July 2025
Published in July 2025
- criticalexploitedCVE-2025-20281: Cisco Identity Services Engine Injection Vulnerabilitycisa-kev
- known exploitedCVE-2014-3931
- criticalexploitedCVE-2025-20337: Cisco Identity Services Engine Injection Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2016-10033
- criticalGitLab Patch Release: 18.2.1, 18.1.3, 18.0.5gitlab
- known exploitedpublic exploitCVE-2019-5418
- criticalGitLab Patch Release: 18.2.1, 18.1.3, 18.0.5gitlab
- known exploitedpublic exploitCVE-2019-9621
- criticalexploitedCVE-2025-54309: CrushFTP Unprotected Alternate Channel Vulnerabilitycisa-kev
- known exploitedCVE-2023-2533
- criticalexploitedCVE-2025-6558: Google Chromium ANGLE and GPU Improper Input Validation Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-20281
- criticalexploitedCVE-2025-2775: SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerabilitycisa-kev
- known exploitedCVE-2025-20337
- criticalexploitedCVE-2025-49706: Microsoft SharePoint Improper Authentication Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-25257
- criticalexploitedCVE-2025-49704: Microsoft SharePoint Code Injection Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-2775
- criticalexploitedCVE-2025-2776: SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-2776
- unknownexploited[Update] Multiple vulnerabilities in Microsoft SharePoint (July 21, 2025)cert-fr-alerte
- known exploitedpublic exploitCVE-2025-47812
- criticalexploitedCVE-2025-53770: Microsoft SharePoint Deserialization of Untrusted Data Vulnerabilitycisa-kev
- known exploitedCVE-2025-48927
- criticalexploitedCVE-2025-47812: Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerabilitycisa-kev
- known exploitedCVE-2025-48928
- criticalexploitedCVE-2025-5777: Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-49704
- unknownJenkins Security Advisory 2025-07-09jenkins
- known exploitedpublic exploitCVE-2025-49706
- criticalGitLab Patch Release: 18.1.2, 18.0.4, 17.11.6gitlab
- known exploitedpublic exploitCVE-2025-53770
- criticalGitLab Patch Release: 18.1.2, 18.0.4, 17.11.6gitlab
- known exploitedpublic exploitCVE-2025-54309
- criticalexploitedCVE-2016-10033: PHPMailer Command Injection Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-5777
- criticalexploitedCVE-2019-5418: Rails Ruby on Rails Path Traversal Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-6543
- criticalexploitedCVE-2025-6554: Google Chromium V8 Type Confusion Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-6554
- criticalexploitedCVE-2025-48928: TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-6558
- criticalexploitedCVE-2025-48927: TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerabilitycisa-kev
- unknownexploitedMultiple vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway (July 1, 2025)cert-fr-alerte