CVEs published in July 2025
3,846 vulnerabilities, 397 critical, 14 exploited.
- No product listedServer-Side Request Forgery (SSRF) vulnerability exists in the URL processing functionality of...9.1 Critical
- No product listedInsecure Direct Object Reference (IDOR) vulnerability in Liner thru 2025-06-03 allows attackers...7.5 High
- No product listedInsecure Direct Object Reference (IDOR) vulnerability in Dippy (chat.dippy.ai) v2 allows...7.5 High
- livehelperchat live helper chatA stored cross-site scripting (XSS) vulnerability in the department assignment editing module of...6.5 Medium
- livehelperchat live helper chatA stored cross-site scripting (XSS) vulnerability in the chat transfer function of Live Helper...5.4 Medium
- livehelperchat live helper chatA stored cross-site scripting (XSS) vulnerability in the Personal Canned Messages of Live Helper...5.4 Medium
- livehelperchat live helper chatA stored cross-site scripting (XSS) vulnerability in the Facebook registration page of Live...5.4 Medium
- livehelperchat live helper chatA stored cross-site scripting (XSS) vulnerability in the Facebook Chat module of Live Helper Chat...5.4 Medium
- livehelperchat live helper chatA stored cross-site scripting (XSS) vulnerability in Live Helper Chat v4.60 allows attackers to...5.4 Medium
- ruckuswireless ruckus unleashed, ruckus zonedirector +1 moreAn issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139...7.2 High
- ruckuswireless ruckus unleashed, ruckus zonedirector +1 moreAn issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139...9.1 Critical
- ruckuswireless ruckus unleashed, ruckus zonedirector +1 moreAn issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139...9.8 Critical
- ruckuswireless ruckus unleashed, ruckus zonedirector +1 moreAn issue was discovered in CommScope Ruckus Unleashed prior to 200.14.6.1.203 and in Ruckus...9.8 Critical
- ruckuswireless ruckus unleashed, ruckus zonedirector +1 moreAn issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.12.304, where an...6.3 Medium
- ruckuswireless ruckus unleashed, ruckus zonedirector +1 moreAn issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139...5.3 Medium
- ruckuswireless ruckus unleashed, ruckus zonedirector +1 moreAn issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139...9.1 Critical
- ruckuswireless ruckus unleashed, ruckus zonedirector +1 moreAn issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139...8.8 High
- netgear rax30 firmwareIn Netgear RAX30 V1.0.10.94, a PHP-FPM misconfiguration vulnerability is caused by not following...9.8 Critical
- linksys ea6350 firmwareIn Linksys EA6350 V2.1.2, the chroot_local_user option is enabled in the dynamically generated...3.9 Low
- totolink a7100ru firmware, a950rg firmware, t10 firmware +2 moreIn TOTOLink A7100RU V7.4, A950RG V5.9, and T10 V5.9, the chroot_local_user option is enabled in...9.8 Critical
- linksys e2500 firmwareIn Linksys E2500 3.0.04.002, the chroot_local_user option is enabled in the vsftpd configuration...9.8 Critical
- h3c gr2200 firmwareIn H3C GR2200 MiniGR1A0V100R016, the USERLIMIT_GLOBAL option is set to 0 in the /etc/bftpd.conf....7.5 High
- netgear rax30 firmwareIn Netgear RAX30 V1.0.10.94_3, the USERLIMIT_GLOBAL option is set to 0 in multiple bftpd-related...7.5 High
- trendnet tpl-430ap firmwareIn TRENDnet TPL-430AP FW1.0, the USERLIMIT_GLOBAL option is set to 0 in the bftpd-related...7.5 High
- netgear eax80 firmware, r7000 firmware +1 moreIn Netgear R7000 V1.3.1.64_10.1.36 and EAX80 V1.0.1.70_1.0.2, the USERLIMIT_GLOBAL option is set...7.5 High
- trendnet tew-wlc100p firmwareIn the configuration file of racoon in the TRENDnet TEW-WLC100P 2.03b03, the first item of...7.5 High
- trendnet tew-wlc100p firmwareIn TRENDnet TEW-WLC100P 2.03b03, the i_dont_care_about_security_and_use_aggressive_mode_psk...7.3 High
- sktelecom com.skt.prod.dialerThe com.skt.prod.dialer application through 12.5.0 for Android enables any installed application ...5.5 Medium
- textnow 2ndlineThe com.enflick.android.tn2ndLine application through 24.17.1.0 for Android enables any installed...5.5 Medium
- h-mdm headwind mdmHeadwind MDM before 5.33.1 makes configuration details accessible to unauthorized users. The...6.5 Medium
- debian linux, linux kernel +1 morei2c: tegra: check msg length in SMBUS block read7.8 High
- eveo urve web managerAn issue was discovered in Eveo URVE Web Manager 27.02.2025. The application exposes a /_internal...9.8 Critical
- eveo urve web managerAn issue was discovered in Eveo URVE Web Manager 27.02.2025. The endpoint /_internal/redirect.php...8.6 High
- sensaphone web600 firmwareCross Site Scripting vulnerability in Sensaphone WEB600 Monitoring System v.1.6.5.H and before...6.1 Medium
- No product listedA reflected cross-site scripting (XSS) vulnerability was discovered in index.php on Luxcal 4.5.2...9.8 Critical
- totolink t6, t6 firmware +1 moreTOTOLINK T6 MQTT Service updateWifiInfo buffer overflow8.7 High
- totolink t6, t6 firmware +1 moreTOTOLINK T6 MQTT Service recvSlaveUpgstatus buffer overflow8.7 High
- d-link di-8100, dlink di-8100 firmware +1 moreD-Link DI-8100 jhttpd upnp_ctrl.asp sprintf stack-based overflow8.7 High
- microsoft sharepoint server, sharepoint enterprise server 2016, sharepoint server 2019 +1 more +3 moreMicrosoft SharePoint Server Spoofing Vulnerability6.5 Medium
- d-link dir-513, dlink dir-513 firmware +1 moreD-Link DIR-513 Boa Webserver formSetWanNonLogin sprintf stack-based overflow8.7 High
- d-link dir-513, dlink dir-513 firmware +1 moreD-Link DIR-513 Boa Webserver formLanSetupRouterSettings sprintf stack-based overflow8.7 High
- d-link di-8100, dlink di-8100 firmware +1 moreD-Link DI-8100 jhttpd ddns.asp sprintf stack-based overflow8.7 High
- ruoyiyangzongzhuan RuoYi Druid application-druid.yml default credentials5.3 Medium
- ruoyiyangzongzhuan RuoYi CommonController.java uploadFile unrestricted upload5.3 Medium
- angeljudesuarez insurance management systemitsourcecode Insurance Management System insertPayment.php sql injection5.3 Medium
- angeljudesuarez insurance management systemitsourcecode Insurance Management System insertNominee.php sql injection5.3 Medium
- ruoyiyangzongzhuan RuoYi Image Source ui layer5.3 Medium
- ruoyiyangzongzhuan RuoYi SysNoticeController.java addSave cross site scripting5.1 Medium
- ruoyiyangzongzhuan RuoYi Swagger UI index.html cross site scripting5.3 Medium
- ambitiousitbd identsoftCodecanyon iDentSoft Account Setting Page updateSetting unrestricted upload5.1 Medium
- Show moreLoading…