CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- campcodes online learning management system Campcodes Online Learning Management System login.php sql injection 6.9 Medium
- campcodes online learning management system Campcodes Online Learning Management System login.php sql injection 6.9 Medium
- hkritesh009 grocery list management web app, grocery list management web +1 more HKritesh009 Grocery List Management Web App update.php sql injection 6.9 Medium
- tenda ch22, ch22 firmware +1 more Tenda CH22 httpd IPSECsave fromIpsecitem stack-based overflow 8.7 High
- benjaminjonard koillection Koillection csrf_protection_controller.js cross-site request forgery 5.3 Medium
- campcodes hospital management system Campcodes Hospital Management System Edit Doctor Specialization edit-doctor-specialization.php cross site scripting 4.8 Medium
- d-link di-500wf, dlink di-500wf firmware +1 more D-Link DI-500WF jhttpd version_upgrade.asp os command injection 5.1 Medium
- campcodes online loan management system Campcodes Online Loan Management System ajax.php sql injection 6.9 Medium
- code-projects human resource integrated system code-projects Human Resource Integrated System login_attendance2.php sql injection 6.9 Medium
- code-projects human resource integrated system code-projects Human Resource Integrated System login.php sql injection 6.9 Medium
- code-projects human resource integrated system code-projects Human Resource Integrated System login_query12.php sql injection 6.9 Medium
- code-projects human resource integrated system code-projects Human Resource Integrated System log_query.php sql injection 6.9 Medium
- campcodes online water billing system Campcodes Online Water Billing System process.php sql injection 6.9 Medium
- portabilis i-educar Portabilis i-Educar educar_tipo_ensino_cad.php cross site scripting 5.1 Medium
- zoneland o2oa O2OA Personal Profile importmodel cross site scripting 5.1 Medium
- zoneland o2oa O2OA Personal Profile statement cross site scripting 5.1 Medium
- zoneland o2oa O2OA Personal Profile table cross site scripting 5.1 Medium
- zoneland o2oa O2OA Personal Profile stat cross site scripting 5.1 Medium
- code-projects human resource integrated system code-projects Human Resource Integrated System login_timeee.php sql injection 6.9 Medium
- offis dcmtk DCMTK dcm2img diybrpxt.h memory corruption 4.8 Medium
- tenda ac9, ac9 firmware +1 more Tenda AC9 Administrative shadow hard-coded credentials 2.0 Low
- admerc apartment management system itsourcecode Apartment Management System updateProfile.php sql injection 6.9 Medium
- phpgurukul online course registration PHPGurukul Online Course Registration student-registration.php sql injection 6.9 Medium
- givanz vvveb givanz Vvveb login.tpl cross site scripting 5.3 Medium
- d-link dir-816l, dlink dir-816l firmware +1 more D-Link DIR-816L soap.cgi soapcgi_main os command injection 5.3 Medium
- campcodes farm management system Campcodes Farm Management System review.php sql injection 6.9 Medium
- cudy lt500e, lt500e firmware +1 more Cudy LT500E Web shadow hard-coded password 2.0 Low
- portabilis i-educar Portabilis i-Educar educar_nivel_ensino_cad.php cross site scripting 5.1 Medium
- portabilis i-educar Portabilis i-Educar educar_tipo_regime_cad.php cross site scripting 5.1 Medium
- portabilis i-educar Portabilis i-Educar educar_tipo_ocorrencia_disciplinar_cad.php cross site scripting 5.1 Medium
- portabilis i-educar Portabilis i-Educar edit cross site scripting 5.1 Medium
- portabilis i-educar Portabilis i-Educar Cadastrar tabela de arredondamento edit cross site scripting 5.1 Medium
- zoneland o2oa O2OA Personal Profile script cross site scripting 5.1 Medium
- zoneland o2oa O2OA Personal Profile process cross site scripting 5.1 Medium
- zoneland o2oa O2OA Personal Profile unit cross site scripting 5.1 Medium
- zoneland o2oa O2OA Personal Profile form cross site scripting 5.1 Medium
- milmor amministrazione trasparente Amministrazione Trasparente <= 9.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via print_r Function 5.5 Medium
- mojoomla school management WordPress School Management Plugin <= 1.93.1 (02-07-2025) - Arbitrary File Upload Vulnerability 9.9 Critical
- solwin blog designer pro WordPress Blog Designer PRO plugin <= 3.4.7 - Unauthenticated Non-Arbitrary Local File Inclusion vulnerability 8.1 High
- hamid alinia login with phone number WordPress Login with Phone Number plugin <= 1.6.93 - Broken Access Control vulnerability 9.8 Critical
- dmitry v. (ceo of "ukr solution") barcode scanner with inventory & order manager WordPress Barcode Scanner and Inventory manager plugin <= 1.5.3 - Broken Access Control to XSS vulnerability 7.1 High
- zoneland o2oa O2OA Personal Profile script cross site scripting 5.1 Medium
-
openvpnDebian openvpn - regression update No score - janobe water billing system SourceCodester Water Billing System edit.php sql injection 6.9 Medium
- janobe water billing system SourceCodester Water Billing System paybill.php sql injection 6.9 Medium
- janobe water billing system SourceCodester Water Billing System viewbill.php sql injection 6.9 Medium
- oretnom23 simple cafe billing system SourceCodester Simple Cafe Billing System sales_report.php sql injection 6.9 Medium
- oretnom23 simple cafe billing system SourceCodester Simple Cafe Billing System receipt.php sql injection 6.9 Medium
- janobe online book store SourceCodester Online Book Store publisher_list.php sql injection 6.9 Medium
- razormist online polling system, sourcecodester online polling system code +1 more SourceCodester Online Polling System Code checklogin.php sql injection 6.9 Medium
- Show olderLoading…