Skip to content
OpenAdvisories

Archive

13 July 2025

Vulnerabilities first published on this day (UTC), newest first.

← June 2025 2025 / July /13 August 2025 →
  1. 189
  2. 284
  3. 3149
  4. 4187
  5. 58
  6. 628
  7. 7175
  8. 8440
  9. 9110
  10. 10214
  11. 1196
  12. 1249
  13. 1349
  14. 14127
  15. 15156
  16. 16190
  17. 1789
  18. 18110
  19. 1946
  20. 2066
  21. 21237
  22. 22119
  23. 2394
  24. 2478
  25. 25219
  26. 2645
  27. 2741
  28. 28124
  29. 29175
  30. 3088
  31. 31114
All Critical High Medium Low Exploited only Public exploit

49 results · Feed

  • High 7.3
    CVE-2025-7515

    code-projects Online Appointment Booking System ulocateus.php sql injection

    A vulnerability classified as critical has been found in code-projects Online Appointment Booking System 1.0. This affects an unknown part of the file /ulocateus.php. The manipulation of the argument doctorname leads to sql injection. It is possible to initia…

    code-projects Online Appointment Booking System
  • High 7.3
    CVE-2025-7514

    code-projects Modern Bag contact-list.php sql injection

    A vulnerability was found in code-projects Modern Bag 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/contact-list.php. The manipulation of the argument idStatus leads to sql injection. The attack ma…

    code-projects Modern Bag
  • High 7.3
    CVE-2025-7513

    code-projects Modern Bag slideupdate.php sql injection

    A vulnerability was found in code-projects Modern Bag 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/slideupdate.php. The manipulation of the argument idSlide leads to sql injection. The at…

    code-projects Modern Bag
  • High 7.3
    CVE-2025-7512

    code-projects Modern Bag contact-back.php sql injection

    A vulnerability was found in code-projects Modern Bag 1.0. It has been classified as critical. Affected is an unknown function of the file /contact-back.php. The manipulation of the argument contact-name leads to sql injection. It is possible to launch the at…

    code-projects Modern Bag
  • Medium 6.3
    CVE-2025-7511

    code-projects Chat System update_account.php sql injection

    A vulnerability was found in code-projects Chat System 1.0 and classified as critical. This issue affects some unknown processing of the file /user/update_account.php. The manipulation of the argument musername leads to sql injection. The attack may be initia…

    code-projects Chat System
  • High 7.3
    CVE-2025-7510

    code-projects Modern Bag productadd_back.php sql injection

    A vulnerability has been found in code-projects Modern Bag 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/productadd_back.php. The manipulation of the argument namepro leads to sql injection. The attack can be initi…

    code-projects Modern Bag
  • High 7.3
    CVE-2025-7509

    code-projects Modern Bag slide.php sql injection

    A vulnerability, which was classified as critical, was found in code-projects Modern Bag 1.0. This affects an unknown part of the file /admin/slide.php. The manipulation of the argument idSlide leads to sql injection. It is possible to initiate the attack rem…

    code-projects Modern Bag
  • High 7.2
    CVE-2024-58258 Public exploit EPSS 22%

    SugarCRM before 13.0.4 and 14.x before 14.0.1 allows SSRF in the API module because a limited type of code injection ca…

    SugarCRM SugarCRM
  • Medium 6.4
    CVE-2025-53865

    Roundup is vulnerable to XSS through interactions between URLs and issue tracker templates

    In Roundup before 2.5.0, XSS can occur via interaction between URLs and issue tracker templates (devel and responsive).

    roundup-tracker Roundup roundup roundup Ubuntu PyPI