CVEs published July 21, 2025
232 CVEs were published on July 21, 2025: 23 critical, 138 high.
- Published
- 232
- Critical
- 23
- High
- 138
- Medium
- 68
- Low
- 3
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 48
Most affected products
- IrfanView
- 91
- MB connect line mbNET.mini · Helmholz REX
- 8
- INVT VT-Designer
- 5
- Sophos Firewall
- 5
- code-projects Church Donation System
- 4
- IBM Cognos Analytics Mobile
- 4
- INVT HMITool
- 4
- PHPGurukul Online Banquet Booking System
- 4
- Simopro Technology WinMatrix3 Web package
- 4
- fuyang_lipengjun platform
- 3
Critical 23
- CVE-2025-54127HAXcms's Insecure Default Configuration Leads to Unauthenticated Accesshaxtheweb issues · @haxtheweb/haxcms-nodejs
- CVE-2025-54122Manager-io/Manager allows unauthenticated full read server-side request forgery in "proxy" endpointManager-io Manager
- CVE-2025-54071RomM's authenticated arbitrary file write vulnerability can lead to Remote Code Executionrommapp romm
- CVE-2025-7393Mail Login - Critical - Access bypass - SA-CONTRIB-2025-088Drupal Mail Login · drupal/mail_login
- CVE-2025-7624An SQL injection vulnerability in the legacy (transparent) SMTP proxy of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to rSophos Firewall
- CVE-2025-6704An arbitrary file writing vulnerability in the Secure PDF eXchange (SPX) feature of Sophos Firewall versions older than 21.0 MR2 (21.0.2) caSophos Firewall
- CVE-2024-6107Due to insufficient verification, an attacker could use a malicious client to bypass authentication checks and run RPC commands in a region.Canonical MAAS
- CVE-2025-7343Digiwin｜SFT - SQL InjectionDigiwin SFT
- CVE-2025-7921ASKEY｜modem - Stack-based Buffer OverflowASKEY RTF8207w · ASKEY RTF8217
- CVE-2025-24937Access to local file system and its contentNokia WaveSuite NOC
- CVE-2025-24936Insufficient Validation of Input in the URLNokia WaveSuite NOC
- CVE-2025-7918Simopro Technology｜WinMatrix3 Web package - SQL InjectionSimopro Technology WinMatrix3 Web package
- CVE-2025-7916Simopro Technology｜WinMatrix3 - Insecure DeserializationSimopro Technology WinMatrix3
- CVE-2020-26799A reflected cross-site scripting (XSS) vulnerability was discovered in index.php on Luxcal 4.5.2 which allows an unauthenticated attacker to
- CVE-2025-36846An issue was discovered in Eveo URVE Web Manager 27.02.2025.
- CVE-2025-44654In Linksys E2500 3.0.04.002, the chroot_local_user option is enabled in the vsftpd configuration file.
- CVE-2025-44655In TOTOLink A7100RU V7.4, A950RG V5.9, and T10 V5.9, the chroot_local_user option is enabled in the vsftpd.conf.
- CVE-2025-44658In Netgear RAX30 V1.0.10.94, a PHP-FPM misconfiguration vulnerability is caused by not following the specification to only limit FPM to .php
- CVE-2025-46117An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.
- CVE-2025-46120An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.27 and 200.18.7.1.323, and in Ruckus ZoneDirector prior to 10.5.
- CVE-2025-46121An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, where the functions `stamgr_cfg_adpt_addS
- CVE-2025-46122An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, where the authenticated diagnostics API e
- CVE-2025-52362Server-Side Request Forgery (SSRF) vulnerability exists in the URL processing functionality of PHProxy version 1.1.1 and prior.
High 138
- CVE-2025-7945D-Link DIR-513 formSetWanDhcpplus buffer overflowD-Link DIR-513
- CVE-2025-54134HAX CMS NodeJs's Improper Error Handling Leads to Denial of Servicehaxtheweb issues · @haxtheweb/haxcms-nodejs
- CVE-2025-54128HAX CMS NodeJs's Disabled Content Security Policy Enables Cross-Site Scriptinghaxtheweb issues · @haxtheweb/haxcms-nodejs
- CVE-2025-53832@translated/lara-mcp vulnerable to command injection in import_tmx tooltranslated lara-mcp · @translated/lara-mcp
- CVE-2025-53528Cadwyn is vulnerable to an XSS attack through its docs pagezmievsa cadwyn · cadwyn
- CVE-2025-7299IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7325IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7324IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7323IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7322IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7321IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7320IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7319IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7318IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7317IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7316IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7315IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7314IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7313IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7312IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7311IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7309IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7310IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7308IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7307IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7306IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7305IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7304IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7303IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7302IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7301IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7300IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7296IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7297IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7295IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7294IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7298IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7293IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7292IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7291IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7290IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7285IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7284IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7289IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7288IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7287IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7286IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7283IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7282IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7281IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7280IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7279IrfanView CADImage Plugin CGM File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7278IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7274IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7277IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7276IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7275IrfanView CADImage Plugin CGM File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7272IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7271IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7273IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7270IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7269IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7268IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7267IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7266IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7265IrfanView CADImage Plugin CGM File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7264IrfanView CADImage Plugin CGM File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7263IrfanView CADImage Plugin CGM File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7262IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7261IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7260IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7258IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7239IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7238IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7237IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7257IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7256IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7248IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7255IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7247IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7246IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7244IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7254IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7234IrfanView CADImage Plugin CGM File Parsing Out-of-Bounds Write Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7253IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7249IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7243IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7242IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7241IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7240IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7236IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7250IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7235IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7252IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7251IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityIrfanView
- CVE-2025-7231INVT VT-Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityINVT VT-Designer
- CVE-2025-7230INVT VT-Designer PM3 File Parsing Type Confusion Remote Code Execution VulnerabilityINVT VT-Designer
- CVE-2025-7229INVT VT-Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityINVT VT-Designer
- CVE-2025-7228INVT VT-Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityINVT VT-Designer
- CVE-2025-7227INVT VT-Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityINVT VT-Designer
- CVE-2025-7226INVT HMITool VPM File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityINVT HMITool
- CVE-2025-7225INVT HMITool VPM File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityINVT HMITool
- CVE-2025-7224INVT HMITool VPM File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityINVT HMITool
- CVE-2025-7223INVT HMITool VPM File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityINVT HMITool
- CVE-2025-7222Luxion KeyShot 3DM File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityLuxion KeyShot
- CVE-2025-7717File Download - Moderately critical - Access bypass - SA-CONTRIB-2025-089Drupal File Download · drupal/file_download
- CVE-2025-54082nova-tiptap has an Unauthenticated Arbitrary File Upload Vulnerabilitymarshmallow-packages nova-tiptap · marshmallow/nova-tipt… +1
- CVE-2025-4130Hardcoded Credentials in PAVO Inc.'s PAVO PayPAVO Pay
- CVE-2025-4129IDOR in PAVO Inc.'s PAVO PayPAVO Pay
- CVE-2024-13974A business logic vulnerability in the Up2Date component of Sophos Firewall older than version 21.0 MR1 (20.0.1) can lead to attackers controSophos Firewall
- CVE-2025-7382A command injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to adjacent attackers achievSophos Firewall
- CVE-2025-30192A Recursor configured to send out ECS enabled queries can be sensitive to spoofing attemptsPowerDNS Recursor
- CVE-2025-4040IDOR in Turpak's Automatic Station Monitoring SystemTurpak Automatic Station Monitoring System
- CVE-2025-41459Insecure authentication due to missing bruteforce protection and runtime manipulation in Two App Studio Journey 5.5.6 for iOSTwo App Studio Journey
- CVE-2025-50151Apache Jena: Configuration files uploaded by administrative users are not check properlyApache Software Foundation Apache Jena · org.apache.jena:je…
- CVE-2025-49656Apache Jena: Administrative users can create files outside the server directory space via the admin UIApache Software Foundation Apache Jena · org.apache.jena:je…
- CVE-2025-41675Remote Command Injection via GET in Cloud Server Communication Script Due to Improper Input NeutralizationMB connect line mbNET.mini · Helmholz REX
- CVE-2025-41674Remote Command Injection in diagnostic Action Due to Improper Input NeutralizationMB connect line mbNET.mini · Helmholz REX
- CVE-2025-41673Remote Command Injection in send_sms Action Due to Improper Input NeutralizationMB connect line mbNET.mini · Helmholz REX
- CVE-2025-1469IDOR in Turtek Software's EyotekTurtek Software Eyotek
- CVE-2025-4569An insecure sensitive key storage issue was found in MyASUS.MyASUS
- CVE-2025-4049Hardcoded SQLite password in FARASIGNUM-NET FARA
- CVE-2025-7344Digiwin｜EAI - Privilege EscalationDigiwin EAI
- CVE-2025-24938Insufficient Validation of Input while user creationNokia WaveSuite NOC
- CVE-2025-7919Simopro Technology｜WinMatrix3 Web package - SQL InjectionSimopro Technology WinMatrix3 Web package
- CVE-2025-7917Simopro Technology｜WinMatrix3 Web package - Arbitrary File UploadSimopro Technology WinMatrix3 Web package
- CVE-2025-7914Tenda AC6 httpd setparentcontrolinfo buffer overflowTenda AC6
- CVE-2025-36845An issue was discovered in Eveo URVE Web Manager 27.02.2025.
- CVE-2025-44647In TRENDnet TEW-WLC100P 2.03b03, the i_dont_care_about_security_and_use_aggressive_mode_psk option is enabled in the strongSwan configuratio
- CVE-2025-44649In the configuration file of racoon in the TRENDnet TEW-WLC100P 2.03b03, the first item of exchage_mode is set to aggressive.
- CVE-2025-44650In Netgear R7000 V1.3.1.64_10.1.36 and EAX80 V1.0.1.70_1.0.2, the USERLIMIT_GLOBAL option is set to 0 in the bftpd.conf configuration file.
- CVE-2025-44651In TRENDnet TPL-430AP FW1.0, the USERLIMIT_GLOBAL option is set to 0 in the bftpd-related configuration file.
- CVE-2025-44652In Netgear RAX30 V1.0.10.94_3, the USERLIMIT_GLOBAL option is set to 0 in multiple bftpd-related configuration files.
- CVE-2025-44653In H3C GR2200 MiniGR1A0V100R016, the USERLIMIT_GLOBAL option is set to 0 in the /etc/bftpd.conf.
- CVE-2025-46116An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.
- CVE-2025-46123An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.
- CVE-2025-51868Insecure Direct Object Reference (IDOR) vulnerability in Dippy (chat.dippy.ai) v2 allows attackers to gain sensitive information via the con
- CVE-2025-51869Insecure Direct Object Reference (IDOR) vulnerability in Liner thru 2025-06-03 allows attackers to gain sensitive information via crafted sp
Medium, low and unrated 71
- CVE-2025-7944PHPGurukul Taxi Stand Management System search.php cross site scriptingPHPGurukul Taxi Stand Management System
- CVE-2025-7943PHPGurukul Taxi Stand Management System search-autoortaxi.php cross site scriptingPHPGurukul Taxi Stand Management System
- CVE-2025-7486Ebook Store <= 5.8012 - Authenticated (Administrator+) Stored Cross-Site Scripting via Order Detailsmotovnet Ebook Store
- CVE-2025-7942PHPGurukul Taxi Stand Management System admin-profile.php cross site scriptingPHPGurukul Taxi Stand Management System
- CVE-2025-7941PHPGurukul Time Table Generator System profile.php cross site scriptingPHPGurukul Time Table Generator System
- CVE-2025-7940Genshin Albedo Cat House App com.house.auscat AndroidManifest.xml improper export of android application componentsGenshin Albedo Cat House App
- CVE-2025-54129HAXiam allows for User Enumerationhaxtheweb issues
- CVE-2025-7939jerryshensjf JPACookieShop 蛋糕商城JPA版 GoodsController.java addGoods unrestricted uploadjerryshensjf JPACookieShop 蛋糕商城JPA版
- CVE-2025-54121Starlette has possible denial-of-service vector when parsing large files in multipart formsencode starlette · starlette
- CVE-2025-7938jerryshensjf JPACookieShop 蛋糕商城JPA版 GoodsController.java updateGoods authorizationjerryshensjf JPACookieShop 蛋糕商城JPA版
- CVE-2025-7233IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityIrfanView
- CVE-2025-7936fuyang_lipengjun platform ScheduleJobLogController.java queryPage sql injectionfuyang_lipengjun platform
- CVE-2025-7935fuyang_lipengjun platform SysLogController.java SysLogController sql injectionfuyang_lipengjun platform
- CVE-2025-7934fuyang_lipengjun platform ScheduleJobController.java queryPage sql injectionfuyang_lipengjun platform
- CVE-2025-36057IBM Cognos Analytics Mobile (iOS) authentication bypassIBM Cognos Analytics Mobile
- CVE-2025-36062IBM Cognos Analytics Mobile (iOS) information disclosureIBM Cognos Analytics Mobile
- CVE-2025-36106IBM Cognos Analytics Mobile (iOS) information disclosureIBM Cognos Analytics Mobile
- CVE-2025-36107IBM Cognos Analytics Mobile (iOS) information disclosureIBM Cognos Analytics Mobile
- CVE-2025-7933Campcodes Sales and Inventory System Setting settings_update.php sql injectionCampcodes Sales and Inventory System
- CVE-2025-52575EspoCRM vulnerable to LDAP Injection through Improper Neutralization of Special Elementsespocrm
- CVE-2025-7962In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate Eclipse Foundation Jakarta Mail · org.eclipse.angus:smtp +1
- CVE-2025-7932D-Link DIR‑817L ssdpcgi lxmldbc_system command injectionD-Link DIR‑817L
- CVE-2025-7716Real-time SEO for Drupal - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-091Real-time SEO for Drupal · drupal/yoast_seo
- CVE-2025-7715Block Attributes - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-090Drupal Block Attributes · drupal/block_attributes
- CVE-2025-7392Cookies Addons - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-087Drupal Cookies Addons · drupal/cookies_addons
- CVE-2025-30477Dell PowerScale OneFS, versions prior to 9.11.0.0, contains a use of a broken or risky cryptographic algorithm vulnerability.Dell PowerScale OneFS
- CVE-2025-7931code-projects Church Donation System admin_pic.php unrestricted uploadcode-projects Church Donation System
- CVE-2025-32744Dell AppSync, version(s) 4.6.0.0, contains an Unrestricted Upload of File with Dangerous Type vulnerability.Dell AppSync
- CVE-2025-36603Dell AppSync, version(s) 4.6.0.0, contains an Improper Restriction of XML External Entity Reference vulnerability.Dell AppSync
- CVE-2025-7930code-projects Church Donation System add_members.php sql injectioncode-projects Church Donation System
- CVE-2025-7929code-projects Church Donation System edit_Members.php sql injectioncode-projects Church Donation System
- CVE-2025-7928code-projects Church Donation System edit_user.php sql injectioncode-projects Church Donation System
- CVE-2025-7927PHPGurukul Online Banquet Booking System view-user-queries.php sql injectionPHPGurukul Online Banquet Booking System
- CVE-2025-6235ExtremeControl (NAC) 'onmouseover' XSSExtreme Networks ExtremeControl
- CVE-2024-13973A post-auth SQL injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR1 (21.0.1) can potentially lead to adminisSophos Firewall
- CVE-2025-7926PHPGurukul Online Banquet Booking System booking-search.php cross site scriptingPHPGurukul Online Banquet Booking System
- CVE-2025-41100Incorrect authentication in ParkingDoorParkingDoor
- CVE-2025-7925PHPGurukul Online Banquet Booking System login.php cross site scriptingPHPGurukul Online Banquet Booking System
- CVE-2025-2301IDOR in Akbim Software's Online Exam RegistrationAkbim Software Online Exam Registration
- CVE-2025-5681IDOR in Turtek Software's EyotekTurtek Software Eyotek
- CVE-2025-7924PHPGurukul Online Banquet Booking System admin-profile.php cross site scriptingPHPGurukul Online Banquet Booking System
- CVE-2025-41458Insecure data storage vulnerability in Two App Studio Journey v5.5.9 for iOSTwo App Studio Journey
- CVE-2025-41681Persistent Cross-Site Scripting via POST Requests Due to Improper Neutralization of InputMB connect line mbNET.mini · Helmholz REX
- CVE-2025-41679Unauthenticated Buffer Overflow in Conftool Service Leading to Denial of ServiceMB connect line mbNET.mini · Helmholz REX
- CVE-2025-41678SQL Injection via POST Requests Allowing Configuration Database ManipulationMB connect line mbNET.mini · Helmholz REX
- CVE-2025-41677Resource Exhaustion via POST Requests to send-mail ActionMB connect line mbNET.mini · Helmholz REX
- CVE-2025-41676Resource Exhaustion via POST Requests to send-sms ActionMB connect line mbNET.mini · Helmholz REX
- CVE-2025-4570An insecure sensitive key storage issue was found in MyASUS.MyASUS
- CVE-2025-7354WP Shortcodes Plugin — Shortcodes Ultimate <= 7.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin Shortcodesgn_themes WP Shortcodes Plugin — Shortcodes Ultimate
- CVE-2025-7369Shortcodes Ultimate <= 7.4.2 - Cross-Site Request Forgery to Arbitrary Shortcode Executiongn_themes WP Shortcodes Plugin — Shortcodes Ultimate
- CVE-2025-4685Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor <= 3.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple WidgetsGutentor – Gutenberg Blocks – Page Builder for Gutenberg Ed…
- CVE-2025-0664A locally authenticated, privileged user can craft a malicious OpenSSL configuration file, potentially leading the agent to load an arbitrarTrellix Endpoint Security (HX) Agent
- CVE-2025-7920Simopro Technology｜WinMatrix3 Web package - Reflected Cross-Site ScriptingSimopro Technology WinMatrix3 Web package
- CVE-2025-7915Chanjet CRM Login Page mailinactive.php sql injectionChanjet CRM
- CVE-2024-55040Cross Site Scripting vulnerability in Sensaphone WEB600 Monitoring System v.1.6.5.H and before allows a remote attacker to execute arbitrary
- CVE-2025-43720Headwind MDM before 5.33.1 makes configuration details accessible to unauthorized users.
- CVE-2025-43976The com.enflick.android.tn2ndLine application through 24.17.1.0 for Android enables any installed application (with no permissions) to place
- CVE-2025-43977The com.skt.prod.dialer application through 12.5.0 for Android enables any installed application (with no permissions) to place phone calls
- CVE-2025-44657In Linksys EA6350 V2.1.2, the chroot_local_user option is enabled in the dynamically generated vsftpd configuration file.
- CVE-2025-46118An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139 and in Ruckus ZoneDirector prior to 10.5.1
- CVE-2025-46119An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.27 and 200.18.7.1.323, and in Ruckus ZoneDirector prior to 10.5.
- CVE-2025-51396A stored cross-site scripting (XSS) vulnerability in Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via in
- CVE-2025-51397A stored cross-site scripting (XSS) vulnerability in the Facebook Chat module of Live Helper Chat v4.60 allows attackers to execute arbitrar
- CVE-2025-51398A stored cross-site scripting (XSS) vulnerability in the Facebook registration page of Live Helper Chat v4.60 allows attackers to execute ar
- CVE-2025-51400A stored cross-site scripting (XSS) vulnerability in the Personal Canned Messages of Live Helper Chat v4.60 allows attackers to execute arbi
- CVE-2025-51401A stored cross-site scripting (XSS) vulnerability in the chat transfer function of Live Helper Chat v4.60 allows attackers to execute arbitr
- CVE-2025-51403A stored cross-site scripting (XSS) vulnerability in the department assignment editing module of of Live Helper Chat v4.60 allows attackers
- CVE-2025-52372An issue in hMailServer v.5.8.6 allows a local attacker to obtain sensitive information via the hmailserver/installation/hMailServerInnoExte
- CVE-2025-52373Use of hardcoded cryptographic key in BlowFish.cpp in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords used in database
- CVE-2025-52374Use of hardcoded cryptographic key in Encryption.cs in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords to other server
- CVE-2025-54352WordPress 3.5 through 6.8.2 allows remote attackers to guess titles of private and draft posts via pingback.ping XML-RPC requests.WordPress