Skip to content
OpenAdvisories

Archive

31 July 2025

Vulnerabilities first published on this day (UTC), newest first.

← June 2025 2025 / July /31 August 2025 →
  1. 189
  2. 284
  3. 3149
  4. 4187
  5. 58
  6. 628
  7. 7175
  8. 8440
  9. 9110
  10. 10214
  11. 1196
  12. 1249
  13. 1349
  14. 14127
  15. 15156
  16. 16190
  17. 1789
  18. 18110
  19. 1946
  20. 2066
  21. 21237
  22. 22119
  23. 2394
  24. 2478
  25. 25219
  26. 2645
  27. 2741
  28. 28124
  29. 29175
  30. 3088
  31. 31114
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 8.7
    CVE-2013-10035 Public exploit

    ProcessMaker Open Source < 2.5.2 neoclassic Skin PHP Code Execution

    A code injection vulnerability exists in ProcessMaker Open Source versions 2.x when using the default 'neoclassic' skin. An authenticated user can execute arbitrary PHP code via multiple endpoints, including appFolderAjax.php, casesStartPage_Ajax.php, and cas…

    ProcessMaker ProcessMaker Open Source
  • High 8.6
    CVE-2011-10008 Public exploit

    MPlayer Lite r33064 M3U Stack-Based Buffer Overflow

    A stack-based buffer overflow vulnerability exists in MPlayer Lite r33064 due to improper bounds checking when handling M3U playlist files containing long http:// URL entries. An attacker can craft a malicious .m3u file with a specially formatted URL that tri…

    MPlayer Project MPlayer Lite
  • High 8.7
    CVE-2013-10039 Public exploit

    GestioIP 3.0 ip_checkhost.cgi RCE

    A command injection vulnerability exists in GestioIP 3.0 commit ac67be and earlier in ip_checkhost.cgi. Crafted input to the 'ip' parameter allows attackers to execute arbitrary shell commands on the server via embedded base64-encoded payloads. Authentication…

    GestioIP IPAM
  • High 8.4
    CVE-2013-10036 Public exploit

    Beetel Connection Manager NetConfig.ini Stack-Based Buffer Overflow

    A stack-based buffer overflow vulnerability exists in Beetel Connection Manager version PCW_BTLINDV1.0.0B04 when parsing the UserName parameter in the NetConfig.ini configuration file. A crafted .ini file containing an overly long UserName value can overwrite…

    Beetel Teletech Connection Manager
  • High 8.8
    CVE-2014-125125 Public exploit

    A10 Networks AX Loadbalancer Path Traversal

    A path traversal vulnerability exists in A10 Networks AX Loadbalancer versions 2.6.1-GR1-P5, 2.7.0, and earlier. The vulnerability resides in the handling of the filename parameter in the /xml/downloads endpoint, which fails to properly sanitize user input. A…

    A10 AX Series Loadbalancer
  • High 7.2
    CVE-2025-46359 Public exploit

    A path traversal issue exists in backup and restore feature of multiple versions of PowerCMS. A product administrator m…

    Alfasado PowerCMS
  • High 8.8
    CVE-2025-53558 Public exploit Scanner template

    ZXHN-F660T and ZXHN-F660A provided by ZTE Japan K.K. use a common credential for all installations. With the knowledge …

    ZTE Japan. K.K. ZXHN-F660A ZXHN-F660T
  • High 8.8
    CVE-2025-7847 Public exploit

    AI Engine 2.9.3 - 2.9.4 - Authenticated (Subscriber+) Arbitrary File Upload

    The AI Engine plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the rest_simpleFileUpload() function in versions 2.9.3 and 2.9.4. This makes it possible for authenticated attackers, with Subscriber-level acces…

    tigroumeow AI Engine Web / CMS
  • High 7.3
    CVE-2025-29556 Public exploit

    ExaGrid EX10 6.3 - 7.0.1.P08 is vulnerable to Incorrect Access Control. Since version 6.3, ExaGrid enforces restriction…

  • High 8.0
    CVE-2025-52289 Public exploit

    A Broken Access Control vulnerability in MagnusBilling v7.8.5.3 allows newly registered users to gain escalated privile…