Skip to content
OpenAdvisories

Archive

29 July 2025

Vulnerabilities first published on this day (UTC), newest first.

← June 2025 2025 / July /29 August 2025 →
  1. 189
  2. 284
  3. 3149
  4. 4187
  5. 58
  6. 628
  7. 7175
  8. 8440
  9. 9110
  10. 10214
  11. 1196
  12. 1249
  13. 1349
  14. 14127
  15. 15156
  16. 16190
  17. 1789
  18. 18110
  19. 1946
  20. 2066
  21. 21237
  22. 22119
  23. 2394
  24. 2478
  25. 25219
  26. 2645
  27. 2741
  28. 28124
  29. 29175
  30. 3088
  31. 31114
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.8
    CVE-2025-31277 Exploited Public exploit

    The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, ma…

    Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
    KEV Mar 20, 2026
  • Critical 9.9
    CVE-2025-54381 Public exploit EPSS 14%

    BentoML is Vulnerable to an SSRF Attack Through File Upload Processing

    BentoML is a Python library for building online serving systems optimized for AI apps and model inference. In versions 1.4.0 until 1.4.19, the file upload processing system contains an SSRF vulnerability that allows unauthenticated remote attackers to force t…

    bentoml BentoML bentoml PyPI
  • Medium 6.4
    CVE-2024-43018 Public exploit

    Piwigo 13.8.0 and below is vulnerable to SQL Injection in the parameters max_level and min_register. These parameters a…

  • Critical 9.8
    CVE-2025-50738 Public exploit

    Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs

    The Memos application, up to version v0.24.3, allows for the embedding of markdown images with arbitrary URLs. When a user views a memo containing such an image, their browser automatically fetches the image URL without explicit user consent or interaction be…

    github.com/usememos/memos Go
  • High 8.1
    CVE-2025-45346 Public exploit

    Bacula-web SQL Injection Vulnerability

    SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request.

    bacula-web/bacula-web Packagist
  • Critical 9.8
    CVE-2025-44136 Public exploit Scanner template

    MapTiler Tileserver-php v2.0 is vulnerable to Cross Site Scripting (XSS). The GET parameter "layer" is reflected in an …

  • High 8.2
    CVE-2025-44137 Public exploit Scanner template

    MapTiler Tileserver-php v2.0 is vulnerable to Directory Traversal. The renderTile function within tileserver.php is res…

  • High 7.7
    CVE-2025-51970 Public exploit

    A SQL Injection vulnerability exists in the action.php endpoint of PuneethReddyHC Online Shopping System Advanced 1.0 d…