Skip to content
OpenAdvisories

Archive

16 July 2025

Vulnerabilities first published on this day (UTC), newest first.

← June 2025 2025 / July /16 August 2025 →
  1. 189
  2. 284
  3. 3149
  4. 4187
  5. 58
  6. 628
  7. 7175
  8. 8440
  9. 9110
  10. 10214
  11. 1196
  12. 1249
  13. 1349
  14. 14127
  15. 15156
  16. 16190
  17. 1789
  18. 18110
  19. 1946
  20. 2066
  21. 21237
  22. 22119
  23. 2394
  24. 2478
  25. 25219
  26. 2645
  27. 2741
  28. 28124
  29. 29175
  30. 3088
  31. 31114
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.6
    CVE-2025-34128 Public exploit

    X360 VideoPlayer ActiveX Control Buffer Overflow via ConvertFile()

    A buffer overflow vulnerability exists in the X360 VideoPlayer ActiveX control (VideoPlayer.ocx) version 2.6 when handling overly long arguments to the ConvertFile() method. An attacker can exploit this vulnerability by supplying crafted input to cause memory…

    X360Soft X360 VideoPlayer ActiveX Control
  • High 8.7
    CVE-2025-34126 Public exploit

    RIPS Scanner v0.54 Path Traversal

    A path traversal vulnerability exists in RIPS Scanner version 0.54. The vulnerability allows remote attackers to read arbitrary files on the system with the privileges of the web server by sending crafted HTTP GET requests to the 'windows/code.php' script wit…

    RIPS Technologies RIPS Scanner
  • High 8.4
    CVE-2025-34124 Public exploit

    Heroes of Might and Magic III .h3m Map File Buffer Overflow

    A buffer overflow vulnerability exists in Heroes of Might and Magic III Complete 4.0.0.0, HD Mod 3.808 build 9, and Demo 1.0.0.0 via malicious .h3m map files that exploit object sprite name parsing logic. The vulnerability occurs during in-game map loading wh…

    The 3DO Company Heroes of Might and Magic III
  • High 8.4
    CVE-2025-34123 Public exploit

    VideoCharge Studio 2.12.3.685 SEH Buffer Overflow via .VSC File

    A stack-based buffer overflow vulnerability exists in VideoCharge Studio 2.12.3.685 when processing a specially crafted .VSC configuration file. The issue occurs due to improper handling of user-supplied data in the XML 'Name' attribute, leading to an SEH ove…

    VideoCharge Software Studio
  • High 8.7
    CVE-2025-34120 Public exploit

    LimeSurvey 2.0+ - 2.06+ Unauthenticated Arbitrary File Download via Serialized Backup Payload

    An unauthenticated file download vulnerability exists in LimeSurvey versions from 2.0+ up to and including 2.06+ Build 151014. The application fails to validate serialized input to the admin backup endpoint (`index.php/admin/update/sa/backup`), allowing attac…

    LimeSurvey LimeSurvey
  • High 8.8
    CVE-2025-34119 Public exploit

    EasyCafe Server 2.2.14 Remote File Disclosure via Opcode 0x43

    A remote file disclosure vulnerability exists in EasyCafe Server 2.2.14, exploitable by unauthenticated remote attackers via TCP port 831. The server listens for a custom protocol where opcode 0x43 can be used to request arbitrary files by absolute path. If t…

    Tinasoft EasyCafe Server
  • High 8.7
    CVE-2025-34118 Public exploit

    Linknat VOS Manager Path Traversal File Disclosure

    A path traversal vulnerability exists in Linknat VOS Manager versions prior to 2.1.9.07, including VOS2009 and early VOS3000 builds, that allows unauthenticated remote attackers to read arbitrary files on the server. The vulnerability is accessible via multip…

    Linknat Technology VOS Manager