CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- No product listedAn issue was discovered in mouse07410 asn1c thru 0.9.29 (2025-03-20) - a fork of vlm asn1c. In...9.8 Critical
- elite project eliteOperaMasks SDK ELite Script Engine v0.5.0 was discovered to contain a deserialization vulnerability.8.8 High
- pdq smart deployAn issue in PDQ Smart Deploy V.3.0.2040 allows an attacker to escalate privileges via the...9.8 Critical
- pdq smart deployInsecure Permissions vulnerability in PDQ Smart Deploy V.3.0.2040 allows a local attacker to...7.8 High
- yooseeAn SQL injection vulnerability in Yoosee application v6.32.4 allows authenticated users to inject...8.8 High
- guojusoft jeecgbootJeecgBoot SQL Injection Vulnerability6.5 Medium
- shopizerAn issue was discovered in Shopizer 3.2.7. The server's CORS implementation reflects the client...8.1 High
- vishnusivadas login-signupThe LogIn-SignUp project by VishnuSivadasVS is vulnerable to SQL Injection due to unsafe...9.8 Critical
- ehcp easy hosting control panelReflected Cross-Site Scripting in the Change Template function in Easy Hosting Control Panel ...6.1 Medium
- ehcp easy hosting control panelReflected Cross-Site Scripting in the List MySQL Databases function in Easy Hosting Control Panel...6.1 Medium
- No product listedNextChat contains a cross-site scripting (XSS) vulnerability in the HTMLPreview component of...6.1 Medium
- No product listedMCSManager 10.5.3 daemon process runs as a root account by default, and its sensitive data ...5.3 Medium
- openmediavaultAn issue was discovered in the changePassword method in file /usr/share/php/openmediavault/system...7.8 High
mupen64plus-coreDebianIn mupen64plus v2.6.0 there is an array overflow vulnerability in the write_rdram_regs and...9.8 Critical- spimsimulator spimspimsimulator spim v9.1.24 and before is vulnerable to Buffer Overflow in READ_STRING_SYSCALL.9.8 Critical
- No product listedIn MindManager Windows versions prior to 24.1.150, attackers could potentially write to...7.8 High
- jeewmsJeewms v3.7 was discovered to contain a SQL injection vulnerability via the CgReportController API.9.8 Critical
- winterchens my-siteIncorrect access control in the doFilter function of my-site v1.0.2.RELEASE allows attackers to...9.8 Critical
- No product listedIncorrect access control in the preHandle function of SpringBootBlog v1.0.0 allows attackers to...7.5 High
- No product listedAn authentication bypass vulnerability in anji-plus AJ-Report up to v1.4.2 allows unauthenticated...9.8 Critical
- No product listedMallChat v1.0-SNAPSHOT has an authentication bypass vulnerability. An attacker can exploit this...9.8 Critical
- No product listedzhisheng17 blog 3.0.1-SNAPSHOT has an authentication bypass vulnerability. An attacker can...9.8 Critical
- maharaMahara 21.10 before 21.10.6, 22.04 before 22.04.4, and 22.10 before 22.10.1 deserializes user...9.8 Critical
- maharaMahara 21.10 before 21.10.6, 22.04 before 22.04.4, and 22.10 before 22.10.1 allows unsafe font...6.5 Medium
- No product listedVoltronic Power ViewPower through 1.04-21353 and PowerShield Netguard before 1.04-23292 allows a...9.8 Critical
- No product listedVoltronic Power ViewPower through 1.04-24215, ViewPower Pro through 2.0-22165, and PowerShield...10.0 Critical
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Reflected Cross-Site Scripting Vulnerability via Form Container2.1 Low
- liferay dxp, digital experience platform +1 moreA server-side request forgery (SSRF) vulnerability exists in the Liferay DXP 2025.Q2.0 through...4.8 Medium
- netsarang computer, inc. xftp ftp clientXftp FTP Client <= 3.0 PWD Response Buffer Overflow9.3 Critical
- xenorateXenorate <= 2.50 .xpl File Stack-Based Buffer Overflow8.4 High
- arcane software vermillion ftp daemonVermillion FTP <= 1.31 Daemon PORT Command Memory Corruption9.3 Critical
- varicad enVariCAD EN <= 2010-2.05 .dwb File Stack Buffer Overflow8.4 High
- steinberg mymp3playerSteinberg MyMP3Player <= 3.0.0.67 Buffer Overflow8.4 High
- rocket software seagull ftp clientSeagull FTP v3.3 Build 409 Stack Buffer Overflow8.5 High
- millenium mp3 studioMillenium MP3 Studio <= 2.0 .pls File Stack-Based Buffer Overflow8.4 High
- maplesoft mapleMaple <= v13 Maplet File Creation and Command Execution8.4 High
- new software s.c. gekko manager ftp clientGekko Manager FTP Client <= 0.77 Stack Buffer Overflow8.5 High
- galangAlan <= 0.2.1 Buffer Overflow8.4 High
- ftppad ftp clientFTPPad <= 1.2.0 Stack Buffer Overflow8.4 High
- liuxz software ftp synchronizer professionalFTP Synchronizer Professional <= 4.0.73.274 Stack Buffer Overflow8.5 High
- easyftp server project server, kmint21 software easyftp server +1 moreEasyFTP Server list.html path Stack Buffer Overflow9.3 Critical
- easyftp server project server, kmint21 software easyftp server +1 moreEasyFTP Server <= 1.7.0.11 CWD Command Stack Buffer Overflow9.3 Critical
- digital music pad music padDigital Music Pad <= 8.2.3.3.4 Stack Buffer Overflow8.4 High
- communicrypt software mailCommuniCrypt Mail <= 1.16 ANSMTP/AOSMTP ActiveX Control Buffer Overflow8.6 High
- barracuda networks spam & virus firewall, ssl vpn, web application firewall +2 moreBarracuda Spam & Virus Firewall "locale" Path Traversal8.7 High
- aolAOL <= 9.5 Phobos.Playlist 'Import()' Stack-Based Buffer Overflow8.4 High
- amlib amlibweb library management systemAmlibweb NetOpacs webquery.dll Stack Buffer Overflow9.3 Critical
- aveva pi integratorAVEVA PI Integrator Unrestricted Upload of File with Dangerous Type7.1 High
- aveva pi integratorAVEVA PI Integrator Insertion of Sensitive Information into Sent Data7.1 High
- microsoft windows server 2012 r2, windows server 2012 r2 (server core installation), windows server 2016 +7 more +9 moreWindows Storage-based Management Service Remote Code Execution Vulnerability7.5 High
- Show moreLoading…