Skip to content
OpenAdvisories

Archive

1 July 2025

Vulnerabilities first published on this day (UTC), newest first.

← June 2025 2025 / July /1 August 2025 →
  1. 189
  2. 284
  3. 3149
  4. 4187
  5. 58
  6. 628
  7. 7175
  8. 8440
  9. 9110
  10. 10214
  11. 1196
  12. 1249
  13. 1349
  14. 14127
  15. 15156
  16. 16190
  17. 1789
  18. 18110
  19. 1946
  20. 2066
  21. 21237
  22. 22119
  23. 2394
  24. 2478
  25. 25219
  26. 2645
  27. 2741
  28. 28124
  29. 29175
  30. 3088
  31. 31114
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.4
    CVE-2025-49741 Public exploit

    Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

    No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

    Microsoft Microsoft Edge (Chromium-based) Browsers
  • Critical 9.1
    CVE-2025-53104 Public exploit

    gluestack-ui Command Injection Vulnerability via discussion-to-slack GitHub Action Workflow

    gluestack-ui is a library of copy-pasteable components & patterns crafted with Tailwind CSS (NativeWind). Prior to commit e6b4271, a command injection vulnerability was discovered in the discussion-to-slack.yml GitHub Actions workflow. Untrusted discussion fi…

    gluestack gluestack-ui
  • Medium 6.9
    CVE-2025-34065 Public exploit

    AVTECH IP camera, DVR, and NVR Devices Authentication Bypass via /nobody URL Path

    An authentication bypass vulnerability exists in AVTECH IP camera, DVR, and NVR devices’ streamd web server. The strstr() function allows unauthenticated access to any request containing "/nobody" in the URL, bypassing login controls.

    AVTECH IP camera, DVR, and NVR Devices
  • Critical 9.1
    CVE-2025-49029 Public exploit Scanner template

    WordPress Custom Login And Signup Widget plugin <= 1.0 - Arbitrary Code Execution vulnerability

    Improper Control of Generation of Code ('Code Injection') vulnerability in bitto.kazi Custom Login And Signup Widget custom-login-and-signup-widget allows Code Injection.This issue affects Custom Login And Signup Widget: from n/a through <= 1.0.

    bittokazi Custom Login And Signup Widget
  • Critical 10.0
    CVE-2025-41656 Public exploit EPSS 12%

    Pilz: Missing Authentication in Node-RED integration

    An unauthenticated remote attacker can run arbitrary commands on the affected devices with high privileges because the authentication for the Node_RED server is not configured by default.

    Pilz IndustrialPI 4 with Firmware Bullseye
  • Critical 9.8
    CVE-2025-6934 Public exploit Scanner template EPSS 25%

    Opal Estate Pro <= 1.7.5 - Unauthenticated Privilege Escalation via 'on_regiser_user'

    The Opal Estate Pro – Property Management and Submission plugin for WordPress, used by the FullHouse - Real Estate Responsive WordPress Theme, is vulnerable to privilege escalation via in all versions up to, and including, 1.7.5. This is due to a lack of role…

    wpopal Opal Estate Pro – Property Management and Submission Web / CMS