# CVEs published 2025-07-29

174 CVEs were published on July 29, 2025: 31 critical, 53 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2025-43191](https://cve.now/CVE-2025-43191.md): A path handling issue was addressed with improved validation. (CVSS 6.2, Apple macOS)
- [CVE-2025-43237](https://cve.now/CVE-2025-43237.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 9.8, Apple macOS)
- [CVE-2025-43197](https://cve.now/CVE-2025-43197.md): This issue was addressed with additional entitlement checks. (CVSS 4.0, Apple macOS)
- [CVE-2025-43206](https://cve.now/CVE-2025-43206.md): A parsing issue in the handling of directory paths was addressed with improved path validation. (CVSS 4.0, Apple macOS)
- [CVE-2025-43196](https://cve.now/CVE-2025-43196.md): A path handling issue was addressed with improved validation. (CVSS 7.8, Apple macOS)
- [CVE-2025-43265](https://cve.now/CVE-2025-43265.md): An out-of-bounds read was addressed with improved input validation. (CVSS 4.0, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2025-43233](https://cve.now/CVE-2025-43233.md): This issue was addressed with improved access restrictions. (CVSS 9.8, Apple macOS)
- [CVE-2025-43218](https://cve.now/CVE-2025-43218.md): An out-of-bounds read was addressed with improved input validation. (CVSS 5.5, Apple macOS)
- [CVE-2025-24188](https://cve.now/CVE-2025-24188.md): A logic issue was addressed with improved checks. (CVSS 6.5, Apple Safari · Apple macOS)
- [CVE-2025-43216](https://cve.now/CVE-2025-43216.md): A use-after-free issue was addressed with improved memory management. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +5)
- [CVE-2025-43186](https://cve.now/CVE-2025-43186.md): The issue was addressed with improved memory handling. (CVSS 9.8, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2025-43217](https://cve.now/CVE-2025-43217.md): The issue was addressed by adding additional logic. (CVSS 4.0, Apple iOS and iPadOS · Apple iPadOS)
- [CVE-2025-43276](https://cve.now/CVE-2025-43276.md): A logic error was addressed with improved error handling. (CVSS 5.3, Apple macOS)
- [CVE-2025-31276](https://cve.now/CVE-2025-31276.md): This issue was addressed through improved state management. (CVSS 5.3, Apple iOS and iPadOS · Apple iPadOS)
- [CVE-2025-43260](https://cve.now/CVE-2025-43260.md): This issue was addressed with improved data protection. (CVSS 5.1, Apple macOS)
- [CVE-2025-43247](https://cve.now/CVE-2025-43247.md): A permissions issue was addressed with additional restrictions. (CVSS 5.5, Apple macOS)
- [CVE-2025-43230](https://cve.now/CVE-2025-43230.md): The issue was addressed with additional permissions checks. (CVSS 4.0, Apple iOS and iPadOS · Apple iPadOS +4)
- [CVE-2025-43226](https://cve.now/CVE-2025-43226.md): An out-of-bounds read was addressed with improved input validation. (CVSS 4.0, Apple iOS and iPadOS · Apple iPadOS +4)
- [CVE-2025-24224](https://cve.now/CVE-2025-24224.md): The issue was addressed with improved checks. (CVSS 7.5, Apple iOS and iPadOS · Apple iPadOS +4)
- [CVE-2025-43227](https://cve.now/CVE-2025-43227.md): This issue was addressed through improved state management. (CVSS 7.5, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2025-43270](https://cve.now/CVE-2025-43270.md): An access issue was addressed with additional sandbox restrictions. (CVSS 8.8, Apple macOS)
- [CVE-2025-43266](https://cve.now/CVE-2025-43266.md): A permissions issue was addressed with additional restrictions. (CVSS 5.1, Apple macOS)
- [CVE-2025-43211](https://cve.now/CVE-2025-43211.md): The issue was addressed with improved memory handling. (CVSS 6.2, Apple Safari · Apple iOS and iPadOS +5)
- [CVE-2025-43250](https://cve.now/CVE-2025-43250.md): A path handling issue was addressed with improved validation. (CVSS 4.0, Apple macOS)
- [CVE-2025-43245](https://cve.now/CVE-2025-43245.md): A downgrade issue was addressed with additional code-signing restrictions. (CVSS 9.8, Apple macOS)
- [CVE-2025-43212](https://cve.now/CVE-2025-43212.md): The issue was addressed with improved memory handling. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2025-43253](https://cve.now/CVE-2025-43253.md): This issue was addressed with improved input validation. (CVSS 9.8, Apple macOS)
- [CVE-2025-43195](https://cve.now/CVE-2025-43195.md): An issue existed in the handling of environment variables. (CVSS 5.5, Apple macOS)
- [CVE-2025-43228](https://cve.now/CVE-2025-43228.md): The issue was addressed with improved UI. (CVSS 4.3, Apple Safari · Apple iOS and iPadOS)
- [CVE-2025-43249](https://cve.now/CVE-2025-43249.md): A logic issue was addressed with improved checks. (CVSS 7.8, Apple macOS)
- [CVE-2025-43199](https://cve.now/CVE-2025-43199.md): A permissions issue was addressed by removing the vulnerable code. (CVSS 9.8, Apple macOS)
- [CVE-2025-43224](https://cve.now/CVE-2025-43224.md): An out-of-bounds access issue was addressed with improved bounds checking. (CVSS 7.1, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2025-43232](https://cve.now/CVE-2025-43232.md): A permissions issue was addressed with additional restrictions. (CVSS 9.8, Apple macOS)
- [CVE-2025-43198](https://cve.now/CVE-2025-43198.md): This issue was addressed by removing the vulnerable code. (CVSS 9.8, Apple macOS)
- [CVE-2025-43209](https://cve.now/CVE-2025-43209.md): An out-of-bounds access issue was addressed with improved bounds checking. (CVSS 9.8, Apple iOS and iPadOS · Apple iPadOS +4)
- [CVE-2025-24119](https://cve.now/CVE-2025-24119.md): This issue was addressed through improved state management. (CVSS 7.8, Apple macOS)
- [CVE-2025-43194](https://cve.now/CVE-2025-43194.md): The issue was addressed with improved checks. (CVSS 9.8, Apple macOS)
- [CVE-2025-43252](https://cve.now/CVE-2025-43252.md): This issue was addressed by adding an additional prompt for user consent. (CVSS 6.5, Apple macOS)
- [CVE-2025-43244](https://cve.now/CVE-2025-43244.md): A race condition was addressed with improved state handling. (CVSS 9.8, Apple macOS)
- [CVE-2025-43259](https://cve.now/CVE-2025-43259.md): This issue was addressed with improved redaction of sensitive information. (CVSS 4.6, Apple macOS)
- [CVE-2025-43275](https://cve.now/CVE-2025-43275.md): A race condition was addressed with additional validation. (CVSS 9.8, Apple macOS)
- [CVE-2025-43234](https://cve.now/CVE-2025-43234.md): Multiple memory corruption issues were addressed with improved input validation. (CVSS 9.8, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2025-43185](https://cve.now/CVE-2025-43185.md): A downgrade issue was addressed with additional code-signing restrictions. (CVSS 5.5, Apple macOS)
- [CVE-2025-43214](https://cve.now/CVE-2025-43214.md): The issue was addressed with improved memory handling. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2025-31243](https://cve.now/CVE-2025-31243.md): A permissions issue was addressed with additional restrictions. (CVSS 7.8, Apple macOS)
- [CVE-2025-31280](https://cve.now/CVE-2025-31280.md): A memory corruption issue was addressed with improved validation. (CVSS 7.8, Apple macOS)
- [CVE-2025-31278](https://cve.now/CVE-2025-31278.md): The issue was addressed with improved memory handling. (CVSS 8.8, Apple Safari · Apple iOS and iPadOS +5)
- [CVE-2025-43215](https://cve.now/CVE-2025-43215.md): The issue was addressed with improved checks. (CVSS 5.5, Apple macOS)
- [CVE-2025-43188](https://cve.now/CVE-2025-43188.md): A permissions issue was addressed with additional restrictions. (CVSS 7.8, Apple macOS)
- [CVE-2025-8319](https://cve.now/CVE-2025-8319.md): the BMA login interface allows arbitrary JavaScript or HTML to be written straight into the page’s Document Object Model via the error= URL (CVSS 6.1, Barracuda Message Archiver)
- [CVE-2025-43261](https://cve.now/CVE-2025-43261.md): A logic issue was addressed with improved checks. (CVSS 9.8, Apple macOS)
- [CVE-2025-31277](https://cve.now/CVE-2025-31277.md): The issue was addressed with improved memory handling. (CVSS 8.8, KEV, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2025-43277](https://cve.now/CVE-2025-43277.md): The issue was addressed with improved memory handling. (CVSS 7.8, Apple iOS and iPadOS · Apple macOS +3)
- [CVE-2025-43220](https://cve.now/CVE-2025-43220.md): This issue was addressed with improved validation of symlinks. (CVSS 9.8, Apple iPadOS · Apple macOS)
- [CVE-2025-43241](https://cve.now/CVE-2025-43241.md): A permissions issue was addressed with additional restrictions. (CVSS 5.5, Apple macOS)
- [CVE-2025-43240](https://cve.now/CVE-2025-43240.md): A logic issue was addressed with improved checks. (CVSS 6.2, Apple Safari · Apple macOS)
- [CVE-2025-43256](https://cve.now/CVE-2025-43256.md): This issue was addressed through improved state management. (CVSS 7.8, Apple macOS)
- [CVE-2025-43221](https://cve.now/CVE-2025-43221.md): An out-of-bounds access issue was addressed with improved bounds checking. (CVSS 7.1, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2025-43251](https://cve.now/CVE-2025-43251.md): An authorization issue was addressed with improved state management. (CVSS 5.5, Apple macOS)
- [CVE-2025-43267](https://cve.now/CVE-2025-43267.md): An injection issue was addressed with improved validation. (CVSS 5.5, Apple macOS)
- [CVE-2025-43246](https://cve.now/CVE-2025-43246.md): This issue was addressed with improved checks. (CVSS 5.5, Apple macOS)
- [CVE-2025-43273](https://cve.now/CVE-2025-43273.md): A permissions issue was addressed with additional sandbox restrictions. (CVSS 9.1, Apple macOS)
- [CVE-2025-31273](https://cve.now/CVE-2025-31273.md): The issue was addressed with improved memory handling. (CVSS 8.8, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2025-43225](https://cve.now/CVE-2025-43225.md): A logging issue was addressed with improved data redaction. (CVSS 5.5, Apple iPadOS · Apple macOS)
- [CVE-2025-43248](https://cve.now/CVE-2025-43248.md): A logic issue was addressed with improved restrictions. (CVSS 7.8, Apple macOS)
- [CVE-2025-31229](https://cve.now/CVE-2025-31229.md): A logic issue was addressed with improved checks. (CVSS 9.1, Apple iOS and iPadOS)
- [CVE-2025-43229](https://cve.now/CVE-2025-43229.md): This issue was addressed through improved state management. (CVSS 6.1, Apple Safari · Apple macOS)
- [CVE-2025-43213](https://cve.now/CVE-2025-43213.md): The issue was addressed with improved memory handling. (CVSS 6.5, Apple Safari · Apple iOS and iPadOS +4)
- [CVE-2025-43189](https://cve.now/CVE-2025-43189.md): This issue was addressed with improved memory handling. (CVSS 9.8, Apple macOS)
- [CVE-2025-43222](https://cve.now/CVE-2025-43222.md): A use-after-free issue was addressed by removing the vulnerable code. (CVSS 9.8, Apple iPadOS · Apple macOS)
- [CVE-2025-31275](https://cve.now/CVE-2025-31275.md): A permissions issue was addressed with additional restrictions. (CVSS 6.2, Apple macOS)
- [CVE-2025-43243](https://cve.now/CVE-2025-43243.md): A permissions issue was addressed with additional restrictions. (CVSS 9.8, Apple macOS)
- [CVE-2025-43193](https://cve.now/CVE-2025-43193.md): The issue was addressed with improved memory handling. (CVSS 9.8, Apple macOS)
- [CVE-2025-31279](https://cve.now/CVE-2025-31279.md): A permissions issue was addressed with additional restrictions. (CVSS 9.8, Apple iPadOS · Apple macOS)
- [CVE-2025-43239](https://cve.now/CVE-2025-43239.md): An out-of-bounds access issue was addressed with improved bounds checking. (CVSS 7.1, Apple macOS)
- [CVE-2025-31281](https://cve.now/CVE-2025-31281.md): An input validation issue was addressed with improved memory handling. (CVSS 9.1, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2025-43192](https://cve.now/CVE-2025-43192.md): A configuration issue was addressed with additional restrictions. (CVSS 9.8, Apple macOS)
- [CVE-2025-43254](https://cve.now/CVE-2025-43254.md): An out-of-bounds read was addressed with improved input validation. (CVSS 7.1, Apple macOS)
- [CVE-2025-43184](https://cve.now/CVE-2025-43184.md): This issue was addressed by adding an additional prompt for user consent. (CVSS 9.8, Apple macOS)
- [CVE-2025-43235](https://cve.now/CVE-2025-43235.md): The issue was addressed with improved memory handling. (CVSS 5.5, Apple macOS)
- [CVE-2025-43274](https://cve.now/CVE-2025-43274.md): A privacy issue was addressed by removing the vulnerable code. (CVSS 4.4, Apple macOS)
- [CVE-2025-43223](https://cve.now/CVE-2025-43223.md): A denial-of-service issue was addressed with improved input validation. (CVSS 7.5, Apple iOS and iPadOS · Apple iPadOS +4)
- [CVE-2025-54381](https://cve.now/CVE-2025-54381.md): BentoML is Vulnerable to an SSRF Attack Through File Upload Processing (CVSS 9.9, BentoML)
- [CVE-2025-54126](https://cve.now/CVE-2025-54126.md): WebAssembly Micro Runtime's \`--addr-pool\` option allows all IPv4 addresses when subnet mask is not specified (CVSS 6.9, bytecodealliance wasm-micro-runtime)
- [CVE-2025-7849](https://cve.now/CVE-2025-7849.md): Memory Corruption Issue in NI LabVIEW due to improper error handling (CVSS 7.8, NI LabVIEW)
- [CVE-2025-7848](https://cve.now/CVE-2025-7848.md): Missing input check in lvpict.cpp used in NI LabVIEW (CVSS 7.8, NI LabVIEW)
- [CVE-2025-7361](https://cve.now/CVE-2025-7361.md): Code Injection Vulnerability in NI LabVIEW when using CIN nodes (CVSS 7.8, NI LabVIEW)
- [CVE-2025-4674](https://cve.now/CVE-2025-4674.md): Unexpected command execution in untrusted VCS repositories in cmd/go (CVSS 8.6, Go toolchain cmd/go · toolchain)
- [CVE-2025-40600](https://cve.now/CVE-2025-40600.md): Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause (CVSS 9.8, SonicWall SonicOS)
- [CVE-2025-5684](https://cve.now/CVE-2025-5684.md): MetForm \<= 4.0.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via \`mf-template\` DOM Element (CVSS 6.4, roxnor MetForm – Contact Form, Survey, Quiz, & Custom Form…)
- [CVE-2025-53902](https://cve.now/CVE-2025-53902.md): Tuleap exposes artifacts to a mentioned user via email notifications (CVSS 4.3, Enalean tuleap)
- [CVE-2025-53541](https://cve.now/CVE-2025-53541.md): Tuleap is vulnerable to XSS attacks when displaying the children of a parent artifact (CVSS 5.4, Enalean tuleap)
- [CVE-2025-53102](https://cve.now/CVE-2025-53102.md): Discourse's WebAuthn challenge isn't cleared from user session after authentication (CVSS 8.2, discourse)
- [CVE-2025-52899](https://cve.now/CVE-2025-52899.md): Tuleap vulnerable to user enumeration via the lost password form (CVSS 5.3, Enalean tuleap)
- [CVE-2024-49828](https://cve.now/CVE-2024-49828.md): IBM Db2 for Linux, UNIX and Windows denial of service (CVSS 6.5, IBM Db2)
- [CVE-2024-51473](https://cve.now/CVE-2024-51473.md): IBM Db2 for Linux, UNIX and Windows denial of service (CVSS 6.5, IBM Db2)
- [CVE-2024-52894](https://cve.now/CVE-2024-52894.md): IBM Db2 for Linux, UNIX and Windows denial of service (CVSS 4.9, IBM Db2)
- [CVE-2025-33114](https://cve.now/CVE-2025-33114.md): IBM Db2 for Linux denial of service (CVSS 5.3, IBM Db2)
- [CVE-2025-33092](https://cve.now/CVE-2025-33092.md): IBM Db2 for Linux code execution (CVSS 7.8, IBM Db2)
- [CVE-2025-36071](https://cve.now/CVE-2025-36071.md): IBM Db2 denial of service (CVSS 6.5, IBM Db2)
- [CVE-2025-36010](https://cve.now/CVE-2025-36010.md): IBM Db2 for Linux denial of service (CVSS 6.5, IBM Db2)
- [CVE-2025-53715](https://cve.now/CVE-2025-53715.md): TP-Link TL-WR841N Wan6to4TunnelCfgRpm.htm buffer overflow (CVSS 6.9, TP-Link Systems TL-WR841N)
- [CVE-2025-53714](https://cve.now/CVE-2025-53714.md): TP-Link TL-WR841N WzdWlanSiteSurveyRpm\_AP.htm buffer overflow (CVSS 6.9, TP-Link Systems TL-WR841N)
- [CVE-2025-53713](https://cve.now/CVE-2025-53713.md): TP-Link TL-WR841N WlanNetworkRpm\_APC.htm buffer overflow (CVSS 6.9, TP-Link Systems TL-WR841N)
- [CVE-2025-53712](https://cve.now/CVE-2025-53712.md): TP-Link TL-WR841N WlanNetworkRpm\_AP.htm buffer overflow (CVSS 6.9, TP-Link Systems TL-WR841N)
- [CVE-2025-7675](https://cve.now/CVE-2025-7675.md): 3DM File Parsing Out-of-Bounds Write Vulnerability (CVSS 7.8, Autodesk Shared Components · Autodesk AutoCAD)
- [CVE-2025-53711](https://cve.now/CVE-2025-53711.md): TP-Link TL-WR841N, TL-WR842ND and TL-WR949N WlanNetworkRpm.htm buffer overflow (CVSS 6.9, TP-Link Systems TL-WR841N · TP Link Systems TL-WR842ND +1)
- [CVE-2025-7497](https://cve.now/CVE-2025-7497.md): PRT File Parsing Out-of-Bounds Write Vulnerability (CVSS 7.8, Autodesk Shared Components)
- [CVE-2025-6637](https://cve.now/CVE-2025-6637.md): PRT File Parsing Out-of-Bounds Write Vulnerability (CVSS 7.8, Autodesk Shared Components)
- [CVE-2025-6636](https://cve.now/CVE-2025-6636.md): PRT File Parsing Use-After-Free Vulnerability (CVSS 7.8, Autodesk Shared Components)
- [CVE-2025-6635](https://cve.now/CVE-2025-6635.md): PRT File Parsing Out-of-Bounds Read Vulnerability (CVSS 7.8, Autodesk Shared Components)
- [CVE-2025-6631](https://cve.now/CVE-2025-6631.md): PRT File Parsing Out-of-Bounds Write Vulnerability (CVSS 7.8, Autodesk Shared Components)
- [CVE-2025-5043](https://cve.now/CVE-2025-5043.md): 3DM File Parsing Heap-Based Overflow Vulnerability (CVSS 7.8, Autodesk Shared Components · Autodesk AutoCAD)
- [CVE-2025-5038](https://cve.now/CVE-2025-5038.md): X\_T File Parsing Memory Corruption Vulnerability (CVSS 7.8, Autodesk Shared Components · Autodesk AutoCAD)
- [CVE-2025-2928](https://cve.now/CVE-2025-2928.md): SQL Injection affecting the Archiver role. (CVSS 7.2, Genetec Security Center)
- [CVE-2025-2533](https://cve.now/CVE-2025-2533.md): IBM Db2 for Linux denial of service (CVSS 5.3, IBM Db2)
- [CVE-2025-27514](https://cve.now/CVE-2025-27514.md): GLPI is susceptible to Stored XSS attack through project's kanban (CVSS 4.5, glpi-project glpi)
- [CVE-2025-2179](https://cve.now/CVE-2025-2179.md): GlobalProtect App: Non Admin User Can Disable the GlobalProtect App (CVSS 6.8, Palo Alto Networks GlobalProtect App · Palo Alto Networks G…)
- [CVE-2025-5922](https://cve.now/CVE-2025-5922.md): Retrievable password hash protecting TSplus admin console (CVSS 4.8, TSplus Remote Access)
- [CVE-2025-31965](https://cve.now/CVE-2025-31965.md): HCL BigFix Remote Control is affected by an authorization bypass vulnerability (CVSS 8.2, HCL Software BigFix Remote Control)
- [CVE-2025-6505](https://cve.now/CVE-2025-6505.md): Unauthorized access and impersonation can occur in versions 4.6.2.3226 and below of Progress Software's Hybrid Data Pipeline Server on Linux (CVSS 8.1, Progress Software Hybrid Data Pipeline)
- [CVE-2025-6504](https://cve.now/CVE-2025-6504.md): Possibilities of IP Spoofing via X-Forwarded-For (XFF) Header (CVSS 8.4, Progress Software Hybrid Data Pipeline)
- [CVE-2025-54422](https://cve.now/CVE-2025-54422.md): Sandboxie exposes encrypted sandbox key during password change (CVSS 6.9, sandboxie-plus Sandboxie)
- [CVE-2025-7458](https://cve.now/CVE-2025-7458.md): SQLite integer overflow in key info allocation may lead to information disclosure. (CVSS 6.9, SQLite)
- [CVE-2025-6060](https://cve.now/CVE-2025-6060.md): XSS in DECE Software's Geodi (CVSS 5.4, DECE Software Geodi)
- [CVE-2025-41241](https://cve.now/CVE-2025-41241.md): Denial-of-service vulnerability (CVSS 4.4, VMware vCenter · VMware Cloud Foundation +2)
- [CVE-2025-6175](https://cve.now/CVE-2025-6175.md): CRLF Injection in DECE Software's Geodi (CVSS 7.2, DECE Software Geodi)
- [CVE-2025-40686](https://cve.now/CVE-2025-40686.md): Reflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management System (CVSS 4.8, Human Resource Management System)
- [CVE-2025-40685](https://cve.now/CVE-2025-40685.md): Reflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management System (CVSS 4.8, Human Resource Management System)
- [CVE-2025-40684](https://cve.now/CVE-2025-40684.md): Reflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management System (CVSS 4.8, Human Resource Management System)
- [CVE-2025-40683](https://cve.now/CVE-2025-40683.md): Reflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management System (CVSS 4.8, Human Resource Management System)
- [CVE-2025-40682](https://cve.now/CVE-2025-40682.md): SQL injection vulnerability in Human Resource Management System (CVSS 8.7, Human Resource Management System)
- [CVE-2025-5587](https://cve.now/CVE-2025-5587.md): Appzend \<= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via progressbarLayout Parameter (CVSS 6.4, sparklewpthemes Appzend)
- [CVE-2025-6692](https://cve.now/CVE-2025-6692.md): YouTube Embed \<= 10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via instance Parameter (CVSS 6.4, hanucodes YouTube Embed – YouTube Gallery, Vimeo Gallery –…)
- [CVE-2025-7689](https://cve.now/CVE-2025-7689.md): Hydra Booking 1.1.0 - 1.1.18 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via tfhb\_reset\_password\_callback Function (CVSS 8.8, themefic Hydra Booking – All in One Appointment Booking Sys…)
- [CVE-2025-6681](https://cve.now/CVE-2025-6681.md): Fan Page \<= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter (CVSS 6.4, delower186 Fan Page)
- [CVE-2025-8196](https://cve.now/CVE-2025-8196.md): Magical Addons For Elementor \<= 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes (CVSS 6.4, nalam-1 Magical Addons For Elementor)
- [CVE-2025-6730](https://cve.now/CVE-2025-6730.md): Bonanza – WooCommerce Free Gifts Lite \<= 1.0.0 - Missing Authorization to Authenticated (Subscriber+) Opt In Success (CVSS 4.3, amans2k Bonanza – WooCommerce Free Gifts Lite)
- [CVE-2025-8216](https://cve.now/CVE-2025-8216.md): Sky Addons for Elementor \<= 3.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets (CVSS 6.4, wowdevs Sky Addons – Elementor Addons with Widgets & Templa…)
- [CVE-2025-26400](https://cve.now/CVE-2025-26400.md): SolarWinds Web Help Desk XML External Entity Injection (XXE) Vulnerability (CVSS 5.3, SolarWinds Web Help Desk)
- [CVE-2025-53082](https://cve.now/CVE-2025-53082.md): An 'Arbitrary File Deletion' in Samsung DMS(Data Management Server) allows attackers to delete arbitrary files from unintended locations on (CVSS 6.1, Samsung Electronics Data Management Server)
- [CVE-2025-53081](https://cve.now/CVE-2025-53081.md): An 'Arbitrary File Creation' in Samsung DMS(Data Management Server) allows attackers to create arbitrary files in unintended locations on th (CVSS 6.4, Samsung Electronics Data Management Server)
- [CVE-2025-53080](https://cve.now/CVE-2025-53080.md): Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Samsung DMS(Data Management Server) allows authenticated a (CVSS 7.1, Samsung Electronics Data Management Server)
- [CVE-2025-53079](https://cve.now/CVE-2025-53079.md): Absolute Path Traversal in Samsung DMS(Data Management Server) allows authenticated attacker (Administrator) to read sensitive files (CVSS 4.9, Samsung Electronics Data Management Server)
- [CVE-2025-53078](https://cve.now/CVE-2025-53078.md): Deserialization of Untrusted Data in Samsung DMS(Data Management Server) allows attackers to execute arbitrary code via write file to system (CVSS 8.0, Samsung Electronics Data Management Server)
- [CVE-2025-53077](https://cve.now/CVE-2025-53077.md): An execution after redirect in Samsung DMS(Data Management Server) allows attackers to execute limited functions without permissions. (CVSS 6.5, Samsung Electronics DMS)
- [CVE-2025-8264](https://cve.now/CVE-2025-8264.md): Versions of the package z-push/z-push-dev before 2.7.6 are vulnerable to SQL Injection due to unparameterized queries in the IMAP backend. (CVSS 9.1, z-push/z-push-dev)
- [CVE-2025-53649](https://cve.now/CVE-2025-53649.md): "SwitchBot" App for iOS/Android contains an insertion of sensitive information into log file vulnerability in versions V6.24 through V9.12. (CVSS 5.1, SwitchBot App for iOS/Android)
- [CVE-2025-4370](https://cve.now/CVE-2025-4370.md): Brizy \<= 2.6.20 - Missing Authorization to Unauthenticated Limited File Upload (CVSS 5.3, themefusecom Brizy – Page Builder)
- [CVE-2025-4566](https://cve.now/CVE-2025-4566.md): Elementor \<= 3.30.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Path Widget (CVSS 6.4, elemntor Elementor Website Builder – more than just a page…)
- [CVE-2025-3075](https://cve.now/CVE-2025-3075.md): Elementor \<= 3.29.0 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, elemntor Elementor Website Builder – more than just a page…)
- [CVE-2025-6495](https://cve.now/CVE-2025-6495.md): Bricks Builder \<= 1.12.4 - Unauthenticated SQL Injection via \`p\` Parameter (CVSS 7.5, Bricks Builder Bricks)
- [CVE-2025-7811](https://cve.now/CVE-2025-7811.md): StreamWeasels YouTube Integration \<= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, StreamWeasels YouTube Integration)
- [CVE-2025-7809](https://cve.now/CVE-2025-7809.md): StreamWeasels Twitch Integration \<= 1.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, StreamWeasels Twitch Integration)
- [CVE-2025-7810](https://cve.now/CVE-2025-7810.md): StreamWeasels Kick Integration \<= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4, StreamWeasels Kick Integration)
- [CVE-2024-42644](https://cve.now/CVE-2024-42644.md): FlashMQ v1.14.0 was discovered to contain an assertion failure in the function PublishCopyFactory::getNewPublish, which occurs when the QoS (CVSS 7.5)
- [CVE-2024-42645](https://cve.now/CVE-2024-42645.md): An issue in FlashMQ v1.14.0 allows attackers to cause an assertion failure via sending a crafted retain message, leading to a Denial of Serv (CVSS 7.5)
- [CVE-2024-42651](https://cve.now/CVE-2024-42651.md): NanoMQ v0.17.9 was discovered to contain a heap use-after-free vulnerability via the component sub\_Ctx\_handle. (CVSS 7.5)
- [CVE-2024-42655](https://cve.now/CVE-2024-42655.md): An access control issue in NanoMQ v0.21.10 allows attackers to bypass security restrictions and access sensitive system topic messages using (CVSS 8.8)
- [CVE-2024-43018](https://cve.now/CVE-2024-43018.md): Piwigo 13.8.0 and below is vulnerable to SQL Injection in the parameters max\_level and min\_register. (CVSS 6.4)
- [CVE-2025-28170](https://cve.now/CVE-2025-28170.md): Grandstream Networks GXP1628 \<=1.0.4.130 is vulnerable to Incorrect Access Control. (CVSS 7.6)
- [CVE-2025-28171](https://cve.now/CVE-2025-28171.md): An issue in Grandstream UCM6510 v.1.0.20.52 and before allows a remote attacker to obtain sensitive information via the Login function at /c (CVSS 6.5)
- [CVE-2025-28172](https://cve.now/CVE-2025-28172.md): Grandstream Networks UCM6510 v1.0.20.52 and before is vulnerable to Improper Restriction of Excessive Authentication Attempts. (CVSS 6.5)
- [CVE-2025-44136](https://cve.now/CVE-2025-44136.md): MapTiler Tileserver-php v2.0 is vulnerable to Cross Site Scripting (XSS). (CVSS 9.8)
- [CVE-2025-44137](https://cve.now/CVE-2025-44137.md): MapTiler Tileserver-php v2.0 is vulnerable to Directory Traversal. (CVSS 8.2)
- [CVE-2025-45346](https://cve.now/CVE-2025-45346.md): SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request. (CVSS 8.1, bacula-web/bacula-web)
- [CVE-2025-46059](https://cve.now/CVE-2025-46059.md): langchain-ai v0.3.51 was discovered to contain an indirect prompt injection vulnerability in the GmailToolkit component. (CVSS 9.8)
- [CVE-2025-50738](https://cve.now/CVE-2025-50738.md): The Memos application, up to version v0.24.3, allows for the embedding of markdown images with arbitrary URLs. (CVSS 9.8, github.com/usememos/memos)
- [CVE-2025-51044](https://cve.now/CVE-2025-51044.md): phpgurukul Nipah virus (NiV) Testing Management System 1.0 contains a SQL injection vulnerability in the /new-user-testing.php file, due to (CVSS 6.5)
- [CVE-2025-51045](https://cve.now/CVE-2025-51045.md): Phpgurukul Pre-School Enrollment System 1.0 contains a SQL injection vulnerability in the /admin/password-recovery.php file. (CVSS 6.5)
- [CVE-2025-51970](https://cve.now/CVE-2025-51970.md): A SQL Injection vulnerability exists in the action.php endpoint of PuneethReddyHC Online Shopping System Advanced 1.0 due to improper saniti (CVSS 7.7)
- [CVE-2025-52284](https://cve.now/CVE-2025-52284.md): Totolink X6000R V9.4.0cu.1360\_B20241207 was found to contain a command injection vulnerability in the sub\_4184C0 function via the tz paramet (CVSS 6.5)
- [CVE-2025-52358](https://cve.now/CVE-2025-52358.md): A cross-site scripting vulnerability in Vivaldi United Group iCONTROL+ Server including Firmware version 4.7.8.0.eden Logic version 5.32 and (CVSS 6.3)
- [CVE-2025-52490](https://cve.now/CVE-2025-52490.md): An issue was discovered in Couchbase Sync Gateway before 3.2.6. (CVSS 7.3, couchbase · github.com/couchbase/sync\_gateway)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-07-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.