CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- symmetrix technologies snort reportSnort Report nmap.php/nbtscan.php RCE10.0 Critical
- s40 cms cmsS40 CMS 0.4.2 Path Traversal8.7 High
- realnetworks inc. netzip classicReal Networks Netzip Classic 7.5.1.86 File Parsing Buffer Overflow9.3 Critical
- rabidhamster r4 embedded serverRabidHamster R4 Log Entry sprintf() Buffer Overflow10.0 Critical
- quicksharehq quickshare file serverQuickShare File Server 1.2.1 Path Traversal RCE9.4 Critical
- php volunteer management volunteer managementPHP Volunteer Management System 1.0.2 Arbitrary File Upload8.7 High
- netop remote control clientNetOp Remote Control Client 9.5 .dws File Buffer Overflow8.4 High
- mybb, mybb group forum software +1 moremyBB 1.6.4 Backdoor Arbitrary Command Execution10.0 Critical
- lattice semiconductor ispvm systemLattice Semiconductor ispVM System 18.0.2 XCF File Handling Buffer Overflow8.4 High
- sa-mp team san andreas multiplayerGTA SA-MP server.cfg Buffer Overflow8.7 High
- dolibarr project erp/crmDolibarr ERP/CRM Post-Auth OS Command Injection9.4 Critical
- cytel inc. studioCytel Studio <= 9.0 .CY3 File Stack Buffer Overflow9.3 Critical
- comsndftp ftp serverComSndFTP v1.3.7 Beta USER Format String RCE9.3 Critical
- mtons mblogmtons mblog Verification Code send_code excessive authentication6.3 Medium
- py-pdf pypdfpypdf's Manipulated FlateDecode streams can exhaust RAM6.6 Medium
- external-secretsExternal Secrets Operator Missing Namespace Restriction in PushSecret and SecretStore List() Calls Allows Unauthorized Secret Access7.1 High
- sourcecodester covid 19 testing management system, unyasoft covid19 testing management system +1 moreSourceCodester COVID 19 Testing Management System login.php sql injection6.9 Medium
- angeljudesuarez sports management systemitsourcecode Sports Management System match.php sql injection6.9 Medium
- campcodes online water billing systemCampcodes Online Water Billing System viewbill.php sql injection6.9 Medium
- anisha job diarycode-projects Job Diary edit-details.php sql injection6.9 Medium
- anisha job diarycode-projects Job Diary admin-inbox.php sql injection6.9 Medium
- anisha job diarycode-projects Job Diary user-apply.php sql injection6.9 Medium
- portabilis i-diarioPortabilis i-Diario Dicionário de Termos BNCC dicionario-de-termos-bncc cross site scripting4.8 Medium
- hp inc. certain hp pc productsA potential security vulnerability has been identified in the System BIOS for some HP PC products...7.3 High
- abb abilitytm zenonABB AbilityTM zenon Remote Transport Vulnerability8.7 High
- nvidia megatron-lmNVIDIA Megatron-LM for all platforms contains a vulnerability in the megatron/training/ arguments...7.8 High
- nvidia megatron-lmNVIDIA Megatron-LM for all platforms contains a vulnerability in the tools component, where an...7.8 High
- drupal layout builder advanced permissions, layout builder advanced permissions project builder advanced permissions +1 moreLayout Builder Advanced Permissions - Moderately critical - Access bypass - SA-CONTRIB-2025-0974.3 Medium
- authenticator login project login, drupal authenticator login +1 moreAuthenticator Login - Highly critical - Access bypass - SA-CONTRIB-2025-0969.8 Critical
- portabilis i-diarioPortabilis i-Diario History objetivos-de-aprendizagem-e-habilidades cross site scripting4.8 Medium
- nvidia merlin transformers4recNVIDIA Merlin Transformers4Rec for all platforms contains a vulnerability in a python dependency,...7.8 High
- gitlabIncorrect Authorization in GitLab6.5 Medium
- gitlabIncorrect Privilege Assignment in GitLab6.7 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- gitlabInsufficient Granularity of Access Control in GitLab3.1 Low
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- gitlabInefficient Regular Expression Complexity in GitLab6.5 Medium
- gitlabIncorrect Permission Assignment for Critical Resource in GitLab5.0 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab8.7 High
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab8.7 High
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab8.7 High
- gitlabAuthorization Bypass Through User-Controlled Key in GitLab6.5 Medium
- nvidia isaac-gr00t n1NVIDIA Isaac-GR00T for all platforms contains a vulnerability in a Python component where an...7.8 High
- nvidia apexNVIDIA Apex for all platforms contains a vulnerability in a Python component where an attacker...7.8 High
- nvidia nemo, nemo framework +1 moreNVIDIA NeMo library for all platforms contains a vulnerability in the model loading component,...7.8 High
- nvidia nemo, nemo framework +1 moreNVIDIA NeMo Framework for all platforms contains a vulnerability where a user could cause a...7.8 High
- nvidia webdatasetNVIDIA WebDataset for all platforms contains a vulnerability where an attacker could execute...7.8 High
- amazon emrPrivilege escalation issue in Amazon EMR Secret Agent component9.0 Critical
- palo alto networks cortex xdr broker vmCortex XDR Broker VM: Secrets Shared Across Multiple Broker VM Images5.3 Medium
- palo alto networks globalprotect app, global protect uwp app +1 moreGlobalProtect App: Improper Certificate Validation Leads to Privilege Escalation5.3 Medium
- Show moreLoading…