CVEs published July 8, 2025
438 CVEs were published on July 8, 2025: 28 critical, 211 high. 3 are now in CISA KEV.
- Published
- 438
- Critical
- 28
- High
- 211
- Medium
- 189
- Low
- 9
- Unrated
- 1
- Now in CISA KEV
- 3
- Fix available
- 195
Most affected products
- Microsoft Windows
- 80
- Qualcomm Snapdragon
- 26
- Microsoft Windows Server 2008 R2 Service Pack · Microsof… +1
- 16
- Adobe Framemaker
- 15
- Adobe ColdFusion
- 13
- Quiter Gateway
- 11
- Adobe Illustrator
- 10
- Samsung Mobile Devices
- 10
- Phoenix Contact CHARX SEC-3150 · Phoenix Contact CHARX S… +2
- 9
- MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…
- 7
Critical 28
- CVE-2025-7206D-Link DIR-825 httpd switch_language.cgi sub_410DDC stack-based overflowD-Link DIR-825
- CVE-2025-4855Support Board <= 3.8.0 - Unauthenticated Authorization Bypass due to Use of Default Secret KeySchiocco Support Board
- CVE-2025-4828Support Board <= 3.8.0 - Unauthenticated Arbitrary File DeletionSchiocco Support Board
- CVE-2025-49533Adobe Experience Manager (MS) | Deserialization of Untrusted Data (CWE-502)Adobe Experience Manager
- CVE-2025-27203Adobe Connect | Deserialization of Untrusted Data (CWE-502)Adobe Connect
- CVE-2025-49535ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)Adobe ColdFusion
- CVE-2025-37103Hardcoded Credential Exposure Allows Unauthorized Access in Web InterfaceHewlett Packard Enterprise (HPE) HPE Networking Instant On
- CVE-2025-47981SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-21450Improper Authentication in GPS_GNSSQualcomm Snapdragon
- CVE-2025-40717SQL injection vulnerability in Quiter GatewayQuiter Gateway
- CVE-2025-40716SQL injection vulnerability in Quiter GatewayQuiter Gateway
- CVE-2025-40715SQL injection vulnerability in Quiter GatewayQuiter Gateway
- CVE-2025-40714SQL injection vulnerability in Quiter GatewayQuiter Gateway
- CVE-2025-40713SQL injection vulnerability in Quiter GatewayQuiter Gateway
- CVE-2025-40712SQL injection vulnerability in Quiter GatewayQuiter Gateway
- CVE-2025-40711SQL injection vulnerability in Quiter GatewayQuiter Gateway
- CVE-2025-40736A vulnerability has been identified in SINEC NMS (All versions < V4.0).Siemens SINEC NMS
- CVE-2025-25270Remote Code Execution via Unauthenticated Configuration ManipulationPhoenix Contact CHARX SEC-3150 · Phoenix Contact CHARX S… +2
- CVE-2025-20684In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT7615, MT7622, MT7663
- CVE-2025-20683In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…
- CVE-2025-20682In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…
- CVE-2025-20681In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT6890, MT7615, MT7622, MT7663, MT7915
- CVE-2025-20680In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT7902, MT7920, MT7921, MT7922, MT7925, MT7927
- CVE-2025-42980Insecure Deserialization in SAP NetWeaver Enterprise Portal Federated Portal NetworkSAP_SE SAP NetWeaver Enterprise Portal Federated Portal Net…
- CVE-2025-42967Code Injection vulnerability in SAP S/4HANA and SAP SCM (Characteristic Propagation)SAP_SE SAP S/4HANA and SAP SCM
- CVE-2025-42966Insecure Deserialization vulnerability in SAP NetWeaver (XML Data Archiving Service)SAP_SE SAP NetWeaver
- CVE-2025-42964Insecure Deserialization in SAP NetWeaver Enterprise Portal AdministrationSAP_SE SAP NetWeaver Enterprise Portal Administration
- CVE-2025-42963Insecure Deserialization in SAP NetWeaver Application Server for Java (Log Viewer )SAP_SE SAP NetWeaver Application Server for Java
High 211
- CVE-2024-56468IBM InfoSphere Data Replication VSAM for z/OS Remote Source denial of serviceIBM InfoSphere Data Replication VSAM for z/OS Remote Source
- CVE-2025-47098InCopy | Access of Uninitialized Pointer (CWE-824)Adobe InCopy
- CVE-2025-47097InCopy | Integer Underflow (Wrap or Wraparound) (CWE-191)Adobe InCopy
- CVE-2025-47099InCopy | Heap-based Buffer Overflow (CWE-122)Adobe InCopy
- CVE-2025-47126Adobe Framemaker | Out-of-bounds Write (CWE-787)Adobe Framemaker
- CVE-2025-47128Adobe Framemaker | Integer Underflow (Wrap or Wraparound) (CWE-191)Adobe Framemaker
- CVE-2025-47131Adobe Framemaker | Heap-based Buffer Overflow (CWE-122)Adobe Framemaker
- CVE-2025-47122Adobe Framemaker | Heap-based Buffer Overflow (CWE-122)Adobe Framemaker
- CVE-2025-47130Adobe Framemaker | Integer Underflow (Wrap or Wraparound) (CWE-191)Adobe Framemaker
- CVE-2025-47133Adobe Framemaker | Out-of-bounds Write (CWE-787)Adobe Framemaker
- CVE-2025-47121Adobe Framemaker | Access of Uninitialized Pointer (CWE-824)Adobe Framemaker
- CVE-2025-47124Adobe Framemaker | Out-of-bounds Write (CWE-787)Adobe Framemaker
- CVE-2025-47127Adobe Framemaker | Out-of-bounds Write (CWE-787)Adobe Framemaker
- CVE-2025-47129Adobe Framemaker | Out-of-bounds Write (CWE-787)Adobe Framemaker
- CVE-2025-47125Adobe Framemaker | Heap-based Buffer Overflow (CWE-122)Adobe Framemaker
- CVE-2025-47123Adobe Framemaker | Heap-based Buffer Overflow (CWE-122)Adobe Framemaker
- CVE-2025-47132Adobe Framemaker | Out-of-bounds Write (CWE-787)Adobe Framemaker
- CVE-2025-49528Illustrator | Stack-based Buffer Overflow (CWE-121)Adobe Illustrator
- CVE-2025-49531Illustrator | Integer Overflow or Wraparound (CWE-190)Adobe Illustrator
- CVE-2025-49527Illustrator | Stack-based Buffer Overflow (CWE-121)Adobe Illustrator
- CVE-2025-49532Illustrator | Integer Underflow (Wrap or Wraparound) (CWE-191)Adobe Illustrator
- CVE-2025-49529Illustrator | Access of Uninitialized Pointer (CWE-824)Adobe Illustrator
- CVE-2025-49530Illustrator | Out-of-bounds Write (CWE-787)Adobe Illustrator
- CVE-2025-49526Illustrator | Out-of-bounds Write (CWE-787)Adobe Illustrator
- CVE-2025-43591InDesign Desktop | Heap-based Buffer Overflow (CWE-122)Adobe InDesign Desktop
- CVE-2025-43592InDesign Desktop | Access of Uninitialized Pointer (CWE-824)Adobe InDesign Desktop
- CVE-2025-43594InDesign Desktop | Out-of-bounds Write (CWE-787)Adobe InDesign Desktop
- CVE-2025-47134InDesign Desktop | Heap-based Buffer Overflow (CWE-122)Adobe InDesign Desktop
- CVE-2025-47136InDesign Desktop | Integer Underflow (Wrap or Wraparound) (CWE-191)Adobe InDesign Desktop
- CVE-2025-47103InDesign Desktop | Heap-based Buffer Overflow (CWE-122)Adobe InDesign Desktop
- CVE-2025-6759Local Privilege escalation allows a low-privileged user to gain SYSTEM privilegesWindows Virtual Delivery Agent for CVAD and Citrix DaaS
- CVE-2025-53547Helm Chart Dependency Updating With Malicious Chart.yaml Content And Symlink Can Lead To Code Executionhelm · helm.sh/helm/v3
- CVE-2025-43582Substance3D - Viewer | Heap-based Buffer Overflow (CWE-122)Adobe Substance3D - Viewer
- CVE-2025-49536ColdFusion | Incorrect Authorization (CWE-863)Adobe ColdFusion
- CVE-2025-49537ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)Adobe ColdFusion
- CVE-2025-49551ColdFusion | Use of Hard-coded Credentials (CWE-798)Adobe ColdFusion
- CVE-2025-49538ColdFusion | XML Injection (aka Blind XPath Injection) (CWE-91)Adobe ColdFusion
- CVE-2025-7194D-Link DI-500WF jhttpd ip_position.asp sprintf stack-based overflowD-Link DI-500WF
- CVE-2025-53355mcp-server-kubernetes vulnerable to command injection in several toolsFlux159 mcp-server-kubernetes · mcp-server-kubernetes
- CVE-2025-37102Authenticated Command Injection Vulnerability In Instant On Command Line InterfaceHewlett Packard Enterprise (HPE) HPE Networking Instant On
- CVE-2025-48384Git allows arbitrary code execution through broken config quotinggit
- CVE-2025-48385Git alllows arbitrary file writes via bundle-uri parameter injectiongit
- CVE-2025-30312Dimension | Out-of-bounds Write (CWE-787)Adobe Dimension
- CVE-2025-0928Arbitrary executable upload via authenticated endpointCanonical Juju · github.com/juju/juju
- CVE-2025-47988Azure Monitor Agent Remote Code Execution VulnerabilityMicrosoft Azure Monitor
- CVE-2025-49744Windows Graphics Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-49742Windows Graphics Component Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-49740Windows SmartScreen Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2025-49739Visual Studio Elevation of Privilege VulnerabilityMicrosoft Visual Studio 2015 Update · Microsoft Visual Stud…
- CVE-2025-49738Microsoft PC Manager Elevation of Privilege VulnerabilityMicrosoft PC Manager
- CVE-2025-49737Microsoft Teams Elevation of Privilege VulnerabilityMicrosoft Teams for Mac, New Edition
- CVE-2025-49733Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-49732Windows Graphics Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-49730Microsoft Windows QoS Scheduler Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-49729Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2025-49727Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-49725Windows Notification Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-49724Windows Connected Devices Platform Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-49718Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server
- CVE-2025-49714Visual Studio Code Python Extension Remote Code Execution VulnerabilityMicrosoft Python extension for Visual Studio Code
- CVE-2025-49705Microsoft PowerPoint Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2025-49704Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2025-49703Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +3
- CVE-2025-49702Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2025-49701Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2025-49700Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2025-49699Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +3
- CVE-2025-49698Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2025-49697Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2025-49696Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2025-49695Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2025-49693Microsoft Brokering File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-49685Windows Search Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-49683Microsoft Virtual Hard Disk Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-49682Windows Media Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-49680Windows Performance Recorder (WPR) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-49679Windows Shell Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-49678NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-49675Kernel Streaming WOW Thunk Service Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-49673Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2025-49669Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2025-49668Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2025-49667Windows Win32 Kernel Subsystem Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-49666Windows Server Setup and Boot Event Collection Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2025-49665Workspace Broker Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-49663Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2025-49660Windows Event Tracing Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-49659Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-48822Windows Hyper-V Discrete Device Assignment (DDA) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-48821Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-48820Windows AppX Deployment Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-48819Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-48817Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Remote Desktop client for Windows Desktop · Micro…
- CVE-2025-48816HID Class Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-48815Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-48814Remote Desktop Licensing Service Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2025-48806Microsoft MPEG-2 Video Extension Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-48805Microsoft MPEG-2 Video Extension Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-48799Windows Update Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-48000Windows Connected Devices Platform Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-47998Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2025-47996Windows MBT Transport Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-47982Windows Storage VSP Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-47975Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-47973Microsoft Virtual Hard Disk Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-49753Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2025-47178Microsoft Configuration Manager Remote Code Execution VulnerabilityMicrosoft Configuration Manager
- CVE-2025-49735Windows KDC Proxy Service (KPSSVC) Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2025-49726Windows Notification Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-49723Windows StateRepository API Server file Tampering VulnerabilityMicrosoft Windows
- CVE-2025-49721Windows Fast FAT File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-49719Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server 2016 for Service Pack · Microsoft S… +1
- CVE-2025-49717Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2025-49716Windows Netlogon Denial of Service VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2025-49711Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2025-47994Microsoft Office Elevation of Privilege VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2025-47993Microsoft PC Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-47991Windows Input Method Editor (IME) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-49694Microsoft Brokering File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-49691Windows Miracast Wireless Display Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2025-49690Capability Access Management Service (camsvc) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-49689Microsoft Virtual Hard Disk Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-49688Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows Server 2012 R2 · Microsoft Windows Server
- CVE-2025-49687Windows Input Method Editor (IME) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-49686Windows TCP/IP Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-49677Microsoft Brokering File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-49676Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2025-49674Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2025-49672Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2025-49661Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-49657Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2025-48824Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2025-47987Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-53513Zip slip vulnerability in JujuCanonical Juju · github.com/juju/juju
- CVE-2025-47986Universal Print Management Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-47985Windows Event Tracing Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-47984Windows GDI Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-47976Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-47972Windows Input Method Editor (IME) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-47971Microsoft Virtual Hard Disk Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-47159Windows Virtualization-Based Security (VBS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-33054Remote Desktop Spoofing VulnerabilityMicrosoft Windows
- CVE-2025-21165Substance3D - Designer | Out-of-bounds Write (CWE-787)Adobe Substance3D - Designer
- CVE-2025-21166Substance3D - Designer | Out-of-bounds Write (CWE-787)Adobe Substance3D - Designer
- CVE-2025-21164Substance3D - Designer | Out-of-bounds Write (CWE-787)Adobe Substance3D - Designer
- CVE-2025-3648Data Inference in Now Platform via Conditional ACLsServiceNow Now Platform
- CVE-2025-6771OS command injection in Ivanti Endpoint ManagerIvanti Endpoint Manager Mobile
- CVE-2025-6770OS command injection in Ivanti Endpoint ManagerIvanti Endpoint Manager Mobile
- CVE-2025-7037SQL injection in Ivanti Endpoint ManagerIvanti Endpoint Manager
- CVE-2025-53372node-code-sandbox-mcp has a Sandbox Escape via Command Injectionalfonsograziano node-code-sandbox-mcp · node-code-sandbox-m…
- CVE-2025-6996Improper Encryption in Ivanti Endpoint ManagerIvanti Endpoint Manager
- CVE-2025-6995Improper Encryption in Ivanti Endpoint ManagerIvanti Endpoint Manager
- CVE-2025-7326EOL ASP.NET Core Elevation of Privilege VulnerabilityMicrosoft ASP.NET Core · Microsoft.AspNetCore.Identity +12
- CVE-2025-36600Dell Client Platform BIOS contains an Improper Access Control Applied to Mirrored or Aliased Memory Regions vulnerability in an externally dDell Client Platform BIOS
- CVE-2025-7345Gdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbufgdk-pixbuf · Red Hat Enterprise Linux
- CVE-2025-50130A heap-based buffer overflow vulnerability exists in VS6Sim.exe contained in V-SFT and TELLUS provided by FUJI ELECTRIC CO., LTD.FUJI ELECTRIC CO., LTD. / Hakko Electronics Co. V-SFT-6 · F…
- CVE-2025-27061Out-of-bounds Write in VideoQualcomm Snapdragon
- CVE-2025-27058Buffer Copy Without Checking Size of Input in Computer VisionQualcomm Snapdragon
- CVE-2025-27057Buffer Over-read in WLAN HostQualcomm Snapdragon
- CVE-2025-27056Use After Free in DSP ServiceQualcomm Snapdragon
- CVE-2025-27055Buffer Over-read in CameraQualcomm Snapdragon
- CVE-2025-27052Buffer Copy Without Checking Size of Input in Core ServicesQualcomm Snapdragon
- CVE-2025-27051Double Free in Windows WLAN HostQualcomm Snapdragon
- CVE-2025-27050Use After Free in CameraQualcomm Snapdragon
- CVE-2025-27047Use After Free in DisplayQualcomm Snapdragon
- CVE-2025-27046Double Free in DisplayQualcomm Snapdragon
- CVE-2025-27044Out-of-bounds Write in VideoQualcomm Snapdragon
- CVE-2025-27043Buffer Copy Without Checking Size of Input in VideoQualcomm Snapdragon
- CVE-2025-27042Incorrect Calculation of Buffer Size in VideoQualcomm Snapdragon
- CVE-2025-21466Use After Free in DisplayQualcomm Snapdragon
- CVE-2025-21454Buffer Over-read in WLAN Embedded SWQualcomm Snapdragon
- CVE-2025-21449Buffer Over-read in WLAN Embedded SWQualcomm Snapdragon
- CVE-2025-21446Buffer Over-read in WLAN FirmwareQualcomm Snapdragon
- CVE-2025-21445Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Data HLOS - QXQualcomm Snapdragon
- CVE-2025-21444Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Data HLOS - QXQualcomm Snapdragon
- CVE-2025-21432Double Free in SPS-HLOSQualcomm Snapdragon
- CVE-2025-21427Buffer Over-read in Data HLOS - LNXQualcomm Snapdragon
- CVE-2025-21422Cryptographic Issues in AutomotiveQualcomm Snapdragon
- CVE-2025-41224A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions < V5.10.0), RUGGEDCOM RMC8388NC V5.X (All versions < V5.10.0), RSiemens RUGGEDCOM RMC8388 V5.X · Siemens RUGGEDCOM RMC8… +32
- CVE-2025-40741A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 5).Siemens Solid Edge SE2025
- CVE-2025-40740A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 5).Siemens Solid Edge SE2025
- CVE-2025-40739A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 5).Siemens Solid Edge SE2025
- CVE-2025-40738A vulnerability has been identified in SINEC NMS (All versions < V4.0).Siemens SINEC NMS
- CVE-2025-40737A vulnerability has been identified in SINEC NMS (All versions < V4.0).Siemens SINEC NMS
- CVE-2025-40735A vulnerability has been identified in SINEC NMS (All versions < V4.0).Siemens SINEC NMS
- CVE-2025-21006Out-of-bounds write in handling of macro blocks for MPEG4 codec in libsavsvc.so prior to Android 15 allows local attackers to write out-of-bSamsung Mobile libsavsvc.so
- CVE-2025-23365A vulnerability has been identified in TIA Administrator (All versions < V3.0.6).Siemens TIA Administrator
- CVE-2024-31854A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.11).Siemens SICAM TOOLBOX II
- CVE-2024-31853A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.11).Siemens SICAM TOOLBOX II
- CVE-2023-52236A vulnerability has been identified in RUGGEDCOM i800 (All versions), RUGGEDCOM i801 (All versions), RUGGEDCOM i802 (All versions), RUGGEDCOSiemens RUGGEDCOM i800 · Siemens RUGGEDCOM i801 +64
- CVE-2025-6744Woodmart <= 8.2.3 - Unauthenticated Arbitrary Shortcode ExecutionxTemos Woodmart
- CVE-2025-38236af_unix: Don't leave consecutive consumed OOB skbs.Linux · :linux_kernel:
- CVE-2025-7346Any unauthenticated attacker can bypass the localhost restrictions posed by the application and utilize this to create arbitrary packagesPyload · pyload-ng
- CVE-2025-41668Phoenix Contact: File access due to the replacement of a critical file used by the service security-profilePHOENIX CONTACT AXC F · PHOENIX CONTACT BPC +1
- CVE-2025-41667Phoenix Contact: File access due to the replacement of a critical file used by the arp-preinit scriptPHOENIX CONTACT AXC F · PHOENIX CONTACT BPC +1
- CVE-2025-41666Phoenix Contact: File access due to the replacement of a critical file used by the watchdogPHOENIX CONTACT AXC F · PHOENIX CONTACT BPC +1
- CVE-2025-25271OCPP Backend Configuration via Insecure DefaultsPhoenix Contact CHARX SEC-3150 · Phoenix Contact CHARX S… +2
- CVE-2025-25269Local Privilege Escalation via Unauthenticated Command InjectionPhoenix Contact CHARX SEC-3150 · Phoenix Contact CHARX S… +2
- CVE-2025-25268Unauthenticated Configuration Access via Exposed API EndpointPhoenix Contact CHARX SEC-3150 · Phoenix Contact CHARX S… +2
- CVE-2025-24006Privilege Escalation via Insecure SSH PermissionsPhoenix Contact CHARX SEC-3150 · Phoenix Contact CHARX S… +2
- CVE-2025-24005Local Privilege Escalation via Vulnerable SSH ScriptPhoenix Contact CHARX SEC-3150 · Phoenix Contact CHARX S… +2
- CVE-2025-24003MQTT OOB Write Vulnerability in EichrechtAgents of German EV Charging StationsPhoenix Contact CHARX SEC-3150 · Phoenix Contact CHARX S… +2
- CVE-2025-6746WoodMart <= 8.2.3 - Authenticated (Contributor+) Local File InclusionxTemos Woodmart
- CVE-2025-7327Widget for Google Reviews <= 1.0.15 - Authenticated (Subscriber+) Directory Traversal to Local File Inclusiontechlabpro1 Widget for Google Reviews
- CVE-2025-20686In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT6890, MT7915, MT7916, MT7981, MT7986
- CVE-2025-20685In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT6890, MT7915, MT7916, MT7981, MT7986
- CVE-2025-7146Jhenggao iPublish System - Arbitrary File Reading through Path TraversalJhenggao iPublish System
- CVE-2025-42959Missing Authentication check after implementation of SAP Security Note 3007182 and 3537476SAP_SE SAP NetWeaver ABAP Server and ABAP Platform
- CVE-2025-42953Missing Authorization check in SAP NetWeaver Application Server for ABAPSAP_SE SAP NetWeaver Application Server for ABAP
- CVE-2025-42952Missing Authorization check in SAP Business Warehouse and SAP Plug-In BasisSAP_SE SAP Business Warehouse and SAP Plug-In Basis
- CVE-2025-47422Advanced Installer before 22.6 has an uncontrolled search path element local privilege escalation vulnerability.
Medium, low and unrated 199
- CVE-2025-3780WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible <= 6.7.16 - Missing Authorization to Unauthenticated Plugin Settings Modificationwclovers WCFM – Frontend Manager for WooCommerce
- CVE-2025-7200krishna9772 Pharmacy Management System quantity_upd.php sql injectionkrishna9772 Pharmacy Management System
- CVE-2025-7199code-projects Library System notapprove.php sql injectioncode-projects Library System
- CVE-2025-47120Adobe Framemaker | Stack-based Buffer Overflow (CWE-121)Adobe Framemaker
- CVE-2025-47119Adobe Framemaker | NULL Pointer Dereference (CWE-476)Adobe Framemaker
- CVE-2025-7198code-projects Jonnys Liquor admin-area.php sql injectioncode-projects Jonnys Liquor
- CVE-2025-49524Illustrator | NULL Pointer Dereference (CWE-476)Adobe Illustrator
- CVE-2025-49525Illustrator | Out-of-bounds Read (CWE-125)Adobe Illustrator
- CVE-2025-30313Illustrator | Out-of-bounds Read (CWE-125)Adobe Illustrator
- CVE-2025-49547Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-49534Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2025-7197code-projects Jonnys Liquor delete-row.php sql injectioncode-projects Jonnys Liquor
- CVE-2025-27165Substance3D - Stager | Out-of-bounds Read (CWE-125)Adobe Substance3D - Stager
- CVE-2025-43584Substance3D - Viewer | Out-of-bounds Read (CWE-125)Adobe Substance3D - Viewer
- CVE-2025-43583Substance3D - Viewer | NULL Pointer Dereference (CWE-476)Adobe Substance3D - Viewer
- CVE-2025-7196code-projects Jonnys Liquor browse.php sql injectioncode-projects Jonnys Liquor
- CVE-2025-7031Config Pages Viewer - Critical - Access bypass - SA-CONTRIB-2025-086Drupal Config Pages Viewer · drupal/config_pages_viewer
- CVE-2025-7030Two-factor Authentication (TFA) - Less critical - Access bypass - SA-CONTRIB-2025-085Drupal Two-factor Authentication · drupal/tfa
- CVE-2025-49542ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe ColdFusion
- CVE-2025-49539ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)Adobe ColdFusion
- CVE-2025-49545ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)Adobe ColdFusion
- CVE-2025-49541ColdFusion | Cross-site Scripting (Stored XSS) (CWE-79)Adobe ColdFusion
- CVE-2025-49546ColdFusion | Improper Access Control (CWE-284)Adobe ColdFusion
- CVE-2025-49544ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)Adobe ColdFusion
- CVE-2025-49543ColdFusion | Cross-site Scripting (Stored XSS) (CWE-79)Adobe ColdFusion
- CVE-2025-49540ColdFusion | Cross-site Scripting (Stored XSS) (CWE-79)Adobe ColdFusion
- CVE-2025-7193itsourcecode Agri-Trading Online Shopping System suppliercontroller.php sql injectionitsourcecode Agri-Trading Online Shopping System
- CVE-2025-7192D-Link DIR-645 ssdpcgi cgibin ssdpcgi_main command injectionD-Link DIR-645
- CVE-2025-7191code-projects Student Enrollment System login.php sql injectioncode-projects Student Enrollment System
- CVE-2025-27369IBM OpenPages with Watson information disclosureIBM OpenPages with Watson
- CVE-2025-27367IBM OpenPages with Watson improper input validationIBM OpenPages with Watson
- CVE-2024-49783IBM OpenPages with Watson information disclosureIBM OpenPages with Watson
- CVE-2024-49784IBM OpenPages with Watson information disclosureIBM OpenPages with Watson
- CVE-2025-7190code-projects Library Management System student_edit_photo.php unrestricted uploadcode-projects Library Management System
- CVE-2023-43039IBM OpenPages with Watson cross-site scriptingIBM OpenPages with Watson
- CVE-2025-48386Git allows a buffer overflow in 'wincred' credential helpergit
- CVE-2025-7189code-projects Chat System send_message.php sql injectioncode-projects Chat System
- CVE-2025-4663Denial-of-Service (DoS) after Unusual or Exceptional Conditions vulnerabilityBroadcom Brocade Fabric OS
- CVE-2025-7188code-projects Chat System addmember.php sql injectioncode-projects Chat System
- CVE-2025-47135Dimension | Out-of-bounds Read (CWE-125)Adobe Dimension
- CVE-2025-7363TitleIcon: Stored Cross-Site Scripting (XSS) via #titleicon_unicode parser functionWikimedia Foundation Mediawiki - TitleIcon extension
- CVE-2025-7362MsUpload: Stored Cross-Site Scripting (XSS) via unsanitized msu-continue system messageWikimedia Foundation Mediawiki - MsUpload extension
- CVE-2025-53479CheckUser: Reflected Cross-Site Scripting (XSS) in Special:CheckUser via unsanitized internationalized messageWikimedia Foundation Mediawiki - CheckUser extension
- CVE-2025-7187code-projects Chat System fetch_member.php sql injectioncode-projects Chat System
- CVE-2024-36357A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in thAMD EPYC™ 7003 Series Processors · AMD EPYC™ 9004 Serie… +21
- CVE-2025-47999Windows Hyper-V Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-49722Windows Print Spooler Denial of Service VulnerabilityMicrosoft Windows
- CVE-2025-49706Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2025-49684Windows Storage Port Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-49681Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2025-49664Windows User-Mode Driver Framework Host Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-48823Windows Cryptographic Services Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-48818Windows BitLocker Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2025-48811Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-48810Windows Secure Kernel Mode Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-48809Windows Secure Kernel Mode Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-48808Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-48804Windows BitLocker Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2025-48803Windows Virtualization-Based Security (VBS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-48802Windows SMB Server Spoofing VulnerabilityMicrosoft Windows
- CVE-2025-48800Windows BitLocker Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2025-48003Windows BitLocker Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2025-48002Windows Hyper-V Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-48001Windows BitLocker Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2025-47980Windows Imaging Component Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-47978Windows Kerberos Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2025-49760Windows Storage Spoofing VulnerabilityMicrosoft Windows
- CVE-2025-49756Office Developer Platform Security Feature Bypass VulnerabilityMicrosoft 365 Apps for Enterprise
- CVE-2025-49731Microsoft Teams Elevation of Privilege VulnerabilityMicrosoft Teams for Android · Microsoft Teams for Desktop +1
- CVE-2025-48812Microsoft Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2025-49671Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2025-49670Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2025-49658Windows Transport Driver Interface (TDI) Translation Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-21195Azure Service Fabric Runtime Elevation of Privilege VulnerabilityMicrosoft Service Fabric
- CVE-2025-26636Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2024-36350A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting iAMD EPYC™ 7003 Series Processors · AMD EPYC™ 9004 Serie… +21
- CVE-2025-53512Sensitive log retrieval in JujuCanonical Juju · github.com/juju/juju
- CVE-2024-36348A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMIAMD EPYC™ 7002 Series Processors · AMD EPYC™ 7003 Serie… +30
- CVE-2024-36349A transient execution vulnerability in some AMD processors may allow a user process to infer TSC_AUX even when such a read is disabled, poteAMD EPYC™ 7002 Series Processors · AMD EPYC™ 7003 Serie… +36
- CVE-2025-21168Substance3D - Designer | Out-of-bounds Read (CWE-125)Adobe Substance3D - Designer
- CVE-2025-21167Substance3D - Designer | Out-of-bounds Read (CWE-125)Adobe Substance3D - Designer
- CVE-2025-7186code-projects Chat System fetch_chat.php sql injectioncode-projects Chat System
- CVE-2025-43580Audition | Access of Memory Location After End of Buffer (CWE-788)Adobe Audition
- CVE-2025-43587After Effects | Out-of-bounds Read (CWE-125)Adobe After Effects
- CVE-2025-47109After Effects | NULL Pointer Dereference (CWE-476)Adobe After Effects
- CVE-2025-7185code-projects Library System approve.php sql injectioncode-projects Library System
- CVE-2025-0292SSRF in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticated attackeIvanti Connect Secure · Ivanti Policy Secure
- CVE-2025-0293CLRF injection in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticatIvanti Connect Secure · Ivanti Policy Secure
- CVE-2025-5464Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 allows a local authenticated attacker toIvanti Connect Secure
- CVE-2025-7184code-projects Library System books.php sql injectioncode-projects Library System
- CVE-2025-43019HP Support Assistant – Potential Escalation of PrivilegeHP Support Assistant
- CVE-2025-5463Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version Ivanti Connect Secure · Ivanti Policy Secure
- CVE-2025-53545Press has a potential 2FA bypassfrappe press
- CVE-2025-7183Campcodes Sales and Inventory System customer_account.php sql injectionCampcodes Sales and Inventory System
- CVE-2025-5451A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remIvanti Connect Secure · Ivanti Policy Secure
- CVE-2025-2827IBM Sterling File Gateway information disclosureIBM Sterling File Gateway
- CVE-2025-5450Improper access control in the certificate management component of Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure beIvanti Connect Secure · Ivanti Policy Secure
- CVE-2025-2793IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scriptingIBM Sterling B2B Integrator · IBM Sterling File Gateway
- CVE-2025-53480CheckUser: Reflected Cross-Site Scripting (XSS) in Special:Investigate (Account information tab) via unsanitized i18n messagesWikimedia Foundation Mediawiki - CheckUser extension
- CVE-2025-3630IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scriptingIBM Sterling B2B Integrator · IBM Sterling File Gateway
- CVE-2024-52965A missing critical step in authentication vulnerability [CWE-304] in Fortinet FortiOS version 7.6.0 through 7.6.1, 7.4.0 through 7.4.5, 7.2.Fortinet FortiOS · Fortinet FortiProxy
- CVE-2025-24474An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiManager 7.6.0 throughFortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2024-55599An Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiOS version 7.6.0, version 7.4.7 and below, 7.0 all verFortinet FortiOS · Fortinet FortiProxy
- CVE-2025-7182itsourcecode Student Transcript Processing System edit.php cross site scriptingitsourcecode Student Transcript Processing System
- CVE-2025-7181code-projects Staff Audit System test.php unrestricted uploadcode-projects Staff Audit System
- CVE-2025-7180code-projects Staff Audit System login.php sql injectioncode-projects Staff Audit System
- CVE-2025-7179code-projects Library System add-teacher.php sql injectioncode-projects Library System
- CVE-2025-21433NULL Pointer Dereference in SPS-HLOSQualcomm Snapdragon
- CVE-2025-21426Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Camera_LinuxQualcomm Snapdragon
- CVE-2024-53009Improper Validation of Array Index in Automotive AutonomyQualcomm Snapdragon
- CVE-2025-7178code-projects Food Distributor Site login.php sql injectioncode-projects Food Distributor Site
- CVE-2025-7177PHPGurukul Car Washing Management System editcar-washpoint.php sql injectionPHPGurukul Car Washing Management System
- CVE-2025-40721Reflected Cross-site Scripting (XSS) vulnerability in Quiter GatewayQuiter Gateway
- CVE-2025-40720Reflected Cross-site Scripting (XSS) vulnerability in Quiter GatewayQuiter Gateway
- CVE-2025-40719Reflected Cross-site Scripting (XSS) vulnerability in Quiter GatewayQuiter Gateway
- CVE-2025-40718Improper error handling vulnerability in Quiter GatewayQuiter Gateway
- CVE-2025-7176PHPGurukul Hospital Management System view-medhistory.php sql injectionPHPGurukul Hospital Management System
- CVE-2025-7175code-projects E-Commerce Site users_photo.php unrestricted uploadcode-projects E-Commerce Site
- CVE-2025-41223A vulnerability has been identified in RUGGEDCOM i800 (All versions), RUGGEDCOM i801 (All versions), RUGGEDCOM i802 (All versions), RUGGEDCOSiemens RUGGEDCOM i800 · Siemens RUGGEDCOM i801 +64
- CVE-2025-41222A vulnerability has been identified in RUGGEDCOM i800 (All versions), RUGGEDCOM i801 (All versions), RUGGEDCOM i802 (All versions), RUGGEDCOSiemens RUGGEDCOM i800 · Siemens RUGGEDCOM i801 +64
- CVE-2025-40742A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V11.0), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 Siemens SIPROTEC 5 6MD84 · Siemens SIPROTEC 5 6MD85 +36
- CVE-2025-40593A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0).Siemens SIMATIC CN
- CVE-2025-21009Out-of-bounds read in decoding malformed frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption.Samsung Mobile libsavsvc.so
- CVE-2025-21008Out-of-bounds read in decoding frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption.Samsung Mobile libsavsvc.so
- CVE-2025-21007Out-of-bounds write in accessing uninitialized memory in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption.Samsung Mobile libsavsvc.so
- CVE-2025-21005Improper access control in isemtelephony prior to Android 15 allows local attackers to access sensitive information.Samsung Mobile isemtelephony
- CVE-2025-21004Improper verification of intent by broadcast receiver in System UI for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers tSamsung Mobile Devices
- CVE-2025-21003Insecure storage of sensitive information in Emergency SOS prior to SMR Jul-2025 Release 1 allows local attackers to access sensitive informSamsung Mobile Devices
- CVE-2025-21002Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to manipulate broadcasting Auracast.Samsung Mobile Devices
- CVE-2025-27127A vulnerability has been identified in TIA Project-Server (All versions < V2.1.1), TIA Project-Server V17 (All versions), Totally IntegratedSiemens TIA Project-Server · Siemens Totally Integrated Aut…
- CVE-2025-21001Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to stop broadcasting Auracast.Samsung Mobile Devices
- CVE-2025-21000Improper privilege management in Bluetooth prior to SMR Jul-2025 Release 1 allows local attackers to enable Bluetooth.Samsung Mobile Devices
- CVE-2025-20999Improper authorization in accessing saved Wi-Fi password for Galaxy Tablet prior to SMR Jul-2025 Release 1 allows secondary users to access Samsung Mobile Devices
- CVE-2025-23364A vulnerability has been identified in TIA Administrator (All versions < V3.0.6).Siemens TIA Administrator
- CVE-2025-20998Improper access control in SamsungAccount for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to access phone number.Samsung Mobile Devices
- CVE-2025-20997Incorrect default permission in Framework for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to reset some configuratioSamsung Mobile Devices
- CVE-2025-20983Out-of-bounds write in checking auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to writeSamsung Mobile Devices
- CVE-2025-20982Out-of-bounds write in setting auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write Samsung Mobile Devices
- CVE-2025-7174code-projects Library System teacher-issue-book.php sql injectioncode-projects Library System
- CVE-2025-7173code-projects Library System add-student.php sql injectioncode-projects Library System
- CVE-2025-7172code-projects Crime Reporting System headlogin.php sql injectioncode-projects Crime Reporting System
- CVE-2025-7171code-projects Crime Reporting System policelogin.php sql injectioncode-projects Crime Reporting System
- CVE-2025-7170code-projects Crime Reporting System registration.php sql injectioncode-projects Crime Reporting System
- CVE-2025-7169code-projects Crime Reporting System complainer_page.php sql injectioncode-projects Crime Reporting System
- CVE-2025-38237media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode()Linux
- CVE-2025-7168code-projects Crime Reporting System userlogin.php sql injectioncode-projects Crime Reporting System
- CVE-2025-41665Phoenix Contact: DoS of the PLC due to incorrect default permissions possiblePHOENIX CONTACT AXC F · PHOENIX CONTACT BPC +1
- CVE-2025-7167code-projects Responsive Blog Site category.php sql injectioncode-projects Responsive Blog Site
- CVE-2025-24004USB-C Buffer Overflow via Display Interface in EV Charging StationsPhoenix Contact CHARX SEC-3150 · Phoenix Contact CHARX S… +2
- CVE-2025-24002MQTT DoS Vulnerability in German EV Charging StationsPhoenix Contact CHARX SEC-3150 · Phoenix Contact CHARX S… +2
- CVE-2025-42956Multiple vulnerabilities in SAP NetWeaver Application Server ABAPSAP SE SAP NetWeaver Application Server ABAP
- CVE-2025-6743WoodMart <= 8.2.3 - Authenticated (Contributor+) Stored Cross-Site ScriptingxTemos Woodmart
- CVE-2025-7166code-projects Responsive Blog Site single.php sql injectioncode-projects Responsive Blog Site
- CVE-2025-7165PHPGurukul/Campcodes Cyber Cafe Management System forgot-password.php sql injectionPHPGurukul Cyber Cafe Management System · Campcodes Cyber C…
- CVE-2025-7164PHPGurukul/Campcodes Cyber Cafe Management System index.php sql injectionPHPGurukul Cyber Cafe Management System · Campcodes Cyber C…
- CVE-2025-7163PHPGurukul Zoo Management System add-animals.php sql injectionPHPGurukul Zoo Management System
- CVE-2025-7162PHPGurukul Zoo Management System add-foreigners-ticket.php sql injectionPHPGurukul Zoo Management System
- CVE-2025-5957Guest Support – Complete customer support ticket system for WordPress <= 1.2.2 - Missing Authorization to Unauthenticated Ticket Deletionrcatheme Guest Support
- CVE-2025-5537Lightbox & Modal Popup WordPress Plugin – FooBox <= 2.7.34 - Authenticated (Author+) Stored Cross-Site Scriptingfooplugins Lightbox & Modal Popup WordPress Plugin – FooBox
- CVE-2025-7161PHPGurukul Zoo Management System add-normal-ticket.php sql injectionPHPGurukul Zoo Management System
- CVE-2025-7160PHPGurukul Zoo Management System index.php sql injectionPHPGurukul Zoo Management System
- CVE-2025-7159PHPGurukul Zoo Management System manage-animals.php sql injectionPHPGurukul Zoo Management System
- CVE-2025-7158PHPGurukul Zoo Management System manage-normal-ticket.php sql injectionPHPGurukul Zoo Management System
- CVE-2025-7157code-projects Online Note Sharing login.php sql injectioncode-projects Online Note Sharing
- CVE-2025-20695In Bluetooth FW, there is a possible system crash due to an uncaught exception.MediaTek MT6639, MT6653, MT6985, MT6989, MT6990, MT6991, MT…
- CVE-2025-20694In Bluetooth FW, there is a possible system crash due to an uncaught exception.MediaTek MT2718, MT6639, MT6653, MT6985, MT6989, MT6990, MT…
- CVE-2025-20693In wlan STA driver, there is a possible out of bounds read due to an incorrect bounds check.MediaTek MT2737, MT6835, MT6878, MT6886, MT6897, MT6899, MT…
- CVE-2025-20692In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check.MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…
- CVE-2025-20691In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check.MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…
- CVE-2025-20690In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check.MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…
- CVE-2025-20689In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check.MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…
- CVE-2025-20688In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check.MediaTek MT6890, MT7615, MT7622, MT7663, MT7915, MT7916, MT…
- CVE-2025-20687In Bluetooth driver, there is a possible out of bounds read due to an incorrect bounds check.MediaTek MT7902, MT7920, MT7921, MT7922, MT7925, MT7927
- CVE-2025-5570AI Engine <= 2.8.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via `mwai_chatbot` Shortcode `id` Parametertigroumeow AI Engine – The Chatbot, AI Framework & MCP for…
- CVE-2025-6244Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Calendar` And `Business Reviews` Widgetswpdevteam Essential Addons for Elementor – Popular Elemento…
- CVE-2025-7156hitsz-ids airda completions execute sql injectionhitsz-ids airda
- CVE-2025-7155PHPGurukul Online Notes Sharing System Cookie Dashboard sql injectionPHPGurukul Online Notes Sharing System
- CVE-2025-43001Multiple Privilege Escalation Vulnerabilities in SAPCARSAP_SE SAPCAR
- CVE-2025-42992Multiple Privilege Escalation Vulnerabilities in SAPCARSAP_SE SAPCAR
- CVE-2025-42986Missing Authorization check in SAP NetWeaver and ABAP PlatformSAP_SE SAP NetWeaver and ABAP Platform
- CVE-2025-42985Open Redirect vulnerability in SAP BusinessObjects Content Administrator workbenchSAP_SE SAP BusinessObjects Content Administrator workbench
- CVE-2025-42981Multiple vulnerabilities in SAP NetWeaver Application Server ABAPSAP_SE SAP NetWeaver Application Server ABAP
- CVE-2025-42979Insecure Key & Secret Management vulnerability in SAP GUI for WindowsSAP_SE SAP GUI for Windows
- CVE-2025-42978Insufficiently Secure Hostname Verification for Outbound TLS Connections in SAP NetWeaver Application Server JavaSAP_SE SAP NetWeaver Application Server Java
- CVE-2025-42974Missing Authorization Check in SAP NetWeaver and ABAP Platform (SDCCN)SAP_SE SAP NetWeaver and ABAP Platform
- CVE-2025-42973Cross-Site Scripting (XSS) vulnerability in SAP Data Services (DQ Report)SAP_SE SAP Data Services
- CVE-2025-42971Memory Corruption vulnerability in SAPCARSAP_SE SAPCAR
- CVE-2025-42970Directory Traversal vulnerability in SAPCARSAP_SE SAPCAR
- CVE-2025-42969Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP and ABAP PlatformSAP_SE SAP NetWeaver Application Server ABAP and ABAP Platf…
- CVE-2025-42968Missing Authorization check in SAP NetWeaver (RFC enabled function module)SAP_SE SAP NetWeaver
- CVE-2025-42965Server Side Request Forgery(SSRF) vulnerability in SAP BusinessObjects BI Platform Central Management Console Promotion Management ApplicationSAP_SE SAP BusinessObjects BI Platform Central Management C…
- CVE-2025-42962Cross-Site Scripting (XSS) vulnerability in SAP Business Warehouse (Business Explorer Web 3.5 loading animation)SAP_SE SAP Business Warehouse
- CVE-2025-42961Missing Authorization check in SAP NetWeaver Application Server for ABAPSAP_SE SAP NetWeaver Application Server for ABAP
- CVE-2025-42960Missing Authorization Check in SAP Business Warehouse and SAP BW/4HANA BEx ToolsSAP_SE SAP Business Warehouse and SAP BW/4HANA BEx Tools
- CVE-2025-42954Denial of service (DOS) in SAP NetWeaver Business Warehouse (CCAW application)SAP_SE SAP NetWeaver Business Warehouse
- CVE-2025-31326HTML Injection vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence)SAP_SE SAP BusinessObjects Business Intelligence Platform
- CVE-2025-7154TOTOLINK N200RE cstecgi.cgi sub_41A0F8 os command injectionTOTOLINK N200RE
- CVE-2025-7153CodeAstro Simple Hospital Management System POST Parameter doctor.html cross site scriptingCodeAstro Simple Hospital Management System
- CVE-2025-29267SQL Injection vulnerability in Abis, Inc Adjutant Core Accounting ERP build v.PreBeta250F allows a remote attacker to obtain a sensitive inf