CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- adform server-side backend for site trackingAdform Site Tracking 1.1 allows attackers to inject HTML or execute arbitrary code via cookie...7.2 High
- jc21 nginx proxy managerA CORS misconfiguration in Nginx Proxy Manager v2.12.3 allows unauthorized domains to access...5.3 Medium
- No product listedSaurus CMS Community Edition 4.7.1 contains a vulnerability in the custom DB::prepare() function,...10.0 Critical
- No product listedA deserialization vulnerability exists in Volcengine's verl 3.0.0, specifically in the scripts...6.5 Medium
- No product listedA security issue has been identified in Appian Enterprise Business Process Management version 25...5.3 Medium
- No product listedA Path Traversal vulnerability in AllSky v2023.05.01_04 allows an unauthenticated attacker to...9.8 Critical
- santesoft sante pacs serverSantesoft Sante PACS Server Cross-site Scripting5.1 Medium
- santesoft sante pacs serverSantesoft Sante PACS Server Cross-site Scripting4.8 Medium
- santesoft sante pacs serverSantesoft Sante PACS Server Cleartext Transmission of Sensitive Information9.1 Critical
- santesoft sante pacs serverSantesoft Sante PACS Server Double Free8.7 High
- ashlar argon, cobalt, cobalt share +2 more +4 moreAshlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share Heap-based Buffer Overflow8.4 High
- ashlar argon, cobalt, cobalt share +2 more +4 moreAshlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share Heap-based Buffer Overflow8.4 High
- ashlar argon, cobalt, cobalt share +2 more +4 moreAshlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share Out-of-bounds Read8.4 High
- ashlar argon, cobalt, cobalt share +2 more +4 moreAshlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share Out-of-bounds Write8.4 High
- netis wf2419Netis WF2419 Wireless Settings index.htm cross site scripting4.8 Medium
- apache commons ognlApache Commons OGNL: Expression Injection leading to RCE8.8 High
- lenovo pc manager, pcmanager +1 moreAn improper permission vulnerability was reported in Lenovo PC Manager that could allow a local...8.5 High
- lenovo 510 fhd webcam, performance fhd webcam +1 moreA potential vulnerability was reported in the Lenovo 510 FHD and Performance FHD web cameras that...7.0 High
- openfga, openfga helm charts +1 moreOpenFGA Authorization Bypass (Check)5.8 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Vulnerable to Cross-Site Scripting6.9 Medium
- rockwell automation plc - micro850 l50eRockwell Automation Micro800 Vulnerability9.3 Critical
- 7ritn vaultlsVaulTLS has a password-based login exploit in additional user accounts9.4 Critical
- librenmsLibreNMS allows stored XSS in Alert Template name field5.5 Medium
- meshtastic firmwareMeshtastic allows crafting of specific NodeInfo packets that overwrite any publicKey saved in the NodeDB9.4 Critical
- shaarliShaarli allows reflected XSS via searchtags parameter7.1 High
- kreaweb genealogyGenealogy has a Reflected XSS Vulnerability5.5 Medium
- kreaweb genealogyGenealogy has a stored XSS vulnerability8.0 High
- liferay dxp, portal +1 moreLiferay Portal Login Bypass Vulnerability2.0 Low
- aiven aiven-db-migrateaiven-db-migrate allows Privilege Escalation through use of psql during migration9.1 Critical
- aiven aiven-db-migrateaiven-db-migrate allows Privilege Escalation via unrestricted search_path during migration9.1 Critical
- adobe coldfusionColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)2.7 Low
- copier-org copierCopier safe template has filesystem write access outside destination path6.9 Medium
- projectcapsule capsuleCapsule tenant owners with "patch namespace" permission can hijack system namespaces label9.1 Critical
- copier-org copierCopier safe template has arbitrary filesystem read/write access8.5 High
- namelessmc namelessNamelessMC allows Stored Cross-Site Scripting (XSS) in dashboard text editor9.1 Critical
- namelessmc namelessNamelessMC allows Stored Cross Site Scripting (XSS) in SEO component7.2 High
- namelessmc namelessNamelessMC allows sensitive information disclosure in member list component5.3 Medium
- ibm concert, concert software +1 moreIBM Concert Software information disclosure6.2 Medium
- ibm concert, concert software +1 moreIBM Concert Software denial of service7.5 High
- ibm concert, concert software +1 moreIBM Concert Software cross-origin resource sharing5.4 Medium
- ibm concert, concert software +1 moreIBM Concert Software information disclosure5.9 Medium
- ibm concert, concert software +1 moreIBM Concert Software information disclosure3.7 Low
- ibm storage virtualizeIBM Storage Virtualize privilege escalation8.8 High
- lunary-ai lunary-ai/lunaryIDOR Vulnerability in Template Creation via `projectId` Manipulation in lunary-ai/lunary7.7 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Vulnerable to Insecure Direct Object Reference4.8 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Vulnerable to Cross-Site Scripting2.3 Low
- vmware spring frameworkCVE-2025-41242: Path traversal vulnerability on non-compliant Servlet containers5.9 Medium
- qnap file station, qnap systems inc. file station 5 +1 moreFile Station 57.1 High
- schneider electric sesuCWE-59: Improper Link Resolution Before File Access ('Link Following') vulnerability exists that...7.0 High
- schneider electric bmxngd0100: m580 global data module, bmxnoc0401: modicon m340 x80 ethernet communication modules, bmxnoe0100: modbus/tcp ethernet modicon m340 module +3 more +5 moreCWE-20: Improper Input Validation vulnerability exists that could cause a Denial Of Service when...8.7 High
- Show moreLoading…