CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- chshcms mccmsMCCMS 2.7.0 is vulnerable to Arbitrary file deletion in the Backups.php component. This allows an...5.4 Medium
cn.hippo4j:hippo4j-coreMavenhippo4j Includes Hard Coded Secret Key in JWT Creation8.8 High- ehcp easy hosting control panelSQL Injection in the listdomains function in Easy Hosting Control Panel (EHCP) 20.04.1.b allows...5.4 Medium
- No product listedAn XML external entities (XXE) injection vulnerability in the /init API endpoint in Exagid EX10 7...5.3 Medium
- No product listedAn authentication bypass vulnerability in PandoraNext-TokensTool v0.6.8 and before. An attacker...8.1 High
- No product listedAn issue was discovered in TitanHQ SpamTitan Email Security Gateway 8.00.x before 8.00.101 and 8...9.1 Critical
- xuxueli xxl-jobXuxueli xxl-job Jobs JobInfoController.java remove resource injection5.3 Medium
- xuxueli xxl-jobXuxueli xxl-job JobLogController.java getJobsByGroup resource injection5.3 Medium
- wong2 mcp-cliwong2 mcp-cli oAuth provider.js redirectToAuthorization os command injection6.3 Medium
- linksys re6250, re6300, re6350 +9 more +11 moreLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP_doSpecifySiteSurvey stack-based overflow8.7 High
- linksys re6250, re6300, re6350 +9 more +11 moreLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 DisablePasswordAlertRedirect stack-based overflow8.7 High
- linksys re6250, re6300, re6350 +9 more +11 moreLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 sta_wps_pin stack-based overflow8.7 High
- browserify sha.jsMissing type checks leading to hash rewind and passing on crafted data9.1 Critical
- browserify cipher-baseMissing type checks leading to hash rewind and passing on crafted data9.1 Critical
- linksys re6250, re6300, re6350 +9 more +11 moreLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setPWDbyBBS stack-based overflow8.7 High
- linksys re6250, re6300, re6350 +9 more +11 moreLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 DHCPReserveAddGroup stack-based overflow8.7 High
- linksys re6250, re6300, re6350 +9 more +11 moreLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP_pingGatewayByBBS stack-based overflow8.7 High
x402npm,x402-expressnpm,x402-hononpm +1 more +3 morex402 SDK vulnerable in outdated versions in resource servers for buildersNo score- linksys re6250, re6300, re6350 +9 more +11 moreLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setVlan stack-based overflow8.7 High
- apache tika, apache software foundation tika pdf parser module +1 moreApache Tika PDF parser module: XXE vulnerability in PDFParser's handling of XFA8.4 High
- linksys re6250, re6300, re6350 +9 more +11 moreLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 check_port_conflict stack-based overflow8.7 High
- linksys re6250, re6300, re6350 +9 more +11 moreLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 WPSSTAPINEnr stack-based overflow8.7 High
- linksys re6250, re6300, re6350 +9 more +11 moreLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 addStaticRoute os command injection5.3 Medium
- eladminelunez eladmin exportUser csv injection5.3 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Vulnerable to Cross-Site Scripting via DDMPortlet_definition Parameter4.8 Medium
- n8nn8n has a symlink traversal vulnerability in "Read/Write File" node allows access to restricted files6.5 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Vulnerable to Cross-Site Scripting in Dynamic Data Mapping5.1 Medium
- eladminelunez eladmin info information disclosure5.3 Medium
- eladminelunez eladmin DES Key EncryptUtils.java EncryptUtils inadequate encryption6.3 Medium
- swatadru exam-seating-arrangementSwatadru Exam-Seating-Arrangement Student Login student.php sql injection6.9 Medium
- directusDirectus allows unauthenticated file upload and file modification due to lacking input sanitization9.3 Critical
- codeastro ecommerce websiteCodeAstro Ecommerce Website Edit Your Account my_account.php cross site scripting5.1 Medium
- portabilis i-educarPortabilis i-Educar Tipos de usuàrio educar_tipo_usuario_lst.php sql injection5.3 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- scada-ltsScada-LTS compound_events.shtm cross site scripting5.1 Medium
- scada-ltsScada-LTS maintenance_events.shtm cross site scripting5.1 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- manageengine asset explorer, servicedesk plus, servicedesk plus msp +1 more +3 moreUser privilege escalation vulnerability8.1 High
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- strongdm sdm-cliConfigd Injection7.0 High
- strongdm sdmRoot Certificate Injection8.5 High
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- strongdm sdm-cliThe StrongDM Windows service incorrectly handled input validation. Authenticated attackers could...8.5 High
- strongdm sdm-cliAuthentication Hijack8.5 High
- foxit software pdf readerFoxit PDF Reader < 4.2.0.0928 Title Stack Buffer Overflow8.4 High
- aomei backupper workstationAOMEI Backupper Workstation Link Following Local Privilege Escalation Vulnerability7.3 High
- Show moreLoading…