Skip to content
OpenAdvisories

Archive

31 July 2025

Vulnerabilities first published on this day (UTC), newest first.

← June 2025 2025 / July /31 August 2025 →
  1. 189
  2. 284
  3. 3149
  4. 4187
  5. 58
  6. 628
  7. 7175
  8. 8440
  9. 9110
  10. 10214
  11. 1196
  12. 1249
  13. 1349
  14. 14127
  15. 15156
  16. 16190
  17. 1789
  18. 18110
  19. 1946
  20. 2066
  21. 21237
  22. 22119
  23. 2394
  24. 2478
  25. 25219
  26. 2645
  27. 2741
  28. 28124
  29. 29175
  30. 3088
  31. 31114
All Critical High Medium Low Exploited only Public exploit

52 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-8343

    openviglet shio ShStaticFileAPI.java shStaticFilePreUpload path traversal

    A vulnerability was found in openviglet shio up to 0.3.8. It has been rated as critical. This issue affects the function shStaticFilePreUpload of the file shio-app/src/main/java/com/viglet/shio/api/staticfile/ShStaticFileAPI.java. The manipulation of the argu…

    openviglet shio
  • Medium 4.3
    CVE-2025-8340

    code-projects Intern Membership Management System Error Message fill_details.php cross site scripting

    A vulnerability was found in code-projects Intern Membership Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file fill_details.php of the component Error Message Handler. The manipulation of the argum…

    code-projects Intern Membership Management System
  • Medium 6.3
    CVE-2024-34328 Public exploit

    An open redirect in Sielox AnyWare v2.1.2 allows attackers to execute a man-in-the-middle attack via a crafted URL.

  • Medium 6.5
    CVE-2024-34327 Public exploit

    Sielox AnyWare v2.1.2 was discovered to contain a SQL injection vulnerability via the email address field of the passwo…

  • Medium 6.1
    CVE-2025-50848

    A file upload vulnerability was discovered in CS Cart 4.18.3, allows attackers to execute arbitrary code. CS Cart 4.18.…

  • Medium 6.1
    CVE-2025-50866 Public exploit

    CloudClassroom-PHP-Project 1.0 contains a reflected Cross-site Scripting (XSS) vulnerability in the email parameter of …

  • Medium 6.1
    CVE-2025-50270

    A stored Cross Site Scripting (xss) vulnerability in the "content management" feature in AnQiCMS v.3.4.11 allows a remo…

  • Medium 6.5
    CVE-2025-50847

    Cross Site Request Forgery (CSRF) vulnerability in CS Cart 4.18.3, allows attackers to add products to a user's compari…

  • Medium 6.5
    CVE-2025-50867 Public exploit

    A SQL Injection vulnerability exists in the takeassessment2.php endpoint of the CloudClassroom-PHP-Project 1.0, where t…

  • Medium 5.4
    CVE-2025-29557 Public exploit

    ExaGrid EX10 6.3 - 7.0.1.P08 is vulnerable to Incorrect Access Control in the MailConfiguration API endpoint, where use…

  • Medium 6.5
    CVE-2025-45769

    php-jwt contains weak encryption

    php-jwt v6.11.0 was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key lengths are expected to be set by an application, not by this library. This dispute is subject to review under CNA rules 4.1.4, 4.1.14, and oth…

    firebase/php-jwt Packagist
  • Medium 6.1
    CVE-2025-51569

    A cross-site scripting (XSS) vulnerability exists in the LB-Link BL-CPE300M 01.01.02P42U14_06 router's web interface. T…