CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- cisco duo authentication proxyCisco Duo Authentication Proxy Information Disclosure Vulnerability4.9 Medium
- cisco evolved programmable network manager (epnm), prime infrastructure, evolved programmable network manager +2 moreCisco Evolved Programmable Network Manager and Prime Infrastructure Arbitrary File Download Vulnerability6.5 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Arbitrary File Upload Vulnerability4.9 Medium
- aomei cyber backupAOMEI Cyber Backup Missing Authentication for Critical Function Remote Code Execution Vulnerability9.8 Critical
- aomei cyber backupAOMEI Cyber Backup Missing Authentication for Critical Function Remote Code Execution Vulnerability9.8 Critical
- cryostat, red hat cryostat 4, cryostat 4 on rhel 9 +2 moreCryostat: authentication bypass if network policies are disabled5.9 Medium
- xion audio playerXion Audio Player ≤ 1.0.126 Unicode Stack Buffer Overflow8.4 High
- subtitle processor processorSubtitle Processor 7.7.1 .m3u SEH Unicode Buffer Overflow8.5 High
- spreecommerce spree, spreecommerce +1 moreSpreecommerce < 0.50.x API RCE9.3 Critical
- splayer project splayerSPlayer 3.7 Content-Type Header Buffer Overflow8.6 High
- flexbyte software solar ftp serverSolar FTP Server <= 2.1.1 Malformed USER Denial of Service8.7 High
- sockso project music host serverSockso Music Host Server <= 1.5 Path Traversal8.7 High
- realnetworks realarcade activexRealNetworks Arcade Games StubbyUtil.ProcessMgr ActiveX Arbitrary Code Execution8.7 High
- proftpd, proftpd project (professional ftp daemon) +1 moreProFTPD 1.3.3c Backdoor Command Execution9.3 Critical
- odin software secure ftpOdin Secure FTP <= 4.1 Stack Buffer Overflow via LIST Response8.7 High
- mjm software quickplayerMJM QuickPlayer <= 2010 .s3m Stack-Based Buffer Overflow8.4 High
- mjm software core playerMJM Core Player 2011 .s3m File Stack-Based Buffer Overflow8.4 High
- magix software gmbh musik makerMagix Musik Maker <= v16 .mmm Stack-Based Buffer Overflow8.4 High
- leapware leapftpLeapFTP < 3.1.x Stack Buffer Overflow9.3 Critical
- devolutions serverKaillera 0.86 Server DoS via Malformed UDP Packet8.7 High
- ixsystems freenasFreeNAS < 0.7.2 rev 5543 exec_raw.php Arbitrary Command Execution9.3 Critical
- foxit software pdf readerFoxit PDF Reader < 4.3.1.0218 JavaScript File Write8.4 High
- cursorarts filewranglerFileWrangler <= 5.30 Stack Buffer Overflow8.5 High
- scada-ltsScada-LTS view_edit.shtm cross site scripting5.1 Medium
- contentkeeper technologies web applianceContentKeeper Web Appliance < 125.10 Arbitrary File Access via mimencode8.7 High
- hackucf onboardliteOnboardLite Open Redirect Endpoint5.1 Medium
- aol inc. desktopAOL Desktop 9.6 RTX Stack-Based Buffer Overflow8.4 High
- elated-themes frappeFrappe has the possibility of SQL Injection due to improper validations8.7 High
- elated-themes frappeFrappe has the possibility of Authenticated SQL Injection due to improper validations6.3 Medium
- ibm edge application managerIBM Edge Application Manager server-side request forgery5.4 Medium
- ibm edge application managerIBM Edge Application Manager incorrect permissions6.1 Medium
- ibm qradar soar plugin app, soar qradar plugin app +1 moreIBM QRadar SOAR Plugin App path traversal6.5 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Vulnerable to Cross-Site Request Forgery7.1 High
- schneider eelctric ecostruxure building operation enterprise server, ecostruxure building operation workstation, ecostruxuretm building operation enterprise server +3 more +5 moreCWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that...1.0 Low
- schneider eelctric ecostruxure building operation workstation, ecostruxuretm building operation enterprise server, ecostruxuretm workstation +3 more +5 moreCWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of...4.1 Medium
- schneider electric ecostruxure™ power monitoring expert (pme), ecostruxure™ power operation (epo) advanced reporting and dashboards module +1 moreCWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...4.9 Medium
- schneider electric ecostruxure™ power monitoring expert (pme), ecostruxure™ power operation (epo) advanced reporting and dashboards module +1 moreCWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...7.2 High
- schneider electric ecostruxure™ power monitoring expert (pme), ecostruxure™ power operation (epo) advanced reporting and dashboards module +1 moreCWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized...7.5 High
- schneider electric ecostruxure™ power monitoring expert (pme), ecostruxure™ power operation (epo) advanced reporting and dashboards module +1 moreCWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized...7.5 High
- schneider electric ecostruxure™ power monitoring expert (pme), ecostruxure™ power operation (epo) advanced reporting and dashboards module +1 moreCWE-502: Deserialization of Untrusted Data vulnerability exists that could cause remote code...8.7 High
- docker desktopDocker Desktop allows unauthenticated access to Docker Engine API from containers9.3 Critical
- tenda ac6 v5.0, ac6 firmware +1 moreA firmware update vulnerability exists in the Firmware Signature Validation functionality of...7.2 High
- tenda ac6 v5.0, ac6 firmware +1 moreAn information disclosure vulnerability exists in the /goform/getproductInfo functionality of...7.5 High
- tenda ac6 v5.0, ac6 firmware +1 moreAn unsafe default authentication vulnerability exists in the Initial Setup Authentication...8.1 High
- tenda ac6 v5.0, ac6 firmware +1 moreAn authentication bypass vulnerability exists in the HTTP authentication functionality of Tenda...9.8 Critical
- tenda ac6 v5.0, ac6 firmware +1 moreA denial of service vulnerability exists in the HTTP Header Parsing functionality of Tenda AC6 V5...8.6 High
- tenda ac6 v5.0, ac6 firmware +1 moreA stack-based buffer overflow vulnerability exists in the Cloud API functionality of Tenda AC6 V5...8.1 High
- opensolution quick.cms.extReflected Cross-Site Scripting in QuickCMS.EXT4.6 Medium
- opensolution quick.cmsCross-Site Request Forgery in QuickCMS5.1 Medium
- schneider electric saitel dp rtu, saitel dr rtu +1 moreCWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation...8.4 High
- Show moreLoading…