CVEs published in July 2025
3,846 vulnerabilities, 397 critical, 14 exploited.
- daycloud studentmanageStudentManage v1.0 was discovered to contain Cross-Site Request Forgery (CSRF).6.5 Medium
- daycloud studentmanageStudentManage v1.0 was discovered to contain a SQL injection vulnerability via the component ...8.8 High
- daycloud studentmanageStudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the...4.8 Medium
- daycloud studentmanageStudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the...4.8 Medium
- daycloud studentmanageStudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the...4.8 Medium
- mrcmsMRCMS v3.1.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the...4.8 Medium
- simogeo filemanagerFilemanager is vulnerable to Relative Path Traversal through filemanager.php6.5 Medium
- simogeo filemanagersimogeo/filemanager arbitrary file upload vulnerability9.8 Critical
- simogeo filemanagerAn arbitrary file upload vulnerability in the component /rsc/filemanager.rsc.class.php of...6.5 Medium
- splashinInsecure permissions in Splashin iOS v2.0 allow unauthorized attackers to access location data...6.5 Medium
- splashinSplashin iOS v2.0 fails to enforce server-side interval restrictions for location updates for...5.3 Medium
- leviton acquisuite, energy monitoring hub +1 moreLeviton AcquiSuite and Energy Monitoring Hub Cross-site Scripting8.7 High
- anisha online appointment booking systemcode-projects Online Appointment Booking System addmanagerclinic.php sql injection6.9 Medium
- anisha online appointment booking systemcode-projects Online Appointment Booking System deletedoctorclinic.php sql injection6.9 Medium
- jeesitethinkgem JeeSite Site Controller SiteController.java select redirect5.3 Medium
- broadcom brocade ascg, brocade ascg +1 moreCLI history displays inline passwords6.8 Medium
- broadcom brocade ascg, brocade active support connectivity gateway +1 moreJSON Web Token (JWT) Exposure in Log Files7.1 High
- d-link di-8100, dlink di-8100 firmware +1 moreD-Link DI-8100 HTTP Request menu_nat_more.asp stack-based overflow8.7 High
- jeesitethinkgem JeeSite UEditor Image Grabber ActionEnter.java server-side request forgery5.3 Medium
- broadcom brocade ascg, brocade active support connectivity gateway +1 moreMedium Strength Cipher Suites detected on port on ports 9000 and 80368.6 High
- totolink t6, t6 firmware +1 moreTOTOLINK T6 HTTP POST Request cstecgi.cgi setDiagnosisCfg buffer overflow8.7 High
- phpgurukul land record systemPHPGurukul Land Record System edit-property.php sql injection6.9 Medium
- code-projects e-commerce sitecode-projects E-Commerce Site cross-site request forgery5.3 Medium
- code-projects online ordering system, online ordering system project ordering system +1 morecode-projects Online Ordering System edit_product.php unrestricted upload5.3 Medium
- nvidia jetson orin and xavier devicesNVIDIA Jetson Linux contains a vulnerability in the kernel where an attacker may cause an...4.7 Medium
- code-projects patient record management systemcode-projects Patient Record Management System xray_form.php sql injection5.3 Medium
- nvidia jetson orin, igx orin and xavier devicesNVIDIA Jetson Linux contains a vulnerability in UEFI Management mode, where an unprivileged local...7.1 High
- anisha online appointment booking systemcode-projects Online Appointment Booking System adddoctor.php sql injection6.9 Medium
- nvidia container toolkitNVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook8.5 High
- anisha online appointment booking systemcode-projects Online Appointment Booking System deletedoctor.php sql injection6.9 Medium
- hcl software connectionsHCL Connections is vulnerable to an information disclosure vulnerability3.5 Low
- lenovo app store, browser, pc manager +2 moreA buffer overflow vulnerability was reported in the Lenovo Protection Driver, prior to version 5...8.4 High
- lenovo filez clientAn authentication bypass vulnerability was reported in FileZ client application that could allow...8.4 High
- lenovo browserA cross-site scripting (XSS) vulnerability was reported in the Lenovo Browser that could allow an...7.1 High
- lenovo vantage, commercial vantage +1 moreAn improper validation vulnerability was reported in Lenovo Vantage that under certain conditions...8.5 High
- lenovo vantage, commercial vantage +1 moreAn improper validation vulnerability was reported in Lenovo Vantage that under certain conditions...8.5 High
- lenovo vantage, commercial vantage +1 moreA SQL injection vulnerability was reported in Lenovo Vantage that could allow a local attacker to...4.8 Medium
- motorola smart connect android applicationA vulnerability was reported in version 1.0 of the Bluetooth Transmission Alliance protocol...5.1 Medium
- lenovo trackpoint quick menuA DLL hijacking vulnerability was reported in TrackPoint Quick Menu software that, under certain...5.4 Medium
- lenovo software fixA DLL hijacking vulnerability was reported in the Motorola Software Fix (Rescue and Smart...7.1 High
- lenovo elliptic human presence detection device driver for t14 gen 4 (type 21k3, 21k4), elliptic human presence detection device driver for t14 gen 5 (type 21ml, 21mm), elliptic human presence detection device driver for t14s gen 5 (type 21ls, 21lt) +30 more +32 moreAn incorrect permissions vulnerability was reported in Elliptic Labs Virtual Lock Sensor that...8.5 High
- open source robotics foundation robot operating system (ros), openrobotics robot operating system +1 moreUnsafe use of eval() method in rosbag tool7.8 High
- anisha online appointment booking systemcode-projects Online Appointment Booking System addclinic.php sql injection6.9 Medium
- open source robotics foundation robot operating system (ros), openrobotics robot operating system +1 moreUnsafe use of eval() method in rostopic echo tool7.8 High
- open source robotics foundation robot operating system (ros), openrobotics robot operating system +1 moreUnsafe use of eval() method in rostopic hz tool7.8 High
- open source robotics foundation robot operating system (ros), openrobotics robot operating system +1 moreUnsafe use of eval() method in roslaunch tool7.8 High
- open source robotics foundation robot operating system (ros), openrobotics robot operating system +1 moreUnsafe use of eval() method in rosparam tool7.8 High
- sophos intercept x for windowsA local privilege escalation vulnerability in Sophos Intercept X for Windows with Central Device...8.8 High
- nvidia container toolkitNVIDIA Container Toolkit for all platforms contains an Untrusted Search Path9.0 Critical
- sophos intercept x for windows, intercept x for windows core agent +1 moreA vulnerability related to registry permissions in the Intercept X for Windows updater prior to...8.8 High
- Show moreLoading…