CVEs published in July 2025
3,846 vulnerabilities, 397 critical, 14 exploited.
- powerdns recursorA Recursor configured to send out ECS enabled queries can be sensitive to spoofing attempts7.5 High
- parkingdoorIncorrect authentication in ParkingDoor5.9 Medium
- phpgurukul online banquet booking systemPHPGurukul Online Banquet Booking System login.php cross site scripting5.3 Medium
- turpak automatic station monitoring systemIDOR in Turpak's Automatic Station Monitoring System7.1 High
- akbim software online exam registrationIDOR in Akbim Software's Online Exam Registration4.4 Medium
- turtek software eyotekIDOR in Turtek Software's Eyotek6.5 Medium
- phpgurukul online banquet booking systemPHPGurukul Online Banquet Booking System admin-profile.php cross site scripting5.1 Medium
- two app studio journeyInsecure authentication due to missing bruteforce protection and runtime manipulation in Two App Studio Journey 5.5.6 for iOS7.8 High
- two app studio journeyInsecure data storage vulnerability in Two App Studio Journey v5.5.9 for iOS5.5 Medium
- apache jenaApache Jena: Configuration files uploaded by administrative users are not check properly8.8 High
- helmholz rex 100, mb connect line mbnet.mini, mbconnectline mbnet.mini firmware +2 morePersistent Cross-Site Scripting via POST Requests Due to Improper Neutralization of Input4.8 Medium
- helmholz rex 100, mb connect line mbnet.mini, mbconnectline mbnet.mini firmware +2 moreUnauthenticated Buffer Overflow in Conftool Service Leading to Denial of Service5.3 Medium
- helmholz rex 100, mb connect line mbnet.mini, mbconnectline mbnet.mini firmware +2 moreSQL Injection via POST Requests Allowing Configuration Database Manipulation6.5 Medium
- apache jenaApache Jena: Administrative users can create files outside the server directory space via the admin UI7.5 High
- helmholz rex 100, mb connect line mbnet.mini, mbconnectline mbnet.mini firmware +2 moreResource Exhaustion via POST Requests to send-mail Action4.9 Medium
- helmholz rex 100, mb connect line mbnet.mini, mbconnectline mbnet.mini firmware +2 moreResource Exhaustion via POST Requests to send-sms Action4.9 Medium
- helmholz rex 100, mb connect line mbnet.mini, mbconnectline mbnet.mini firmware +2 moreRemote Command Injection via GET in Cloud Server Communication Script Due to Improper Input Neutralization7.2 High
- helmholz rex 100, mb connect line mbnet.mini, mbconnectline mbnet.mini firmware +2 moreRemote Command Injection in diagnostic Action Due to Improper Input Neutralization7.2 High
- helmholz rex 100, mb connect line mbnet.mini, mbconnectline mbnet.mini firmware +2 moreRemote Command Injection in send_sms Action Due to Improper Input Neutralization7.2 High
- canonical maas, metal as a service +1 moreDue to insufficient verification, an attacker could use a malicious client to bypass...9.6 Critical
- turtek software eyotekIDOR in Turtek Software's Eyotek7.5 High
linux-cloud-tools-genericTuxCare,linux-cloud-tools-lowlatencyTuxCare,linux-genericTuxCare +7 more +9 moreUpdate of linux-metaNo score- asus myasusAn insecure sensitive key storage issue was found in MyASUS. potentially allowing unauthorized...6.9 Medium
- asus myasusAn insecure sensitive key storage issue was found in MyASUS. potentially allowing unauthorized...7.7 High
linux-cloud-tools-genericTuxCare,linux-cloud-tools-lowlatencyTuxCare,linux-crashdumpTuxCare +9 more +11 moreUpdate of linux-metaNo score- signum-net faraHardcoded SQLite password in FARA8.6 High
linux-cloud-tools-genericTuxCare,linux-cloud-tools-lowlatencyTuxCare,linux-crashdumpTuxCare +9 more +11 moreUpdate of linux-metaNo score- gn themes wp shortcodes plugin — shortcodes ultimateShortcodes Ultimate <= 7.4.2 - Cross-Site Request Forgery to Arbitrary Shortcode Execution6.1 Medium
- gn themes wp shortcodes plugin — shortcodes ultimateWP Shortcodes Plugin — Shortcodes Ultimate <= 7.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin Shortcodes6.4 Medium
- gutentor – gutenberg blocks – page builder for gutenberg editorGutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor <= 3.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets6.4 Medium
- trellix endpoint security (hx) agentA locally authenticated, privileged user can craft a malicious OpenSSL configuration file,...6.7 Medium
- simopro technology winmatrix3 web packageSimopro Technology｜WinMatrix3 Web package - Reflected Cross-Site Scripting6.1 Medium
- digiwin eaiDigiwin｜EAI - Privilege Escalation8.7 High
- digiwin sftDigiwin｜SFT - SQL Injection9.3 Critical
- askey rtf8207w, rtf8217 +1 moreASKEY｜modem - Stack-based Buffer Overflow9.3 Critical
- nokia wavesuite nocInsufficient Validation of Input while user creation8.4 High
- nokia wavesuite nocAccess to local file system and its content9.0 Critical
- nokia wavesuite nocInsufficient Validation of Input in the URL9.0 Critical
- simopro technology winmatrix3 web packageSimopro Technology｜WinMatrix3 Web package - SQL Injection7.1 High
- simopro technology winmatrix3 web packageSimopro Technology｜WinMatrix3 Web package - SQL Injection9.3 Critical
- simopro technology winmatrix3 web packageSimopro Technology｜WinMatrix3 Web package - Arbitrary File Upload8.6 High
- simopro technology winmatrix3Simopro Technology｜WinMatrix3 - Insecure Deserialization9.3 Critical
- chanjet crmChanjet CRM Login Page mailinactive.php sql injection6.9 Medium
pcapplusplusOSS-FuzzHeap-buffer-overflow in pcpp::IPv6Address::IPv6AddressNo scorendpiOSS-FuzzHeap-buffer-overflow in ndpi_match_host_subprotocolNo score- tenda ac6, ac6 firmware +1 moreTenda AC6 httpd setparentcontrolinfo buffer overflow8.7 High
- wordpressWordPress 3.5 through 6.8.2 allows remote attackers to guess titles of private and draft posts...3.7 Low
- hmailserverUse of hardcoded cryptographic key in Encryption.cs in hMailServer 5.8.6 and 5.6.9-beta allows...4.6 Medium
- hmailserverUse of hardcoded cryptographic key in BlowFish.cpp in hMailServer 5.8.6 and 5.6.9-beta allows...4.6 Medium
- hmailserverAn issue in hMailServer v.5.8.6 allows a local attacker to obtain sensitive information via the...5.1 Medium
- Show moreLoading…