CVEs published in July 2025
3,846 vulnerabilities, 397 critical, 14 exploited.
- merit lilin dvr firmwareLILIN DVR RCE via Malicious FTP/NTP Configuration8.7 High
- x360soft x360 videoplayer activex controlX360 VideoPlayer ActiveX Control Buffer Overflow via ConvertFile()8.6 High
- achat software chat serverAchat v0.150 SEH Buffer Overflow via UDP9.3 Critical
- rips technologies scannerRIPS Scanner v0.54 Path Traversal8.7 High
- d-link dsp-w110a1D-Link DSP-W110A1 Cookie Command Injection9.3 Critical
- the 3do company heroes of might and magic iiiHeroes of Might and Magic III .h3m Map File Buffer Overflow8.4 High
- rockwellautomation studioVideoCharge Studio 2.12.3.685 SEH Buffer Overflow via .VSC File8.4 High
- idera up.time monitoring stationIdera Up.Time ≤ 7.2 post2file.php Arbitrary File Upload RCE9.3 Critical
- limesurveyLimeSurvey 2.0+ - 2.06+ Unauthenticated Arbitrary File Download via Serialized Backup Payload8.7 High
- tinasoft easycafe serverEasyCafe Server 2.2.14 Remote File Disclosure via Opcode 0x438.8 High
- linknat technology vos managerLinknat VOS Manager Path Traversal File Disclosure8.7 High
- netcore technology router firmwareNetcore / Netis Routers RCE via UDP Port 53413 Backdoor9.3 Critical
- tp-link system inc. archer c1200Clickjacking vulnerability on the management web application of TP-LINK Archer C12005.1 Medium
- tp-link system inc. archer c50 v3, archer c50 v4, archer c50 v5 +1 more +3 moreHardcoded DES Decryption Keys in TP-Link Archer C50 V3/V4/V5 and C20 V56.9 Medium
- rommapp rommRomM vulnerable to Authenticated Path Traversal8.3 High
- hewlett packard enterprise hpe autopass license server, hpe autopass license server +1 moreAn authentication bypass vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.18.7.3 High
- hewlett packard enterprise hpe autopass license server, hpe autopass license server +1 moreAn authentication bypass and disclosure of information vulnerability exists in HPE AutoPass...7.3 High
- ibm websphere application server, websphere application server liberty +1 moreIBM WebSphere Application Server denial of service7.5 High
- hewlett packard enterprise hpe autopass license server, hpe autopass license server +1 moreAn hsqldb-related remote code execution vulnerability exists in HPE AutoPass License Server (APLS...7.5 High
- the-scratch-channel the-scratch-channel.github.ioThe Scratch Channel Has Potential Reflected Cross-Site Scripting (XSS) Vulnerability1.3 Low
- drupal real-time seo for drupal, real-time seo project seo +1 moreReal-time SEO for Drupal - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-0916.1 Medium
- block attributes project attributes, drupal block attributes +1 moreBlock Attributes - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-0906.1 Medium
- drupal file download, file download project download +1 moreFile Download - Moderately critical - Access bypass - SA-CONTRIB-2025-0897.5 High
- cisco identity services engine software, ise passive identity connector, identity services engine +1 more +3 moreCisco ISE API Unauthenticated Remote Code Execution Vulnerability10.0 Critical
- cisco identity services engine, identity services engine software, identity services engine passive identity connector +2 moreCisco Identity Services Engine IP Filter Access Restriction for Admin Access Configuration Bypass Vulnerability4.1 Medium
- cisco unified intelligence center, unified contact center express +1 moreCisco Unified Intelligence Center Server-Side Request Forgery Vulnerability5.8 Medium
- cisco identity services engine, identity services engine software, identity services engine passive identity connector +2 moreCisco Identity Services Engine Authenticated Remote Code Execution Vulnerability6.5 Medium
- cisco identity services engine, identity services engine software, identity services engine passive identity connector +2 moreCisco Identity Services Engine Authenticated Remote Code Execution Vulnerability6.5 Medium
- cisco unified intelligence center, unified contact center express +1 moreCisco Unified Intelligence Center Arbitrary File Upload Vulnerability6.3 Medium
- cisco evolved programmable network manager (epnm), prime infrastructure, evolved programmable network manager +2 moreCisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Blind SQL Injection Vulnerability4.3 Medium
- death1clown voidbot open-sourceVoidBot Open-Source Has Improper Permission Check That Allows Unauthorized Command Execution8.7 High
- labredescefetrj wegiaWeGIA vulnerable to Authentication Bypass due to Missing Session Validation in multiple endpoints6.9 Medium
- labredescefetrj wegiaWeGIA has SQL Injection (Blind Time-Based) Vulnerability in `cargo` Parameter on `control.php` Endpoint9.4 Critical
- labredescefetrj wegiaWeGIA vulnerable to Reflected Cross-Site Scripting via endpoint `personalizacao_selecao.php` parameter `nome_car`6.4 Medium
- labredescefetrj wegiaWeGIA vulnerable to Reflected Cross-Site Scripting via endpoint `personalizacao_selecao.php` parameter `id`6.4 Medium
- labredescefetrj wegiaWeGIA vulnerable to Stored Cross-Site Scripting via endpoint 'control.php' parameter 'descricao_emergencia'6.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- labredescefetrj wegiaWeGIA vulnerable to Stored Cross-Site Scripting via endpoint 'adicionar_enfermidade.php' parameter 'nome'6.4 Medium
- liteon ic80a ev charger, ic48a ev charger +1 morePlaintext Storage of a Password in LITEON IC48A and IC80A EV Chargers8.7 High
- labredescefetrj wegiaWeGIA vulnerable to Reflected Cross-Site Scripting via endpoint 'cadastro_adotante.php' parameter 'cpf'6.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- labredescefetrj wegiaWeGIA vulnerable to Stored Cross-Site Scripting via endpoint `adicionar_raca.php` parameter `raca`6.4 Medium
- labredescefetrj wegiaWeGIA vulnerable to Stored Cross-Site Scripting (XSS) via endpoint 'adicionar_especie.php' parameter 'especie'6.4 Medium
- labredescefetrj wegiaWeGIA vulnerable to Stored Cross-Site Scripting (XSS) via endpoint `adicionar_cor.php` parameter `cor`6.4 Medium
- emlogEmlog has Stored Cross-site Scripting vulnerability due to error6.1 Medium
- nlnet labs unboundCache poisoning via the ECS-enabled Rebirthday Attack8.7 High
- emlogEmlog has Stored Cross-site Scripting vulnerability in file upload functionality5.4 Medium
- hewlett packard enterprise (hpe) hpe telco service orchestratorHPE Telco Service Orchestrator Software, Authenticated SQL Injection7.1 High
- salva authen::digestmd5Authen::DigestMD5 versions 0.01 through 0.04 for Perl generate the cnonce insecurely6.5 Medium
- fortra goanywhere mftBroken Access Control Leads to Limited Denial of Service in GoAnywhere MFT 7.8.0 and earlier5.3 Medium
- Show moreLoading…