CVEs published in July 2025
3,846 vulnerabilities, 397 critical, 14 exploited.
- iroadau fx2 firmwareAn issue was discovered on IROAD Dashcam FX2 devices. Bypass of Device Pairing/Registration can...9.8 Critical
- No product listedAn issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. Via port 7777 without any need...5.3 Medium
- No product listedAn issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. All dashcams were shipped with...9.8 Critical
- No product listedAn issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. When a new SD card is inserted...9.8 Critical
- No product listedAn authenticated remote code execution vulnerability in PowerStick Wave Dual-Band Wifi Extender...8.8 High
- projectworlds online admission systemProjectworlds Online Admission System admin.php sql injection5.3 Medium
- totolink x15, x15 firmware +1 moreTOTOLINK X15 HTTP POST Request formRoute buffer overflow8.7 High
- totolink x15, x15 firmware +1 moreTOTOLINK X15 HTTP POST Request formMultiAPVLAN buffer overflow8.7 High
- totolink x15, x15 firmware +1 moreTOTOLINK X15 HTTP POST Request formMapDelDevice buffer overflow8.7 High
- totolink x15, x15 firmware +1 moreTOTOLINK X15 HTTP POST Request formMapDel buffer overflow8.7 High
- totolink x15, x15 firmware +1 moreTOTOLINK X15 HTTP POST Request formFilter buffer overflow8.7 High
- 1000 projects abc courier management system1000 Projects ABC Courier Management System report.php sql injection6.9 Medium
- code-projects exam form submissioncode-projects Exam Form Submission dashboard.php sql injection6.9 Medium
- code-projects exam form submissioncode-projects Exam Form Submission admin sql injection6.9 Medium
- code-projects exam form submissioncode-projects Exam Form Submission update_s2.php sql injection6.9 Medium
- code-projects exam form submissioncode-projects Exam Form Submission update_s1.php sql injection6.9 Medium
- code-projects online ordering systemcode-projects Online Ordering System edit_product.php sql injection6.9 Medium
- code-projects online ordering systemcode-projects Online Ordering System product.php sql injection6.9 Medium
- code-projects online ordering systemcode-projects Online Ordering System delete_member.php sql injection6.9 Medium
- code-projects online ordering systemcode-projects Online Ordering System user.php sql injection6.9 Medium
- code-projects online ordering systemcode-projects Online Ordering System delete_user.php sql injection6.9 Medium
- d-link dir-890l, dlink dir-890l firmware +1 moreD-Link DIR-890L UART Port rgbin hard-coded credentials7.0 High
- campcodes courier management systemCampcodes Courier Management System manage_user.php sql injection5.3 Medium
- campcodes courier management systemCampcodes Courier Management System parcel_list.php sql injection5.3 Medium
- chancmsyanyutao0402 ChanCMS getPages server-side request forgery5.3 Medium
- chancmsyanyutao0402 ChanCMS getArticle deserialization5.3 Medium
- chancmsyanyutao0402 ChanCMS find information disclosure5.3 Medium
- gnu binutilsGNU Binutils DWARF Section dwarf.c process_debug_info memory leak4.8 Medium
- huggingface huggingface/smolagents, smolagents +1 moreSandbox Escape Vulnerability in huggingface/smolagents7.6 High
- gnu binutils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +2 more +4 moreGNU Binutils BFD Library elf.c bfd_elf_get_str_section null pointer dereference4.8 Medium
- jerryshensjf jpacookieshop, jpacookieshop 蛋糕商城jpa版 +1 morejerryshensjf JPACookieShop 蛋糕商城JPA版 AdminTypeCustController.java cross-site request forgery5.3 Medium
- jerryshensjf jpacookieshop, jpacookieshop 蛋糕商城jpa版 +1 morejerryshensjf JPACookieShop 蛋糕商城JPA版 GoodsController.java cross site scripting5.1 Medium
- sminozzi memory usage, memory limit, php and server memory health check and provide suggestionsMemory Usage <= 3.98 - Cross-Site Request Forgery to Limited Plugin Installation via wpmemory_install_plugin Function4.3 Medium
- jerryshensjf jpacookieshop, jpacookieshop 蛋糕商城jpa版 +1 morejerryshensjf JPACookieShop 蛋糕商城JPA版 GoodsCustController.java goodsSearch cross site scripting5.3 Medium
- com.ritense.valtimo webEngeman Web Password Recovery RecoveryPass sql injection6.9 Medium
- 51mis lingdang crmShanghai Lingdang Information Technology Lingdang CRM HTTP POST Request tabdetail_moduleSave_dxkp.php sql injection5.3 Medium
- lakeside software systrackCVE-2025-62414.4 Medium
- dadrus heimdall, linuxserver heimdall application dashboard +1 moreLinuxServer.io Heimdall before 2.7.3 allows XSS via the q parameter.7.2 High
- roothubRoothub SystemConfigAdminController.java edit cross site scripting5.1 Medium
- yeelink yeelight app, yeelight classic +1 moreYeelink Yeelight App com.yeelight.cherry AndroidManifest.xml improper export of android application components4.8 Medium
- canara ai1 mobile banking app, canarabank ai1 +1 moreCanara ai1 Mobile Banking App com.canarabank.mobility AndroidManifest.xml improper export of android application components4.8 Medium
- comodo dragonComodo Dragon IP DNS Leakage Detector cross site scripting2.3 Low
- comodo dragonComodo Dragon IP DNS Leakage Detector cleartext transmission6.3 Medium
- comodo dragonComodo Dragon HSTS security check2.3 Low
- jingmen zeyou large file upload controlJingmen Zeyou Large File Upload Control index.jsp sql injection5.3 Medium
- macrozheng mallmacrozheng mall Swagger UI index.html cross site scripting5.1 Medium
- campcodes courier management systemCampcodes Courier Management System print_pdets.php sql injection5.3 Medium
- campcodes courier management systemCampcodes Courier Management System edit_user.php sql injection5.3 Medium
- campcodes courier management systemCampcodes Courier Management System edit_staff.php sql injection5.3 Medium
- campcodes courier management systemCampcodes Courier Management System edit_parcel.php sql injection5.3 Medium
- Show moreLoading…