Archive

17 July 2025

Vulnerabilities first published on this day (UTC), newest first.

← June 2025 2025 / July /17 August 2025 →

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

High 7.3

CVE-2025-7753 Public exploit

code-projects Online Appointment Booking System adddoctor.php sql injection

A vulnerability was found in code-projects Online Appointment Booking System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/adddoctor.php. The manipulation of the argument Username leads to sql injection. It is possib…

code-projects Online Appointment Booking System

Jul 17, 2025
High 7.8

CVE-2025-0886 Public exploit

An incorrect permissions vulnerability was reported in Elliptic Labs Virtual Lock Sensor that could allow a local, auth…

Lenovo Elliptic Human Presence Detection Device Driver for ThinkPad P16s Gen 2 (Type 21K9, 21KA) Elliptic Human Presence Detection Device Driver for T16 Gen 3 (Type 21MN, 21MQ) Elliptic Virtual Lock Sensor Service For ThinkPad P1 Gen 6 (Type 21FV, 21FW)

Jul 17, 2025
High 7.5

CVE-2025-7338 Public exploit

Multer vulnerable to Denial of Service via unhandled exception from malformed request

Multer is a node.js middleware for handling `multipart/form-data`. A vulnerability that is present starting in version 1.4.4-lts.1 and prior to version 2.0.2 allows an attacker to trigger a Denial of Service (DoS) by sending a malformed multi-part upload requ…

expressjs multer multer npm

Jul 17, 2025