CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- macrozheng mallmacrozheng mall Registration weak password6.3 Medium
- pfu limited scansnap manager installersIncorrect privilege assignment vulnerability exists in ScanSnap Manager installers versions prior...8.5 High
- editso fusoeditso fuso mod.rs PenetrateRsaAndAesHandshake inadequate encryption6.3 Medium
- admerc apartment management systemitsourcecode Apartment Management System addvisitor.php sql injection6.9 Medium
- digital arts inc. i-filter ブラウザー＆クラウド multiagent for windows, i-フィルター 6.0, i-フィルター for zaq +4 more +6 moreMultiple i-フィルター products contain an issue with incorrect default permissions. If this...8.5 High
- printeers print & shipWordPress Printeers Print & Ship plugin <= 1.17.0 - Directory Traversal vulnerability5.3 Medium
- admerc apartment management systemitsourcecode Apartment Management System addbranch.php sql injection6.9 Medium
- admerc apartment management systemitsourcecode Apartment Management System fair_info_all.php sql injection6.9 Medium
- admerc apartment management systemitsourcecode Apartment Management System rented_info.php sql injection6.9 Medium
- admerc apartment management systemitsourcecode Apartment Management System visitor_info.php sql injection6.9 Medium
- campcodes online loan management systemCampcodes Online Loan Management System ajax.php sql injection6.9 Medium
- campcodes online loan management systemCampcodes Online Loan Management System ajax.php sql injection6.9 Medium
- campcodes online loan management systemCampcodes Online Loan Management System ajax.php sql injection6.9 Medium
- chaimchaikin admin menu groupsWordPress Admin Menu Groups plugin <= 0.1.2 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- mibuthu link viewWordPress Link View plugin <= 0.8.0 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- backup bolt bolt, backupbolt backup bolt +1 moreWordPress Backup Bolt plugin <= 1.5.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- campcodes online loan management systemCampcodes Online Loan Management System ajax.php sql injection6.9 Medium
- campcodes online loan management systemCampcodes Online Loan Management System ajax.php sql injection6.9 Medium
- kevinweber lazy load for videosLazy Load for Videos <= 2.18.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via data-video-title and href Attributes6.4 Medium
- lumasoft fotoshare cloudClient-side password validation (CWE-602) in lumasoft fotoShare Cloud 2025-03-13 allowing...5.8 Medium
- hyundai navigationIn Hyundai Navigation App STD5W.EUR.HMC.230516.afa908d, an attacker can inject HTML payloads in...7.3 High
- dlink dcs-825l firmwareD-Link DCS-825L firmware v1.08.01 contains a vulnerability in the watchdog script `mydlink-watch...6.6 Medium
- tenda ac6 firmwareTenda AC6 V15.03.06.23_multi was discovered to contain a buffer overflow via the list parameter...6.5 Medium
- foxcmsIn FoxCMS 1.2.6, there is a reflected Cross Site Scripting (XSS) vulnerability in /index.php/plus.8.8 High
- bevyThe Bevy Event service through 2025-07-22, as used for eBay Seller Events and other activities,...6.5 Medium
- solspace freeformThe Freeform CraftCMS plugin contains an Server-side template injection (SSTI) vulnerability9.8 Critical
- ryansu simple adminsimple-admin-core SQL Injection vulnerability7.0 High
- deciso opnsenseOPNsense 25.1 contains an authenticated command injection vulnerability in its Bridge Interface...9.1 Critical
- diskoverdata diskoverdiskover-web v2.3.0 Community Edition suffers from multiple stored cross-site scripting (XSS)...5.6 Medium
- diskoverdata diskoverdiskover-web v2.3.0 Community Edition is vulnerable to multiple reflected cross-site scripting ...5.6 Medium
- diskoverdata diskoverdiskover-web v2.3.0 Community Edition is vulnerable to multiple boolean-based blind SQL injection...5.3 Medium
- readarrSQL Injection vulnerability exists in the sortKey parameter of the GET /api/v1/wanted/cutoff API...8.3 High
- nodebbNodeBB SQL Injection vulnerability8.6 High
- gitblitIn Gitblit v1.7.1, a reflected cross-site scripting (XSS) vulnerability exists in the way...6.1 Medium
- gitblitA template injection vulnerability leading to reflected cross-site scripting (XSS) has been...6.1 Medium
- abantecartSQL Injection vulnerability in AbanteCart 1.4.2, allows unauthenticated attackers to execute...9.8 Critical
- raspap raspap-webguiIn RaspAP raspap-webgui 3.3.2 and earlier, a command injection vulnerability exists in the...9.8 Critical
- zoneland o2oaO2OA v9.0.3 was discovered to contain a remote code execution (RCE) vulnerability via the...8.8 High
- servmask all-in-one wp migration and backupAll-in-One WP Migration and Backup <= 7.97 - Authenticated (Administrator+) Stored Cross-Site Scripting via Import4.4 Medium
- sveltejs devalueSvelte devalue vulnerable to prototype pollution7.9 High
- softaculous siteseo – seo simplifiedSiteSEO – SEO Simplified <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Broken Regex Expression6.4 Medium
- agiloftAgiloft XML external entity local path traversal5.1 Medium
- agiloftAgiloft insecure download of system packages9.2 Critical
- agiloftAgiloft local privilege escalation via default credentials8.7 High
- agiloftAgiloft improper neutralization in EUI template engine4.8 Medium
- campcodes online water billing systemCampcodes Online Water Billing System addclient1.php sql injection6.9 Medium
- mmaitre314 picklescanpicklescan - Arbitrary Code Execution via Undetected asyncio.unix_events._UnixSubprocessTransport._start7.6 High
- mmaitre314 picklescanpicklescan - Arbitrary Code Execution via Undetected cProfile.run in Pickle Deserialization7.6 High
- mmaitre314 picklescanpicklescan - Remote Code Execution via Undetected cProfile.runctx in Pickle Files7.6 High
- mmaitre314 picklescanpicklescan - Arbitrary Code Execution via Undetected doctest.debug_script7.6 High
- Show moreLoading…