CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Firewall Clusters using the MACsec Protocol Expose the Connectivity Association Key (CAK)5.6 Medium
- palo alto networks checkov by prisma cloudCheckov by Prisma Cloud: Cleartext Exposure of Credentials5.9 Medium
- palo alto networks checkov by prisma cloudCheckov by Prisma Cloud: Unsafe Deserialization of Terraform Files Allows Code Execution4.8 Medium
- hyland software onbaseHyland OnBase < 17.0.2.87 .NET Remoting TCP Channel Unauthenticated RCE10.0 Critical
- portabilis i-educarPortabilis i-Educar Editar educar_instituicao_cad.php cross site scripting4.8 Medium
apache2Ubuntuapache2 regressionNo score- f5 big-ip, big-ip next, big-ip next cnf +27 more +29 moreHTTP/2 Vulnerability6.9 Medium
- f5 nginx open source, nginx plus +1 moreNGINX ngx_mail_smtp_module vulnerability6.3 Medium
- f5 big-ip, big-ip edge client, big-ip access policy manager +1 more +3 moreBIG-IP APM VPN web client for macOS vulnerability7.0 High
- f5 big-ip, big-ip access policy manager +1 moreBIG-IP APM vulnerability8.7 High
- f5 accessF5 Access for Android vulnerability8.8 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +19 more +21 moreBIG-IP Client SSL profile vulnerability8.7 High
- red hat cert-manager operator for red hat openshift 1.16, compliance operator 1, discovery 2 +18 more +20 moreLinux-pam: incomplete fix for cve-2025-60207.8 High
- ome omero-webOMERO.web displays unecessary user information when requesting to reset the password5.3 Medium
- imagemagickImageMagick Undefined Behavior (function-type-mismatch) in CloneSplayTree6.1 Medium
- imagemagickImageMagick: integer overflows in MNG magnification8.8 High
- imagemagickImageMagick: heap-buffer overflow in log colorspace handling5.5 Medium
- imagemagickImageMagick: heap-buffer overflow read in MNG magnification with alpha7.6 High
- foxit reader, pdf reader +1 moreA memory corruption vulnerability exists in Foxit Reader 2025.1.0.27937 due to the use of an...8.8 High
- cherry-ai cherry studio, cherryhq cherry-studio +1 moreCherry Studio RCE Vulnerability Disclosure9.7 Critical
- cherry-ai cherry studio, cherryhq cherry-studio +1 moreCherry Studio is Vulnerable to OS Command Injection during Connection with a Malicious MCP Server7.7 High
- apache tomcatApache Tomcat: session fixation via rewrite valve6.5 Medium
- 51mis lingdang crmShanghai Lingdang Information Technology Lingdang CRM event.php sql injection5.3 Medium
- h3c m2 nasH3C M2 NAS Webserver Configuration unnecessary privileges7.3 High
- apache tomcat, siemens simatic cn 4100 +1 moreApache Tomcat: h2 DoS - Made You Reset7.5 High
- fastly h20, github enterprise server, linux +16 more +18 moreCVE-2025-86717.5 High
- zkteco co wl20 biometric attendance systemInformation Disclosure Vulnerability in ZKTeco WL205.2 Medium
- zkteco co wl20 biometric attendance systemHard-coded Private Key Vulnerability in ZKTeco WL206.9 Medium
- zkteco co wl20 biometric attendance systemHard-coded Credentials Vulnerability in ZKTeco WL206.8 Medium
- zkteco co wl20 biometric attendance systemCleartext Storage Vulnerability in ZKTeco WL207.0 High
- legion of the bouncy castle inc. bc java, bcpkix fips, siemens simatic cn 4100 +2 morePossible DOS in processing large name constraint structures in PKIXCertPathReveiwer6.3 Medium
- wellchoose organization portal systemWellChoose｜Organization Portal System - SQL Injection7.1 High
- wellchoose organization portal systemWellChoose｜Organization Portal System - Local File Inclusion9.3 Critical
- wellchoose organization portal systemWellChoose｜Organization Portal System - Arbitrary File Reading through Path Traversal8.7 High
- wellchoose organization portal systemWellChoose｜Organization Portal System - Reflected Cross-site Scripting5.3 Medium
- wellchoose organization portal systemWellChoose｜Organization Portal System - Reflected Cross-site Scripting5.3 Medium
- wellchoose organization portal systemWellChoose｜Organization Portal System - Arbitrary File Reading through Path Traversal7.1 High
- No product listedUnsafe symlink following in restricted workspace-write sandbox leads to RCE8.8 High
- themeum tutor lms proTutor LMS Pro – eLearning and online course solution <= 3.7.0 - Authenticated (Tutor Instructor+) SQL Injection8.8 High
- instar 2k+, 4k +1 moreINSTAR 2K+/4K Backend IPC Server denial of service8.7 High
- instar 2k+, 4k +1 moreINSTAR 2K+/4K UART improper physical access control7.0 High
- instar 2k+, 4k +1 moreINSTAR 2K+/4K fcgi_server base64_decode buffer overflow9.3 Critical
- latepointLatepoint < 5.1.94 - Unauthenticated LFI9.8 Critical
- crmperks database for contact form 7, wpforms, elementor formsDatabase for Contact Form 7, WPforms, Elementor forms <= 1.4.3 - Unauthenticated PHP Object Injection to Arbitrary File Deletion9.8 Critical
- nikelschubert easy restaurant menu managerEasy restaurant menu manager <= 2.0.2 - Cross-Site Request Forgery to Menu Upload4.3 Medium
- file manager pro, ninja team file manager pro, ninjateam file manager pro – filester +1 more +3 moreMultiple elFinder Plugins <= (Various Versions) - Directory Traversal to Arbitrary File Deletion6.5 Medium
- oceanwpOceanWP <= 4.0.9 - 4.1.1 - Cross-Site Request Forgery to Ocean Extra Plugin Installation4.3 Medium
- google chromeUse after free in Aura in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who...8.8 High
- google chromeOut of bounds write in ANGLE in Google Chrome prior to 139.0.7258.127 allowed a remote attacker...8.8 High
- google chromeInappropriate implementation in File Picker in Google Chrome prior to 139.0.7258.127 allowed a...6.5 Medium
- Show moreLoading…