Skip to content
OpenAdvisories

Archive

July 2025

Vulnerabilities first published in this month (UTC), newest first.

← June 2025 2025 / July August 2025 →
  1. 189
  2. 284
  3. 3149
  4. 4187
  5. 58
  6. 628
  7. 7175
  8. 8440
  9. 9110
  10. 10214
  11. 1196
  12. 1249
  13. 1349
  14. 14127
  15. 15156
  16. 16190
  17. 1789
  18. 18110
  19. 1946
  20. 2066
  21. 21237
  22. 22119
  23. 2394
  24. 2478
  25. 25219
  26. 2645
  27. 2741
  28. 28124
  29. 29175
  30. 3088
  31. 31114
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-53770 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsoft is aware that an exploit for CVE-2025-53770 exists in the wild. Microsoft is preparing and fully testing a c…

    Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition
    KEV Jul 20, 2025
  • Critical 9.0
    CVE-2025-54309 Exploited Public exploit EPSS 93%

    CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23, when the DMZ proxy feature is not used, mishandles AS2 validation an…

    CrushFTP CrushFTP
    KEV Jul 22, 2025
  • Critical 9.2
    CVE-2025-54068 Exploited Public exploit Scanner template EPSS 96%

    Livewire vulnerable to remote command execution during property update hydration

    Livewire is a full-stack framework for Laravel. In Livewire v3 up to and including v3.6.3, a vulnerability allows unauthenticated attackers to achieve remote command execution in specific scenarios. The issue stems from how certain component property updates …

    livewire livewire livewire/livewire Packagist
    KEV Mar 20, 2026
  • Critical 9.6
    CVE-2025-25257 Exploited Public exploit Scanner template EPSS 100%

    An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerab…

    Fortinet FortiWeb Network devices
    KEV Jul 18, 2025
  • Critical 10.0
    CVE-2025-20337 Exploited EPSS 74%

    Cisco ISE API Unauthenticated Remote Code Execution Vulnerability

    A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to execute arbitrary code on the underlying operating system as root. The attacker does not require any valid credentials to exploit this vulnerab…

    Cisco Cisco Identity Services Engine Software Cisco ISE Passive Identity Connector Network devices
    KEV Jul 28, 2025
  • Critical 10.0
    CVE-2025-47812 Exploited Public exploit Scanner template EPSS 94%

    In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection …

    Wftpserver Wing FTP Server
    KEV Jul 14, 2025