CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- labredescefetrj wegiaWeGIA Path Traversal at endpoint 'html/socio/sistema/download_remessa.php' via parameter 'file'10.0 Critical
- fortinet fortisoarA relative path traversal vulnerability [CWE-23] in FortiSOAR 7.6.0, 7.5.0 through 7.5.1, 7.4 all...6.4 Medium
- fortinet fortiwebA improper neutralization of special elements used in an os command ('os command injection')...6.5 Medium
- fortinet fortisoarAn Improper neutralization of input during web page generation ('cross-site scripting')...6.2 Medium
- fortinet fortiwebAn improper neutralization of special elements used in an OS command ('OS Command Injection')...6.7 Medium
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreAn authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet...7.9 High
- fortinet fortimanager, fortimanager cloud +1 moreAn Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability ...5.2 Medium
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreAn Integer Overflow or Wraparound vulnerability [CWE-190] in FortiOS version 7.6.2 and below,...4.8 Medium
- fortinet fortios, fortipam, fortiproxy +2 moreA double free vulnerability [CWE-415] in Fortinet FortiOS version 7.4.0, version 7.2.0 through 7...6.3 Medium
- fortinet fortiwebA improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, versions 7.4.7...7.7 High
- fortinet fortios, siemens ruggedcom ape1808 +1 moreAn incorrect privilege assignment vulnerability [CWE-266] in FortiOS Security Fabric version 7.6...6.8 Medium
- fortinet fortiadcAn improper neutralization of special elements used in an OS Command ("OS Command Injection")...6.6 Medium
- fortinet fortiwebA stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiWeb CLI version 7.6.0...6.3 Medium
- fortinet fortisiemAn improper neutralization of special elements used in an OS command ('OS Command Injection')...9.8 Critical
- fortinet forticamera, fortimail, fortindr +3 more +5 moreMultiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiMail version 7.6.0...4.2 Medium
- labredescefetrj wegiaWeGIA SQL Injection via id_fichamedica at endpoint `GET /html/saude/aplicar_medicamento.php`9.4 Critical
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal 7.4.0 and Liferay DXP have a reflected cross-site scripting (XSS) vulnerability5.1 Medium
- ibm websphere application server liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty bypass security5.9 Medium
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Incorrect Authorization (CWE-863)7.5 High
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)8.7 High
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)5.9 Medium
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Input Validation (CWE-20)7.5 High
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)5.3 Medium
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)8.1 High
- No product listedImproper locking for some Intel(R) TDX Module firmware before version 1.5.13 may allow a...5.6 Medium
- microsoft edge, edge for android +1 moreMicrosoft Edge (Chromium-based) for Android Spoofing Vulnerability4.3 Medium
- microsoft sharepoint enterprise server 2016, sharepoint server 2019, sharepoint server +2 moreMicrosoft SharePoint Remote Code Execution Vulnerability8.8 High
- microsoft edge, edge for android +1 moreMicrosoft Edge (Chromium-based) for Android Spoofing Vulnerability4.3 Medium
- microsoft dcadsv5-series azure vm, dcadsv5-series azure vm firmware, dcasv5-series azure vm +19 more +21 moreAzure Virtual Machines Spoofing Vulnerability7.9 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +21 more +23 moreWindows Hyper-V Remote Code Execution Vulnerability6.7 Medium
- microsoft azure stack hub, azure stack hub 2406, azure stack hub 2408 +1 more +3 moreAzure Stack Hub Information Disclosure Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreWindows StateRepository API Server file Elevation of Privilege Vulnerability7.8 High
- microsoft windows subsystem for linux (wsl2), windows subsystem for linux +1 moreWindows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability7.0 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +4 more +6 moreMicrosoft Word Remote Code Execution Vulnerability8.4 High
- microsoft teams, dynamics 365 guides, dynamics 365 remote assist +10 more +12 moreMicrosoft Teams Remote Code Execution Vulnerability7.5 High
- microsoft windows server 2025, windows server 2025 (server core installation) +1 moreWindows Kerberos Elevation of Privilege Vulnerability7.2 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows NTLM Elevation of Privilege Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Push Notifications Apps Elevation of Privilege Vulnerability7.8 High
- microsoft windows security appWindows Security App Spoofing Vulnerability5.5 Medium
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +15 more +17 moreWindows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability5.7 Medium
- microsoft 365 copilot, office for android, office for universal +36 more +38 moreGDI+ Remote Code Execution Vulnerability9.8 Critical
- microsoft azure stack hub, azure app service on azure stack +1 moreAzure Stack Hub Information Disclosure Vulnerability4.4 Medium
- microsoft office, 365 apps, 365 apps for enterprise +7 more +9 moreMicrosoft Office Remote Code Execution Vulnerability8.4 High
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft office, word, 365 apps +8 more +10 moreMicrosoft Word Remote Code Execution Vulnerability7.8 High
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft office, word, 365 apps +12 more +14 moreMicrosoft Word Information Disclosure Vulnerability6.8 Medium
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +4 more +6 moreMicrosoft Office Visio Remote Code Execution Vulnerability7.8 High
- microsoft office, word, 365 apps +12 more +14 moreMicrosoft Word Remote Code Execution Vulnerability8.4 High
- Show moreLoading…