CVEs published in July 2025
3,846 vulnerabilities, 397 critical, 14 exploited.
- campcodes courier management systemCampcodes Courier Management System edit_branch.php sql injection5.3 Medium
- 1000 projects abc courier management system1000 Projects ABC Courier Management System getbyid.php sql injection6.9 Medium
- d-link dir-513, dlink dir-513 firmware +1 moreD-Link DIR-513 HTTP POST Request formSetWanL2TPtriggers formSetWanL2TPcallback stack-based overflow8.7 High
- tenda ac18, ac18 firmware +1 moreTenda AC18 Samba smb.conf weak password6.3 Medium
- hogash kallyas - creative ecommerce multi-purpose wordpress themeKallyas <= 4.21.0 - Authenticated (Contributor+) Local File Inclusion7.5 High
- hogash kallyas - creative ecommerce multi-purpose wordpress themeKallyas <= 4.21.0 - Authenticated (Contributor+) Arbitrary Folder Deletion8.1 High
- sparklewpthemes educenterEducenter <= 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- totolink n600r, x2000r, n600r firmware +1 more +3 moreTOTOLINK N600R/X2000R FTP Service vsftpd.conf least privilege violation8.6 High
- xtemos woodmartWoodMart - Multipurpose WooCommerce Theme <= 8.2.6 - Improper Input Validation Leading to Unauthenticated Cart Manipulation5.3 Medium
- mdempfle advanced iframeAdvanced iFrame <= 2025.5 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- wonderplugin wonder slider, wonder slider lite +1 moreWonder Slider Lite & Wonder Slider <= 14.4 - Authenticated (Contributor+) Dom-based Stored Cross-Site Scripting6.4 Medium
- tenda ch22, ch22 firmware +1 moreTenda CH22 deleteUserName formdeleteUserName buffer overflow8.7 High
- thememove minimogwp – the high converting ecommerce wordpress themeMinimogWP – The High Converting eCommerce WordPress Theme <= 3.9.0 - Unauthenticated Price Manipulation7.5 High
- phpgurukul local services search engine management systemPHPGurukul Local Services Search Engine Management System changeimage.php sql injection6.9 Medium
- tenda ac10, ac10 firmware +1 moreTenda AC10 RequestsProcessLaid heap-based overflow8.7 High
- melapress login securityMelaPress Login Security 2.1.0 - 2.1.1 - Authentication Bypass to Privilege Escalation via get_valid_user_based_on_token Function9.8 Critical
- libtiffLibTIFF thumbnail.c setrow buffer overflow4.8 Medium
- etruel wpematico rss feed fetcherWPeMatico RSS Feed Fetcher <= 2.8.7 - Cross-Site Request Forgery to Plugin Deactivation via handle_feedback_submission Function4.3 Medium
- paoltaia geodirectory – wp business directory plugin and classified listings directoryGeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.97 - Unauthenticated SQL Injection7.5 High
- freescoutFreeScout's deserialization of untrusted data leads to Remote Code Execution8.6 High
- dbgateDbGate allows Unauthorized File Access via CSV Plugin7.0 High
- astronomer dag-factorydag-factory's CI/CD Workflow Allows for Repository Takeover and Secret Exfiltration9.1 Critical
- libtiffLibTIFF tiffmedian.c get_histogram use after free4.8 Medium
- axiomthemes anubisAnubis accepts crafted redirect URLs in pass-challenge 'Try Again' buttons5.1 Medium
- dbgateDbGate allows for File Traversal via file parameter7.1 High
- d-link di-8400, dlink di-8400 firmware +1 moreD-Link DI-8400 jhttpd usb_paswd.asp null pointer dereference7.1 High
- code-projects voting systemcode-projects Voting System candidates_add.php unrestricted upload5.3 Medium
- 1000 projects abc courier management system1000 Projects ABC Courier Management System Add_reciver.php sql injection6.9 Medium
- clivedelacruz employee management systemitsourcecode Employee Management System index.php sql injection5.3 Medium
- linkifyLinkify 4.3.1 - Prototype Pollution & HTML Attribute Injection (XSS)8.8 High
- code-projects document management systemcode-projects Document Management System insert.php unrestricted upload5.3 Medium
- totolink t6, t6 firmware +1 moreTOTOLINK T6 MQTT Packet meshSlaveDlfw tcpcheck_net buffer overflow8.7 High
- d-link dir-513, dlink dir-513 firmware +1 moreD-Link DIR-513 HTTP POST Request formSetWanPPTPpath formSetWanPPTPcallback buffer overflow8.7 High
- apereo opencastOpencast still publishes global system account credentials6.5 Medium
- psu haxcms-nodejs, haxcms-php, haxtheweb issues +2 moreHAX CMS Backend Lacks Comprehensive Authorization Checks8.3 High
- d-link dir-513, dlink dir-513 firmware +1 moreD-Link DIR-513 formSetWanPPPoE websAspInit buffer overflow8.7 High
- carmelo church donation systemcode-projects Church Donation System edit_members.php cross site scripting5.1 Medium
- tj-actions branch-namestj-actions/branch-names Contains Command Injection Vulnerability9.1 Critical
- skops-dev skopsskops' MethodNode can access unexpected object fields through dot notation, leading to arbitrary code execution at load time8.7 High
- skops-dev skopsskops' Inconsistent Trusted Type Validation Enables Hidden `operator` Methods Execution8.7 High
- salesforce tableau server, tableau server +1 moreServer-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux ...5.3 Medium
- salesforce tableau server, tableau server +1 moreServer-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux ...8.2 High
- salesforce tableau server, tableau server +1 moreServer-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux ...8.2 High
- carmelo church donation systemcode-projects Church Donation System HTTP POST Request index.php sql injection6.9 Medium
- salesforce tableau server, tableau server +1 moreImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in...8.5 High
- salesforce tableau server, tableau server +1 moreUnrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on...8.5 High
- salesforce tableau server, tableau server +1 moreAuthorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on...8.1 High
- salesforce tableau server, tableau server +1 moreAuthorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on...8.1 High
- salesforce tableau server, tableau server +1 moreAuthorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on...8.0 High
- code-projects food review system, carmelo food ordering review system +1 morecode-projects Food Review System approve_reservation.php sql injection5.3 Medium
- Show moreLoading…