CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- themeisle redirection for contact form 7Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated Arbitrary File Deletion8.8 High
- themeisle redirection for contact form 7Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection8.8 High
- nutanix prism centralStored Cross-site Scripting (XSS) in Nutanix Prism Central9.3 Critical
- google chromeOut of bounds write in V8 in Google Chrome prior to 139.0.7258.138 allowed a remote attacker to...8.8 High
curlOSS-FuzzHeap-use-after-free in ftp_pp_statemachineNo score- totvs portal meu rhTOTVS Portal Meu RH Password Reset redirect5.1 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreQemu-kvm: uefi-vars: information disclosure vulnerability in uefi_vars_write callback3.3 Low
- commvault commcell, commvault +1 moreUnauthorized API Access Risk6.9 Medium
- tenda ac6 firmwareTenda AC6 V15.03.06.23_multi has a stack overflow vulnerability via the deviceName parameter in...7.3 High
- tenda ac6 firmwareTenda AC6 V15.03.06.23_multi was discovered to contain a buffer overflow via the ntpServer...6.5 Medium
- tenda ac6 firmwareTenda AC6 V15.03.06.23_multi was discovered to contain a buffer overflow via the time parameter...7.5 High
- tenda ac6 firmwareTenda AC6 V15.03.06.23_multi is vulnerable to Buffer Overflow in the function formSetMacFilterCfg...7.5 High
- tenda ac6 firmwareTenda AC6 V15.03.06.23_multi is vulnerable to Buffer Overflow in the formSetCfm function.7.5 High
- vishalmathur online artwork and fine arts projectA SQL injection vulnerability exists in the id2 parameter of the cancel_booking.php page in Online Artwork and Fine Arts MCA Project 1.0. A remote attacker can inject arbitrary SQL queries, leading to…9.8 Critical
- microsoft knackWithdrawn Advisory: Microsoft Knack ReDoS Vulnerability in the Introspection Module6.9 Medium
- microsoft knackWithdrawn Advisory: Microsoft Knack ReDoS Vulnerability in the Introspection Module6.9 Medium
- xwikiXWiki through version 17.3.0 is vulnerable to Server-Side Template Injection (SSTI) in the...8.8 High
- xwikiXWiki through version 17.3.0 is affected by multiple stored Cross-Site Scripting (XSS)...4.8 Medium
- winterchens my-siteThere is an authentication bypass vulnerability in WinterChenS my-site thru commit 6c79286 (2025...9.8 Critical
- old-peanut open-shopCross Site Request Forgery (CSRF) vulnerability in old-peanut Open-Shop (aka old-peanut...8.8 High
- jeewmsJeeWMS 771e4f5d0c01ffdeae1671be4cf102b73a3fe644 (2025-05-19) contains incorrect authentication...9.8 Critical
@elysiajs/corsnpmelysia-cors Origin Validation Error6.5 Medium- No product listedA vulnerability in the password reset workflow of the Touch Lebanon Mobile App 2.20.2 allows an...8.8 High
- liaoxuefeng itranswarpIncorrect access control in the doFilter function of itranswarp up to 2.19 allows attackers to...8.6 High
- No product listedAuthentication Bypass vulnerability in jobx up to v1.0.1-RELEASE allows an attacker can exploit...8.8 High
- No product listedIncorrect access control in Jantent v1.1 allows attackers to bypass authentication and access...9.8 Critical
- No product listedIncorrect access control in radar v1.0.8 allows attackers to bypass authentication and access...9.8 Critical
- No product listedIncorrect access control in dts-shop v0.0.1-SNAPSHOT allows attackers to bypass authentication...9.8 Critical
- winterchens my-siteIncorrect access control in the preHandle function of my-site v1.0.2 allows attackers to access...7.5 High
- winterchens my-siteIncorrect access control in the preHandle function of my-site v1.0.2.RELEASE allows attackers to...7.5 High
- No product listedjeewx-boot 1.3 has an authentication bypass vulnerability in the preHandle function9.8 Critical
- neurobin shcneurobin shc Environment Variable shc.c make os command injection4.8 Medium
- neurobin shcneurobin shc shc.c make stack-based overflow4.8 Medium
- neurobin shcneurobin shc Filename shc.c make os command injection4.8 Medium
- solidinvoiceSolidInvoice Clients clients cross site scripting5.1 Medium
- solidinvoiceSolidInvoice Tax Rates rates cross site scripting5.1 Medium
- solidinvoiceSolidInvoice Quote quotes cross site scripting5.1 Medium
- solidinvoiceSolidInvoice Invoice Creation invoice cross site scripting5.1 Medium
- mozilla focus for ios, firefox focus +1 moreDrag and drop gestures in Focus for iOS could allow JavaScript links to be executed incorrectly6.1 Medium
- mozilla focus for ios, firefox focus +1 moreFocus incorrectly ignores Content-Disposition headers for some MIME types6.1 Medium
- mozilla firefox, firefox for ios +1 moreMalicious scripts could spam popups for denial of service attacks7.5 High
- mozilla firefox, firefox for ios, focus for ios +1 more +3 morePasskey phishing within Bluetooth range9.8 Critical
- mozilla firefox, firefox for ios +1 moreJavaScript alerts could impede UI interaction or allow denial of service attacks6.5 Medium
- mozilla firefox, firefox for ios +1 moreContent-Disposition headers incorrectly ignored for some MIME types6.1 Medium
- mozilla firefoxAddress bar spoofing using an blob URI on Firefox for Android4.3 Medium
- johnbillion wp crontrolWP Crontrol - 1.17.0 - 1.19.1 - Authenticated (Administrator+) Blind Server-Side Request Forgery5.9 Medium
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 1428.1 High
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox 142 and Thunderbird 1429.8 Critical
- mozilla firefoxSpoofing issue in the Address Bar component6.5 Medium
- mozilla firefoxSpoofing issue in the Address Bar component of Firefox Focus for Android6.5 Medium
- Show moreLoading…