CVEs published in July 2025

CVE-2025-53506High

Apache Tomcat Vulnerability in NetApp Products

CVE-2025-22165High

This Medium severity ACE (Arbitrary Code Execution) vulnerability was introduced in version 4.2.8 of Sourcetree for Mac.

CVE-2025-5399Medium

CVE-2025-53023Medium

MySQL Server Vulnerability in NetApp Products

CVE-2025-50106High

CVE-2025-50104Medium

CVE-2025-50102Medium

CVE-2025-50101Medium

CVE-2025-50100Medium

CVE-2025-50099Medium

CVE-2025-50098Medium

CVE-2025-50097Medium

CVE-2025-50096Medium

CVE-2025-50093Medium

CVE-2025-50092Medium

CVE-2025-50091Medium

CVE-2025-50087Medium

CVE-2025-50086Medium

CVE-2025-50085Medium

CVE-2025-50084Medium

CVE-2025-50083Medium

CVE-2025-50082Medium

CVE-2025-50080Medium

CVE-2025-50079Medium

CVE-2025-50078Medium

CVE-2025-50077Medium

CVE-2025-50059High

Java Platform Standard Edition Vulnerability in NetApp Products

CVE-2025-30761Medium

Java Platform Standard Edition Vulnerability in NetApp Products

CVE-2025-30754High

CVE-2025-30749High

CVE-2025-4439High

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

CVE-2025-40597Unrated

SMA 100 Series: Heap-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution

CVE-2025-4878Low

Libssh: use of uninitialized variable in privatekey_from_file

CVE-2025-7624Critical

SQL injection vulnerability in the legacy (transparent) SMTP proxy of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can

CVE-2025-7382High

command injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can

CVE-2025-6704Critical

arbitrary file writing vulnerability in the Secure PDF eXchange (SPX) feature of Sophos Firewall versions older than 21.0 MR2…

CVE-2024-13974High

business logic vulnerability in the Up2Date component of Sophos Firewall older than version 21.0 MR1 (20.0.1) can

CVE-2024-13973Medium

post-auth SQL injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR1 (21.0.1) can potentially

CVE-2025-53770CriticalCISA KEV

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

CVE-2025-53020Critical

CVE-2025-52520High

Apache Tomcat Vulnerability in NetApp Products

CVE-2025-5245Medium

GNU Binutils Vulnerability in NetApp Products

CVE-2025-52434High

Apache Tomcat Vulnerability in NetApp Products

CVE-2025-49812Critical

CVE-2025-49630Critical

CVE-2025-4517Critical

Python Vulnerability in NetApp Products

CVE-2025-4435High

Python Vulnerability in NetApp Products

CVE-2025-4330High

Python Vulnerability in NetApp Products

CVE-2025-4138High

Python Vulnerability in NetApp Products

CVE-2025-40909High

Perl Vulnerability in NetApp Products

CVE-2025-23048Critical

CVE-2024-47252Critical

CVE-2024-43394Critical

CVE-2024-43204Critical

CVE-2024-42516Critical

CVE-2025-7433High

local privilege escalation vulnerability in Sophos Intercept X for Windows with Central Device Encryption 2025.1 and older

CVE-2025-7472High

local privilege escalation vulnerability in the Intercept X for Windows installer prior version 1.22 can

CVE-2024-13972High

vulnerability related to registry permissions in the Intercept X for Windows updater prior to Core Agent version 2024.3.2 can

CVE-2025-5777UnratedCISA KEV

Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability

CVE-2025-41237Critical

VMCI integer-underflow vulnerability

CVE-2023-38036Unrated

security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an unauthenticated attacker to create a buffer overflow that could result in service disruption or arbitrary code execution

CVE-2025-52950Critical

Juniper Security Director: Insufficient authorization for multiple endpoints in web interface

CVE-2025-4516Medium

Python Vulnerability in NetApp Products

CVE-2025-7424High

Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes

CVE-2025-7425High

heap use-after-free in libxslt caused by atype corruption in xmlattrptr

CVE-2025-32988Medium

vulnerability in gnutls othername san export

CVE-2025-49706MediumCISA KEV

Microsoft SharePoint Improper Authentication Vulnerability

CVE-2024-55599Medium

Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiOS version 7.6.0, version 7.4.7 and below…

CVE-2025-5987High

Libssh: invalid return code for chacha20 poly1305 with openssl backend

CVE-2025-5351Medium

Libssh: double free vulnerability in libssh key export functions

CVE-2025-5372Medium

Libssh: incorrect return code handling in ssh_kdf in libssh

CVE-2025-32463CriticalCISA KEV

Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability

CVE-2025-29087High

SQLite Vulnerability in NetApp Products

CVE-2025-27533Medium

Apache ActiveMQ Vulnerability in NetApp Products

CVE-2025-1179High

GNU Binutils Vulnerability in NetApp Products

CVE-2025-0840High

GNU Binutils Vulnerability in NetApp Products

CVE-2025-6563Unrated

RouterOS: cross-site scripting vulnerability is present in the hotspot of MikroTik's RouterOS on versions below 7.19.2.