CVEs published in July 2025
3,846 vulnerabilities, 397 critical, 14 exploited.
- rsjoomla rsfirewall!RSFirewall! <= 1.1.42 - Authenticated (Admin+) Arbitrary File Read4.9 Medium
- eemitch simple file listSimple File List < 4.2.3 - Remote Code Execution9.8 Critical
- tenda fh1201, fh1201 firmware +1 moreTenda FH1201 HTTP POST Request fromSafeUrlFilter buffer overflow8.7 High
- code-projects modern bagcode-projects Modern Bag product-detail.php sql injection6.9 Medium
- akirk friendsFriends 3.5.1 - Authenticated (Subscriber+) PHP Object Injection7.5 High
- 1000projects abc courier management, abc courier management system +1 more1000projects ABC Courier Management add_dealerrequest.php sql injection6.9 Medium
- beeteam368 extensionsBeeTeam368 Extensions <= 2.3.5 - Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- tenda fh1201, fh1201 firmware +1 moreTenda FH1201 HTTP POST Request fromRouteStatic buffer overflow8.7 High
- osrg gobgposrg GoBGP rtr.go SplitRTR out-of-bounds6.3 Medium
- tenda fh1201, fh1201 firmware +1 moreTenda FH1201 HTTP POST Request AdvSetWrlsafeset formWrlsafeset buffer overflow8.7 High
- artifex ghostpdlArtifex GhostPDL New Output File Open Error gdevpdf.c pdf_ferror null pointer dereference5.3 Medium
- scriptsbundle nokri – job board wordpress themeNokri - Job Board WordPress Theme <= 1.6.3 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover8.8 High
- code-projects modern bagcode-projects Modern Bag action.php sql injection6.9 Medium
- iqonic wpbookitWPBookit <= 1.0.4 - Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- iqonic wpbookitWPBookit <= 1.0.4 - Unauthenticated Arbitrary File Upload9.8 Critical
- ivanti policy secureA vulnerability exists on all versions of Ivanti Policy Secure below 22.6R1 where an...4.9 Medium
- ruby resolvresolv vulnerable to DoS via insufficient DNS domain name length validation7.5 High
- ivanti dsm, desktop \& server management +1 moreA hardcoded secret in Ivanti DSM before 2024.2 allows an authenticated attacker on an adjacent...9.0 Critical
- ivanti sentryEnables an authenticated user (enrolled device) to access a service protected by Sentry even if...6.8 Medium
- ivanti avalancheA security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an...9.8 Critical
- canonical multipassLPE on Multipass for macOS7.3 High
- totolink t6, t6 firmware +1 moreTOTOLINK T6 HTTP POST Request cstecgi.cgi setWiFiAclRules buffer overflow8.7 High
- osc ondemandOpen OnDemand Shell App closed websocket DoS5.4 Medium
- anisha mobile shopcode-projects Mobile Shop EditMobile.php sql injection6.9 Medium
- campcodes online movie theater seat reservation systemCampcodes Online Movie Theater Seat Reservation System manage_movie.php sql injection6.9 Medium
- campcodes online movie theater seat reservation systemCampcodes Online Movie Theater Seat Reservation System reserve.php sql injection6.9 Medium
- campcodes online movie theater seat reservation systemCampcodes Online Movie Theater Seat Reservation System manage_reserve.php sql injection6.9 Medium
- campcodes online movie theater seat reservation systemCampcodes Online Movie Theater Seat Reservation System manage_theater.php sql injection6.9 Medium
- shenzhen liandian communication technology ltd v380 ip camera / appfhe1 v1.0.6.0An OEM IP camera manufactured by Shenzhen Liandian Communication Technology LTD exposes a Telnet...10.0 Critical
firefoxMageia,firefox-l10nMageia +1 moreUpdated firefox packages fix security vulnerabilitiesNo scoregnupg2MageiaUpdated gnupg2 packages fix security vulnerabilitiesNo score- ibm mq, mq appliance +1 moreIBM MQ denial of service6.5 Medium
- saltbo zpansaltbo zpan JSON Web Token token.go NewToken hard-coded password6.3 Medium
- facebook mvfstA heap-buffer-overflow vulnerability is possible in mvfst via a specially crafted message during...8.1 High
- meta platforms, inc executorchExecuTorch vulnerable to Heap-based Buffer Overflow attack8.1 High
- haxtheweb issues, psu haxcms-nodejs, haxcms-php +2 morehaxcms-nodejs and haxcms-php Improperly Terminate Sessions4.8 Medium
- kone-net go-chatkone-net go-chat Endpoint file_controller.go GetFile path traversal5.3 Medium
- gitroomhq postiz-appPostiz allows header mutation in middleware facilitates resulting in SSRF8.2 High
- immich-app immichimmich allows account hijacking through oauth27.3 High
better-callnpmBetter Call routing bug can lead to Cache Deception4.9 Medium- letseeqiji gorobbsletseeqiji gorobbs API user.go ResetUserAvatar path traversal5.3 Medium
- meshtastic firmwareTraceroute_APP responses are not rate-limited.2.7 Low
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability5.4 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability6.3 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability5.6 Medium
- gigabyte uefi-genericcomponentsmmentrySMM Arbitrary Write via Unchecked RBX Pointer in CommandRcx08.2 High
- gigabyte uefi-smiflashSMM Arbitrary Memory Access via Flash Handler with Unchecked FuncBlock Pointer7.8 High
- gigabyte uefi-genericcomponentsmmentrySMM Arbitrary Write via Dual-Controlled Pointers in CommandRcx18.2 High
- gigabyte uefi-overclocksmihandlerSMM Arbitrary Write via Unchecked OcHeader Buffer in Platform Configuration Handler8.2 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Privilege escalation to root via CLI command 'request system logout'8.4 High
- Show moreLoading…