Skip to content
OpenAdvisories

Archive

29 July 2025

Vulnerabilities first published on this day (UTC), newest first.

← June 2025 2025 / July /29 August 2025 →
  1. 189
  2. 284
  3. 3149
  4. 4187
  5. 58
  6. 628
  7. 7175
  8. 8440
  9. 9110
  10. 10214
  11. 1196
  12. 1249
  13. 1349
  14. 14127
  15. 15156
  16. 16190
  17. 1789
  18. 18110
  19. 1946
  20. 2066
  21. 21237
  22. 22119
  23. 2394
  24. 2478
  25. 25219
  26. 2645
  27. 2741
  28. 28124
  29. 29175
  30. 3088
  31. 31114
All Critical High Medium Low Exploited only Public exploit

31 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-43237

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.6. An…

    Apple macOS macOS
  • Critical 9.8
    CVE-2025-43233

    This issue was addressed with improved access restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.…

    Apple macOS macOS
  • Critical 9.8
    CVE-2025-43186

    The issue was addressed with improved memory handling. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 1…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Critical 9.8
    CVE-2025-43245

    A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.6, m…

    Apple macOS macOS
  • Critical 9.8
    CVE-2025-43253

    This issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7…

    Apple macOS macOS
  • Critical 9.8
    CVE-2025-43199

    A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6, macOS Son…

    Apple macOS macOS
  • Critical 9.8
    CVE-2025-43232

    A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma…

    Apple macOS macOS
  • Critical 9.8
    CVE-2025-43198

    This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.…

    Apple macOS macOS
  • Critical 9.8
    CVE-2025-43209

    An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.6 and iPadOS 1…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Critical 9.8
    CVE-2025-43194

    The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ven…

    Apple macOS macOS
  • Critical 9.8
    CVE-2025-43244

    A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14…

    Apple macOS macOS
  • Critical 9.8
    CVE-2025-43275

    A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7…

    Apple macOS macOS
  • Critical 9.8
    CVE-2025-43234

    Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in iOS 18.6 and iP…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Critical 9.8
    CVE-2025-43261

    A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS…

    Apple macOS macOS
  • Critical 9.8
    CVE-2025-43220

    This issue was addressed with improved validation of symlinks. This issue is fixed in iPadOS 17.7.9, macOS Sequoia 15.6…

    Apple macOS iPadOS macOS iOS
  • Critical 9.1
    CVE-2025-43273

    A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.6, macO…

    Apple macOS macOS
  • Critical 9.1
    CVE-2025-31229

    A logic issue was addressed with improved checks. This issue is fixed in iOS 18.6 and iPadOS 18.6. Passcode may be read…

    Apple iOS and iPadOS iOS
  • Critical 9.8
    CVE-2025-43189

    This issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7.…

    Apple macOS macOS
  • Critical 9.8
    CVE-2025-43222

    A use-after-free issue was addressed by removing the vulnerable code. This issue is fixed in iPadOS 17.7.9, macOS Sequo…

    Apple macOS iPadOS macOS iOS
  • Critical 9.8
    CVE-2025-43243

    A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma…

    Apple macOS macOS
  • Critical 9.8
    CVE-2025-43193

    The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, …

    Apple macOS macOS
  • Critical 9.8
    CVE-2025-31279

    A permissions issue was addressed with additional restrictions. This issue is fixed in iPadOS 17.7.9, macOS Sequoia 15.…

    Apple macOS iPadOS macOS iOS
  • Critical 9.1
    CVE-2025-31281

    An input validation issue was addressed with improved memory handling. This issue is fixed in iOS 18.6 and iPadOS 18.6,…

    Apple macOS iOS and iPadOS tvOS macOS iOS
  • Critical 9.8
    CVE-2025-43192

    A configuration issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sono…

    Apple macOS macOS
  • Critical 9.8
    CVE-2025-43184

    This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sequoia 15.4, ma…

    Apple macOS macOS
  • Critical 9.9
    CVE-2025-54381 Public exploit EPSS 14%

    BentoML is Vulnerable to an SSRF Attack Through File Upload Processing

    BentoML is a Python library for building online serving systems optimized for AI apps and model inference. In versions 1.4.0 until 1.4.19, the file upload processing system contains an SSRF vulnerability that allows unauthenticated remote attackers to force t…

    bentoml BentoML bentoml PyPI
  • Critical 9.8
    CVE-2025-40600

    Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticat…

    SonicWall SonicOS Network devices
  • Critical 9.0
    CVE-2025-8264

    z-push/z-push-dev SQL Injection Vulnerability

    Versions of the package z-push/z-push-dev before 2.7.6 are vulnerable to SQL Injection due to unparameterized queries in the IMAP backend. An attacker can inject malicious commands by manipulating the username field in basic authentication. This allows the at…

    z-push/z-push-dev z-push Ubuntu Packagist
  • Critical 9.8
    CVE-2025-50738 Public exploit

    Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs

    The Memos application, up to version v0.24.3, allows for the embedding of markdown images with arbitrary URLs. When a user views a memo containing such an image, their browser automatically fetches the image URL without explicit user consent or interaction be…

    github.com/usememos/memos Go
  • Critical 9.8
    CVE-2025-46059

    langchain-ai v0.3.51 was discovered to contain an indirect prompt injection vulnerability in the GmailToolkit component…

  • Critical 9.8
    CVE-2025-44136 Public exploit Scanner template

    MapTiler Tileserver-php v2.0 is vulnerable to Cross Site Scripting (XSS). The GET parameter "layer" is reflected in an …