CVEs published in July 2025
3,846 vulnerabilities, 397 critical, 14 exploited.
- tenda fh1202, fh1202 firmware +1 moreTenda FH1202 Natlimit fromNatlimit stack-based overflow8.7 High
- tenda fh1202, fh1202 firmware +1 moreTenda FH1202 GstDhcpSetSer fromGstDhcpSetSer stack-based overflow8.7 High
- tenda fh1202, fh1202 firmware +1 moreTenda FH1202 AdvSetWan fromAdvSetWan stack-based overflow8.7 High
- totolink t6, t6 firmware +1 moreTOTOLINK T6 HTTP POST Request cstecgi.cgi setTracerouteCfg command injection5.3 Medium
- totolink t6, t6 firmware +1 moreTOTOLINK T6 HTTP POST Request cstecgi.cgi setDiagnosisCfg command injection5.3 Medium
- cato networks clientCato Networks Linux Client Local Privilege Escalation via Symlink8.6 High
- jinher oaJinher OA DelTemp.aspx xml external entity reference6.9 Medium
- phpgurukul vehicle parking management systemPHPGurukul Vehicle Parking Management System bwdates-reports-details.php sql injection5.3 Medium
- phpgurukul vehicle parking management systemPHPGurukul Vehicle Parking Management System index.php sql injection6.9 Medium
- phpgurukul vehicle parking management systemPHPGurukul Vehicle Parking Management System manage-category.php sql injection5.3 Medium
- anisha online appointment booking systemcode-projects Online Appointment Booking System getDay.php sql injection6.9 Medium
- anisha online appointment booking systemcode-projects Online Appointment Booking System cancelbookingpatient.php sql injection6.9 Medium
- anisha online appointment booking systemcode-projects Online Appointment Booking System ulocateus.php sql injection6.9 Medium
- code-projects modern bagcode-projects Modern Bag contact-list.php sql injection6.9 Medium
- code-projects modern bagcode-projects Modern Bag slideupdate.php sql injection6.9 Medium
- code-projects modern bagcode-projects Modern Bag contact-back.php sql injection6.9 Medium
- code-projects chat systemcode-projects Chat System update_account.php sql injection5.3 Medium
- code-projects modern bagcode-projects Modern Bag productadd_back.php sql injection6.9 Medium
- code-projects modern bagcode-projects Modern Bag slide.php sql injection6.9 Medium
- roundup-tracker roundupRoundup is vulnerable to XSS through interactions between URLs and issue tracker templates6.4 Medium
- sugarcrmSugarCRM before 13.0.4 and 14.x before 14.0.1 allows SSRF in the API module because a limited...7.2 High
- code-projects modern bagcode-projects Modern Bag product-update.php sql injection6.9 Medium
- tenda fh451, fh451 firmware +1 moreTenda FH451 HTTP POST Request Natlimit fromNatlimit stack-based overflow8.7 High
- tenda fh451, fh451 firmware +1 moreTenda FH451 HTTP POST Request L7Prot frmL7ProtForm stack-based overflow8.7 High
- phpgurukul vehicle parking management systemPHPGurukul Vehicle Parking Management System manage-incomingvehicle.php sql injection5.3 Medium
- phpgurukul vehicle parking management systemPHPGurukul Vehicle Parking Management System manage-outgoingvehicle.php sql injection5.3 Medium
- phpgurukul vehicle parking management systemPHPGurukul Vehicle Parking Management System reg-users.php sql injection5.3 Medium
- phpgurukul vehicle parking management systemPHPGurukul Vehicle Parking Management System search-vehicle.php sql injection5.3 Medium
- joeybling springboot mybatisplusJoeyBling SpringBoot_MyBatisPlus download path traversal5.3 Medium
- joeybling springboot mybatisplusJoeyBling SpringBoot_MyBatisPlus upload SysFileController unrestricted upload5.3 Medium
- open5gsOpen5GS SCTP Partial Message recv_handler assertion4.8 Medium
- phpgurukul vehicle parking management systemPHPGurukul Vehicle Parking Management System view-outgoingvehicle-detail.php sql injection5.3 Medium
- phpgurukul vehicle parking management systemPHPGurukul Vehicle Parking Management System forgot-password.php sql injection6.9 Medium
- phpgurukul vehicle parking management systemPHPGurukul Vehicle Parking Management System print.php sql injection5.3 Medium
- phpgurukul vehicle parking management systemPHPGurukul Vehicle Parking Management System profile.php sql injection5.3 Medium
- apache zeppelinApache Zeppelin: raft directory listing and file read7.5 High
- phpgurukul vehicle parking management systemPHPGurukul Vehicle Parking Management System signup.php sql injection6.9 Medium
- phpgurukul vehicle parking management systemPHPGurukul Vehicle Parking Management System view--detail.php sql injection5.3 Medium
- code-projects modern bagcode-projects Modern Bag category-list.php sql injection6.9 Medium
- code-projects simple car rental systemcode-projects Simple Car Rental System add_cars.php unrestricted upload5.1 Medium
- code-projects simple car rental systemcode-projects Simple Car Rental System approve.php sql injection6.9 Medium
- code-projects simple car rental systemcode-projects Simple Car Rental System pay.php sql injection6.9 Medium
- anisha job diarycode-projects Job Diary search.php sql injection6.9 Medium
- code-projects modern bagcode-projects Modern Bag login-back.php sql injection6.9 Medium
- ibm storage scaleIBM Storage Scale information disclosure6.5 Medium
- ait themes csv import/export, ait-themes csv import \/ export +1 moreAIT CSV import/export <= 3.0.3 - Unauthenticated Arbitrary File Upload9.8 Critical
- webnus modern events calendar liteModern Events Calendar Lite <= 6.3.0 - Unauthenticated SQL Injection5.9 Medium
- boldgrid total upkeep – wordpress backup plugin plus restore & migrate by boldgrid, total upkeep +1 moreTotal Upkeep by BoldGrid <= 1.14.9 - Unauthenticated Backup Download7.5 High
- campcodes sales and inventory systemCampcodes Sales and Inventory System product_add.php unrestricted upload6.9 Medium
- campcodes sales and inventory systemCampcodes Sales and Inventory System product_add.php sql injection6.9 Medium
- Show moreLoading…