Week 30, 2025
21 July to 27 July 2025. The CVEs published in the week, the most severe of them, and what CISA added to its catalog of known exploited vulnerabilities.
- CVEs published
- 828
- Critical
- 90
- High
- 359
- Added to KEV
- 6
Critical 90High 359Medium 356Low 23Not scored 0All 828 in the list
Added to KEVAttackers use these now; patch them first
- CVE-2025-2776
SysAid On-Prem <= 23.3.40 serverurl Proceessing XML External Entity Injection
SysAid · SysAid On-Prem
ExploitedCritical9.3 - CVE-2025-2775
SysAid On-Prem <= 23.3.40 Checkin Proceessing XML External Entity Injection
SysAid · SysAid On-Prem
ExploitedCritical9.3 - CVE-2025-54309
CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23, when the DMZ proxy feature is not used, mishandles AS2 validation and consequently allows remote attackers…
CrushFTP · CrushFTP
ExploitedCritical9.0 - CVE-2025-6558
Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox…
Google · Chrome
ExploitedHigh8.8 - CVE-2025-49704
Microsoft SharePoint Remote Code Execution Vulnerability
Microsoft · Microsoft SharePoint Enterprise Server 2016
ExploitedHigh8.8 - CVE-2025-49706
Microsoft SharePoint Server Spoofing Vulnerability
Microsoft · Microsoft SharePoint Enterprise Server 2016
ExploitedMedium6.5
Most severe new CVEsBy CVSS score
- CVE-2014-125115
Pandora FMS ≤ 5.0 SP2 Default Credential SQL Injection RCE
Artica ST · Pandora FMS
Critical10.0 - CVE-2025-5243
Arbitrary File Upload in SMG Software's Information Portal
SMG Software · Information Portal
Critical10.0 - CVE-2025-54122
Manager-io/Manager allows unauthenticated full read server-side request forgery in "proxy" endpoint
Manager-io · Manager
Critical10.0 - CVE-2025-41240
Mounted Kubernetes Secrets under a predictable path located within the web server document root
VMware · bitnamicharts/appsmith
Critical10.0 - CVE-2025-38429
bus: mhi: ep: Update read pointer only after buffer is written
Linux · Linux
Critical10.0 - CVE-2025-4285
SQLi in Rolantis Information Technologies' Agentis
Rolantis Information Technologies · Agentis
Critical10.0 - CVE-2019-25224
WP Database Backup < 5.2 - Unauthenticated OS Command Injection
databasebackup · WP Database Backup – Unlimited Database & Files Backup by Backup for WP
Critical9.8 - CVE-2025-6704
An arbitrary file writing vulnerability in the Secure PDF eXchange (SPX) feature of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to pre-auth…
Sophos · Sophos Firewall
Critical9.8 - CVE-2025-7624
An SQL injection vulnerability in the legacy (transparent) SMTP proxy of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to remote code…
Sophos · Sophos Firewall
Critical9.8 - CVE-2015-10137
Website Contact Form With File Upload <= 1.3.4 - Arbitrary File Upload
N-Media · Website Contact Form With File Upload
Critical9.8