CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- hangzhou shengqiao technology co. ltd. st. joe erp system ("圣乔erp系统"), st. joe erp system project joe erp system +1 moreSt. Joe ERP System SingleRowQueryConverter SQL Injection9.3 Critical
- changsha spon communication technology co. ltd. spon ip network broadcast systemSPON IP Network Intercom System rj_get_token.php Arbitrary File Read8.7 High
- nsfocus secgate3600 firewall, nsfocusglobal secgate3600 firmware +1 moreSecGate3600 Firewall Information Disclosure via authManageSet.cgi8.7 High
- sangfor technologies co. ltd. behavior management system (dc management system)Sangfor Behavior Management System XML External Entity Injection8.7 High
- qi'anxin tianqing management centerQi'anxin TianQing Management Center rptsvr Arbitrary File Upload10.0 Critical
- fujian apex livebosLiveBos UploadFile.do Arbitrary File Upload10.0 Critical
- h3c group intelligent management center (imc)H3C Intelligent Management Center (iMC) /byod/index.xhtml RCE10.0 Critical
- qingdao dongsheng weiye software co., ltd. dongsheng logistics softwareDongsheng Logistics Software Unauthenticated Arbitrary File Upload10.0 Critical
- d-link dir-110, dir-412, dir-600 +10 more +12 moreD-Link DIR-110/412/600/615/645/815 RCE via service.cgi10.0 Critical
- zhejiang dahua technology co., ltd. smart park integrated management platformDahua Smart Park Integrated Management Platform Front-End Arbitrary File Upload10.0 Critical
- zhejiang dahua technology co., ltd. eimsDahua EIMS capture_handle.action RCE10.0 Critical
- feijiu medical technology co., ltd. bian que feijiu intelligent emergency and quality control systemBian Que Feijiu Intelligent Emergency and Quality Control System SQL Injection via GetLyfsByParams9.3 Critical
- shanghai aishu information technology co., ltd. anyshareAnyShare ServiceAgent API Unauthenticated RCE10.0 Critical
- arcserve udp, unified data protection (udp) +1 moreArcserve UDP < 10.2 Authentication Bypass7.7 High
- arcserve udp, unified data protection (udp) +1 moreArcserve UDP < 10.2 Reflected Cross-Site Scripting (XSS)4.8 Medium
- arcserve udp, unified data protection (udp) +1 moreArcserve UDP < 10.2 Pre-Authentication Heap Overflow9.2 Critical
- arcserve udp, unified data protection (udp) +1 moreArcserve UDP < 10.2 Pre-Authentication Heap Overflow9.2 Critical
- isc keaKea crash upon interaction between specific client options and subnet selection7.5 High
- gitlabMissing Authorization in GitLab5.8 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab5.3 Medium
- gitlabImproper Control of Generation of Code ('Code Injection') in GitLab5.0 Medium
- pcre pcre2PCRE2: heap-buffer-overflow read in match_ref due to missing boundary restoration in SCS6.9 Medium
- enituretechnology small package quotes – usps editionWordPress Small Package Quotes – USPS Edition Plugin <= 1.3.9 - PHP Object Injection Vulnerability7.2 High
- geronikolov instant breaking newsWordPress Instant Breaking News Plugin <= 1.0 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- jgwhite33 wp thumbtack review sliderWordPress WP Thumbtack Review Slider Plugin <= 2.6 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- ameliabooking booking system trafftWordPress Booking System Trafft Plugin <= 1.0.14 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- epeken all kurirWordPress Epeken All Kurir Plugin <= 2.0.1 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- alexvtn chatbox managerWordPress Chatbox Manager Plugin <= 1.2.6 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- rtcamp transcoderWordPress Transcoder Plugin <= 1.4.0 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- add-ons.org pdf for elementor forms + drag and drop template builderWordPress PDF for Elementor Forms + Drag And Drop Template Builder Plugin <= 6.2.0 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- element invader elementinvader addons for elementorWordPress ElementInvader Addons for Elementor Plugin <= 1.3.6 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- eric teubert podlove podcast publisherWordPress Podlove Podcast Publisher Plugin <= 4.2.5 - Open Redirection Vulnerability4.7 Medium
- solacewp solace extraWordPress Solace Extra Plugin <= 1.3.2 - Server Side Request Forgery (SSRF) Vulnerability4.4 Medium
- plugins and snippets simple page access restrictionWordPress Simple Page Access Restriction Plugin <= 1.0.32 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- aftership & automizely trackingWordPress AfterShip Tracking Plugin <= 1.17.17 - Broken Access Control Vulnerability5.3 Medium
- xpro theme builderWordPress Xpro Theme Builder Plugin <= 1.2.9 - Broken Access Control Vulnerability6.5 Medium
- mra13 simple download monitorWordPress Simple Download Monitor Plugin <= 3.9.34 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- uicore elementsWordPress UiCore Elements Plugin <= 1.3.4 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- xpro elementor addonsWordPress Xpro Elementor Addons Plugin <= 1.4.17 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- boldthemes bold page builderWordPress Bold Page Builder Plugin <= 5.4.3 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- uncanny owl automatorWordPress Uncanny Automator Plugin <= 6.7.0.1 - Broken Access Control Vulnerability4.3 Medium
- xylus themes wp bulk deleteWordPress WP Bulk Delete Plugin <= 1.3.6 - Broken Access Control Vulnerability4.3 Medium
- drupal owl carousel 2, owl carousel 2 project carousel 2 +1 moreOwl Carousel 2 - Critical - Unsupported - SA-CONTRIB-2025-1045.3 Medium
- api key manager project key manager, drupal api key manager +1 moreAPI Key manager - Critical - Unsupported - SA-CONTRIB-2025-1035.3 Medium
- drupal synchronize composer.json with contrib modules, synchronize composer.json with contrib modules project composer.json with contrib modules +1 moreSynchronize composer.json With Contrib Modules - Critical - Unsupported - SA-CONTRIB-2025-1025.3 Medium
- drupal protected pages, protected pages project pages +1 moreProtected Pages - Moderately critical - Access bypass - SA-CONTRIB-2025-1016.5 Medium
- drupal facetsFacets - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-1006.1 Medium
- drupal facetsFacets - Moderately critical - Information Disclosure - SA-CONTRIB-2025-0996.5 Medium
- authenticator login project login, drupal authenticator login +1 moreAuthenticator Login - Moderately critical - Access bypass - SA-CONTRIB-2025-0988.8 High
- Show moreLoading…