CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- labredescefetrj wegiaWeGIA SQL Injection via id_fichamedica at endpoint `GET/html/funcionario/dependente_remover.php`9.4 Critical
- darylldoyle svg-sanitizersvg-sanitizer By-Passing Attribute Sanitization5.1 Medium
- servicenow ai platformBroken Access Control in ServiceNow AI Platform5.3 Medium
- helmetjs content-security-policy-parsercontent-security-policy-parser Prototype Pollution Vulnerability May Lead to RCE8.8 High
- debian linux, linux kernel +1 morexfrm: interface: fix use-after-free after changing collect_md xfrm interface7.8 High
- kanboardKanboard Authenticated Admin Remote Code Execution via Unsafe Deserialization of Events9.1 Critical
- kanboardKanboard Path Traversal in File Write via Task File Upload Api6.4 Medium
- nixos hydraHydra missing authentication when triggering evaluations through GitHub and Gitea plugins6.9 Medium
- nixos hydraHydra persistent XSS in build metrics7.1 High
- brother industries, ltd ads-1350w, ads-1800w, ads-2700we +410 more +412 moreUnauthenticated leak of sensitive information affecting multiple models from Brother Industries, Ltd., Toshiba Tec, and Konica Minolta, Inc.4.3 Medium
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreImproper handling of symbolic links in Ivanti Connect Secure before version 22.7R2.8 or 22.8R2,...5.5 Medium
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreXEE in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5,...4.9 Medium
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreA heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy...7.5 High
- ivanti connect secure, neurons for secure, neurons for secure access +3 more +5 moreA buffer over-read vulnerability in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti...7.5 High
- checkpoint harmony sase, check point harmony sase +1 moreExposed SFTP server8.1 High
- ivanti virtual application delivery controller, virtual application delivery controllercwe-862 +1 moreMissing authorization in the admin console of Ivanti Virtual Application Delivery Controller...6.5 Medium
- ivanti avalancheIncomplete restriction of configuration in Ivanti Avalanche before version 6.4.8.8008 allows a...7.2 High
- ivanti avalancheSQL injection in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated...7.2 High
- ami aptiov, aptio v +1 moreSmiFlash Race Condition Vulnerability7.3 High
- ami aptiov, aptio v +1 moreThirdPartyVideo SetVariable Vulnerability4.2 Medium
govulncheck-vulndbopenSUSESecurity update for govulncheck-vulndbNo score- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP have a reflected cross-site scripting vulnerability6.9 Medium
kernelTuxCare,kernel-abi-stablelistsTuxCare,kernel-coreTuxCare +54 more +56 moreUpdate of kernelNo score- siemens sinec traffic analyzerA vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions)...7.5 High
- siemens sinec traffic analyzerA vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions ...7.5 High
- siemens sinec traffic analyzerA vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions ...7.0 High
- siemens sinec traffic analyzerA vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions ...8.8 High
- siemens sinec traffic analyzerA vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions ...6.8 Medium
- siemens simcenter femap v2406, simcenter femap v2412, simcenter femap +2 moreA vulnerability has been identified in Simcenter Femap V2406 (All versions < V2406.0003),...7.3 High
- siemens simcenter femap v2406, simcenter femap v2412, simcenter femap +2 moreA vulnerability has been identified in Simcenter Femap V2406 (All versions < V2406.0003),...7.3 High
- siemens ruggedcom rox mx5000, ruggedcom rox mx5000re, ruggedcom rox rx1400 +8 more +10 moreA vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions), RUGGEDCOM ROX...8.6 High
- siemens simatic s7-plcsim v17, simatic step 7 v17, simatic step 7 v18 +30 more +32 moreA vulnerability has been identified in SIMATIC S7-PLCSIM V17 (All versions), SIMATIC STEP 7 V17 ...8.5 High
- siemens power meter sicam q100, power meter sicam q200 family +1 moreA vulnerability has been identified in POWER METER SICAM Q100 (7KG9501-0AA01-0AA1) (All versions ...6.8 Medium
- siemens power meter sicam q100, power meter sicam q200 family +1 moreA vulnerability has been identified in POWER METER SICAM Q100 (7KG9501-0AA01-0AA1) (All versions ...6.8 Medium
- siemens simatic rtls locating managerA vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.3)....4.8 Medium
- siemens simatic rtls locating managerA vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.2)....9.4 Critical
- siemens sinumerik 828d ppu.4, sinumerik 828d ppu.5, sinumerik 840d sl +4 more +6 moreA vulnerability has been identified in SINUMERIK 828D PPU.4 (All versions < V4.95 SP5), SINUMERIK...8.7 High
- siemens simotion scout tia v5.4, simotion scout tia v5.5, simotion scout tia v5.6 +8 more +10 moreA vulnerability has been identified in SIMOTION SCOUT TIA V5.4 (All versions), SIMOTION SCOUT TIA...6.8 Medium
- siemens siprotec 5 6md84 (cp300), siprotec 5 6md85 (cp300), siprotec 5 6md86 (cp300) +33 more +35 moreA vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V10.0), SIPROTEC...2.4 Low
- siemens ruggedcom rox mx5000, ruggedcom rox mx5000re, ruggedcom rox rx1400 +8 more +10 moreA vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions), RUGGEDCOM ROX...5.1 Medium
- siemens simatic rtls locating managerA vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.3)....6.9 Medium
- siemens automation license manager v6.0, automation license manager v6.2, cemat v10.0 +136 more +138 moreThe affected setup component is vulnerable to DLL hijacking. This could allow an attacker to...8.5 High
- siemens simatic pcs neo v4.1, simatic pcs neo v5.0, simatic pcs neo v6.0 +34 more +36 moreA vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 ...8.6 High
- siemens siprotec 4 6md61, siprotec 4 6md63, siprotec 4 6md66 +26 more +28 moreA vulnerability has been identified in SIPROTEC 4 6MD61 (All versions), SIPROTEC 4 6MD63 (All...8.7 High
- siemens smartclient modules opcenter ql home (sc), soa audit, soa cockpit +1 more +3 moreA vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >=...6.1 Medium
- siemens smartclient modules opcenter ql home (sc), soa audit, soa cockpit +1 more +3 moreA vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >=...2.1 Low
- siemens smartclient modules opcenter ql home (sc), soa audit, soa cockpit +1 more +3 moreA vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >=...2.1 Low
- siemens smartclient modules opcenter ql home (sc), soa audit, soa cockpit +1 more +3 moreA vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >=...5.1 Medium
- siemens smartclient modules opcenter ql home (sc), soa audit, soa cockpit +1 more +3 moreA vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >=...5.9 Medium
- siemens smartclient modules opcenter ql home (sc), soa audit, soa cockpit +1 more +3 moreA vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >=...2.0 Low
- Show moreLoading…