Skip to content
OpenAdvisories

Archive

18 July 2025

Vulnerabilities first published on this day (UTC), newest first.

← June 2025 2025 / July /18 August 2025 →
  1. 189
  2. 284
  3. 3149
  4. 4187
  5. 58
  6. 628
  7. 7175
  8. 8440
  9. 9110
  10. 10214
  11. 1196
  12. 1249
  13. 1349
  14. 14127
  15. 15156
  16. 16190
  17. 1789
  18. 18110
  19. 1946
  20. 2066
  21. 21237
  22. 22119
  23. 2394
  24. 2478
  25. 25219
  26. 2645
  27. 2741
  28. 28124
  29. 29175
  30. 3088
  31. 31114
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.5
    CVE-2025-27210 Public exploit EPSS 14%

    An incomplete fix has been identified for CVE-2025-23084 in Node.js, specifically affecting Windows device names like C…

    Node.js node nodejs
  • High 8.8
    CVE-2025-7795 Public exploit

    Tenda FH451 P2pListFilter fromP2pListFilter stack-based overflow

    A vulnerability, which was classified as critical, has been found in Tenda FH451 1.0.0.9. Affected by this issue is the function fromP2pListFilter of the file /goform/P2pListFilter. The manipulation of the argument page leads to stack-based buffer overflow. T…

    Tenda FH451
  • Critical 9.4
    CVE-2025-7783 Public exploit

    Usage of unsafe random function in form-data for choosing boundary

    Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP). This vulnerability is associated with program files lib/form_data.Js. This issue affects form-data: < 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3.

    katib-suggestion-hyperopt katib-earlystopping katib-suggestion-hyperband katib-suggestion-optuna-enas Debian Ubuntu Azure Linux Wolfi npm
  • High 8.7
    CVE-2025-49484 Public exploit

    Extension - joomsky.com - SQL injection in JS jobs component version 1.1.5 - 1.4.1 for Joomla

    A SQL injection vulnerability in the JS Jobs plugin versions 1.0.0-1.4.1 for Joomla allows low-privilege users to execute arbitrary SQL commands via the 'cvid' parameter in the employee application feature.

    joomsky.com JS Jobs component for Joomla Web / CMS
  • Medium 4.4
    CVE-2025-7431 Public exploit

    Knowledge Base <= 2.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Slug

    The Knowledge Base plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin slug setting in all versions up to, and including, 2.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated a…

    ajay Knowledge Base Web / CMS
  • Critical 9.0
    CVE-2025-54309 Exploited Public exploit EPSS 93%

    CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23, when the DMZ proxy feature is not used, mishandles AS2 validation an…

    CrushFTP CrushFTP
    KEV Jul 22, 2025