Skip to content
OpenAdvisories

Archive

13 July 2025

Vulnerabilities first published on this day (UTC), newest first.

← June 2025 2025 / July /13 August 2025 →
  1. 189
  2. 284
  3. 3149
  4. 4187
  5. 58
  6. 628
  7. 7175
  8. 8440
  9. 9110
  10. 10214
  11. 1196
  12. 1249
  13. 1349
  14. 14127
  15. 15156
  16. 16190
  17. 1789
  18. 18110
  19. 1946
  20. 2066
  21. 21237
  22. 22119
  23. 2394
  24. 2478
  25. 25219
  26. 2645
  27. 2741
  28. 28124
  29. 29175
  30. 3088
  31. 31114
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Medium 4.7
    CVE-2025-7553

    D-Link DIR-818LW System Time Page os command injection

    A vulnerability classified as critical has been found in D-Link DIR-818LW up to 20191215. This affects an unknown part of the component System Time Page. The manipulation of the argument NTP Server leads to os command injection. It is possible to initiate the…

    D-Link DIR-818LW Network devices
  • Medium 6.3
    CVE-2025-7552

    Dromara Northstar Path AuthorizationInterceptor.java preHandle access control

    A vulnerability was found in Dromara Northstar up to 7.3.5. It has been rated as critical. Affected by this issue is the function preHandle of the file northstar-main/src/main/java/org/dromara/northstar/web/interceptor/AuthorizationInterceptor.java of the com…

    dromara Northstar
  • Medium 5.9
    CVE-2025-1735

    pgsql extension does not check for errors during escaping

    In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* pgsql and pdo_pgsql escaping functions do not check if the underlying quoting functions returned errors. This could cause crashes if Postgres server rejects the string as inv…

    PHP Group PHP php5 php7.0 Debian Ubuntu Azure Linux Alpine
  • Medium 5.9
    CVE-2025-6491

    NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix

    In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* before 8.4.10 when parsing XML data in SOAP extensions, overly large (>2Gb) XML namespace prefix may lead to null pointer dereference. This may lead to crashes and affect the…

    PHP Group PHP php5 php7.0 Debian Ubuntu Azure Linux Alpine
  • Medium 5.3
    CVE-2025-7546

    GNU Binutils elf.c bfd_elf_set_group_contents out-of-bounds write

    A vulnerability, which was classified as problematic, has been found in GNU Binutils 2.45. Affected by this issue is the function bfd_elf_set_group_contents of the file bfd/elf.c. The manipulation leads to out-of-bounds write. It is possible to launch the att…

    GNU Binutils binutils binutils Debian Ubuntu Azure Linux Wolfi
  • Medium 5.3
    CVE-2025-7545 Public exploit

    GNU Binutils objcopy.c copy_section heap-based overflow

    A vulnerability classified as problematic was found in GNU Binutils 2.45. Affected by this vulnerability is the function copy_section of the file binutils/objcopy.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The…

    GNU Binutils binutils binutils Debian Ubuntu Azure Linux Wolfi
  • Medium 6.3
    CVE-2025-7543

    PHPGurukul User Registration & Login and User Management System manage-users.php sql injection

    A vulnerability was found in PHPGurukul User Registration & Login and User Management System 3.3. It has been classified as critical. This affects an unknown part of the file /admin/manage-users.php. The manipulation of the argument ID leads to sql injection.…

    PHPGurukul User Registration & Login and User Management System
  • Medium 6.3
    CVE-2025-7525

    TOTOLINK T6 HTTP POST Request cstecgi.cgi setTracerouteCfg command injection

    A vulnerability was found in TOTOLINK T6 4.1.5cu.748_B20211015. It has been declared as critical. This vulnerability affects the function setTracerouteCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the arg…

    Toto Link T6
  • Medium 6.3
    CVE-2025-7524

    TOTOLINK T6 HTTP POST Request cstecgi.cgi setDiagnosisCfg command injection

    A vulnerability was found in TOTOLINK T6 4.1.5cu.748_B20211015. It has been classified as critical. This affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument ip lead…

    Toto Link T6
  • Medium 6.3
    CVE-2025-7522

    PHPGurukul Vehicle Parking Management System bwdates-reports-details.php sql injection

    A vulnerability has been found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/bwdates-reports-details.php. The manipulation of the argument fromdat…

    PHPGurukul Vehicle Parking Management System
  • Medium 6.3
    CVE-2025-7520

    PHPGurukul Vehicle Parking Management System manage-category.php sql injection

    A vulnerability, which was classified as critical, has been found in PHPGurukul Vehicle Parking Management System 1.13. This issue affects some unknown processing of the file /admin/manage-category.php. The manipulation of the argument del leads to sql inject…

    PHPGurukul Vehicle Parking Management System
  • Medium 6.3
    CVE-2025-7511

    code-projects Chat System update_account.php sql injection

    A vulnerability was found in code-projects Chat System 1.0 and classified as critical. This issue affects some unknown processing of the file /user/update_account.php. The manipulation of the argument musername leads to sql injection. The attack may be initia…

    code-projects Chat System
  • Medium 6.4
    CVE-2025-53865

    Roundup is vulnerable to XSS through interactions between URLs and issue tracker templates

    In Roundup before 2.5.0, XSS can occur via interaction between URLs and issue tracker templates (devel and responsive).

    roundup-tracker Roundup roundup roundup Ubuntu PyPI