CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- givanz vvvebgivanz Vvveb media.php unrestricted upload5.3 Medium
- ckolivas lrzipckolivas lrzip strtol_l.c __GI_____strtol_l_internal null pointer dereference4.8 Medium
- wangsongyan wblogwangsongyan wblog backup.go RestorePost server-side request forgery5.3 Medium
- podofoPoDoFo PDF Dictionary PdfTokenizer.cpp DetermineDataType use after free4.8 Medium
- linksys re6250, re6300, re6350 +8 more +10 moreLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 addStaProfile stack-based overflow8.7 High
- linksys re6250, re6300, re6350 +9 more +11 moreLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 qosClassifier stack-based overflow8.7 High
- bjskzy zhiyou erpBjskzy Zhiyou ERP com.artery.workflow.ServiceImpl getFieldValue sql injection5.3 Medium
- vimvim xxd xxd.c main buffer overflow4.8 Medium
- vimvim memmove-vec-unaligned-erms.S __memmove_avx_unaligned_erms memory corruption4.8 Medium
- scada-ltsScada-LTS watch_list.shtm cross site scripting5.1 Medium
- dcn dcme-720, dcnetworks dcme-720 firmware +1 moreDCN DCME-720 Web Management Backend ip_block.php os command injection5.3 Medium
async-stdcrates.ioasync-std has been discontinuedNo score- appneta tcpreplayappneta tcpreplay tcprewrite get.c get_l2len_protocol use after free4.8 Medium
- appneta tcpreplayappneta tcpreplay tcprewrite edit_packet.c fix_ipv6_checksums use after free4.8 Medium
- appneta tcpreplayappneta tcpreplay parse_args.c tcpedit_post_args null pointer dereference4.8 Medium
- fnkvision y215 cctv cameraFNKvision Y215 CCTV Camera passwd crypt weak hash2.0 Low
- fnkvision y215 cctv cameraFNKvision Y215 CCTV Camera Telnet Sevice s1_rf_test_config backdoor5.4 Medium
- fnkvision y215 cctv cameraFNKvision Y215 CCTV Camera wpa_supplicant.conf information disclosure1.0 Low
- fnkvision y215 cctv cameraFNKvision Y215 CCTV Camera Firmware passwd hard-coded credentials8.5 High
- belkin ax1800Belkin AX1800 Firmware Update data authenticity8.6 High
- templatescoderthemes spexo addons for elementor – elementor widgets, mega menu, popup builder, template kits and starter templates for elementorSpexo Addons for Elementor <= 1.0.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget6.4 Medium
- ibm integrated analytics systemIBM Integrated Analytics System file upload8.0 High
- ibm engineering lifecycle management, jazz foundation +1 moreIBM Engineering Lifecycle Management incorrect authorization9.8 Critical
- linksys re6250, re6300, re6350 +9 more +11 moreLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 portTriggerManageRule stack-based overflow8.7 High
- linksys re6250, re6300, re6350 +9 more +11 moreLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 urlFilterManageRule stack-based overflow5.3 Medium
- linksys re6250, re6300, re6350 +9 more +11 moreLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 ipRangeBlockManageRule stack-based overflow8.7 High
- linksys re6250, re6300, re6350 +9 more +11 moreLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 accessControlAdd stack-based overflow8.7 High
- linksys re6250, re6300, re6350 +9 more +11 moreLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP_checkCredentialsByBBS stack-based overflow8.7 High
- linksys re6250, re6300, re6350 +9 more +11 moreLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setSysAdm stack-based overflow8.7 High
- lunary, lunary-ai lunary-ai/lunary +1 moreEnvironment Variable XSS in Analytics Component in lunary-ai/lunary8.1 High
- bravis-themes bravis userBravis User <= 1.0.1 - Authentication Bypass to Account Takeover8.1 High
- case themes theme user, case-themes case theme user +1 moreCase Theme User <= 1.0.3 - Authentication Bypass via Social Login9.8 Critical
- linksys re6250, re6300, re6350 +9 more +11 moreLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 langSwitchByBBS stack-based overflow8.7 High
- arraytics eventin – event calendar, event registration, tickets & booking (ai powered)Event Manager, Events Calendar, Booking, Registrations and Tickets – Eventin <= 4.0.37 - Unauthenticated Server-Side Request Forgery7.2 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal ReDoS with Role Name search in KaleoDesignerPortlet6.9 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal stored cross-site scripting in text field of the web content structure6.9 Medium
- surror shortcodehub – multipurpose shortcode builderShortcodeHub <= 1.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via author_link_target Parameter6.4 Medium
- sertifier certificate & badge maker for wordpress – tutor lmsSertifier Certificate & Badge Maker for WordPress – Tutor LMS <= 1.19 - Cross-Site Request Forgery to Settings Update4.3 Medium
- evigeo wp filter & combine rss feedsWP Filter & Combine RSS Feeds <= 0.4 - Missing Authorization to Authenticated (Contributor+) Feed Deletion4.3 Medium
- wcplus wc plusWC Plus <= 1.2.0 - Missing Authorization to Unauthenticated Settings Manipulation5.3 Medium
- wen-solutions ws theme addonsWS Theme Addons <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via ws_weather Shortcode6.4 Medium
- silence silencesoft rss readerSilencesoft RSS Reader <= 0.6 - Cross-Site Request Forgery to RSS Feed Deletion4.3 Medium
- pokornydavid restore permanently delete post or page dataRestore Permanently delete Post or Page Data <= 1.0 - Cross-Site Request Forgery4.3 Medium
- wptobe wptobe-membershipsWptobe-memberships <= 3.4.2 - Authenticated (Subscriber+) Arbitrary File Deletion8.1 High
- anzia ni woocommerce customer product reportNi WooCommerce Customer Product Report <= 1.2.4 - Missing Authorization to Authenticated (Subscriber+) Settings Update4.3 Medium
- ogulo – 360° tourOgulo – 360° Tour <= 1.0.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via slug Parameter6.4 Medium
- simplercheckout simpler checkoutSimpler Checkout 0.7.0 - 1.1.9 - Authentication Bypass9.8 Critical
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal allows unrestricted upload of file in the style books component6.8 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal allows open redirect in /c/portal/edit_info_item parameter redirect5.1 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal JSONWS API endpoint shares sensitive information5.1 Medium
- Show moreLoading…