Vulnerability Summary for the ... Note

Vulnerability Summary for the Week of July 7, 2025

Multiple high-vulnerability issues have been identified in various products, including Radiflow's iSAP Smart Collector, WAGO's Wago Device Sphere, and wftpserver's Wing FTP Server. These vulnerabilities allow for remote code execution, arbitrary file uploads, and OS command injection, among other issues. The CVSS scores for these vulnerabilities range from 9.1 to 10, indicating a high level of severity. Other affected products include webbertakken's docusaurus-plugin-content-gists, eemitch's Simple File List, and AIT Themes' AIT CSV import/export. Qualcomm's Snapdragon and Honeywell's C300 PCNT02 also have high-severity vulnerabilities, including cryptographic issues and integer underflow vulnerabilities. Phoenix Contact's CHARX SEC-3150 and Adobe's Adobe Connect have vulnerabilities that allow for remote code execution and deserialization of untrusted data. Other affected products include Axis Communications' AXIS Camera Station Pro, Frauscher's FDS102, and Hewlett Packard Enterprise's HPE Networking Instant On. SAP SE has multiple high-severity vulnerabilities in its products, including SAP NetWeaver Application Server for Java and SAP S/4HANA. Microsoft's Windows 10 Version 1809 and Schiocco's Support Board also have high-severity vulnerabilities, including heap-based buffer overflow and arbitrary file deletion issues.