Skip to content
OpenAdvisories

Archive

10 July 2025

Vulnerabilities first published on this day (UTC), newest first.

← June 2025 2025 / July /10 August 2025 →
  1. 189
  2. 284
  3. 3149
  4. 4187
  5. 58
  6. 628
  7. 7175
  8. 8440
  9. 9110
  10. 10214
  11. 1196
  12. 1249
  13. 1349
  14. 14127
  15. 15156
  16. 16190
  17. 1789
  18. 18110
  19. 1946
  20. 2066
  21. 21237
  22. 22119
  23. 2394
  24. 2478
  25. 25219
  26. 2645
  27. 2741
  28. 28124
  29. 29175
  30. 3088
  31. 31114
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 3.5
    CVE-2025-49462

    Zoom Clients - Cross-site Scripting

    Cross-site scripting in certain Zoom Clients before version 6.4.5 may allow an authenticated user to conduct a disclosure of information via network access.

    Zoom Communications Zoom Clients
  • Low 3.6
    CVE-2025-27613

    Gitk can create and truncate files in the user's home directory

    Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without additional command arguments, files for which the user has write permission can be created and truncated. The option Support per-…

    j6t gitk git git Debian Ubuntu Azure Linux Alpine
  • Low 3.5
    CVE-2025-7408

    SourceCodester Zoo Management System animal_form_template.php cross site scripting

    A vulnerability has been found in SourceCodester Zoo Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/templates/animal_form_template.php. The manipulation of the argument msg leads to cross site s…

    SourceCodester Zoo Management System
  • Low 2.7
    CVE-2025-4972

    Incorrect Authorization in GitLab

    An issue has been discovered in GitLab EE affecting all versions from 18.0 before 18.0.4 and 18.1 before 18.1.2 that could have allowed authenticated users with invitation privileges to bypass group-level user invitation restrictions by manipulating group inv…

    GitLab GitLab Web / CMS
  • Low 2.7
    CVE-2025-6168

    Incorrect Authorization in GitLab

    An issue has been discovered in GitLab EE affecting all versions from 18.0 before 18.0.4 and 18.1 before 18.1.2 that could have allowed authenticated maintainers to bypass group-level user invitation restrictions by sending crafted API requests.

    GitLab GitLab Web / CMS
  • Low 3.5
    CVE-2023-50458

    In Dradis before 4.11.0, the Output Console shows a job queue that may contain information about other users' jobs.

    dradisframework Dradis
  • Low 3.4
    CVE-2025-27889

    Wing FTP Server before 7.4.4 does not properly validate and sanitize the url parameter of the downloadpass.html endpoin…

    Wftpserver Wing FTP Server