Skip to content
OpenAdvisories

Archive

15 July 2025

Vulnerabilities first published on this day (UTC), newest first.

← June 2025 2025 / July /15 August 2025 →
  1. 189
  2. 284
  3. 3149
  4. 4187
  5. 58
  6. 628
  7. 7175
  8. 8440
  9. 9110
  10. 10214
  11. 1196
  12. 1249
  13. 1349
  14. 14127
  15. 15156
  16. 16190
  17. 1789
  18. 18110
  19. 1946
  20. 2066
  21. 21237
  22. 22119
  23. 2394
  24. 2478
  25. 25219
  26. 2645
  27. 2741
  28. 28124
  29. 29175
  30. 3088
  31. 31114
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.3
    CVE-2025-34103 Public exploit

    WePresent WiPG-1000 Unauthenticated Command Injection in via rdfs.cgi

    An unauthenticated command injection vulnerability exists in WePresent WiPG-1000 firmware versions prior to 2.2.3.0, due to improper input handling in the undocumented /cgi-bin/rdfs.cgi endpoint. The Client parameter is not sanitized before being passed to a …

    WePresent (Barco) WiPG-1000
  • Critical 9.3
    CVE-2025-34111 Public exploit

    Tiki Wiki <= 15.1 ELFinder Unauthenticated File Upload RCE

    An unauthenticated arbitrary file upload vulnerability exists in Tiki Wiki CMS Groupware version 15.1 and earlier via the ELFinder component's default connector (connector.minimal.php), which allows remote attackers to upload and execute malicious PHP scripts…

    Tiki Software Community Association Wiki CMS Groupware
  • Critical 10.0
    CVE-2025-34112 Public exploit

    Riverbed SteelCentral NetProfiler / NetExpress 10.8.7 RCE

    An authenticated multi-stage remote code execution vulnerability exists in Riverbed SteelCentral NetProfiler and NetExpress 10.8.7 virtual appliances. A SQL injection vulnerability in the '/api/common/1.0/login' endpoint can be exploited to create a new user …

    Riverbed Technology SteelCentral NetExpress SteelCentral NetProfiler
  • Critical 9.4
    CVE-2025-34104 Public exploit

    Piwik Authenticated RCE via Custom Plugin Upload

    An authenticated remote code execution vulnerability exists in Piwik (now Matomo) versions prior to 3.0.3 via the plugin upload mechanism. In vulnerable versions, an authenticated user with Superuser privileges can upload and activate a malicious plugin (ZIP …

    Piwik (now Matomo) Web Analytics Platform
  • Critical 10.0
    CVE-2025-34105 Public exploit

    DiskBoss Enterprise Stack-Based Buffer Overflow RCE

    A stack-based buffer overflow vulnerability exists in the built-in web interface of DiskBoss Enterprise versions 7.4.28, 7.5.12, and 8.2.14. The vulnerability arises from improper bounds checking on the path component of HTTP GET requests. By sending a specia…

    Flexense DiskBoss Enterprise
  • Critical 9.3
    CVE-2025-34110 Public exploit

    ColoradoFTP Server <= 1.3 Build 8 Path Traversal Information Disclosure

    A directory traversal vulnerability exists in ColoradoFTP Server ≤ 1.3 Build 8 for Windows, allowing unauthenticated attackers to read or write arbitrary files outside the configured FTP root directory. The flaw is due to insufficient sanitation of user-suppl…

    ColoradoFTP Server
  • Critical 9.8
    CVE-2025-7340 Public exploit Scanner template

    HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Upload

    The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the temp_file_upload() function in all versions up to, and including, 2…

    HT Plugins HT Contact Form – Drag & Drop Form Builder for WordPress Web / CMS
  • Critical 9.8
    CVE-2025-5394 Public exploit Scanner template EPSS 53%

    Alone – Charity Multipurpose Non-profit WordPress Theme <= 7.8.3 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin Installation

    The Alone – Charity Multipurpose Non-profit WordPress Theme theme for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the alone_import_pack_install_plugin() function in all versions up to, and including, 7.8.3. This make…

    bearsthemes Alone – Charity Multipurpose Non-profit WordPress Theme Web / CMS