CVEs published in July 2025
3,846 vulnerabilities, 397 critical, 14 exploited.
- axis camera station, camera station pro, device manager +2 moreThe communication protocol used between client and server had a flaw that could lead to an...9.0 Critical
- ayecode geodirectoryGeoDirectory < 2.8.120 - Contributor+ Stored XSS5.9 Medium
- unknown order delivery date, tychesoftwares order delivery date for woocommerce +1 moreOrder Delivery Date Pro for WooCommerce < 12.6.0 - Unauthenticated Arbitrary Post Title Disclosure4.3 Medium
- aa-team premium age verification / restriction for wordpressPremium Age Verification / Restriction for WordPress <= 3.0.2 - Unauthenticated Arbitrary File Read and Write via remote_tunnel.php9.8 Critical
- campcodes online recruitment management systemCampcodes Online Recruitment Management System ajax.php sql injection6.9 Medium
- livehelperchat lhc-php-resque extensionLiveHelperChat lhc-php-resque Extension List list cross site scripting5.1 Medium
- tenda fh451, fh451 firmware +1 moreTenda FH451 POST Request addressNat fromAddressNat stack-based overflow8.7 High
- tenda o3v2, o3 firmware +1 moreTenda O3V2 httpd setWrlFilterList formWifiMacFilterSet stack-based overflow8.7 High
- tenda o3v2, o3 firmware +1 moreTenda O3V2 httpd setNetworkService setAutoReboot stack-based overflow8.7 High
upxOSS-FuzzHeap-buffer-overflow in N_BELE_RTP::LEPolicy::get32No score- mitsubishi electric corporation melsec iq-f series fx5-cclgn-ms, melsec iq-f series fx5s-30mr/ds, melsec iq-f series fx5s-30mr/es +70 more +72 moreDenial-of-Service Vulnerability in MELSEC iQ-F Series5.3 Medium
- tenda o3v2, o3 firmware +1 moreTenda O3V2 httpd operateMacFilter fromMacFilterModify stack-based overflow8.7 High
- connect2id nimbus jose+jwtNimbus JOSE + JWT is vulnerable to DoS attacks when processing deeply nested JSON5.8 Medium
- phpthumb project phpthumbphpThumb is vulnerable to Command Injection through its gif_outputAsJpeg function4.9 Medium
- totolink n300rb firmwareA hidden remote support feature protected by a static secret in TOTOLINK N300RB firmware version...8.8 High
pandocDebianA Server-Side Request Forgery (SSRF) in JGM Pandoc v3.6.4 allows attackers to gain access to and...3.7 Low- gnu tarGNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with...4.1 Medium
- xenx86: Incorrect stubs exception handling for flags recovery4.3 Medium
- egroupwareAn issue was discovered in eGroupWare 17.1.20190111. A cross-site scripting Reflected (XSS)...6.1 Medium
- egroupwareAn issue was discovered in eGroupWare 17.1.20190111. A User Enumeration vulnerability exists...5.3 Medium
- linksys e1000, e1200, e3200 +2 moreLinksys E1000 devices through 2.1.02, E1200 devices before 2.0.05, and E3200 devices through 1.0...8.3 High
- emerson valvelink dtm, valvelink prm, valvelink snap-on +1 more +3 moreEmerson ValveLink Products Improper Input Validation5.9 Medium
- emerson valvelink dtm, valvelink prm, valvelink snap-on +1 more +3 moreEmerson ValveLink Products Uncontrolled Search Path Element5.9 Medium
- emerson valvelink dtm, valvelink prm, valvelink snap-on +1 more +3 moreEmerson ValveLink Products Protection Mechanism Failure8.5 High
- emerson valvelink dtm, valvelink prm, valvelink snap-on +1 more +3 moreEmerson ValveLink Products Cleartext Storage of Sensitive Information in Memory8.5 High
- emerson valvelink dtm, valvelink prm, valvelink snap-on +1 more +3 moreEmerson ValveLink Products Cleartext Storage of Sensitive Information in Memory9.3 Critical
- tenda o3v2, o3 firmware +1 moreTenda O3V2 httpd setWrlBasicInfo formWifiBasicSet stack-based overflow8.7 High
- advantech iviewAdvantech iView Argument Injection7.1 High
- advantech iviewAdvantech iView Argument Injection7.1 High
- advantech iviewAdvantech iView SQL Injection8.7 High
- advantech iviewAdvantech iView SQL Injection8.7 High
- advantech iviewAdvantech iView SQL Injection8.7 High
- advantech iviewAdvantech iView Path Traversal5.3 Medium
kernelTuxCare,kernel-abi-stablelistsTuxCare,kernel-coreTuxCare +54 more +56 moreUpdate of kernelNo score- advantech iviewAdvantech iView SQL Injection7.2 High
- advantech iviewAdvantech iView Cross-site Scripting5.1 Medium
- advantech iviewAdvantech iView Cross-site Scripting5.1 Medium
- advantech iviewAdvantech iView Cross-site Scripting5.1 Medium
- tenda o3v2, o3 firmware +1 moreTenda O3V2 httpd setRateTest fromSpeedTestSet stack-based overflow8.7 High
- end-of-train and head-of-train remote linking protocol and head-of-train remote linking protocolEnd-of-Train and Head-of-Train Remote Linking Protocol Weak Authentication7.2 High
- tenda o3v2, o3 firmware +1 moreTenda O3V2 httpd setPing fromPingResultGet stack-based overflow8.7 High
- apple app store connectAn authentication issue was addressed with improved state management. This issue is fixed in App...4.6 Medium
- tenda o3v2, o3 firmware +1 moreTenda O3V2 httpd setPingInfo fromNetToolGet stack-based overflow8.7 High
- tenda o3v2, o3 firmware +1 moreTenda O3V2 httpd setSysTimeInfo fromSysToolTime stack-based overflow8.7 High
- meshtastic firmwareMeshtastic allows Command Injection in GitHub Action4.1 Medium
- meshtastic firmwareMeshtastic crashes via an unimplemented routing module reply4.3 Medium
- broadcom brocade sannav, brocade sannav +1 moreDaily Data Dump Collector logs database password in cleartext when running docker exec commands (CVE-2025-6392)6.7 Medium
- broadcom brocade sannav, brocade sannav +1 moreCleartext storage of sensitive information in Brocade SANnav server audit logs.5.1 Medium
- tenda o3v2, o3 firmware +1 moreTenda O3V2 httpd getTraceroute fromTraceroutGet command injection5.3 Medium
- broadcom brocade sannav, brocade sannav +1 morePlaintext security passwords are logged in the audit logs while executing openssl cmd5.1 Medium
- Show moreLoading…