CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- dieboldnixdorf vynamic security suiteDiebold Nixdorf Vynamic Security Suite through 4.3.0 SR06 contains functionality that allows the...8.1 High
- trendnet tv-ip410 firmwareTRENDnet TV-IP410 vA1.0R was discovered to contain an OS command injection vulnerability via the ...9.8 Critical
- 9001 copypartyCross Site Scripting vulnerability in copyparty v.1.9.1 allows a local attacker to execute...7.8 High
- angeljudesuarez sports management systemitsourcecode Sports Management System login.php sql injection6.9 Medium
- code-projects student information management systemcode-projects Student Information Management System login.php cross site scripting5.3 Medium
- ubiquiti inc uisp applicationAn Improper Input Validation in UISP Application could allow a Command Injection by a malicious...3.4 Low
- admerc apartment management systemitsourcecode Apartment Management System complain_info.php sql injection6.9 Medium
- admerc apartment management systemitsourcecode Apartment Management System unit_status_info.php sql injection6.9 Medium
- lstm-kirigaya openmcp-clientLSTM-Kirigaya's openmcp-client Vulnerable to RCE in MCP Authorization Flow7.3 High
- openebs rawfile-localpvOpenEBS Local PV RawFile persistent volume data is world readable5.5 Medium
- admerc apartment management systemitsourcecode Apartment Management System bill_info.php sql injection6.9 Medium
- No product listedZrLog Theme Configuration Form config cross site scripting4.8 Medium
- weaver e-mobile mobile management platformWeaver E-Mobile Mobile Management Platform cross site scripting5.1 Medium
- cudy wr1200eaCudy WR1200EA shadow default password2.0 Low
- comfast cf-n1, cf-n1 firmware +1 moreComfast CF-N1 webmgnt wireless_device_dissoc command injection5.3 Medium
- comfast cf-n1, cf-n1 firmware +1 moreComfast CF-N1 webmgnt wifilith_delete_pic_file command injection5.3 Medium
- comfast cf-n1, cf-n1 firmware +1 moreComfast CF-N1 webmgnt update_interface_png command injection5.3 Medium
- comfast cf-n1, cf-n1 firmware +1 moreComfast CF-N1 webmgnt ping_config command injection5.3 Medium
- tukaani-project xzgithub.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archives5.3 Medium
- hashicorp vault, vault enterprise +1 moreVault unauthenticated denial of service through complex json payload7.5 High
- coderCoder before 2.23.0 Session Expiration Bypass via OIDC Without Refresh Token2.3 Low
- comfast cf-n1, cf-n1 firmware +1 moreComfast CF-N1 webmgnt ntp_timezone command injection5.3 Medium
- comfast cf-n1, cf-n1 firmware +1 moreComfast CF-N1 webmgnt multi_pppoe command injection5.3 Medium
- lb-link bl-x26, bl-x26 firmware +1 moreLB-LINK BL-X26 HTTP set_blacklist os command injection5.3 Medium
- lb-link bl-x26, b-link bl-x26 firmware +1 moreLB-LINK BL-X26 HTTP set_hidessid_cfg os command injection5.3 Medium
- totolink x2000r, x2000r firmware +1 moreTOTOLINK X2000R Administrative shadow.sample default credentials2.0 Low
- hcl software aiml solutions for sxAIML Solutions for HCL SX is susceptible to a URL validation vulnerability5.1 Medium
- seeedstudio respeaker, linkit smart 7688 firmware +1 moreseeedstudio ReSpeaker Administrative shadow default credentials2.0 Low
- linksys re6250, re6300, re6350 +9 more +11 moreLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 upload.cgi cgiMain os command injection5.3 Medium
- solidigm d7-ps1010/d7-ps1030Improper input validation in firmware of some Solidigm DC Products may allow an attacker with...4.4 Medium
- paymenterPaymenter Vulnerable to Remote Code Execution via Public File Uploads10.0 Critical
- hcl software bigfix service management (sm)A File Upload Validation Bypass vulnerability has been identified in the HCL BigFix Service Management (SM)5.4 Medium
- hcl software bigfix service management (sm), hcltech bigfix service management +1 moreA cryptographic weakness has been identified in the HCL BigFix Service Management (SM)5.3 Medium
- hcl software bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is affected by a Sensitive Information Exposure vulnerability6.5 Medium
- jetbrains junieIn JetBrains Junie before 252.284.66, 251.284.66, 243.284.66, 252.284.61, 251.284.61, 243.284.61,...5.5 Medium
- jetbrains ide servicesIn JetBrains IDE Services before 2025.5.0.1086, 2025.4.2.2164 users without appropriate...8.1 High
- edgelesssys contrastEdgelesssys Contrast before 1.12.2 Workload Secrets Information Disclosure8.5 High
- valtimo-platform valtimo-backend-librariesValtimo scripting engine can be used to gain access to sensitive data or resources9.1 Critical
- elastic endpoint, sangoma freepbx +1 moreFreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE10.0 Critical
- elastic kibanaKibana privilege escalation via reporting_user role6.5 Medium
- nagios xiNagios XI < 2024R1.3.2 Authenticated Arbitrary File Upload Path Traversal RCE8.7 High
- plone voltoVolto affected by possible DoS by invoking specific URL by anonymous user7.5 High
- asteriskAsterisk can crash from a specifically malformed Authorization header in an incoming SIP request7.5 High
- xwiki, xwiki xwiki-platform +1 moreXWiki PDF export jobs store sensitive cookies unencrypted in job statuses5.8 Medium
- asterisk, sangoma certified asterisk +1 moreAsterisk remotely exploitable leak of RTP UDP ports and internal resources6.5 Medium
- contaoContao has improper privilege management for page and article fields4.3 Medium
- contaoContao discloses information in the news module5.3 Medium
- contaoContao discloses sensitive information in the front end search index5.3 Medium
- contaoContao has improper access control in the back end voters4.3 Medium
- lycheeverse lychee-actionlychee-action vulnerable to arbitrary code injection in composite action6.9 Medium
- Show moreLoading…