CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- gofiber fiberFiber Susceptible to Crash via `BodyParser` Due to Unvalidated Large Slice Index in Decoder8.7 High
- ict innovations ictbroadcastICTBroadcast <= 7.4 Unauthenticated Session Cookie RCE9.3 Critical
- pdf-xchange editorAn out-of-bounds read vulnerability exists in the EMF functionality of PDF-XChange Editor version...6.5 Medium
- pdf-xchange editorAn out-of-bounds read vulnerability exists in the EMF functionality of PDF-XChange Co. Ltd PDF...6.5 Medium
- uclouvain openjpegOpenJPEG allows OOB heap memory write in opj_jp2_read_header6.6 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- ibm engineering lifecycle optimization, engineering lifecycle optimization - publishing +1 moreIBM Engineering Lifecycle Optimization - Publishing cross-site scripting6.1 Medium
- rockwell automation arena® simulation, rockwellautomation arena +1 moreRockwell Automation Heap-based Buffer Overflow In Arena® Simulation8.4 High
- rockwell automation arena® simulation, rockwellautomation arena +1 moreRockwell Automation Stack-based Buffer Overflow In Arena® Simulation8.4 High
- rockwell automation arena® simulation, rockwellautomation arena +1 moreRockwell Automation Heap-based Buffer Overflow In Arena® Simulation8.4 High
- trend micro apex one, trend micro, inc. micro apex one +1 moreA vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre...9.4 Critical
- trend micro apex one, trend micro, inc. micro apex one +1 moreA vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre...9.4 Critical
xcbcrates.ioRust XCB `xcb::Connection::connect_to_fd*` functions violate I/O safety1.7 Lowgovulncheck-vulndbopenSUSESecurity update for govulncheck-vulndbNo score- atjiu pybbsatjiu pybbs search cross site scripting5.1 Medium
- atjiu pybbsatjiu pybbs list cross site scripting4.8 Medium
nssTuxCare,nss-develTuxCare,nss-pkcs11-develTuxCare +8 more +10 moreUpdate of nssNo scorenssTuxCare,nsprTuxCare,nspr-develTuxCare +10 more +12 moreUpdate of nssNo score- atjiu pybbsatjiu pybbs list cross site scripting4.8 Medium
libnss3TuxCare,libnss3-devTuxCare,libnss3-toolsTuxCare +2 moreUpdate of nssNo scorelibnss3TuxCare,libnss3-devTuxCare,libnss3-toolsTuxCare +2 moreUpdate of nssNo scorelibnss3TuxCare,libnss3-1dTuxCare,libnss3-devTuxCare +2 more +4 moreUpdate of nssNo scorenssTuxCare,nss-develTuxCare,nss-pkcs11-develTuxCare +2 more +4 moreUpdate of nssNo scorenssTuxCare,nss-develTuxCare,nss-pkcs11-develTuxCare +2 more +4 moreUpdate of nssNo scorenssTuxCare,nss-develTuxCare,nss-pkcs11-develTuxCare +2 more +4 moreUpdate of nssNo score- draeger icmhelperDraeger: ICMHelper is vulnerable to use of Hard-coded Cryptographic Key5.5 Medium
- draeger icmhelperDraeger: ICMHelper is vulnerable to a privilege escalation due too missing authorization7.8 High
- atjiu pybbsatjiu pybbs list cross site scripting4.8 Medium
- atjiu pybbsatjiu pybbs list cross site scripting5.1 Medium
- anatoly download counterDownload Counter <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via name Parameter6.4 Medium
- emarket-design employee directory – staff & team directoryEmployee Directory <= 4.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameter6.4 Medium
- vjinfotech wp import export liteWP Import Export Lite <= 3.9.29 - Authenticated (Subscriber+) Arbitrary File Upload7.5 High
- vjinfotech wp import export liteWP Import Export Lite <= 3.9.28 - Authenticated (Subscriber+) Arbitrary File Upload7.5 High
- atjiu pybbsatjiu pybbs list cross site scripting4.8 Medium
- emarket-design campus directory – faculty, staff & student directory plugin for wordpressCampus Directory <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameter6.4 Medium
- emarket-design simple contact form plugin for wordpress – wp easy contactWP Easy Contact <= 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameter6.4 Medium
- wp cloud plugins/ deleeuw use-your-drive | google drive plugin for wordpressUse-your-Drive | Google Drive plugin for WordPress <= 3.3.1- Unauthenticated Stored Cross-Site Scripting via File Metadata7.2 High
- atjiu pybbsatjiu pybbs UserAdminController.java update weak password6.3 Medium
- atjiu pybbsatjiu pybbs Registered Email SettingsApiController.java sendEmailCode information exposure6.3 Medium
- zscaler authentication serverSAML 2.0 Public Key Validation Issue9.6 Critical
- atjiu pybbsatjiu pybbs Email Verification improper authorization6.9 Medium
- atjiu pybbsatjiu pybbs Verification Code login Captcha6.9 Medium
- danny-avila librechatLibreChat exposes arbitrary chats through Meilisearch engine7.5 High
- portabilis i-educarPortabilis i-Educar educar_motivo_afastamento_cad.php cross site scripting4.8 Medium
- portabilis i-educarPortabilis i-Educar edit cross site scripting4.8 Medium
- portabilis i-educarPortabilis i-Educar educar_raca_cad.php cross site scripting4.8 Medium
- portabilis i-educarPortabilis i-Educar empresas_cad.php cross site scripting4.8 Medium
- portabilis i-educarPortabilis i-Educar public_uf_cad.php cross site scripting4.8 Medium
- delta electronics diaviewFile Parsing Deserialization of Untrusted Data in DTM Soft9.3 Critical
- portabilis i-educarPortabilis i-Educar public_municipio_cad.php cross site scripting4.8 Medium
- Show moreLoading…