CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- coollabs coolifyCoolify Stored Cross-Site Scripting (XSS) in Project Name Field9.4 Critical
- coollabs coolifyCoolify Docker Compose Directive Injection in Application Deployment Workflow9.4 Critical
- coollabs coolifyCoolify Git Repository Field Command Injection in Project Deployment Workflow9.4 Critical
- red hat multicluster global hub, openshift serverless, advanced cluster management for kubernetes 2 +1 more +3 moreNx: nx/devkit: malicious versions of nx and plugins published to npm9.6 Critical
- basecamp google sign inBasecamp's Google Sign-In for Rails allowed redirects to a malformed URL4.2 Medium
- cisco nx-os softwareCisco Nexus 3000 and 9000 Series Switches IS-IS Protocol <TBD> Denial of Service Vulnerability7.4 High
- cisco nx-os software, unified computing system (managed) +1 moreCisco NXOS Software Sensitive Log Information Disclosure Vulnerability5.5 Medium
- cisco nx-os softwareCisco Nexus 3000 and 9000 Series Switches Protocol Independent Multicast Version 6 Denial of Service Vulnerability5.0 Medium
- cisco nx-os software, nx-os system software in aci mode, unified computing system (managed) +2 moreCisco NXOS Software Command Injection Vulnerability4.4 Medium
- cisco unified computing system (managed)Cisco UCS Manager Software Command Injection Vulnerability6.0 Medium
- cisco unified computing system (managed)Cisco UCS Manager Software Command Injection Vulnerability6.5 Medium
- cisco unified computing system (managed), unified computing system (standalone), unified computing system e-series software (ucse) +2 moreCisco Integrated Management Controller Virtual Keyboard Video Monitor (vKVM) Stored Cross-Site Scripting Vulnerability5.4 Medium
- cisco unified computing system (managed), unified computing system (standalone), unified computing system e-series software (ucse) +2 moreCisco UCS Virtual Keyboard Video Monitor (vKVM) Open Redirect Vulnerability7.1 High
- cisco ucs manager, unified computing system (managed) +1 moreCisco UCS Manager Software Stored Software Stored Cross-Site Scripting Vulnerability5.4 Medium
- cisco nexus dashboardCisco Nexus Dashboard Unauthorized REST API Vulnerability5.0 Medium
- cisco nexus dashboard, data center network manager +1 moreCisco Nexus Dashboard Fabric Controller Unauthorized REST API Vulnerability5.4 Medium
- cisco nexus dashboardCisco Nexus Dashboard Path Traversal Vulnerability6.5 Medium
- kubernetesNodes can delete themselves by adding an OwnerReference6.7 Medium
- glpi-project glpiGLPI permits unauthorized rules execution order7.5 High
- totolink t10, t10 firmware +1 moreTOTOLINK T10 formLoginAuth.htm improper authentication6.9 Medium
- dell thinos, thinos 10 +1 moreDell ThinOS 10, versions prior to 2508_10.0127, contains an Incorrect Permission Assignment for...7.8 High
- portabilis i-educarPortabilis i-Educar view sql injection5.3 Medium
- dell thinos, thinos 10 +1 moreDell ThinOS 10, versions prior to 2508_10.0127, contains an Improper Neutralization of Argument...8.4 High
- dell thinos, thinos 10 +1 moreDell ThinOS 10, versions prior to 2508_10.0127, contains an Unverified Ownership vulnerability. A...7.8 High
- dell thinos, thinos 10 +1 moreDell ThinOS 10, versions prior to 2508_10.0127, contain a Protection Mechanism Failure...9.6 Critical
- portabilis i-educarPortabilis i-Educar Agenda agenda.php sql injection5.3 Medium
- campcodes payroll management systemCampcodes Payroll Management System index.php include file inclusion6.9 Medium
- linksys e1700, e1700 firmware +1 moreLinksys E1700 systemCommand os command injection5.1 Medium
- linksys e1700, e1700 firmware +1 moreLinksys E1700 QoSSetup stack-based overflow8.7 High
- linksys e1700, e1700 firmware +1 moreLinksys E1700 setSysAdm stack-based overflow8.7 High
- linksys e1700, e1700 firmware +1 moreLinksys E1700 setWan stack-based overflow8.7 High
- tenda ac1206, ac1206 firmware +1 moreTenda AC1206 GetParentControlInfo stack-based overflow9.3 Critical
- cgm clininetPossibility to generate a session for any user via the "ex:action" parameter after obtaining access to the JWT key8.8 High
- cgm clininetExcessive permissions on configuration files containing database logins and passwords9.4 Critical
- cgm clininetSQL injection in utils/Reporter/OpenReportWindow.pl via the UserID parameter6.9 Medium
- cgm clininetSQL injection in ReturnUserUnitsXML.pl via the UserID parameter6.9 Medium
- cgm clininetAuthenticated SQL injection in PrepareCDExportJSON.pl6.9 Medium
- cgm clininetSQL injection in getPatientIdentifier function of PatientService.pl6.9 Medium
- cgm clininetAuthenticated RCE with uhcapache privileges in ConvertToPDF9.4 Critical
- cgm clininetCalling system commands via RunCommand9.4 Critical
- cgm clininetConditional RCE via the "system" function9.0 Critical
- cgm clininetUnauthenticated access to module configuration endpoint5.3 Medium
- cgm clininetMissing authentication in APIs returning statistical data along with session IDs9.0 Critical
- cgm clininetMissing authentication in API returning request logs containing session IDs9.0 Critical
- cgm clininetMissing authentication in API returning a list of all active sessions9.0 Critical
- cgm clininetSession ID leakage in Zone.Identifier of downloaded files7.3 High
- cgm clininetMissing authentication in APIs allowing data retrieval and modification8.8 High
- cgm clininetStored XSS permitting session takeover of arbitrary user8.8 High
- cgm clininetRCE via Print.pl in uhcPrintServerPrint9.4 Critical
- sma boy 3.0, boy 3.6, boy 4.0 +2 more +4 moreSMA: Directory Traversal in Sunny Boy <3.10.27.R6.5 Medium
- Show moreLoading…