CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- siemens smartclient modules opcenter ql home (sc), soa audit, soa cockpit +1 more +3 moreA vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >=...7.5 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP have a Denial Of Service via File Upload (DOS) vulnerability6.9 Medium
- legion of the bouncy castle inc. bc java, bc-fja, bouncy castle for java +2 morePossible DOS in processing specially formed ASN.1 Object Identifiers6.3 Medium
- solarwinds database performance analyzerSolarWinds Database Performance Analyzer Hard-coded Cryptographic Key Vulnerability5.6 Medium
- phoenix contact daumImproper File Permissions Allow Local Privilege Escalation7.8 High
- bplugins bslider – create responsive image, post, product, and video slidersB Slider- Gutenberg Slider Block for WP <= 1.1.30 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Plugin Installation8.8 High
- litonice13 master addons for elementor – widgets, extensions, theme builder, popup builder & template kitsMaster Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations <= 2.0.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via fancyBox6.4 Medium
- 10up simple local avatarsSimple Local Avatars <= 2.8.4 - Missing Authorization to Authenticated (Subscriber+) Avatar Migration4.3 Medium
- anwppro anwp football leaguesAnWP Football Leagues <= 0.16.17 - Authenticated (Administrator+) CSV Injection4.8 Medium
- damian góra fibosearchWordPress FiboSearch plugin <= 1.32.1 - Broken Access Control vulnerability5.3 Medium
- elementor website builder, elemntor elementor website builder – more than just a page builder +1 moreElementor <= 3.30.2 - Authenticated (Administrator+) Arbitrary File Read via Image Import4.9 Medium
- uicore elements – free widgets and templates for elementorUiCore Elements <= 1.3.0 - Missing Authorization to Unauthenticated Arbitrary File Read7.5 High
- axis osAn ACAP configuration file lacked sufficient input validation, which could allow for arbitrary...6.7 Medium
- axis osACAP applications can be executed with elevated privileges, potentially leading to privilege...6.7 Medium
- axis camera station, camera station pro +1 moreDuring an internal security assessment, a Server-Side Request Forgery (SSRF) vulnerability that...5.1 Medium
- emarket-design project management, bug and issue tracking plugin – software issue managerSoftware Issue Manager <= 5.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameter6.4 Medium
- bplugins bblocks – essential gutenberg blocks & patterns collectionB Blocks <= 2.0.6 - Missing Authorization to Unauthenticated Privilege Escalation via rgfr_registration Function9.8 Critical
- prabode gmap generatorGMap - Venturit <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'h' Parameter6.4 Medium
- addix simple responsive sliderSimple Responsive Slider <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- ebernstein inline stock quotesInline Stock Quotes <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via stock Shortcode6.4 Medium
- odn mosaic generatorMosaic Generator <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'c' Parameter6.4 Medium
- emilien wp chart generatorWp chart generator <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpchart Shortcode6.4 Medium
- nimeshrmr wp private content plusWP Private Content Plus <= 3.6.2 - Unauthenticated Sensitive Information Exposure5.3 Medium
- risetheme rt easy builder – advanced addons for elementorRT Easy Builder <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- bbioon purchase orders for woocommerceWooCommerce Purchase Orders <= 1.0.2 - Authenticated (Subscriber+) Arbitrary File Deletion8.1 High
- sap se netweaver application server abap (bic document)Multiple vulnerabilities in SAP NetWeaver Application Server ABAP (BIC Document)8.1 High
- sap se netweaver application server abap (bic document)Multiple vulnerabilities in SAP NetWeaver Application Server ABAP (BIC Document)6.1 Medium
- sap se s/4hana (private cloud or on-premise)Code Injection vulnerability in SAP S/4HANA (Private Cloud or On-Premise)9.9 Critical
- sap se cloud connectorMissing authorization check in SAP Cloud Connector3.5 Low
- sap se business one (sld)Broken Authorization in SAP Business One (SLD)8.8 High
- sap se landscape transformation (analysis platform)Code Injection Vulnerability in SAP Landscape Transformation (Analysis Platform)9.9 Critical
- sap se abap platformMissing Authorization check in ABAP Platform4.9 Medium
- sap se netweaver abap platformCross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Platform6.1 Medium
- sap se s/4hana (bank communication management)Directory Traversal vulnerability in SAP S/4HANA (Bank Communication Management)6.9 Medium
- sap se netweaver application server abapHTML Injection vulnerability in SAP NetWeaver Application Server ABAP6.1 Medium
- sap se gui for windowsInformation Disclosure in SAP GUI for Windows4.5 Medium
- sap se netweaver application server for abapCross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server for ABAP6.1 Medium
- sap se fiori (launchpad)Reverse Tabnabbing vulnerability in SAP Fiori (Launchpad)3.5 Low
- sap se netweaver application server for abap, sap basis +1 moreMissing Authorization check in SAP NetWeaver Application Server for ABAP5.4 Medium
- sap se netweaver as for abap and abap platform(internet communication manager)Information Disclosure vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform(Internet Communication Manager)4.1 Medium
- sap se s/4hana (supplier invoice)CRLF Injection vulnerability in SAP S/4HANA (Supplier invoice)4.3 Medium
vlcOSS-FuzzHeap-buffer-overflow in FragPrepareChunkNo score- mmaitre314 picklescanpicklescan - Detection Bypass via STACK_GLOBAL Opcode Parsing Logic Flaw9.3 Critical
github.com/komari-monitor/komariGoKomari vulnerable to 2FA Authentication Bypass8.5 High- komari-monitor komariKomari Allows Cross-site WebSocket Hijacking8.6 High
hfsnpmHFS user adding a "web link" in HFS is vulnerable to "target=_blank" exploit2.9 LowvlcOSS-FuzzHeap-buffer-overflow in webvtt_domnode_SelectNodesInTreeNo scorevlcOSS-FuzzHeap-buffer-overflow in iTUNTripletCallbackNo scorevlcOSS-FuzzUNKNOWN WRITE in MP4_BoxFreeNo scorevlcOSS-FuzzHeap-buffer-overflow in OpenNo score- Show moreLoading…