CVEs published July 22, 2025
119 CVEs were published on July 22, 2025: 12 critical, 47 high. 1 is now in CISA KEV.
- Published
- 119
- Critical
- 12
- High
- 47
- Medium
- 56
- Low
- 4
- Unrated
- 0
- Now in CISA KEV
- 1
- Fix available
- 34
Most affected products
- Mozilla Firefox · Mozilla Thunderbird
- 15
- HP Poly Clariti Manager
- 10
- Bloomberg Comdb2
- 5
- DuraComm SPM-500 DP-10iN-100-MU
- 3
- ETQ Reliance CG
- 3
- code-projects Public Chat Room
- 2
- Devolutions Server
- 2
- ELECOM CO. WRC-BE36QS-B · ELECOM CO. WRC-W701-B
- 2
- Google Chrome
- 2
- HotelRunner B2B
- 2
Critical 12
- CVE-2025-8044Memory safety bugs fixed in Firefox 141 and Thunderbird 141Mozilla Firefox · Mozilla Thunderbird
- CVE-2025-8043Incorrect URL truncationMozilla Firefox
- CVE-2025-8038CSP frame-src was not correctly enforced for pathsMozilla Firefox · Mozilla Thunderbird
- CVE-2025-8031Incorrect URL stripping in CSP reportsMozilla Firefox · Mozilla Thunderbird
- CVE-2025-8037Nameless cookies shadow secure cookiesMozilla Firefox · Mozilla Thunderbird
- CVE-2025-8028Large branch table could lead to truncated instructionMozilla Firefox · Mozilla Thunderbird
- CVE-2025-6523Use of weak credentials in emergency authentication component in Devolutions Server allows an unauthenticated attacker to bypass authenticatDevolutions Server
- CVE-2025-34143ETQ Reliance CG Authentication Bypass via Trailing Space RCEETQ Reliance CG
- CVE-2025-4285SQLi in Rolantis Information Technologies' AgentisRolantis Information Technologies Agentis
- CVE-2025-6187bSecure 1.3.7 - 1.7.9 - Missing Authorization to Unauthenticated Privilege Escalation via order_info REST Endpointbsecuretech bSecure – Your Universal Checkout
- CVE-2012-10020FoxyPress <= 0.4.2.1 - Arbitrary File UploadWebMovementLLC FoxyPress
- CVE-2015-10137Website Contact Form With File Upload <= 1.3.4 - Arbitrary File UploadN-Media Website Contact Form With File Upload
High 47
- CVE-2025-43022Poly Clariti Manager - Multiple Security VulnerabilitiesHP Poly Clariti Manager
- CVE-2025-7766Lantronix Provisioning Manager Improper Restriction of XML External Entity ReferenceLantronix Provisioning Manager
- CVE-2025-41425DuraComm DP-10iN-100-MU Cross-site ScriptingDuraComm SPM-500 DP-10iN-100-MU
- CVE-2025-53538Suricata's mishandling of data on HTTP2 stream 0 can lead to resource starvationOISF suricata
- CVE-2025-48733DuraComm DP-10iN-100-MU Missing Authentication for Critical FunctionDuraComm SPM-500 DP-10iN-100-MU
- CVE-2025-54141ViewVC's standalone server exposes arbitrary server filesystem contentviewvc
- CVE-2025-54072yt-dlp allows `--exec` command injection when using placeholder on Windowsyt-dlp
- CVE-2025-54140pyLoad has Path Traversal Vulnerability in json/upload Endpoint that allows Arbitrary File Writepyload · pyload-ng
- CVE-2025-54137NodeJS version of the HAX CMS application is distributed with Default Secretshaxtheweb issues · @haxtheweb/haxcms-nodejs
- CVE-2025-54138LibreNMS has Authenticated Local File Inclusion in ajax_form.php that Allows RCElibrenms · librenms/librenms
- CVE-2025-53703DuraComm DP-10iN-100-MU Cleartext Transmission of Sensitive InformationDuraComm SPM-500 DP-10iN-100-MU
- CVE-2025-8011Type Confusion in V8 in Google Chrome prior to 138.0.7204.168 allowed a remote attacker to potentially exploit heap corruption via a craftedGoogle Chrome
- CVE-2025-8010Type Confusion in V8 in Google Chrome prior to 138.0.7204.168 allowed a remote attacker to potentially exploit heap corruption via a craftedGoogle Chrome
- CVE-2025-8035Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141Mozilla Firefox · Mozilla Thunderbird
- CVE-2025-8040Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141Mozilla Firefox · Mozilla Thunderbird
- CVE-2025-8034Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141Mozilla Firefox · Mozilla Thunderbird
- CVE-2025-8039Search terms persisted in URL barMozilla Firefox · Mozilla Thunderbird
- CVE-2025-8032XSLT documents could bypass CSPMozilla Firefox · Mozilla Thunderbird
- CVE-2025-8030Potential user-assisted code execution in “Copy as cURL” commandMozilla Firefox · Mozilla Thunderbird
- CVE-2025-8036DNS rebinding circumvents CORSMozilla Firefox · Mozilla Thunderbird
- CVE-2025-8029javascript: URLs executed on object and embed tagsMozilla Firefox · Mozilla Thunderbird
- CVE-2025-7724Unauthenticated command injection on VIGI NVR1104H-4P V1 and VIGI NVR2016H-16MP V2TP-Link Systems VIGI NVR1104H-4P · TP-Link Systems VIGI NVR…
- CVE-2025-7723Authenticated command injection on VIGI NVR1104H-4P V1 and VIGI NVR2016H-16MP V2TP-Link Systems VIGI NVR1104H-4P · TP-Link Systems VIGI NVR…
- CVE-2025-6741Improper access control in secure message component in Devolutions Server allows an authenticated user to steal unauthorized entries via theDevolutions Server
- CVE-2025-5042RFA File Parsing Out-of-Bounds Read VulnerabilityAutodesk Revit
- CVE-2025-8019Shenzhen Libituo Technology LBT-T300-T310 appy.cgi sub_40B6F0 buffer overflowShenzhen Libituo Technology LBT-T300-T310
- CVE-2025-36520A null pointer dereference vulnerability exists in the net_connectmsg Protocol Buffer Message functionality of Bloomberg Comdb2 8.1.Bloomberg Comdb2
- CVE-2025-46354A denial of service vulnerability exists in the Distributed Transaction Commit/Abort Operation functionality of Bloomberg Comdb2 8.1.Bloomberg Comdb2
- CVE-2025-48498A null pointer dereference vulnerability exists in the Distributed Transaction component of Bloomberg Comdb2 8.1 when processing a number ofBloomberg Comdb2
- CVE-2025-36512A denial of service vulnerability exists in the Bloomberg Comdb2 8.1 database when handling a distributed transaction heartbeat.Bloomberg Comdb2
- CVE-2025-35966A null pointer dereference vulnerability exists in the CDB2SQLQUERY protocol buffer message handling of Bloomberg Comdb2 8.1.Bloomberg Comdb2
- CVE-2025-8017Tenda AC7 httpd setMacFilterCfg formSetMacFilterCfg stack-based overflowTenda AC7
- CVE-2015-10140Ajax Load More < 2.8.1.2 - Subscriber+ File Upload & DeletionAjax Load More
- CVE-2025-34140ETQ Reliance CG/NXG API Authorization Bypass via ;localized-text URI SuffixETQ Reliance CG · ETQ Reliance NXG
- CVE-2025-53472WRC-BE36QS-B and WRC-W701-B contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilELECOM CO. WRC-BE36QS-B · ELECOM CO. WRC-W701-B
- CVE-2025-6213Nginx Cache Purge Preload <= 2.1.1 - Authenticated (Administrator+) Remote Code Executionpsauxit Nginx Cache Purge Preload
- CVE-2025-7692Orion Login with SMS <= 1.0.5 - Authentication Bypass via Weak OTPgsayed786 Orion Login with SMS
- CVE-2025-38352posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()Linux
- CVE-2025-7645Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) <= 3.2.8 - Unauthenticated Arbitrary File Deletion Triggered via Admin Form Submission Deletionhtplugins Extensions For CF7
- CVE-2025-6585WP JobHunt <= 7.2 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Account DeletionWP JobHunt
- CVE-2025-31511An issue was discovered in AlertEnterprise Guardian 4.1.14.2.2.1.
- CVE-2025-31512An issue was discovered in AlertEnterprise Guardian 4.1.14.2.2.1.
- CVE-2025-51463Path Traversal in restore_run_backup() in AIM 3.28.0 allows remote attackers to write arbitrary files to the server's filesystem via a craft
- CVE-2025-51464Cross-site Scripting (XSS) in aimhubio Aim 3.28.0 allows remote attackers to execute arbitrary JavaScript in victims browsers via malicious aim
- CVE-2025-51480Path Traversal vulnerability in onnx.external_data_helper.save_external_data in ONNX 1.17.0 allows attackers to overwrite arbitrary files byonnx
- CVE-2025-51482Remote Code Execution in letta.server.rest_api.routers.v1.tools.run_tool_from_source in letta-ai Letta 0.7.12 allows remote attackers to exe
- CVE-2025-51865Ai2 playground web service (playground.allenai.org) LLM chat through 2025-06-03 is vulnerable to Insecure Direct Object Reference (IDOR), al
Medium, low and unrated 60
- CVE-2025-43489Poly Clariti Manager - Multiple Security VulnerabilitiesHP Poly Clariti Manager
- CVE-2025-43488Poly Clariti Manager - Multiple Security VulnerabilitiesHP Poly Clariti Manager
- CVE-2025-43487Poly Clariti Manager - Multiple Security VulnerabilitiesHP Poly Clariti Manager
- CVE-2025-54139HAX CMS' application pages are vulnerable to clickjackinghaxtheweb issues · @haxtheweb/haxcms-nodejs +1
- CVE-2025-43486Poly Clariti Manager - Multiple Security VulnerabilitiesHP Poly Clariti Manager
- CVE-2025-43485Poly Clariti Manager - Multiple Security VulnerabilitiesHP Poly Clariti Manager
- CVE-2025-43484Poly Clariti Manager - Multiple Security VulnerabilitiesHP Poly Clariti Manager
- CVE-2025-43483Poly Clariti Manager - Multiple Security VulnerabilitiesHP Poly Clariti Manager
- CVE-2025-43021Poly Clariti Manager - Multiple Security VulnerabilitiesHP Poly Clariti Manager
- CVE-2025-43020Poly Clariti Manager - Multiple Security VulnerabilitiesHP Poly Clariti Manager
- CVE-2025-8033Incorrect JavaScript state machine for generatorsMozilla Firefox · Mozilla Thunderbird
- CVE-2025-8027JavaScript engine only wrote partial return value to stackMozilla Firefox · Mozilla Thunderbird
- CVE-2024-38335IBM Security QRadar Network Threat Analytics denial of serviceIBM Security QRadar Network Threat Analytics
- CVE-2025-7371Okta On-Premises Provisioning (OPP) agents log certain user data during administrator-initiated password resets.Okta On-Premises Provisioning Agent
- CVE-2025-8015Shortcodes Ultimate <= 7.4.2 - Authenticated (Author+) Stored Cross-Site Scripting via Image Title and Slide Linkgn_themes WP Shortcodes Plugin — Shortcodes Ultimate
- CVE-2025-8018code-projects Food Ordering Review System reservation_page.php sql injectioncode-projects Food Ordering Review System
- CVE-2025-4878Libssh: use of uninitialized variable in privatekey_from_file()libssh · Red Hat Enterprise Linux +1
- CVE-2025-4295Host Header Injection in HotelRunner's B2BHotelRunner B2B
- CVE-2025-4294XSS in HotelRunner's B2BHotelRunner B2B
- CVE-2025-34141ETQ Reliance CG < SE.2025.1 Reflected XSS in `SQLConverterServlet`ETQ Reliance CG
- CVE-2025-34142ETQ Reliance CG < SE.2025.1 / < 2025.1.2 XXE Injection in SSO SAML HandlerETQ Reliance CG
- CVE-2025-7705Authentication bypass due to compatibility mode enabled by defaultABB Switch Actuator 4 DU-83330 · ABB Switch actuator, door/…
- CVE-2025-4284Reflected XSS in Rolantis Information Technologies' AgentisRolantis Information Technologies Agentis
- CVE-2025-7900Insecure Direct Object Reference in extension "femanager" (femanager)TYPO3 Extension "femanager" · in2code/femanager
- CVE-2025-7899Insecure Direct Object Reference in extension "powermail" (powermail)TYPO3 Extension "powermail" · in2code/powermail
- CVE-2025-7427Uncontrolled Search Path Element in Arm Development Studio before 2025Arm Development Studio
- CVE-2025-46267Hidden functionality issue exists in WRC-BE36QS-B and WRC-W701-B.ELECOM CO. WRC-BE36QS-B · ELECOM CO. WRC-W701-B
- CVE-2025-7685Like & Share My Site <= 0.2 - Cross-Site Request Forgery to Stored Cross-Site Scriptingsflack Like & Share My Site
- CVE-2025-6082Birth Chart Compatibility <= 2.0 - Unauthenticated Full Path Exposuremia4 Birth Chart Compatibility
- CVE-2025-7687Latest Post Accordian Slider <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scriptinganop-goswami Latest Post Accordian Slider
- CVE-2025-52580Insertion of sensitive information into log file issue exists in "region PAY" App for Android prior to 1.5.28.Gift Pad Co. "region PAY" App for Android
- CVE-2025-7644Pixel Gallery Addons for Elementor – Easy Grid, Creative Gallery, Drag and Drop Grid, Custom Grid Layout, Portfolio Gallery <= 1.6.7 - Authenticated (Contributor+) Stored Cross-Site Scriptingbdthemes Pixel Gallery Addons for Elementor – Easy Grid, Cr…
- CVE-2025-7495WP-Members <= 3.5.4.1 - Authenticated (Contributor+) Stored Cross-Site Scriptingcbutlerjr WP-Members Membership Plugin
- CVE-2025-7953Sanluan PublicCMS viewer.html redirectSanluan PublicCMS
- CVE-2025-7952TOTOLINK T6 MQTT Packet wireless.so ckeckKeepAlive command injectionTOTOLINK T6
- CVE-2025-7951code-projects Public Chat Room send_message.php cross site scriptingcode-projects Public Chat Room
- CVE-2025-7950code-projects Public Chat Room login.php sql injectioncode-projects Public Chat Room
- CVE-2025-6831User Registration <= 4.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via urcr_restrict Shortcodewpeverest User Registration & Membership – Free & Paid Memb…
- CVE-2025-5240CRM and Lead Management by vcita <= 2.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via type ParameterCRM and Lead Management by vcita
- CVE-2025-7949Sanluan PublicCMS preview.html redirectSanluan PublicCMS
- CVE-2025-7948jshERP updatePwd password recoveryjshERP
- CVE-2025-7947jshERP Account delete improper authorizationjshERP
- CVE-2025-7946PHPGurukul Apartment Visitors Management System HTTP POST Request search-visitor.php cross site scriptingPHPGurukul Apartment Visitors Management System
- CVE-2025-31513An issue was discovered in AlertEnterprise Guardian 4.1.14.2.2.1.
- CVE-2025-48964ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafiputils
- CVE-2025-51458SQL Injection in editor_sql_run and query_ex in eosphoros-ai DB-GPT 0.7.0 allows remote attackers to execute arbitrary SQL statements via cr
- CVE-2025-51459File Upload vulnerability in agent.hub.controller.refresh_plugins in eosphoros-ai DB-GPT 0.7.0 allows remote attackers to execute arbitrary
- CVE-2025-51462Stored Cross-site Scripting (XSS) vulnerability in api.apps.dialog_app.set_dialog in RAGFlow 0.17.2 allows remote attackers to execute arbit
- CVE-2025-51471Cross-Domain Token Exposure in server.auth.getAuthorizationToken in Ollama 0.6.7 allows remote attackers to steal authentication tokens and github.com/ollama/ollama
- CVE-2025-51472Code Injection in AgentTemplate.eval_agent_config in TransformerOptimus SuperAGI 0.0.14 allows remote attackers to execute arbitrary Python
- CVE-2025-51475Arbitrary File Overwrite (AFO) in superagi.controllers.resources.upload in TransformerOptimus SuperAGI 0.0.14 allows remote attackers to ove
- CVE-2025-51479Authorization bypass in update_user_group in onyx-dot-app Onyx Enterprise Edition 0.27.0 allows remote authenticated attackers to modify arb
- CVE-2025-51481Local File Inclusion in dagster._grpc.impl.get_notebook_data in Dagster 1.10.14 allows attackers with access to the gRPC server to read arbidagster-ge · dagster
- CVE-2025-51858Self Cross-Site Scripting (XSS) vulnerability in ChatPlayground.ai through 2025-05-24, allows attackers to execute arbitrary code and gain s
- CVE-2025-51859Stored Cross-Site Scripting (XSS) vulnerability in Chaindesk thru 2025-05-26 in its agent chat component.
- CVE-2025-51860Stored Cross-Site Scripting (XSS) in TelegAI (telegai.com) 2025-05-26 in its chat component and character container component.
- CVE-2025-51862Insecure Direct Object Reference (IDOR) vulnerability in TelegAI (telegai.com) thru 2025-05-26 in its chat component.
- CVE-2025-51863Self Cross Site Scripting (XSS) vulnerability in ChatGPT Unli (ChatGPTUnli.com) thru 2025-05-26 allows attackers to execute arbitrary code v
- CVE-2025-51864A reflected cross-site scripting (XSS) vulnerability exists in AIBOX LLM chat (chat.aibox365.cn) through 2025-05-27, allowing attackers to h
- CVE-2025-51867Insecure Direct Object Reference (IDOR) vulnerability in Deepfiction AI (deepfiction.ai) thru June 3, 2025, allowing attackers to chat with