CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
rustTuxCare,cargoTuxCare,clippyTuxCare +11 more +13 moreUpdate of rustNo scorerustTuxCare,cargoTuxCare,clippyTuxCare +11 more +13 moreUpdate of rustNo score- astroUnauthorized third-party images in Astro’s _image endpoint6.9 Medium
github.com/hydraide/hydraideGoHydrAIDE Authentication Bypass Vulnerability10.0 Critical- n8nStored XSS in n8n Form Trigger allows Account Takeover via injected iframe and video/source8.7 High
- scada-ltsScada-LTS SVG File view_edit.shtm cross site scripting5.1 Medium
- scada-ltsScada-LTS publisher_edit.shtm cross site scripting5.1 Medium
- scada-ltsScada-LTS mailing_lists.shtm cross site scripting5.1 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Email Modification Vulnerability via Calendar Portlet5.3 Medium
- openprinting ippusbxd, ippusbxd firmware +1 moreA stack based buffer overflow vulnerability is present in OpenPrinting ippusbxd 1.34. A specially...6.4 Medium
- 51mis lingdang crmShanghai Lingdang Information Technology Lingdang CRM tabdetail_moduleSave.php sql injection5.3 Medium
- google angularjsAngularJS 'linky' filter ReDoS4.3 Medium
- lexmark cloud servicesMissing Authorization in Lexmark Cloud Services badge management8.5 High
- lexmark printer software g2, universal print driver +1 moreXML External Entity Injection vulnerability in various Lexmark Universal Drivers8.2 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal has Stored Cross-Site Scripting Vulnerability via Message Boards Feature4.6 Medium
- scada-ltsScada-LTS WatchListDwr.init.dwr information disclosure5.3 Medium
- scada-ltsScada-LTS new cross site scripting5.1 Medium
- scada-ltsScada-LTS scheduled_events.shtm cross site scripting5.1 Medium
- libretro retroarchlibretro RetroArch file_stream.c filestream_vscanf out-of-bounds4.8 Medium
- verkehrsauskunft smartride, verkehrsauskunft österreich busbahnbim, clevvver +1 more +3 moreVerkehrsauskunft Österreich SmartRide/cleVVVer/BusBahnBim/Salzburg Verkehr AndroidManifest.xml improper export of android application components4.8 Medium
- kleor contact managerContact Manager <= 8.6.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'title'4.4 Medium
- aftership package tracker, package tracker app +1 moreAfterShip Package Tracker App com.aftership.AfterShip AndroidManifest.xml improper export of android application components4.8 Medium
- posimyththemes nexter blocks – gutenberg blocks, page builder & ai website builderNexter Blocks <= 4.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets6.4 Medium
- sma ennexos.sunnyportal.comSMA: Sunny Portal limited disclosure of personal data of registered users to an authenticated user6.5 Medium
- wiesemann & theis motherbox 3Wiesemann & Theis: Motherbox 3 allows unauthenticated read-only DB access7.5 High
container-suseconnectSUSESecurity update for container-suseconnectNo score- webaware flexible mapFlexible Maps <= 1.18.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Flexible Maps Shortcode6.4 Medium
- miguel useche js archive listJS Archive List <= 6.1.5 - Unauthenticated SQL Injection via build_sql_where Function7.5 High
- amans2k funnelkit automations – email marketing automation and crm for wordpress & woocommerce, funnelkit – funnel builder for woocommerce checkout +1 moreMultiple Plugins By FunnelKit <= (Various Versions) - Authenticated (Contributor+) Sensitive Information Exposure to Privilege Escalation via Woofunnel Library8.8 High
- mecanik cloudflare image resizing – optimize & accelerate your imagesCloudflare Image Resizing <= 1.5.6 - Missing Authentication to Unauthenticated Remote Code Execution via rest_pre_dispatch Hook9.8 Critical
- imithemes real spaces - wordpress properties directory themeReal Spaces - WordPress Properties Directory Theme <= 3.6 - Unauthenticated Privilege Escalation to Administrator via 'imic_agent_register'9.8 Critical
- imithemes real spaces - wordpress properties directory themeReal Spaces - WordPress Properties Directory Theme <= 3.5 - Authenticated (Subscriber+) Privilege Escalation to Administrator via 'change_role_member'8.8 High
- red hat developer hub, developer hub 1.7 +1 moreRhdh: red hat developer hub user permissions6.1 Medium
- david lingren media library assistantMedia Library Assistant <= 3.27 - Authenticated (Author+) Limited File Deletion4.3 Medium
- wpclever wpc smart compare for woocommerceWPC Smart Compare for WooCommerce <= 6.4.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting6.4 Medium
- No product listedIn Plesk Obsidian 18.0.70, _isAdminPasswordValid uses an == comparison. Thus, if the correct...9.8 Critical
- No product listedAn issue in the default configuration of the password reset function in LogicData eCommerce...5.3 Medium
- No product listedAn authenticated arbitrary file upload vulnerability in the Content Explorer feature of LogicData...6.5 Medium
- No product listedAn issue was discovered in Cicool builder 3.4.4 allowing attackers to reset the administrator's...9.8 Critical
- No product listedEzGED3 3.5.0 stores user passwords using an insecure hashing scheme: md5(md5(password)). This...5.3 Medium
- ezged ezged3EzGED3 3.5.0 contains an unauthenticated arbitrary file read vulnerability due to improper access...5.3 Medium
- followmedarling cookies and content security policyIncorrect Access Control in the AJAX endpoint functionality in jonkastonka Cookies and Content...5.3 Medium
- getmoonshine moonshineMoonShine SQL Injection Vulnerability4.9 Medium
- talentneuron hrforecast suiteIn the smartLibrary component of the HRForecast Suite 0.4.3, a SQL injection vulnerability was...6.5 Medium
- moonshineMoonShine Arbitrary File Upload Vulnerability5.4 Medium
- moonshinemoonshine Stored Cross-Site Scripting Vulnerability in Create Admin4.9 Medium
- moonshinemoonshine Stored Cross-Site Scripting Vulnerability in Create Article4.5 Medium
- hustojCross site scripting (XSS) vulnerability in Hustoj 2025-01-31 via the TID parameter to thread.php.6.1 Medium
- ehcp easy hosting control panelEasy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection...6.5 Medium
- boom-core boomvA vulnerability exists in riscv-boom SonicBOOM 1.2 (BOOMv1.2) processor implementation, where...4.3 Medium
- Show moreLoading…