# CVEs published 2025-07-17

88 CVEs were published on July 17, 2025: 17 critical, 30 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2025-6185](https://cve.now/CVE-2025-6185.md): Leviton AcquiSuite and Energy Monitoring Hub Cross-site Scripting (CVSS 9.3, Leviton AcquiSuite · Leviton Energy Monitoring Hub)
- [CVE-2025-7765](https://cve.now/CVE-2025-7765.md): code-projects Online Appointment Booking System addmanagerclinic.php sql injection (CVSS 6.9, code-projects Online Appointment Booking System)
- [CVE-2025-7764](https://cve.now/CVE-2025-7764.md): code-projects Online Appointment Booking System deletedoctorclinic.php sql injection (CVSS 6.9, code-projects Online Appointment Booking System)
- [CVE-2025-7763](https://cve.now/CVE-2025-7763.md): thinkgem JeeSite Site Controller SiteController.java select redirect (CVSS 5.3, thinkgem JeeSite)
- [CVE-2025-7397](https://cve.now/CVE-2025-7397.md): CLI history displays inline passwords (CVSS 6.8, Broadcom Brocade ASCG)
- [CVE-2025-6391](https://cve.now/CVE-2025-6391.md): JSON Web Token (JWT) Exposure in Log Files (CVSS 7.1, Broadcom Brocade ASCG)
- [CVE-2025-7762](https://cve.now/CVE-2025-7762.md): D-Link DI-8100 HTTP Request menu\_nat\_more.asp stack-based overflow (CVSS 8.7, D-Link DI-8100)
- [CVE-2025-7759](https://cve.now/CVE-2025-7759.md): thinkgem JeeSite UEditor Image Grabber ActionEnter.java server-side request forgery (CVSS 5.3, thinkgem JeeSite)
- [CVE-2025-7398](https://cve.now/CVE-2025-7398.md): Medium Strength Cipher Suites detected on port on ports 9000 and 8036 (CVSS 8.6, Broadcom Brocade ASCG)
- [CVE-2025-7758](https://cve.now/CVE-2025-7758.md): TOTOLINK T6 HTTP POST Request cstecgi.cgi setDiagnosisCfg buffer overflow (CVSS 8.7, TOTOLINK T6)
- [CVE-2025-7757](https://cve.now/CVE-2025-7757.md): PHPGurukul Land Record System edit-property.php sql injection (CVSS 6.9, PHPGurukul Land Record System)
- [CVE-2025-7756](https://cve.now/CVE-2025-7756.md): code-projects E-Commerce Site cross-site request forgery (CVSS 5.3, code-projects E-Commerce Site)
- [CVE-2025-7755](https://cve.now/CVE-2025-7755.md): code-projects Online Ordering System edit\_product.php unrestricted upload (CVSS 5.3, code-projects Online Ordering System)
- [CVE-2025-23269](https://cve.now/CVE-2025-23269.md): NVIDIA Jetson Linux contains a vulnerability in the kernel where an attacker may cause an exposure of sensitive information due to a shared (CVSS 4.7, NVIDIA Jetson Orin and Xavier Devices)
- [CVE-2025-7754](https://cve.now/CVE-2025-7754.md): code-projects Patient Record Management System xray\_form.php sql injection (CVSS 5.3, code-projects Patient Record Management System)
- [CVE-2025-23270](https://cve.now/CVE-2025-23270.md): NVIDIA Jetson Linux contains a vulnerability in UEFI Management mode, where an unprivileged local attacker may cause exposure of sensitive i (CVSS 7.1, NVIDIA Jetson Orin, IGX Orin and Xavier Devices)
- [CVE-2025-7753](https://cve.now/CVE-2025-7753.md): code-projects Online Appointment Booking System adddoctor.php sql injection (CVSS 6.9, code-projects Online Appointment Booking System)
- [CVE-2025-23267](https://cve.now/CVE-2025-23267.md): NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook, where an attacker could cause a link followi (CVSS 8.5, NVIDIA Container Toolkit · github.com/NVIDIA/nvidia-cont… +3)
- [CVE-2025-7752](https://cve.now/CVE-2025-7752.md): code-projects Online Appointment Booking System deletedoctor.php sql injection (CVSS 6.9, code-projects Online Appointment Booking System)
- [CVE-2024-42209](https://cve.now/CVE-2024-42209.md): HCL Connections is vulnerable to an information disclosure vulnerability (CVSS 3.5, HCL Software Connections)
- [CVE-2025-4657](https://cve.now/CVE-2025-4657.md): A buffer overflow vulnerability was reported in the Lenovo Protection Driver, prior to version 5.1.1110.4231, used in Lenovo PC Manager, Len (CVSS 8.4, Lenovo PC Manager · Lenovo Browser +1)
- [CVE-2025-6249](https://cve.now/CVE-2025-6249.md): An authentication bypass vulnerability was reported in FileZ client application that could allow a local attacker with elevated permissions (CVSS 8.4, Lenovo FileZ Client)
- [CVE-2025-6248](https://cve.now/CVE-2025-6248.md): A cross-site scripting (XSS) vulnerability was reported in the Lenovo Browser that could allow an attacker to obtain sensitive information i (CVSS 7.1, Lenovo Browser)
- [CVE-2025-6232](https://cve.now/CVE-2025-6232.md): An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local attacker to execute co (CVSS 8.5, Lenovo Vantage · Lenovo Commercial Vantage)
- [CVE-2025-6231](https://cve.now/CVE-2025-6231.md): An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local attacker to execute co (CVSS 8.5, Lenovo Vantage · Lenovo Commercial Vantage)
- [CVE-2025-6230](https://cve.now/CVE-2025-6230.md): A SQL injection vulnerability was reported in Lenovo Vantage that could allow a local attacker to modify the local SQLite database and execu (CVSS 4.8, Lenovo Vantage · Lenovo Commercial Vantage)
- [CVE-2025-2818](https://cve.now/CVE-2025-2818.md): A vulnerability was reported in version 1.0 of the Bluetooth Transmission Alliance protocol adopted by Motorola Smart Connect Android Applic (CVSS 5.1, Motorola Smart Connect Android Application)
- [CVE-2025-1729](https://cve.now/CVE-2025-1729.md): A DLL hijacking vulnerability was reported in TrackPoint Quick Menu software that, under certain conditions, could allow a local attacker to (CVSS 5.4, Lenovo TrackPoint Quick Menu)
- [CVE-2025-1700](https://cve.now/CVE-2025-1700.md): A DLL hijacking vulnerability was reported in the Motorola Software Fix (Rescue and Smart Assistant) installer that could allow a local atta (CVSS 7.1, Motorola Software Fix)
- [CVE-2025-0886](https://cve.now/CVE-2025-0886.md): An incorrect permissions vulnerability was reported in Elliptic Labs Virtual Lock Sensor that could allow a local, authenticated user to esc (CVSS 8.5, Lenovo Elliptic Virtual Lock Sensor Service For ThinkPa… +26)
- [CVE-2025-3753](https://cve.now/CVE-2025-3753.md): Unsafe use of eval() method in rosbag tool (CVSS 7.8, Open Source Robotics Foundation Robot Operating System)
- [CVE-2025-7751](https://cve.now/CVE-2025-7751.md): code-projects Online Appointment Booking System addclinic.php sql injection (CVSS 6.9, code-projects Online Appointment Booking System)
- [CVE-2024-41921](https://cve.now/CVE-2024-41921.md): Unsafe use of eval() method in rostopic echo tool (CVSS 7.8, Open Source Robotics Foundation Robot Operating System)
- [CVE-2024-41148](https://cve.now/CVE-2024-41148.md): Unsafe use of eval() method in rostopic hz tool (CVSS 7.8, Open Source Robotics Foundation Robot Operating System)
- [CVE-2024-39835](https://cve.now/CVE-2024-39835.md): Unsafe use of eval() method in roslaunch tool (CVSS 7.8, Open Source Robotics Foundation Robot Operating System)
- [CVE-2024-39289](https://cve.now/CVE-2024-39289.md): Unsafe use of eval() method in rosparam tool (CVSS 7.8, Open Source Robotics Foundation Robot Operating System)
- [CVE-2025-7433](https://cve.now/CVE-2025-7433.md): A local privilege escalation vulnerability in Sophos Intercept X for Windows with Central Device Encryption 2025.1 and older allows arbitrar (CVSS 8.8, Sophos Intercept X for Windows)
- [CVE-2025-23266](https://cve.now/CVE-2025-23266.md): NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could (CVSS 9.0, NVIDIA Container Toolkit · github.com/NVIDIA/gpu-operator +3)
- [CVE-2024-13972](https://cve.now/CVE-2024-13972.md): A vulnerability related to registry permissions in the Intercept X for Windows updater prior to Core Agent version 2024.3.2 can lead to a lo (CVSS 8.8, Sophos Intercept X for Windows Core Agent)
- [CVE-2025-7750](https://cve.now/CVE-2025-7750.md): code-projects Online Appointment Booking System adddoctorclinic.php sql injection (CVSS 6.9, code-projects Online Appointment Booking System)
- [CVE-2025-7472](https://cve.now/CVE-2025-7472.md): A local privilege escalation vulnerability in the Intercept X for Windows installer prior version 1.22 can lead to a local user gaining syst (CVSS 7.5, Sophos Intercept X for Windows Installer)
- [CVE-2025-54070](https://cve.now/CVE-2025-54070.md): OpenZeppelin Contracts's Bytes's lastIndexOf function with position argument performs out-of-bound memory access on empty buffers (CVSS 6.9, openzeppelin-contracts · @openzeppelin/contracts +1)
- [CVE-2025-54068](https://cve.now/CVE-2025-54068.md): Livewire vulnerable to remote command execution during property update hydration (CVSS 9.2, KEV, livewire · livewire/livewire)
- [CVE-2025-53817](https://cve.now/CVE-2025-53817.md): GHSL-2025-059 - 7-Zip - Null pointer array write attempt in NArchive::NCom::CHandler::GetStream (CVSS 5.5, ipavlov 7-Zip)
- [CVE-2025-53816](https://cve.now/CVE-2025-53816.md): GHSL-2025-058 - 7-Zip Multi-byte write heap buffer overflow in NCompress::NRar5::CDecoder (CVSS 5.5, ipavlov 7-Zip)
- [CVE-2025-7749](https://cve.now/CVE-2025-7749.md): code-projects Online Appointment Booking System getmanagerregion.php sql injection (CVSS 6.9, code-projects Online Appointment Booking System)
- [CVE-2025-53644](https://cve.now/CVE-2025-53644.md): OpenCV contains a use after free buffer write due to an uninitialized pointer (CVSS 6.6, opencv)
- [CVE-2025-53638](https://cve.now/CVE-2025-53638.md): Solady lacks extcodesize validation on implementation in ERC4337Factory (CVSS 6.9, Vectorized solady)
- [CVE-2025-7748](https://cve.now/CVE-2025-7748.md): ZCMS Create Article Page cross site scripting (CVSS 5.1, ZCMS)
- [CVE-2025-23263](https://cve.now/CVE-2025-23263.md): NVIDIA DOCA-Host and Mellanox OFED contain a vulnerability in the VGT+ feature, where an attacker on a VM might cause escalation of privileg (CVSS 7.6, NVIDIA DOCA-Host and Mellanox OFED)
- [CVE-2025-7747](https://cve.now/CVE-2025-7747.md): Tenda FH451 POST Request WizardHandle fromWizardHandle buffer overflow (CVSS 8.7, Tenda FH451)
- [CVE-2025-7339](https://cve.now/CVE-2025-7339.md): on-headers vulnerable to http response header manipulation (CVSS 3.4, jshttp on-headers · on-headers)
- [CVE-2025-7338](https://cve.now/CVE-2025-7338.md): Multer vulnerable to Denial of Service via unhandled exception from malformed request (CVSS 7.5, expressjs multer · multer)
- [CVE-2025-25257](https://cve.now/CVE-2025-25257.md): An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability \[CWE-89\] vulnerability in Fortinet For (CVSS 9.6, KEV, Fortinet FortiWeb)
- [CVE-2025-54066](https://cve.now/CVE-2025-54066.md): DiracX-Web login page has Open Redirect vulnerability (CVSS 4.7, DIRACGrid diracx-web · @dirac-grid/diracx-web-components)
- [CVE-2025-54064](https://cve.now/CVE-2025-54064.md): rucio-server, rucio-ui, and rucio-webui vulnerable to insertion of X-Rucio-Auth-Token in apache access logfiles (CVSS 6.9, rucio helm-charts)
- [CVE-2025-54062](https://cve.now/CVE-2025-54062.md): WeGIA SQL Injection (Blind Time-Based) Vulnerability in id\_dependente Parameter on profile\_dependente.php Endpoint (CVSS 9.4, LabRedesCefetRJ WeGIA)
- [CVE-2025-54061](https://cve.now/CVE-2025-54061.md): WeGIASQL Injection (Blind Time-Based) Vulnerability in idatendido\_familiares Parameter on dependente\_editarDoc.php Endpoint (CVSS 9.4, LabRedesCefetRJ WeGIA)
- [CVE-2025-54060](https://cve.now/CVE-2025-54060.md): WeGIA SQL Injection (Blind Time-Based) Vulnerability in idatendido\_familiares Parameter on dependente\_editarInfoPessoal.php Endpoint (CVSS 9.4, LabRedesCefetRJ WeGIA)
- [CVE-2025-54058](https://cve.now/CVE-2025-54058.md): WeGIA SQL Injection (Blind Time-Based) Vulnerability in idatendido\_familiares Parameter on dependente\_editarEndereco.php Endpoint (CVSS 9.4, LabRedesCefetRJ WeGIA)
- [CVE-2025-53946](https://cve.now/CVE-2025-53946.md): WeGIA vulnerable to SQL Injection in endpoint profile\_paciente.php parameter id\_fichamedica (CVSS 9.4, LabRedesCefetRJ WeGIA)
- [CVE-2025-53941](https://cve.now/CVE-2025-53941.md): Hollo renders posts received with form elements and allows submission (CVSS 6.1, fedify-dev hollo)
- [CVE-2025-1713](https://cve.now/CVE-2025-1713.md): deadlock potential with VT-d and legacy PCI device pass-through (CVSS 7.5, Xen)
- [CVE-2025-53928](https://cve.now/CVE-2025-53928.md): MaxKB has RCE in MCP call (CVSS 4.6, 1Panel-dev MaxKB)
- [CVE-2025-53927](https://cve.now/CVE-2025-53927.md): MaxKB sandbox bypass (CVSS 4.6, 1Panel-dev MaxKB)
- [CVE-2025-53909](https://cve.now/CVE-2025-53909.md): mailcow: dockerized vulnerable to SSTI in Quota and Quarantine Notification Template (CVSS 9.1, mailcow-dockerized)
- [CVE-2025-40924](https://cve.now/CVE-2025-40924.md): Catalyst::Plugin::Session before version 0.44 for Perl generates session ids insecurely (CVSS 6.5, HAARG Catalyst::Plugin::Session)
- [CVE-2025-5346](https://cve.now/CVE-2025-5346.md): File removal via path traversal in unsecured broadcast receiver in Bluebird barcode scanner application (CVSS 5.1, kr.co.bluebird.android.bbsettings)
- [CVE-2025-5344](https://cve.now/CVE-2025-5344.md): Exposed AIDL service allowing for tampering of system secure settings in Bluebird kiosk application (CVSS 8.5, com.bluebird.kiosk.launcher)
- [CVE-2025-5345](https://cve.now/CVE-2025-5345.md): Exposed AIDL service allowing to read and delete files with system-level privileges in Bluebird filemanager application (CVSS 6.3, com.bluebird.filemanagers)
- [CVE-2025-3415](https://cve.now/CVE-2025-3415.md): Grafana is an open-source platform for monitoring and observability. (CVSS 4.3, Grafana · github.com/grafana/grafana)
- [CVE-2025-4302](https://cve.now/CVE-2025-4302.md): Stop User Enumeration \< 1.7.3 - Protection Bypass (CVSS 5.3, Stop User Enumeration)
- [CVE-2025-7735](https://cve.now/CVE-2025-7735.md): UNIMAX｜Hospital Information System - SQL Injection (CVSS 7.5, UNIMAX Hospital Information System)
- [CVE-2025-7712](https://cve.now/CVE-2025-7712.md): Madara - Core \<= 2.2.3 - Unauthenticated Arbitrary File Deletion (CVSS 9.1, MangaBooth Madara - Core)
- [CVE-2025-7729](https://cve.now/CVE-2025-7729.md): Scada-LTS usersProfiles.shtm cross site scripting (CVSS 5.1, Scada-LTS)
- [CVE-2025-5396](https://cve.now/CVE-2025-5396.md): Bears Backup \<= 2.0.0 - Unauthenticated Remote Code Execution (CVSS 9.8, Bearsthemes Bears Backup)
- [CVE-2025-7728](https://cve.now/CVE-2025-7728.md): Scada-LTS users.shtm cross site scripting (CVSS 5.1, Scada-LTS)
- [CVE-2023-41566](https://cve.now/CVE-2023-41566.md): OA EKP v16 was discovered to contain an arbitrary download vulnerability via the component /ui/sys\_ui\_extend/sysUiExtend.do. (CVSS 8.1)
- [CVE-2023-47356](https://cve.now/CVE-2023-47356.md): Mingyu Security Gateway before v3.0-5.3p was discovered to contain a remote command execution (RCE) vulnerability via the log\_type parameter (CVSS 8.8)
- [CVE-2024-32323](https://cve.now/CVE-2024-32323.md): SQL Injection vulnerability in cnhcit.com Haichang OA v.1.0.0 allows a remote attacker to obtain sensitive information via the if parameter (CVSS 8.1)
- [CVE-2025-46102](https://cve.now/CVE-2025-46102.md): Cross Site Scripting vulnerability in Beakon Software Beakon Learning Management System Sharable Content Object Reference Model (SCORM) vers (CVSS 5.4)
- [CVE-2025-47189](https://cve.now/CVE-2025-47189.md): Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows XSS for authentication error data of certain user (CVSS 6.1)
- [CVE-2025-50240](https://cve.now/CVE-2025-50240.md): nbcio-boot v1.0.3 was discovered to contain a SQL injection vulnerability via the userIds parameter at /sys/user/deleteRecycleBin. (CVSS 9.8)
- [CVE-2025-51497](https://cve.now/CVE-2025-51497.md): An issue was discovered in AdGuard plugin before 1.11.22 for Safari on MacOS. (CVSS 5.5)
- [CVE-2025-51630](https://cve.now/CVE-2025-51630.md): TOTOLINK N350RT V9.3.5u.6139\_B20201216 was discovered to contain a buffer overflow via the ePort parameter in the function setIpPortFilterRu (CVSS 9.8)
- [CVE-2025-52046](https://cve.now/CVE-2025-52046.md): Totolink A3300R V17.0.0cu.596\_B20250515 was found to contain a command injection vulnerability in the sub\_4197C0 function via the mac and de (CVSS 9.8)
- [CVE-2025-53867](https://cve.now/CVE-2025-53867.md): Island Lake WebBatch before 2025C allows Remote Code Execution via a crafted URL. (CVSS 9.8)
- [CVE-2025-53964](https://cve.now/CVE-2025-53964.md): GoldenDict 1.5.0 and 1.5.1 has an exposed dangerous method that allows reading and modifying files when a user adds a crafted dictionary and (CVSS 9.6)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-07-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.