2025-27050Qualcomm Snapdragon use-after-free in Camera7.8CNA v3.10.1%2025-07-08Fix
CVE-2025-27047Qualcomm Snapdragon use-after-free in Display7.8CNA v3.10.1%2025-07-08Fix
CVE-2025-27046Qualcomm Snapdragon double free in Display7.8CNA v3.10.1%2025-07-08Fix
CVE-2025-27044Qualcomm Snapdragon out-of-bounds write in Video7.8CNA v3.10.1%2025-07-08Fix
CVE-2025-27043Qualcomm Snapdragon buffer copy without checking size of input in Video7.8CNA v3.10.1%2025-07-08Fix
CVE-2025-27042Qualcomm Snapdragon incorrect calculation of buffer size in Video7.8CNA v3.10.1%2025-07-08Fix
CVE-2025-26636Microsoft Windows Kernel information disclosure5.5CNA v3.10.4%2025-07-08Fix
CVE-2025-25271Phoenix Contact CHARX SEC-3150 OCPP Backend Configuration via Insecure Defaults8.8CNA v3.10.3%2025-07-08Fix
CVE-2025-25270Phoenix Contact CHARX SEC-3150 remote code execution via Unauthenticated Configuration Manipulation9.8CNA v3.10.7%2025-07-08Fix
CVE-2025-25269Phoenix Contact CHARX SEC-3150 local privilege escalation via unauthenticated command injection8.4CNA v3.10.3%2025-07-08Fix
CVE-2025-25268Phoenix Contact CHARX SEC-3150 Unauthenticated Configuration Access via Exposed API endpoint8.8CNA v3.10.3%2025-07-08Fix
CVE-2025-24474Fortinet FortiManager SQL injection2.6CNA v3.10.3%2025-07-08Fix
CVE-2025-24006Phoenix Contact CHARX SEC-3150 privilege escalation via Insecure SSH Permissions7.8CNA v3.10.1%2025-07-08Fix
CVE-2025-24005Phoenix Contact CHARX SEC-3150 local privilege escalation via vulnerable SSH script7.8CNA v3.10.1%2025-07-08Fix
CVE-2025-24004Phoenix Contact CHARX SEC-3150 USB-C buffer overflow via Display interface in EV Charging Stations5.2CNA v3.10.2%2025-07-08
CVE-2025-24003Phoenix Contact CHARX SEC-3150 buffer overflow8.2CNA v3.10.4%2025-07-08
CVE-2025-24002Phoenix Contact CHARX SEC-3150 MQTT DoS vulnerability in German EV Charging Stations5.3CNA v3.10.4%2025-07-08
CVE-2025-23365Siemens TIA Administrator improper access control8.5CNA v4.00.1%2025-07-08Fix
CVE-2025-23364Siemens TIA Administrator improper signature verification6.9CNA v4.00.1%2025-07-08Fix
CVE-2025-21466Qualcomm Snapdragon use-after-free in Display7.8CNA v3.10.1%2025-07-08Fix
CVE-2025-21454Qualcomm Snapdragon buffer over-read in WLAN Embedded SW7.5CNA v3.10.2%2025-07-08Fix
CVE-2025-21450Qualcomm Snapdragon improper authentication in GPS_GNSS9.1CNA v3.10.3%2025-07-08Fix
CVE-2025-21449Qualcomm Snapdragon buffer over-read in WLAN Embedded SW7.5CNA v3.10.2%2025-07-08Fix
CVE-2025-21446Qualcomm Snapdragon buffer over-read in WLAN firmware7.5CNA v3.10.2%2025-07-08Fix
CVE-2025-21445Qualcomm Snapdragon buffer copy without checking size of input in Data HLOS QX7.8CNA v3.10.1%2025-07-08Fix
CVE-2025-21444Qualcomm Snapdragon buffer copy without checking size of input in Data HLOS QX7.8CNA v3.10.1%2025-07-08Fix
CVE-2025-21433Qualcomm Snapdragon null pointer dereference in SPS-HLOS6.2CNA v3.10.1%2025-07-08Fix
CVE-2025-21432Qualcomm Snapdragon double free in SPS-HLOS7.8CNA v3.10.1%2025-07-08Fix
CVE-2025-21427Qualcomm Snapdragon buffer over-read in Data HLOS LNX8.2CNA v3.10.2%2025-07-08Fix
CVE-2025-21426Qualcomm Snapdragon buffer copy without checking size of input in Camera_Linux6.6CNA v3.10.1%2025-07-08Fix
CVE-2025-21422Qualcomm Snapdragon crypto API cryptographic weakness7.1CNA v3.10.1%2025-07-08Fix
CVE-2025-21195Microsoft Azure Service Fabric Runtime elevation of privilege6.0CNA v3.10.4%2025-07-08Fix
CVE-2025-21168Adobe Substance3D Designer out-of-bounds read5.5CNA v3.10.2%2025-07-08Fix
CVE-2025-21167Adobe Substance3D Designer out-of-bounds read5.5CNA v3.10.2%2025-07-08Fix
CVE-2025-21166Adobe Substance3D Designer out-of-bounds write7.8CNA v3.10.2%2025-07-08Fix
CVE-2025-21165Adobe Substance3D Designer out-of-bounds write7.8CNA v3.10.2%2025-07-08Fix
CVE-2025-21164Adobe Substance3D Designer out-of-bounds write7.8CNA v3.10.2%2025-07-08Fix
CVE-2025-21009Samsung Mobile libsavsvc.so decoding malformed frame header out-of-bounds read5.5CNA v3.10.1%2025-07-08Fix
CVE-2025-21008Samsung Mobile libsavsvc.so decoding frame header out-of-bounds read5.5CNA v3.10.1%2025-07-08Fix
CVE-2025-21007Samsung Mobile libsavsvc.so accessing uninitialized memory out-of-bounds write5.5CNA v3.10.1%2025-07-08Fix
CVE-2025-21006Samsung Mobile libsavsvc.so out-of-bounds write7.0CNA v3.10.1%2025-07-08Fix
CVE-2025-21005Samsung Mobile isemtelephony improper access control5.5CNA v3.10.1%2025-07-08Fix
CVE-2025-21004Samsung Galaxy Watch System UI improper intent verification6.2CNA v3.10.1%2025-07-08Fix
CVE-2025-21003Samsung Mobile Devices Emergency SOS insecure storage of sensitive information4.0CNA v3.10.1%2025-07-08Fix
CVE-2025-21002Samsung Mobile Devices LeAudioService improper access control6.2CNA v3.10.1%2025-07-08Fix
CVE-2025-21001Samsung Mobile Devices LeAudioService improper access control6.2CNA v3.10.1%2025-07-08Fix
CVE-2025-21000Samsung Mobile Devices Bluetooth improper privilege management6.2CNA v3.10.1%2025-07-08Fix
CVE-2025-20999Samsung Mobile Devices improper authorization4.1CNA v3.10.2%2025-07-08Fix
CVE-2025-20998Samsung Galaxy Watch SamsungAccount improper access control5.5CNA v3.10.1%2025-07-08Fix
CVE-2025-20997Samsung Galaxy Watch framework vulnerability6.2CNA v3.10.1%2025-07-08Fix
CVE-2025-20983Samsung Mobile Devices out-of-bounds write6.4CNA v3.10.1%2025-07-08Fix
CVE-2025-20982Samsung Mobile Devices out-of-bounds write6.4CNA v3.10.1%2025-07-08Fix
CVE-2025-20695MediaTek chipsets buffer underflow in Bluetooth6.5CISA ADP v3.10.2%2025-07-08Fix
CVE-2025-20694MediaTek chipsets buffer underflow in Bluetooth6.5CISA ADP v3.10.2%2025-07-08Fix
CVE-2025-20693MediaTek chipsets out-of-bounds read in wlan6.5CISA ADP v3.10.1%2025-07-08Fix
CVE-2025-20692MediaTek chipsets out-of-bounds read in wlan5.5CISA ADP v3.10.2%2025-07-08Fix
CVE-2025-20691MediaTek chipsets out-of-bounds read in wlan5.5CISA ADP v3.10.2%2025-07-08Fix
CVE-2025-20690MediaTek chipsets out-of-bounds read in wlan5.5CISA ADP v3.10.2%2025-07-08Fix
CVE-2025-20689MediaTek chipsets out-of-bounds read in wlan5.5CISA ADP v3.10.2%2025-07-08Fix
CVE-2025-20688MediaTek chipsets out-of-bounds read in wlan5.5CISA ADP v3.10.2%2025-07-08Fix
CVE-2025-20687MediaTek chipsets out-of-bounds read in Bluetooth5.5CISA ADP v3.10.2%2025-07-08Fix
CVE-2025-20686MediaTek chipsets heap overflow in wlan8.8CISA ADP v3.10.3%2025-07-08Fix
CVE-2025-20685MediaTek chipsets heap overflow in wlan8.8CISA ADP v3.10.3%2025-07-08Fix
CVE-2025-20684MediaTek chipsets out-of-bounds write in wlan9.8CISA ADP v3.10.6%2025-07-08Fix
CVE-2025-20683MediaTek chipsets out-of-bounds write in wlan9.8CISA ADP v3.10.5%2025-07-08Fix
CVE-2025-20682MediaTek chipsets out-of-bounds write in wlan9.8CISA ADP v3.10.5%2025-07-08Fix
CVE-2025-20681MediaTek chipsets out-of-bounds write in wlan9.8CISA ADP v3.10.6%2025-07-08Fix
CVE-2025-20680MediaTek chipsets heap overflow in Bluetooth9.8CISA ADP v3.10.8%2025-07-08Fix
CVE-2025-7363Wikimedia Foundation Mediawiki TitleIcon: Stored cross-site scripting5.4CISA ADP v3.10.2%2025-07-08Fix
CVE-2025-7362Wikimedia Foundation Mediawiki MsUpload: Stored cross-site scripting5.4CISA ADP v3.10.2%2025-07-08Fix
CVE-2025-7346pyload improper preservation of permissions8.7CNA v4.00.4%2025-07-08
CVE-2025-7345Red Hat Enterprise Linux 10 gdk‑pixbuf: Heap‑buffer‑overflow in gdk‑pixbuf7.5CNA v3.11.2%2025-07-08Fix
CVE-2025-7327Widget for Google Reviews WordPress plugin directory traversal to local file inclusion8.8CNA v3.10.8%2025-07-08Fix
CVE-2025-7326Microsoft EOL ASP.NET Core elevation of privilege7.0CNA v3.10.7%2025-07-08Fix
CVE-2025-7200krishna9772 Pharmacy Management System quantity_upd.php SQL injection9.8v3.10.4%2025-07-08
CVE-2025-7199code-projects Library System notapprove.php SQL injection9.8v3.10.5%2025-07-08
CVE-2025-7198code-projects Jonnys Liquor admin-area.php SQL injection9.8v3.10.5%2025-07-08
CVE-2025-7197code-projects Jonnys Liquor delete-row.php SQL injection9.8v3.10.5%2025-07-08
CVE-2025-7196code-projects Jonnys Liquor browse.php SQL injection9.8v3.10.5%2025-07-08
CVE-2025-7194D-Link DI-500WF jhttpd ip_position.asp sprintf stack-based overflow8.7CNA v4.00.9%2025-07-08
CVE-2025-7193itsourcecode Agri-Trading Online Shopping System suppliercontroller.php SQL injection9.8v3.10.5%2025-07-08
CVE-2025-7192D-Link DIR-645 ssdpcgi cgibin ssdpcgi_main command injection8.8v3.14.3%2025-07-08
CVE-2025-7191code-projects Student Enrollment System login.php SQL injection9.8v3.10.5%2025-07-08
CVE-2025-7190code-projects Library Management System student_edit_photo.php unrestricted upload8.8v3.10.4%2025-07-08
CVE-2025-7189code-projects Chat System send_message.php SQL injection8.8v3.10.4%2025-07-08
CVE-2025-7188code-projects Chat System addmember.php SQL injection8.8v3.10.4%2025-07-08
CVE-2025-7187code-projects Chat System fetch_member.php SQL injection8.8v3.10.4%2025-07-08
CVE-2025-7186code-projects Chat System fetch_chat.php SQL injection8.8v3.10.4%2025-07-08
CVE-2025-7185code-projects Library System approve.php SQL injection9.8v3.10.5%2025-07-08
CVE-2025-7184code-projects Library System books.php SQL injection9.8v3.10.5%2025-07-08
CVE-2025-7183Campcodes Sales and Inventory System customer_account.php SQL injection9.8v3.10.5%2025-07-08
CVE-2025-7182itsourcecode Student Transcript Processing System edit.php cross-site scripting6.1v3.10.4%2025-07-08
CVE-2025-7181code-projects Staff Audit System test.php unrestricted upload9.8v3.10.5%2025-07-08
CVE-2025-7180code-projects Staff Audit System login.php SQL injection9.8v3.10.5%2025-07-08
CVE-2025-7179code-projects Library System add-teacher.php SQL injection9.8v3.10.5%2025-07-08
CVE-2025-7178code-projects Food Distributor Site login.php SQL injection9.8v3.10.5%2025-07-08
CVE-2025-7177PHPGurukul Car Washing Management System editcar-washpoint.php SQL injection7.2v3.10.5%2025-07-08
CVE-2025-7176PHPGurukul Hospital Management System view-medhistory.php SQL injection9.8v3.10.6%2025-07-08
CVE-2025-7175code-projects E-Commerce Site users_photo.php unrestricted upload7.2v3.10.4%2025-07-08
CVE-2025-7174code-projects Library System teacher-issue-book.php SQL injection9.8v3.10.5%2025-07-08
CVE-2025-7173code-projects Library System add-student.php SQL injection9.8v3.10.7%2025-07-08
CVE-2025-7172code-projects Crime Reporting System headlogin.php SQL injection9.8v3.10.6%2025-07-08
CVE-2025-7171code-projects Crime Reporting System policelogin.php SQL injection9.8v3.10.5%2025-07-08
CVE-2025-7170code-projects Crime Reporting System registration.php SQL injection9.8v3.10.5%2025-07-08
CVE-2025-7169code-projects Crime Reporting System complainer_page.php SQL injection9.8v3.10.5%2025-07-08
CVE-2025-7168code-projects Crime Reporting System userlogin.php SQL injection9.8v3.10.5%2025-07-08
CVE-2025-7167code-projects Responsive Blog Site category.php SQL injection8.8v3.10.4%2025-07-08
CVE-2025-7166code-projects Responsive Blog Site single.php SQL injection8.8v3.10.4%2025-07-08
CVE-2025-7165PHPGurukul/Campcodes Cyber Cafe Management System forgot-password.php SQL injection9.8v3.10.5%2025-07-08
CVE-2025-7164PHPGurukul/Campcodes Cyber Cafe Management System index.php SQL injection9.8v3.10.5%2025-07-08
CVE-2025-7163PHPGurukul Zoo Management System add-animals.php SQL injection8.8v3.10.4%2025-07-08
CVE-2025-7162PHPGurukul Zoo Management System add-foreigners-ticket.php SQL injection8.8v3.10.4%2025-07-08
CVE-2025-7161PHPGurukul Zoo Management System add-normal-ticket.php SQL injection8.8v3.10.4%2025-07-08
CVE-2025-7160PHPGurukul Zoo Management System index.php SQL injection9.8v3.11.9%2025-07-08Nuclei
CVE-2025-7159PHPGurukul Zoo Management System manage-animals.php SQL injection8.8v3.10.4%2025-07-08
CVE-2025-7158PHPGurukul Zoo Management System manage-normal-ticket.php SQL injection8.8v3.10.4%2025-07-08
CVE-2025-7157code-projects Online Note Sharing login.php SQL injection9.8v3.10.5%2025-07-08
CVE-2025-7156hitsz-ids airda completions execute SQL injection5.3CNA v4.00.3%2025-07-08
CVE-2025-7155PHPGurukul Online Notes Sharing System Cookie Dashboard SQL injection9.8v3.10.5%2025-07-08
CVE-2025-7154TOTOLINK N200RE cstecgi.cgi sub_41A0F8 os command injection8.8v3.12.4%2025-07-08
CVE-2025-7153CodeAstro Simple Hospital Management System POST parameter doctor.html cross-site scripting5.4v3.10.3%2025-07-08
CVE-2025-7152Campcodes Advanced Online Voting System candidates_add.php unrestricted upload8.8v3.10.4%2025-07-08
CVE-2025-7146Jhenggao iPublish System arbitrary file reading through path traversal8.7CNA v4.00.6%2025-07-08Fix
CVE-2025-7037SQL injection in Ivanti Endpoint Manager7.2CNA v3.11.1%2025-07-08Fix
CVE-2025-7031Config Pages Viewer Critical Access bypass SA-CONTRIB-2025-0865.3CISA ADP v3.10.3%2025-07-08Fix
CVE-2025-7030Two-factor Authentication (TFA) Less critical Access bypass SA-CONTRIB-2025-0856.5CISA ADP v3.10.4%2025-07-08Fix
CVE-2025-6996Improper Encryption in Ivanti Endpoint Manager8.4CNA v3.10.2%2025-07-08Fix
CVE-2025-6995Improper Encryption in Ivanti Endpoint Manager8.4CNA v3.10.2%2025-07-08Fix
CVE-2025-6771OS command injection in Ivanti Endpoint Manager7.2CNA v3.123.0%2025-07-08Emerging ThreatsFix
CVE-2025-6770OS command injection in Ivanti Endpoint Manager7.2CNA v3.119.5%2025-07-08Fix
CVE-2025-6759Citrix Virtual Delivery Agent privilege escalation7.3CNA v4.00.2%2025-07-08Fix
CVE-2025-6746WoodMart WordPress theme authenticated (Contributor+) local file inclusion8.8CNA v3.10.5%2025-07-08Fix
CVE-2025-6744Woodmart WordPress theme unauthenticated arbitrary shortcode execution7.3CNA v3.10.5%2025-07-08Fix
CVE-2025-6743WoodMart WordPress theme authenticated (Contributor+) stored cross-site scripting5.4v3.10.2%2025-07-08Fix
CVE-2025-6244Essential Addons for Elementor WordPress plugin stored cross-site scripting5.4v3.10.2%2025-07-08Fix
CVE-2025-5957rcatheme Guest Support plugin for WordPress ticket deletion endpoint missing authorization5.3CNA v3.10.3%2025-07-08Fix
CVE-2025-5570AI Engine WordPress plugin stored cross-site scripting5.4CNA v3.10.2%2025-07-08Fix
CVE-2025-5537Lightbox and Modal Popup WordPress Plugin FooBox authenticated (Author+) stored cross-site scripting5.4v3.10.2%2025-07-08Fix
CVE-2025-5464Ivanti Connect Secure sensitive information in log files6.5CNA v3.10.4%2025-07-08Fix
CVE-2025-5463Ivanti Connect Secure sensitive information in log files5.5CNA v3.10.4%2025-07-08Fix
CVE-2025-5451Ivanti Connect Secure stack-based buffer overflow4.9CNA v3.10.8%2025-07-08Fix
CVE-2025-5450Ivanti Connect Secure certificate management component improper access control6.3CNA v3.10.3%2025-07-08Fix
CVE-2025-4663Broadcom Brocade Fabric OS denial of service (DoS) after Unusual or Exceptional Conditions6.8CNA v4.00.3%2025-07-08Fix
CVE-2025-3648Data Inference in Now Platform via Conditional ACLs8.2CNA v4.01.7%2025-07-08Emerging ThreatsFix
CVE-2025-3630IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting6.4CNA v3.10.2%2025-07-08Fix
CVE-2025-2827IBM Sterling File Gateway information disclosure4.3CNA v3.10.2%2025-07-08Fix
CVE-2025-2793IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting5.4CNA v3.10.2%2025-07-08Fix
CVE-2025-0928Canonical Juju arbitrary executable upload via authenticated endpoint8.8CNA v3.10.6%2025-07-08Fix
CVE-2025-0293Ivanti Connect Secure injection6.6CNA v3.10.5%2025-07-08Fix
CVE-2025-0292Ivanti Connect Secure server-side request forgery5.5CNA v3.10.6%2025-07-08Fix
CVE-2025-53543Kestra allows stored XSS4.2CNA v3.10.2%2025-07-07Fix
CVE-2025-53540espressif arduino-esp32 CSRF vulnerability in Firmware Update endpoints allows remote code execution8.7CNA v4.00.3%2025-07-07Fix
CVE-2025-53539ReDoS in Fastapi-guard's penetration attempts detector6.9CNA v4.00.4%2025-07-07Fix
CVE-2025-53536RooCodeInc Roo-Code roo Code allows potential remote code execution via .vscode/settings.json8.1CNA v3.10.7%2025-07-07Fix
CVE-2025-53535Better Auth originCheck middleware open redirect2.1CNA v4.00.4%2025-07-07Fix
CVE-2025-53532giscus allows unauthorized discussion creation5.3CNA v3.10.3%2025-07-07
CVE-2025-53531WeGIA allows uncontrolled resource consumption via the fid parameter8.7CNA v4.00.4%2025-07-07Fix
CVE-2025-53530WeGIA allows uncontrolled resource consumption via the errorstr parameter8.7CNA v4.00.4%2025-07-07Fix
CVE-2025-53529WeGIA allows SQL injection in html/funcionario/profile_funcionario.php (id_funcionario parameter)9.8CNA v3.10.5%2025-07-07Fix
CVE-2025-53527WeGIA allows Time-based blind SQL injection in the relatorio_geracao.php endpoint8.3CNA v4.00.4%2025-07-07Fix
CVE-2025-53526WeGIA allows stored XSS attacks in novo_memorando.php2.0CNA v4.00.3%2025-07-07Fix
CVE-2025-53525LabRedesCefetRJ WeGIA WebGia allows cross-site scripting in profile_familiar.php2.0CNA v4.00.3%2025-07-07Fix
CVE-2025-53499Wikimedia Foundation Mediawiki Unauthorized Inspection of Protected variables in AbuseFilter9.1CISA ADP v3.10.3%2025-07-07Fix
CVE-2025-53498Wikimedia Foundation Mediawiki lack of Audit Logging in AbuseFilter5.3CISA ADP v3.10.3%2025-07-07Fix
CVE-2025-53497Wikimedia Foundation Mediawiki stored XSS in RelatedArticles5.4CISA ADP v3.10.2%2025-07-07Fix
CVE-2025-53496Wikimedia Foundation Mediawiki stored XSS in MediaSearch5.4CISA ADP v3.10.2%2025-07-07Fix
CVE-2025-53495Wikimedia Foundation Mediawiki Unauthorized Disclosure of IP Reputation in AbuseFilter9.1CISA ADP v3.10.3%2025-07-07Fix
CVE-2025-53491Wikimedia Foundation Mediawiki XSS in FlaggedRevs5.4CISA ADP v3.10.2%2025-07-07Fix
CVE-2025-53488Wikimedia Foundation Mediawiki stored XSS in WikiHiero6.1CISA ADP v3.10.2%2025-07-07Fix
CVE-2025-53487Wikimedia Foundation Mediawiki ApprovedRevs: Stored cross-site scripting5.4CISA ADP v3.10.2%2025-07-07Fix
CVE-2025-53486Wikimedia Foundation Mediawiki WikiCategoryTagCloud: Reflected cross-site scripting5.4CISA ADP v3.10.3%2025-07-07Fix
CVE-2025-53478Wikimedia Foundation Mediawiki CheckUser: Reflected cross-site scripting in Special:Investigate5.4CISA ADP v3.10.2%2025-07-07Fix
CVE-2025-53473Nimesa Backup and Recovery server-side request forgery6.9CNA v4.00.3%2025-07-07
CVE-2025-53377LabRedesCefetRJ WeGIA WebGia allows cross-site scripting in cadastro_dependente_pessoa_nova.php2.0CNA v4.00.3%2025-07-07Fix
CVE-2025-53376Dokploy allows attackers to run arbitrary OS commands on the Dokploy host6.3CNA v4.01.1%2025-07-07Fix
CVE-2025-53375Dokploy allows attackers to read any file that the Traefik process user can access4.9CNA v4.00.4%2025-07-07Fix
CVE-2025-53374Dokploy improperly Discloses User Information via user.one endpoint1.3CNA v4.00.2%2025-07-07Fix
CVE-2025-53373Natours has a 1 Click Account take over on reset password via host header injection8.9CNA v4.00.3%2025-07-07
CVE-2025-53186Huawei HarmonyOS denial of service5.9CNA v3.10.1%2025-07-07Fix
CVE-2025-53185Huawei HarmonyOS use-after-free6.6CNA v3.10.1%2025-07-07Fix
CVE-2025-53184Huawei HarmonyOS null pointer dereference vulnerability in the PDF preview module6.5CNA v3.10.2%2025-07-07Fix
CVE-2025-53183Huawei HarmonyOS null pointer dereference vulnerability in the PDF preview module6.5CNA v3.10.2%2025-07-07Fix
CVE-2025-53182Huawei HarmonyOS null pointer dereference vulnerability in the PDF preview module6.5CNA v3.10.2%2025-07-07Fix
CVE-2025-53181Huawei HarmonyOS null pointer dereference vulnerability in the PDF preview module6.5CNA v3.10.2%2025-07-07Fix
CVE-2025-53180Huawei HarmonyOS null pointer dereference vulnerability in the PDF preview module6.5CNA v3.10.2%2025-07-07Fix
CVE-2025-53179Huawei HarmonyOS null pointer dereference vulnerability in the PDF preview module6.5CNA v3.10.2%2025-07-07Fix
CVE-2025-53178Huawei HarmonyOS permission bypass vulnerability in the calendar storage module4.8CNA v3.10.1%2025-07-07Fix
CVE-2025-53177Huawei HarmonyOS permission bypass vulnerability in the calendar storage module3.9CNA v3.10.1%2025-07-07Fix
CVE-2025-53176Huawei HarmonyOS stack overflow risk when vector images are parsed during file preview3.3CNA v3.10.1%2025-07-07Fix
CVE-2025-53175Huawei HarmonyOS stack overflow risk when vector images are parsed during file preview4.0CNA v3.10.1%2025-07-07Fix
CVE-2025-53174Huawei HarmonyOS stack overflow risk when vector images are parsed during file preview4.0CNA v3.10.1%2025-07-07Fix
CVE-2025-53173Huawei HarmonyOS stack overflow risk when vector images are parsed during file preview5.3CNA v3.10.2%2025-07-07Fix
CVE-2025-53172Huawei HarmonyOS stack overflow risk when vector images are parsed during file preview4.0CNA v3.10.1%2025-07-07Fix
CVE-2025-53171Huawei HarmonyOS stack overflow risk when vector images are parsed during file preview4.0CNA v3.10.1%2025-07-07Fix
CVE-2025-53170Huawei HarmonyOS null pointer dereference vulnerability in the application exit cause module4.0CNA v3.10.1%2025-07-07Fix
CVE-2025-53169Huawei HarmonyOS improper authentication7.6CNA v3.10.1%2025-07-07Fix
CVE-2025-53168Huawei HarmonyOS permission weakness5.7CNA v3.10.2%2025-07-07Fix
CVE-2025-53167Huawei HarmonyOS authentication vulnerability in the distributed collaboration framework module6.9CNA v3.10.2%2025-07-07Fix
CVE-2025-52492A vulnerability has been discovered in the firmware of Paxton Paxton10 before 4.6 SR6. The firmware file, rootfs.tar.gz, contains hard-coded credentials for the Twilio API. A remote attacker who obtains a copy of the firmware can extract these credentials. This could allow the attacker to gain unaut7.5CISA ADP v3.10.4%2025-07-07
CVE-2025-48501Nimesa Backup and Recovery OS command injection9.3CNA v4.01.3%2025-07-07
CVE-2025-48367Redis DoS vulnerability due to bad connection error handling7.5CNA v3.11.1%2025-07-07Fix
CVE-2025-47202Samsung Exynos 980 out-of-bounds write9.1CISA ADP v3.10.4%2025-07-07Fix
CVE-2025-45479Educoder Challenges code injection9.8CISA ADP v3.10.8%2025-07-07
CVE-2025-45065Employee Record Management System loginerms.php SQL injection9.8CISA ADP v3.10.4%2025-07-07
CVE-2025-43933fblog password reset feature vulnerability9.8CISA ADP v3.10.4%2025-07-07
CVE-2025-43932JobCenter password reset feature vulnerability9.8CISA ADP v3.10.4%2025-07-07
CVE-2025-43931flask-boilerplate password reset feature vulnerability9.8CISA ADP v3.10.4%2025-07-07
CVE-2025-43930Hashview password reset feature vulnerability9.8CISA ADP v3.10.5%2025-07-07
CVE-2025-41672Wago Device Sphere insecure default initialization10.0CNA v3.10.4%2025-07-07Fix
CVE-2025-36014IBM Integration Bus for z/OS code injection8.2CNA v3.10.2%2025-07-07Fix
CVE-2025-32023Redis allows out-of-bounds writes in hyperloglog commands leading to RCE7.0CNA v3.16.0%2025-07-07Exploit codeFix
CVE-2025-26780Samsung Exynos 2400 denial of service7.5CISA ADP v3.10.4%2025-07-07Fix
CVE-2025-24508Offline Extraction of Account Connectivity Credentials (ACCs) in IT Management Suite6.4CNA v3.10.1%2025-07-07Fix
CVE-2025-20325Splunk Enterprise SHCConfig logging channel information disclosure3.1CNA v3.10.4%2025-07-07Fix
CVE-2025-20324Improper access control in System Source Types Configuration in Splunk Enterprise5.4CNA v3.10.3%2025-07-07Fix
CVE-2025-20323Missing access control of Saved Searches in the Splunk Archiver app4.3CNA v3.10.3%2025-07-07Fix
CVE-2025-20322Splunk Enterprise search head cluster rolling restart cross-site request forgery4.3CNA v3.10.2%2025-07-07Fix
CVE-2025-20321Splunk Enterprise search head cluster membership cross-site request forgery6.5CNA v3.10.2%2025-07-07Fix
CVE-2025-20320Denial of service (DoS) through “User Interface Views“ configuration page in Splunk Enterprise6.3CNA v3.10.4%2025-07-07Fix
CVE-2025-20319Remote command execution through Scripted Input files in Splunk Enterprise6.8CNA v3.10.5%2025-07-07Fix
CVE-2025-20300Improper access control Lets Low-Privilege Users Suppress Read-Only Alerts in Splunk Enterprise4.3CNA v3.10.3%2025-07-07Fix
CVE-2025-7259Certain Queries with Duplicate _id fields may cause MongoDB Server to crash6.5CNA v3.10.3%2025-07-07Fix
CVE-2025-7151Campcodes Advanced Online Voting System voters_add.php unrestricted upload8.8v3.10.4%2025-07-07
CVE-2025-7150Campcodes Advanced Online Voting System voters_delete.php SQL injection8.8v3.10.4%2025-07-07
CVE-2025-7149Campcodes Advanced Online Voting System candidates_delete.php SQL injection8.8v3.10.4%2025-07-07
CVE-2025-7148CodeAstro Simple Hospital Management System POST parameter patient.html cross-site scripting5.4v3.10.3%2025-07-07
CVE-2025-7147CodeAstro Patient Record Management System login.php SQL injection9.8v3.10.5%2025-07-07
CVE-2025-7145TeamT5｜ThreatSonar Anti-Ransomware OS command injection8.6CNA v4.01.0%2025-07-07Fix
CVE-2025-7144SourceCodester Best Salon Management System Admin Profile page cross-site scripting4.8v3.10.3%2025-07-07
CVE-2025-7143SourceCodester Best Salon Management System Update Tax page edit-tax.php cross-site scripting5.4v3.10.3%2025-07-07
CVE-2025-7142SourceCodester Best Salon Management System search-appointment.php cross-site scripting5.4v3.10.3%2025-07-07
CVE-2025-7141SourceCodester Best Salon Management System Update Staff page edit_plan.php cross-site scripting5.4v3.10.3%2025-07-07
CVE-2025-7140SourceCodester Best Salon Management System Update Staff page edit-staff.php cross-site scripting5.4v3.10.3%2025-07-07
CVE-2025-7139SourceCodester Best Salon Management System Update Customer Details page cross-site scripting5.4v3.10.3%2025-07-07
CVE-2025-7138SourceCodester Best Salon Management System admin-profile.php SQL injection8.8v3.10.4%2025-07-07
CVE-2025-7137SourceCodester Best Salon Management System schedule-staff.php SQL injection8.8v3.10.4%2025-07-07
CVE-2025-7136Campcodes Online Recruitment Management System view_vacancy.php SQL injection9.8v3.10.5%2025-07-07
CVE-2025-7135Campcodes Online Recruitment Management System ajax.php SQL injection9.8v3.10.5%2025-07-07
CVE-2025-7134Campcodes Online Recruitment Management System ajax.php SQL injection9.8v3.10.5%2025-07-07
CVE-2025-7133CodeAstro Online Movie Ticket Booking System cross-site request forgery5.4v3.10.2%2025-07-07
CVE-2025-7132Campcodes Payroll Management System ajax.php SQL injection9.8v3.10.5%2025-07-07
CVE-2025-7131Campcodes Payroll Management System ajax.php SQL injection9.8v3.10.5%2025-07-07
CVE-2025-7130Campcodes Payroll Management System ajax.php SQL injection9.8v3.10.5%2025-07-07
CVE-2025-7129Campcodes Payroll Management System ajax.php SQL injection9.8v3.10.5%2025-07-07
CVE-2025-7128Campcodes Payroll Management System ajax.php SQL injection9.8v3.10.5%2025-07-07
CVE-2025-7127itsourcecode Employee Management System changepassword.php SQL injection7.2v3.10.4%2025-07-07
CVE-2025-7126itsourcecode Employee Management System adminprofile.php SQL injection7.2v3.10.4%2025-07-07
CVE-2025-7125itsourcecode Employee Management System editempeducation.php SQL injection7.2v3.10.4%2025-07-07
CVE-2025-7124code-projects Online Note Sharing Profile Image userprofile.php unrestricted upload8.8v3.10.4%2025-07-07
CVE-2025-7123Campcodes Complaint Management System complaint-details.php SQL injection7.2v3.10.4%2025-07-07
CVE-2025-7122Campcodes Complaint Management System index.php SQL injection9.8v3.10.5%2025-07-07
CVE-2025-7121Campcodes Complaint Management System complaint-details.php SQL injection8.8v3.10.4%2025-07-07
CVE-2025-7120Campcodes Complaint Management System check_availability.php SQL injection9.8v3.10.5%2025-07-07
CVE-2025-7119Campcodes Complaint Management System index.php SQL injection9.8v3.10.5%2025-07-07
CVE-2025-7118UTT HiPER 840G formPictureUrl buffer overflow8.7CNA v4.00.9%2025-07-07
CVE-2025-7117UTT HiPER 840G websWhiteList buffer overflow8.7CNA v4.00.9%2025-07-07
CVE-2025-7116UTT 进取 750W Fast_wireless_conf buffer overflow7.5v3.10.9%2025-07-07
CVE-2025-7115rowboatlabs rowboat Session route.ts PUT missing authentication6.9CNA v4.00.4%2025-07-07
CVE-2025-7114SimStudioAI Sim Session route.ts POST missing authentication7.5v3.10.6%2025-07-07
CVE-2025-7113Portabilis i-Educar Curricular components module edit cross-site scripting5.4v3.10.3%2025-07-07
CVE-2025-7112Portabilis i-Educar Function Management module educar_funcao_det.php cross-site scripting5.4v3.10.3%2025-07-07
CVE-2025-7111Portabilis i-Educar Course module educar_curso_det.php cross-site scripting5.4v3.10.3%2025-07-07