CVEs published in July 2025
3,846 vulnerabilities, 397 critical, 14 exploited.
- anisha mobile shopcode-projects Mobile Shop LoginAsAdmin.php sql injection6.9 Medium
- zoom, zoom communications inc. clients for ios +1 moreZoom Clients for iOS - Insufficient Control Flow Management6.5 Medium
- zoom, zoom communications inc. clients +1 moreZoom Clients - Cross-site Scripting3.5 Low
- zoom, zoom communications inc. clients for windows +1 moreZoom Clients for Windows - Classic Buffer Overflow6.5 Medium
- zoom communications inc. workplace for linux, zoom workplace desktop +1 moreZoom Workplace for Linux - Improper Certificate Validation7.4 High
- red hat ceph storage 7, discovery 2, enterprise linux 10 +11 more +13 moreGnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()6.5 Medium
- parse-community parse-serverParse Server exposes the data schema via GraphQL API5.3 Medium
- j6t git-guiGit GUI malicious command injection on Windows8.6 High
- phpgurukul zoo management systemSourceCodester Zoo Management System animal_form_template.php cross site scripting5.1 Medium
- redhat keycloak, red hat build of keycloak 26, build of keycloak 26.0 +1 more +3 moreKeycloak: phishing attack via email verification step in first login flow7.1 High
- ibm analytics content hubIBM Analytics Content Hub file upload6.8 Medium
- ibm analytics content hubIBM Analytics Content Hub information disclosure6.8 Medium
- ibm analytics content hubIBM Analytics Content Hub information disclosure4.3 Medium
- ibm analytics content hubIBM Analytics Content Hub information disclosure5.3 Medium
- gnome libxslt, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibxslt: type confusion in xmlnode.psvi between stylesheet and source nodes7.5 High
- gnome libxml2, red hat cert-manager operator for red hat openshift 1.16, openshift compliance operator 1 +48 more +50 moreLibxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr7.8 High
- netgear d6400, d6400 firmware +1 moreNetgear D6400 diag.cgi os command injection5.3 Medium
- universal-omega dynamicpagelist3DynamicPageList3 exposes hidden/suppressed usernames8.7 High
- llamaindex, run-llama run-llama/llama index +1 moreMD5 Hash Collision in run-llama/llama_index6.5 Medium
tzdataTuxCare,tzdata-javaTuxCare +1 moreUpdate of tzdataNo score- autodesk revitRTE File Parsing Heap-Based Overflow Vulnerability7.8 High
- autodesk revitRFA File Parsing Memory Corruption Vulnerability7.8 High
- opentext™ directory servicesRemote code execution vulnerability discovered in OpenText™ Directory Services CE 23.46.3 Medium
- gnu gnutls, red hat ceph storage 7, discovery 2 +12 more +14 moreGnutls: vulnerability in gnutls certtool template parsing6.5 Medium
- mitsubishi electric corporation pv-dr004j, pv-dr004ja +1 moreUse of Hard-coded Credentials vulnerability in Mitsubishi Electric Corporation photovoltaic...7.1 High
- mitsubishi electric corporation pv-dr004j, pv-dr004ja +1 moreWeak Password Requirements vulnerability in Mitsubishi Electric Corporation photovoltaic system...6.5 Medium
- gitlabIncorrect Authorization in GitLab4.3 Medium
- gitlabIncorrect Authorization in GitLab2.7 Low
- gitlabIncorrect Authorization in GitLab2.7 Low
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab8.7 High
- debian linux, linux kernel +1 morewifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback()7.8 High
- debian linux, linux kernel, siemens simatic cn 4100 +2 moref2fs: fix to do sanity check on ino and xnid5.5 Medium
- debian linux, linux kernel +1 moreftrace: Fix UAF when lookup kallsym after ftrace disabled7.8 High
- debian linux, linux kernel +1 moreACPICA: fix acpi operand cache leak in dswstate.c5.5 Medium
- debian linux, linux kernel +1 moreACPICA: fix acpi parse and parseext cache leaks5.5 Medium
- linux, linux kernel +1 morewifi: mt76: mt7996: drop fragments with multicast or broadcast RA8.3 High
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moresoftware node: Correct a OOB check in software_node_get_reference_args()7.0 High
- linux, linux kernel +1 moreeth: fbnic: avoid double free when failing to DMA-map FW msg7.8 High
- linux, linux kernel +1 morefirmware: cs_dsp: Fix OOB memory read access in KUnit test7.1 High
- linux, linux kernel +1 morepowerpc/bpf: fix JIT code size calculation of bpf trampoline7.8 High
- linux, linux kernel +1 morefs/nfs/read: fix double-unlock bug in nfs_return_empty_folio()7.8 High
- debian linux, linux kernel +1 morejbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()5.5 Medium
- debian linux, linux kernel +1 moreata: pata_via: Force PIO for ATAPI devices on VT6415/VT63305.5 Medium
- debian linux, linux kernel +1 moreInput: gpio-keys - fix a sleep while atomic with PREEMPT_RT5.5 Medium
- debian linux, linux kernel +1 morex86/sgx: Prevent attempts to reclaim poisoned pages5.5 Medium
- linux, linux kernel +1 moref2fs: fix to bail out in get_new_segment()7.8 High
- debian linux, linux kernel +1 morescsi: lpfc: Use memcpy() for BIOS version5.5 Medium
- debian linux, linux kernel +1 morenet: ethernet: cortina: Use TOE/TSO on all TCP7.5 High
- linux, linux kernel +1 morefirmware: cs_dsp: Fix OOB memory read access in KUnit test (ctl cache)7.1 High
- linux, linux kernel +1 morefirmware: cs_dsp: Fix OOB memory read access in KUnit test (wmfw info)7.1 High
- Show moreLoading…