CVE Brief - July 14, 2025

Monday, July 14, 2025 Archive

Archived Security Snapshot

Critical vulnerabilities, curated daily for security professionals

🎯 SSCV Profile

See how vulnerabilities affect your specific environment

CRS uses the System Security Context Vector (SSCV) Framework v1.0 to adjust CVSS scores based on your system's exposure level, network position, and business criticality. Learn more about SSCV Framework

Select your system profile:

Risk scores will be adjusted based on your selected environment

Archived Security Brief

This curated brief highlights 5 critical vulnerabilities and 69 high-priority updates requiring immediate attention.

74 total vulnerabilities disclosed in last 24 hours

💡 Tip: Swipe CVE cards left to ⭐ star, right to ❌ remove

CISA Known Exploited Vulnerabilities

⚠️ CISA KEV URGENT

CVE-2019-6693

9.5 📝

Fortinet FortiOS June 24, 2025

⏰ Federal Deadline: July 15, 2025 (2 days remaining)

Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability - Active in CISA KEV catalog.

CVSS Base 9.5

→

CRS Select profile

⚠️ CISA KEV URGENT

CVE-2024-0769

9.5 📝

D-Link DIR-859 Router June 24, 2025

⏰ Federal Deadline: July 15, 2025 (2 days remaining)

D-Link DIR-859 Router Path Traversal Vulnerability - Active in CISA KEV catalog.

CVSS Base 9.5

→

CRS Select profile

⚠️ CISA KEV URGENT

CVE-2024-54085

9.5 📝

AMI MegaRAC SPx June 24, 2025

⏰ Federal Deadline: July 15, 2025 (2 days remaining)

AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability - Active in CISA KEV catalog.

CVSS Base 9.5

→

CRS Select profile

⚠️ CISA KEV URGENT

CVE-2025-6543

9.5 📝

Citrix NetScaler ADC and Gateway June 29, 2025

⏰ Federal Deadline: July 20, 2025 (7 days remaining)

Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability - Active in CISA KEV catalog.

CVSS Base 9.5

→

CRS Select profile

⚠️ CISA KEV

CVE-2025-48928

9.5 📝

TeleMessage TM SGNL June 30, 2025

⏰ Federal Deadline: July 21, 2025 (8 days remaining)

TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability - Active in CISA KEV catalog.

CVSS Base 9.5

→

CRS Select profile

⚠️ CISA KEV

CVE-2025-48927

9.5 📝

TeleMessage TM SGNL June 30, 2025

⏰ Federal Deadline: July 21, 2025 (8 days remaining)

TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability - Active in CISA KEV catalog.

CVSS Base 9.5

→

CRS Select profile

⚠️ CISA KEV

CVE-2025-6554

9.5 📝

Google Chromium V8 July 1, 2025

⏰ Federal Deadline: July 22, 2025 (9 days remaining)

Google Chromium V8 Type Confusion Vulnerability - Active in CISA KEV catalog.

CVSS Base 9.5

→

CRS Select profile

⚠️ CISA KEV

CVE-2019-9621

9.5 📝

Synacor Zimbra Collaboration Suite (ZCS) July 6, 2025

⏰ Federal Deadline: July 27, 2025 (14 days remaining)

Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability - Active in CISA KEV catalog.

CVSS Base 9.5

→

CRS Select profile

⚠️ CISA KEV

CVE-2019-5418

9.5 📝

Rails Ruby on Rails July 6, 2025

⏰ Federal Deadline: July 27, 2025 (14 days remaining)

Rails Ruby on Rails Path Traversal Vulnerability - Active in CISA KEV catalog.

CVSS Base 9.5

→

CRS Select profile

⚠️ CISA KEV

CVE-2016-10033

9.5 📝

PHP PHPMailer July 6, 2025

⏰ Federal Deadline: July 27, 2025 (14 days remaining)

PHPMailer Command Injection Vulnerability - Active in CISA KEV catalog.

CVSS Base 9.5

→

CRS Select profile

⚠️ CISA KEV

CVE-2014-3931

9.5 📝

Looking Glass Multi-Router Looking Glass (MRLG) July 6, 2025

⏰ Federal Deadline: July 27, 2025 (14 days remaining)

Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability - Active in CISA KEV catalog.

CVSS Base 9.5

→

CRS Select profile

⚠️ CISA KEV

CVE-2025-47812

9.5 📝

Wing FTP Server Wing FTP Server July 13, 2025

⏰ Federal Deadline: August 3, 2025 (21 days remaining)

Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability - Active in CISA KEV catalog.

CVSS Base 9.5

→

CRS Select profile

Critical Vulnerabilities

CVE-2025-7451

9.8 📝

The iSherlock developed by Hgiga has an OS Command Injection Multiple Products Jul 14, 2025

The iSherlock developed by Hgiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server. This vulnerability...

CVSS Base 9.8

→

CRS Select profile

CVE-2025-53833

10 📝

LaRecipe is an application that allows users to create documentation with Markdown inside a Laravel Multiple Products Jul 14, 2025

LaRecipe is an application that allows users to create documentation with Markdown inside a Laravel app. Versions prior to 2.8.1 are vulnerable to Server-Side Template Injection (SSTI), which could po...

CVSS Base 10

→

CRS Select profile

CVE-2025-7574

9.8 📝

A Multiple Products Jul 14, 2025

A vulnerability, which was classified as critical, was found in LB-LINK BL-AC1900, BL-AC2100_AZ3, BL-AC3600, BL-AX1800, BL-AX5400P and BL-WR9000 up to 20250702. Affected is the function reboot/restore...

CVSS Base 9.8

→

CRS Select profile

CVE-2025-53825

9.4 📝

Dokploy is a Multiple Products Jul 14, 2025

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to version 0.24.3, an unauthenticated preview deployment vulnerability in Dokploy allows any user to execute arbitrary code and acc...

CVSS Base 9.4

→

CRS Select profile

CVE-2025-53835

9 📝

XWiki Rendering is a generic rendering system that converts textual input in a given syntax Multiple Products Jul 14, 2025

XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc). Starting in version 5.4.5 and prior to version 14...

CVSS Base 9

→

CRS Select profile

High Priority Updates

CVE-2025-53689

8.8 📝

Blind Multiple Products July 14, 2025

Blind XXE Vulnerabilities in jackrabbit-spi-commons and jackrabbit-core in Apache Jackrabbit < 2

CVSS Base 8.8

→

CRS Select profile

CVE-2025-7619

8.8 📝

Unknown Multiple Products July 14, 2025

BatchSignCS, a background Windows application developed by WellChoose, has an Arbitrary File Write vulnerability

CVSS Base 8.8

→

CRS Select profile

CVE-2024-51768

8 📝

License Multiple Products July 14, 2025

An hsqldb-related remote code execution vulnerability exists in HPE AutoPass License Server (APLS) prior to 9

CVSS Base 8

→

CRS Select profile

CVE-2025-7521

7.3 📝

Management Multiple Products July 14, 2025

A vulnerability, which was classified as critical, was found in PHPGurukul Vehicle Parking Management System 1

CVSS Base 7.3

→

CRS Select profile

CVE-2025-7534

7.3 📝

Management Multiple Products July 14, 2025

A vulnerability was found in PHPGurukul Student Result Management System 2

CVSS Base 7.3

→

CRS Select profile

CVE-2025-7542

7.3 📝

Management Multiple Products July 14, 2025

A vulnerability was found in PHPGurukul User Registration & Login and User Management System 3

CVSS Base 7.3

→

CRS Select profile

CVE-2025-7604

7.3 📝

Management Multiple Products July 14, 2025

A vulnerability was found in PHPGurukul Hospital Management System 4

CVSS Base 7.3

→

CRS Select profile

CVE-2024-51767

7.3 📝

License Multiple Products July 14, 2025

An authentication bypass vulnerability exists in HPE AutoPass License Server (APLS) prior to 9

CVSS Base 7.3

→

CRS Select profile

CVE-2024-51769

7.5 📝

License Multiple Products July 14, 2025

An information disclosure vulnerability exists in HPE AutoPass License Server (APLS) prior to 9

CVSS Base 7.5

→

CRS Select profile

CVE-2025-7620

8.8 📝

The Multiple Products July 14, 2025

The cross-browser document creation component produced by Digitware System Integration Corporation has a Remote Code Execution vulnerability

CVSS Base 8.8

→

CRS Select profile

CVE-2025-7527

8.8 📝

was Multiple Products July 14, 2025

A vulnerability was found in Tenda FH1202 1

CVSS Base 8.8

→

CRS Select profile

CVE-2025-7528

8.8 📝

classified Multiple Products July 14, 2025

A vulnerability classified as critical has been found in Tenda FH1202 1

CVSS Base 8.8

→

CRS Select profile

CVE-2025-7529

8.8 📝

classified Multiple Products July 14, 2025

A vulnerability classified as critical was found in Tenda FH1202 1

CVSS Base 8.8

→

CRS Select profile

CVE-2025-7530

8.8 📝

A Multiple Products July 14, 2025

A vulnerability, which was classified as critical, has been found in Tenda FH1202 1

CVSS Base 8.8

→

CRS Select profile

CVE-2025-7531

8.8 📝

A Multiple Products July 14, 2025

A vulnerability, which was classified as critical, was found in Tenda FH1202 1

CVSS Base 8.8

→

CRS Select profile

CVE-2025-7532

8.8 📝

has Multiple Products July 14, 2025

A vulnerability has been found in Tenda FH1202 1

CVSS Base 8.8

→

CRS Select profile

CVE-2025-7544

8.8 📝

was Multiple Products July 14, 2025

A vulnerability was found in Tenda AC1206 15

CVSS Base 8.8

→

CRS Select profile

CVE-2025-7548

8.8 📝

has Multiple Products July 14, 2025

A vulnerability has been found in Tenda FH1201 1

CVSS Base 8.8

→

CRS Select profile

CVE-2025-7549

8.8 📝

was Multiple Products July 14, 2025

A vulnerability was found in Tenda FH1201 1

CVSS Base 8.8

→

CRS Select profile

CVE-2025-7550

8.8 📝

was Multiple Products July 14, 2025

A vulnerability was found in Tenda FH1201 1

CVSS Base 8.8

→

CRS Select profile

CVE-2025-7551

8.8

was Multiple Products July 14, 2025

A vulnerability was found in Tenda FH1201 1

CVSS Base 8.8

→

CRS Select profile

CVE-2025-7570

8.8

UTT Multiple Products July 14, 2025

A vulnerability was found in UTT HiPER 840G up to 3

CVSS Base 8.8

→

CRS Select profile

CVE-2025-7571

8.8

UTT Multiple Products July 14, 2025

A vulnerability classified as critical has been found in UTT HiPER 840G up to 3

CVSS Base 8.8

→

CRS Select profile

CVE-2025-7586

8.8

was Multiple Products July 14, 2025

A vulnerability was found in Tenda AC500 2

CVSS Base 8.8

→

CRS Select profile

CVE-2025-7596

8.8

was Multiple Products July 14, 2025

A vulnerability was found in Tenda FH1205 2

CVSS Base 8.8

→

CRS Select profile

CVE-2025-7597

8.8

classified Multiple Products July 14, 2025

A vulnerability classified as critical has been found in Tenda AX1803 1

CVSS Base 8.8

→

CRS Select profile

CVE-2025-7598

8.8

classified Multiple Products July 14, 2025

A vulnerability classified as critical was found in Tenda AX1803 1

CVSS Base 8.8

→

CRS Select profile

CVE-2025-53819

7.9

package Multiple Products July 14, 2025

Nix is a package manager for Linux and other Unix systems

CVSS Base 7.9

→

CRS Select profile

CVE-2025-25180

7.8

Software Multiple Products July 14, 2025

Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages

CVSS Base 7.8

→

CRS Select profile

CVE-2025-7564

7.8

A Multiple Products July 14, 2025

A vulnerability, which was classified as critical, has been found in LB-LINK BL-AC3600 1

CVSS Base 7.8

→

CRS Select profile

CVE-2025-27582

7.6

Password Multiple Products July 14, 2025

The Secure Password extension in One Identity Password Manager before 5

CVSS Base 7.6

→

CRS Select profile

CVE-2025-53015

7.5

ImageMagick Multiple Products July 14, 2025

ImageMagick is free and open-source software used for editing and manipulating digital images

CVSS Base 7.5

→

CRS Select profile

CVE-2025-53101

7.4

ImageMagick Multiple Products July 14, 2025

ImageMagick is free and open-source software used for editing and manipulating digital images

CVSS Base 7.4

→

CRS Select profile

CVE-2025-7508

7.3 📝

Modern Multiple Products July 14, 2025

A vulnerability, which was classified as critical, has been found in code-projects Modern Bag 1

CVSS Base 7.3

→

CRS Select profile

CVE-2025-7509

7.3 📝

Modern Multiple Products July 14, 2025

A vulnerability, which was classified as critical, was found in code-projects Modern Bag 1

CVSS Base 7.3

→

CRS Select profile

CVE-2025-7510

7.3 📝

Modern Multiple Products July 14, 2025

A vulnerability has been found in code-projects Modern Bag 1

CVSS Base 7.3

→

CRS Select profile

CVE-2025-7512

7.3 📝

Modern Multiple Products July 14, 2025

A vulnerability was found in code-projects Modern Bag 1

CVSS Base 7.3

→

CRS Select profile

CVE-2025-7513

7.3 📝

Modern Multiple Products July 14, 2025

A vulnerability was found in code-projects Modern Bag 1

CVSS Base 7.3

→

CRS Select profile

CVE-2025-7514

7.3 📝

Modern Multiple Products July 14, 2025

A vulnerability was found in code-projects Modern Bag 1

CVSS Base 7.3

→

CRS Select profile

CVE-2025-7515

7.3 📝

Booking Multiple Products July 14, 2025

A vulnerability classified as critical has been found in code-projects Online Appointment Booking System 1

CVSS Base 7.3

→

CRS Select profile

CVE-2025-7516

7.3 📝

Booking Multiple Products July 14, 2025

A vulnerability classified as critical was found in code-projects Online Appointment Booking System 1

CVSS Base 7.3

→

CRS Select profile

CVE-2025-7517

7.3 📝

Booking Multiple Products July 14, 2025

A vulnerability, which was classified as critical, has been found in code-projects Online Appointment Booking System 1

CVSS Base 7.3

→

CRS Select profile

CVE-2025-7523

7.3 📝

Jinher Multiple Products July 14, 2025

A vulnerability was found in Jinher OA 1

CVSS Base 7.3

→

CRS Select profile

CVE-2025-7533

7.3 📝

Job Multiple Products July 14, 2025

A vulnerability was found in code-projects Job Diary 1

CVSS Base 7.3

→

CRS Select profile

CVE-2025-7535

7.3 📝

Inventory Multiple Products July 14, 2025

A vulnerability was found in Campcodes Sales and Inventory System 1

CVSS Base 7.3

→

CRS Select profile

CVE-2025-7536

7.3 📝

Inventory Multiple Products July 14, 2025

A vulnerability was found in Campcodes Sales and Inventory System 1

CVSS Base 7.3

→

CRS Select profile

CVE-2025-7537

7.3 📝

Inventory Multiple Products July 14, 2025

A vulnerability classified as critical has been found in Campcodes Sales and Inventory System 1

CVSS Base 7.3

→

CRS Select profile

CVE-2025-7538

7.3 📝

Inventory Multiple Products July 14, 2025

A vulnerability classified as critical was found in Campcodes Sales and Inventory System 1

CVSS Base 7.3

→

CRS Select profile

CVE-2025-7539

7.3 📝

Booking Multiple Products July 14, 2025

A vulnerability, which was classified as critical, has been found in code-projects Online Appointment Booking System 1

CVSS Base 7.3

→

CRS Select profile

CVE-2025-7540

7.3 📝

Booking Multiple Products July 14, 2025

A vulnerability, which was classified as critical, was found in code-projects Online Appointment Booking System 1

CVSS Base 7.3

→

CRS Select profile

CVE-2025-7541

7.3 📝

Booking Multiple Products July 14, 2025

A vulnerability has been found in code-projects Online Appointment Booking System 1

CVSS Base 7.3

→

CRS Select profile

CVE-2025-7547

7.3 📝

Reservation Multiple Products July 14, 2025

A vulnerability, which was classified as critical, was found in Campcodes Online Movie Theater Seat Reservation System 1

CVSS Base 7.3

→

CRS Select profile

CVE-2025-7576

7.3

Series Multiple Products July 14, 2025

A vulnerability was found in Teledyne FLIR FB-Series O and FLIR FH-Series ID 1

CVSS Base 7.3

→

CRS Select profile

CVE-2025-7587

7.3

Booking Multiple Products July 14, 2025

A vulnerability was found in code-projects Online Appointment Booking System 1

CVSS Base 7.3

→

CRS Select profile

CVE-2025-7593

7.3

Job Multiple Products July 14, 2025

A vulnerability was found in code-projects Job Diary 1

CVSS Base 7.3

→

CRS Select profile

CVE-2025-7594

7.3

Job Multiple Products July 14, 2025

A vulnerability was found in code-projects Job Diary 1

CVSS Base 7.3

→

CRS Select profile

CVE-2025-7595

7.3

Job Multiple Products July 14, 2025

A vulnerability was found in code-projects Job Diary 1

CVSS Base 7.3

→

CRS Select profile

CVE-2025-7605

7.3

AVL Multiple Products July 14, 2025

A vulnerability was found in code-projects AVL Rooms 1

CVSS Base 7.3

→

CRS Select profile

CVE-2025-7606

7.3

AVL Multiple Products July 14, 2025

A vulnerability classified as critical has been found in code-projects AVL Rooms 1

CVSS Base 7.3

→

CRS Select profile

CVE-2025-7607

7.3

Shopping Multiple Products July 14, 2025

A vulnerability, which was classified as critical, has been found in code-projects Simple Shopping Cart 1

CVSS Base 7.3

→

CRS Select profile

CVE-2025-7608

7.3

Shopping Multiple Products July 14, 2025

A vulnerability, which was classified as critical, was found in code-projects Simple Shopping Cart 1

CVSS Base 7.3

→

CRS Select profile

CVE-2025-7609

7.3

Shopping Multiple Products July 14, 2025

A vulnerability has been found in code-projects Simple Shopping Cart 1

CVSS Base 7.3

→

CRS Select profile

CVE-2025-7610

7.3

Billing Multiple Products July 14, 2025

A vulnerability was found in code-projects Electricity Billing System 1

CVSS Base 7.3

→

CRS Select profile

CVE-2025-7611

7.3

Wedding Multiple Products July 14, 2025

A vulnerability was found in code-projects Wedding Reservation 1

CVSS Base 7.3

→

CRS Select profile

CVE-2025-7612

7.3

Mobile Multiple Products July 14, 2025

A vulnerability was found in code-projects Mobile Shop 1

CVSS Base 7.3

→

CRS Select profile

CVE-2024-58258

7.2 📝

SugarCRM Multiple Products July 14, 2025

SugarCRM before 13

CVSS Base 7.2

→

CRS Select profile

CVE-2025-7602

7.2

D-Link Multiple Products July 14, 2025

A vulnerability was found in D-Link DI-8100 16

CVSS Base 7.2

→

CRS Select profile

CVE-2025-7603

7.2

D-Link Multiple Products July 14, 2025

A vulnerability was found in D-Link DI-8100 16

CVSS Base 7.2

→

CRS Select profile

CVE-2025-1384

Least Multiple Products July 14, 2025

Least Privilege Violation (CWE-272) Vulnerability exists in the communication function between the NJ/NX-series Machine Automation Controllers and the Sysmac Studio Software

CVSS Base 7

→

CRS Select profile

Archived Security Snapshot

🎯 SSCV Profile

📊 Archived Security Brief

Section Navigation

⚠️ CISA Known Exploited Vulnerabilities

🚨 Critical Vulnerabilities

⚠️ High Priority Updates

⭐ Starred CVEs

Archived Security Brief

CISA Known Exploited Vulnerabilities

Critical Vulnerabilities

High Priority Updates