CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- givanz vvvebjsgivanz Vvvebjs node.js save.php path traversal2.3 Low
- dell ecs, objectscale, elastic cloud storage +2 moreDell ECS versions prior to 3.8.1.5/ ObjectScale version 4.0.0.0, contain a Use of Hard-coded...8.4 High
- dell avamar, avamar server, avamar virtual edition +2 moreDell Avamar, versions prior to 19.12 with patch 338905, excluding version 19.10SP1 with patch...8.3 High
- givanz vvvebgivanz Vvveb Add Type post-types cross site scripting4.8 Medium
- dell enterprise sonic osDell Enterprise SONiC OS, version 4.5.0, contains a cryptographic key vulnerability in SSH. An...7.5 High
- librettocmsLibrettoCMS File Manager Arbitrary File Upload9.3 Critical
- zpanel project zpanelZPanel zsudo Local Privilege Escalation8.5 High
- givanz vvvebgivanz Vvveb Drag-and-Drop Editor editor server-side request forgery5.1 Medium
- shenzhen aitemi e commerce co. ltd. m300 wi-fi repeaterShenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via SSID9.4 Critical
- givanz vvvebgivanz Vvveb Drag-and-Drop Editor editor information disclosure5.1 Medium
- givanz vvvebgivanz Vvveb Code Editor code.php save code injection5.1 Medium
- sunnyadn js-tomljs-toml is vulnerable to Prototype Pollution7.9 High
- givanz vvvebgivanz Vvveb session fixiation5.3 Medium
- pyload, pyload-ng project pyload-ng +1 morepyLoad CNL Blueprint is vulnerable to Path Traversal through `dlc_path` leading to Remote Code Execution (RCE)9.8 Critical
- dell digital deliveryDell Digital Delivery, versions prior to 5.6.1.0, contains an Insufficiently Protected...7.2 High
- kingdee cloud-starry-sky enterprise editionKingdee Cloud-Starry-Sky Enterprise Edition IIS-K3CloudMiniApp FileUploadAction.class path traversal6.9 Medium
- anthropic claude code, anthropics claude-code +1 moreClaude Code echo command allowed bypass of user approval prompt for command execution8.7 High
- red hat ansible automation platform 2.5 for rhel 8, ansible automation platform 2.5 for rhel 9 +1 moreAap-gateway: csrf origin checking is disabled5.3 Medium
- anthropic claude code, anthropics claude-code +1 moreClaude Code Research Preview has a Path Restriction Bypass which could allow unauthorized file access7.7 High
- adodbADOdb's sqlite3 driver allows SQL injection10.0 Critical
- unjs ipxIPX is Vulnerable to Path Traversal via Prefix Matching Bypass6.9 Medium
- dell data domain operating system, powerprotect data domain feature release, powerprotect data domain lts 2023 +1 more +3 moreDell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release...7.8 High
- dell data domain operating system, powerprotect data domain feature release, powerprotect data domain lts 2023 +1 more +3 moreDell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release...6.7 Medium
- dell data domain operating system, powerprotect data domain feature release, powerprotect data domain lts 2023 +1 more +3 moreDell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release...6.7 Medium
- dell data domain operating system, powerprotect data domain feature release, powerprotect data domain lts 2023 +1 more +3 moreDell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release...6.7 Medium
- dell data domain operating system, powerprotect data domain feature release, powerprotect data domain lts 2023 +1 more +3 moreDell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release...9.8 Critical
- dell unity, unity operating environment +1 moreDell Unity, version(s) 5.5 and prior, contain(s) an OS Command Injection Vulnerability in its...7.8 High
- dell unity, unity operating environment +1 moreDell Unity, version(s) 5.5 and prior, contain(s) an OS Command Injection Vulnerability in its...7.8 High
- dell unity, unity operating environment +1 moreDell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Input During Web...6.1 Medium
- dell unity, unity operating environment +1 moreDell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements...7.3 High
- imagination technologies graphics ddkGPU DDK - GPU shader shared memory corrupted using ptrace to disrupt GPU operation8.8 High
apportUbuntuapport regressionNo score- intelbras incontrol, incontrol web +1 moreIntelbras InControl JSON Endpoint operador information disclosure2.3 Low
- 3ds delmia aprisoMissing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 20259.1 Critical
- 3ds delmia aprisoImproper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 20258.0 High
- grafana grafana-infinity-datasourceSSRF in Infinity Datasource Plugin5.0 Medium
- codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +12 more +14 moreCODESYS Control DoS via Unauthenticated NULL Pointer Dereference7.5 High
- codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +13 more +15 moreCODESYS Control PKI Exposure Enables Remote Certificate Access8.3 High
- codesys runtime toolkit, control for beaglebone sl, control for empc-a/imx6 sl +9 more +11 moreCODESYS Toolkit Exposes Sensitive Files via Default Permissions5.5 Medium
- airoha technology corp. ab156x, ab157x, ab158x, ab159x series, ab1627In the Airoha Bluetooth audio SDK, there is a possible unauthorized access to the RACE protocol....8.8 High
- airoha technology corp. ab156x, ab157x, ab158x, ab159x seriesIn the Airoha Bluetooth audio SDK, there is a possible way to pair Bluetooth audio device without...8.8 High
- airoha technology corp. ab156x, ab157x, ab158x, ab159x series, ab1627In the Airoha Bluetooth audio SDK, there is a possible permission bypass that allows access...8.8 High
- fujifilm business innovation corp. apoes 2150 n, apoes 2150 nd, apoes 2150 nda +11 more +13 moreOut-of-bounds write vulnerability exists in FUJIFILM Business Innovation MFPs. A specially...6.9 Medium
- google android, mediatek, inc. mt2718, mt6739, mt6761, mt6765, mt6768, mt6781, mt6789, mt6833, mt6835, mt6853, mt6855, mt6877, mt6878, mt6879, mt6883, mt6885, mt6886, mt6889, mt6893, mt6895, mt6897, mt6899, mt6983, mt6985, mt6989, mt6991, mt8186, mt8196, mt8391, mt8676, mt8678, mt8775, mt8786, mt8788e, mt8792, mt8796, mt8873, mt8883, mt8893 +1 moreIn Power HAL, there is a possible out of bounds write due to a missing bounds check. This could...6.7 Medium
- google android, mediatek, inc. mt2718, mt6761, mt6765, mt6768, mt6853, mt6855, mt6877, mt6878, mt6879, mt6883, mt6885, mt6889, mt6893, mt6897, mt6989, mt6991, mt8186, mt8196, mt8391, mt8678, mt8775, mt8786, mt8788e, mt8792, mt8796, mt8873, mt8883, mt8893 +1 moreIn Power HAL, there is a possible out of bounds write due to a missing bounds check. This could...6.7 Medium
- google android, linuxfoundation yocto, mediatek, inc. mt6739, mt6761, mt6765, mt6768, mt6781, mt6789, mt6813, mt6833, mt6835, mt6853, mt6855, mt6877, mt6878, mt6879, mt6883, mt6885, mt6886, mt6889, mt6893, mt6895, mt6897, mt6899, mt6983, mt6985, mt6989, mt6990, mt6991, mt8188, mt8196, mt8370, mt8390, mt8676 +3 more +5 moreIn DA, there is a possible out of bounds write due to a missing bounds check. This could lead to...6.8 Medium
openexrOSS-FuzzHeap-buffer-overflow in generic_unpackNo score- stardictThe YouDao plugin for StarDict, as used in stardict 3.0.7+git20220909+dfsg-6 in Debian trixie and...4.7 Medium
- openplc v3 v3, thiagoralves openplc v3 +1 more/edit-user in webserver in OpenPLC Runtime 3 through 9cd8f1b allows authenticated users to upload...6.4 Medium
- tera insights ticrypttiaudit in Tera Insights tiCrypt before 2025-07-17 allows unauthenticated REST API requests that...5.3 Medium
- Show moreLoading…