Skip to content
OpenAdvisories

Archive

6 July 2025

Vulnerabilities first published on this day (UTC), newest first.

← June 2025 2025 / July /6 August 2025 →
  1. 189
  2. 284
  3. 3149
  4. 4187
  5. 58
  6. 628
  7. 7175
  8. 8440
  9. 9110
  10. 10214
  11. 1196
  12. 1249
  13. 1349
  14. 14127
  15. 15156
  16. 16190
  17. 1789
  18. 18110
  19. 1946
  20. 2066
  21. 21237
  22. 22119
  23. 2394
  24. 2478
  25. 25219
  26. 2645
  27. 2741
  28. 28124
  29. 29175
  30. 3088
  31. 31114
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 5.6
    CVE-2025-7099

    BoyunCMS Installation install2.php deserialization

    A vulnerability has been found in BoyunCMS up to 1.21 on PHP7 and classified as critical. Affected by this vulnerability is an unknown functionality of the file install/install2.php of the component Installation Handler. The manipulation of the argument db_ho…

  • Medium 5.6
    CVE-2025-7098

    Comodo Internet Security Premium File Name path traversal

    A vulnerability, which was classified as critical, was found in Comodo Internet Security Premium 12.3.4.8162. Affected is an unknown function of the component File Name Handler. The manipulation of the argument name/folder leads to path traversal. It is possi…

    Comodo Internet Security Premium
  • Medium 5.0
    CVE-2025-3108

    Unsafe Deserialization in JsonPickleSerializer Enables Remote Code Execution in run-llama/llama_index

    A critical deserialization vulnerability exists in the run-llama/llama_index library's JsonPickleSerializer component, affecting versions v0.12.27 through v0.12.40. This vulnerability allows remote code execution due to an insecure fallback to Python's pickle…

    run-llama run-llama/llama_index llama-index llama-index-core PyPI
  • Medium 6.3
    CVE-2025-7083 EPSS 47%

    Belkin F9K1122 webs mp os command injection

    A vulnerability was found in Belkin F9K1122 1.00.33. It has been classified as critical. This affects the function mp of the file /goform/mp of the component webs. The manipulation of the argument command leads to os command injection. It is possible to initi…

    Belkin F9K1122
  • Medium 6.3
    CVE-2025-7082 EPSS 18%

    Belkin F9K1122 webs formBSSetSitesurvey os command injection

    A vulnerability was found in Belkin F9K1122 1.00.33 and classified as critical. Affected by this issue is the function formBSSetSitesurvey of the file /goform/formBSSetSitesurvey of the component webs. The manipulation of the argument wan_ipaddr/wan_netmask/w…

    Belkin F9K1122
  • Medium 6.3
    CVE-2025-7081 EPSS 20%

    Belkin F9K1122 webs formSetWanStatic os command injection

    A vulnerability has been found in Belkin F9K1122 1.00.33 and classified as critical. Affected by this vulnerability is the function formSetWanStatic of the file /goform/formSetWanStatic of the component webs. The manipulation of the argument m_wan_ipaddr/m_wa…

    Belkin F9K1122
  • Medium 4.3
    CVE-2025-7078

    07FLYCMS/07FLY-CMS/07FlyCRM cross-site request forgery

    A vulnerability classified as problematic was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.3.9. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disc…

  • Medium 5.4
    CVE-2025-7076

    BlackVue Dashcam 590X Configuration upload.cgi access control

    A vulnerability was found in BlackVue Dashcam 590X up to 20250624. It has been rated as critical. Affected by this issue is some unknown functionality of the file /upload.cgi of the component Configuration Handler. The manipulation leads to improper access co…

    BlackVue Dashcam 590X