CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- nozbeTCC Bypass via misconfigured Node fuses in Nozbe4.8 Medium
- mosh-proTCC Bypass via misconfigured Node fuses in Mosh-Pro4.8 Medium
statsrelay-protobufcrates.io`statsrelay-protobuf` was removed from crates.io for malicious codeNo score- nagios host, teamviewer full client +1 moreArbitrary File Creation via Symbolic Link leading to Denial-of-Service6.1 Medium
- nozomi networks cmcIncorrect authorization for traces request/download in CMC before 25.1.05.3 Medium
- mojoomla school managementWordPress School Management Plugin <= 93.2.0 - Broken Access Control Vulnerability6.5 Medium
- qnap file station, qnap systems inc. file station 5 +1 moreFile Station 57.1 High
- valvepress wordpress automatic pluginWordPress Automatic Plugin - AI content generator and auto poster plugin <= 3.118.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting4.7 Medium
- themefic tourfic – travel booking, hotel booking & car rental wordpress pluginTourfic <= 2.14.5 - Missing Authorization in Multiple Functions4.3 Medium
- delta electronics commgrCOMMGR Code Injection Vulnerability7.8 High
- delta electronics commgrCOMMGR Stack-based Buffer Overflow Vulnerability8.6 High
- delta electronics eip builderEIP Builder XML External Entity Processing Information Disclosure Vulnerability5.5 Medium
- welotec eg400mk2-d11001-000101, eg400mk2-d11101-000101, eg500mk2-a11001-000101 +22 more +24 moreegOS WebGUI Hard-Coded JWT Secret Enables Authentication Bypass9.8 Critical
- nelzkie15 human resource information systemSourceCodester Human Resource Information System editemployee_process.php unrestricted upload6.9 Medium
- nelzkie15 human resource information systemSourceCodester Human Resource Information System editemployee_process.php unrestricted upload6.9 Medium
- dokan pro, wedevs dokan pro +1 moreDokan Pro <= 4.0.5 - Authenticated (Vendor+) Privilege Escalation8.8 High
- mihomo partyMihomo Party Socket sysproxy.ts enableSysProxy temp file2.0 Low
- oretnom23 online bank management systemSourceCodester Online Bank Management System feedback.php sql injection6.9 Medium
- admerc apartment management systemitsourcecode Apartment Management System add_owner_utility.php sql injection6.9 Medium
- admerc apartment management systemitsourcecode Apartment Management System add_maintenance_cost.php sql injection6.9 Medium
- admerc apartment management systemitsourcecode Apartment Management System add_m_committee.php sql injection6.9 Medium
- admerc apartment management systemitsourcecode Apartment Management System add_fund.php sql injection6.9 Medium
- admerc apartment management systemitsourcecode Apartment Management System add_bill.php sql injection6.9 Medium
- pierrelannoy vibesVibes <= 2.2.0 - Unauthenticated SQL Injection via `resource` Parameter7.5 High
- diyhi bbsdiyhi bbs File Compression FilePackageManageAction.java information disclosure5.3 Medium
- 1000projects online project report submission and evaluation system, online student project report submission and evaluation system +1 more1000projects Online Project Report Submission and Evaluation System delete_group_student.php sql injection6.9 Medium
- tenda ch22, ch22 firmware +1 moreTenda CH22 editUserName formeditUserName buffer overflow8.7 High
- 1000projects online project report submission and evaluation system, online student project report submission and evaluation system +1 more1000projects Online Project Report Submission and Evaluation System add_title.php cross site scripting5.3 Medium
- 1000projects online project report submission and evaluation system, online student project report submission and evaluation system +1 more1000projects Online Project Report Submission and Evaluation System edit_faculty.php cross site scripting5.3 Medium
- github enterprise serverIncorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed read-only access7.0 High
- 1000projects online project report submission and evaluation system, online student project report submission and evaluation system +1 more1000projects Online Project Report Submission and Evaluation System add_student.php cross site scripting5.3 Medium
- 1000projects online project report submission and evaluation system, online student project report submission and evaluation system +1 more1000projects Online Project Report Submission and Evaluation System edit_title.php cross site scripting5.3 Medium
- mtons mblogmtons mblog Admin Panel list cross site scripting5.3 Medium
- mtons mblogmtons mblog Admin Panel list cross site scripting5.3 Medium
- mtons mblogmtons mblog search cross site scripting5.3 Medium
- mtons mblogmtons mblog update cross site scripting4.8 Medium
- remyandrade faq management systemA Stored Cross-Site Scripting (XSS) vulnerability in SourceCodester FAQ Management System 1.0...6.1 Medium
- nagios xiA cross-site scripting (XSS) vulnerability exists in Nagios XI 2024R2. The vulnerability allows...6.1 Medium
- zie619 n8n workflow collectionn8n-workflows Main Commit ee25413 allows attackers to execute a directory traversal via the...9.1 Critical
- telpo mdmTelpo MDM 1.4.6 thru 1.4.9 for Android contains sensitive administrator credentials and MQTT...9.1 Critical
- uatech badasoBadaso CMS file upload vulnerability9.8 Critical
- selectzeroSelectZero SelectZero Data Observability Platform before 2025.5.2 contains an Open Redirect...6.5 Medium
- selectzeroSelectZero Data Observability Platform before 2025.5.2 is vulnerable to Content Spoofing / Text...7.5 High
- selectzeroSelectZero Data Observability Platform before 2025.5.2 is vulnerable to HTML Injection. Legacy UI...5.4 Medium
- helpy.io helpyCross Site Scripting vulnerability in Helpy.io v.2.8.0 allows a remote attacker to escalate...6.1 Medium
- exe-system notescmsA vulnerability has been found in NotesCMS and classified as medium. Affected by this...6.1 Medium
- exe-system notescmsA vulnerability has been found in NotesCMS and classified as medium. Affected by this...6.1 Medium
- exe-system notescmsA vulnerability in NotesCMS and specifically in the page /index.php?route=notes. The manipulation...6.1 Medium
- ipfireIPFire 2.29 DNS management interface (dns.cgi) fails to properly sanitize user-supplied input in...6.1 Medium
- ipfireIPFire 2.29 web-based firewall interface (firewall.cgi) fails to sanitize several rule parameters...5.4 Medium
- Show moreLoading…