CVEs published July 3, 2025
147 CVEs were published on July 3, 2025: 9 critical, 55 high.
- Published
- 147
- Critical
- 9
- High
- 55
- Medium
- 37
- Low
- 2
- Unrated
- 44
- Now in CISA KEV
- 0
- Fix available
- 57
Most affected products
- Linux
- 78
- Endress+Hauser MEAC300-FNADE4
- 19
- ABB RMC-100
- 4
- Flatboard Pro Flatboard
- 2
- n8n-io n8n · n8n
- 2
- StarCitizenTools mediawiki-skins-Citizen · starcitizentools…
- 2
- vercel next.js · next
- 2
- Aexol Studio Remote for Mac
- 1
- AmauriC tarteaucitron.js · tarteaucitronjs
- 1
- Artica ST Pandora FMS
- 1
Critical 9
- CVE-2025-34089Remote for Mac Unauthenticated Remote Code Execution via AppleScript InjectionAexol Studio Remote for Mac
- CVE-2025-34087Pi-Hole AdminLTE Whitelist (now 'Web Allowlist') Remote Command ExecutionPi-hole Web
- CVE-2025-34082IGEL OS Secure Terminal and Secure Shadow Remote Code ExecutionIGEL Technology OS
- CVE-2025-34061PHPStudy 2016-2018 Backdoor Remote Code Execution VulnerabilityHenan Xiaopi Security Technology Co. PHPStudy
- CVE-2025-23968WordPress AiBud WP plugin <= 1.9 - Arbitrary File Upload vulnerabilityWebFactory AiBud WP
- CVE-2025-38146net: openvswitch: Fix the dead loop of MPLS parseLinux
- CVE-2025-38139netfs: Fix oops in write-retry from mis-resetting the subreq iteratorLinux
- CVE-2025-38123net: wwan: t7xx: Fix napi rx poll issueLinux
- CVE-2025-38120netfilter: nf_set_pipapo_avx2: fix initial map fillLinux
High 55
- CVE-2025-5322VikRentCar Car Rental Management System <= 1.4.3 - Authenticated (Administrator+) Arbitrary File Uploade4jvikwp VikRentCar Car Rental Management System
- CVE-2025-53367DjVuLibre OOB-Write Vulnerability in MMRDecoderDjvuNet DjVuLibre
- CVE-2025-49826Next.js DoS vulnerability via cache poisoningvercel next.js · next
- CVE-2025-53369Citizen Short Description stored XSS vulnerability through wikitextStarCitizenTools mediawiki-extensions-ShortDescription · st…
- CVE-2025-34088Pandora FMS Authenticated Remote Code Execution via Ping ModuleArtica ST Pandora FMS
- CVE-2025-34086Bolt CMS Authenticated Remote Code Execution via Profile Injection and File RenameBolt CMS · bolt/bolt
- CVE-2025-53370Citizen stored XSS vulnerability through short descriptionsStarCitizenTools mediawiki-skins-Citizen · starcitizentools…
- CVE-2025-53368Citizen is vulnerable to stored XSS attack in the legacy search barStarCitizenTools mediawiki-skins-Citizen · starcitizentools…
- CVE-2025-6072Stack Buffer Overflow in MQTTCoreABB RMC-100
- CVE-2025-6073Stack Buffer Overflow in MQTTCoreABB RMC-100
- CVE-2025-6926Security Authentication Bypass in CentralAuthWikimedia Foundation Mediawiki - CentralAuth Extension
- CVE-2025-53501Content Access Bypass in ScribuntoWikimedia Foundation Mediawiki - Scribunto Extension
- CVE-2025-5961Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.116 - Authenticated (Administrator+) Arbitrary File Uploadwpvividplugins WPvivid — Backup, Migration & Staging
- CVE-2025-2932JKDEVKIT <= 1.9.4 - Authenticated (Subscriber+) Arbitrary File Deletionjkdevstudio JKDEVKIT
- CVE-2025-27461CVE-2025-27461Endress+Hauser MEAC300-FNADE4
- CVE-2025-27460CVE-2025-27460Endress+Hauser MEAC300-FNADE4
- CVE-2025-27456CVE-2025-27456Endress+Hauser MEAC300-FNADE4
- CVE-2025-27449CVE-2025-27449Endress+Hauser MEAC300-FNADE4
- CVE-2025-27447CVE-2025-27447Endress+Hauser MEAC300-FNADE4
- CVE-2025-1710CVE-2025-1710Endress+Hauser MEAC300-FNADE4
- CVE-2025-1708CVE-2025-1708Endress+Hauser MEAC300-FNADE4
- CVE-2025-38173crypto: marvell/cesa - Handle zero-length skcipher requestsLinux
- CVE-2025-38172erofs: avoid using multiple devices with different typeLinux
- CVE-2025-38169arm64/fpsimd: Avoid clobbering kernel FPSIMD state with SMSTOPLinux
- CVE-2025-38168perf: arm-ni: Unregister PMUs on probe failureLinux
- CVE-2025-38166bpf: fix ktls panic with sockmapLinux
- CVE-2025-38165bpf, sockmap: Fix panic when calling skb_linearizeLinux
- CVE-2025-38164f2fs: zone: fix to avoid inconsistence in between SIT and SSALinux
- CVE-2025-38162netfilter: nft_set_pipapo: prevent overflow in lookup table allocationLinux
- CVE-2025-38161RDMA/mlx5: Fix error flow upon firmware failure for RQ destructionLinux
- CVE-2025-38154bpf, sockmap: Avoid using sk_socket after free when sendingLinux
- CVE-2025-38150af_packet: move notifier's packet_dev_mc out of rcu critical sectionLinux
- CVE-2025-38141dm: fix dm_blk_report_zonesLinux
- CVE-2025-38133iio: adc: ad4851: fix ad4858 chan pointer handlingLinux
- CVE-2025-38129page_pool: Fix use-after-free in page_pool_recycle_in_ringLinux
- CVE-2025-38127ice: fix Tx scheduler error handling in XDP callbackLinux
- CVE-2025-38124net: fix udp gso skb_segment after pull from frag_listLinux
- CVE-2025-38118Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_completeLinux
- CVE-2025-38117Bluetooth: MGMT: Protect mgmt_pending list with its own lockLinux
- CVE-2025-38116wifi: ath12k: fix uaf in ath12k_core_init()Linux
- CVE-2025-38115net_sched: sch_sfq: fix a potential crash on gso_skb handlingLinux
- CVE-2025-38111net/mdiobus: Fix potential out-of-bounds read/write accessLinux
- CVE-2025-38110net/mdiobus: Fix potential out-of-bounds clause 45 read/write accessLinux
- CVE-2025-38108net_sched: red: fix a race in __red_change()Linux
- CVE-2025-38107net_sched: ets: fix a race in ets_qdisc_change()Linux
- CVE-2025-38106io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo()Linux
- CVE-2025-38102VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notifyLinux
- CVE-2025-38101ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set()Linux
- CVE-2025-38098drm/amd/display: Don't treat wb connector as physical in create_validate_stream_for_sinkLinux
- CVE-2025-38097espintcp: remove encap socket caching to avoid reference leakLinux
- CVE-2025-38095dma-buf: insert memory barrier before updating num_fencesLinux
- CVE-2025-50258Tenda AC6 v15.03.05.16_multi is vulnerable to Buffer Overflow in the SetSysTimeCfg function via the time parameter.
- CVE-2025-50260Tenda AC6 v15.03.05.16_multi is vulnerable to Buffer Overflow in the formSetFirewallCfg function via the firewallEn parameter.
- CVE-2025-50262Tenda AC6 v15.03.05.16_multi is vulnerable to Buffer Overflow in the formSetQosBand function via the list parameter.
- CVE-2025-50263Tenda AC6 v15.03.05.16_multi is vulnerable to Buffer Overflow in the fromSetRouteStatic function via the list parameter.
Medium, low and unrated 83
- CVE-2025-49005Next.js cache poisoning due to omission of Vary headervercel next.js · next
- CVE-2025-52554n8n Improper Authorization in Workflow Execution Stop Endpoint Allows Terminating Other Users’ Workflowsn8n-io n8n · n8n
- CVE-2025-6071Hard Coded Key used for AES encryptionABB RMC-100
- CVE-2025-6074Authentication Bypass to the MQTT configuration Web InterfaceABB RMC-100
- CVE-2025-49846wire-ios accidentally logs message contentswireapp wire-ios
- CVE-2025-48939tarteaucitron.js vulnerable to DOM Clobbering via document.currentScriptAmauriC tarteaucitron.js · tarteaucitronjs
- CVE-2025-53500Stored XSS in MassEditRegexWikimedia Foundation Mediawiki - MassEditRegex Extension
- CVE-2025-53502HTML injection in FeaturedFeedsWikimedia Foundation Mediawiki - FeaturedFeeds Extension
- CVE-2025-53489XSS in GoogleDocs4MWWikimedia Foundation Mediawiki - GoogleDocs4MW Extension
- CVE-2025-53490Multiple XSS in CampaignEventsWikimedia Foundation Mediawiki - CampaignEvents Extension
- CVE-2025-2537Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via ThickBox JavaScript LibraryYouTube Embed, Playlist and Popup by WpDevArt · denis-de… +1
- CVE-2025-49595n8n Vulnerable to Denial of Service via Malformed Binary Data Requestsn8n-io n8n · n8n
- CVE-2025-3702WordPress Melapress File Monitor plugin < 2.2.0 - Broken Access Control vulnerabilityMelapress File Monitor
- CVE-2025-49032WordPress Gutenberg Blocks plugin <= 3.3.1 - Cross Site Scripting (XSS) vulnerabilityPublishPress Gutenberg Blocks
- CVE-2025-40723Stored Cross-Site Scripting (XSS) vulnerability on FlatboardFlatboard Pro Flatboard
- CVE-2025-40722Stored Cross-Site Scripting (XSS) vulnerability on FlatboardFlatboard Pro Flatboard
- CVE-2025-27459CVE-2025-27459Endress+Hauser MEAC300-FNADE4
- CVE-2025-27458CVE-2025-27458Endress+Hauser MEAC300-FNADE4
- CVE-2025-27457CVE-2025-27457Endress+Hauser MEAC300-FNADE4
- CVE-2025-27455CVE-2025-27455Endress+Hauser MEAC300-FNADE4
- CVE-2025-27454CVE-2025-27454Endress+Hauser MEAC300-FNADE4
- CVE-2025-27453CVE-2025-27453Endress+Hauser MEAC300-FNADE4
- CVE-2025-27452CVE-2025-27452Endress+Hauser MEAC300-FNADE4
- CVE-2025-27451CVE-2025-27451Endress+Hauser MEAC300-FNADE4
- CVE-2025-27450CVE-2025-27450Endress+Hauser MEAC300-FNADE4
- CVE-2025-27448CVE-2025-27448Endress+Hauser MEAC300-FNADE4
- CVE-2025-1711CVE-2025-1711Endress+Hauser MEAC300-FNADE4
- CVE-2025-1709CVE-2025-1709Endress+Hauser MEAC300-FNADE4
- CVE-2025-2540Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via prettyPhoto JavaScript Librarynayon46 Awesome Wp Image Gallery · raihancse Awesome Gal… +3
- CVE-2025-6563Cross-site scripting via dst parameter in RouterOS WiFi hotspotMikroTik RouterOS
- CVE-2025-6587Exposure of system environment variables in Docker Desktop diagnostic logsDocker Desktop
- CVE-2025-0885Incorrect Authorization vulnerability affects OpenText™ GroupWiseOpenText™ GroupWise
- CVE-2024-5647Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript LibraryBlossomThemes Social Feed · sayful Carousel Slider +12
- CVE-2025-38171power: supply: max77705: Fix workqueue error handling in probeLinux
- CVE-2025-38170arm64/fpsimd: Discard stale CPU state when handling SME trapsLinux
- CVE-2025-38167fs/ntfs3: handle hdr_first_de() return valueLinux
- CVE-2025-38163f2fs: fix to do sanity check on sbi->total_valid_block_countLinux
- CVE-2025-38160clk: bcm: rpi: Add NULL check in raspberrypi_clk_register()Linux
- CVE-2025-38159wifi: rtw88: fix the 'para' buffer size to avoid reading out of boundsLinux
- CVE-2025-38158hisi_acc_vfio_pci: fix XQE dma address errorLinux
- CVE-2025-38157wifi: ath9k_htc: Abort software beacon handling if disabledLinux
- CVE-2025-38156wifi: mt76: mt7996: Fix null-ptr-deref in mt7996_mmio_wed_init()Linux
- CVE-2025-38155wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init()Linux
- CVE-2025-38153net: usb: aqc111: fix error handling of usbnet read callsLinux
- CVE-2025-38151RDMA/cma: Fix hang when cma_netevent_callback fails to queue_workLinux
- CVE-2025-38149net: phy: clear phydev->devlink when the link is deletedLinux
- CVE-2025-38148net: phy: mscc: Fix memory leak when using one step timestampingLinux
- CVE-2025-38147calipso: Don't call calipso functions for AF_INET sk.Linux
- CVE-2025-38145soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop()Linux
- CVE-2025-38144watchdog: lenovo_se30_wdt: Fix possible devm_ioremap() NULL pointer dereference in lenovo_se30_wdt_probe()Linux
- CVE-2025-38143backlight: pm8941: Add NULL check in wled_configure()Linux
- CVE-2025-38142hwmon: (asus-ec-sensors) check sensor index in read_string()Linux
- CVE-2025-38140dm: limit swapping tables for devices with zone write plugsLinux
- CVE-2025-38138dmaengine: ti: Add NULL check in udma_probe()Linux
- CVE-2025-38137PCI/pwrctrl: Cancel outstanding rescan work when unregisteringLinux
- CVE-2025-38136usb: renesas_usbhs: Reorder clock handling and power management in probeLinux
- CVE-2025-38135serial: Fix potential null-ptr-deref in mlb_usio_probe()Linux
- CVE-2025-38134usb: acpi: Prevent null pointer dereference in usb_acpi_add_usb4_devlink()Linux
- CVE-2025-38132coresight: holding cscfg_csdev_lock while removing cscfg from csdevLinux
- CVE-2025-38131coresight: prevent deactivate active config while enabling the configLinux
- CVE-2025-38130drm/connector: only call HDMI audio helper plugged cb if non-nullLinux
- CVE-2025-38128Bluetooth: MGMT: reject malformed HCI_CMD_SYNC commandsLinux
- CVE-2025-38126net: stmmac: make sure that ptp_rate is not 0 before configuring timestampingLinux
- CVE-2025-38125net: stmmac: make sure that ptp_rate is not 0 before configuring ESTLinux
- CVE-2025-38122gve: add missing NULL check for gve_alloc_pending_packet() in TX DQOLinux
- CVE-2025-38121wifi: iwlwifi: mld: avoid panic on init failureLinux
- CVE-2025-38119scsi: core: ufs: Fix a hang in the error handlerLinux
- CVE-2025-38114e1000: Move cancel_work_sync to avoid deadlockLinux
- CVE-2025-38113ACPI: CPPC: Fix NULL pointer dereference when nosmp is usedLinux
- CVE-2025-38112net: Fix TOCTOU issue in sk_is_readable()Linux
- CVE-2025-38109net/mlx5: Fix ECVF vports unload on shutdown flowLinux
- CVE-2025-38105ALSA: usb-audio: Kill timer properly at removalLinux
- CVE-2025-38103HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()Linux
- CVE-2025-38100x86/iopl: Cure TIF_IO_BITMAP inconsistenciesLinux
- CVE-2025-38099Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/brokenLinux
- CVE-2025-38096wifi: iwlwifi: don't warn when if there is a FW errorLinux
- CVE-2025-38094net: cadence: macb: Fix a possible deadlock in macb_halt_tx.Linux
- CVE-2024-9017PeepSo Core: Groups <= 6.4.6.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Group DescriptionPeepSo Core: Groups
- CVE-2025-5944Element Pack Addons for Elementor <= 8.0.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via data-caption Attributebdthemes Element Pack Elementor Addons and Templates
- CVE-2025-43713ASNA Assist and ASNA Registrar before 2025-03-31 allow deserialization attacks against .NET remoting.
- CVE-2025-45809SQL Injection vulnerability in BerriAI LiteLLM before 1.81.0 allows attackers to execute arbitrary commands via the key parameter to the "/k
- CVE-2025-45938Akeles Out of Office Assistant for Jira 4.0.1 is vulberable to Cross Site Scripting (XSS) via the Jira fullName parameter.
- CVE-2025-49618In Plesk Obsidian 18.0.69, unauthenticated requests to /login_up.php can reveal an AWS accessKeyId, secretAccessKey, region, and endpoint.Plesk Obsidian