CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- autodesk autocad, advance steel, autocad architecture +7 more +9 moreDGN File Parsing Out-of-Bounds Read Vulnerability7.8 High
- apache ofbizApache OFBiz: RCE Vulnerability in scrum plugin9.8 Critical
- projectworlds travel management systemprojectworlds Travel Management System updatesubcategory.php sql injection6.9 Medium
- projectworlds travel management systemprojectworlds Travel Management System updatepackage.php sql injection6.9 Medium
- risk yazılım teknolojileri ltd. şti. reel sektör hazine ve risk yönetimi yazılımıSQLi in RiskTurk's Treasury Management Software7.2 High
- projectworlds travel management systemprojectworlds Travel Management System updatecategory.php sql injection6.9 Medium
- joomsky.com js jobs component for joomlaExtension - joomsky.com - SQL injection in JS jobs component version 1.3.2 - 1.4.4 for Joomla8.7 High
- dj-extensions.com dj-classifieds component for joomlaExtension - dj-extensions.com - SQLi vulnerability in DJ-Classifieds component 3.9.2-3.10.1 for Joomla8.5 High
- phoca.cz - phoca commander for joomlaExtension - phoca.cz - Authenticated RCE vulnerability in Phoca Commander component 1.0.0-4.0.0 and 5.0.0-5.0.1 for Joomla9.2 Critical
- projectworlds travel management systemprojectworlds Travel Management System addcategory.php sql injection6.9 Medium
- projectworlds visitor management systemprojectworlds Visitor Management System visitor_out.php sql injection6.9 Medium
- tenda ac20, ac20 firmware +1 moreTenda AC20 setMacFilterCfg sub_46A2AC stack-based overflow8.7 High
- zte f50Unauthorized Access Vulnerability in ZTE F505.7 Medium
- anisha online medicine guidecode-projects Online Medicine Guide adphar.php sql injection6.9 Medium
- anisha online medicine guidecode-projects Online Medicine Guide addelivery.php sql injection6.9 Medium
- d-link dir-860l, dlink dir-860l firmware +1 moreD-Link DIR-860L Simple Service Discovery Protocol cgibin ssdpcgi_main os command injection6.9 Medium
- code-projects simple cafe ordering systemcode-projects Simple Cafe Ordering System portal.php sql injection5.3 Medium
- phpgurukul beauty parlour management systemPHPGurukul Beauty Parlour Management System book-appointment.php sql injection6.9 Medium
- tenda ac18, ac7, ac18 firmware +1 more +3 moreTenda AC7/AC18 SetLEDCfg formSetSchedLed buffer overflow8.7 High
- techlabpro1 radius blocks – wordpress gutenberg blocksRadius Blocks <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via subHeadingTagName Parameter6.4 Medium
- inpersttion for themeInpersttion For Theme <= 1.0 - Authenticated (Contributor+) Arbitrary Function Call6.3 Medium
- evigeo gestion de tarifsGestion de tarifs <= 1.4 - Authenticated (Contributor+) SQL Injection6.5 Medium
- morehawes plugin readme parserPlugin README Parser <= 1.3.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via target Parameter6.4 Medium
- elinkcontent elink – embed contentelink – Embed Content <= 1.1.0 - Authenticated (Contributor+) Insufficient Input Validation6.4 Medium
- ashanjay eventon – events calendarEventON Lite <= 2.4.7 - Authenticated (Contributor+) Information Disclosure4.3 Medium
- alobaidi captchaAlobaidi Captcha <= 1.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings4.4 Medium
- artkrylov icons factoryIcons Factory <= 1.6.12 - Missing Authorization to Unauthenticated Arbitrary File Deletion via delete_files() Function9.8 Critical
- jason-lau add user metaAdd User Meta <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting6.1 Medium
- 48hmorris assistant for nextgen galleryAssistant for NextGEN Gallery <= 1.0.9 - Unauthenticated Arbitrary Directory Deletion7.5 High
- setriosoft bizcalendar webBizCalendar Web <= 1.1.0.53 - Authenticated (Contributor+) Local File Inclusion7.5 High
- oretnom23 online bank management systemSourceCodester Online Bank Management System statements.php sql injection6.9 Medium
- oretnom23 online bank management systemSourceCodester Online Bank Management System transfer.php sql injection6.9 Medium
- px4 px4-autopilotPX4 PX4-Autopilot Mavlink Shell Closing mavlink_receiver.cpp handle_message_serial_control use after free2.0 Low
- wptb wp table builder – drag & drop table builderWP Table Builder – WordPress Table Plugin <= 2.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- appneta tcpreplaytcpreplay tcpprep cidr.c mask_cidr6 heap-based overflow2.3 Low
- phpgurukul zoo management systemPHPGurukul Zoo Management System add-foreigner-ticket.php cross site scripting5.3 Medium
- bitpressadmin bit form – custom contact form, multi step, conversational form & payment form builderContact Form by Bit Form - Bit Form <= 2.20.3 - Unauthenticated Arbitrary File Upload9.8 Critical
- wpdevteam essential addons for elementor – popular elementor templates & widgetsEssential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.2.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'data-gallery-items'6.4 Medium
- quttera threatsign – web malware scanner for wordpressQuttera Web Malware Scanner <= 3.5.1.41 - Authenticated (Administrator+) Server-Side Request Forgery3.8 Low
- mechrevo control center gx v2Mechrevo Control Center GX V2 Powershell Script Command uncontrolled search path7.3 High
- phpgurukul online shopping portal projectPHPGurukul Online Shopping Portal Project password-recovery.php sql injection6.9 Medium
- phpgurukul online shopping portal projectPHPGurukul Online Shopping Portal Project bill-ship-addresses.php sql injection6.9 Medium
- phpgurukul online shopping portal projectPHPGurukul Online Shopping Portal Project signup.php sql injection6.9 Medium
- itsourcecode online tour and travel management system, mayurik online tour \& travel management system +1 moreitsourcecode Online Tour and Travel Management System booking_report.php sql injection6.9 Medium
- itsourcecode online tour and travel management system, mayurik online tour \& travel management system +1 moreitsourcecode Online Tour and Travel Management System email_setup.php sql injection6.9 Medium
- hcl software connectionsHCL Connections is vulnerable to broken access control3.7 Low
- itsourcecode online tour and travel management system, mayurik online tour \& travel management system +1 moreitsourcecode Online Tour and Travel Management System sms_setting.php sql injection6.9 Medium
- tenda ch22, ch22 firmware +1 moreTenda CH22 editFileName formeditFileName buffer overflow8.7 High
- tenda ch22, ch22 firmware +1 moreTenda CH22 delFileName formdelFileName buffer overflow8.7 High
- mtons mblogmtons mblog register information exposure6.3 Medium
- Show moreLoading…