CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- himmelblau-idm himmelblauHimmelblau leaks an Intune service access token in its logs2.8 Low
- humhub files, cfiles +1 moreFiles is Vulnerable to Reflected Self-XSS through its File Move Functionality5.1 Medium
- anysphere cursorCursor's Modification of MCP Server Definitions Bypasses Manual Re-approvals7.2 High
- anysphere cursorCursor's MCP Install Deeplink Does Not Show Arguments in its User-Dialog5.3 Medium
- anysphere cursorCursor's Mermaid Diagram Tool is Vulnerable to an Arbitrary Image Fetch4.4 Medium
- anysphere cursorCursor bypasses its allow list to execute arbitrary commands6.4 Medium
- localsendLocalSend is Vulnerable to Man-in-the-Middle Attacks, Leading to File Interception9.3 Critical
- libtiffLibTIFF fax2ps tiff2pdf.c t2p_read_tiff_init null pointer dereference2.0 Low
- zpanel project zpanelZPanel <= 10.0.0.2 htpasswd Module Username Command Execution8.7 High
- synactis pdf in-the-boxSynactis PDF In-The-Box ConnectToSynactic Stack-Based Buffer Overflow7.5 High
- raidsonic technology gmbh ib-nas4220, ib-nas5220 +1 moreRaidsonic NAS Devices Unauthenticated Remote Command Execution9.3 Critical
- open-emr openemrOpenEMR ≤ 4.1.1 SQL Injection Privilege Escalation and RCE8.7 High
- netgear sph200dNetgear SPH200D <= 1.0.4.80 Path Traversal via HTTP GET6.9 Medium
- netgear dgn2200b, dgn2200b firmware +1 moreNetgear Routers pppoe.cgi RCE9.4 Critical
- netgear dgn1000b, dgn1000b firmware +1 moreNetgear Routers setup.cgi RCE8.6 High
- miniwebMiniWeb <= Build 300 Arbitrary File Upload9.3 Critical
- linksys wrt160nv2Linksys Routers apply.cgi Remote Command Injection8.6 High
- linksys e1500Linksys Routers apply.cgi Path Traversal6.9 Medium
- lxcenter kloxoKloxo <= 6.1.12 Local Privilege Escalation8.5 High
- instantcmsInstantCMS <= 1.6 Remote PHP Code Execution9.3 Critical
- havalite cms cmsHavalite CMS Arbitary File Upload RCE9.3 Critical
- d-link dir-300, dir-600, dlink dir-300 firmware +1 more +3 moreD-Link Devices command.php Unauthenticated RCE9.3 Critical
- d-link dir-300 rev a, dir-615 rev d, dlink dir-300 firmware +1 more +3 moreD-Link Devices tools_vct.xgi Authenticated RCE8.7 High
- d-link dir-615h1, dlink dir-615h firmware +1 moreD-Link Routers tools_vct.htm OS Command Injection8.6 High
- agnitum ltd. outpost internet securityAgnitum Outpost Internet Security Local Privilege Escalation8.5 High
- nestjs devtools-integration, nest +1 more@nestjs/devtools-integration's CSRF to Sandbox Escape Allows for RCE against JS Developers9.4 Critical
org.opensearch.plugin:opensearch-securityMavenOpenSearch unauthorized data access on fields protected by field level security if field is a member of an object5.7 Mediumorg.opensearch.plugin:opensearch-securityMavenOpenSearch unauthorized data access on fields protected by field masking for fields of type ip, geo_point, geo_shape, xy_point, xy_shape5.7 Medium- 1panel-dev 1panel1Panel Agent Bypasses Certificate Verification Leading to Arbitrary Command Execution8.1 High
- traefikTraefik's Client Plugin is Vulnerable to Path Traversal, Arbitrary File Overwrites and Remote Code Execution7.3 High
- alienator88 pearcleanerPearcleaner's unauthenticated access to privileged XPC helper allows root command execution7.3 High
- freshrssFreshRSS is vulnerable to RCE attacks by authenticated admin7.2 High
- hashicorp vault, vault enterprise +1 moreVault Login MFA Bypass of Rate Limiting and TOTP Code Reuse5.7 Medium
- hashicorp vault, vault enterprise +1 moreTiming Side-Channel in Vault’s Userpass Auth Method3.7 Low
- asterisk, sangoma certified asterisk +1 moreAsterisk is Vulnerable to Remote DoS and possible RCE Attacks During Memory Allocation6.5 Medium
- hashicorp vault, vault enterprise +1 moreVault Userpass and LDAP User Lockout Bypass5.3 Medium
- hashicorp vault, vault enterprise +1 moreVault Certificate Auth Method Did Not Validate Common Name For Non-CA Certificates6.8 Medium
- hashicorp vault, vault enterprise +1 moreVault TOTP Secrets Engine Code Reuse6.5 Medium
- ibm operational decision managerIBM Operational Decision Manager HTTP open redirect7.4 High
- hashicorp vault, vault enterprise +1 moreArbitrary Remote Code Execution via Plugin Catalog Abuse9.1 Critical
- hashicorp vault, vault enterprise +1 moreVault Root Namespace Operator May Elevate Token Privileges7.2 High
- alpine ilx-507, alpsalpine ilx-507 firmware +1 moreAlpine iLX-507 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability7.4 High
- alpine ilx-507, alpsalpine ilx-507 firmware +1 moreAlpine iLX-507 Command Injection Remote Code Execution8.0 High
- alpine ilx-507, alpsalpine ilx-507 firmware +1 moreAlpine iLX-507 TIDAL Improper Certificate Validation Vulnerability7.1 High
- alpine ilx-507, alpsalpine ilx-507 firmware +1 moreAlpine iLX-507 AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability7.4 High
- alpine ilx-507, alpsalpine ilx-507 firmware +1 moreAlpine iLX-507 CarPlay Stack-based Buffer Overflow Code Execution Vulnerability6.8 Medium
- alpine ilx-507, alpsalpine ilx-507 firmware +1 moreAlpine iLX-507 UPDM_wstpCBCUpdStart Command Injection Vulnerability6.4 Medium
- alpine ilx-507, alpsalpine ilx-507 firmware +1 moreAlpine iLX-507 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability7.4 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: ksmbd race issue from smb2 close and logoff with multichannel7.5 High
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM cross-site scripting6.4 Medium
- Show moreLoading…