CVEs published in July 2025
3,846 vulnerabilities, 397 critical, 14 exploited.
- nvidia omniverse launcher NVIDIA Omniverse Launcher for Windows and Linux contains a vulnerability in the launcher logs,... 5.5 Medium
- hewlett packard enterprise hpe telco network function virtual orchestrator Hard-Coded Encryption Keys found in System 6.0 Medium
- hewlett packard enterprise hpe telco network function virtual orchestrator Hard-Coded Authentication Keys found in System 6.0 Medium
- hewlett packard enterprise hpe telco network function virtual orchestrator Sensitive Credential Information stored insecurely in System Database 6.0 Medium
- academysoftwarefoundation materialx MaterialX's Lack of Import Depth Limit Leads to DoS (Denial-Of-Service) Via Stack Exhaustion 5.5 Medium
- academysoftwarefoundation materialx MaterialX Stack Overflow via Lack of MTLX XML Parsing Recursion Limit 5.5 Medium
- güralp systems fmus series, min series devices, fmus series seismic monitoring devices +2 more Güralp Systems FMUS Series and MIN Series Devices 9.3 Critical
- academysoftwarefoundation openexr OpenEXR's Unbounded File Header Values can Lead to Out-Of-Memory Errors 4.6 Medium
- academysoftwarefoundation openexr OpenEXR ScanLineProcess::run_fill NULL Pointer Write In "reduceMemory" Mode 4.6 Medium
- hewlett packard enterprise (hpe) hpe telco service activator HPE Telco Service Activator, Protection Mechanism Failure 3.5 Low
- academysoftwarefoundation openexr OpenEXR's Inaccurate Pointer Arithmetic can Cause an Out of Bounds Heap 6.8 Medium
- hewlett packard enterprise (hpe) hpe telco service activator HPE Telco Service Activator, Protection Mechanism Failure 3.5 Low
- academysoftwarefoundation openexr OpenEXR's Forged Unpacked Size can Lead to Heap-Based Buffer Overflow in Deep Scanline Parsing 8.4 High
- academysoftwarefoundation materialx MaterialX is Vulnerable to NULL Pointer Dereference due to Unchecked implGraphOutput 2.0 Low
- academysoftwarefoundation materialx MaterialX's unchecked nodeGraph->getOutput return is vulnerable to NULL Pointer Dereference 2.0 Low
- marvell qconvergeconsole Marvell QConvergeConsole compressConfigFiles Directory Traversal Information Disclosure and Denial-of-Service Vulnerability 9.4 Critical
- opexus foiaxpress public access link (pal), opexustech foiaxpress public access link +1 more OPEXUS FOIAXpress Public Access Link (PAL) account-lockout and CAPTCHA protection bypass 6.9 Medium
- opexus foiaxpress public access link (pal), opexustech foiaxpress public access link +1 more OPEXUS FOIAXpress Public Access Link (PAL) unauthenticated username enumeration 6.9 Medium
- opexus foiaxpress public access link (pal), opexustech foiaxpress public access link +1 more OPEXUS FOIAXpress Public Access Link (PAL) state and territory list unauthorized modification 5.3 Medium
- code-projects vehicle management code-projects Vehicle Management filter.php sql injection 6.9 Medium
- code-projects vehicle management code-projects Vehicle Management filter1.php sql injection 6.9 Medium
- eppler software webtester WebTester 5.x install2.php Unauthenticated Command Execution 9.3 Critical
- simple e-document e-document Simple E-Document Arbitrary File Upload RCE 9.2 Critical
- processmaker, inc. processmaker open source ProcessMaker Open Source < 2.5.2 neoclassic Skin PHP Code Execution 8.7 High
- artica st pandora fms, pandora fms fms +1 more Pandora FMS <= 5.0RC1 Anyterm Unauthenticated Command Injection 10.0 Critical
- r-lib gh The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the... 3.2 Low
- nyariv sandboxjs nyariv sandboxjs 0.8.23 Prototype Pollution Sandbox Escape DoS 7.0 High
- mplayer project lite MPlayer Lite r33064 M3U Stack-Based Buffer Overflow 8.6 High
- linksys wrt120n Linksys WRT120N tmUnblock.cgi Stack-Based Buffer Overflow Admin Password Reset 5.3 Medium
- lxcenter kloxo Kloxo < 6.1.12 Unauthenticated SQL Injection RCE 10.0 Critical
- kimai Kimai 0.9.2 db_restore.php SQL Injection 9.3 Critical
- kaseya kserver Kaseya < 6.3.0.2 uploadImage.asp Arbitrary File Upload RCE 9.3 Critical
- gestioip ipam GestioIP 3.0 ip_checkhost.cgi RCE 8.7 High
- freeftpd freeFTPd <= 1.0.10 PASS Command Stack-Based Buffer Overflow 9.3 Critical
- tufat flashchat FlashChat Arbitrary File Upload RCE 9.3 Critical
- d-link dir-605l, dlink dir-605l firmware +1 more D-Link DIR-605L Captcha Handling Buffer Overflow 9.3 Critical
- clip-bucket clipbucket ClipBucket <= 2.6 ofc_upload_image.php Arbitrary File Upload RCE 10.0 Critical
- beetel teletech ltd. connection manager Beetel Connection Manager NetConfig.ini Stack-Based Buffer Overflow 8.4 High
- astium voip pbx Astium VOIP PBX <= 2.1 SQL Injection File Upload RCE 9.5 Critical
- array networks vapv, vxag +1 more Array Networks vAPV and vxAG Default Credential Privilege Escalation 10.0 Critical
- a10 networks ax series loadbalancer A10 Networks AX Loadbalancer Path Traversal 8.8 High
-
num2wordsPyPI num2words subjected to phishing attack, two versions published containing malware 9.3 Critical - ansible django-ansible-base, red hat ansible automation platform 2.5 for rhel 8, ansible automation platform 2.5 for rhel 9 +2 more Python3.11-django-ansible-base: sensitive authenticator secrets returned in clear text via api in aap 4.4 Medium
-
ms-swiftPyPI MS SWIFT Deserialization RCE Vulnerability 6.6 Medium -
ms-swiftPyPI MS SWIFT WEB-UI RCE Vulnerability 5.1 Medium -
ms-swiftPyPI MS SWIFT Remote Code Execution via unsafe PyYAML deserialization 9.8 Critical - code-projects vehicle management code-projects Vehicle Management filter2.php sql injection 6.9 Medium
- 9001 copyparty copyparty Reflected XSS via Filter Parameter 6.3 Medium
- nintechnet ninjascanner – virus & malware scan NinjaScanner – Virus & Malware scan <= 3.2.5 - Authenticated (Administrator+) Arbitrary File Deletion 7.2 High
- campcodes online hotel reservation system Campcodes Online Hotel Reservation System edit_room.php sql injection 5.3 Medium
- Show olderLoading…