Skip to content
OpenAdvisories

Archive

11 July 2025

Vulnerabilities first published on this day (UTC), newest first.

← June 2025 2025 / July /11 August 2025 →
  1. 189
  2. 284
  3. 3149
  4. 4187
  5. 58
  6. 628
  7. 7175
  8. 8440
  9. 9110
  10. 10214
  11. 1196
  12. 1249
  13. 1349
  14. 14127
  15. 15156
  16. 16190
  17. 1789
  18. 18110
  19. 1946
  20. 2066
  21. 21237
  22. 22119
  23. 2394
  24. 2478
  25. 25219
  26. 2645
  27. 2741
  28. 28124
  29. 29175
  30. 3088
  31. 31114
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.2
    CVE-2025-7026 Public exploit

    SMM Arbitrary Write via Unchecked RBX Pointer in CommandRcx0

    A vulnerability in the Software SMI handler (SwSmiInputValue 0xB2) allows a local attacker to control the RBX register, which is used as an unchecked pointer in the CommandRcx0 function. If the contents at RBX match certain expected values (e.g., '$DB$' or '2…

    GIGABYTE UEFI-GenericComponentSmmEntry
  • High 8.2
    CVE-2025-7029 Public exploit

    SMM Arbitrary Write via Unchecked OcHeader Buffer in Platform Configuration Handler

    A vulnerability in the Software SMI handler (SwSmiInputValue 0xB2) allows a local attacker to control the RBX register, which is used to derive pointers (OcHeader, OcData) passed into power and thermal configuration logic. These buffers are not validated befo…

    GIGABYTE UEFI-OverClockSmiHandler
  • Medium 5.3
    CVE-2025-48924 Public exploit

    Apache Commons Lang, Apache Commons Lang: ClassUtils.getClass(...) can throw a StackOverflowError on very long inputs

    Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang: Starting with commons-lang:commons-lang 2.0 to 2.6, and, from org.apache.commons:commons-lang3 3.0 before 3.18.0. The methods ClassUtils.getClass(...) can thr…

    Apache Software Foundation Apache Commons Lang druid thingsboard-tb-node Debian Ubuntu Azure Linux Wolfi Maven
  • Critical 9.8
    CVE-2025-7401 Public exploit

    Premium Age Verification / Restriction for WordPress <= 3.0.2 - Unauthenticated Arbitrary File Read and Write via remote_tunnel.php

    The Premium Age Verification / Restriction for WordPress plugin for WordPress is vulnerable to arbitrary file read and write due to the existence of an insufficiently protected remote support functionality in remote_tunnel.php in all versions up to, and inclu…

    AA-Team Premium Age Verification / Restriction for WordPress Web / CMS
  • High 8.3
    CVE-2013-3307 Public exploit EPSS 63%

    Linksys E1000 devices through 2.1.02, E1200 devices before 2.0.05, and E3200 devices through 1.0.04 allow OS command in…

    Linksys E3200 E1000 E1200
  • High 8.8
    CVE-2025-52089 Public exploit

    A hidden remote support feature protected by a static secret in TOTOLINK N300RB firmware version 8.54 allows an authent…

  • Low 3.7
    CVE-2025-51591 Public exploit

    A Server-Side Request Forgery (SSRF) in JGM Pandoc v3.6.4 allows attackers to gain access to and compromise the whole i…

    pandoc pandoc Debian Ubuntu