CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- open-metadata openmetadataOpenMetadata <=1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the...7.1 High
- No product listedThe /users endpoint in Statamic Core before 2.11.8 allows XSS to add an administrator user. This...8.8 High
- wanzhou woes intelligent optimization energy saving systemWanzhou WOES Intelligent Optimization Energy Saving System Historical Data Query Module GetVariableByOneIDNew sql injection5.3 Medium
- meta platforms, inc executorchExecuTorch integer overflow vulnerability leads to code execution9.8 Critical
- meta platforms, inc executorchExecuTorch vulnerable to Heap-based Buffer Overflow9.8 Critical
- meta platforms, inc executorchExecuTorch out-of-bounds access vulnerability9.8 Critical
- meta platforms, inc executorchExecuTorch heap buffer overflow vulnerability9.8 Critical
- meta platforms, inc executorchExecuTorch integer overflow vulnerability9.8 Critical
- meta platforms, inc executorchExecuTorch integer overflow vulnerability9.8 Critical
- salesagility suitecrmSuiteCRM: Improper Authorization for attachment downloads3.7 Low
- wanzhou woes intelligent optimization energy saving systemWanzhou WOES Intelligent Optimization Energy Saving System GetPageList sql injection5.3 Medium
- microsoft 365 copilot chat, 365 copilot's business chat +1 moreMicrosoft 365 Copilot BizChat Information Disclosure Vulnerability8.2 High
- microsoft 365 copilot chat, 365 copilot's business chat +1 moreMicrosoft 365 Copilot BizChat Information Disclosure Vulnerability6.5 Medium
- microsoft azure openai, azure open ai +1 moreAzure OpenAI Elevation of Privilege Vulnerability10.0 Critical
- microsoft azure portalAzure Portal Elevation of Privilege Vulnerability9.1 Critical
- jwt ruby-jwejwe: Missing AES-GCM authentication tag validation in encrypted JWEs9.1 Critical
- astral-sh uvuv is vulnerable to ZIP payload obfuscation through parsing differentials6.8 Medium
- open5gsOpen5GS AMF Service nsmf-handler.c amf_nsmf_pdusession_handle_release_sm_context assertion4.8 Medium
- netapp san host utilities for windows, san host utilities +1 moreThe installer for SAN Host Utilities for Windows versions prior to 8.0 is susceptible to a...7.0 High
- operator-framework operator-sdk, red hat multicluster engine for kubernetes, multicluster engine for kubernetes 2.6 +26 more +28 moreOperator-sdk: privilege escalation due to incorrect permissions of /etc/passwd6.4 Medium
- No product listedagentUniverse MCPSessionManager/MCPTool/MCPToolkit StdioServerParameters os command injection5.3 Medium
- tyler technologies erp pro 9 saas, tylertech erp pro 9 +1 moreTyler Technologies ERP Pro 9 SaaS application escape5.3 Medium
- saad iqbal post smtpWordPress Post SMTP plugin <= 3.2.0 - Account Takeover Vulnerability8.8 High
- shenzhen aitemi e commerce co. ltd. m300 wi-fi repeaterShenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via WISP SSID9.4 Critical
- shenzhen aitemi e commerce co. ltd. m300 wi-fi repeaterShenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via WPA2 Key9.4 Critical
- shenzhen aitemi e commerce co. ltd. m300 wi-fi repeaterShenzhen Aitemi M300 Wi-Fi Repeater PPPoE Username Command Injection9.4 Critical
- shenzhen aitemi e commerce co. ltd. m300 wi-fi repeaterShenzhen Aitemi M300 Wi-Fi Repeater PPPoE Password Command Injection9.4 Critical
- shenzhen aitemi e commerce co. ltd. m300 wi-fi repeaterShenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via Time Parameter9.4 Critical
- skops-dev skopsskops: Card.get_model does not block arbitrary code execution8.4 High
- astroAstro: Duplicate trailing slash feature can lead to Open Redirects5.5 Medium
- ibm websphere application server, websphere application server liberty +1 moreIBM WebSphere Application Server information disclosure3.7 Low
- cloudflare quicheInfinite loop triggered by connection ID retirement8.7 High
- flexibits fantasticalIncorrect Authorization of XPC Service in Fantastical.app6.9 Medium
- fujifilm corporation frontier dx400w, seiko epson multiple epson product +1 moreOn multiple products of SEIKO EPSON and FUJIFILM Corporation, the initial administrator password...8.7 High
- tagfree x-free uploader: External Control of File Name or Path vulnerability in TAGFREE X-Free Uploader XFU allows :...8.8 High
- tagfree x-free uploader: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in...8.7 High
- tianocore edk2SMM IDT Privilege Escalation Vulnerability7.0 High
- salesagility suitecrmSuiteCRM is vulnerable to Cross Site Scripting (XSS) through its email viewer8.6 High
- salesagility suitecrmSuiteCRM: Reflected Cross Site Scripting (XSS) through HTTP Referrer header5.1 Medium
- himmelblau-idm himmelblauHimmelblau's Kerberos credential cache collection is world readable7.1 High
- latkecrszy linkjoinLinkJoin through 882f196 mishandles token ownership in password reset.7.4 High
- latkecrszy linkjoinLinkJoin through 882f196 mishandles lacks type checking in password reset.7.4 High
- tae898 ercERC (aka Emotion Recognition in Conversation) through 0.3 has insecure deserialization via a...5.7 Medium
- agora foundation agoraIn Agora Foundation Agora fall23-Alpha1 before 690ce56, there is XSS via a profile picture to...6.4 Medium
- agora foundation agoraIn Agora Foundation Agora fall23-Alpha1 before b087490, there is XSS via tag in client/agora...6.4 Medium
- agora foundation agoraIn Agora Foundation Agora fall23-Alpha1 before b087490, there is XSS via topicName in client...6.4 Medium
- netwrix directory managerNetwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 inserts...4.3 Medium
- netwrix directory managerNetwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows SQL...5.4 Medium
- netwrix directory managerNetwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows XSS for...6.1 Medium
- netwrix directory managerNetwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 has...5.3 Medium
- Show moreLoading…