CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- 4cstrategies exonautAn issue was discovered in 4C Strategies Exonaut 21.6. Passwords, stored in the database, are...5.3 Medium
- 4cstrategies exonautAn issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6. Information disclosure can...7.5 High
- pocoproject pocopoco v1.14.1-release was discovered to contain weak encryption.7.0 High
- jsrsasign project jsrsasignjsrsasign v11.1.0 was discovered to contain weak encryption.3.2 Low
- No product listedAn issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. Once access is gained either...9.8 Critical
- google chromeSide-channel information leakage in Navigation and Loading in Google Chrome prior to 139.0.7258...4.7 Medium
- 4cstrategies exonaut4C Strategies Exonaut before v22.4 was discovered to contain an access control issue.5.3 Medium
- 4cstrategies exonaut4C Strategies Exonaut before v21.6.2.1-1 was discovered to contain a Server-Side Request Forgery ...6.5 Medium
- 4cstrategies exonaut4C Strategies Exonaut before v22.4 was discovered to contain insecure permissions.6.5 Medium
- vessel9817 onion-site-templateonion-site-template tor Secrets Baked Into Image8.7 High
- joinmastodon mastodonMastodon e‑mail throttle misconfiguration allows unlimited email confirmations against unconfirmed emails5.3 Medium
- owasp modsecurityModSecurity's Insufficient Return Value Handling can Lead to XSS and Source Code Disclosure6.9 Medium
- davidosipov vision-uiVision UI security-kit.js: Potential Uncontrolled Resource Allocation Vulnerability8.7 High
- davidosipov vision-uiVision UI's security-kit Contains Cryptographic Weakness9.3 Critical
- janssenproject jansJans CLI stores plaintext passwords in the local cli_cmd.log file6.9 Medium
- callstackincubator react-native-bottom-tabsreact-native-bottom-tabs: Arbitrary code execution in GitHub Actions canary workflow leads to secret exfiltration9.1 Critical
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9 through 9.4.2 and below 8.5.21 is vulnerable to Reflected Cross-Site Scripting (XSS) in Conversation Messages Dashboard Page4.8 Medium
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9 through 9.4.2 is vulnerable to Stored XSS from Home Folder on Members Dashboard page2.0 Low
- xbmc media centerXBMC ≤ 11.0 Web Server Path Traversal7.1 High
- asset-manager wordpress pluginWordPress Plugin WP-Property <= 1.35.0 PHP File Upload9.3 Critical
- jkriddle asset-managerWordPress Plugin Asset-Manager <= 2.0 PHP File Upload10.0 Critical
- advanced custom fields wordpress pluginWordPress Plugin Advanced Custom Fields <= 3.5.1 Remote File Inclusion10.0 Critical
- turbosoft, inc. turboftp serverTurbo FTP Server 1.30.823/826 PORT Command Buffer Overflow10.0 Critical
- sysax software multi-server, sysax multi server +1 moreSysax Multi-Server <= 6.10 SSHD Key Exchange DoS8.7 High
- php-chartsPHP-Charts v1.0 PHP Code Execution10.0 Critical
- netwin surgeftpNetwin SurgeFTP <= v23c8 Authenticated RCE8.6 High
- ångström distribution project narcissusNarcissus backend.php Image Configuration Command Injection9.3 Critical
- nagios enterprises xi graph explorerNagios XI Network Monitor Graph Explorer Component < 1.3 Authenticated Command Injection8.6 High
- maxthon international ltd. maxthon3 browserMaxthon3 about:history XCS Trusted Zone Code Execution8.7 High
- kordil edmsKordil EDMS v2.2.60rc3 Unauthenticated Arbitrary File Upload10.0 Critical
- glossword team glosswordGlossword 1.8.8 - 1.8.12 Arbitrary File Upload RCE9.4 Critical
- freefloat ftp serverFreeFloat FTP Server USER Command Buffer Overflow6.9 Medium
- freefloat ftp serverFreeFloat FTP Server Arbitrary File Upload9.3 Critical
- foxit readerFoxit Reader <= 5.4.5.0114 Plugin URL Processing Buffer Overflow9.4 Critical
- d-link dir-300 rev b, dir-600 rev b, dlink dir-300 firmware +1 more +3 moreD-Link Devices Unauthenticated RCE10.0 Critical
- clansphere project clansphereClanSphere 2011.3 Local File Inclusion via cs_lang Cookie8.7 High
- blazevideo inc. hdtv player proBlazeVideo HDTV Player Pro 6.6.0.3 Filename Handling Buffer Overflow8.6 High
- actfax communication serverActFax 5.01 RAW Server Buffer Overflow9.3 Critical
- dell/quest kace k1000 systems management applianceDell/Quest KACE K1000 Unauthenticated File Upload RCE9.3 Critical
- risc0RISC Zero Underconstrained Vulnerability: Division2.7 Low
- libavlibav MPEG File Parser utils.c ff_seek_frame_binary null pointer dereference4.8 Medium
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform: Password and email exposure in xml.vm fields8.7 High
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform: Any user with editing rights can access password properties through Database List Properties7.1 High
- libavlibav DSS File Demuxer avconv.c main double free4.8 Medium
- adobe experience manager, experience manager (aem) forms, experience manager forms +2 moreAdobe Experience Manager | Incorrect Authorization (CWE-863)10.0 Critical
- adobe experience manager, experience manager forms +1 moreAdobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)8.6 High
- roche diagnostics navify monitoringnavify Monitoring API input validation7.1 High
- libavlibav AVI File Parser buffer.c av_buffer_unref null pointer dereference4.8 Medium
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform contains Reflected XSS vulnerability in two templates6.5 Medium
- setasign fpdiFPDI is Vulnerable to Memory Exhaustion (OOM) through its PDF Parser6.0 Medium
- Show moreLoading…