Skip to content
OpenAdvisories

Archive

21 July 2025

Vulnerabilities first published on this day (UTC), newest first.

← June 2025 2025 / July /21 August 2025 →
  1. 189
  2. 284
  3. 3149
  4. 4187
  5. 58
  6. 628
  7. 7175
  8. 8440
  9. 9110
  10. 10214
  11. 1196
  12. 1249
  13. 1349
  14. 14127
  15. 15156
  16. 16190
  17. 1789
  18. 18110
  19. 1946
  20. 2066
  21. 21237
  22. 22119
  23. 2394
  24. 2478
  25. 25219
  26. 2645
  27. 2741
  28. 28124
  29. 29175
  30. 3088
  31. 31114
All Critical High Medium Low Exploited only Public exploit

59 results · Clear filters · Feed

  • Medium 6.4
    CVE-2025-4685

    Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor <= 3.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

    The Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HTML data attributes of multiple widgets, in all versions up to, and including, 3.4.8 due to insufficient input sanit…

    gutentor Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor Web / CMS
  • Medium 6.7
    CVE-2025-0664

    A locally authenticated, privileged user can craft a malicious OpenSSL configuration file, potentially leading the agen…

    Trellix Trellix Endpoint Security (HX) Agent
  • Medium 6.1
    CVE-2025-7920

    Simopro Technology｜WinMatrix3 Web package - Reflected Cross-Site Scripting

    WinMatrix3 Web package developed by Simopro Technology has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.

    Simopro Technology WinMatrix3 Web package
  • Medium 6.5
    CVE-2025-7919

    Simopro Technology｜WinMatrix3 Web package - SQL Injection

    WinMatrix3 Web package developed by Simopro Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.

    Simopro Technology WinMatrix3 Web package
  • Medium 6.1
    CVE-2024-55040 Public exploit

    Cross Site Scripting vulnerability in Sensaphone WEB600 Monitoring System v.1.6.5.H and before allows a remote attacker…

  • Medium 5.3
    CVE-2025-46118

    An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139 and in Ruckus ZoneDir…

  • Medium 6.3
    CVE-2025-46119

    An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.27 and 200.18.7.1.323, and in Ruckus ZoneDi…

  • Medium 5.1
    CVE-2025-52372

    An issue in hMailServer v.5.8.6 allows a local attacker to obtain sensitive information via the hmailserver/installatio…

  • Medium 4.6
    CVE-2025-52373

    Use of hardcoded cryptographic key in BlowFish.cpp in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passw…

  • Medium 4.6
    CVE-2025-52374

    Use of hardcoded cryptographic key in Encryption.cs in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt pass…

  • Medium 5.4
    CVE-2025-51396 Public exploit

    A stored cross-site scripting (XSS) vulnerability in Live Helper Chat v4.60 allows attackers to execute arbitrary web s…

  • Medium 5.4
    CVE-2025-51398 Public exploit

    A stored cross-site scripting (XSS) vulnerability in the Facebook registration page of Live Helper Chat v4.60 allows at…

  • Medium 5.4
    CVE-2025-51397 Public exploit

    A stored cross-site scripting (XSS) vulnerability in the Facebook Chat module of Live Helper Chat v4.60 allows attacker…

  • Medium 5.4
    CVE-2025-51401 Public exploit

    A stored cross-site scripting (XSS) vulnerability in the chat transfer function of Live Helper Chat v4.60 allows attack…

  • Medium 5.4
    CVE-2025-51400 Public exploit

    A stored cross-site scripting (XSS) vulnerability in the Personal Canned Messages of Live Helper Chat v4.60 allows atta…

  • Medium 6.5
    CVE-2025-51403 Public exploit

    A stored cross-site scripting (XSS) vulnerability in the department assignment editing module of of Live Helper Chat v4…

  • Medium 4.3
    CVE-2025-43977

    The com.skt.prod.dialer application through 12.5.0 for Android enables any installed application (with no permissions) …

  • Medium 6.5
    CVE-2025-43720

    Headwind MDM before 5.33.1 makes configuration details accessible to unauthorized users. The Configuration profile is e…

  • Medium 4.3
    CVE-2025-43976

    The com.enflick.android.tn2ndLine application through 24.17.1.0 for Android enables any installed application (with no …