CVEs published in July 2025
3,846 vulnerabilities, 397 critical, 14 exploited.
- labredescefetrj wegiaWeGIA allows Uncontrolled Resource Consumption via the errorstr parameter8.7 High
- labredescefetrj wegiaWeGIA allows SQL Injection in html/funcionario/profile_funcionario.php (id_funcionario parameter)9.8 Critical
- labredescefetrj wegiaWeGIA allows Time-Based Blind SQL Injection in the relatorio_geracao.php endpoint8.3 High
- ibm storage virtualizeIBM Storage Virtualize privilege escalation6.7 Medium
- labredescefetrj wegiaWeGIA allows Stored XSS attacks in novo_memorando.php2.0 Low
- campcodes online recruitment management systemCampcodes Online Recruitment Management System view_vacancy.php sql injection6.9 Medium
- labredescefetrj wegiaWebGia allows Cross-Site Scripting (XSS) in profile_familiar.php via the id_dependente parameter2.0 Low
- wikimedia foundation mediawiki - relatedarticles extensionStored XSS in RelatedArticles5.4 Medium
- labredescefetrj wegiaWebGia allows Cross-Site Scripting (XSS) in cadastro_dependente_pessoa_nova.php via the id_funcionario parameter2.0 Low
- wikimedia foundation mediawiki - flaggedrevs extensionXSS in FlaggedRevs5.4 Medium
- ibm integration busIBM Integration Bus for z/OS code injection8.2 High
- campcodes online recruitment management systemCampcodes Online Recruitment Management System ajax.php sql injection6.9 Medium
- dokployDokploy allows attackers to read any file that the Traefik process user can access4.9 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreCertain Queries with Duplicate _id Fields May Cause MongoDB Server to Crash6.5 Medium
- dokployDokploy allows attackers to run arbitrary OS commands on the Dokploy host.6.3 Medium
- dokployDokploy Improperly Discloses User Information via user.one Endpoint1.3 Low
- ahmed-elgaml11 natoursNatours has a 1 Click Account take over on reset password via Host Header injection8.9 High
- campcodes online recruitment management systemCampcodes Online Recruitment Management System ajax.php sql injection6.9 Medium
- the wikimedia foundation mediawiki - approvedrevs extensionApprovedRevs: Stored Cross-Site Scripting (XSS) via unsanitized system messages5.4 Medium
- wikimedia foundation mediawiki - quiz extensionStored XSS in Quiz5.4 Medium
- wikimedia foundation mediawiki - wikicategorytagcloud extensionWikiCategoryTagCloud: Reflected Cross-Site Scripting (XSS) via linkstyle attribute in parser function5.4 Medium
- codeastro online movie ticket booking systemCodeAstro Online Movie Ticket Booking System cross-site request forgery5.3 Medium
- gstreamerGStreamer H266 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- mescius activereports.netMescius ActiveReports.NET TypeResolutionService Deserialization of Untrusted Data Remote Code Execution Vulnerability9.8 Critical
- mescius activereports.netMescius ActiveReports.NET ReadValue Deserialization of Untrusted Data Remote Code Execution Vulnerability9.8 Critical
- marvell qconvergeconsoleMarvell QConvergeConsole getFileFromURL Unrestricted File Upload Remote Code Execution Vulnerability9.8 Critical
- marvell qconvergeconsoleMarvell QConvergeConsole decryptFile Directory Traversal Arbitrary File Write Vulnerability8.2 High
- marvell qconvergeconsoleMarvell QConvergeConsole getDriverTmpPath Directory Traversal Information Disclosure Vulnerability5.3 Medium
- marvell qconvergeconsoleMarvell QConvergeConsole getFileUploadSize Directory Traversal Information Disclosure Vulnerability5.3 Medium
- marvell qconvergeconsoleMarvell QConvergeConsole saveAsText Directory Traversal Remote Code Execution Vulnerability9.8 Critical
- marvell qconvergeconsoleMarvell QConvergeConsole saveNICParamsToFile Directory Traversal Arbitrary File Write Vulnerability8.2 High
- marvell qconvergeconsoleMarvell QConvergeConsole restoreESwitchConfig Directory Traversal Information Disclosure Vulnerability7.5 High
- marvell qconvergeconsoleMarvell QConvergeConsole getFileUploadBytes Directory Traversal Information Disclosure Vulnerability7.5 High
- marvell qconvergeconsoleMarvell QConvergeConsole deleteAppFile Directory Traversal Arbitrary File Deletion Vulnerability8.2 High
- marvell qconvergeconsoleMarvell QConvergeConsole getFileUploadBytes Directory Traversal Information Disclosure Vulnerability7.5 High
- marvell qconvergeconsoleMarvell QConvergeConsole deleteEventLogFile Directory Traversal Arbitrary File Deletion Vulnerability8.2 High
- marvell qconvergeconsoleMarvell QConvergeConsole getAppFileBytes Directory Traversal Information Disclosure Vulnerability7.5 High
- marvell qconvergeconsoleMarvell QConvergeConsole QLogicDownloadImpl Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability9.4 Critical
- marvell qconvergeconsoleMarvell QConvergeConsole compressFirmwareDumpFiles Directory Traversal Information Disclosure Vulnerability7.5 High
- marvell qconvergeconsoleMarvell QConvergeConsole compressDriverFiles Directory Traversal Information Disclosure Vulnerability7.5 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreIncorrect Handling of incomplete data may prevent mongoS from Accepting New Connections7.5 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server may be susceptible to privilege escalation due to $mergeCursors stage7.7 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreMongoDB Server may be susceptible to DoS due to Accumulated Memory Allocation6.5 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreIncomplete Redaction of Sensitive Information in MongoDB Server Logs4.4 Medium
- campcodes payroll management systemCampcodes Payroll Management System ajax.php sql injection6.9 Medium
- campcodes payroll management systemCampcodes Payroll Management System ajax.php sql injection6.9 Medium
- wikimedia foundation mediawiki - urlshortener extensionStored XSS in UrlShortener6.3 Medium
- campcodes payroll management systemCampcodes Payroll Management System ajax.php sql injection6.9 Medium
- campcodes payroll management systemCampcodes Payroll Management System ajax.php sql injection6.9 Medium
- campcodes payroll management systemCampcodes Payroll Management System ajax.php sql injection6.9 Medium
- Show moreLoading…