Skip to content
OpenAdvisories

Archive

12 July 2025

Vulnerabilities first published on this day (UTC), newest first.

← June 2025 2025 / July /12 August 2025 →
  1. 189
  2. 284
  3. 3149
  4. 4187
  5. 58
  6. 628
  7. 7175
  8. 8440
  9. 9110
  10. 10214
  11. 1196
  12. 1249
  13. 1349
  14. 14127
  15. 15156
  16. 16190
  17. 1789
  18. 18110
  19. 1946
  20. 2066
  21. 21237
  22. 22119
  23. 2394
  24. 2478
  25. 25219
  26. 2645
  27. 2741
  28. 28124
  29. 29175
  30. 3088
  31. 31114
All Critical High Medium Low Exploited only Public exploit

49 results · Feed

  • High 8.8
    CVE-2025-1313

    Nokri - Job Board WordPress Theme <= 1.6.3 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover

    The Nokri - Job Board WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.6.3. This is due to the plugin not properly validating a user's identity prior to updating their detai…

    scriptsbundle Nokri – Job Board WordPress Theme Web / CMS
  • High 7.3
    CVE-2025-7461 Public exploit

    code-projects Modern Bag action.php sql injection

    A vulnerability was found in code-projects Modern Bag 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /action.php. The manipulation of the argument proId leads to sql injection. The attack may be launched remot…

    code-projects Modern Bag
  • High 8.8
    CVE-2025-6057

    WPBookit <= 1.0.4 - Authenticated (Subscriber+) Arbitrary File Upload

    The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the handle_image_upload() function in all versions up to, and including, 1.0.4. This makes it possible for authenticated attackers, with Subscribe…

    Iqonic Design WPBookit Web / CMS
  • Critical 9.8
    CVE-2025-6058 Public exploit Scanner template

    WPBookit <= 1.0.4 - Unauthenticated Arbitrary File Upload

    The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the image_upload_handle() function hooked via the 'add_booking_type' route in all versions up to, and including, 1.0.4. This makes it possible for…

    Iqonic Design WPBookit Web / CMS
  • Medium 4.9
    CVE-2023-39339

    A vulnerability exists on all versions of Ivanti Policy Secure below 22.6R1 where an authenticated administrator can pe…

    ivanti Policy Secure Network devices
  • Medium 6.8
    CVE-2023-39338

    Enables an authenticated user (enrolled device) to access a service protected by Sentry even if they are not authorized…

    ivanti Sentry Network devices
  • Critical 9.8
    CVE-2023-38036

    A security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an unauthenticated attacker to …

    ivanti Avalanche Network devices
  • Critical 9.0
    CVE-2024-38648

    A hardcoded secret in Ivanti DSM before 2024.2 allows an authenticated attacker on an adjacent network to decrypt sensi…

    ivanti DSM Network devices
  • High 7.5
    CVE-2025-24294

    resolv vulnerable to DoS via insufficient DNS domain name length validation

    The attack vector is a potential Denial of Service (DoS). The vulnerability is caused by an insufficient check on the length of a decompressed domain name within a DNS packet. An attacker can craft a malicious DNS packet containing a highly compressed domain …

    ruby resolv ruby2.3 ruby2.5 Debian Ubuntu Azure Linux Wolfi RubyGems