CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- netskope clientNetskope Client Configuration Tampering with Local MITM7.0 High
- totolink n350r, n350r firmware +1 moreTOTOLINK N350R formSysCmd command injection5.3 Medium
- 1000 projects sales management system1000 Projects Sales Management System dordupdate.php sql injection6.9 Medium
- 1000 projects sales management system1000 Projects Sales Management System custcmp.php sql injection6.9 Medium
- 1000 projects sales management system1000 Projects Sales Management System sales.php cross site scripting5.3 Medium
- 1000 projects sales management system1000 Projects Sales Management System sales.php cross site scripting5.3 Medium
- 1000 projects sales management system1000 Projects Sales Management System sales.php sql injection6.9 Medium
- code-projects medical store management systemcode-projects Medical Store Management System ChangePassword.java sql injection5.3 Medium
- code-projects medical store management systemcode-projects Medical Store Management System Update Company UpdateCompany.java sql injection5.3 Medium
libwebpOSS-FuzzNull-dereference READ in ubsan_GetStackTraceNo scorelibwebpOSS-FuzzNull-dereference READ in ProcessRowsNo score- rails activestorage, red hat 3scale api management platform 2, satellite 6 +2 moreActive Storage allowed transformation methods that were potentially unsafe9.2 Critical
postgresqlAlmaLinux,libpqopenEuler,pgauditAlmaLinux +54 more +56 morePostgreSQL pg_dump newline in object name executes arbitrary code in psql client and in restore target server8.8 HighpostgresqlAlmaLinux,libpqopenEuler,matrix-synapseopenSUSE +74 more +76 morePostgreSQL pg_dump lets superuser of origin server execute arbitrary code in psql client8.8 HighpostgresqlAlmaLinux,libpqopenEuler,pgauditAlmaLinux +52 more +54 morePostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table3.1 Low- advanced intrusion detection environment project intrusion detection environment, aide +1 moreAIDE null pointer dereference when reading incorrectly encoded xattr attributes from database (local DoS)6.2 Medium
- advanced intrusion detection environment project intrusion detection environment, aide +1 moreAIDE improper output neutralization vulnerability6.2 Medium
- eyoucmsEyouCMS 1.7.3 is vulnerale to Cross Site Scripting (XSS) in index.php, which can be exploited to...6.1 Medium
- No product listedAn issue was discovered in the demo/LINUXTCP implementation of cwalter-at freemodbus v.2018-09-12...7.5 High
- No product listedOURPHP thru 8.6.1 is vulnerable to Cross-Site Scripting (XSS) via the "Name" field of the ...6.1 Medium
- No product listedThe Lotus Cars Android app (com.lotus.carsdomestic.intl) 1.2.8 has allowBackup=true set in its...5.9 Medium
- No product listedThe Lotus Cars Android app (com.lotus.carsdomestic.intl) 1.2.8 contains an exported component,...6.5 Medium
futureRoot,python-futureopenSUSE +1 moreWithdrawn Advisory: Python-Future Module Arbitrary Code Execution via Unintended Import of test.py5.4 MediumlibcoapUbuntu,libcoap2Ubuntu,libcoap3Ubuntu +2 moreA use-after-free vulnerability exists in the coap_delete_pdu_lkd function within coap_pdu.c of...9.8 Critical- No product listedAn issue was discovered in phome Empirebak 2010 in ebak2008/upload/class/config.php allowing...6.5 Medium
- No product listedAn issue was discovered on KuWFi GC111 devices (Hardware Version: CPE-LM321_V3.2, Software...9.8 Critical
- No product listedKuWFi CPF908-CP5 WEB5.0_LCD_20210125 devices have multiple unauthenticated access control...9.1 Critical
- No product listedIn ESPEC North America Web Controller 3 before 3.3.8, /api/v4/auth/ users session privileges are...4.3 Medium
- No product listedIn ESPEC North America Web Controller 3 before 3.3.8, an attacker with physical access can gain...4.3 Medium
- No product listedIn ESPEC North America Web Controller 3 before 3.3.4, /api/v4/auth/ with any invalid...9.8 Critical
- No product listedThe KuWFi 4G LTE AC900 router 1.0.13 is vulnerable to Cross-Site Request Forgery (CSRF) on its...8.8 High
- No product listedThe KuWFi 4G AC900 LTE router 1.0.13 is vulnerable to command injection on the HTTP API endpoints...8.8 High
- No product listedAn issue was discovered in Malwarebytes 4.6.14.326 and before and 5.1.5.116 and before (and...5.2 Medium
- No product listedAn issue was discovered in Malwarebytes before 4.6.14.326 and before 5.1.5.116 (and Nebula 2020...7.5 High
- No product listedAn issue was discovered in Malwarebytes before 4.6.14.326 and before 5.1.5.116 (and Nebula 2020...6.5 Medium
- No product listedAn issue was discovered in Malwarebytes 4.6.14.326 and before 5.1.5.116 (and Nebula 2020-10-21...6.5 Medium
github.com/apple/swift-nio-http2SwiftURLswift-nio-http2 affected by HTTP/2 MadeYouReset vulnerability6.3 Medium- helmHelm May Panic Due To Incorrect YAML Content6.5 Medium
- helmHelm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion6.5 Medium
m00nl1ght-dev/steam-workshop-deployGitHub Actions,BoldestDungeon/steam-workshop-deployGitHub Actions +1 morem00nl1ght-dev/steam-workshop-deploy: Exposure of Version-Control Repository to an Unauthorized Control Sphere and Insufficiently Protected Credentials10.0 Critical- part-db project part-db, part-db part-db-server +1 morePart-DB Persistent Denial of Service via Uncaught Exception from Misleading File Extension in Avatar Upload5.7 Medium
- railsActive Record logging vulnerable to ANSI escape injection2.7 Low
- code-projects medical store management systemcode-projects Medical Store Management System MainPanel.java sql injection5.3 Medium
- code-projects medical store management systemcode-projects Medical Store Management System Update Medicines UpdateMedicines.java sql injection5.3 Medium
- synergetic data systems inc. unform server managerUnForm Server Manager < 10.1.12 Unauthenticated Arbitrary File Read9.2 Critical
- webidWeBid 1.0.2 converter.php Remote PHP Code Injection10.0 Critical
- statamic cmsUmbraco CMS < 4.7.1 codeEditorSave.asmx RCE9.3 Critical
- traq project issue tracking systemTraq 2.0–2.3 admincp/common.php RCE10.0 Critical
- sysax multi serverSysax Multi Server < 5.55 SSH Username Buffer Overflow9.3 Critical
- spreecommerce spree, spreecommerce +1 moreSpreecommerce < 0.60.2 Search Parameter RCE10.0 Critical
- Show moreLoading…