CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- No product listedParamount Macrium Reflect through 2025-06-26 allows local attackers to execute arbitrary code...7.7 High
- No product listedParamount Macrium Reflect through 2025-06-26 allows attackers to execute arbitrary code with...7.7 High
- zkea zkeacmsAn arbitrary file upload vulnerability in ZKEACMS v4.1 allows attackers to execute arbitrary code...9.8 Critical
- No product listedCyberGhostVPNSetup.exe (Windows installer) is signed using the weak cryptographic hash algorithm...8.4 High
- craws openatlasAustrian Archaeological Institute (AI) OpenAtlas v8.11.0 as discovered to contain a hardcoded...9.8 Critical
- craws openatlasAustrian Archaeological Institute (AI) OpenAtlas v8.11.0 as discovered to contain a SQL injection...9.1 Critical
- craws openatlasA cross-site scripting (XSS) vulnerability in Austrian Archaeological Institute (AI) OpenAtlas v8...8.1 High
- totolink n600r firmwareTOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a command injection...9.8 Critical
- axosoft gitkraken desktopThe GitKraken Desktop 10.8.0 and 11.1.0 is susceptible to code injection due to misconfigured...9.8 Critical
- No product listedUnisite CMS version 5.0 contains a stored Cross-Site Scripting (XSS) vulnerability in the "Report...9.6 Critical
- cairographics cairoAn issue was discovered in freedesktop poppler v25.04.0. The heap memory containing PDF stream...2.9 Low
- freedesktop popplerAn issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an...6.5 Medium
- No product listedA Boolean-based SQL injection vulnerability was discovered in Axelor 5.2.4 via the _domain...9.8 Critical
sogoUbuntuAn Insecure Direct Object Reference (IDOR) vulnerability was discovered in SOGo Webmail thru 5.6...4.3 Medium- artifex mupdfAn issue in Artifex mupdf 1.25.6, 1.25.5 allows a remote attacker to cause a denial of service...6.5 Medium
- liquidfilesLiquidFiles before 4.1.2 allows directory traversal by configuring the pathname of a local...3.8 Low
- liquidfilesLiquidFiles before 4.1.2 supports FTP SITE CHMOD for mode 6777 (setuid and setgid), which allows...9.9 Critical
- commscope ruckus network director, ruckus network director +1 moreRUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker...9.0 Critical
- ruckus smartzone, commscope ruckus network director, ruckus smartzone firmware +2 moreRUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files.5.0 Medium
- ruckus smartzone, commscope ruckus network director, ruckus smartzone firmware +2 moreIn RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP...9.9 Critical
- ruckus smartzone, commscope ruckus network director, ruckus smartzone firmware +2 moreRUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain...8.5 High
- commscope ruckus network director, ruckus network director +1 moreRUCKUS Network Director (RND) before 4.5 stores passwords in a recoverable format.5.3 Medium
- ruckus smartzone, commscope ruckus network director, ruckus smartzone firmware +2 moreRuckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API...8.5 High
- commscope ruckus network director, ruckus network director +1 moreRUCKUS Network Director (RND) before 4.5 allows jailed users to obtain root access vis a weak,...8.8 High
- ruckus smartzone, commscope ruckus smartzone firmware +1 moreRUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root...9.0 Critical
- No product listedCertain Draytek products are affected by Insecure Permissions. This affects AP903 v1.4.18 and...8.6 High
- intelbras rx 1500 firmware, rx 3000 firmware +1 moreA cross-site scripting (XSS) vulnerability in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows...7.3 High
- samsung exynos 1280 firmware, exynos 1330 firmware, exynos 1380 firmware +4 more +6 moreAn issue was discovered in Samsung Mobile Processor Exynos 2100, 1280, 2200, 1330, 1380, 1480,...6.5 Medium
- caixin news appCaixin News App com.caixin.news AndroidManifest.xml improper export of android application components4.8 Medium
- tvb big big shop appTVB Big Big Shop App hk.com.tvb.bigbigshop AndroidManifest.xml improper export of android application components4.8 Medium
- portabilis i-diarioPortabilis i-Diario Observações diario-de-observacoes cross site scripting5.1 Medium
- portabilis i-educarPortabilis i-Educar educar_matricula_lst.php Gerar cross site scripting5.1 Medium
- portabilis i-educarPortabilis i-Educar educar_servidor_cad.php cross site scripting5.1 Medium
- portabilis i-educarPortabilis i-Educar educar_avaliacao_desempenho_cad.php cross site scripting5.1 Medium
- apache zeppelinApache Zeppelin: Command Injection via CSWSH5.3 Medium
- apache zeppelinApache Zeppelin: XSS in the Helium module6.1 Medium
- portabilis i-educarPortabilis i-Educar educar_funcao_lst.php cross site scripting5.1 Medium
- apache zeppelinApache Zeppelin: Arbitrary file read by adding malicious JDBC connection string5.3 Medium
- 495300897 wx-shop495300897 wx-shop editUI cross site scripting5.1 Medium
- 495300897 wx-shop495300897 wx-shop cross-site request forgery5.3 Medium
- anisha kitchen treasurecode-projects Kitchen Treasure userregistration.php unrestricted upload5.3 Medium
- anisha online medicine guidecode-projects Online Medicine Guide adaddmed.php sql injection6.9 Medium
- anisha online medicine guidecode-projects Online Medicine Guide changepass.php sql injection6.9 Medium
- code-projects human resource integrated systemcode-projects Human Resource Integrated System action.php cross site scripting5.1 Medium
- code-projects human resource integrated systemcode-projects Human Resource Integrated System action.php sql injection5.3 Medium
- anisha online medicine guidecode-projects Online Medicine Guide cusfindambulence2.php sql injection6.9 Medium
- anisha online medicine guidecode-projects Online Medicine Guide index.php sql injection6.9 Medium
- anisha online medicine guidecode-projects Online Medicine Guide cusfindphar2.php sql injection6.9 Medium
- projectworlds online admission systemprojectworlds Online Admission System viewform.php sql injection6.9 Medium
- carmelo intern membership management systemcode-projects Intern Membership Management System edit_admin_query.php sql injection6.9 Medium
- Show moreLoading…