CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal vulnerable to Stored XSS in Components portlet4.6 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal vulnerable to Reflected XSS with the referer and forward parameter6.9 Medium
kimageformatsOSS-FuzzHeap-buffer-overflow in TGAHandler::readNo score- linksys re6250, re6300, re6350 +9 more +11 moreLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 inboundFilterAdd stack-based overflow8.7 High
- linksys re6250, re6300, re6350 +9 more +11 moreLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 scheduleAdd stack-based overflow8.7 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Reflected XSS in CKeditor 4.21.0 endpoint6.9 Medium
- salesforce tableau server, tableau server +1 moreImproper Input Validation vulnerability in Salesforce Tableau Server on Windows, Linux (tabdoc...8.5 High
- salesforce tableau server, tableau server +1 moreImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in...6.5 Medium
- salesforce tableau server, tableau server +1 moreUnrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on...7.3 High
- salesforce tableau server, tableau server +1 moreUnrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on...7.3 High
- salesforce tableau server, tableau desktop, tableau server +1 moreAccess of Resource Using Incompatible Type ('Type Confusion') vulnerability in Salesforce Tableau...9.3 Critical
- consensys gnarkgnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checks8.6 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal users are able to add system admin portlets to pages6.7 Medium
- centreon webSecond order SQL injection available to user with low privilege8.8 High
- centreon webUser with high privileges is able to introduce a SQLi using the Meta Service indicator page7.2 High
- apache log4cxxApache Log4cxx: Improper HTML escaping in HTMLLayout2.1 Low
- apache log4cxxApache Log4cxx: Improper escaping with JSONLayout6.3 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal users can upload an unlimited amount of files5.3 Medium
- apache streamparkApache StreamPark: SQL injection vulnerability7.6 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal's unauthenticated users can access loaded files via URL before submitting the object entry5.3 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Reflected Cross-Site Scripting Vulnerability via PortalUtil.escapeRedirect5.3 Medium
- advplyr audiobookshelfAudiobookshelf vulnerable to OIDC token exfiltration and account takeover8.8 High
- mmaitre314 picklescanpicklescan - Arbitrary Code Execution via torch.utils._config_module.load_config Bypass7.6 High
- mmaitre314 picklescanpicklescan - Remote Code Execution via torch.jit.unsupported_tensor_ops.execWrapper7.6 High
- mmaitre314 picklescanpicklescan - Unsafe Deserialization via torch.utils.data.datapipes.utils.decoder.basichandlers7.6 High
- mmaitre314 picklescanpicklescan - Undetected Remote Code Execution via torch.utils.collect_env.run7.6 High
- mmaitre314 picklescanpicklescan - Arbitrary Code Execution via torch.fx.experimental.symbolic_shapes.ShapeEnv.evaluate_guards_expression7.6 High
- mmaitre314 picklescanpicklescan - Remote Code Execution via torch._dynamo.guards.GuardBuilder.get7.6 High
- mmaitre314 picklescanpicklescan - Arbitrary Code Execution via torch.utils.bottleneck.__main__.run_cprofile7.6 High
- zitadelZITADEL user enumeration vulnerability in login UI5.3 Medium
- roocodeinc roo-codeRoo-Code potential remote code execution via auto-execute command parsing flaw8.1 High
- unopimUnoPim Quick Export feature is vulnerable to CSV injection2.5 Low
- unopimunopim/unopim allows unauthorized product deletion via mass-delete endpoint8.1 High
- linux, linux kernel +1 morexfrm: state: initialize state_ptrs earlier in xfrm_state_find7.8 High
- linux, linux kernel +1 moreRevert "drm/prime: Use dma_buf from GEM object instance"5.5 Medium
- linux, linux kernel +1 moreRevert "drm/gem-framebuffer: Use dma_buf from GEM object instance"5.5 Medium
- linux, linux kernel +1 moreRevert "drm/gem-dma: Use dma_buf from GEM object instance"5.5 Medium
- debian linux, linux kernel +1 morei2c: qup: jump out of the loop in case of timeout5.5 Medium
- debian linux, linux kernel, siemens simatic cn 4100 +2 morearm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()7.8 High
- linux, linux kernel +1 moreRevert "drm/gem-shmem: Use dma_buf from GEM object instance"5.5 Medium
- debian linux, linux kernel +1 moreregulator: core: fix NULL dereference on unbind due to stale coupling data5.5 Medium
- linux, linux kernel +1 moreiio: fix potential out-of-bound write7.8 High
- debian linux, linux kernel +1 morenet: appletalk: Fix use-after-free in AARP proxy probe7.8 High
- debian linux, linux kernel +1 morecan: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode5.5 Medium
- debian linux, linux kernel +1 moreice: Fix a null pointer dereference in ice_copy_and_init_pkg()5.5 Medium
- debian linux, linux kernel +1 morenilfs2: reject invalid file types when reading inodes5.5 Medium
- linux, linux kernel +1 moreASoC: mediatek: mt8365-dai-i2s: pass correct size to mt8365_dai_set_priv7.1 High
- linux, linux kernel +1 moreplatform/x86: alienware-wmi-wmax: Fix `dmi_system_id` array7.1 High
- linux, linux kernel +1 more[ceph] parse_longname(): strrchr() expects NUL-terminated string9.8 Critical
- linux, linux kernel +1 moregfs2: No more self recovery7.8 High
- Show moreLoading…