CVEs published in July 2025
3,846 vulnerabilities, 397 critical, 14 exploited.
- sap se netweaver application server for abapMissing Authorization check in SAP NetWeaver Application Server for ABAP4.9 Medium
- sap se business warehouse and sap bw/4hana bex toolsMissing Authorization Check in SAP Business Warehouse and SAP BW/4HANA BEx Tools4.3 Medium
- sap se netweaver abap server and abap platformMissing Authentication check after implementation of SAP Security Note 3007182 and 35374768.1 High
- sap se netweaver business warehouse (ccaw application)Denial of service (DOS) in SAP NetWeaver Business Warehouse (CCAW application)2.7 Low
- sap se netweaver application server for abapMissing Authorization check in SAP NetWeaver Application Server for ABAP8.1 High
- sap se business warehouse and sap plug-in basisMissing Authorization check in SAP Business Warehouse and SAP Plug-In Basis7.7 High
- sap se businessobjects business intelligence platform (web intelligence)HTML Injection vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence)4.1 Medium
- totolink n200re, n200re firmware +1 moreTOTOLINK N200RE cstecgi.cgi sub_41A0F8 os command injection5.3 Medium
libavcOSS-FuzzHeap-use-after-free in ih264_inter_pred_luma_horz_ssse3No score- codeastro simple hospital management systemCodeAstro Simple Hospital Management System POST Parameter doctor.html cross site scripting5.1 Medium
- No product listedAdvanced Installer before 22.6 has an uncontrolled search path element local privilege escalation...7.5 High
- No product listedSQL Injection vulnerability in Abis, Inc Adjutant Core Accounting ERP build v.PreBeta250F allows...6.5 Medium
- campcodes advanced online voting systemCampcodes Advanced Online Voting System candidates_add.php unrestricted upload5.3 Medium
- campcodes advanced online voting systemCampcodes Advanced Online Voting System voters_add.php unrestricted upload5.3 Medium
- campcodes advanced online voting systemCampcodes Advanced Online Voting System voters_delete.php sql injection5.3 Medium
- campcodes advanced online voting systemCampcodes Advanced Online Voting System candidates_delete.php sql injection5.3 Medium
- codeastro simple hospital management systemCodeAstro Simple Hospital Management System POST Parameter patient.html cross site scripting5.1 Medium
- code-projects patient record management systemCodeAstro Patient Record Management System login.php sql injection6.9 Medium
- mayurik best salon management systemSourceCodester Best Salon Management System Admin Profile Page admin-profile.php cross site scripting4.8 Medium
- mayurik best salon management systemSourceCodester Best Salon Management System Update Tax Page edit-tax.php cross site scripting4.8 Medium
- kestra-io kestraKestra allows Stored XSS before 0.224.2 Medium
- mayurik best salon management systemSourceCodester Best Salon Management System search-appointment.php cross site scripting4.8 Medium
- espressif arduino-esp32CSRF Vulnerability in Firmware Update Endpoints Allows Remote Code Execution8.7 High
- fastapi-guard fastapi guard, rennf93 fastapi-guard +1 moreReDoS in fastapi-guard's penetration attempts detector6.9 Medium
- wikimedia foundation mediawiki - mediasearch extensionStored XSS in MediaSearch5.4 Medium
- mayurik best salon management systemSourceCodester Best Salon Management System Update Staff Page edit_plan.php cross site scripting4.8 Medium
- google chromeos, chrome os +1 moreAn Improper Access Control vulnerability in the Stylus Tools component of Google ChromeOS version...6.1 Medium
- wikimedia foundation mediawiki - wikihiero extensionStored XSS in WikiHiero6.1 Medium
- wikimedia foundation mediawiki - abusefilter extensionLack of Audit Logging in AbuseFilter5.3 Medium
- wikimedia foundation mediawiki - abusefilter extensionUnauthorized Inspection of Protected Variables in AbuseFilter9.1 Critical
- mayurik best salon management systemSourceCodester Best Salon Management System Update Staff Page edit-staff.php cross site scripting4.8 Medium
- wikimedia foundation mediawiki - abusefilter extensionUnauthorized Disclosure of IP Reputation in AbuseFilter9.1 Critical
golangTuxCare,golang-binTuxCare,golang-docsTuxCare +4 more +6 moreUpdate of golangNo score- the wikimedia foundation mediawiki - checkuser extensionCheckUser: Reflected Cross-Site Scripting (XSS) in Special:Investigate via unsanitized i18n messages5.4 Medium
- mayurik best salon management systemSourceCodester Best Salon Management System Update Customer Details Page edit-customer-detailed.php cross site scripting4.8 Medium
- roocode roo code, roocodeinc roo-code +1 moreRoo Code allows Potential Remote Code Execution via .vscode/settings.json8.1 High
- splunk, splunk enterprise, cloud platform +1 more +3 moreDenial of Service (DoS) in Search Head Cluster through Cross-Site Request Forgery (CSRF) in Splunk Enterprise4.3 Medium
- splunk, splunk enterprise +1 moreMissing Access Control of Saved Searches in the Splunk Archiver app4.3 Medium
- splunk, splunk enterprise, cloud platform +1 more +3 moreMembership State Change in Splunk Search Head Cluster through a Cross-Site Request Forgery (CSRF) in Splunk Enterprise6.5 Medium
- splunk, splunk cloud platform, enterprise +2 moreSensitive Information Disclosure in the SHCConfig logging channel in Clustered Deployments in Splunk Enterprise3.1 Low
- splunk, splunk enterprise +1 moreRemote Command Execution through Scripted Input Files in Splunk Enterprise6.8 Medium
- splunk, splunk enterprise, cloud platform +1 more +3 moreImproper Access Control in System Source Types Configuration in Splunk Enterprise5.4 Medium
- splunk, splunk enterprise, cloud platform +1 more +3 moreDenial of Service (DoS) through “User Interface - Views“ configuration page in Splunk Enterprise6.3 Medium
- splunk, splunk cloud platform, enterprise +2 moreImproper Access Control Lets Low-Privilege Users Suppress Read-Only Alerts in Splunk Enterprise4.3 Medium
- ibm engineering requirements management doors, engineering requirements management doors web access +1 moreIBM Engineering Requirements Management DOORS weak authentication5.9 Medium
- mayurik best salon management systemSourceCodester Best Salon Management System admin-profile.php sql injection5.3 Medium
- better-authBetter Auth has an Open Redirect Vulnerability in originCheck Middleware Affecting Multiple Routes2.1 Low
- giscusgiscus allows unauthorized discussion creation5.3 Medium
- labredescefetrj wegiaWeGIA allows Uncontrolled Resource Consumption via the fid parameter8.7 High
- mayurik best salon management systemSourceCodester Best Salon Management System schedule-staff.php sql injection5.3 Medium
- Show moreLoading…