CVEs published July 6, 2025
28 CVEs were published on July 6, 2025: 3 critical, 13 high.
- Published
- 28
- Critical
- 3
- High
- 13
- Medium
- 11
- Low
- 0
- Unrated
- 1
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Belkin F9K1122
- 14
- Comodo Internet Security Premium
- 4
- 07FLYCMS · 07FLY-CMS +1
- 1
- Apache Software Foundation Apache APISIX Java Plugin Runner
- 1
- BlackVue Dashcam
- 1
- BoyunCMS
- 1
- Broadcom Symantec IT Management Suite
- 1
- Done-0 Jank
- 1
- Linux
- 1
- mao888 bluebell-plus
- 1
Critical 3
- CVE-2025-7097Comodo Internet Security Premium Manifest File cis_update_x64.xml os command injectionComodo Internet Security Premium
- CVE-2025-7096Comodo Internet Security Premium Manifest File cis_update_x64.xml integrity checkComodo Internet Security Premium
- CVE-2025-5333Unauthenticated Remote Code Execution in IT Management SuiteBroadcom Symantec IT Management Suite
High 13
- CVE-2025-7094Belkin F9K1122 webs formBSSetSitesurvey stack-based overflowBelkin F9K1122
- CVE-2025-7093Belkin F9K1122 webs formSetLanguage stack-based overflowBelkin F9K1122
- CVE-2025-7092Belkin F9K1122 webs formWlanSetupWPS stack-based overflowBelkin F9K1122
- CVE-2025-7091Belkin F9K1122 webs formWlanMP stack-based overflowBelkin F9K1122
- CVE-2025-7090Belkin F9K1122 webs formConnectionSetting stack-based overflowBelkin F9K1122
- CVE-2025-7089Belkin F9K1122 webs formWanTcpipSetup stack-based overflowBelkin F9K1122
- CVE-2025-7088Belkin F9K1122 webs formPPPoESetup stack-based overflowBelkin F9K1122
- CVE-2025-7087Belkin F9K1122 webs formL2TPSetup stack-based overflowBelkin F9K1122
- CVE-2025-7086Belkin F9K1122 webs formPPTPSetup stack-based overflowBelkin F9K1122
- CVE-2025-7085Belkin F9K1122 webs formiNICWpsStart stack-based overflowBelkin F9K1122
- CVE-2025-7084Belkin F9K1122 webs formWpsStart stack-based overflowBelkin F9K1122
- CVE-2025-7077Shenzhen Libituo Technology LBT-T300-T310 appy.cgi config_3g_para buffer overflowShenzhen Libituo Technology LBT-T300-T310
- CVE-2025-27446Apache APISIX Java Plugin Runner: Local listening file permissions in APISIX plugin runner allow a local attacker to elevate privilegesApache Software Foundation Apache APISIX Java Plugin Runner
Medium, low and unrated 12
- CVE-2025-7099BoyunCMS Installation install2.php deserializationBoyunCMS
- CVE-2025-7098Comodo Internet Security Premium File Name path traversalComodo Internet Security Premium
- CVE-2025-3108Unsafe Deserialization in JsonPickleSerializer Enables Remote Code Execution in run-llama/llama_indexrun-llama/llama_index · llama-index +1
- CVE-2025-7095Comodo Internet Security Premium Update certificate validationComodo Internet Security Premium
- CVE-2025-7083Belkin F9K1122 webs mp os command injectionBelkin F9K1122
- CVE-2025-7082Belkin F9K1122 webs formBSSetSitesurvey os command injectionBelkin F9K1122
- CVE-2025-7081Belkin F9K1122 webs formSetWanStatic os command injectionBelkin F9K1122
- CVE-2025-7080Done-0 Jank JWT Token jwt_utils.go hard-coded passwordDone-0 Jank
- CVE-2025-7079mao888 bluebell-plus JWT Token jwt.go hard-coded passwordmao888 bluebell-plus
- CVE-2025-38235HID: appletb-kbd: fix "appletb_backlight" backlight device reference countingLinux
- CVE-2025-707807FLYCMS/07FLY-CMS/07FlyCRM cross-site request forgery07FLYCMS · 07FLY-CMS +1
- CVE-2025-7076BlackVue Dashcam 590X Configuration upload.cgi access controlBlackVue Dashcam