CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- netwrix directory managerNetwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows Static...5.4 Medium
- netwrix directory managerNetwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows XSS for...6.1 Medium
- No product listedA cross-site scripting (XSS) vulnerability in the PdfViewer component of Agenzia Impresa Eccobook...8.8 High
- sagedpw sage dpwAn Insecure Direct Object Reference (IDOR) in Sage DPW v2024_12_004 and below allows unauthorized...5.3 Medium
- uclouvain openjpegopenjpeg v 2.5.0 was discovered to contain a NULL pointer dereference via the component /openjp2...6.5 Medium
- foxcmsFoxCMS <=v1.2.5 is vulnerable to Code Execution in admin/template_file/editFile.html.9.8 Critical
- No product listedGPMAW 14, a bioinformatics software, has a critical vulnerability related to insecure file...7.8 High
- bmc control-m, control-m/server, control-m\/server +2 moreBMC Control-M/Server cleartext database credentials in process lists and logs4.8 Medium
- go standard library database/sql, golang go +1 moreIncorrect results returned from Rows.Scan in database/sql7.0 High
- go standard library os/exec, golang go +1 moreUnexpected paths returned from LookPath in os/exec6.5 Medium
- No product listedA vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the...6.5 Medium
ruby-jwtDebianruby-jwt v3.0.0.beta1 was discovered to contain weak encryption. NOTE: the Supplier's perspective...9.1 Critical- ollamaOllama allows deletion of arbitrary files6.6 Medium
- akamai akamaighostAn issue was discovered in Akamai Ghost, as used for the Akamai CDN platform before 2025-03-26....4.0 Medium
- 4cstrategies exonautAn issue in 4C Strategies Exonaut before v22.4 allows attackers to execute a directory traversal.6.5 Medium
- eyoucmsEyouCMS 1.6.7 is vulnerable to Cross Site Scripting (XSS) in /login.php?m=admin&c=System&a=web...6.1 Medium
- No product listedOpenOrange Business Framework 1.15.5 provides unprivileged users with write access to the...6.5 Medium
- kishan0725 hospital management systemHospital Management System v4 was discovered to contain a SQL injection vulnerability via the...8.8 High
- kishan0725 hospital management systemHospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in...8.8 High
- kishan0725 hospital management systemHospital Management System v4 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- kishan0725 hospital management systemHospital Management System v4 was discovered to contain multiple cross-site scripting (XSS)...6.1 Medium
- kishan0725 hospital management systemHospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in...9.8 Critical
- kishan0725 hospital management systemHospital Management System v4 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- kishan0725 hospital management systemHospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in...9.8 Critical
- kishan0725 hospital management systemHospital Management System v4 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- student attendance management system project attendance management systemStudent Attendance Management System v1 was discovered to contain a SQL injection vulnerability...8.8 High
- student attendance management system project attendance management systemStudent Attendance Management System v1 was discovered to contain a SQL injection vulnerability...8.8 High
- student attendance management system project attendance management systemStudent Attendance Management System v1 was discovered to contain multiple SQL injection...8.8 High
- student attendance management system project attendance management systemStudent Attendance Management System v1 was discovered to contain multiple SQL injection...8.8 High
- student attendance management system project attendance management systemStudent Attendance Management System v1 was discovered to contain multiple SQL injection...8.8 High
- student attendance management system project attendance management systemStudent Attendance Management System v1 was discovered to contain a cross-site scripting (XSS)...6.1 Medium
- kishan0725 hospital management systemHospital Management System 4 is vulnerable to a SQL injection in /Hospital-Management-System...6.5 Medium
- salesagility suitecrmSuiteCRM: Authenticated Blind SQL Injection in InboundEmail module8.8 High
- salesagility suitecrm, suitecrm suitecrm-core +1 moreSuiteCRM: Legacy iCal service allows unauthenticated access to meeting data5.3 Medium
- salesagility suitecrmSuiteCRM is Vulnerable to PHP Object Injection in Reports8.8 High
- tigo energy cloud connect advancedPredictable Seed in Pseudo-Random Number Generator (PRNG) in Tigo Energy Cloud Connect Advanced8.7 High
- autodesk 3ds maxTGA File Parsing Memory Corruption Vulnerability7.8 High
- autodesk 3ds maxRBG File Parsing Out-of-Bounds Write Vulnerability7.8 High
- tigo energy cloud connect advancedImproper Neutralization of Special Elements used in a Command ('Command Injection') in Tigo Energy Cloud Connect Advanced8.7 High
- autodesk 3ds maxPSD File Parsing Out-of-Bounds Read Vulnerability5.3 Medium
- tigo energy cloud connect advancedUse of Hard-coded Credentials in Tigo Energy Cloud Connect Advanced9.3 Critical
- dell supportassist os recoveryDell SupportAssist OS Recovery, versions prior to 5.5.14.0, contains an Exposure of Sensitive...3.5 Low
- dell supportassist os recoveryDell SupportAssist OS Recovery, versions prior to 5.5.14.0, contain a Creation of Temporary File...7.8 High
- skyworkai deepresearchagentSkyworkAI DeepResearchAgent tools.py from_mcp os command injection5.3 Medium
- simbo1905 thinbus-srp-npmThinbus generates insufficient entropy: 252 bits vs minimum 256 bits6.9 Medium
- keycloak, red hat build of keycloak, build of keycloak 26.0 +1 more +3 moreOrg.keycloak/keycloak-services: keycloak smtp inject vulnerability5.3 Medium
- go-acme legoLego does not enforce HTTPS2.3 Low
- agnoagno-agi agno Model Context Protocol mcp.py MultiMCPTools os command injection5.3 Medium
- ai seo link advisor project seo link advisor, drupal ai seo link advisor +1 moreAI SEO Link Advisor - Less critical - Server-side Request Forgery - SA-CONTRIB-2025-0958.8 High
- cisco webex meetingsCisco Webex Meeting Client Join Certificate Validation Vulnerability5.4 Medium
- Show moreLoading…