CVEs published July 15, 2025
155 CVEs were published on July 15, 2025: 20 critical, 53 high. 1 is now in CISA KEV.
- Published
- 155
- Critical
- 20
- High
- 53
- Medium
- 71
- Low
- 11
- Unrated
- 0
- Now in CISA KEV
- 1
- Fix available
- 28
Most affected products
- Oracle MySQL Server
- 26
- RVC-Boss GPT-SoVITS
- 9
- Oracle VM VirtualBox
- 7
- Dassault Systèmes SOLIDWORKS eDrawings
- 6
- cyberark conjur
- 5
- Oracle WebLogic Server
- 5
- Oracle Database Server
- 4
- Oracle Java SE · Oracle GraalVM for JDK +1
- 4
- Google Chrome
- 3
- htplugins HT Contact Form – Drag & Drop Form Builder for Wo…
- 3
Critical 20
- CVE-2025-49831Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) vulnerable to IAM Authenticator Bypass via Mis-configured Network Devicecyberark conjur
- CVE-2025-50067Vulnerability in Oracle Application Express (component: Strategic Planner Starter App).Oracle Application Express
- CVE-2025-49827Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) Vulnerable to Bypass of IAM Authenticatorcyberark conjur
- CVE-2025-41238PVSCSI heap-overflow vulnerabilityVMware ESXi · VMware Cloud Foundation +4
- CVE-2025-41237VMCI integer-underflow vulnerabilityVMware Cloud Foundation · VMware vSphere Foundation +5
- CVE-2025-41236VMXNET3 integer-overflow vulnerabilityVMware ESXi · VMware Cloud Foundation +4
- CVE-2025-34103WePresent WiPG-1000 Unauthenticated Command Injection in via rdfs.cgiWePresent (Barco) WiPG-1000
- CVE-2025-34111Tiki Wiki <= 15.1 ELFinder Unauthenticated File Upload RCETiki Software Community Association Wiki CMS Groupware
- CVE-2025-34068Samsung WLAN AP WEA453e < 5.2.4.T1 Unauthenticated RCE via command1 and command2 ParametersSamsung Electronics WLAN AP WEA453e
- CVE-2025-34112Riverbed SteelCentral NetProfiler / NetExpress 10.8.7 RCERiverbed Technology SteelCentral NetExpress · Riverbed Tech…
- CVE-2025-34104Piwik Authenticated RCE via Custom Plugin UploadPiwik (now Matomo) Web Analytics Platform
- CVE-2025-34105DiskBoss Enterprise Stack-Based Buffer Overflow RCEFlexense DiskBoss Enterprise
- CVE-2025-34110ColoradoFTP Server <= 1.3 Build 8 Path Traversal Information DisclosureColoradoFTP Server
- CVE-2025-3621Remote Code Execution in ProTNS ActADURProTNS ActADUR
- CVE-2025-7340HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Uploadhtplugins HT Contact Form – Drag & Drop Form Builder for Wo…
- CVE-2025-7360HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Directory Traversal to Arbitrary File Movehtplugins HT Contact Form – Drag & Drop Form Builder for Wo…
- CVE-2025-7341HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Deletionhtplugins HT Contact Form – Drag & Drop Form Builder for Wo…
- CVE-2025-5394Alone – Charity Multipurpose Non-profit WordPress Theme <= 7.8.3 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin InstallationBearsthemes Alone – Charity Multipurpose Non-profit WordPre…
- CVE-2025-5393Alone – Charity Multipurpose Non-profit WordPress Theme <= 7.8.5 - Missing Authorization to Unauthenticated Arbitrary File DeletionBearsthemes Alone – Charity Multipurpose Non-profit WordPre…
- CVE-2025-52376An authentication bypass vulnerability in the /web/um_open_telnet.cgi endpoint in Nexxt Solutions NCM-X1800 Mesh Router firmware UV1.2.7 and
High 53
- CVE-2025-49841GHSL-2025-053: GPT-SoVITS Deserialization of Untrusted Data vulnerabilityRVC-Boss GPT-SoVITS
- CVE-2025-49840GHSL-2025-052: GPT-SoVITS Deserialization of Untrusted Data vulnerabilityRVC-Boss GPT-SoVITS
- CVE-2025-49839GHSL-2025-051: GPT-SoVITS Deserialization of Untrusted Data vulnerabilityRVC-Boss GPT-SoVITS
- CVE-2025-49838GHSL-2025-050: GPT-SoVITS Deserialization of Untrusted Data vulnerabilityRVC-Boss GPT-SoVITS
- CVE-2025-49837GHSL-2025-049: GPT-SoVITS Deserialization of Untrusted Data vulnerabilityRVC-Boss GPT-SoVITS
- CVE-2025-49836GHSL-2025-048: GPT-SoVITS Command Injection vulnerabilityRVC-Boss GPT-SoVITS
- CVE-2025-49835GHSL-2025-047: GPT-SoVITS Command Injection vulnerabilityRVC-Boss GPT-SoVITS
- CVE-2025-49834GHSL-2025-046: GPT-SoVITS Command Injection vulnerabilityRVC-Boss GPT-SoVITS
- CVE-2025-49833GHSL-2025-045: GPT-SoVITS Command Injection vulnerabilityRVC-Boss GPT-SoVITS
- CVE-2025-49830Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) vulnerable to path traversal and file disclosurecyberark conjur
- CVE-2025-49828Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) Vulnerable to Remote Code Executioncyberark conjur
- CVE-2025-53028Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2025-53027Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2025-53024Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2025-50106Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).Oracle Java SE · Oracle GraalVM for JDK +1
- CVE-2025-50105Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Administration).Oracle Universal Work Queue
- CVE-2025-50069Vulnerability in the Java VM component of Oracle Database Server.Oracle Database Server
- CVE-2025-50063Vulnerability in Oracle Java SE (component: Install).Oracle Java SE
- CVE-2025-50062Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Core product of Oracle PeopleSoft (component: Global Payroll for Core).Oracle PeopleSoft Enterprise HCM Global Payroll Core
- CVE-2025-50060Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server).Oracle BI Publisher
- CVE-2025-50059Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: NetworkOracle Java SE · Oracle GraalVM for JDK +1
- CVE-2025-30762Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2025-30751Vulnerability in the Oracle Database component of Oracle Database Server.Oracle Database Server
- CVE-2025-30749Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).Oracle Java SE · Oracle GraalVM for JDK +1
- CVE-2025-30744Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Multiplatform Sync Errors).Oracle Mobile Field Service
- CVE-2025-30743Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite (component: Internal Operations).Oracle Lease and Finance Management
- CVE-2025-41239vSockets information-disclosure vulnerabilityVMware ESXi · VMware Cloud Foundation +5
- CVE-2025-7657Use after free in WebRTC in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially exploit heap corruption via a craGoogle Chrome
- CVE-2025-6558Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentiallGoogle Chrome
- CVE-2025-7656Integer overflow in V8 in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially exploit heap corruption via a craftGoogle Chrome
- CVE-2025-53826FileBrowser Has Insecure JWT Handling Which Allows Session Replay Attacks after Logoutfilebrowser · github.com/filebrowser/filebrowser +1
- CVE-2025-53893File Browser Vulnerable to Uncontrolled Memory Consumption Due to Oversized File Processingfilebrowser · github.com/filebrowser/filebrowser +1
- CVE-2025-53895ZITADEL has broken authN and authZ in session API and resulting session tokenszitadel
- CVE-2025-53959In JetBrains YouTrack before 2025.2.86069, 2024.3.85077, 2025.1.86199 email spoofing via an administrative API was possibleJetBrains YouTrack
- CVE-2025-7042Use After Free vulnerability exists in the IPT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025Dassault Systèmes SOLIDWORKS eDrawings
- CVE-2025-6974Use of Uninitialized Variable vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025Dassault Systèmes SOLIDWORKS eDrawings
- CVE-2025-6973Use After Free vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025Dassault Systèmes SOLIDWORKS eDrawings
- CVE-2025-6972Use After Free vulnerability exists in the CATPRODUCT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025Dassault Systèmes SOLIDWORKS eDrawings
- CVE-2025-6971Use After Free vulnerability exists in the CATPRODUCT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025Dassault Systèmes SOLIDWORKS eDrawings
- CVE-2025-0831Out-Of-Bounds Read vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025Dassault Systèmes SOLIDWORKS eDrawings
- CVE-2025-6965Integer Truncation on SQLiteSQLite · SQLitePCLRaw.lib.e_sqlite3 +2
- CVE-2025-34107WinaXe 7.7 FTP Client Remote Buffer OverflowLabF WinaXe FTP Client
- CVE-2025-34113Tiki Wiki CMS Authenticated Command Injection in Calendar ModuleTiki Software Community Association Wiki CMS Groupware
- CVE-2025-34106PDF Shaper v3.5/3.6 Buffer Overflow via Convert to Image FeatureBurnaware PDF Shaper
- CVE-2025-34109Panda Security PSEvents.exe Insecure DLL Loading Privilege EscalationPanda Security Panda Global Protection · Panda Security… +2
- CVE-2025-34115OP5 Monitor <= 7.1.9 Authenticated Command Execution via command_test.phpITRS Group OP5 Monitor
- CVE-2025-34116IPFire < 2.19 Core Update 101 proxy.cgi RCEIPFire Project IPFire
- CVE-2025-34108Disk Pulse Enterprise 9.0.34 Login Stack Buffer OverflowFlexense Disk Pulse Enterprise
- CVE-2025-7667Restrict File Access <= 1.1.2 - Cross-Site Request Forgery to Arbitrary File Deletionjosxha Restrict File Access
- CVE-2025-6265A path traversal vulnerability in the file_upload-cgi CGI program of Zyxel NWA50AX PRO firmware version 7.10(ACGE.2) and earlier could allowZyxel NWA50AX PRO firmware
- CVE-2024-42650NanoMQ 0.17.5 was discovered to contain a segmentation fault via the component /nanomq/pub_handler.c.
- CVE-2025-26186SQL Injection vulnerability in openSIS v.9.1 allows a remote attacker to execute arbitrary code via the id parameter in Ajax.php
- CVE-2025-50819Directory traversal vulnerability in beiyuouo arxiv-daily thru 2025-05-06 (commit fad168770b0e68aef3e5acfa16bb2e7a7765d687) when parsing the
Medium, low and unrated 82
- CVE-2025-53906Vim has path traversal issue with zip.vim and special crafted zip archivesvim
- CVE-2025-30761Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting).Oracle Java SE · Oracle GraalVM Enterprise Edition
- CVE-2025-53905Vim has path traversial issue with tar.vim and special crafted tar filesvim
- CVE-2025-6981Incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed unauthorized read-only accessGitHub Enterprise Server
- CVE-2025-49829Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) missing validationscyberark conjur
- CVE-2025-53032Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2025-53031Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (comOracle Financial Services Analytical Applications Infrastru…
- CVE-2025-53030Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2025-53029Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2025-53026Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2025-53025Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2025-53023Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication).Oracle MySQL Cluster · Oracle MySQL Server
- CVE-2025-50108Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Workspace).Oracle Hyperion Financial Reporting
- CVE-2025-50107Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Request handling).Oracle Universal Work Queue
- CVE-2025-50104Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).Oracle MySQL Server
- CVE-2025-50103Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: LDAP Auth).Oracle MySQL Server
- CVE-2025-50102Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2025-50101Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2025-50100Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling).Oracle MySQL Server
- CVE-2025-50099Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2025-50098Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2025-50097Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption).Oracle MySQL Server
- CVE-2025-50096Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2025-50095Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2025-50094Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).Oracle MySQL Server
- CVE-2025-50093Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).Oracle MySQL Server
- CVE-2025-50092Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2025-50091Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2025-50090Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization).Oracle Applications Framework
- CVE-2025-50089Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2025-50088Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2025-50087Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Cluster · Oracle MySQL Server
- CVE-2025-50086Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services).Oracle MySQL Server
- CVE-2025-50085Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2025-50084Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2025-50083Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2025-50082Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2025-50081Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump).Oracle MySQL Cluster · Oracle MySQL Client
- CVE-2025-50080Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure).Oracle MySQL Server
- CVE-2025-50079Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2025-50078Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).Oracle MySQL Server
- CVE-2025-50077Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Cluster · Oracle MySQL Server
- CVE-2025-50076Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).Oracle MySQL Server
- CVE-2025-50073Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container).Oracle WebLogic Server
- CVE-2025-50072Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2025-50071Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities).Oracle Applications Framework
- CVE-2025-50070Vulnerability in the JDBC component of Oracle Database Server.Oracle JDBC
- CVE-2025-50068Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2025-50066Vulnerability in the Oracle Database Materialized View component of Oracle Database Server.Oracle Database Server
- CVE-2025-50065Vulnerability in the Oracle GraalVM for JDK product of Oracle Java SE (component: Native Image).Oracle GraalVM for JDK
- CVE-2025-50064Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2025-50061Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web AccOracle Primavera P6 Enterprise Project Portfolio Management
- CVE-2025-30760Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2025-30759Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security).Oracle Business Intelligence Enterprise Edition
- CVE-2025-30758Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: User Interface).Oracle Siebel CRM End User
- CVE-2025-30756Vulnerability in Oracle REST Data Services (component: General).Oracle REST Data Services
- CVE-2025-30754Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).Oracle Java SE · Oracle GraalVM for JDK +1
- CVE-2025-30753Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2025-30752Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: Compiler).Oracle Java SE · Oracle GraalVM for JDK
- CVE-2025-30750Vulnerability in the Unified Audit component of Oracle Database Server.Oracle Database Server
- CVE-2025-30748Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2025-30747Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology).Oracle PeopleSoft Enterprise PeopleTools
- CVE-2025-30746Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).Oracle iStore
- CVE-2025-30745Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (component: Device Integration).Oracle MES for Process Manufacturing
- CVE-2025-30739Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences).Oracle CRM Technical Foundation
- CVE-2025-53903The Scratch Channel Has Potential Cross-Site Scripting (XSS) Vulnerabilitythe-scratch-channel.github.io
- CVE-2025-53622DSpace has path traversal vulnerability in Simple Archive Format (SAF) package import via contents fileDSpace · org.dspace:dspace-api
- CVE-2025-53621DSpace vulnerable to XML External Entity (XXE) injection in import via Simple Archive Format (SAF) or import from external sourcesDSpace · org.dspace:dspace-api
- CVE-2025-30483Dell ECS versions prior to 3.8.1.5/ ObjectScale version 4.0.0.0 contains an Insertion of Sensitive Information into Log File vulnerability.Dell ECS · Dell ObjectScale
- CVE-2025-33097IBM QRadar SIEM cross-site scriptingIBM QRadar SIEM
- CVE-2025-48795Apache CXF: Denial of Service and sensitive data exposure in logsApache Software Foundation Apache CXF · org.apache.cxf:cxf-…
- CVE-2025-4369Companion Auto Update <= 3.9.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via update_delay_days parameterpapin Companion Auto Update
- CVE-2025-24477A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2.4 through 7.2.1Fortinet FortiOS
- CVE-2025-7672Stored-XSS possibility in Namo CrossEditor4JiranSoft CrossEditor4
- CVE-2025-7367Strong Testimonials <= 3.2.11 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Fieldswpchill Strong Testimonials
- CVE-2025-53891TIME LINE has Improper File Validation in Upload SectionTimeLineOfficial Time-Line-
- CVE-2025-52080In Netgear XR300 V1.0.3.38_10.3.30, a stack-based buffer overflow vulnerability exists in the HTTPD service through the usb_device.cgi endpo
- CVE-2025-52081In Netgear XR300 V1.0.3.38_10.3.30, a stack-based buffer overflow vulnerability exists in the HTTPD service through the usb_device.cgi endpo
- CVE-2025-52082In Netgear XR300 V1.0.3.38_10.3.30, a stack-based buffer overflow exists in the HTTPD service through the usb_device.cgi endpoint.
- CVE-2025-52377Command injection vulnerability in Nexxt Solutions NCM-X1800 Mesh Router versions UV1.2.7 and below, allowing authenticated attackers to exe
- CVE-2025-52378Cross-Site Scripting (XSS) vulnerability in Nexxt Solutions NCM-X1800 Mesh Router firmware UV1.2.7 and below allowing attackers to inject Ja
- CVE-2025-52379Nexxt Solutions NCM-X1800 Mesh Router firmware UV1.2.7 and below contains an authenticated command injection vulnerability in the firmware u