CVEs published in July 2025
3,846 vulnerabilities, 397 critical, 14 exploited.
- xdebugXdebug Remote Debugger Unauthenticated OS Command Execution9.3 Critical
- wuhan deepin technology co., ltd. deepin linuxDeepin lastore-daemon Privilege Escalation via Unsigned .deb Installation8.5 High
- d2iq, inc. dc/os marathonDC/OS Marathon UI < 1.9.0 Unauthenticated RCE via Docker Mount Abuse9.3 Critical
- dicoogle project pacs web serverDicoogle PACS Web Server 2.5.0 Unauthenticated Path Traversal8.7 High
- oscommerce online merchantosCommerce 2.3.4.1 Installer Unauthenticated Configuration File Injection PHP Code Execution9.3 Critical
- steppschuh remote control collection serverSteppschuh Remote Control Server 3.1.1.12 Unauthenticated RCE9.3 Critical
- apache http serverApache HTTP Server: 'RewriteCond expr' always evaluates to true in 2.4.646.3 Medium
- sonicwall sma 100 series, sma 210 firmware, sma 410 firmware +1 more +3 moreAn authenticated arbitrary file upload vulnerability exists in the SMA 100 series web management...9.1 Critical
suse-manager-5.0-aarch64-proxy-httpd-imageSUSE,suse-manager-5.0-aarch64-proxy-salt-broker-imageSUSE,suse-manager-5.0-aarch64-proxy-squid-imageSUSE +33 more +35 moreSecurity update 5.0.5 for Multi-Linux Manager ServerNo score- suse image sles15-sp4-manager-server-4-3-byos, image sles15-sp4-manager-server-4-3-byos-azure, image sles15-sp4-manager-server-4-3-byos-ec2 +3 more +5 moreSUSE Multi Linux Manager allows code execution via unprotected websocket endpoint9.3 Critical
- suse container suse/manager/4.3/proxy-httpd:4.3.16.9.67.1, image sles15-sp4-manager-proxy-4-3-byos, image sles15-sp4-manager-proxy-4-3-byos-azure +10 more +12 moreMulti Linux Manager epxoses the plain text HTTP Proxy user:password in logs6.9 Medium
- dataprom informatics pacs-acssXSS in Dataprom Informatics' PACS-ACSS6.5 Medium
- imprivata enterprise access managementBypass of Login Screen on Shared Kiosk Workstations7.0 High
- hotelrunner b2bOpen Redirect in HotelRunner's B2B4.7 Medium
- compojoom.com ccomment component for joomlaExtension - compojoom.com - Stored XSS vulnerability in CComment component 5.0.0-6.1.14 for Joomla7.0 High
- stackideas.com komento component for joomlaExtension - stackideas.com - SQLi vulnerability in Komento component 4.0.0-4.0.7 for Joomla9.3 Critical
- dj-extensions.com dj-reviews component for joomlaExtension - dj-extensions.com - Reflected XSS vulnerability in DJ-Reviews component 1.0-1.3.6 for Joomla5.1 Medium
- ibm smartcloud analytics log analysisIBM SmartCloud Analytics - Log Analysis security bypass5.5 Medium
- mooj.org profiles component for joomlaExtension - mooj.org - Stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla7.0 High
- ibm smartcloud analytics log analysisIBM SmartCloud Analytics - Log Analysis denial of service6.2 Medium
- dj-extensions.com dj-flyer component for joomlaExtension - dj-extensions.com - SQLi vulnerability in DJ-Flyer component 1.0-3.2 for Joomla8.5 High
- ibm smartcloud analytics log analysisIBM SmartCloud Analytics - Log Analysis HOST header injection5.4 Medium
- ibm smartcloud analytics log analysisIBM SmartCloud Analytics - Log Analysis security bypass5.5 Medium
- manageengine applications manager, zohocorp manageengine applications manager +1 moreStored XSS6.4 Medium
- weidmueller ie-sr-2tx-wl, ie-sr-2tx-wl-4g-eu, ie-sr-2tx-wl-4g-us-v +2 moreWeidmueller: Unauthenticated Stack-Based Buffer Overflow in u-link Management API9.8 Critical
- weidmueller ie-sr-2tx-wl, ie-sr-2tx-wl-4g-eu, ie-sr-2tx-wl-4g-us-v +2 moreWeidmueller: Root Command Injection via Unsanitized Input in tls_iotgen_setting Endpoint8.8 High
- weidmueller ie-sr-2tx-wl, ie-sr-2tx-wl-4g-eu, ie-sr-2tx-wl-4g-us-v +2 moreWeidmueller: Root Command Injection via Unsanitized Input in event_mail_test Endpoint8.8 High
- asustor abp and aesWindows service registered with an unquoted ImagePath vulnerability in the system registry9.2 Critical
- dahua ipc, sd +1 moreA vulnerability has been found in Dahua products. Attackers could exploit a buffer overflow...8.1 High
- dahua ipc, sd +1 moreA vulnerability has been found in Dahua products. Attackers could exploit a buffer overflow...8.1 High
- unknown qwizcards | online quizzes and flashcardsWordPress Qwizcards <= 3.9.4 - Reflected XSS6.1 Medium
- samsung magicinfo 9 serverUnrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9...8.8 High
- samsung magicinfo 9 serverImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in...9.8 Critical
- samsung magicinfo 9 serverUnrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9...9.8 Critical
- samsung magicinfo 9 serverImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in...9.8 Critical
- samsung magicinfo 9 serverUnrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9...9.8 Critical
- samsung magicinfo 9 serverUnrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9...8.8 High
- samsung magicinfo 9 serverUnrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9...9.8 Critical
- samsung magicinfo 9 serverUnrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9...8.1 High
- samsung magicinfo 9 serverImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in...9.8 Critical
- samsung magicinfo 9 serverImproper Restriction of XML External Entity Reference vulnerability in Samsung Electronics...8.2 High
- samsung magicinfo 9 serverUnrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9...9.8 Critical
- samsung magicinfo 9 serverImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in...8.8 High
- samsung magicinfo 9 serverImproper Authentication vulnerability in Samsung Electronics MagicINFO 9 Server allows...7.3 High
- samsung magicinfo 9 serverImproper Control of Generation of Code ('Code Injection') vulnerability in Samsung Electronics...9.8 Critical
- samsung magicinfo 9 serverImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in...7.2 High
- samsung magicinfo 9 serverUnrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9...9.8 Critical
- samsung magicinfo 9 serverUse of Hard-coded Credentials vulnerability in Samsung Electronics MagicINFO 9 Server allows...9.1 Critical
- samsung magicinfo 9 serverUse of Hard-coded Credentials vulnerability in Samsung Electronics MagicINFO 9 Server allows...9.1 Critical
files-bucket-servernpmfiles-bucket-server vulnerable to Directory Traversal8.7 High- Show moreLoading…