CVEs published in July 2025
3,846 vulnerabilities, 397 critical, 14 exploited.
- belkin f9k1122, f9k1122 firmware +1 moreBelkin F9K1122 webs formWanTcpipSetup stack-based overflow8.7 High
- belkin f9k1122, f9k1122 firmware +1 moreBelkin F9K1122 webs formPPPoESetup stack-based overflow8.7 High
- belkin f9k1122, f9k1122 firmware +1 moreBelkin F9K1122 webs formL2TPSetup stack-based overflow8.7 High
- belkin f9k1122, f9k1122 firmware +1 moreBelkin F9K1122 webs formPPTPSetup stack-based overflow8.7 High
- belkin f9k1122, f9k1122 firmware +1 moreBelkin F9K1122 webs formiNICWpsStart stack-based overflow8.7 High
- belkin f9k1122, f9k1122 firmware +1 moreBelkin F9K1122 webs formWpsStart stack-based overflow8.7 High
- belkin f9k1122, f9k1122 firmware +1 moreBelkin F9K1122 webs mp os command injection5.3 Medium
- belkin f9k1122, f9k1122 firmware +1 moreBelkin F9K1122 webs formBSSetSitesurvey os command injection5.3 Medium
- broadcom symantec it management suiteUnauthenticated Remote Code Execution in IT Management Suite9.5 Critical
- belkin f9k1122, f9k1122 firmware +1 moreBelkin F9K1122 webs formSetWanStatic os command injection5.3 Medium
- done-0 jankDone-0 Jank JWT Token jwt_utils.go hard-coded password6.3 Medium
- mao888 bluebell-plusmao888 bluebell-plus JWT Token jwt.go hard-coded password6.3 Medium
- linux, linux kernel +1 moreHID: appletb-kbd: fix "appletb_backlight" backlight device reference counting5.5 Medium
- 07fly 07flycms, customer relationship management +1 more07FLYCMS/07FLY-CMS/07FlyCRM cross-site request forgery5.3 Medium
- shenzhen libituo technology lbt-t300-t310, szlbt lbt-t300-t310 firmware +1 moreShenzhen Libituo Technology LBT-T300-T310 appy.cgi config_3g_para buffer overflow8.7 High
- apache apisix, apache software foundation apisix java plugin runner +1 moreApache APISIX Java Plugin Runner: Local listening file permissions in APISIX plugin runner allow a local attacker to elevate privileges7.8 High
opencvOSS-FuzzUNKNOWN READ in std::__1::__function::__func<cv::PngDecoder::compose_frameNo score- blackvue dashcam 590x, blackvuenorthamerica blackvue dr590x firmware +1 moreBlackVue Dashcam 590X Configuration upload.cgi access control5.3 Medium
- blackvue dashcam 590x, blackvuenorthamerica blackvue dr590x firmware +1 moreBlackVue Dashcam 590X HTTP Endpoint upload.cgi unrestricted upload5.3 Medium
- vercel hypervercel hyper rimraf-standalone.js ignoreMap redos5.3 Medium
quickjsOSS-FuzzHeap-buffer-overflow in JS_CallInternalNo score- alinto sopeIn Alinto SOPE SOGo 2.0.2 through 5.12.2, sope-core/NGExtensions/NGHashMap.m allows a NULL...7.5 High
- scriptcaseIn the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), shell...6.7 Medium
- scriptcaseIn the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), the...7.5 High
- dradisframework dradisDradis through 4.16.0 allows referencing external images (resources) over HTTPS, instead of...4.1 Medium
- jokob-sk netalertxNetAlertX has Password Bypass Vulnerability due to Loose Comparison in PHP9.4 Critical
- modelcontextprotocol python-sdkMCP SDK Vulnerable to FastMCP Server Validation Error, Leading to Denial of Service8.7 High
- modelcontextprotocol python-sdkMCP Python SDK has Unhandled Exception in Streamable HTTP Transport ,Leading to Denial of Service8.7 High
- iroad dashcam q9, q9 firmware +1 moreIROAD Dashcam Q9 MFA Pairing Request allocation of resources5.3 Medium
kernelTuxCare,kernel-abi-stablelistsTuxCare,kernel-coreTuxCare +54 more +56 moreUpdate of kernelNo score- hdfgroup hdf5HDF5 H5FSsection.c H5FS__sect_link_size heap-based overflow4.8 Medium
- hdfgroup hdf5HDF5 H5FL.c H5FL__malloc memory leak4.8 Medium
- hdfgroup hdf5HDF5 H5FScache.c H5FS__sinfo_serialize_node_cb heap-based overflow4.8 Medium
- the wikimedia foundation mediawiki - securepoll extensionSecurePoll: Unauthorized access to SetTranslationHandler allows arbitrary text changes7.5 High
- the wikimedia foundation mediawiki - securepoll extensionSecurePoll: Multiple locations vulnerable to Cross-Site Scripting (XSS) via unescaped input9.8 Critical
- the wikimedia foundation mediawiki - securepoll extensionSecurePoll: Multiple admin actions vulnerable to Cross-Site Request Forgery8.8 High
- wikimedia foundation mediawiki - ipinfo extensionIPInfo: Message key XSS through several IPInfo messages in infobox and popup6.1 Medium
- wikimedia foundation mediawiki - ipinfo extensionDenial of service vector on ipinfo/v0/norevision7.5 High
- linux, linux kernel +1 morepowerpc64/ftrace: fix clobbered r15 during livepatching7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreNFSD: fix race between nfsd registration and exports_proc7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morenfsd: Initialize ssc before laundromat_work to prevent NULL dereference5.5 Medium
- debian linux, linux kernel +1 morejfs: validate AG parameters in dbMount() to prevent crashes7.8 High
- debian linux, linux kernel +1 moremedia: cxusb: no longer judge rbuf when the write fails5.5 Medium
- linux, linux kernel +1 moremedia: imagination: fix a potential memory leak in e5010_probe()5.5 Medium
- debian linux, linux kernel +1 moremedia: vidtv: Terminating the subsequent process of initialization failure7.8 High
- debian linux, linux kernel +1 moremedia: vivid: Change the siize of the composing7.8 High
- debian linux, linux kernel +1 moremedia: imx-jpeg: Cleanup after an allocation error5.5 Medium
- linux, linux kernel +1 morecan: kvaser_pciefd: refine error prone echo_skb_max handling logic7.8 High
- linux, linux kernel +1 moreceph: avoid kernel BUG for encrypted inode with unaligned file size5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreext4: inline: fix len overflow in ext4_prepare_inline_data5.5 Medium
- Show moreLoading…