CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- norrnext.com quantum mamanger component for joomlaExtension - norrnext.com - Stored XSS vulnerability in Quantum Manager component 1.0.0-3.2.0 for Joomla8.5 High
- opentext enterprise security managerOpenText Enterprise Security Manager Information Exposure5.7 Medium
- mitsubishi electric corporation melsec iq-f series fx5s-30mr/ds, melsec iq-f series fx5s-30mr/es, melsec iq-f series fx5s-30mt/ds +72 more +74 moreDenial-of-Service(DoS) Vulnerability in Web server function on MELSEC iQ-F Series CPU module5.3 Medium
- mossle lemonxuhuisheng lemon CmsArticleController.java uploadImage unrestricted upload5.3 Medium
- open5gsOpen5GS gmm-sm.c gmm_state_exception assertion6.9 Medium
- scada-ltsScada-LTS Folder pointHierarchySLTS cross site scripting4.8 Medium
- jqlang jqjqlang jq JSON jq_test.c run_jq_tests assertion4.8 Medium
- huangdou utcmsHuangDou UTCMS Config update.php server-side request forgery5.1 Medium
- huangdou utcmsHuangDou UTCMS Login login.php comparison6.3 Medium
- statamic cms, wanglongcn yifang +1 moreYiFang CMS P_file.php mergeMultipartUpload unrestricted upload5.3 Medium
kimageformatsOSS-FuzzHeap-buffer-overflow in TGAHandler::readNo score- statamic cms, wanglongcn yifang +1 moreYiFang CMS L_tool.php sql injection5.3 Medium
- ffmpegRemote code execution via Heap Buffer Overflow in FFmpeg JPEG20007.2 High
- ffmpegHeap-buffer-overflow write in FFmpeg EXR dwa_uncompress8.7 High
- ffmpegHeap-buffer-overflow write in FFmpeg EXR dwa_uncompress8.7 High
- ffmpegHeap-buffer-overflow write in FFmpeg EXR dwa_uncompress6.9 Medium
- phpgurukul hospital management systemphpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in about-us.php via the...8.5 High
- phpgurukul hospital management systemphpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in contact.php via the...6.5 Medium
- phpgurukul hospital management systemphpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in index.php via the...9.8 Critical
- phpgurukul hospital management systemphpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in add-doctor.php via...9.8 Critical
- No product listedSQL Injection vulnerability in SMM Panel 3.1 allowing remote attackers to gain sensitive...9.8 Critical
- docmostCross Site Scripting vulnerability in docmost v.0.21.0 and before allows an attacker to execute...6.1 Medium
- foxcmsFoxCMS 1.2.6, there is a Cross Site Scripting vulnerability in /index.php/article. This allows...8.8 High
- No product listedFile upload vulnerability in WebErpMesv2 1.17 in the app/Http/Controllers/FactoryController.php...5.4 Medium
- dlink di-8100 firmwareD-Link DI-8100 16.07.26A1 is vulnerable to Buffer Overflow via the en`, `val and id parameters in...7.0 High
- getrebuild rebuildAn issue was discovered in getrebuild/rebuild 4.0.4. The affected source code class is com...9.8 Critical
- sparkshopInsecure Permissions vulnerability in sparkshop v.1.1.7 allows a remote attacker to execute...9.8 Critical
- easyappointments easy\!appointmentsEasy!Appointments SQL injection vulnerability8.1 High
- system pdv project pdvAn issue in System PDV v1.0 allows a remote attacker to obtain sensitive information via the hash...9.8 Critical
- No product listedHitron CGNF-TWN 3.1.1.43-TWN-pre3 contains a command injection vulnerability in the telnet...6.5 Medium
- No product listedDASAN GPON ONU H660WM H660WMR210825 is susceptible to improper access control under its default...6.5 Medium
- adminerAdminer PHP Object Injection issue leads to Denial of Service8.6 High
- No product listedDASAN GPON ONU H660WM OS version H660WMR210825 Hardware version DS-E5-583-A1 was discovered to...5.3 Medium
- No product listedIncorrect access control in the component /cgi-bin/system_diagnostic_main.asp of DASAN GPON ONU...6.5 Medium
- dlink dsl-7740c firmwareD-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command...7.2 High
- dlink dsl-7740c firmwareD-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command...6.5 Medium
- dlink dsl-7740c firmwareInsecure default credentials for the Adminsitrator account of D-Link DSL-7740C with firmware...5.3 Medium
- dlink dsl-7740c firmwareIncorrect access control in the Maintenance module of D-Link DSL-7740C with firmware DSL7740C.V6...5.3 Medium
- dlink dsl-7740c firmwareA command injection vulnerability in the EXE parameter of D-Link DSL-7740C with firmware DSL7740C...5.3 Medium
- dlink dsl-7740c firmwareD-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command...6.8 Medium
- dlink dsl-7740c firmwareD-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command...7.2 High
- dlink dsl-7740c firmwareIncorrect access control in the DELT_file.xgi endpoint of D-Link DSL-7740C with firmware DSL7740C...9.8 Critical
- dlink dsl-7740c firmwareIncorrect access control in the config.xgi function of D-Link DSL-7740C with firmware DSL7740C.V6...9.8 Critical
- perfree perfreeblogPerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the getThemeFileContent function.7.5 High
- perfree perfreeblogPerfreeBlog v4.0.11 has a directory traversal vulnerability in the getThemeFilesByName function.7.5 High
- getrebuild rebuildRebuild v3.7.7 was discovered to contain a Server-Side Request Forgery (SSRF) via the type...5.1 Medium
- No product listedIncorrect access control in the prehandle function of Rebuild v3.7.7 allows attackers to bypass...6.5 Medium
- maharaAn issue was discovered in Mahara 24.04 before 24.04.2 and 23.04 before 23.04.7. The About,...6.1 Medium
- maharaMahara before 22.10.4 and 23.x before 23.04.4 allows information disclosure if the experimental...7.5 High
- statamic cms, wanglongcn yifang +1 moreYiFang CMS Migrate.php exportInstallTable information disclosure6.9 Medium
- Show moreLoading…