CVEs published in July 2025
3,846 vulnerabilities, 397 critical, 14 exploited.
- invt vt-designer, vt designer +1 moreINVT VT-Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- invt vt-designer, vt designer +1 moreINVT VT-Designer PM3 File Parsing Type Confusion Remote Code Execution Vulnerability7.8 High
- invt vt-designer, vt designer +1 moreINVT VT-Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- invt vt-designer, vt designer +1 moreINVT VT-Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- invt vt-designer, vt designer +1 moreINVT VT-Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- invt hmitoolINVT HMITool VPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- invt hmitoolINVT HMITool VPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- invt hmitoolINVT HMITool VPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- invt hmitoolINVT HMITool VPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- haxtheweb issues, psu haxcms-nodejs +1 moreHAX CMS NodeJs's Improper Error Handling Leads to Denial of Service7.1 High
- luxion keyshotLuxion KeyShot 3DM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- haxtheweb issues, psu haxcms-nodejs +1 moreHAX CMS NodeJs's Disabled Content Security Policy Enables Cross-Site Scripting7.2 High
- psu haxcms-nodejs, haxtheweb issues +1 moreHAXcms's Insecure Default Configuration Leads to Unauthenticated Access9.3 Critical
nokogiriRubyGemsNokogiri patches vendored libxml2 to resolve multiple CVEsNo score- encode starletteStarlette has possible denial-of-service vector when parsing large files in multipart forms5.3 Medium
- fuyang lipengjun platformfuyang_lipengjun platform ScheduleJobLogController.java queryPage sql injection5.3 Medium
dolibarr/dolibarrPackagistDolibarr has Remote Code Execution Vulnerability (Bypass)8.8 HighRageAgainstThePixel/setup-steamcmdGitHub ActionsRageAgainstThePixel/setup-steamcmd leaked authentication token in job output logs8.7 Highbuildalon/setup-steamcmdGitHub Actionsbuildalon/setup-steamcmd leaked authentication token in job output logs8.7 High- fuyang lipengjun platformfuyang_lipengjun platform SysLogController.java SysLogController sql injection5.3 Medium
- fuyang lipengjun platformfuyang_lipengjun platform ScheduleJobController.java queryPage sql injection5.3 Medium
- ibm cognos analytics mobileIBM Cognos Analytics Mobile (iOS) authentication bypass5.2 Medium
- ibm cognos analytics mobileIBM Cognos Analytics Mobile (iOS) information disclosure5.9 Medium
- ibm cognos analytics mobileIBM Cognos Analytics Mobile (iOS) information disclosure6.5 Medium
- ibm cognos analytics mobileIBM Cognos Analytics Mobile (iOS) information disclosure5.9 Medium
- campcodes sales and inventory systemCampcodes Sales and Inventory System Setting settings_update.php sql injection6.9 Medium
- espocrmEspoCRM vulnerable to LDAP Injection through Improper Neutralization of Special Elements6.5 Medium
- eclipse jakarta mail, angus mail +1 moreJakarta Mail vulnerable to SMTP Injection6.0 Medium
- d-link dir‑817l, dlink dir-817l firmware +1 moreD-Link DIR‑817L ssdpcgi lxmldbc_system command injection5.3 Medium
- dell powerscale onefsDell PowerScale OneFS, versions prior to 9.11.0.0, contains a use of a broken or risky...4.4 Medium
- carmelo church donation systemcode-projects Church Donation System admin_pic.php unrestricted upload6.9 Medium
- dell appsyncDell AppSync, version(s) 4.6.0.0, contains an Unrestricted Upload of File with Dangerous Type...6.6 Medium
- marshmallow-packages nova-tiptapnova-tiptap has an Unauthenticated Arbitrary File Upload Vulnerability8.1 High
- dell appsyncDell AppSync, version(s) 4.6.0.0, contains an Improper Restriction of XML External Entity...4.2 Medium
- carmelo church donation systemcode-projects Church Donation System add_members.php sql injection6.9 Medium
- carmelo church donation systemcode-projects Church Donation System edit_Members.php sql injection6.9 Medium
- carmelo church donation systemcode-projects Church Donation System edit_user.php sql injection6.9 Medium
- phpgurukul online banquet booking systemPHPGurukul Online Banquet Booking System view-user-queries.php sql injection5.3 Medium
@account-kit/smart-contractsnpmAlchemy Non-SMA and Webauthn Account Security Advisory8.0 High- translated lara-mcp@translated/lara-mcp vulnerable to command injection in import_tmx tool7.5 High
- zmievsa cadwynCadwyn is vulnerable to an XSS attack through its docs page7.6 High
- extreme networks extremecontrolExtremeControl (NAC) 'onmouseover' XSS5.3 Medium
- pavo inc. payHardcoded Credentials in PAVO Inc.'s PAVO Pay7.5 High
- pavo inc. payIDOR in PAVO Inc.'s PAVO Pay7.5 High
- sophos firewall, firewall firmware +1 moreA post-auth SQL injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0...6.8 Medium
- sophos firewall, firewall firmware +1 moreA business logic vulnerability in the Up2Date component of Sophos Firewall older than version 21...8.1 High
- phpgurukul online banquet booking systemPHPGurukul Online Banquet Booking System booking-search.php cross site scripting5.1 Medium
- sophos firewall, firewall firmware +1 moreA command injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR2 (21...8.8 High
- sophos firewall, firewall firmware +1 moreAn SQL injection vulnerability in the legacy (transparent) SMTP proxy of Sophos Firewall versions...9.8 Critical
- sophos firewall, firewall firmware +1 moreAn arbitrary file writing vulnerability in the Secure PDF eXchange (SPX) feature of Sophos...9.8 Critical
- Show moreLoading…