Skip to content
OpenAdvisories

Archive

July 2025

Vulnerabilities first published in this month (UTC), newest first.

5 results · Clear filters · Feed

  • Low 3.5
    CVE-2025-51385 Public exploit

    D-LINK DI-8200 16.07.26A1 is vulnerable to Buffer Overflow in the yyxz_dlink_asp function via the id parameter.

  • Low 3.5
    CVE-2025-8191 Public exploit

    macrozheng mall Swagger UI index.html cross site scripting

    A vulnerability, which was classified as problematic, was found in macrozheng mall up to 1.0.3. Affected is an unknown function of the file /swagger-ui/index.html of the component Swagger UI. The manipulation of the argument configUrl leads to cross site scri…

  • Low 3.7
    CVE-2025-54352 Public exploit

    WordPress 3.5 through 6.8.2 allows remote attackers to guess titles of private and draft posts via pingback.ping XML-RP…

  • Low 3.5
    CVE-2025-7840 Public exploit

    Campcodes Online Movie Theater Seat Reservation System Reserve Your Seat Page index.php cross site scripting

    A vulnerability was found in Campcodes Online Movie Theater Seat Reservation System 1.0. It has been classified as problematic. This affects an unknown part of the file /index.php?page=reserve of the component Reserve Your Seat Page. The manipulation of the a…

  • Low 3.7
    CVE-2025-51591 Public exploit

    A Server-Side Request Forgery (SSRF) in JGM Pandoc v3.6.4 allows attackers to gain access to and compromise the whole i…