CVEs published in July 2025
3,846 vulnerabilities, 397 critical, 14 exploited.
- tenda o3v2, o3 firmware +1 moreTenda O3V2 httpd setPingInfo fromNetToolGet os command injection5.3 Medium
- honeywell c200e, c300 pcnt02, c300 pcnt05 +6 more +8 moreInteger underflow during processing of short network packets in CDA FTEB responder8.2 High
- honeywell c200e, c300 pcnt02, c300 pcnt05 +7 more +9 moreIncorrect response generation during FTEB protocol processing8.2 High
- honeywell c200e, c300 pcnt02, c300 pcnt05 +7 more +9 moreLack of buffer clearing before reuse may result in incorrect system behavior.9.4 Critical
- honeywell c200e, c300pm, cn100 +7 more +9 moreLack of buffer clearing before reuse may result in incorrect system behavior.6.5 Medium
- honeywell c200e, c300 pcnt02, c300 pcnt05 +7 more +9 moreLack of indexes’ validation against buffer borders leads to remote code execution.8.6 High
- code-projects library systemcode-projects Library System profile.php unrestricted upload5.3 Medium
- honeywell c300 pcnt02, classic enim, ehb +7 more +9 moreDereferencing of an uninitialized pointer leads to denial of service.7.5 High
- yhirose cpp-httplibcpp-httplib Unbounded Memory Allocation in Chunked/No-Length Requests Vulnerability7.5 High
- yhirose cpp-httplibcpp-httplib does not limit the length of a line6.3 Medium
- ggml-org llama.cppInteger Overflow in GGUF Parser can lead to Heap Out-of-Bounds Read/Write in gguf8.9 High
- code-projects library systemcode-projects Library System profile.php unrestricted upload5.3 Medium
- builderengine cmsBuilderEngine 3.5.0 RCE via Unauthenticated Arbitrary File Upload9.3 Critical
- crypttech cryptologCryptoLog Unauthenticated RCE via SQL Injection and Command Injection9.3 Critical
- efs software inc. easy file sharing http serverEasy File Sharing HTTP Server 7.2 Buffer Overflow via POST to /sendemail.ghp9.3 Critical
- real time logic mako serverMako Server v2.5 and v2.6 OS Command Injection via examples/save.lsp9.3 Critical
- apache tomcatApache Tomcat: DoS via excessive h2 streams at connection start7.5 High
- polycom hdx seriesPolycom HDX Series Telnet Command Injection via lan traceroute7.5 High
- processmakerProcessMaker < 3.5.4 Authenticated Plugin Upload RCE8.6 High
- riverbed technology steelhead vcxRiverbed SteelHead VCX Authenticated Arbitrary File Read via Log Filter Injection7.1 High
- plex media serverServiio Media Server Unauthenticated Command Injection via checkStreamUrl VIDEO Parameter9.3 Critical
- vicidial group vicidialVICIdial vicidial_sales_viewer.php Unauthenticated Command Injection via Basic Auth Password9.3 Critical
- minio operatorOpenAI Operator - API Spoofing through Locking Operator on FullScreen6.9 Medium
- apache tomcatApache Tomcat: DoS via integer overflow in multipart file upload7.5 High
- apache tomcatApache Tomcat: APR/Native Connector crash leading to DoS7.5 High
- anisha lifestyle storecode-projects LifeStyle Store success.php sql injection6.9 Medium
- trend micro, inc. micro cleaner one pro, trendmicro cleaner one +1 moreTrend Micro Cleaner One Pro is vulnerable to a Privilege Escalation vulnerability that could...7.8 High
- trend micro, inc. micro worry-free business security services, trendmicro worry-free business security services +1 moreA missing authentication vulnerability in Trend Micro Worry-Free Business Security Services ...7.6 High
- trend micro, inc. micro password manager, trendmicro password manager +1 moreTrend Micro Password Manager (Consumer) version 5.8.0.1327 and below is vulnerable to a Link...7.8 High
- trend micro, inc. micro security (consumer), trendmicro maximum security 2022 +1 moreTrend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation...7.8 High
gitUbuntugit regressionNo score- open-quantum-safe liboqsliboqs secret-dependent branching in HQC reference implementation when compiled with Clang 17-205.9 Medium
- palantir com.palantir.secupload:secure-uploadAccess control issues impacting secure-upload service5.4 Medium
- kubernetes-sigs headlampKubernetes Headlamp Allows Arbitrary Command Injection in macOS Process headlamp@codeSign7.8 High
- ctfer-io chall-managerChall-Manager's HTTP Gateway have no header check timeout leading to potential slow loris attacks8.7 High
- ctfer-io chall-managerChall-Manager's scenario decoding process does not check for zip bombs8.7 High
- ctfer-io chall-managerChall-Manager's scenario decoding process does not check for zip slips8.8 High
- pdfmepdfme has Sandbox Escape and Prototype Pollution vulnerabilities in pdfme expression evaluation6.1 Medium
- matrix-org matrix-rust-sdkMatrix Rust SDK allows SQL injection in the EventCache implementation5.2 Medium
- miraheze discordnotificationsDiscordNotifications allows DOS, SSRF, and possible RCE through requests to user-controlled URLs9.1 Critical
- anisha lifestyle storecode-projects LifeStyle Store cart_remove.php sql injection6.9 Medium
- apache http serverApache HTTP Server: HTTP/2 DoS by Memory Increase7.5 High
- apache http serverApache HTTP Server: mod_ssl TLS upgrade attack7.4 High
- apache http serverApache HTTP Server: mod_proxy_http2 denial of service7.5 High
- apache http serverApache HTTP Server: mod_ssl access control bypass with session resumption9.1 Critical
- apache http serverApache HTTP Server: SSRF on Windows due to UNC paths7.5 High
- apache http serverApache HTTP Server: mod_ssl error log variable escaping7.5 High
- apache http serverApache HTTP Server: SSRF with mod_headers setting Content-Type header7.5 High
- apache http serverApache HTTP Server: HTTP response splitting7.5 High
- zoom, zoom communications inc. clients for windows +1 moreZoom Clients for Windows- Classic Buffer Overflow6.5 Medium
- Show moreLoading…