CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreWindows Certificate Spoofing Vulnerability5.3 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows MBT Transport Driver Elevation of Privilege Vulnerability7.8 High
- microsoft pc managerMicrosoft PC Manager Elevation of Privilege Vulnerability9.1 Critical
- microsoft purview data governanceAzure Databricks Elevation of Privilege Vulnerability9.8 Critical
- infinitt healthcare pacs system managerINFINITT Healthcare INFINITT PACS Unrestricted Upload of File with Dangerous Type5.3 Medium
- infinitt healthcare pacs system managerINFINITT Healthcare INFINITT PACS Unrestricted Upload of File with Dangerous Type5.3 Medium
- mitsubishi electric europe smartrtuMitsubishi Electric Europe smartRTU OS Command Injection9.3 Critical
- infinitt healthcare pacs system managerINFINITT Healthcare INFINITT PACS Exposure of Sensitive System Information to an Unauthorized Control Sphere8.7 High
- esri portal for arcgis enterprise sites, portal for arcgis +1 moreBUG-000177335 ArcGIS Enterprise Sites has a stored Cross-site Scripting vulnerability.4.8 Medium
- esri portal for arcgis enterprise sites, portal for arcgis +1 moreBUG-000173171 ArcGIS Enterprise Sites has a Cross-site Scripting vulnerability.4.8 Medium
- esri portal for arcgis, portal for arcgis enterprise experience sites +1 moreBUG-000177336 - ArcGIS Enterprise Sites has a stored Cross-site Scripting vulnerability.4.8 Medium
- esri portal for arcgis enterprise sites, portal for arcgis +1 moreBUG-000173918 - ArcGIS Enterprise Sites has a security vulnerability.4.8 Medium
- esri portal for arcgis enterprise sites, portal for arcgis +1 moreBUG-000177333 - ArcGIS Enterprise Sites has a stored Cross-site Scripting vulnerability.4.8 Medium
- dell idrac service module (ism), emc idrac service module +1 moreDell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains a Buffer Access with...7.8 High
- dell idrac service module (ism), emc idrac service module +1 moreDell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains an Incorrect Permission...5.3 Medium
- pyloadDenial-of-Service attack in pyLoad CNL Blueprint using dukpy.evaljs7.7 High
- n-able n-centralN-central Syslog Configuration Insecure Direct Object Reference8.3 High
- alanaktion phprojectStored XSS in “hours” fields when creating or editing an issue, using SQLite database6.9 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Username Enumeration Vulnerability6.9 Medium
- labredescefetrj wegiaWeGIA Cross-Site Scripting (XSS) Reflected endpoint 'pre_cadastro_adotante.php' parameter 'msg_e'6.5 Medium
- labredescefetrj wegiaWeGIA Cross-Site Scripting (XSS) Reflected endpoint 'cargos.php' parameter 'msg_e'6.5 Medium
- admerc apartment management systemitsourcecode Apartment Management System addfair.php sql injection6.9 Medium
- mattermost, mattermost server +1 moreNil pointer dereference in bulk import crashes server4.9 Medium
- mattermost, mattermost server +1 morePath traversal in image upload with preview overwrite4.3 Medium
- labredescefetrj wegiaCross-Site Scripting (XSS) Reflected in 'insere_despacho.php' parameter 'sccs'6.4 Medium
- labredescefetrj wegiaWeGIA Stored Cross-Site Scripting (XSS) vulnerability in the endpoint 'dependente_docdependente.php' with parameter 'nome'6.4 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Stored Cross-Site Scripting Vulnerability via GroupPagesPortlet_type Parameter5.1 Medium
- labredescefetrj wegiaWeGIA SQL Injection vulnerability via 'id_funcionario' param at endpoint `/html/funcionario/dependente_remover.php`9.4 Critical
- markdown-itMarkdown-it 14.1.0 - Cross-site scripting (XSS)6.9 Medium
- carrental project carrentalyeqifu carRental Druid login.html hard-coded credentials6.9 Medium
- tenda ac10, ac10 firmware +1 moreTenda AC10 MD5 Hash shadow hard-coded credentials2.0 Low
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Reflected Cross-Site Scripting Vulnerability via snippet Parameter6.9 Medium
- kristoferfannar eslint-ban-momenteslint-ban-moment exposed a sensitive Supabase URI in .env (Credential leak)9.8 Critical
- yarnpkg yarnyarnpkg Yarn request-manager.js setOptions redos4.8 Medium
- phpgurukul online course registrationPHPGurukul Online Course Registration session.php sql injection6.9 Medium
linux-firmwareTuxCare,iwl1000-firmwareTuxCare,iwl100-firmwareTuxCare +14 more +16 moreUpdate of linux-firmwareNo score- keycloak, red hat build of keycloak 26.0, build of keycloak 26.2 +1 more +3 moreOrg.keycloak/keycloak-model-storage-service: variable injection into environment variables4.9 Medium
- donbermoy advanced school management systemSourceCodester Advanced School Management System addNotice cross site scripting5.1 Medium
- espressif esp-idfESF-IDF BluFi Example Memory Overflow Vulnerability5.2 Medium
- oretnom23 online bank management systemSourceCodester Online Bank Management System mnotice.php sql injection6.9 Medium
- oretnom23 online bank management systemSourceCodester Online Bank Management System show.php sql injection6.9 Medium
- musistudio claude-code-routerclaude-code-router CORS. misconfiguration8.1 High
- sapphi-red vite-plugin-static-copyvite-plugin-static-copy files not included in `src` are accessible with a crafted request6.0 Medium
vllmPyPIvLLM has remote code execution vulnerability in the tool call parser for Qwen3-Coder8.8 High- an-themes pin wpWordPress Pin WP theme < 7.2 - Arbitrary File Upload Vulnerability9.9 Critical
- red hat openshift pipelines, advanced cluster management for kubernetes 2, advanced cluster security 4 +12 more +14 moreGithub.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure5.3 Medium
- totolink a720r, a720r firmware +1 moreTOTOLINK A720R cstecgi.cgi setParentalRules buffer overflow8.7 High
- unopimUnoPim vulnerable to CSRF on Product edit feature and creation of other types6.9 Medium
- unopimUnoPim vulnerable to remote code execution through Arbitrary File upload7.3 High
- unopimUnoPim Stored XSS via SVG MIME/Sanitizer Bypass8.0 High
- Show moreLoading…