Skip to content
OpenAdvisories

Archive

July 2025

Vulnerabilities first published in this month (UTC), newest first.

← June 2025 2025 / July August 2025 →
  1. 189
  2. 284
  3. 3149
  4. 4187
  5. 58
  6. 628
  7. 7175
  8. 8440
  9. 9110
  10. 10214
  11. 1196
  12. 1249
  13. 1349
  14. 14127
  15. 15156
  16. 16190
  17. 1789
  18. 18110
  19. 1946
  20. 2066
  21. 21237
  22. 22119
  23. 2394
  24. 2478
  25. 25219
  26. 2645
  27. 2741
  28. 28124
  29. 29175
  30. 3088
  31. 31114
All Critical High Medium Low Exploited only Public exploit

1,456 results · Clear filters · Feed

  • Medium 5.4
    CVE-2025-49491

    Resource leaks in traffic_stat

    Improper Resource Shutdown or Release vulnerability in ASR Falcon_Linux、Kestrel、Lapwing_Linux on Linux (traffic_stat modules) allows Resource Leak Exposure. This vulnerability is associated with program files traffic_stat/traffic_service/traffic_service.C. Th…

    ASR Falcon_Linux、Kestrel、Lapwing_Linux
  • Medium 5.4
    CVE-2025-49490

    Resource leaks in router

    Resource leak vulnerability in ASR180x in router allows Resource Leak Exposure. This vulnerability is associated with program files router/sms/sms.c. This issue affects Falcon_Linux、Kestrel、Lapwing_Linux: before v1536.

    ASR Falcon_Linux、Kestrel、Lapwing_Linux
  • Medium 5.4
    CVE-2025-49489

    Resource leaks in cm

    Improper Resource Shutdown or Release vulnerability in ASR Falcon_Linux、Kestrel、Lapwing_Linux on Linux (con_mgr components) allows Resource Leak Exposure. This vulnerability is associated with program files con_mgr/dialer_task.C. This issue affects Falcon_Lin…

    ASR Falcon_Linux、Kestrel、Lapwing_Linux
  • Medium 6.4
    CVE-2025-6756

    Ultra Addons for Contact Form 7 <= 3.5.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via UACF7_CUSTOM_FIELDS Shortcode

    The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's UACF7_CUSTOM_FIELDS shortcode in all versions up to, and including, 3.5.21 due to insufficient input sanitization and output escaping on use…

    themefic Ultra Addons for Contact Form 7 Web / CMS
  • Medium 5.4
    CVE-2025-5072

    Resource leaks in cm

    Resource leak vulnerability in ASR180x、ASR190x in con_mgr allows Resource Leak Exposure.This issue affects Falcon_Linux、Kestrel、Lapwing_Linux: before v1536.

    ASR Falcon_Linux、Kestrel、Lapwing_Linux
  • Medium 6.8
    CVE-2025-6081

    Pass-back attack in Konica Minolta bizhub 227 multifunctional printers

    Insufficiently Protected Credentials in LDAP in Konica Minolta bizhub 227 Multifunction printers version GCQ-Y3 or earlier allows an attacker can reconfigure the target device to use an external LDAP service controlled by the attacker. If an LDAP password is …

    Konica Minolta bizhub 227 Multifunction printers
  • Medium 5.3
    CVE-2025-5967

    A stored cross-site scripting vulnerability in ENS HX 10.0.4 allows a malicious user to inject arbitrary HTML into the …

    Trellix Endpoint Security HX
  • Medium 4.4
    CVE-2024-46993

    Electron Vulnerable to Heap Buffer Overflow in NativeImage::CreateFromPath

    Electron is an open source framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. In versions prior to 28.3.2, 29.3.3, and 30.0.3, the nativeImage.createFromPath() and nativeImage.createFromBuffer() functions call a function…

    electron electron electron npm
  • Medium 5.4
    CVE-2025-53096

    Sunshine clickjacking in the UI leads to unauthorized actions being performed

    Sunshine is a self-hosted game stream host for Moonlight. Prior to version 2025.628.4510, the web UI of Sunshine lacks protection against Clickjacking attacks. This vulnerability allows an attacker to embed the Sunshine interface within a malicious website us…

    LizardByte Sunshine
  • Medium 6.1
    CVE-2025-2141

    IBM System Storage Virtualization Engine TS7700 cross-site scripting

    IBM System Storage Virtualization Engine TS7700 3957 VED R5.4 8.54.2.17, R6.0 8.60.0.115, 3948 VED R5.4 8.54.2.17, R6.0 8.60.0.115, and 3948 VEF R6.0 8.60.0.115 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed ar…

    IBM System Storage Virtualization Engine TS7700
  • Medium 5.4
    CVE-2025-36056

    IBM System Storage Virtualization Engine TS7700 cross-site scripting

    IBM System Storage Virtualization Engine TS7700 3957 VED R5.4 8.54.2.17, R6.0 8.60.0.115, 3948 VED R5.4 8.54.2.17, R6.0 8.60.0.115, and 3948 VEF R6.0 8.60.0.115 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed ar…

    IBM System Storage Virtualization Engine TS7700
  • Medium 6.5
    CVE-2025-50641

    Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the addWifiMacFilter function via the parameter deviceI…

  • Medium 6.5
    CVE-2025-50405

    Intelbras RX1500 Router v2.2.17 and before is vulnerable to Incorrect Access Control in the FirmwareUpload function and…

  • Medium 5.3
    CVE-2025-50404

    Intelbras RX1500 Router v2.2.17 and before is vulnerable to Integer Overflow. The websReadEvent function incorrectly us…

  • Medium 6.1
    CVE-2025-45083

    Incorrect access control in Ullu (Android version v2.9.929 and IOS version v2.8.0) allows attackers to bypass parental …

  • Medium 5.7
    CVE-2025-52294

    Insufficient validation of the screen lock mechanism in Trust Wallet v8.45 allows physically proximate attackers to byp…