CVEs published in July 2025
3,846 vulnerabilities, 397 critical, 14 exploited.
- wolfsslIn the OpenSSL compatibility layer implementation, the function RAND_poll() was not behaving as...7.0 High
- wolfsslDomain Name Validation Bypass with Apple Native Certificate Validation9.2 Critical
- carmelo food ordering review systemcode-projects Food Ordering Review System signup_function.php sql injection6.9 Medium
- tenda fh451, fh451 firmware +1 moreTenda FH451 SafeUrlFilter fromSafeUrlFilter stack-based overflow8.7 High
@eslint/plugin-kitnpm@eslint/plugin-kit is vulnerable to Regular Expression Denial of Service attacks through ConfigCommentParser2.3 Low- tenda fh451, fh451 firmware +1 moreTenda FH451 SafeClientFilter fromSafeClientFilter stack-based overflow8.7 High
- tenda fh451, fh451 firmware +1 moreTenda FH451 PPTPUserSetting fromPptpUserSetting stack-based overflow8.7 High
- descreekert wx-discuzdescreekert wx-discuz wx.php validToken cross site scripting5.1 Medium
- phpgurukul complaint management systemPHPGurukul Complaint Management System complaint-search.php cross site scripting5.1 Medium
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator and IBM Sterling File Gateway link injection5.4 Medium
- bosssoft crmBossSoft CRM HNDCBas_customPrmSearchDtl.jsp sql injection6.9 Medium
- cgpandey hotelmiscgpandey hotelmis HTTP GET Request admin.php cross site scripting5.1 Medium
- beijing shenzhou shihan technology multimedia integrated business display systemBeijing Shenzhou Shihan Technology Multimedia Integrated Business Display System companyManage sql injection5.3 Medium
- gpacGPAC dash_client.c gf_dash_download_init_segment null pointer dereference6.9 Medium
- tenda fh451, fh451 firmware +1 moreTenda FH451 PPTPDClient fromPptpUserAdd stack-based overflow8.7 High
- tenda fh451, fh451 firmware +1 moreTenda FH451 P2pListFilter fromP2pListFilter stack-based overflow8.7 High
- microsoft purviewMicrosoft Purview Elevation of Privilege Vulnerability8.7 High
- microsoft azure machine learningAzure Machine Learning Elevation of Privilege Vulnerability6.5 Medium
- microsoft azure devopsAzure DevOps Server Elevation of Privilege Vulnerability9.0 Critical
- microsoft azure machine learningAzure Machine Learning Elevation of Privilege Vulnerability9.9 Critical
- microsoft azure machine learningAzure Machine Learning Elevation of Privilege Vulnerability9.9 Critical
- tenda fh451, fh451 firmware +1 moreTenda FH451 NatStaticSetting fromNatStaticSetting stack-based overflow8.7 High
form-datanpm,agama-web-uiopenSUSE,js-jqueryAzure Linux +7 more +9 moreUsage of unsafe random function in form-data for choosing boundary9.4 Critical- tenda fh451, fh451 firmware +1 moreTenda FH451 webtypelibrary formWebTypeLibrary stack-based overflow8.7 High
- tenda fh451, fh451 firmware +1 moreTenda FH451 SafeEmailFilter formSafeEmailFilter stack-based overflow8.7 High
- labredescefetrj wegiaWeGIA vulnerable to SQL Injection (Blind Time-Based) in endpoint 'Profile_Atendido.php' parameter 'idatendido'9.4 Critical
- labredescefetrj wegiaWeGIA Reflected Cross-Site Scripting (XSS) vulnerability in endpoint 'personalizacao_imagem.php' parameter 'err'6.5 Medium
- labredescefetrj wegiaWeGIA Reflected Cross-Site Scripting (XSS) vulnerability in endpoint 'personalizacao.php' parameter 'err'6.5 Medium
- labredescefetrj wegiaWeGIA Reflected Cross-Site Scripting (XSS) vulnerability in endpoint 'pre_cadastro_atendido.php' parameter 'msg_e'6.5 Medium
- nuxt-modules mdcmdc vulnerable to XSS in markdown rendering bypassing HTML filter. (N°4)8.3 High
- sammcj mcp-package-docsmcp-package-docs vulnerable to command injection in several tools7.5 High
- phpgurukul online security guards hiring systemPHPGurukul Online Security Guards Hiring System search.php cross site scripting5.1 Medium
- chainguard-dev melangemelange creates SBOM files in APKs with world-writable permissions4.4 Medium
- chainguard-dev apkoapko has incorrect permission (0666) in /etc/ld.so.cache and other files7.0 High
- riot-os riotRIOT-OS has an ineffective size check that can lead to buffer overflow in link layer address filter /sys/net/link_layer/l2filter/l2filter.c6.6 Medium
- d-link di-8100, dlink di-8100 firmware +1 moreD-Link DI-8100 HTTP Request menu_nat.asp stack-based overflow8.7 High
- xuxueli xxl-jobXuxueli xxl-job Token Generation IndexController.java makeToken weak password hash6.3 Medium
- citeum openctiOpenCTI's GraphQL IDOR enables authenticated users to modify or delete notifications of other users5.4 Medium
- xuxueli xxl-jobXuxueli xxl-job SampleXxlJob.java commandJobHandler os command injection5.3 Medium
- xuxueli xxl-jobXuxueli xxl-job SampleXxlJob.java httpJobHandler server-side request forgery5.3 Medium
- vidco software voc testerIDOR in Vidco Software's VOC TESTER5.5 Medium
- red hat build of keycloak 26, build of keycloak 26.2, jboss enterprise application platform 8 +3 more +5 moreOrg.keycloak/keycloak-services: privilege escalation in keycloak admin console (fgapv2 enabled)6.5 Medium
- gnuboard g6, sir gnuboard +1 moreGnuboard g6 Post Reply qa cross site scripting5.1 Medium
- bytecodealliance wasmtimeWasmtime vulnerable to segfault when using component resources2.1 Low
- bytecodealliance wasmtimeWasmtime has host panic with `fd_renumber` WASIp1 function3.5 Low
- jeesitethinkgem JeeSite SsoController.java sso redirect5.3 Medium
- mattermost, mattermost server +1 moreInvite token is used as part of the secure communication2.2 Low
kernel-livepatch-MICRO-6-0-RT_Update_10SUSESecurity update for kernel-livepatch-MICRO-6-0-RT_Update_10No scorekernel-livepatch-MICRO-6-0-RT_Update_10SUSESecurity update for kernel-livepatch-MICRO-6-0-RT_Update_10No score- joomsky.com js jobs component for joomlaExtension - joomsky.com - SQL injection in JS jobs component version 1.1.5 - 1.4.1 for Joomla8.7 High
- Show moreLoading…