CVEs published in July 2025
3,846 vulnerabilities, 397 critical, 14 exploited.
- dlink di-8200 firmwareD-LINK DI-8200 16.07.26A1 is vulnerable to Buffer Overflow in the ipsec_road_asp function via the...3.5 Low
- vishalmathur cloudclassroomA SQL Injection vulnerability exists in the takeassessment2.php endpoint of the CloudClassroom...6.5 Medium
- vishalmathur cloudclassroomCloudClassroom-PHP-Project 1.0 contains a reflected Cross-site Scripting (XSS) vulnerability in...6.1 Medium
- cs-cartAn issue was discovered in CS Cart 4.18.3 allows the vendor login functionality lacks essential...8.6 High
- No product listedCS Cart 4.18.3 is vulnerable to Insecure Direct Object Reference (IDOR). The user profile...8.0 High
- cs-cartA file upload vulnerability was discovered in CS Cart 4.18.3, allows attackers to execute...6.1 Medium
- cs-cartCross Site Request Forgery (CSRF) vulnerability in CS Cart 4.18.3, allows attackers to add...6.5 Medium
- No product listedAn issue was discovered in Archer Technology RSA Archer 6.11.00204.10014 allowing attackers to...8.8 High
- No product listedAn OS command injection vulnerability exists in Russound MBX-PRE-D67F firmware version 3.1.6,...9.8 Critical
- No product listedA stored Cross Site Scripting (xss) vulnerability in the "content management" feature in AnQiCMS...6.1 Medium
- jwt project jwtjwt v5.4.3 was discovered to contain weak encryption.7.0 High
- google firebase php-jwtphp-jwt contains weak encryption6.5 Medium
- pyjwt project pyjwtpyjwt v2.10.1 was discovered to contain weak encryption.7.0 High
- No product listedExaGrid EX10 6.3 - 7.0.1.P08 is vulnerable to Incorrect Access Control in the MailConfiguration...5.4 Medium
- No product listedExaGrid EX10 6.3 - 7.0.1.P08 is vulnerable to Incorrect Access Control. Since version 6.3,...7.3 High
- intelbras rx 1500 firmware, rx 3000 firmware +1 moreA cross-site scripting (XSS) vulnerability in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows...7.3 High
- intelbras rx 1500 firmware, rx 3000 firmware +1 moreAn issue in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows unauthenticated attackers to...9.8 Critical
- intelbras rx 1500 firmware, rx 3000 firmware +1 moreAn access control issue in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows unauthenticated...9.8 Critical
- No product listedAn open redirect in Sielox AnyWare v2.1.2 allows attackers to execute a man-in-the-middle attack...6.3 Medium
- sielox anywareSielox AnyWare v2.1.2 was discovered to contain a SQL injection vulnerability via the email...6.5 Medium
- ibm aspera faspexIBM Aspera Faspex session fixation6.5 Medium
- ibm aspera faspexIBM Aspera Faspex bypass security6.5 Medium
- absolute secure accessPermissions bypass vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.565.1 Medium
- absolute secure accessElevation of privilege vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.565.1 Medium
- absolute secure accessElevation of privilege vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.565.3 Medium
- projectworlds online admission systemprojectworlds Online Admission System adminac.php sql injection6.9 Medium
- absolute secure accessData deserialization vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.567.0 High
- code-projects simple car rental systemcode-projects Simple Car Rental System add_vehicles.php cross site scripting4.8 Medium
- campcodes online recruitment management systemCampcodes Online Recruitment Management System ajax.php sql injection6.9 Medium
- code-projects simple car rental systemcode-projects Simple Car Rental System cross-site request forgery5.3 Medium
- campcodes online recruitment management systemCampcodes Online Recruitment Management System ajax.php sql injection6.9 Medium
- anisha online farm systemcode-projects Online Farm System categoryvalue.php sql injection6.9 Medium
- anisha online farm systemcode-projects Online Farm System register.php sql injection6.9 Medium
- anisha online farm systemcode-projects Online Farm System forgot_pass.php sql injection6.9 Medium
- oauth2-proxy, oauth2 proxy project proxy +1 moreOAuth2-Proxy has authentication bypass in oauth2-proxy skip_auth_routes due to Query Parameter inclusion9.1 Critical
- code-projects vehicle managementcode-projects Vehicle Management edit1.php sql injection6.9 Medium
- code-projects vehicle managementcode-projects Vehicle Management filter3.php sql injection6.9 Medium
- dell smartfabric os10 software, smartfabric os10 +1 moreDell SmartFabric OS10 Software, versions prior to 10.6.0.5 contains a Files or Directories...5.5 Medium
- dell smartfabric os10 software, smartfabric os10 +1 moreDell SmartFabric OS10 Software, versions prior to 10.6.0.5, contains a Use of Hard-coded Password...2.5 Low
- dell smartfabric os10 software, smartfabric os10 +1 moreDell SmartFabric OS10 Software, versions prior to 10.6.0.5, contains an Improper Restriction of...6.5 Medium
- code-projects exam form submissioncode-projects Exam Form Submission register.php sql injection6.9 Medium
- dell powerprotect data managerDell PowerProtect Data Manager, versions prior to 19.19, contain(s) an Improper Input Validation...6.5 Medium
- dell techadvisor, xtremio management server +1 moreTechAdvisor versions 2.6 through 3.37-30 for Dell XtremIO X2, contain(s) an Insertion of...8.8 High
- dell xtremio, techadvisor, xtremio management server +2 moreDell XtremIO, version(s) 6.4.0-22, contain(s) an Insertion of Sensitive Information into Log File...8.8 High
- code-projects exam form submissioncode-projects Exam Form Submission delete_s8.php sql injection6.9 Medium
kubevirtopenSUSERecommended update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestf…No scorecontainerized-data-importerSUSESecurity update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, cont…No scorecontainerized-data-importerSUSESecurity update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, cont…No score- finos gitproxy, git-proxy +1 moreGitProxy is susceptible to a hidden commits injection attack7.1 High
- finos gitproxy, git-proxy +1 moreGitProxy is vulnerable to a new branch approval exploit8.2 High
- Show moreLoading…