CVEs published in July 2025
3,846 vulnerabilities, 397 critical, 14 exploited.
- anisha lifestyle storecode-projects LifeStyle Store cart_add.php sql injection6.9 Medium
- kadencewp gutenberg blocks with ai, stellarwp kadence blocks — page builder toolkit for gutenberg editor +1 moreKadence Blocks – Gutenberg Blocks for Page Builder Features <= 3.5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via `redirectURL` Parameter6.4 Medium
- code-projects library management systemcode-projects/Fabian Ros Library Management System profile_update.php unrestricted upload5.3 Medium
- 9fans plan9port9fans plan9port x509.c value_decode null pointer dereference4.8 Medium
- genetech solutions wordpress pie register pluginWordPress Pie Register Plugin ≤ 3.7.1.4 Authentication Bypass RCE10.0 Critical
- 9fans plan9port9fans plan9port x509.c edump heap-based overflow5.1 Medium
quickjsOSS-FuzzHeap-buffer-overflow in js_create_functionNo scoreselinuxOSS-FuzzHeap-double-free in policydb_destroyNo score- mrubymruby nregs codegen.c scope_new heap-based overflow4.8 Medium
- No product listedZimbra Collaboration Suite (ZCS) before 9.0.0 Patch 46, 10.0.x before 10.0.15, and 10.1.x before...7.5 High
- tenda cp3 pro firmwareInsecure Permissions vulnerability in Tenda CP3 Pro Firmware V22.5.4.93 allows the telnet service...7.5 High
- No product listedCross-Site Scripting (XSS) vulnerability exists in the ping diagnostic feature of FiberHome...4.1 Medium
- No product listedFor Realtek AmebaD devices, a heap-based buffer overflow was discovered in Ameba-AIoT ameba...5.4 Medium
- go toolchain cmd/go, golang go +1 moreUnexpected command execution in untrusted VCS repositories in cmd/go8.6 High
- realtek rtl8762e software development kitRealtek RTL8762EKF-EVB RTL8762E SDK V1.4.0 was discovered to utilize insufficient permission...6.5 Medium
- No product listedTexas Instruments CC2652RB LaunchPad SimpleLink CC13XX CC26XX SDK 7.41.00.17 was discovered to...6.5 Medium
- wss protopA directory traversal vulnerability was discovered in White Star Software Protop version 4.4.2...8.2 High
- No product listedevesys 7.1 (2152) through 8.0 (2202) allows Reflected XSS via the indexeva.php action parameter.6.5 Medium
github.com/cosmos/cosmos-sdkGoCosmos SDK's Integer Overflow vulnerability in its Validator Rewards pool can cause a chain halt7.7 High- d-link dir-825, dlink dir-825 firmware +1 moreD-Link DIR-825 httpd switch_language.cgi sub_410DDC stack-based overflow9.3 Critical
- schiocco support boardSupport Board <= 3.8.0 - Unauthenticated Authorization Bypass due to Use of Default Secret Key9.8 Critical
- schiocco support boardSupport Board <= 3.8.0 - Unauthenticated Arbitrary File Deletion9.8 Critical
- wclovers frontend manager for woocommerce along with bookings subscription listings compatible, wcfm – frontend manager for woocommerce +1 moreWCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible <= 6.7.16 - Missing Authorization to Unauthenticated Plugin Settings Modification6.5 Medium
- bdtask pharmacy management systemkrishna9772 Pharmacy Management System quantity_upd.php sql injection5.3 Medium
- ibm infosphere data replication vsam for z/os remote source, infosphere data replication +1 moreIBM InfoSphere Data Replication VSAM for z/OS Remote Source denial of service7.5 High
- code-projects library systemcode-projects Library System notapprove.php sql injection6.9 Medium
- adobe incopyInCopy | Access of Uninitialized Pointer (CWE-824)7.8 High
- adobe incopyInCopy | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- adobe incopyInCopy | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe framemakerAdobe Framemaker | Stack-based Buffer Overflow (CWE-121)5.5 Medium
- adobe framemakerAdobe Framemaker | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- adobe framemakerAdobe Framemaker | Out-of-bounds Write (CWE-787)7.8 High
- adobe framemakerAdobe Framemaker | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe framemakerAdobe Framemaker | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe framemakerAdobe Framemaker | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- adobe framemakerAdobe Framemaker | Out-of-bounds Write (CWE-787)7.8 High
- adobe framemakerAdobe Framemaker | Access of Uninitialized Pointer (CWE-824)7.8 High
- adobe framemakerAdobe Framemaker | Out-of-bounds Write (CWE-787)7.8 High
- adobe framemakerAdobe Framemaker | Out-of-bounds Write (CWE-787)7.8 High
- adobe framemakerAdobe Framemaker | Out-of-bounds Write (CWE-787)7.8 High
- adobe framemakerAdobe Framemaker | NULL Pointer Dereference (CWE-476)5.5 Medium
- adobe framemakerAdobe Framemaker | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe framemakerAdobe Framemaker | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe framemakerAdobe Framemaker | Out-of-bounds Write (CWE-787)7.8 High
- anisha jonnys liquorcode-projects Jonnys Liquor admin-area.php sql injection6.9 Medium
- adobe illustratorIllustrator | Stack-based Buffer Overflow (CWE-121)7.8 High
- adobe illustratorIllustrator | NULL Pointer Dereference (CWE-476)5.5 Medium
- adobe illustratorIllustrator | Integer Overflow or Wraparound (CWE-190)7.8 High
- adobe illustratorIllustrator | Stack-based Buffer Overflow (CWE-121)7.8 High
- adobe illustratorIllustrator | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- Show moreLoading…