Skip to content
OpenAdvisories

Archive

27 July 2025

Vulnerabilities first published on this day (UTC), newest first.

← June 2025 2025 / July /27 August 2025 →
  1. 189
  2. 284
  3. 3149
  4. 4187
  5. 58
  6. 628
  7. 7175
  8. 8440
  9. 9110
  10. 10214
  11. 1196
  12. 1249
  13. 1349
  14. 14127
  15. 15156
  16. 16190
  17. 1789
  18. 18110
  19. 1946
  20. 2066
  21. 21237
  22. 22119
  23. 2394
  24. 2478
  25. 25219
  26. 2645
  27. 2741
  28. 28124
  29. 29175
  30. 3088
  31. 31114
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • Medium 6.3
    CVE-2025-8247

    Projectworlds Online Admission System admin.php sql injection

    A vulnerability classified as critical has been found in Projectworlds Online Admission System 1.0. This affects an unknown part of the file /admin.php. The manipulation of the argument markof leads to sql injection. It is possible to initiate the attack remo…

    Project Worlds Online Admission System
  • Medium 6.8
    CVE-2025-8231

    D-Link DIR-890L UART Port rgbin hard-coded credentials

    A vulnerability, which was classified as critical, has been found in D-Link DIR-890L up to 111b04. This issue affects some unknown processing of the file rgbin of the component UART Port. The manipulation leads to hard-coded credentials. It is possible to lau…

    D-Link DIR-890L Network devices
  • Medium 6.3
    CVE-2025-8230

    Campcodes Courier Management System manage_user.php sql injection

    A vulnerability classified as critical was found in Campcodes Courier Management System 1.0. This vulnerability affects unknown code of the file /manage_user.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely…

    Campcodes Courier Management System
  • Medium 6.3
    CVE-2025-8229

    Campcodes Courier Management System parcel_list.php sql injection

    A vulnerability classified as critical has been found in Campcodes Courier Management System 1.0. This affects an unknown part of the file /parcel_list.php. The manipulation of the argument s leads to sql injection. It is possible to initiate the attack remot…

    Campcodes Courier Management System
  • Medium 6.3
    CVE-2025-8228

    yanyutao0402 ChanCMS getPages server-side request forgery

    A vulnerability was found in yanyutao0402 ChanCMS up to 3.1.2. It has been rated as critical. Affected by this issue is the function getPages of the file /cms/collect/getPages. The manipulation of the argument targetUrl leads to server-side request forgery. T…

    yanyutao0402 ChanCMS
  • Medium 6.3
    CVE-2025-8227

    yanyutao0402 ChanCMS getArticle deserialization

    A vulnerability was found in yanyutao0402 ChanCMS up to 3.1.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /collect/getArticle. The manipulation of the argument taskUrl leads to deserialization. The…

    yanyutao0402 ChanCMS
  • Medium 4.3
    CVE-2025-8226

    yanyutao0402 ChanCMS find information disclosure

    A vulnerability was found in yanyutao0402 ChanCMS up to 3.1.2. It has been classified as problematic. Affected is an unknown function of the file /sysApp/find. The manipulation of the argument accessKey/secretKey leads to information disclosure. It is possibl…

    yanyutao0402 ChanCMS
  • Medium 4.3
    CVE-2025-8223

    jerryshensjf JPACookieShop 蛋糕商城JPA版 AdminTypeCustController.java cross-site request forgery

    A vulnerability, which was classified as problematic, was found in jerryshensjf JPACookieShop 蛋糕商城JPA版 up to 24a15c02b4f75042c9f7f615a3fed2ec1cefb999. This affects an unknown part of the file AdminTypeCustController.java. The manipulation leads to cross-site …

    jerryshensjf JPACookieShop 蛋糕商城JPA版
  • Medium 4.3
    CVE-2025-8104

    Memory Usage <= 3.98 - Cross-Site Request Forgery to Limited Plugin Installation via wpmemory_install_plugin Function

    The Memory Usage plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.98. This is due to missing nonce validation in the wpmemory_install_plugin() function. This makes it possible for unauthenticated attacke…

    sminozzi Memory Usage, Memory Limit, PHP and Server Memory Health Check and Provide Suggestions Web / CMS
  • Medium 4.3
    CVE-2025-8221

    jerryshensjf JPACookieShop 蛋糕商城JPA版 GoodsCustController.java goodsSearch cross site scripting

    A vulnerability classified as problematic was found in jerryshensjf JPACookieShop 蛋糕商城JPA版 up to 24a15c02b4f75042c9f7f615a3fed2ec1cefb999. Affected by this vulnerability is the function goodsSearch of the file GoodsCustController.java. The manipulation of the…

    jerryshensjf JPACookieShop 蛋糕商城JPA版
  • Medium 6.3
    CVE-2025-8219

    Shanghai Lingdang Information Technology Lingdang CRM HTTP POST Request tabdetail_moduleSave_dxkp.php sql injection

    A vulnerability was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.4.7. It has been rated as critical. This issue affects some unknown processing of the file /crm/crmapi/erp/tabdetail_moduleSave_dxkp.php of the component HTTP POST Re…

    Shanghai Lingdang Information Technology Lingdang CRM
  • Medium 4.4
    CVE-2025-6241

    CVE-2025-6241

    LsiAgent.exe, a component of SysTrack from Lakeside Software, attempts to load several DLL files which are not present in the default installation. If a user-writable directory is present in the SYSTEM PATH environment variable, the user can write a malicious…

    Lakeside Software SysTrack
  • Medium 5.3
    CVE-2023-53157

    Remotely exploitable denial of service in Rosenpass

    The rosenpass crate before 0.2.1 for Rust allows remote attackers to cause a denial of service (panic) via a one-byte UDP packet.

    rosenpass rosenpass rosenpass crates.io
  • Medium 4.5
    CVE-2023-53156

    transpose: Buffer overflow due to integer overflow

    The transpose crate before 0.2.3 for Rust allows an integer overflow via input_width and input_height arguments.

    ejmahler transpose transpose rust-transpose Debian Ubuntu crates.io