CVEs published in July 2025
3,846 vulnerabilities, 397 critical, 14 exploited.
- llamaindex, run-llama run-llama/llama index +1 moreArbitrary File Read through Path Traversal in run-llama/llama_index7.5 High
- clivedelacruz employee management systemitsourcecode Employee Management System changepassword.php sql injection5.1 Medium
- clivedelacruz employee management systemitsourcecode Employee Management System adminprofile.php sql injection5.3 Medium
- clivedelacruz employee management systemitsourcecode Employee Management System editempeducation.php sql injection5.3 Medium
- anisha online note sharingcode-projects Online Note Sharing Profile Image userprofile.php unrestricted upload5.3 Medium
- campcodes complaint management systemCampcodes Complaint Management System complaint-details.php sql injection5.1 Medium
- langgenius dify, langgenius/dify +1 moreXSS Vulnerability in langgenius/dify8.0 High
- llamaindex, run-llama run-llama/llama index +1 moreDenial of Service via Uncontrolled Recursive JSON Parsing in JSONReader in run-llama/llama_index6.5 Medium
- llamaindex, run-llama run-llama/llama index +1 moreHardlink-Based Path Traversal in run-llama/llama_index6.2 Medium
- huggingface huggingface/transformers, transformers +1 moreImproper Input Validation in huggingface/transformers3.5 Low
- langgenius dify, langgenius/dify +1 moreUnsanitized Input in langgenius/dify9.8 Critical
- parisneo parisneo/lollmsTiming Attack Vulnerability in parisneo/lollms7.5 High
- huggingface huggingface/transformers, transformers +1 moreRegular Expression Denial of Service (ReDoS) in huggingface/transformers5.3 Medium
- huggingface huggingface/transformers, transformers +1 moreRegular Expression Denial of Service (ReDoS) in huggingface/transformers5.3 Medium
- llamaindex, run-llama run-llama/llama index +1 morePath Traversal via Symbolic Links in run-llama/llama_index7.5 High
- huggingface huggingface/transformers, transformers +1 moreRegular Expression Denial of Service (ReDoS) in huggingface/transformers5.3 Medium
- llamaindex, run-llama run-llama/llama index +1 moreMD5 Hash Collision in run-llama/llama_index5.3 Medium
- llamaindex, run-llama run-llama/llama index +1 moreXML Entity Expansion vulnerability in run-llama/llama_index7.5 High
- gavias zilomWordPress Zilom theme < 1.4.5 - Cross Site Scripting (XSS) vulnerability7.1 High
- lunary, lunary-ai lunary-ai/lunary +1 moreStored Cross-site Scripting (XSS) in lunary-ai/lunary9.1 Critical
- campcodes complaint management systemCampcodes Complaint Management System index.php sql injection6.9 Medium
- frauscher fds-snmp101, fds101, fds102 +2 moreOS Command Injection via USB Config Load6.8 Medium
- frauscher fds102OS Command Injection via Config Upload in WebUI9.1 Critical
- campcodes complaint management systemCampcodes Complaint Management System complaint-details.php sql injection5.3 Medium
- campcodes complaint management systemCampcodes Complaint Management System check_availability.php sql injection6.9 Medium
- sur-fbd cmms cmmsHard-coded Password in SUR-FBD CMMS8.5 High
- campcodes complaint management systemCampcodes Complaint Management System index.php sql injection6.9 Medium
- utt hiper 840g, 840g firmware +1 moreUTT HiPER 840G formPictureUrl buffer overflow8.7 High
- utt hiper 840g, 840g firmware +1 moreUTT HiPER 840G websWhiteList buffer overflow8.7 High
- utt 进取 750w, 750w firmware +1 moreUTT 进取 750W Fast_wireless_conf buffer overflow8.7 High
- wago device sphereWAGO: Vulnerability in WAGO Device Sphere10.0 Critical
- rowboatlabs rowboatrowboatlabs rowboat Session route.ts PUT missing authentication6.9 Medium
- simSimStudioAI sim Session route.ts POST missing authentication6.9 Medium
- portabilis i-educarPortabilis i-Educar Curricular Components Module edit cross site scripting5.1 Medium
- broadcom symantec it management suiteOffline Extraction of Account Connectivity Credentials (ACCs) in IT Management Suite6.4 Medium
- nimesa backup and recoveryServer-side request forgery (SSRF) vulnerability exists n multiple versions of Nimesa Backup and...6.9 Medium
- nimesa backup and recoveryAn OS command injection issue exists in Nimesa Backup and Recovery v2.3 and v2.4. If this...9.3 Critical
- portabilis i-educarPortabilis i-Educar Function Management Module educar_funcao_det.php cross site scripting5.1 Medium
- portabilis i-educarPortabilis i-Educar Course Module educar_curso_det.php cross site scripting5.1 Medium
- portabilis i-educarPortabilis i-Educar School Module educar_escola_lst.php cross site scripting5.1 Medium
- portabilis i-educarPortabilis i-Educar Student Benefits Registration educar_aluno_beneficio_lst.php cross site scripting5.1 Medium
- huawei emui, harmonyos +1 moreVulnerability that allows third-party call apps to send broadcasts without verification in the...5.9 Medium
- huawei emui, harmonyos +1 moreVirtual address reuse issue in the memory management module, which can be exploited by non...6.6 Medium
- huawei harmonyosNull pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation...6.5 Medium
- risesoft-y9 digital-infrastructurerisesoft-y9 Digital-Infrastructure Y9FileController.java deleteFile path traversal5.3 Medium
- huawei harmonyosNull pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation...6.5 Medium
- huawei harmonyosNull pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation...6.5 Medium
- huawei harmonyosNull pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation...6.5 Medium
- huawei harmonyosNull pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation...6.5 Medium
- huawei harmonyosNull pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation...6.5 Medium
- Show moreLoading…