CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- dream-theme the7 — website and ecommerce builder for wordpressThe7 <= 12.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via title and data-dt-img-description Attributes6.4 Medium
- linlinjava litemalllinlinjava litemall File delete path traversal5.3 Medium
- byd dilink osBYD DiLink OS Incorrect encryption Implementation of system log dumps5.1 Medium
- wangzhixuan spring-shiro-trainingwangzhixuan spring-shiro-training add command injection6.9 Medium
- protected total webshield extension, totalwebshield total webshield +1 moreProtected Total WebShield Extension Block Page cross site scripting2.3 Low
- macrozheng mallmacrozheng mall Add Product Page upload cross site scripting4.8 Medium
- gnu liboptsGNU libopts __strstr_sse2 memory corruption4.8 Medium
- sayweee ricepo, weee ricepo app +1 moreWeee RICEPO App com.ricepo.app AndroidManifest.xml improper export of android application components4.8 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery5.1 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery5.3 Medium
- ulab-uiuc tiny-scientistPath Traversal Vulnerability in PDF Review Function (CWE-22)6.7 Medium
- frappe lms, learning +1 moreFrappe LMS Incomplete Fix CVE-2025-55006 cross site scripting4.8 Medium
- frappe learning, lms +1 moreFrappe Learning Holds Potential for Malicious SVG Upload in Image Upload Feature4.3 Medium
- oakserver oakoak: ReDoS in x-forwarded-proto and x-forwarded-for headers5.3 Medium
libdwarfOSS-FuzzHeap-buffer-overflow in _dwarf_memcpy_noswap_bytesNo scoredistro-info-dataDebiandistro-info-data - database updateNo score- cesiumlab webCesiumLab Web lodmodels sql injection6.9 Medium
- imaginationtech ddk, imagination technologies graphics ddk +1 moreGPU DDK - Security fix for PP-171570 can lead to an uninitialised pointer dereference and memory leak7.5 High
- imagination technologies graphics ddkGPU DDK - RGXFW_CTL.pui8FWScratchBuf Leak/Overwrite9.8 Critical
- scada-ltsScada-LTS Virtual Data Source Property data_source_edit.shtm cross site scripting5.1 Medium
- macrozheng mallmacrozheng mall Admin Login excessive authentication6.3 Medium
- macrozheng mallmacrozheng mall login cleartext transmission6.3 Medium
- zhenfeng13 my-blogzhenfeng13 My-Blog Category save cross site scripting4.8 Medium
- zhenfeng13 my-blogzhenfeng13 My-Blog save cross-site request forgery5.3 Medium
- zlt2000 microservices-platformzlt2000 microservices-platform Spring Actuator Interface actuator information disclosure6.9 Medium
- craftcms cms, craft cms +1 moreCraft contains a theoretical bypass for CVE-2025-232095.2 Medium
- zlt2000 microservices-platformzlt2000 microservices-platform OauthLogoutSuccessHandler.java onLogoutSuccess redirect5.1 Medium
nssTuxCare,nss-develTuxCare,nss-pkcs11-develTuxCare +2 more +4 moreUpdate of nssNo score- gnu cflowGNU cflow Lexer c.c yylex buffer overflow4.8 Medium
- gnu cflowGNU cflow Lexer c.c yylex null pointer dereference4.8 Medium
- themewinter eventin, arraytics eventin – event calendar, event registration, tickets & booking (ai powered) +1 moreEventin <= 4.0.34 - Authenticated (Contributor+) Privilege Escalation via User Email Change/Account Takeover8.8 High
- zenoss, inc. zenoss coreZenoss 3.x showDaemonXMLConfig Command Execution8.7 High
- xodaXODA 0.4.5 Arbitrary PHP File Upload9.3 Critical
- wpo foundation webpagetestWebPageTest Arbitrary PHP File Upload RCE9.3 Critical
- wan emulator emulatorWAN Emulator v2.3 Command Execution9.3 Critical
- pmsoftware simple web serverSimple Web Server Connection Header Buffer Overflow9.3 Critical
- sflog! cmsSflog! CMS 1.0 Arbitrary File Upload RCE8.7 High
- projectpierProject Pier <= 0.8.8 Arbitrary File Upload RCE9.3 Critical
- photodex proshow producerPhotodex ProShow Producer 5.0.3256 load File Handling Buffer Overflow8.4 High
- mobilecartlyMobileCartly 1.0 savepage.php Arbitrary File Creation10.0 Critical
- esva-project e-mail security virtual applianceE-Mail Security Virtual Appliance learn-msg.cgi Command Injection9.3 Critical
- egalleryEGallery 1.2 Arbitrary PHP File Upload9.3 Critical
- cyclope-series cyclope employee surveillance solutionCyclope Employee Surveillance Solution v6.x SQL Injection10.0 Critical
- cuteflow.org cuteflowCuteFlow <= 2.11.2 Arbitrary File Upload RCE9.3 Critical
- ajaxplorerAjaXplorer < 2.6 checkInstall.php Unauthenticated RCE9.3 Critical
- actfax serverActFax 4.32 Client Importer Buffer Overflow9.3 Critical
- burk technology arc soloBurk Technology ARC Solo Missing Authentication for Critical Function9.3 Critical
- workos authkit-remixAuthKit: Sensitive auth data rendered in HTML7.1 High
- workos authkit-react-routerAuthKit React Router: Sensitive auth data rendered in HTML7.1 High
- gnome libxml2, ibm aix, vios +2 more +4 morelibxml2 xmlcatalog xmlParseSGMLCatalog recursion4.8 Medium
- Show moreLoading…