Skip to content
OpenAdvisories

Archive

2 July 2025

Vulnerabilities first published on this day (UTC), newest first.

← June 2025 2025 / July /2 August 2025 →
  1. 189
  2. 284
  3. 3149
  4. 4187
  5. 58
  6. 628
  7. 7175
  8. 8440
  9. 9110
  10. 10214
  11. 1196
  12. 1249
  13. 1349
  14. 14127
  15. 15156
  16. 16190
  17. 1789
  18. 18110
  19. 1946
  20. 2066
  21. 21237
  22. 22119
  23. 2394
  24. 2478
  25. 25219
  26. 2645
  27. 2741
  28. 28124
  29. 29175
  30. 3088
  31. 31114
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.4
    CVE-2025-34074 Public exploit

    Lucee Admin Interface Authenticated Remote Code Execution via Scheduled Job File Write

    An authenticated remote code execution vulnerability exists in Lucee’s administrative interface due to insecure design in the scheduled task functionality. An administrator with access to /lucee/admin/web.cfm can configure a scheduled job to retrieve a remote…

    Lucee Association Switzerland Lucee
  • Critical 10.0
    CVE-2025-34073 Public exploit Scanner template

    stamparm/maltrail <=0.54 Remote Command Execution

    An unauthenticated command injection vulnerability exists in stamparm/maltrail (Maltrail) versions <=0.54. A remote attacker can execute arbitrary operating system commands via the username parameter in a POST request to the /login endpoint. This occurs due t…

    stamparm maltrail
  • Critical 9.4
    CVE-2025-34071 Public exploit

    GFI Kerio Control Unsigned System Image Upload Root Code Execution

    A remote code execution vulnerability in GFI Kerio Control 9.4.5 allows attackers with administrative access to upload and execute arbitrary code through the firmware upgrade feature. The system upgrade mechanism accepts unsigned .img files, which can be modi…

    GFI Software Kerio Control
  • Critical 9.5
    CVE-2025-34069 Public exploit

    GFI Kerio Control GFIAgent Authentication Bypass via Proxy Forwarding

    An authentication bypass vulnerability exists in GFI Kerio Control 9.4.5 due to insecure default proxy configuration and weak access control in the GFIAgent service. The non-transparent proxy on TCP port 3128 can be used to forward unauthenticated requests to…

    GFI Software Kerio Control