CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- limesurvey, tesi gandia integra total +1 moreCRLF Injection in Limesurvey5.1 Medium
- limesurvey, tesi gandia integra total +1 moreSQL Injection in Limesurvey9.3 Critical
- tesi gandia integra totalSQL injection vulnerability in Gandia Integra Total8.7 High
- tesi gandia integra totalSQL injection vulnerability in Gandia Integra Total8.7 High
- tesi gandia integra totalSQL injection vulnerability in Gandia Integra Total8.7 High
- tesi gandia integra totalSQL injection vulnerability in Gandia Integra Total9.3 Critical
- tesi gandia integra totalSQL injection vulnerability in Gandia Integra Total9.3 Critical
- shaonsina sina extension for elementorSina Extension for Elementor <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via `Sina Posts`, `Sina Blog Post` and `Sina Table` Widgets6.4 Medium
- blockspare — news, magazine and blog addons for (gutenberg) block editorBlockSpare: Gutenberg Blocks & Patterns for Blogs, Magazines, Business Sites <= 3.2.13.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Carousel and Image Slider Widgets6.4 Medium
- asus ai suiteA null pointer dereference vulnerability exists in the IOMap64.sys driver of ASUS AI Suite 3. The...6.7 Medium
linux-cloud-tools-genericTuxCare,linux-cloud-tools-lowlatencyTuxCare,linux-crashdumpTuxCare +9 more +11 moreUpdate of linux-metaNo scorelinux-cloud-tools-genericTuxCare,linux-cloud-tools-lowlatencyTuxCare,linux-crashdumpTuxCare +9 more +11 moreUpdate of linux-metaNo score- anisha online medicine guidecode-projects Online Medicine Guide login.php sql injection6.9 Medium
- anisha online medicine guidecode-projects Online Medicine Guide cussignup.php sql injection6.9 Medium
- anisha online medicine guidecode-projects Online Medicine Guide pharsignup.php sql injection6.9 Medium
- anisha wazifa systemcode-projects Wazifa System updatesettings.php sql injection6.9 Medium
- posimyththemes the plus addons for elementor – addons for elementor, page templates, widgets, mega menu, woocommerceThe Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- anisha wazifa systemcode-projects Wazifa System postpublish.php sql injection6.9 Medium
- anisha kitchen treasurecode-projects Kitchen Treasure userregistration.php sql injection6.9 Medium
- brainstormforce sureformsSureForms < 1.7.2 - Reflected XSS5.8 Medium
- unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t750/t765/t760/t770/t820/s8000In bootloader, there is a possible out of bounds write due to a missing bounds check. This could...5.1 Medium
- debian devscriptsIt was discovered that uscan, a tool to scan/watch upstream sources for new releases of software,...9.8 Critical
- projectworlds online admission systemprojectworlds Online Admission System viewdoc.php sql injection6.9 Medium
- anisha online movie streamingcode-projects Online Movie Streaming admin-control.php authorization6.9 Medium
- jetmonsters stratum widgets for elementorStratum – Elementor Widgets <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Google Maps and Image Hotspot Widgets6.4 Medium
- berqwp – automated all-in-one page speed optimization for core web vitals, cache, cdn, images, css, and javascriptBerqWP <= 2.2.42 - Unauthenticated Arbitrary File Upload8.1 High
- themeatelier idonate, idonate – blood donation, request and donor management system +1 moreIDonate 2.0.0 - 2.1.9 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via admin_donor_profile_view Function6.5 Medium
- contest-gallery contest gallery – upload & vote photos, media, sell with paypal & stripePhotos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons, OpenAI <= 26.1.0 - Unauthenticated Stored Cross-Site Scri…7.2 High
- anisha online movie streamingcode-projects Online Movie Streaming admin.php authorization6.9 Medium
- aonetheme service finder bookingsService Finder Bookings <= 6.0 - Authentication Bypass via User Switch Cookie9.8 Critical
- code-projects document management systemcode-projects Document Management System dell.php unlink path traversal5.3 Medium
- aonetheme service finder sms systemService Finder SMS System <= 2.0.0 - Unauthenticated Privilege Escalation9.8 Critical
- phpgurukul boat booking systemPHPGurukul Boat Booking System add-boat.php sql injection6.9 Medium
libavcOSS-FuzzHeap-buffer-overflow in isvcd_decode_recon_tfr_nmb_base_lyrNo score- litespeedtech lsquic, litespeed web adc, litespeed web server +1 more +3 moreLiteSpeed QUIC (LSQUIC) Library before 4.3.1 has an lsquic_engine_packet_in memory leak.5.3 Medium
- No product listeduploadsm in ChargePoint Home Flex 5.5.4.13 does not validate a user-controlled string for bz2...7.8 High
- sipwise rtpengineIn Sipwise rtpengine before 13.4.1.1, an origin-validation error in the endpoint-learning logic...6.9 Medium
- No product listedSaurus CMS Community Edition since commit d886e5b0 (2010-04-23) is vulnerable to a SQL Injection...9.1 Critical
- No product listedInsecure permissions in the script /etc/init.d/lighttpd in AK-Nord USB-Server-LXL Firmware v0.0...7.8 High
- carmelogarcia restaurant order systemSQL Injection vulnerability in Restaurant Order System 1.0 allows a local attacker to obtain...7.8 High
- microweberMicroweber XSS Vulnerability in the homepage Endpoint7.6 High
- microweberMicroweber has Reflected XSS Vulnerability in the layout Parameter6.1 Medium
- microweberMicroweber has Reflected XSS Vulnerability in the id Parameter6.1 Medium
- No product listedInstitute-of-Current-Students 1.0 is vulnerable to Incorrect Access Control in the...9.8 Critical
- No product listedA stored Cross-Site Scripting (XSS) vulnerability exists in the qureydetails.php page of...6.1 Medium
- No product listedA SQL Injection vulnerability exists in the takeassessment2.php file of CloudClassroom-PHP...6.5 Medium
- No product listedThe modelscope/ms-swift library thru 2.6.1 is vulnerable to arbitrary code execution through...9.8 Critical
- google androidIn multiple locations, there is a possible way to use apps linked from a context menu of a...7.0 High
- google androidIn multiple locations, there is a possible condition that results in OOB accesses due to an...8.1 High
- cscsw pay mobileCSC Pay Mobile App 2.19.4 (fixed in version 2.20.0) contains a vulnerability allowing users to...5.4 Medium
- Show moreLoading…