Skip to content
OpenAdvisories

Archive

5 July 2025

Vulnerabilities first published on this day (UTC), newest first.

← June 2025 2025 / July /5 August 2025 →
  1. 189
  2. 284
  3. 3149
  4. 4187
  5. 58
  6. 628
  7. 7175
  8. 8440
  9. 9110
  10. 10214
  11. 1196
  12. 1249
  13. 1349
  14. 14127
  15. 15156
  16. 16190
  17. 1789
  18. 18110
  19. 1946
  20. 2066
  21. 21237
  22. 22119
  23. 2394
  24. 2478
  25. 25219
  26. 2645
  27. 2741
  28. 28124
  29. 29175
  30. 3088
  31. 31114
All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • Medium 6.3
    CVE-2025-7075

    BlackVue Dashcam 590X HTTP Endpoint upload.cgi unrestricted upload

    A vulnerability was found in BlackVue Dashcam 590X up to 20250624. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /upload.cgi of the component HTTP Endpoint. The manipulation leads to unrestricted uplo…

    BlackVue Dashcam 590X
  • Medium 4.3
    CVE-2025-7074

    vercel hyper rimraf-standalone.js ignoreMap redos

    A vulnerability classified as problematic has been found in vercel hyper up to 3.4.1. This affects the function expand/braceExpand/ignoreMap of the file hyper/bin/rimraf-standalone.js. The manipulation leads to inefficient regular expression complexity. It is…

    vercel hyper
  • Medium 4.1
    CVE-2023-50786

    Dradis through 4.16.0 allows referencing external images (resources) over HTTPS, instead of forcing the use of embedded…

    dradisframework Dradis
  • Medium 5.9
    CVE-2025-53605

    Crash due to uncontrolled recursion in protobuf crate

    The protobuf crate before 3.7.2 for Rust allows uncontrolled recursion in the protobuf::coded_input_stream::CodedInputStream::skip_group parsing of unknown fields in untrusted input.

    stepancheg protobuf rust kata-containers Debian Ubuntu Azure Linux Wolfi crates.io
  • Medium 4.0
    CVE-2025-53604

    Rust Web Push is vulnerable to a DoS attack via a large integer in a Content-Length header

    The web-push crate before 0.10.3 for Rust allows a denial of service (memory consumption) in the built-in clients via a large integer in a Content-Length header.

    pimeys web-push web-push crates.io
  • High 7.5
    CVE-2025-53603

    In Alinto SOPE SOGo 2.0.2 through 5.12.2, sope-core/NGExtensions/NGHashMap.m allows a NULL pointer dereference and SOGo…

    Alinto SOPE sogo sope Debian Ubuntu
  • High 7.5
    CVE-2025-47227 Public exploit

    In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), the Administrator password reset m…

    ScriptCase ScriptCase
  • Medium 6.7
    CVE-2025-47228 Public exploit EPSS 23%

    In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), shell injection in the SSH connect…

    ScriptCase ScriptCase