CVEs published July 5, 2025
8 CVEs were published on July 5, 2025: 0 critical, 2 high.
- Published
- 8
- Critical
- 0
- High
- 2
- Medium
- 6
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- ScriptCase
- 2
- Alinto SOPE
- 1
- BlackVue Dashcam
- 1
- dradisframework Dradis
- 1
- pimeys web-push · web-push
- 1
- stepancheg protobuf · protobuf
- 1
- vercel hyper
- 1
High 2
- CVE-2025-47227In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), the Administrator password reset mechanism is mishandleScriptCase
- CVE-2025-53603In Alinto SOPE SOGo 2.0.2 through 5.12.2, sope-core/NGExtensions/NGHashMap.m allows a NULL pointer dereference and SOGo crash via a request Alinto SOPE
Medium, low and unrated 6
- CVE-2025-7075BlackVue Dashcam 590X HTTP Endpoint upload.cgi unrestricted uploadBlackVue Dashcam
- CVE-2025-7074vercel hyper rimraf-standalone.js ignoreMap redosvercel hyper
- CVE-2023-50786Dradis through 4.16.0 allows referencing external images (resources) over HTTPS, instead of forcing the use of embedded (uploaded) images.dradisframework Dradis
- CVE-2025-47228In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), shell injection in the SSH connection settings allows aScriptCase
- CVE-2025-53604The web-push crate before 0.10.3 for Rust allows a denial of service (memory consumption) in the built-in clients via a large integer in a Cpimeys web-push · web-push
- CVE-2025-53605The protobuf crate before 3.7.2 for Rust allows uncontrolled recursion in the protobuf::coded_input_stream::CodedInputStream::skip_group parstepancheg protobuf · protobuf