CVEs published in July 2025
3,846 vulnerabilities, 397 critical, 14 exploited.
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: J-Web can be exposed on additional interfaces6.9 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Annotate configuration command can be used to change the configuration6.8 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: When RIB sharding is configured each time a show command is executed RPD memory leaks6.8 Medium
- juniper junos os evolvedJunos OS Evolved: When a control-plane firewall filter refers to a prefix-list with more than 10 entries it's not matching6.9 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: When a static route points to a reject next-hop and a gNMI query for this route is processed, RPD crashes8.2 High
- juniper junos, juniper networks junos os +1 moreJunos OS: After removing ssh public key authentication root can still log in8.6 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: When specific SIP packets are processed the MS-MPC will crash8.2 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Sequence of specific PIM packets causes a flowd crash8.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX300 Series: rpd will crash upon receiving a specific, valid BGP UPDATE message8.7 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Receipt of a specific BGP UPDATE causes an rpd crash on devices with BGP multipath configured7.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: A low-privileged user can disable an interface6.8 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An unauthenticated adjacent attacker sending a valid BGP UPDATE packet forces a BGP session reset7.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series with MPC-BUILTIN, MPC 1 through MPC 9: Receipt and processing of a malformed packet causes one or more FPCs to crash7.1 High
- apache commons langApache Commons Lang, Apache Commons Lang: ClassUtils.getClass(...) can throw a StackOverflowError on very long inputs5.3 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: When route validation is enabled, BGP connection establishment failure causes RPD crash6.0 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: When jflow/sflow is configured continuous logical interface flaps causes rpd crash and restart7.1 High
- juniper junos os evolvedJunos OS Evolved: A low-privileged user can execute arbitrary Junos commands and modify the configuration, thereby compromising the system8.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: IPv6 firewall filter fails to match payload-protocol6.9 Medium
- juniper security directorJuniper Security Director: Insufficient authorization for multiple endpoints in web interface6.4 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In an EVPN environment, receipt of specifically malformed BGP update causes RPD crash7.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Specific unknown traffic pattern causes FPC and system to crash when packet capturing is enabled8.2 High
- juniper junos, juniper networks junos os +1 moreJunos OS: ACX Series: When 'hot-standby' mode is configured for an L2 circuit, interface flap causes the FEB to crash7.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: With traceoptions enabled, receipt of malformed AS PATH causes RPD crash8.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Low-privileged user can cause script to run as root, leading to privilege escalation8.5 High
gnutlsTuxCare,gnutls-c++TuxCare,gnutls-daneTuxCare +2 more +4 moreUpdate of gnutlsNo score- red hat ansible automation platform 2, redhat ansible automation platform +1 moreAap: sensitive cookie(s) set without security flags3.1 Low
- red hat ansible automation platform 2, redhat ansible automation platform +1 moreAap: aap-gateway: automation-hub: sensitive information disclosure3.5 Low
static-alloccrates.iostatic-alloc vulnerability leads to uninitialized read after allocating MemBump0.0 None- schneider electric ecostruxure power monitoring expert (pme), ecostruxure power operation (epo) advanced reporting and dashboards module, ecostruxure™ power monitoring expert +1 more +3 moreCWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that exposes TGML diagram...5.3 Medium
- schneider electric ecostruxure™ it data center expertCWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation...7.2 High
- schneider electric ecostruxure™ it data center expertCWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthenticated...6.3 Medium
- schneider electric ecostruxure™ it data center expertCWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could...7.2 High
- huggingface huggingface/transformers, transformers +1 moreRegular Expression Denial of Service (ReDoS) in huggingface/transformers5.3 Medium
- schneider electric ecostruxure™ it data center expertCWE-331: Insufficient Entropy vulnerability exists that could cause root password discovery when...8.9 High
- schneider electric ecostruxure™ it data center expertCWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'...9.5 Critical
- schneider electric ecostruxure™ it data center expertCWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could...5.9 Medium
- apos37 broken link notifierBroken Link Notifier <= 1.3.0 - Authenticated (Contributor+) CSV Injection4.1 Medium
- apos37 broken link notifierBroken Link Notifier <= 1.3.0 - Unauthenticated Server-Side Request Forgery7.2 High
- dasinfomedia wpgym - wordpress gym management systemWPGYM - Wordpress Gym Management System < 67.8.0 - Unauthenticated SQL Injection7.5 High
- fooplugins foogallery, gallery by foogallery +1 moreFooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel <= 2.4.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting6.4 Medium
- wpclever wpc smart compare for woocommerceWPC Smart Compare for WooCommerce <= 6.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- xtemos woodmartWoodMart <= 8.2.5 - Unauthenticated Post Disclosure5.3 Medium
- avimegladon wp register profile with shortcodeWP Register Profile With Shortcode <= 3.6.2 - Authenticated (Contributor+) Sensitive Information Exposure6.5 Medium
- qtPassing values outside of expected range to QColorTransferGenericFunction can cause a denial of service2.3 Low
- contest-gallery contest gallery – upload & vote photos, media, sell with paypal & stripeContest Gallery <= 26.0.8 - Authenticated (Author+) Stored Cross-Site Scripting6.4 Medium
- gb-plugins gb forms dbGB Forms DB <= 1.0.2 - Unauthenticated Remote Code Execution9.8 Critical
- eset safe server, small business security, eset, spol. s r.o. eset endpoint antivirus for windows +7 more +9 moreArbitrary file deletion vulnerability in ESET product installers6.8 Medium
- axis camera station, camera station pro +1 moreThe AXIS Camera Station Server had a flaw that allowed to bypass authentication that is normally...5.3 Medium
- axis camera station pro, device manager, axis communications ab camera station +2 moreThe communication protocol used between the server process and the service control had a flaw...4.8 Medium
- axis device managerThe communication protocol used between client and server had a flaw that could be leveraged to...6.8 Medium
- Show moreLoading…