CVEs published in July 2025
3,846 vulnerabilities, 397 critical, 14 exploited.
- tenda fh1205, fh1205 firmware +1 moreTenda FH1205 WifiExtraSet formWifiExtraSet stack-based overflow8.7 High
- hewlett packard enterprise hpe autopass license server, hpe autopass license server +1 moreAn information disclosure vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.17.7.5 High
- hewlett packard enterprise hpe autopass license server, hpe autopass license server +1 moreAn hsqldb-related remote code execution vulnerability exists in HPE AutoPass License Server (APLS...8.0 High
- hewlett packard enterprise hpe autopass license server, hpe autopass license server +1 moreAn authentication bypass vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.17.7.3 High
- asustor admA stored Cross-Site Scripting (XSS) vulnerability exists in the File Explorer and Text Editor of ADM4.8 Medium
- anisha job diarycode-projects Job Diary view-cad.php sql injection6.9 Medium
- anisha job diarycode-projects Job Diary view-emp.php sql injection6.9 Medium
- anisha job diarycode-projects Job Diary view-all.php sql injection6.9 Medium
- phpgurukul dairy farm shop management systemPHPGurukul Dairy Farm Shop Management System invoices.php sql injection5.3 Medium
- avid nexis e-series, nexis f-series, nexis pro+ +1 more +3 moreUnauthenticated Path Traversal affecting Avid NEXIS8.7 High
- apache jackrabbitApache Jackrabbit: XXE vulnerability in jackrabbit-spi-commons8.8 High
- phpgurukul dairy farm shop management systemPHPGurukul Dairy Farm Shop Management System view-invoice.php sql injection5.3 Medium
- phpgurukul dairy farm shop management systemPHPGurukul Dairy Farm Shop Management System edit-category.php sql injection5.3 Medium
- phpgurukul dairy farm shop management systemPHPGurukul Dairy Farm Shop Management System edit-company.php sql injection5.3 Medium
- phpgurukul dairy farm shop management systemPHPGurukul Dairy Farm Shop Management System edit-product.php sql injection5.3 Medium
- avid nexis e-series, nexis f-series, nexis pro+ +1 more +3 moreAuthenticated Arbitrary File Deletion affecting Avid NEXIS7.1 High
- otrs ag otrsPossible user enumeration5.3 Medium
- anisha online appointment booking systemcode-projects Online Appointment Booking System cover.php sql injection6.9 Medium
- avid nexis e-series, nexis f-series, nexis pro+ +1 more +3 moreAuthenticated Arbitrary File Read affecting Avid NEXIS8.7 High
- tenda ac500, ac500 firmware +1 moreTenda AC500 setWtpData formSetAPCfg stack-based overflow8.7 High
- phpgurukul online fire reporting systemPHPGurukul Online Fire Reporting System manage-site.php sql injection5.3 Medium
- phpgurukul online fire reporting systemPHPGurukul Online Fire Reporting System add-team.php sql injection5.3 Medium
- phpgurukul online fire reporting systemPHPGurukul Online Fire Reporting System all-requests.php sql injection5.3 Medium
- phpgurukul online fire reporting systemPHPGurukul Online Fire Reporting System assigned-requests.php sql injection5.3 Medium
- code-projects voting systemcode-projects Voting System positions_edit.php sql injection5.3 Medium
- code-projects voting systemcode-projects Voting System positions_row.php sql injection5.3 Medium
- No product listedchinese-poetry server.js redos5.3 Medium
- teledyne flir fb-series o, flir fh-series id +1 moreTeledyne FLIR FB-Series O/FLIR FH-Series ID runcmd.sh sendCommand command injection2.3 Low
- teledyne flir fb-series o, flir fh-series id +1 moreTeledyne FLIR FB-Series O/FLIR FH-Series ID hard-coded password6.3 Medium
- asustor admA stored Cross-Site Scripting (XSS) vulnerability exists in the Access Control of ADM4.8 Medium
- teledyne flir fb-series o, flir fh-series id +1 moreTeledyne FLIR FB-Series O/FLIR FH-Series ID Production Tools production.html access control6.9 Medium
- zavy86 wikidocsZavy86 WikiDocs submit.php image_delete_ajax path traversal5.1 Medium
- lb-link bl-ac1900, bl-ac3600, bl-ax1800 +3 more +5 moreLB-LINK BL-WR9000 Web Interface lighttpd.cgi restore improper authentication9.3 Critical
- lb-link bl-ac1900, bl-ac3600, bl-ax1800 +3 more +5 moreLB-LINK BL-WR9000 lighttpd.cgi bs_GetManPwd information disclosure6.9 Medium
- lb-link bl-ac1900, bl-ac3600, bl-ax1800 +3 more +5 moreLB-LINK BL-WR9000 lighttpd.cgi bs_GetHostInfo information disclosure6.9 Medium
- utt hiper 840g, 840g firmware +1 moreUTT HiPER 840G aspApBasicConfigUrcp buffer overflow8.7 High
- utt hiper 840g, 840g firmware +1 moreUTT HiPER 840G aspRemoteApConfTempSend buffer overflow8.7 High
- bigotry onebaseBigotry OneBase think_exception.tpl parse_args cross site scripting5.1 Medium
- qianfox foxcmsqianfox FoxCMS Video.php batchCope sql injection5.3 Medium
- dsic cross-browser components for official document creationDSIC｜Cross-browser Components for Official Document Creation - Remote Code Execution8.6 High
- zongzhige shopxoShopXO header.html cross site scripting5.3 Medium
- jishenghua jsherpjshERP SystemConfigController.java exportExcelByParam path traversal5.1 Medium
- wellchoose batchsigncsWellChoose｜BatchSignCS - Arbitrary File Write through Path Traversal8.7 High
- lb-link bl-ac3600, bl-ac3600 firmware +1 moreLB-LINK BL-AC3600 Web Management Interface lighttpd.cgi geteasycfg information disclosure6.9 Medium
- hgiga isherlock-maillog-4.5, isherlock-maillog-5.5, isherlock-smtp-4.5 +1 more +3 moreHgiga｜iSherlock - OS Command Injection9.3 Critical
- lb-link bl-ac3600, bl-ac3600 firmware +1 moreLB-LINK BL-AC3600 shadow hard-coded credentials8.5 High
- phpgurukul online fire reporting systemPHPGurukul Online Fire Reporting System completed-requests.php sql injection5.3 Medium
- phpgurukul online fire reporting systemPHPGurukul Online Fire Reporting System new-requests.php sql injection5.3 Medium
- phpgurukul online fire reporting systemPHPGurukul Online Fire Reporting System team-ontheway-requests.php sql injection5.3 Medium
- imagination technologies graphics ddkGPU DDK - Insufficient validation in RGXCREATEFREELIST creates corrupt freelist7.8 High
- Show moreLoading…