Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: July 2025

340 records · 14 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 4 of 4

  • CVE-2025-45346
    32Monitor

    SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request.

    HighCVSS 8.1Proof of conceptEPSS 0%

    bacula · bacula-webJul 29, 2025

  • CVE-2025-54381
    44Plan

    BentoML is Vulnerable to an SSRF Attack Through File Upload Processing

    CriticalCVSS 9.9Proof of conceptEPSS 16%

    bentoml · bentomlJul 29, 2025

  • CVE-2025-31277
    65This week

    The issue was addressed with improved memory handling.

    HighCVSS 8.8KEVWeaponizedEPSS 1%

    apple · safariJul 29, 2025

  • CVE-2025-54430
    36Monitor

    dedupe is vulnerable to secret exfiltration via `issue_comment`

    CriticalCVSS 9.1Proof of conceptEPSS 0%

    dedupeio · dedupeJul 30, 2025

  • CVE-2025-46811
    40Plan

    SUSE Multi Linux Manager allows code execution via unprotected websocket endpoint

    CriticalCVSS 9.3Proof of conceptEPSS 11%

    suse · container suse/manager/5.0/x86_64/server:5.0.5.7.30.1Jul 30, 2025

  • CVE-2025-50578
    40Plan

    LinuxServer.io heimdall 2.6.3-ls307 contains a vulnerability in how it handles user-supplied HTTP headers, specifically `X-Forwarded-Host` a

    CriticalCVSS 9.8Proof of conceptEPSS 2%

    linuxserver · docker-heimdallJul 30, 2025

  • CVE-2025-45619
    26Monitor

    An issue in Aver PTC310UV2 firmware v.0.1.0000.59 allows a remote attacker to execute arbitrary code via the SendAction function

    MediumCVSS 6.5Proof of conceptEPSS 0%

    averusa · ptc310uv2 firmwareJul 30, 2025

  • CVE-2025-45620
    32Monitor

    An issue in Aver PTC310UV2 v.0.1.0000.59 allows a remote attacker to obtain sensitive information via a crafted request

    HighCVSS 8.1Proof of conceptEPSS 0%

    averusa · ptc310uv2 firmwareJul 30, 2025

  • CVE-2025-50777
    31Monitor

    The firmware of the AZIOT 2MP Full HD Smart Wi-Fi CCTV Home Security Camera (version V1.00.02) contains an Incorrect Access Control vulnerab

    HighCVSS 7.8Proof of conceptEPSS 0%

    aziot · 2mp full hd smart wi-fi cctv home security camera firmwareJul 30, 2025

  • CVE-2025-7847
    35Monitor

    AI Engine 2.9.3 - 2.9.4 - Authenticated (Subscriber+) Arbitrary File Upload

    HighCVSS 8.8Proof of conceptEPSS 1%

    tigroumeow · ai engineJul 31, 2025

  • CVE-2025-53558
    34Monitor

    ZXHN-F660T and ZXHN-F660A provided by ZTE Japan K.K.

    HighCVSS 8.7Proof of conceptEPSS 1%

    zte japan. k.k. · zxhn-f660tJul 31, 2025

  • CVE-2025-46359
    34Monitor

    A path traversal issue exists in backup and restore feature of multiple versions of PowerCMS.

    HighCVSS 8.6Proof of conceptEPSS 0%

    alfasado · powercmsJul 31, 2025

  • CVE-2025-54589
    25Monitor

    copyparty Reflected XSS via Filter Parameter

    MediumCVSS 6.1Proof of conceptEPSS 2%

    9001 · copypartyJul 31, 2025

  • CVE-2011-10008
    60This week

    MPlayer Lite r33064 M3U Stack-Based Buffer Overflow

    HighCVSS 8.6WeaponizedEPSS 1%

    mplayer project · mplayer liteJul 31, 2025

  • CVE-2012-10021
    60This week

    D-Link DIR-605L Captcha Handling Buffer Overflow

    CriticalCVSS 9.3WeaponizedEPSS 4%

    dlink · dir-605l firmwareJul 31, 2025

  • CVE-2013-10033
    60This week

    Kimai 0.9.2 db_restore.php SQL Injection

    CriticalCVSS 9.3WeaponizedEPSS 1%

    kimai project · kimaiJul 31, 2025

  • CVE-2013-10034
    60This week

    Kaseya < 6.3.0.2 uploadImage.asp Arbitrary File Upload RCE

    CriticalCVSS 9.3WeaponizedEPSS 2%

    kaseya · kserverJul 31, 2025

  • CVE-2013-10035
    40Plan

    ProcessMaker Open Source < 2.5.2 neoclassic Skin PHP Code Execution

    HighCVSS 8.7WeaponizedEPSS 2%

    processmaker, inc. · processmaker open sourceJul 31, 2025

  • CVE-2013-10036
    40Plan

    Beetel Connection Manager NetConfig.ini Stack-Based Buffer Overflow

    HighCVSS 8.4WeaponizedEPSS 0%

    beetel teletech ltd. · connection managerJul 31, 2025

  • CVE-2013-10037
    60This week

    WebTester 5.x install2.php Unauthenticated Command Execution

    CriticalCVSS 9.3WeaponizedEPSS 13%

    eppler software · webtesterJul 31, 2025

  • CVE-2013-10038
    60This week

    FlashChat Arbitrary File Upload RCE

    CriticalCVSS 9.3WeaponizedEPSS 2%

    tufat · flashchatJul 31, 2025

  • CVE-2013-10039
    40Plan

    GestioIP 3.0 ip_checkhost.cgi RCE

    HighCVSS 8.7WeaponizedEPSS 4%

    gestioip · ipamJul 31, 2025

  • CVE-2013-10040
    60This week

    ClipBucket <= 2.6 ofc_upload_image.php Arbitrary File Upload RCE

    CriticalCVSS 10.0WeaponizedEPSS 4%

    clip-bucket · clipbucketJul 31, 2025

  • CVE-2013-10042
    60This week

    freeFTPd <= 1.0.10 PASS Command Stack-Based Buffer Overflow

    CriticalCVSS 9.3WeaponizedEPSS 2%

    freeftpd · freeftpdJul 31, 2025

  • CVE-2013-10043
    60This week

    Astium VOIP PBX <= 2.1 SQL Injection File Upload RCE

    CriticalCVSS 9.5WeaponizedEPSS 2%

    astium · voip pbxJul 31, 2025

  • CVE-2014-125121
    60This week

    Array Networks vAPV and vxAG Default Credential Privilege Escalation

    CriticalCVSS 10.0WeaponizedEPSS 1%

    array networks · vapvJul 31, 2025

  • CVE-2014-125122
    40Plan

    Linksys WRT120N tmUnblock.cgi Stack-Based Buffer Overflow Admin Password Reset

    MediumCVSS 5.3WeaponizedEPSS 1%

    linksys · wrt120nJul 31, 2025

  • CVE-2014-125123
    60This week

    Kloxo < 6.1.12 Unauthenticated SQL Injection RCE

    CriticalCVSS 10.0WeaponizedEPSS 1%

    lxcenter · kloxoJul 31, 2025

  • CVE-2014-125124
    60This week

    Pandora FMS <= 5.0RC1 Anyterm Unauthenticated Command Injection

    CriticalCVSS 10.0WeaponizedEPSS 2%

    artica st · pandora fmsJul 31, 2025

  • CVE-2014-125125
    60This week

    A10 Networks AX Loadbalancer Path Traversal

    HighCVSS 8.8WeaponizedEPSS 2%

    a10 networks · ax series loadbalancerJul 31, 2025

  • CVE-2014-125126
    60This week

    Simple E-Document Arbitrary File Upload RCE

    CriticalCVSS 9.2WeaponizedEPSS 1%

    simple e-document · simple e-documentJul 31, 2025

  • CVE-2024-34328
    25Monitor

    An open redirect in Sielox AnyWare v2.1.2 allows attackers to execute a man-in-the-middle attack via a crafted URL.

    MediumCVSS 6.3Proof of conceptEPSS 0%

    Jul 31, 2025

  • CVE-2025-29557
    21Monitor

    ExaGrid EX10 6.3 - 7.0.1.P08 is vulnerable to Incorrect Access Control in the MailConfiguration API endpoint, where users with operator-leve

    MediumCVSS 5.4Proof of conceptEPSS 0%

    Jul 31, 2025

  • CVE-2025-52289
    32Monitor

    A Broken Access Control vulnerability in MagnusBilling v7.8.5.3 allows newly registered users to gain escalated privileges by sending a craf

    HighCVSS 8.0Proof of conceptEPSS 0%

    magnussolution · magnusbillingJul 31, 2025

  • CVE-2025-29556
    29Monitor

    ExaGrid EX10 6.3 - 7.0.1.P08 is vulnerable to Incorrect Access Control.

    HighCVSS 7.3Proof of conceptEPSS 0%

    Jul 31, 2025

  • CVE-2025-50867
    26Monitor

    A SQL Injection vulnerability exists in the takeassessment2.php endpoint of the CloudClassroom-PHP-Project 1.0, where the Q5 POST parameter

    MediumCVSS 6.5Proof of conceptEPSS 0%

    vishalmathur · cloudclassroomJul 31, 2025

  • CVE-2024-34327
    26Monitor

    Sielox AnyWare v2.1.2 was discovered to contain a SQL injection vulnerability via the email address field of the password reset form.

    MediumCVSS 6.5Proof of conceptEPSS 0%

    sielox · anywareJul 31, 2025

  • CVE-2025-50866
    24Monitor

    CloudClassroom-PHP-Project 1.0 contains a reflected Cross-site Scripting (XSS) vulnerability in the email parameter of the postquerypublic e

    MediumCVSS 6.1Proof of conceptEPSS 0%

    vishalmathur · cloudclassroomJul 31, 2025

  • CVE-2025-51385
    14Monitor

    D-LINK DI-8200 16.07.26A1 is vulnerable to Buffer Overflow in the yyxz_dlink_asp function via the id parameter.

    LowCVSS 3.5Proof of conceptEPSS 0%

    dlink · di-8200 firmwareJul 31, 2025

  • CVE-2025-8286
    37Monitor

    Güralp Systems FMUS Series and MIN Series Devices

    CriticalCVSS 9.3Proof of conceptEPSS 1%

    güralp systems · güralp fmus seriesJul 31, 2025