CVEs published July 28, 2025
124 CVEs were published on July 28, 2025: 19 critical, 33 high. Browse them by severity, product and exploitation status.
- Published
- 124
- Critical
- 19
- High
- 33
- Medium
- 53
- Low
- 5
- Unrated
- 14
- Now in CISA KEV
- 0
- Fix available
- 55
Most affected products
- Linux
- 29
- code-projects Exam Form Submission
- 11
- JetBrains TeamCity
- 11
- MedDream PACS Premium
- 4
- Optimizely Episerver Content Management System
- 3
- polkadot-evm frontier
- 3
- VaelsysV4
- 3
- Xorux LPAR2RRD
- 3
- BeyondTrust Privilege Management for Windows
- 2
- code-projects Online Ordering System
- 2
Critical 19
- CVE-2025-54428RevelaCode exposes Sensitive MongoDB Atlas URI in .env (potential credential leak)musombi123 RevelaCode-Backend
- CVE-2025-54426Polkadot Frontier contains silent failure in Curve25519 arithmetic precompiles with malformed pointspolkadot-evm frontier
- CVE-2025-54419Node-SAML Contains SAML Signature Verification Vulnerabilitynode-saml · @node-saml/node-saml +2
- CVE-2025-54299Extension - nobossextensions.com - Stored XSS vulnerability in No Boss Testimonials component 1.0.0-3.0.0 and 4.0.0-4.0.2 for Joomlanobossextensions.com No Boss Testimonials component for Joo…
- CVE-2025-54298Extension - firecoders.com - Stored XSS vulnerability in CommentBox component 1.0.0-1.1.0 for Joomlafirecoders.com CommentBox component for Joomla
- CVE-2025-54418CodeIgniter4's ImageMagick Handler has Command Injection VulnerabilityCodeIgniter4 · codeigniter4/framework
- CVE-2025-53696iSTAR Ultra performs a firmware verification on boot, however the verification does not inspect certain portions of the firmware.Johnson Controls iSTAR Ultra
- CVE-2025-53695OS Command Injection in iSTAR Ultra products web application allows an authenticated attacker to gain even more privileged access ('root'…Johnson Controls iSTAR Ultra
- CVE-2025-26469An incorrect default permissions vulnerability exists in the CServerSettings::SetRegistryValues functionality of MedDream PACS Premium…MedDream PACS Premium
- CVE-2025-27724A privilege escalation vulnerability exists in the login.php functionality of meddream MedDream PACS Premium 7.3.3.840.MedDream PACS Premium
- CVE-2025-38490net: libwx: remove duplicate page_pool_put_full_page()Linux
- CVE-2025-38488smb: client: fix use-after-free in crypt_message when using async cryptoLinux
- CVE-2025-38476rpl: Fix use-after-free in rpl_do_srh_inline().Linux
- CVE-2025-38472netfilter: nf_conntrack: fix crash due to removal of uninitialised entryLinux
- CVE-2025-38471tls: always refresh the queue when reading sockLinux
- CVE-2025-6918SQLi in Ncvav's Virtual PBX SoftwareNcvav Virtual PBX Software
- CVE-2025-30124An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices.
- CVE-2025-30125An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices.
- CVE-2025-30133An issue was discovered on IROAD Dashcam FX2 devices.
High 33
- CVE-2025-54769KL-001-2025-016: Xorux LPAR2RRD File Upload Directory TraversalXorux LPAR2RRD
- CVE-2025-8194Tarfile infinite loop during parsing with negative member offsetPython Software Foundation CPython
- CVE-2025-54531In JetBrains TeamCity before 2025.07 path traversal was possible via plugin unpacking on WindowsJetBrains TeamCity
- CVE-2025-54530In JetBrains TeamCity before 2025.07 privilege escalation was possible due to incorrect directory permissionsJetBrains TeamCity
- CVE-2025-6250Privilege Management for Windows - Elevation of PrivilegeBeyondTrust Privilege Management for Windows
- CVE-2025-2297Privilege Management for Windows - Elevation of PrivilegeBeyondTrust Privilege Management for Windows
- CVE-2024-49342IBM Informix Dynamic Server information disclosureIBM Informix Dynamic Server
- CVE-2025-8279Missing Authentication for Critical Function in GitLab Language ServerGitLab Language Server
- CVE-2025-4056Glib: glib crash after long command lineglib · Red Hat Enterprise Linux
- CVE-2025-5997Privilege Escalation in Beamsec PhishProBeamsec PhishPro
- CVE-2025-38495HID: core: ensure the allocated report buffer can contain the reserved report IDLinux
- CVE-2025-38494HID: core: do not bypass hid_hw_raw_requestLinux
- CVE-2025-38491mptcp: make fallback action and fallback decision atomicLinux
- CVE-2025-38486soundwire: Revert "soundwire: qcom: Add set_channel_map api support"Linux
- CVE-2025-38485iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flushLinux
- CVE-2025-38484iio: backend: fix out-of-bound writeLinux
- CVE-2025-38478comedi: Fix initialization of data for instructions that write to subdeviceLinux
- CVE-2025-38477net/sched: sch_qfq: Fix race condition on qfq_aggregateLinux
- CVE-2025-38475smc: Fix various oops due to inet_sock type confusion.Linux
- CVE-2025-38470net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtimeLinux
- CVE-2025-8267Versions of the package ssrfcheck before 1.2.0 are vulnerable to Server-Side Request Forgery (SSRF) due to an incomplete denylist of IP…ssrfcheck
- CVE-2025-29534An authenticated remote code execution vulnerability in PowerStick Wave Dual-Band Wifi Extender V1.0 allows an attacker with valid…
- CVE-2025-50484Improper session invalidation in the component /crm/change-password.php of PHPGurukul Small CRM v3.0 allows attackers to execute a session…
- CVE-2025-50485Improper session invalidation in the component /crm/change-password.php of PHPGurukul Online Course Registration v3.1 allows attackers to…
- CVE-2025-50486Improper session invalidation in the component /carrental/update-password.php of PHPGurukul Car Rental Project v3.0 allows attackers to…
Show all 33 entriesShow fewer entries
- CVE-2025-50487Improper session invalidation in the component /bbdms/change-password.php of PHPGurukul Blood Bank & Donor Management System v2.4 allows…
- CVE-2025-50488Improper session invalidation in the component /library/change-password.php of PHPGurukul Online Library Management System v3.0 allows…
- CVE-2025-50489Improper session invalidation in the component /srms/change-password.php of PHPGurukul Student Result Management System v2.0 allows…
- CVE-2025-50490Improper session invalidation in the component /elms/emp-changepassword.php of PHPGurukul Student Result Management System v2.0 allows…
- CVE-2025-50491Improper session invalidation in the component /banker/change-password.php of PHPGurukul Bank Locker Management System v1 allows attackers…
- CVE-2025-50492Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary Management System v1 allows attackers to…
- CVE-2025-50493Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Doctor Appointment Management System v1 allows…
- CVE-2025-50494Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Car Washing Management System v1.0 allows…
Medium, low and unrated 72
- CVE-2025-54768KL-001-2025-015: Xorux LPAR2RRD Read Only User Log Download Exposing Sensitive InformationXorux LPAR2RRD
- CVE-2025-54767KL-001-2025-014: Xorux LPAR2RRD Read Only User Denial of ServiceXorux LPAR2RRD
- CVE-2025-54765KL-001-2025-013: Xorux XorMon-NG Web Application Privilege Escalation to AdministratorXorux XorMon-NG
- CVE-2025-54766KL-001-2025-012: Xorux XorMon-NG Read Only User Export Device Configuration Exposing Sensitive InformationXorux XorMon-NG
- CVE-2025-54429Polkadot Frontier's constructing smart contract can bypass precompile address boundingpolkadot-evm frontier
- CVE-2025-54427Polkadot Frontier contains missing `check_inherent` for `note_min_gas_price_target` inflates gas pricepolkadot-evm frontier
- CVE-2025-54423copyparty has a DOM-Based XSS vulnerability when displaying multimedia metadata9001 copyparty · copyparty
- CVE-2025-8283Netavark: podman: netavark may resolve hostnames to unexpected hostsnetavark · Red Hat Enterprise Linux +1
- CVE-2025-43023HP Linux Imaging and Printing Software - Use of DSA KeyHP Linux Imaging and Printing Software
- CVE-2025-7676DLL hijacking of all PE32 executables on Windows 11 for ARM CPUsMicrosoft Windows
- CVE-2025-54538In JetBrains TeamCity before 2025.07 password exposure was possible via command line in the "hg pull" commandJetBrains TeamCity
- CVE-2025-54537In JetBrains TeamCity before 2025.07 user credentials were stored in plain text in memory snapshotsJetBrains TeamCity
- CVE-2025-54536In JetBrains TeamCity before 2025.07 a CSRF was possible on GraphQL endpointJetBrains TeamCity
- CVE-2025-54535In JetBrains TeamCity before 2025.07 password reset and email verification tokens were using weak hashing algorithmsJetBrains TeamCity
- CVE-2025-54534In JetBrains TeamCity before 2025.07 reflected XSS was possible on the agentpushPreset pageJetBrains TeamCity
- CVE-2025-54533In JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings via VCS configurationJetBrains TeamCity
- CVE-2025-54532In JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings via snapshot dependenciesJetBrains TeamCity
- CVE-2025-54529In JetBrains TeamCity before 2025.07 a CSRF was possible in external OAuth login integrationJetBrains TeamCity
- CVE-2025-54528In JetBrains TeamCity before 2025.07 a CSRF was possible in GitHub App connection flowJetBrains TeamCity
- CVE-2025-54527In JetBrains YouTrack before 2025.2.86935, 2025.2.87167, 2025.3.87341, 2025.3.87344 improper iframe configuration in widget sandbox allows…JetBrains YouTrack
- CVE-2024-49343IBM Informix Dynamic Server HTML injectionIBM Informix Dynamic Server
- CVE-2025-32731A reflected cross-site scripting (xss) vulnerability exists in the radiationDoseReport.php functionality of meddream MedDream PACS Premium…MedDream PACS Premium
- CVE-2025-24485A server-side request forgery vulnerability exists in the cecho.php functionality of MedDream PACS Premium 7.3.5.860.MedDream PACS Premium
- CVE-2025-8275bsc Peru Cocktails App bsc.devy.peru_cocktails AndroidManifest.xml improper export of android application componentsbsc Peru Cocktails App
- CVE-2025-8274Campcodes Online Recruitment Management System ajax.php sql injectionCampcodes Online Recruitment Management System
Show all 72 entriesShow fewer entries
- CVE-2025-38497usb: gadget: configfs: Fix OOB read on empty string writeLinux
- CVE-2025-38496dm-bufio: fix sched in atomic contextLinux
- CVE-2025-38493tracing/osnoise: Fix crash in timerlat_dump_stack()Linux
- CVE-2025-38492netfs: Fix race between cache write completion and ALL_QUEUED being setLinux
- CVE-2025-38489s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL againLinux
- CVE-2025-38487soc: aspeed: lpc-snoop: Don't disable channels that aren't enabledLinux
- CVE-2025-38483comedi: das16m1: Fix bit shift out of boundsLinux
- CVE-2025-38482comedi: das6402: Fix bit shift out of boundsLinux
- CVE-2025-38481comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too largeLinux
- CVE-2025-38480comedi: Fix use of uninitialized data in insn_rw_emulate_bits()Linux
- CVE-2025-38474usb: net: sierra: check for no status endpointLinux
- CVE-2025-38473Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb()Linux
- CVE-2025-38469KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercallsLinux
- CVE-2025-38468net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtreeLinux
- CVE-2025-8273code-projects Exam Form Submission update_s8.php sql injectioncode-projects Exam Form Submission
- CVE-2025-8272code-projects Exam Form Submission update_fst.php sql injectioncode-projects Exam Form Submission
- CVE-2025-40730HTML injection in Vox Media's Chorus CMSVox Media Chorus CMS
- CVE-2025-8271code-projects Exam Form Submission delete_s3.php sql injectioncode-projects Exam Form Submission
- CVE-2025-8270code-projects Exam Form Submission delete_s2.php sql injectioncode-projects Exam Form Submission
- CVE-2025-8269code-projects Exam Form Submission delete_s1.php sql injectioncode-projects Exam Form Submission
- CVE-2025-27802Stored Cross-Site Scripting in Episerver Content Management System (CMS) Edit PreviewOptimizely Episerver Content Management System
- CVE-2025-27801Stored Cross-Site Scripting in Episerver Content Management System (CMS) Media Selection PreviewOptimizely Episerver Content Management System
- CVE-2025-27800Stored Cross-Site Scripting in Episerver Content Management System (CMS) Admin DashboardOptimizely Episerver Content Management System
- CVE-2025-8266yanyutao0402 ChanCMS collect.js getArticle deserializationyanyutao0402 ChanCMS
- CVE-2025-8265299Ko CMS File Management view unrestricted upload299Ko CMS
- CVE-2025-8262yarnpkg Yarn hosted-git-resolver.js explodeHostedGitFragment redosyarnpkg Yarn
- CVE-2025-8261Vaelsys VaelsysV4 User Creation vgrid_server.php improper authorizationVaelsysV4
- CVE-2025-8260Vaelsys VaelsysV4 Web interface vgrid_server.php weak hashVaelsysV4
- CVE-2025-8259Vaelsys VaelsysV4 Web interface vgrid_server.php execute_DataObjectProc os command injectionVaelsysV4
- CVE-2025-8258Cool Mo Maigcal Number App com.sdmagic.number AndroidManifest.xml improper export of android application componentsCool Mo Maigcal Number App
- CVE-2025-8257Lobby Universe Lobby App com.maverick.lobby AndroidManifest.xml improper export of android application componentsLobby Universe Lobby App
- CVE-2025-8256code-projects Online Ordering System product.php unrestricted uploadcode-projects Online Ordering System
- CVE-2025-8255code-projects Exam Form Submission register.php unrestricted uploadcode-projects Exam Form Submission
- CVE-2025-8254Campcodes Courier Management System view_parcel.php sql injectionCampcodes Courier Management System
- CVE-2025-8253code-projects Exam Form Submission delete_s6.php sql injectioncode-projects Exam Form Submission
- CVE-2025-8252code-projects Exam Form Submission delete_s5.php sql injectioncode-projects Exam Form Submission
- CVE-2025-8251code-projects Exam Form Submission delete_s4.php sql injectioncode-projects Exam Form Submission
- CVE-2025-8250code-projects Exam Form Submission update_s4.php sql injectioncode-projects Exam Form Submission
- CVE-2025-8249code-projects Exam Form Submission update_s3.php sql injectioncode-projects Exam Form Submission
- CVE-2025-8248code-projects Online Ordering System signup.php sql injectioncode-projects Online Ordering System
- CVE-2022-50237The ed25519-dalek crate before 2 for Rust allows a double public key signing function oracle attack.dalek-cryptography ed25519-dalek · ed25519-dalek
- CVE-2023-53158The gix-transport crate before 0.36.1 for Rust allows command execution via the "gix clone 'ssh://-oProxyCommand=open$IFS" substring.GitoxideLabs gix-transport · gix-transport
- CVE-2023-53159The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host.sfackler openssl · openssl
- CVE-2023-53160The sequoia-openpgp crate before 1.16.0 for Rust allows out-of-bounds array access and a panic.sequoia-pgp sequoia · sequoia-openpgp
- CVE-2023-53161The buffered-reader crate before 1.1.5 for Rust allows out-of-bounds array access and a panic.sequoia-pgp buffered-reader · buffered-reader
- CVE-2025-30126An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices.
- CVE-2025-54569In Malwarebytes Binisoft Windows Firewall Control before 6.16.0.0, the installer is vulnerable to local privilege escalation.Malwarebytes Binisoft Windows Firewall Control