CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- mozilla firefox, thunderbird +1 moreDenial-of-service due to out-of-memory in the Graphics: WebRender component7.5 High
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 1428.1 High
- mozilla firefox, thunderbird +1 moreUninitialized memory in the JavaScript Engine component6.5 Medium
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the Graphics: Canvas2D component8.1 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to invalid pointer in the Audio/Video: GMP component9.8 Critical
- solidinvoiceSolidInvoice Recurring Invoice recurring cross site scripting5.1 Medium
- libtiffLibTIFF tiffcmp tiffcmp.c InitCCITTFax3 memory leak2.0 Low
- appneta tcpreplayappneta tcpreplay tcprewrite edit_packet.c untrunc_packet use after free4.8 Medium
- anipaleja nginx-defenderDefault Credentials in nginx-defender Configuration Files6.5 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Vulnerable to Cross-Site Scripting via DDM Structure Field Labels5.1 Medium
- angeljudesuarez sports management systemitsourcecode Sports Management System sports.php sql injection6.9 Medium
- itsourcecode online tour and travel management system, mayurik online tour \& travel management system +1 moreitsourcecode Online Tour and Travel Management System forget_password.php sql injection6.9 Medium
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure2.7 Low
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Enumeration Discrepancy in Calendars5.3 Medium
- dogukanurker flaskblogflaskBlog arbitrary comment delete6.9 Medium
- dogukanurker flaskblogflaskBlog allows arbitrary privilege escalation9.3 Critical
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting5.4 Medium
- itsourcecode online tour and travel management system, mayurik online tour \& travel management system +1 moreitsourcecode Online Tour and Travel Management System page-login.php sql injection6.9 Medium
- dogukanurker flaskblogflaskBlog Stored XSS Vulnerability5.3 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal CSRF Vulnerability via Endpoint Parameter6.9 Medium
- dogukanurker flaskblogflaskBlo Authorization Bypass6.9 Medium
- itsourcecode online tour and travel management system, mayurik online tour \& travel management system +1 moreitsourcecode Online Tour and Travel Management System travellers.php unrestricted upload5.3 Medium
- thinkinai deepchatDeepChat One-click Remote Code Execution through Custom URL Handling9.7 Critical
- mouy-leng genx fxGenX_FX authentication bypass in JWT validation9.8 Critical
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Vulnerable to Cross-Site Scripting via backURL Paramter5.1 Medium
- hcl software digital experienceHCL Digital Experience is susceptible to cross site scripting (XSS)4.9 Medium
- liuyuyang01 thrivex-blogLiuYuYang01 ThriveX-Blog web updateJsonValueByName improper authorization5.3 Medium
- fortra filecatalystUnrestricted File Upload in FileCatalyst8.2 High
- stuffanthings qbit manageqBit Manage Path Traversal Vulnerability6.5 Medium
- bencevans screenshot-desktopCommand Injection via `format` option in screenshot-desktop9.8 Critical
- surbowl dormitory-management-phpSurbowl dormitory-management-php violation_add.php sql injection6.9 Medium
- wavlink wl-nu516u1, wl-nu516u1 firmware +1 moreWavlink WL-NU516U1 wireless.cgi sub_4032E4 command injection5.3 Medium
amazon-efs-utilsTuxCareUpdate of amazon-efs-utilsNo score- mermaid-js mermaidMermaid improperly sanitizes of sequence diagram labels leading to XSS5.3 Medium
- linux, linux kernel +1 morefs/ntfs3: cancle set bad inode after removing name fails7.8 High
- debian linux, linux kernel, siemens simatic cn 4100 +5 more +7 moreeventpoll: Fix semi-unbounded recursion7.8 High
- linux, linux kernel +1 morestaging: gpib: fix unset padding field copy back to userspace5.5 Medium
- debian linux, linux kernel +1 morestaging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc()5.5 Medium
- debian linux, linux kernel +1 morepowercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw()5.5 Medium
- debian linux, linux kernel +1 morePM / devfreq: Check governor before using governor->name5.5 Medium
- debian linux, linux kernel +1 morebpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls8.6 High
- linux, linux kernel +1 morebpf: handle jset (if a & b ...) as a jump in CFG computation7.8 High
- linux, linux kernel +1 morewifi: ath12k: Avoid accessing uninitialized arvif->ar during beacon miss5.5 Medium
- linux, linux kernel +1 morewifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type()5.5 Medium
- debian linux, linux kernel +1 morewifi: rtl818x: Kill URBs before clearing tx status queue7.8 High
- debian linux, linux kernel +1 moreiwlwifi: Add missing check for alloc_ordered_workqueue5.5 Medium
- debian linux, linux kernel +1 morewifi: ath11k: clear initialized flag for deinit-ed srng lists8.8 High
- linux, linux kernel +1 morewifi: mt76: mt7925: fix off by one in mt7925_mcu_hw_scan()8.8 High
- linux, linux kernel +1 morewifi: mt76: mt7996: Fix possible OOB access in mt7996_tx()8.8 High
- linux, linux kernel +1 moredrm/amdgpu: fix use-after-free in amdgpu_userq_suspend+0x51a/0x5a07.8 High
- Show moreLoading…