CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
vlcOSS-FuzzIndex-out-of-bounds in hevc_get_picture_sizeNo scorevlcOSS-FuzzHeap-buffer-overflow in hevc_hvcC_to_AnnexB_NALNo scorevlcOSS-FuzzHeap-buffer-overflow in check_sync_pesNo scorelitestarPyPILitestar has potential log injection in exception logging3.7 Low- vimVim heap use-after-free vulnerability when processing recursive tuple data types6.9 Medium
- vimVim double-free vulnerability during Vim9 script import operations6.9 Medium
- tokio-rs slabslab allows out-of-bounds access in `get_disjoint_mut` due to incorrect bounds check5.1 Medium
- stirling-tools stirling-pdf, stirlingpdf stirling pdf +1 moreStirling-PDF SSRF vulnerability on /api/v1/convert/markdown/pdf8.6 High
- pyloadPyLoad vulnerable to SQL Injection via API /json/add_package in add_links parameter7.8 High
- stirling-tools stirling-pdf, stirlingpdf stirling pdf +1 moreStirling-PDF SSRF vulnerability on /api/v1/convert/html/pdf8.6 High
- stirling-tools stirling-pdf, stirlingpdf stirling pdf +1 moreStirling-PDF SSRF vulnerability on /api/v1/convert/file/pdf8.6 High
- omnissa secure email gatewayOmnissa Secure Email Gateway (SEG) updates address Server-Side Request Forgery (SSRF) vulnerability8.6 High
- telstra open-kildaOpenKilda XXE in SAML configuration6.9 Medium
- zed-industries zedZed AI Agent Remote Code Execution8.5 High
- nasa cryptolibHeap Buffer Overflow in NASA CryptoLib 1.4.0 `Crypto_TC_Check_IV_Setup`8.6 High
- masacmsMasaCMS SQL Injection vulnerability9.8 Critical
- ether catalyst::authentication::credential::httpCatalyst::Authentication::Credential::HTTP versions 1.018 and earlier for Perl use insecurely generated nonces8.6 High
- mattermost confluence, confluence plugin +1 moreUnauthorized Channel Subscription Creation in Mattermost Confluence Plugin4.0 Medium
- mattermost confluence, confluence plugin +1 moreUnexpected input to Create Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin7.5 High
- mattermost confluence, confluence plugin +1 moreUnauthenticated Channel Subscription Edit in Mattermost Confluence Plugin7.2 High
- mattermost confluence, confluence plugin +1 moreUnexpected Input to Cloud Webhook endpoint Causes DoS in Mattermost Confluence Plugin5.9 Medium
- mattermost confluence, confluence plugin +1 moreUnauthorized Subscription Creation to Confluence Space in Mattermost Confluence Plugin5.0 Medium
- mattermost confluence, confluence plugin +1 moreUnauthorized Channel Subscription Edit in Mattermost Confluence Plugin4.0 Medium
- mattermost confluence, confluence plugin +1 moreLack of Authorization on Get Channel Subscriptions for Autocomplete in Mattermost Confluence Plugin3.7 Low
- mattermost confluence, confluence plugin +1 moreUnexpected Input to Server Webhook endpoint Causes DoS in Mattermost Confluence Plugin5.9 Medium
- mattermost confluence, confluence plugin +1 moreUnexpected input to Update Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin7.5 High
- mattermost confluence, confluence plugin +1 moreUnauthenticated Access to Channel Subscription in Mattermost Confluence Plugin3.7 Low
- mattermost confluence, confluence plugin +1 moreUnauthorized Subscription Edit to Confluence Space in Mattermost Confluence Plugin6.4 Medium
- mattermost confluence, confluence plugin +1 moreUnauthenticated Channel Subscription Creation in Mattermost Confluence Plugin7.2 High
- mattermost confluence, confluence plugin +1 moreUnauthorized Channel Subscription Read in Mattermost Confluence Plugin4.0 Medium
- abb aspectSession ID Basic Auth Bypass9.2 Critical
- abb aspectDOS attack possible8.2 High
- omnissa workspace one uemOmnissa Workspace ONE UEM contains a Server-Side Request Forgery (SSRF) Vulnerability. A...5.4 Medium
- omnissa workspace one uemOmnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious...7.5 High
- cherry-ai cherry studio, cherryhq cherry-studio +1 moreCherry Studio One-click Remote Code Execution Vulnerability through Custom URL Handling8.0 High
- abb aspectUnauthenticated RCE9.3 Critical
- yugabytedb inc anywhereYugabyteDB Anywhere web server does not properly enforce authentication for the /metamaster...5.1 Medium
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreclone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns7.8 High
- openfilerOpenfiler v2.x NetworkCard Command Execution9.4 Critical
- zen load balancer load balancerZEN Load Balancer Filelog Command Execution9.4 Critical
- auxilium ratemypetAuxilium RateMyPet Arbitrary File Upload RCE9.3 Critical
- phptaxPhpTax pfilez Parameter Exec Remote Code Injection9.3 Critical
- code-projects eblog sitecode-projects eBlog Site File Upload save-slider.php unrestricted upload5.3 Medium
- yugabytedb inc yugabytedbThe YugabyteDB tablet server contains a flaw in its YCQL query handling that can trigger a null...4.1 Medium
- wukongopensource wukongcrm, 5kcrm wukong crm +1 moreWuKongOpenSource WukongCRM API Response upload information exposure5.3 Medium
- libtiffLibTIFF tiffcrop tiffcrop.c readSeparateStripsetoBuffer stack-based overflow4.8 Medium
- yugabytedb inc anywhereShared Access Signature token is not masked in the backup configuration response and is also...6.8 Medium
- yugabytedb inc yugabytedbYugabyteDB diagnostic information was transmitted over HTTP, which could expose sensitive data...7.0 High
- ruoyiyangzongzhuan RuoYi edit cross site scripting5.1 Medium
- yugabytedb inc yugabytedbYugabyteDB has been collecting diagnostics information from YugabyteDB servers, which may include...7.0 High
- Show moreLoading…