CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- google chromeRace in V8 in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to execute...8.8 High
- google chromeHeap buffer overflow in libaom in Google Chrome prior to 139.0.7258.127 allowed a remote attacker...8.8 High
- insyde software insydeh2oSetupUtility: A buffer overflow vulnerability leads to arbitrary code execution.7.5 High
- insyde software insydeh2oTcg2Smm: improper input validation may lead to arbitrary code execution7.5 High
- insyde software insydeh2oUsbCoreDxe: improper input validation may lead to arbitrary code execution7.5 High
vlcOSS-FuzzHeap-buffer-overflow in cc_storage_appendNo scoresoosyze/soosyzePackagistSoosyze CMS's /user/login endpoint missing rate-limiting and lockout mechanisms5.4 Medium- No product listedCycloneDX Sunshine v0.9 is vulnerable to CSV Formula Injection via a crafted JSON file5.4 Medium
- No product listedAn issue in Studio 3T v.2025.1.0 and before allows a remote attacker to execute arbitrary code...9.8 Critical
- No product listedCross-Site Scripting (XSS) vulnerability found in MarkTwo commit...6.1 Medium
- totolink a7000r firmwareIn TOTOLINK A7000R firmware 9.1.0u.6115_B20201022, an attacker can bypass login by sending a...9.8 Critical
- totolink ex1200t firmwareIn TOTOLINK EX1200T firmware 4.1.2cu.5215, an attacker can bypass login by sending a specific...9.8 Critical
- olivetinOliveTin OS Command Injection vulnerability6.5 Medium
- No product listedA Cross-Site Scripting (XSS) vulnerability exists in SpatialReference.org (OSGeo/spatialreference...6.1 Medium
- netis-systems wf2780 firmwareA null pointer dereference vulnerability was discovered in Netis WF2780 v2.2.35445. The...7.5 High
- netis-systems wf2880 firmwareA buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the...7.5 High
- netis-systems wf2880 firmwareA buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the...7.5 High
- netis-systems wf2880 firmwareA buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the...7.5 High
- netis-systems wf2880 firmwareA buffer overflow vulnerability has been discovered in the Netis WF2880 v2.1.40207 in the...7.5 High
- netis-systems wf2880 firmwareA buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the...7.5 High
- netis-systems wf2880 firmwareA buffer overflow vulnerability has been discovered in the Netis WF2880 v2.1.40207 in the...7.5 High
- netis-systems wf2880 firmwareA buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the...7.5 High
- netis-systems wf2880 firmwareA buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the...7.5 High
- netis-systems wf2880 firmwareA buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the...7.5 High
- netis-systems wf2880 firmwareA buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the...7.5 High
- No product listedAn issue was discovered in /Code/Websites/DanpheEMR/Controllers/Settings...9.8 Critical
- No product listedServer side request forgery (SSRF) vulnerability in makeplane plane 0.23.1 via the password...9.1 Critical
- matrix specificationThe Matrix specification before 1.16 (i.e., with a room version before 12 and State Resolution...7.1 High
- hortusfoxA zip slip vulnerability in the /modules/ImportModule.php component of hortusfox-web v4.4 allows...6.5 Medium
- hortusfoxA cross-site scripting (XSS) vulnerability in the TextBlockModule.php component of hortusfox-web...6.1 Medium
- hortusfoxA cross-site scripting (XSS) vulnerability in the /controller/admin.php endpoint of hortusfox-web...5.4 Medium
- hortusfoxA cross-site scripting (XSS) vulnerability in the /Calendar endpoint of hortusfox-web v4.4 allows...6.1 Medium
- hortusfoxA cross-site scripting (XSS) vulnerability in the /tasks endpoint of hortusfox-web v4.4 allows...6.1 Medium
- No product listedThe /goform/formJsonAjaxReq POST endpoint of Shenzhen Tuoshi NR500-EA RG500UEAABxCOMSLICv3.4.2731...6.5 Medium
- No product listedKuWFi 5G01-X55 FL2020_V0.0.12 devices expose an unauthenticated API endpoint (ajax_get.cgi),...7.5 High
- No product listedAn issue was discovered on KuWFi GC111 GC111-GL-LM321_V3.0_20191211 devices. The TELNET service...9.8 Critical
- No product listedShenzhen Tuoshi NR500-EA RG500UEAABxCOMSLICv3.4.2731.16.43 devices enable the SSH service by...9.8 Critical
- zoom communications inc clients for windows, zoom meeting software development kit, rooms +3 more +5 moreZoom Clients for Windows - Untrusted Search Path9.6 Critical
- zoom communications inc clients for windows, zoom meeting software development kit, rooms +3 more +5 moreZoom Clients for Windows- Race Condition6.2 Medium
- adobe dimensionDimension | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe framemakerAdobe Framemaker | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe framemakerAdobe Framemaker | Use After Free (CWE-416)7.8 High
- adobe framemakerAdobe Framemaker | Use After Free (CWE-416)7.8 High
- adobe framemakerAdobe Framemaker | Use After Free (CWE-416)7.8 High
- adobe framemakerAdobe Framemaker | Use After Free (CWE-416)7.8 High
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Out-of-bounds Write (CWE-787)7.8 High
- adobe incopyInCopy | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe incopyInCopy | Out-of-bounds Write (CWE-787)7.8 High
- adobe incopyInCopy | Out-of-bounds Write (CWE-787)7.8 High
- adobe incopyInCopy | Use After Free (CWE-416)7.8 High
- Show moreLoading…