Statistiche CVE: luglio 2025

🌐 Scopri le cifre chiave delle vulnerabilità pubblicate a luglio 2025 su CVE Find.

🔎 Panoramica

• Numero totale di CVE pubblicate : 3,931 (+3.4% rispetto al mese precedente)
• Vulnerabilità aggiunte al catalogo CISA KEV : 20

📂 Distribuzione per categorie principali

• Cross-site Scripting : 470
• Overflow : 420
• SQL Injection : 418
• Authorization problems : 279
• Memory Corruption : 205
• Code Injection : 137

📈 Distribuzione per punteggio CVSS

• Low : 80
• Medium : 1861
• High : 1408
• Critical : 425

🏢 Fornitori più colpiti

1. linux : 427
2. microsoft : 208
3. debian : 201
4. apple : 116
5. irfanview : 91

📦 Prodotti più colpiti

1. linux linux_kernel : 427
2. debian debian_linux : 200
3. apple macos : 110
4. microsoft windows_server_2025 : 97
5. microsoft windows_server_2022_23h2 : 94

⚠️ CVE rilevanti del mese

• CVE-2014-125121 (10 CRITICAL) : Array Networks vAPV (version 8.3.2.17) and vxAG (version 9.2.0.34) appliances are affected by a privilege escalation vulnerability caused by a combination of hardcoded SSH crede...
• CVE-2013-10040 (10 CRITICAL) : ClipBucket version 2.6 and earlier contains a critical vulnerability in the ofc_upload_image.php script located at /admin_area/charts/ofc-library/. This endpoint allows unauthen...
• CVE-2014-125124 (10 CRITICAL) : An unauthenticated remote command execution vulnerability exists in Pandora FMS versions up to and including 5.0RC1 via the Anyterm web interface, which listens on TCP port 8023...
• CVE-2014-125123 (10 CRITICAL) : An unauthenticated SQL injection vulnerability exists in the Kloxo web hosting control panel (developed by LXCenter) prior to version 6.1.12. The flaw resides in the login-name ...
• CVE-2025-54419 (10 CRITICAL) : A SAML library not dependent on any frameworks that runs in Node. In version 5.0.1, Node-SAML loads the assertion from the (unsigned) original response document. This is differe...

Esplora tutti i dati in dettaglio su CVE Find.