CVEs published in July 2025
3,846 vulnerabilities, 397 critical, 14 exploited.
- code-projects public chat roomcode-projects Public Chat Room send_message.php sql injection5.3 Medium
- deerwms deer-wms-2deerwms deer-wms-2 list sql injection5.3 Medium
- deerwms deer-wms-2deerwms deer-wms-2 list sql injection5.3 Medium
- simple-help simplehelpSimpleHelp Cross Site Request Forgery6.3 Medium
- simple-help simplehelpSimpleHelp Inclusion of functionality from untrusted control sphere8.3 High
- deerwms deer-wms-2deerwms deer-wms-2 export sql injection5.3 Medium
- rarlab winrarWinRAR < 5.00 Filename Spoofing RCE8.4 High
- hp inc. certain hp designjet products, hp 1vd83a firmware, 1vd84a firmware +71 more +73 moreCertain HP DesignJet products – Information disclosure6.0 Medium
- sitecore experience platform, managed cloud, content mangement system (cms) +2 moreSitecore XP 7.5 - 10.2, CMS 7.2, and Managed Cloud XSS5.1 Medium
- global interactive design media software inc. content management system (cms), sitecore experience platform (xp) +1 moreSitecore XP < 8.0 and CMS < 7.2 and < 7.5 File Read via Known Path6.9 Medium
- sitecore experience commerce (xc), experience manager (xm), experience platform (xp) +1 more +3 moreSitecore XM/XP/XC and Managed Cloud 8.0 - 10.4 Arbitrary File Read8.7 High
- sitecore jss react sample applicationSitecore JSS React Sample Application 11.0.0 - 14.0.1 Information Disclosure8.7 High
- hanwha smart security manager (ssm)Hanwha Techwin SSM 1.32 & 1.4 ActiveMQ File Upload RCE8.6 High
- artica st pandora fms, pandora fms fms +1 morePandora FMS ≤ 5.0 SP2 Default Credential SQL Injection RCE10.0 Critical
- laser romae s.r.l. openblowOpenBlow Missing Critical Security Headers8.4 High
- i-ftpi-Ftp 2.20 Schedule.xml Stack-Based Buffer Overflow8.4 High
- hybridauthHybridAuth 2.0.9 - 2.2.2 Unauthenticated RCE via install.php Configuration Injection9.3 Critical
- get-simple getsimplecms, getsimple cms project cms +1 moreGetSimple CMS 3.2.1 Authenticated RCE via Arbitrary PHP File Upload8.7 High
- microworld escan web management consoleeScan 5.5-2 Web Management Console Command Injection9.4 Critical
- d-link dsp-w215, dlink dsp-w215 firmware +1 moreD-Link info.cgi POST Request Stack-Based Buffer Overflow RCE9.3 Critical
- commvault for windowsCommvault 11.20.0 - 11.36.0 Windows Maintenance Installer DLL Injection8.5 High
- commvaultCommvault 11.20.0 - 11.36.0 Windows Access Nodes Compromise via Local File Server Agent Abuse8.5 High
- silabs.com openthreadHigh traffic causes corrupt SPI packets in OpenThread leading to denial of service5.3 Medium
- commvaultCommvault CommServe Web Server Unauthenticated SQL Injection6.9 Medium
- silabs.com wiseconnectBuffer overflow in Si91x crypto APIs6.0 Medium
- debian linux, linux kernel +1 moredrm/exynos: exynos7_drm_decon: add vblank check in IRQ handling5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreperf: Revert to requiring CAP_SYS_ADMIN for uprobes7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morenetlink: Fix wraparounds of sk->sk_rmem_alloc.5.5 Medium
- debian linux, linux kernel +1 moretipc: Fix use-after-free in tipc_conn_close().7.8 High
- linux, linux kernel +1 moretcp: Correct signedness in skb remaining space calculation7.8 High
- debian linux, linux kernel +1 morevsock: Fix transport_{g2h,h2g} TOCTOU4.7 Medium
- debian linux, linux kernel +1 morevsock: Fix transport_* TOCTOU7.0 High
- debian linux, linux kernel +1 moreatm: clip: Fix potential null-ptr-deref in to_atmarpd().7.0 High
- debian linux, linux kernel +1 moreatm: clip: Fix infinite recursive call of clip_push().7.8 High
- debian linux, linux kernel +1 moreatm: clip: Fix NULL pointer dereference in vcc_sendmsg()5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morenet/sched: Abort __tc_modify_qdisc if parent class does not exist5.5 Medium
- debian linux, linux kernel +1 moreipmi:msghandler: Fix potential memory corruption in ipmi_create_user()7.8 High
- debian linux, linux kernel +1 moreKVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight7.8 High
- linux, linux kernel +1 moreALSA: ad1816a: Fix potential NULL pointer deref in snd_card_ad1816a_pnp()5.5 Medium
- linux, linux kernel +1 moreio_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU7.8 High
- linux, linux kernel +1 morenet: ethernet: rtsn: Fix a null pointer dereference in rtsn_probe()5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moremd/md-bitmap: fix GPF in bitmap_get_stats()5.5 Medium
- linux, linux kernel +1 morewifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_sta_set_decap_offload()5.5 Medium
- linux, linux kernel +1 moredrm/gem: Acquire references on GEM handles for framebuffers7.8 High
- debian linux, linux kernel +1 moreusb: gadget: u_serial: Fix race condition in TTY wakeup4.7 Medium
- linux, linux kernel +1 moremm/rmap: fix potential out-of-bounds page table access during batched unmap7.8 High
- linux, linux kernel +1 moreclk: imx: Fix an out-of-bounds access in dispmix_csr_clk_dev_data7.3 High
- debian linux, linux kernel +1 moremd/raid1: Fix stack memory use after return in raid1_reshape7.1 High
- debian linux, linux kernel +1 moreraid10: cleanup memleak at raid10_make_request5.5 Medium
- debian linux, linux kernel +1 morenbd: fix uaf in nbd_genl_connect() error path7.8 High
- Show moreLoading…