CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- es iperf3In iperf before 3.19.1, net.c has a buffer overflow when --skip-rx-copy is used (for MSG_TRUNC in...8.9 High
- es iperf3In iperf before 3.19.1, iperf_auth.c has a Base64Decode assertion failure and application exit...3.7 Low
- es iperf3In iperf before 3.19.1, iperf_auth.c has an off-by-one error and resultant heap-based buffer...6.5 Medium
- xwiki-contrib mocca calendarThe Mocca Calendar application before 2.15 for XWiki allows XSS via a title upon calendar import.6.4 Medium
- xwiki-contrib mocca calendarThe Mocca Calendar application before 2.15 for XWiki allows XSS via a title to the view event page.6.4 Medium
- xwiki-contrib mocca calendarThe Mocca Calendar application before 2.15 for XWiki allows XSS via the background or text color field.6.4 Medium
- carmelo intern membership management systemcode-projects Intern Membership Management System delete_student.php sql injection6.9 Medium
- carmelo intern membership management systemcode-projects Intern Membership Management System edit_student_query.php sql injection6.9 Medium
- nvidia gpu display driversNVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a guest could get...2.5 Low
- nvidia gpu display driversNVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where it allows a guest...5.5 Medium
- nvidia gpu display driversNVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest...7.8 High
- nvidia gpu display driversNVIDIA vGPU software for Linux-style hypervisors contains a vulnerability in the Virtual GPU...7.8 High
- nvidia gpu display driversNVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may cause an...3.3 Low
- nvidia gpu display driversNVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may access...3.3 Low
- nvidia gpu display driversNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an attacker could...4.4 Medium
- nvidia gpu display driversNVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker with local...7.0 High
- nvidia gpu display driversNVIDIA .run Installer for Linux and Solaris contains a vulnerability where an attacker could use...7.0 High
- nvidia gpu display driversNVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker might...7.1 High
- nvidia gpu display driversNVIDIA Display Driver for Linux and Windows contains a vulnerability in the kernel mode driver,...7.3 High
- nvidia gpu display driversNVIDIA Installer for Windows contains a vulnerability where an attacker may be able to escalate...7.8 High
- projectworlds online admission systemprojectworlds Online Admission System adminlogin.php sql injection6.9 Medium
- code-projects online hotel reservation systemSourceCodester Online Hotel Reservation System deleteroom.php sql injection6.9 Medium
- code-projects online hotel reservation systemSourceCodester Online Hotel Reservation System deletegallery.php sql injection6.9 Medium
- anisha wazifa systemcode-projects Wazifa System reset.php sql injection6.9 Medium
- brave conversion engine (pro)Brave Conversion Engine (PRO) <= 0.7.7 - Authentication Bypass to Administrator9.8 Critical
- oceanwp ocean social sharingOcean Social Sharing <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- anisha wazifa systemcode-projects Wazifa System regcontrol.php sql injection6.9 Medium
- brainstorm force ultimate addons for elementorUltimate Addons for Elementor (Formerly Elementor Header & Footer Builder) <= 2.4.6 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update4.3 Medium
- bitslip6 bitfire security – firewall, waf, bot/spam blocker, login securityBitFire <= 4.5 - Unauthenticated Information Exposure5.3 Medium
- anisha online farm systemcode-projects Online Farm System forgot_passfarmer.php sql injection6.9 Medium
- awssoft magic edge – liteMagic Edge – Lite <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via height Parameter6.4 Medium
- aumsrini image galleryImage Gallery <= 1.0.0 - Reflected Cross-Site Scripting6.1 Medium
- codebangers all in one time clock lite – tracking employee time has never been easierAll in One Time Clock Lite – Tracking Employee Time Has Never Been Easier <= 2.0 - Reflected Cross-Site Scripting6.1 Medium
- mmanifesto mmm unity loaderMmm Unity Loader <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via attributes Parameter6.4 Medium
- bnielsen custom word cloudCustom Word Cloud <= 0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via angle Parameter6.4 Medium
- mrgoodfellow 360 photo spheres360 Photo Spheres <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- nicheaddons medical addon for elementorMedical Addon for Elementor <= 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typewriter Widget6.4 Medium
- blendmedia wp cta – call now button, sticky button & call to action builderWP CTA – Call To Action Plugin, Sticky CTA, Sticky Buttons <= 1.7.0 - Missing Authorization to Unauthenticated Sticky Status Update5.3 Medium
- shortpixel adaptive images – webp, avif, cdn, image optimizationShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization <= 3.10.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via API URL4.4 Medium
- seometricsplugin seo metricsSEO Metrics <= 1.0.15 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation8.8 High
- qodeinteractive qi addons for elementorQi Addons for Elementor <= 1.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via TypeOut Text Widget6.4 Medium
- wofficeio woffice core, xtendify woffice +1 moreWoffice Core <= 5.4.26 - Authenticated (Contributor+) Arbitrary File Deletion6.8 Medium
- partner software webCVE-2025-60785.4 Medium
- partner software webCVE-2025-60779.8 Critical
- partner software webCVE-2025-60768.8 High
tarantoolOSS-FuzzHeap-buffer-overflow in mmcallNo scorempvOSS-FuzzUNKNOWN READ in mov_read_headerNo score- opennebulaOpenNebula Community Edition (CE) before 7.0.0 and Enterprise Edition (EE) before 6.10.3 have a...8.1 High
- 9001 copypartyCopyparty is vulnerable to Regex Denial of Service (ReDoS) attacks through "Recent Uploads" page7.5 High
- humhub files, cfiles +1 moreFiles: Potential for SQL Injection through File Browse and List Operations9.2 Critical
- Show moreLoading…