CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- delta electronics diaenergieReflected Cross-site Scripting in DIAEnergie5.9 Medium
- delta electronics diaenergieReflected Cross-site Scripting in DIAEnergie5.9 Medium
- delta electronics diaenergieReflected Cross-site Scripting in DIAEnergie5.9 Medium
- delta electronics diaenergieStored Cross-site Scripting in DIAEnergie7.0 High
- portabilis i-diarioPortabilis i-Diario Password Recovery Endpoint email observable response discrepancy6.3 Medium
- portabilis i-diarioPortabilis i-Diario Login Page ui layer5.3 Medium
- portabilis i-diarioPortabilis i-Diario search_autocomplete cross site scripting5.3 Medium
- portabilis i-diarioPortabilis i-Diario Informações Adicionais /planos-de-ensino-por-disciplina cross site scripting5.1 Medium
- portabilis i-diarioPortabilis i-Diario Informações Adicionais /planos-de-ensino-por-areas-de-conhecimento cross site scripting5.1 Medium
- portabilis i-diarioPortabilis i-Diario Informações Adicionais /planos-de-aulas-por-disciplina cross site scripting5.1 Medium
- No product listedZenCart CKEditor cross site scripting4.8 Medium
- 1&1 mail & media mail.com app, mail mail.com +1 more1&1 Mail & Media mail.com App com.mail.mobile.android.mail AndroidManifest.xml improper export of android application components4.8 Medium
- zhenfeng13 my-blogzhenfeng13 My-Blog Tag save cross site scripting5.1 Medium
- zhenfeng13 my-blogzhenfeng13 My-Blog Frontend Blog Article Comment comment authentication replay6.9 Medium
- acrel environmental monitoring cloud platformAcrel Environmental Monitoring Cloud Platform UploadNewsImg unrestricted upload5.3 Medium
- unisoc (shanghai) technologies co., ltd. sl8521e/sl8521et/ sl8541e/uis8141e/uws6137/uws6137e/uws6151(e)/uws6152In vowifi service, there is a possible command injection due to improper input validation. This...9.8 Critical
- unisoc (shanghai) technologies co., ltd. sl8521e/sl8521et/ sl8541e/uis8141e/uws6137/uws6137e/uws6151(e)/uws6152In Developer Tools, there is a possible missing verification incorrect input. This could lead to...6.8 Medium
- unisoc (shanghai) technologies co., ltd. sl8521e/sl8521et/ sl8541e/uis8141e/uws6137/uws6137e/uws6151(e)/uws6152In engineer mode service, there is a possible command injection due to improper input validation....8.4 High
- elseplus file recovery appElseplus File Recovery App AndroidManifest.xml improper export of android application components4.8 Medium
- euro information cic banque et compte en ligne appEuro Information CIC banque et compte en ligne App com.cic_prod.bad AndroidManifest.xml improper export of android application components4.8 Medium
- totolink a3002r firmwareTOTOLINK-A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability...9.8 Critical
- totolink a3002r firmwareTOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain an command injection...6.5 Medium
- totolink a3002r firmwareTOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain multiple OS command injection...6.5 Medium
- totolink a3002r firmwareTOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow in the fw_ip...7.5 High
- totolink a3002r firmwareTOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow in the hostname...7.5 High
- totolink a3002r firmwareTOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow in the url...7.5 High
- totolink a3002r firmwareTOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain an eval injection vulnerability...6.5 Medium
- totolink a3002r firmwareTOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain insecure credentials for the...5.3 Medium
- No product listedThermo Fisher Scientific ePort through 3.0.0 has Incorrect Access Control.8.5 High
cflowopenSUSEcflow-1.8-2.1 on GA mediaNo score- expressgateway express-gatewayExpressGateway express-gateway REST Endpoint apps.js cross site scripting5.1 Medium
- kubernetes image builderVM images built with Kubernetes Image Builder Nutanix or OVA providers use default credentials for Windows images if user did not override7.5 High
- expressgateway express-gatewayExpressGateway express-gateway REST Endpoint users.js cross site scripting5.1 Medium
- thingsboardThingsBoard Add Gateway special elements used in a template engine5.3 Medium
- buzzfeedBuzzFeed App com.buzzfeed.android AndroidManifest.xml improper export of android application components4.8 Medium
- tenda ac20, ac20 firmware +1 moreTenda AC20 shadow hard-coded credentials2.0 Low
- tenda ac20, ac20 firmware +1 moreTenda AC20 Telnet Service telnet websFormDefine command injection5.3 Medium
json2avroOSS-FuzzSecurity exception in com.fasterxml.jackson.databind.deser.std.UntypedObjectDeserializer$Vanilla.deserNo score- tenda ac20, ac20 firmware +1 moreTenda AC20 SetIpMacBind sub_48E628 stack-based overflow8.7 High
- tenda ac20, ac20 firmware +1 moreTenda AC20 formSetVirtualSer save_virtualser_data stack-based overflow8.7 High
- tenda ac20, ac20 firmware +1 moreTenda AC20 SetNetControlList Endpoint set_qosMib_list stack-based overflow8.7 High
- linux, linux kernel +1 moreksmbd: fix wrong next length validation of ea buffer in smb2_set_ea()8.1 High
- linux, linux kernel +1 moreksmbd: validate command request size9.1 Critical
- debian linux, linux kernel, siemens simatic cn 4100 +2 moremptcp: plug races between subflow fail and subflow creation9.4 Critical
- linux, linux kernel +1 morevirtio-net: fix recursived rtnl_lock() during probe()5.5 Medium
- debian linux, linux kernel +1 moreipv6: mcast: Delay put pmc->idev in mld_del_delrec()7.8 High
- linux, linux kernel +1 moreefivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths5.5 Medium
- debian linux, linux kernel +1 morehwmon: (corsair-cpro) Validate the size of the received input buffer7.8 High
- linux, linux kernel +1 moreiio: adc: axp20x_adc: Add missing sentinel to AXP717 ADC channel maps7.3 High
- debian linux, linux kernel +1 moreatm: clip: Fix memory leak of struct clip_vcc.5.5 Medium
- Show moreLoading…