Skip to content
OpenAdvisories

Archive

15 July 2025

Vulnerabilities first published on this day (UTC), newest first.

← June 2025 2025 / July /15 August 2025 →
  1. 189
  2. 284
  3. 3149
  4. 4187
  5. 58
  6. 628
  7. 7175
  8. 8440
  9. 9110
  10. 10214
  11. 1196
  12. 1249
  13. 1349
  14. 14127
  15. 15156
  16. 16190
  17. 1789
  18. 18110
  19. 1946
  20. 2066
  21. 21237
  22. 22119
  23. 2394
  24. 2478
  25. 25219
  26. 2645
  27. 2741
  28. 28124
  29. 29175
  30. 3088
  31. 31114
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High 8.2
    CVE-2025-53024 Public exploit

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…

    Oracle Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  • High 8.1
    CVE-2025-30749 Public exploit

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

    Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine Wolfi
  • High 8.8
    CVE-2025-6558 Exploited Public exploit EPSS 11%

    Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote a…

    Google Chrome chromium chromium Browsers Debian Ubuntu Azure Linux Alpine Wolfi
    KEV Jul 22, 2025
  • High 7.2
    CVE-2025-6965 Public exploit EPSS 73%

    Integer Truncation on SQLite

    There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.

    SQLite SQLite qt6-qtwebengine sqlite3 Debian Ubuntu Azure Linux Alpine Wolfi NuGet
  • High 8.7
    CVE-2025-34107 Public exploit

    WinaXe 7.7 FTP Client Remote Buffer Overflow

    A buffer overflow vulnerability exists in the WinaXe FTP Client version 7.7 within the FTP banner parsing functionality, WCMDPA10.dll. When the client connects to a remote FTP server and receives an overly long '220 Server Ready' response, the vulnerable comp…

    Labf WinaXe FTP Client
  • High 8.7
    CVE-2025-34113 Public exploit

    Tiki Wiki CMS Authenticated Command Injection in Calendar Module

    An authenticated command injection vulnerability exists in Tiki Wiki CMS versions ≤14.1, ≤12.4 LTS, ≤9.10 LTS, and ≤6.14 via the `viewmode` GET parameter in `tiki-calendar.php`. When the calendar module is enabled and an authenticated user has permission to a…

    Tiki Software Community Association Wiki CMS Groupware
  • High 8.4
    CVE-2025-34106 Public exploit

    PDF Shaper v3.5/3.6 Buffer Overflow via Convert to Image Feature

    A buffer overflow vulnerability exists in PDF Shaper versions 3.5 and 3.6 when converting a crafted PDF file to an image using the 'Convert PDF to Image' functionality. An attacker can exploit this vulnerability by tricking a user into opening a maliciously c…

    Burnaware PDF Shaper
  • High 8.5
    CVE-2025-34109 Public exploit

    Panda Security PSEvents.exe Insecure DLL Loading Privilege Escalation

    PSEvents.exe in multiple Panda Security products runs hourly with SYSTEM privileges and loads DLL files from a user-writable directory without proper validation. An attacker with low-privileged access who can write DLL files to the monitored directory can ach…

    Panda Security Panda Small Business Protection Panda Antivirus Pro 2016 Panda Internet Security 2016
  • High 8.7
    CVE-2025-34115 Public exploit

    OP5 Monitor <= 7.1.9 Authenticated Command Execution via command_test.php

    An authenticated command injection vulnerability exists in OP5 Monitor through version 7.1.9 via the 'cmd_str' parameter in the command_test.php endpoint. A user with access to the web interface can exploit the 'Test this command' feature to execute arbitrary…

    ITRS Group OP5 Monitor
  • High 8.7
    CVE-2025-34116 Public exploit

    IPFire < 2.19 Core Update 101 proxy.cgi RCE

    A remote command execution vulnerability exists in IPFire before version 2.19 Core Update 101 via the 'proxy.cgi' CGI interface. An authenticated attacker can inject arbitrary shell commands through crafted values in the NCSA user creation form fields, leadin…

    IPFire Project IPFire
  • High 8.6
    CVE-2025-34108 Public exploit

    Disk Pulse Enterprise 9.0.34 Login Stack Buffer Overflow

    A stack-based buffer overflow vulnerability exists in the login functionality of Disk Pulse Enterprise version 9.0.34. An attacker can send a specially crafted HTTP POST request to the /login endpoint with an overly long username parameter, causing a buffer o…

    Flexense Disk Pulse Enterprise