CVEs published in July 2025
3,846 vulnerabilities, 397 critical, 14 exploited.
- samsung android, samsung mobile libsavsvc.so +1 moreOut-of-bounds write in handling of macro blocks for MPEG4 codec in libsavsvc.so prior to Android...7.0 High
- samsung android, samsung mobile isemtelephony +1 moreImproper access control in isemtelephony prior to Android 15 allows local attackers to access...5.5 Medium
- samsung wear os, samsung mobile devices +1 moreImproper verification of intent by broadcast receiver in System UI for Galaxy Watch prior to SMR...6.2 Medium
- samsung android, samsung mobile devices +1 moreInsecure storage of sensitive information in Emergency SOS prior to SMR Jul-2025 Release 1 allows...4.0 Medium
- samsung android, samsung mobile devices +1 moreImproper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers...6.2 Medium
- siemens tia project-server, tia project-server v17, totally integrated automation portal (tia portal) v17 +3 more +5 moreA vulnerability has been identified in TIA Project-Server (All versions < V2.1.1), TIA Project...5.3 Medium
- samsung android, samsung mobile devices +1 moreImproper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers...6.2 Medium
- siemens tia administratorA vulnerability has been identified in TIA Administrator (All versions < V3.0.6). The affected...8.5 High
- samsung android, samsung mobile devices +1 moreImproper privilege management in Bluetooth prior to SMR Jul-2025 Release 1 allows local attackers...6.2 Medium
- siemens tia administratorA vulnerability has been identified in TIA Administrator (All versions < V3.0.6). The affected...6.9 Medium
- samsung android, samsung mobile devices +1 moreImproper authorization in accessing saved Wi-Fi password for Galaxy Tablet prior to SMR Jul-2025...4.1 Medium
- samsung wear os, samsung mobile devices +1 moreImproper access control in SamsungAccount for Galaxy Watch prior to SMR Jul-2025 Release 1 allows...5.5 Medium
- samsung wear os, samsung mobile devices +1 moreIncorrect default permission in Framework for Galaxy Watch prior to SMR Jul-2025 Release 1 allows...6.2 Medium
- siemens sicam toolbox iiA vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.11). During...7.7 High
- siemens sicam toolbox iiA vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.11). During...7.7 High
- samsung android, samsung mobile devices +1 moreOut-of-bounds write in checking auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1...6.4 Medium
- samsung android, samsung mobile devices +1 moreOut-of-bounds write in setting auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1...6.4 Medium
- siemens ruggedcom i800, ruggedcom i801, ruggedcom i802 +71 more +73 moreA vulnerability has been identified in RUGGEDCOM i800 (All versions), RUGGEDCOM i801 (All...6.1 Medium
- code-projects library systemcode-projects Library System teacher-issue-book.php sql injection6.9 Medium
- code-projects library systemcode-projects Library System add-student.php sql injection6.9 Medium
- code-projects crime reporting systemcode-projects Crime Reporting System headlogin.php sql injection6.9 Medium
- xtemos woodmartWoodmart <= 8.2.3 - Unauthenticated Arbitrary Shortcode Execution7.3 High
- code-projects crime reporting systemcode-projects Crime Reporting System policelogin.php sql injection6.9 Medium
- code-projects crime reporting systemcode-projects Crime Reporting System registration.php sql injection6.9 Medium
- code-projects crime reporting systemcode-projects Crime Reporting System complainer_page.php sql injection6.9 Medium
- debian linux, linux kernel +1 moremedia: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode()5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreaf_unix: Don't leave consecutive consumed OOB skbs.7.8 High
- code-projects crime reporting systemcode-projects Crime Reporting System userlogin.php sql injection6.9 Medium
- pyloadpyLoad is vulnerable to attacks that bypass localhost restrictions, enabling the creation of arbitrary packages8.7 High
- phoenix contact axc f 1152, axc f 2152, axc f 3152 +2 more +4 morePhoenix Contact: File access due to the replacement of a critical file used by the service security-profile8.8 High
- phoenix contact axc f 1152, axc f 2152, axc f 3152 +2 more +4 morePhoenix Contact: File access due to the replacement of a critical file used by the arp-preinit script8.8 High
- phoenix contact axc f 1152, axc f 2152, axc f 3152 +2 more +4 morePhoenix Contact: File access due to the replacement of a critical file used by the watchdog8.8 High
- phoenix contact axc f 1152, axc f 2152, axc f 3152 +2 more +4 morePhoenix Contact: DoS of the PLC due to incorrect default permissions possible6.5 Medium
- code-projects responsive blog sitecode-projects Responsive Blog Site category.php sql injection5.3 Medium
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +5 more +7 moreOCPP Backend Configuration via Insecure Defaults8.8 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +5 more +7 moreRemote Code Execution via Unauthenticated Configuration Manipulation9.8 Critical
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +5 more +7 moreLocal Privilege Escalation via Unauthenticated Command Injection8.4 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +5 more +7 moreUnauthenticated Configuration Access via Exposed API Endpoint8.8 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +5 more +7 morePrivilege Escalation via Insecure SSH Permissions7.8 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +5 more +7 moreLocal Privilege Escalation via Vulnerable SSH Script7.8 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +5 more +7 moreUSB-C Buffer Overflow via Display Interface in EV Charging Stations5.2 Medium
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +5 more +7 moreMQTT OOB Write Vulnerability in EichrechtAgents of German EV Charging Stations8.2 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +5 more +7 moreMQTT DoS Vulnerability in German EV Charging Stations5.3 Medium
- sap se netweaver application server abap, sap basis +1 moreMultiple vulnerabilities in SAP NetWeaver Application Server ABAP6.1 Medium
- xtemos woodmartWoodMart <= 8.2.3 - Authenticated (Contributor+) Local File Inclusion8.8 High
- xtemos woodmartWoodMart <= 8.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- code-projects responsive blog sitecode-projects Responsive Blog Site single.php sql injection5.3 Medium
- campcodes cyber cafe management systemPHPGurukul/Campcodes Cyber Cafe Management System forgot-password.php sql injection6.9 Medium
- campcodes cyber cafe management systemPHPGurukul/Campcodes Cyber Cafe Management System index.php sql injection6.9 Medium
- radiustheme widget for google reviewsWidget for Google Reviews <= 1.0.15 - Authenticated (Subscriber+) Directory Traversal to Local File Inclusion8.8 High
- Show moreLoading…