CVEs published in July 2025
3,846 vulnerabilities, 397 critical, 14 exploited.
- discourseDiscourse's WebAuthn challenge isn't cleared from user session after authentication8.2 High
- enalean tuleapTuleap vulnerable to user enumeration via the lost password form5.3 Medium
- umbraco cms, umbraco-cms +1 moreUmbraco's Delivery API allows for cached requests to be returned with an invalid API key5.3 Medium
- ibm db2IBM Db2 for Linux, UNIX and Windows denial of service6.5 Medium
- ibm db2IBM Db2 for Linux, UNIX and Windows denial of service6.5 Medium
- ibm db2IBM Db2 for Linux, UNIX and Windows denial of service4.9 Medium
- ibm db2IBM Db2 for Linux denial of service5.3 Medium
- ibm db2IBM Db2 for Linux code execution7.8 High
- ibm db2IBM Db2 denial of service6.5 Medium
- ibm db2IBM Db2 for Linux denial of service6.5 Medium
- tp-link systems inc. tl-wr841n v11, tp-link tl-wr841n firmware +1 moreTP-Link TL-WR841N Wan6to4TunnelCfgRpm.htm buffer overflow6.9 Medium
- tp-link systems inc. tl-wr841n v11, tp-link tl-wr841n firmware +1 moreTP-Link TL-WR841N WzdWlanSiteSurveyRpm_AP.htm buffer overflow6.9 Medium
- tp-link systems inc. tl-wr841n v11, tp-link tl-wr841n firmware +1 moreTP-Link TL-WR841N WlanNetworkRpm_APC.htm buffer overflow6.9 Medium
- tp-link systems inc. tl-wr841n v11, tp-link tl-wr841n firmware +1 moreTP-Link TL-WR841N WlanNetworkRpm_AP.htm buffer overflow6.9 Medium
- autodesk autocad, shared components +1 more3DM File Parsing Out-of-Bounds Write Vulnerability7.8 High
- tp link systems inc. tl-wr842nd v2, tp-link systems inc. tl-wr841n v11, tp link systems inc. tl-wr949n v3 +1 more +3 moreTP-Link TL-WR841N, TL-WR842ND and TL-WR949N WlanNetworkRpm.htm buffer overflow6.9 Medium
- autodesk shared componentsPRT File Parsing Out-of-Bounds Write Vulnerability7.8 High
- autodesk shared componentsPRT File Parsing Out-of-Bounds Write Vulnerability7.8 High
- autodesk shared componentsPRT File Parsing Use-After-Free Vulnerability7.8 High
- autodesk shared componentsPRT File Parsing Out-of-Bounds Read Vulnerability7.8 High
- autodesk shared componentsPRT File Parsing Out-of-Bounds Write Vulnerability7.8 High
- autodesk autocad, shared components +1 more3DM File Parsing Heap-Based Overflow Vulnerability7.8 High
- autodesk autocad, shared components +1 moreX_T File Parsing Memory Corruption Vulnerability7.8 High
- genetec inc. security centerSQL Injection affecting the Archiver role.7.2 High
- ibm db2IBM Db2 for Linux denial of service5.3 Medium
- glpi-project glpiGLPI is susceptible to Stored XSS attack through project's kanban4.5 Medium
- palo alto networks globalprotect app, globalprotect uwp app +1 moreGlobalProtect App: Non Admin User Can Disable the GlobalProtect App6.8 Medium
- tsplus remote accessRetrievable password hash protecting TSplus admin console4.8 Medium
- hcl software bigfix remote controlHCL BigFix Remote Control is affected by an authorization bypass vulnerability8.2 High
- progress hybrid data pipelineUnauthorized access and impersonation can occur in versions 4.6.2.3226 and below of Progress...8.1 High
- progress hybrid data pipelinePossibilities of IP Spoofing via X-Forwarded-For (XFF) Header8.4 High
- sandboxie-plus sandboxieSandboxie exposes encrypted sandbox key during password change6.9 Medium
- sqliteSQLite integer overflow in key info allocation may lead to information disclosure.6.9 Medium
- dece software geodiXSS in DECE Software's Geodi5.4 Medium
- vmware vcenter, cloud foundation, telco cloud infrastructure +1 more +3 moreDenial-of-service vulnerability4.4 Medium
- dece software geodiCRLF Injection in DECE Software's Geodi7.2 High
- human resource management system resource management system, itsourcecode human resource management system +1 moreReflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management System4.8 Medium
- human resource management system resource management system, itsourcecode human resource management system +1 moreReflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management System4.8 Medium
- human resource management system resource management system, itsourcecode human resource management system +1 moreReflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management System4.8 Medium
- human resource management system resource management system, itsourcecode human resource management system +1 moreReflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management System4.8 Medium
- human resource management system resource management system, itsourcecode human resource management system +1 moreSQL injection vulnerability in Human Resource Management System8.7 High
tsify-nextcrates.iotsify-next is unmaintained, use tsify insteadNo score- sparklewpthemes appzendAppzend <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via progressbarLayout Parameter6.4 Medium
- themefic hydra booking – all in one appointment booking system | appointment scheduling, booking calendar & woocommerce bookingsHydra Booking 1.1.0 - 1.1.18 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via tfhb_reset_password_callback Function8.8 High
- hanucodes youtube embed – youtube gallery, vimeo gallery – wordpress pluginYouTube Embed <= 10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via instance Parameter6.4 Medium
- nalam-1 magical addons for elementor ( header footer builder, free elementor widgets, elementor templates library )Magical Addons For Elementor <= 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes6.4 Medium
- amans2k bonanza – woocommerce free gifts liteBonanza – WooCommerce Free Gifts Lite <= 1.0.0 - Missing Authorization to Authenticated (Subscriber+) Opt In Success4.3 Medium
- delower186 fan pageFan Page <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter6.4 Medium
- wowdevs sky addons – elementor addons with widgets & templatesSky Addons for Elementor <= 3.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets6.4 Medium
- No product listedSecurity update for nginxNo score
- Show moreLoading…