CVEs published in July 2025
3,846 vulnerabilities, 397 critical, 14 exploited.
- adobe illustratorIllustrator | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe illustratorIllustrator | Access of Uninitialized Pointer (CWE-824)7.8 High
- adobe illustratorIllustrator | Out-of-bounds Write (CWE-787)7.8 High
- adobe illustratorIllustrator | Out-of-bounds Write (CWE-787)7.8 High
- adobe illustratorIllustrator | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Out-of-bounds Write (CWE-787)7.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Access of Uninitialized Pointer (CWE-824)7.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Heap-based Buffer Overflow (CWE-122)7.8 High
- citrix windows virtual delivery agent for cvad and citrix daas, virtual apps and desktops +1 moreLocal Privilege escalation allows a low-privileged user to gain SYSTEM privileges7.3 High
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- helmHelm Chart Dependency Updating With Malicious Chart.yaml Content And Symlink Can Lead To Code Execution8.5 High
- adobe experience manager (ms), experience manager +1 moreAdobe Experience Manager (MS) | Deserialization of Untrusted Data (CWE-502)9.8 Critical
- anisha jonnys liquorcode-projects Jonnys Liquor delete-row.php sql injection6.9 Medium
- adobe connect, connect desktop application +1 moreAdobe Connect | Deserialization of Untrusted Data (CWE-502)9.6 Critical
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe substance3d - viewer, substance 3d viewer +1 moreSubstance3D - Viewer | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe substance3d - viewer, substance 3d viewer +1 moreSubstance3D - Viewer | NULL Pointer Dereference (CWE-476)5.5 Medium
- adobe substance3d - viewer, substance 3d viewer +1 moreSubstance3D - Viewer | Heap-based Buffer Overflow (CWE-122)7.8 High
- anisha jonnys liquorcode-projects Jonnys Liquor browse.php sql injection6.9 Medium
- adobe coldfusionColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)5.2 Medium
- adobe coldfusionColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)9.3 Critical
- adobe coldfusionColdFusion | Incorrect Authorization (CWE-863)7.3 High
- adobe coldfusionColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)4.5 Medium
- adobe coldfusionColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)6.2 Medium
- adobe coldfusionColdFusion | Cross-site Scripting (Stored XSS) (CWE-79)4.3 Medium
- adobe coldfusionColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)7.9 High
- adobe coldfusionColdFusion | Use of Hard-coded Credentials (CWE-798)8.8 High
- adobe coldfusionColdFusion | Improper Access Control (CWE-284)2.4 Low
- adobe coldfusionColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)6.8 Medium
- adobe coldfusionColdFusion | Cross-site Scripting (Stored XSS) (CWE-79)4.3 Medium
- adobe coldfusionColdFusion | Cross-site Scripting (Stored XSS) (CWE-79)4.3 Medium
- adobe coldfusionColdFusion | XML Injection (aka Blind XPath Injection) (CWE-91)7.4 High
- d-link di-500wf, dlink di-500wf firmware +1 moreD-Link DI-500WF jhttpd ip_position.asp sprintf stack-based overflow8.7 High
- adonesevangelista agri-trading online shopping systemitsourcecode Agri-Trading Online Shopping System suppliercontroller.php sql injection6.9 Medium
- flux159 mcp-server-kubernetesmcp-server-kubernetes vulnerable to command injection in several tools7.5 High
- d-link dir-645, dlink dir-645 firmware +1 moreD-Link DIR-645 ssdpcgi cgibin ssdpcgi_main command injection5.3 Medium
- hewlett packard enterprise (hpe) hpe networking instant onHardcoded Credential Exposure Allows Unauthorized Access in Web Interface9.8 Critical
github.com/babylonlabs-io/babylonGo,github.com/babylonlabs-io/babylon/v2Go +1 moreBabylon vulnerable to chain halt when a message modifies the validator set at the epoch boundary8.9 High- hewlett packard enterprise (hpe) hpe networking instant onAuthenticated Command Injection Vulnerability In Instant On Command Line Interface7.2 High
- cloudflare workers-sdkCloudflare vite plugin exposes secrets over the built-in dev server2.9 Low
- code-projects student enrollment system, student enrollment +1 morecode-projects Student Enrollment System login.php sql injection6.9 Medium
- ibm openpages with watsonIBM OpenPages with Watson information disclosure4.3 Medium
- ibm openpages with watsonIBM OpenPages with Watson improper input validation5.3 Medium
- ibm openpages with watsonIBM OpenPages with Watson information disclosure5.3 Medium
- ibm openpages with watsonIBM OpenPages with Watson information disclosure5.3 Medium
- code-projects library management systemcode-projects Library Management System student_edit_photo.php unrestricted upload5.3 Medium
- Show moreLoading…