CVEs published in July 2025
3,846 vulnerabilities, 397 critical, 14 exploited.
- huawei emui, harmonyos +1 morePermission bypass vulnerability in the calendar storage module Impact: Successful exploitation of...4.8 Medium
- teamt5 threatsonar anti-ransomwareTeamT5｜ThreatSonar Anti-Ransomware - OS Command Injection8.6 High
- huawei emui, harmonyos +1 morePermission bypass vulnerability in the calendar storage module Impact: Successful exploitation of...3.9 Low
- huawei harmonyosStack overflow risk when vector images are parsed during file preview Impact: Successful...3.3 Low
- huawei harmonyosStack overflow risk when vector images are parsed during file preview Impact: Successful...4.0 Medium
- huawei harmonyosStack overflow risk when vector images are parsed during file preview Impact: Successful...4.0 Medium
- huawei harmonyosStack overflow risk when vector images are parsed during file preview Impact: Successful...5.3 Medium
- huawei harmonyosStack overflow risk when vector images are parsed during file preview Impact: Successful...4.0 Medium
- huawei harmonyosStack overflow risk when vector images are parsed during file preview Impact: Successful...4.0 Medium
- simSimStudioAI sim route.ts handleLocalFile path traversal6.9 Medium
- huawei harmonyosStack overflow risk when vector images are parsed during file preview Impact: Successful...4.0 Medium
- huawei harmonyosNull pointer dereference vulnerability in the application exit cause module Impact: Successful...4.0 Medium
- huawei harmonyosVulnerability of bypassing the process to start SA and use related functions on distributed...7.6 High
- huawei harmonyosVulnerability of bypassing the process to start SA and use related functions on distributed...5.7 Medium
- huawei harmonyosAuthentication vulnerability in the distributed collaboration framework module Impact: Successful...6.9 Medium
- boyuncms project boyuncmsBoyunCMS curl Index.php server-side request forgery5.3 Medium
- boyuncms project boyuncmsBoyunCMS Server.php sql injection5.3 Medium
- boyuncms project boyuncmsBoyunCMS Configuration File install_ok.php code injection5.3 Medium
clamavOSS-FuzzInvalid-free in cli_pdfNo scorepidginOSS-FuzzHeap-buffer-overflow in xmlnode_parser_structural_error_libxmlNo score- boyuncms project boyuncmsBoyunCMS Index.php unrestricted upload5.3 Medium
- No product listedA vulnerability has been discovered in the firmware of Paxton Paxton10 before 4.6 SR6. The...7.5 High
- redisRedis DoS Vulnerability due to bad connection error handling7.5 High
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +16 more +18 moreIn RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080,...9.1 Critical
- educoder challengesInsufficient security mechanisms for created containers in educoder challenges v1.0 allow...9.8 Critical
- No product listedemployee record management system in php and mysql v1 was discovered to contain a SQL injection...9.8 Critical
- No product listedfblog through 983bede allows account takeover via the password reset feature because SERVER_NAME...9.8 Critical
- No product listedJobCenter through 7e7b0b2 allows account takeover via the password reset feature because...9.8 Critical
- No product listedflask-boilerplate through a170e7c allows account takeover via the password reset feature because...9.8 Critical
- No product listedHashview 0.8.1 allows account takeover via the password reset feature because SERVER_NAME is not...9.8 Critical
- redisRedis allows out of bounds writes in hyperloglog commands leading to RCE7.0 High
- samsung exynos 2400 firmware, modem 5400 firmware +1 moreAn issue was discovered in L2 in Samsung Mobile Processor and Modem Exynos 2400 and Modem 5400....7.5 High
- sir gnuboardAn open redirect vulnerability in gnuboard5 v.5.5.16 allows a remote attacker to obtain sensitive...6.1 Medium
- sir gnuboardAn open redirect vulnerability in gnuboard5 v.5.5.16 allows a remote attacker to obtain sensitive...6.1 Medium
- sir gnuboardAn open redirect vulnerability in gnuboard5 v.5.5.16 allows a remote attacker to obtain sensitive...6.1 Medium
- luajitLuaJIT through 2.1 has an out-of-bounds read in the stack-overflow handler in lj_state.c9.1 Critical
- luajitLuaJIT through 2.1 has an unsinking of IR_FSTORE for NULL metatable, which leads to Denial of...7.5 High
- luajitLuaJIT through 2.1 has a stack-buffer-overflow in lj_strfmt_wfnum in lj_strfmt_num.c.9.8 Critical
dagsterPyPIDagster vulnerable to Path Traversal attack through its /logs endpoint7.5 High- boyuncms project boyuncmsBoyunCMS Installation install2.php deserialization6.3 Medium
- comodo internet security premium, internet security +1 moreComodo Internet Security Premium File Name path traversal6.3 Medium
- llamaindex, run-llama run-llama/llama index +1 moreUnsafe Deserialization in JsonPickleSerializer Enables Remote Code Execution in run-llama/llama_index5.0 Medium
- comodo internet security premium, internet security +1 moreComodo Internet Security Premium Manifest File cis_update_x64.xml os command injection9.2 Critical
- comodo internet security premium, internet security +1 moreComodo Internet Security Premium Manifest File cis_update_x64.xml integrity check9.2 Critical
- comodo internet security premium, internet security +1 moreComodo Internet Security Premium Update certificate validation6.3 Medium
- belkin f9k1122, f9k1122 firmware +1 moreBelkin F9K1122 webs formBSSetSitesurvey stack-based overflow8.7 High
- belkin f9k1122, f9k1122 firmware +1 moreBelkin F9K1122 webs formSetLanguage stack-based overflow8.7 High
- belkin f9k1122, f9k1122 firmware +1 moreBelkin F9K1122 webs formWlanSetupWPS stack-based overflow8.7 High
- belkin f9k1122, f9k1122 firmware +1 moreBelkin F9K1122 webs formWlanMP stack-based overflow8.7 High
- belkin f9k1122, f9k1122 firmware +1 moreBelkin F9K1122 webs formConnectionSetting stack-based overflow8.7 High
- Show moreLoading…