CVEs published July 13, 2025
49 CVEs were published on July 13, 2025: 0 critical, 14 high.
- Published
- 49
- Critical
- 0
- High
- 14
- Medium
- 34
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 9
Most affected products
- code-projects Online Appointment Booking System
- 6
- Tenda FH1202
- 6
- code-projects Modern Bag
- 5
- Campcodes Sales and Inventory System
- 4
- Tenda FH1201
- 4
- PHP Group PHP
- 3
- PHPGurukul Vehicle Parking Management System
- 3
- GNU Binutils
- 2
- PHPGurukul User Registration & Login and User Management Sy…
- 2
- TOTOLINK T6
- 2
High 14
- CVE-2025-1384Least Privilege Violation Vulnerability in the communications functions of NJ/NX-series Machine Automation ControllersOMRON Machine Automation Controller NJ-series · OMRON Ma… +1
- CVE-2025-7551Tenda FH1201 PPTPDClient fromPptpUserAdd stack-based overflowTenda FH1201
- CVE-2025-7550Tenda FH1201 GstDhcpSetSer fromGstDhcpSetSer stack-based overflowTenda FH1201
- CVE-2025-7549Tenda FH1201 L7Prot frmL7ProtForm stack-based overflowTenda FH1201
- CVE-2025-7548Tenda FH1201 SafeEmailFilter formSafeEmailFilter stack-based overflowTenda FH1201
- CVE-2025-7544Tenda AC1206 setMacFilterCfg formSetMacFilterCfg stack-based overflowTenda AC1206
- CVE-2025-7532Tenda FH1202 webExcptypemanFilter fromwebExcptypemanFilter stack-based overflowTenda FH1202
- CVE-2025-7531Tenda FH1202 PPTPUserSetting fromPptpUserSetting stack-based overflowTenda FH1202
- CVE-2025-7530Tenda FH1202 PPTPDClient fromPptpUserAdd stack-based overflowTenda FH1202
- CVE-2025-7529Tenda FH1202 Natlimit fromNatlimit stack-based overflowTenda FH1202
- CVE-2025-7528Tenda FH1202 GstDhcpSetSer fromGstDhcpSetSer stack-based overflowTenda FH1202
- CVE-2025-7527Tenda FH1202 AdvSetWan fromAdvSetWan stack-based overflowTenda FH1202
- CVE-2025-7012Cato Networks Linux Client Local Privilege Escalation via SymlinkCato Networks Cato Client
- CVE-2024-58258SugarCRM before 13.0.4 and 14.x before 14.0.1 allows SSRF in the API module because a limited type of code injection can occur.SugarCRM
Medium, low and unrated 35
- CVE-2025-7553D-Link DIR-818LW System Time Page os command injectionD-Link DIR-818LW
- CVE-2025-7552Dromara Northstar Path AuthorizationInterceptor.java preHandle access controlDromara Northstar
- CVE-2025-1735pgsql extension does not check for errors during escapingPHP Group PHP
- CVE-2025-1220Null byte termination in hostnamesPHP Group PHP
- CVE-2025-7547Campcodes Online Movie Theater Seat Reservation System admin_class.php save_movie unrestricted uploadCampcodes Online Movie Theater Seat Reservation System
- CVE-2025-6491NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace PrefixPHP Group PHP
- CVE-2025-7546GNU Binutils elf.c bfd_elf_set_group_contents out-of-bounds writeGNU Binutils
- CVE-2025-7545GNU Binutils objcopy.c copy_section heap-based overflowGNU Binutils
- CVE-2025-7543PHPGurukul User Registration & Login and User Management System manage-users.php sql injectionPHPGurukul User Registration & Login and User Management Sy…
- CVE-2025-7542PHPGurukul User Registration & Login and User Management System user-profile.php sql injectionPHPGurukul User Registration & Login and User Management Sy…
- CVE-2025-7541code-projects Online Appointment Booking System get_town.php sql injectioncode-projects Online Appointment Booking System
- CVE-2025-7540code-projects Online Appointment Booking System getclinic.php sql injectioncode-projects Online Appointment Booking System
- CVE-2025-7539code-projects Online Appointment Booking System getdoctordaybooking.php sql injectioncode-projects Online Appointment Booking System
- CVE-2025-7538Campcodes Sales and Inventory System product_update.php unrestricted uploadCampcodes Sales and Inventory System
- CVE-2025-7537Campcodes Sales and Inventory System product_update.php sql injectionCampcodes Sales and Inventory System
- CVE-2025-7536Campcodes Sales and Inventory System receipt_credit.php sql injectionCampcodes Sales and Inventory System
- CVE-2025-7535Campcodes Sales and Inventory System reprint_cash.php sql injectionCampcodes Sales and Inventory System
- CVE-2025-7534PHPGurukul Student Result Management System GET Parameter notice-details.php sql injectionPHPGurukul Student Result Management System
- CVE-2025-7533code-projects Job Diary view-details.php sql injectioncode-projects Job Diary
- CVE-2025-7525TOTOLINK T6 HTTP POST Request cstecgi.cgi setTracerouteCfg command injectionTOTOLINK T6
- CVE-2025-7524TOTOLINK T6 HTTP POST Request cstecgi.cgi setDiagnosisCfg command injectionTOTOLINK T6
- CVE-2025-7523Jinher OA DelTemp.aspx xml external entity referenceJinher OA
- CVE-2025-7522PHPGurukul Vehicle Parking Management System bwdates-reports-details.php sql injectionPHPGurukul Vehicle Parking Management System
- CVE-2025-7521PHPGurukul Vehicle Parking Management System index.php sql injectionPHPGurukul Vehicle Parking Management System
- CVE-2025-7520PHPGurukul Vehicle Parking Management System manage-category.php sql injectionPHPGurukul Vehicle Parking Management System
- CVE-2025-7517code-projects Online Appointment Booking System getDay.php sql injectioncode-projects Online Appointment Booking System
- CVE-2025-7516code-projects Online Appointment Booking System cancelbookingpatient.php sql injectioncode-projects Online Appointment Booking System
- CVE-2025-7515code-projects Online Appointment Booking System ulocateus.php sql injectioncode-projects Online Appointment Booking System
- CVE-2025-7514code-projects Modern Bag contact-list.php sql injectioncode-projects Modern Bag
- CVE-2025-7513code-projects Modern Bag slideupdate.php sql injectioncode-projects Modern Bag
- CVE-2025-7512code-projects Modern Bag contact-back.php sql injectioncode-projects Modern Bag
- CVE-2025-7511code-projects Chat System update_account.php sql injectioncode-projects Chat System
- CVE-2025-7510code-projects Modern Bag productadd_back.php sql injectioncode-projects Modern Bag
- CVE-2025-7509code-projects Modern Bag slide.php sql injectioncode-projects Modern Bag
- CVE-2025-53865In Roundup before 2.5.0, XSS can occur via interaction between URLs and issue tracker templates (devel and responsive).roundup-tracker Roundup · roundup