Skip to content
OpenAdvisories

Archive

14 July 2025

Vulnerabilities first published on this day (UTC), newest first.

← June 2025 2025 / July /14 August 2025 →
  1. 189
  2. 284
  3. 3149
  4. 4187
  5. 58
  6. 628
  7. 7175
  8. 8440
  9. 9110
  10. 10214
  11. 1196
  12. 1249
  13. 1349
  14. 14127
  15. 15156
  16. 16190
  17. 1789
  18. 18110
  19. 1946
  20. 2066
  21. 21237
  22. 22119
  23. 2394
  24. 2478
  25. 25219
  26. 2645
  27. 2741
  28. 28124
  29. 29175
  30. 3088
  31. 31114
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-53887 Public exploit Scanner template

    Directus's exact version number is exposed by the OpenAPI Spec

    Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.0.0 and prior to version 11.9.0, the exact Directus version number is incorrectly being used as OpenAPI Spec version this means that it is being exposed by …

    directus directus directus npm
  • Critical 10.0
    CVE-2025-53833 Public exploit Scanner template

    LaRecipe is vulnerable to Server-Side Template Injection attacks

    LaRecipe is an application that allows users to create documentation with Markdown inside a Laravel app. Versions prior to 2.8.1 are vulnerable to Server-Side Template Injection (SSTI), which could potentially lead to Remote Code Execution (RCE) in vulnerable…

    saleem-hadad larecipe binarytorch/larecipe Packagist
  • Medium 5.3
    CVE-2025-53640 Public exploit

    Indico vulnerable to user enumeration via API endpoint

    Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Starting in version 2.2 and prior to version 3.3.7, an endpoint used to display details of users listed in certain fields (such as ACLs) could be …

    indico indico indico PyPI
  • High 7.3
    CVE-2025-7606 Public exploit

    code-projects AVL Rooms city.php sql injection

    A vulnerability classified as critical has been found in code-projects AVL Rooms 1.0. This affects an unknown part of the file /city.php. The manipulation of the argument city leads to sql injection. It is possible to initiate the attack remotely. The exploit…

    code-projects AVL Rooms
  • High 7.3
    CVE-2025-7605 Public exploit

    code-projects AVL Rooms profile.php sql injection

    A vulnerability was found in code-projects AVL Rooms 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /profile.php. The manipulation of the argument first_name leads to sql injection. The attack may be launc…

    code-projects AVL Rooms
  • Medium 6.3
    CVE-2025-7558 Public exploit

    code-projects Voting System positions_add.php sql injection

    A vulnerability was found in code-projects Voting System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/positions_add.php. The manipulation of the argument description leads to sql injection. The attack…

    code-projects Voting System