CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- oberon microsystems ag psa cryptoTiming side-channel vulnerability in AES-CBC decryption with PKCS#7 padding in Oberon PSA Crypto library5.9 Medium
- oberon microsystems ag ocryptoTiming side-channel vulnerability in AES-CBC decryption with PKCS#7 padding in ocrypto library5.9 Medium
- nicheaddons events addon for elementorEvents Addon for Elementor <= 2.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typewriter and Countdown Widgets6.4 Medium
- synology radius serverImproper neutralization of input during web page generation ('Cross-site Scripting')...5.9 Medium
- konica minolta, inc. multiple products in bizhub seriesUncaught exception issue exists in Multiple products in bizhub series. If a malformed file is...5.3 Medium
- iatspaymentsdev iats online formsiATS Online Forms <= 1.2 - Authenticated (Contributor+) SQL Injection via order Parameter6.5 Medium
- garbowza osm map widget for elementorOSM Map Widget for Elementor <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button URL6.4 Medium
- weblineindia list sub pagesList Subpages <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via title Parameter6.4 Medium
- briancolinger ultimate tag warrior importerUltimate Tag Warrior Importer <= 0.2 - Cross-Site Request Forgery4.3 Medium
- aurelienlws lwscacheLWSCache <= 2.8.5 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Activation via lwscache_activatePlugin Function4.3 Medium
- ind co.,ltd f2l assist-ss-a, f2l assist-ss-e, hl320-dls (for module mc7330) +9 more +11 moreMultiple products provided by iND Co.,Ltd contain an OS command injection vulnerability. If...8.6 High
- ind co.,ltd f2l assist-ss-a, f2l assist-ss-e, hl320-dls (for module mc7330) +9 more +11 moreMultiple products provided by iND Co.,Ltd contain an insecure storage of sensitive information...7.1 High
- e4 sistemas mercatus erpE4 Sistemas Mercatus ERP id resource injection6.9 Medium
- ai3 qbicrmgatewayAi3｜QbiCRMGateway - Arbitrary File Reading through Path Traversal8.7 High
- changing clinic image systemChanging｜Clinic Image System - SQL Injection8.7 High
- changing clinic image systemChanging｜Clinic Image System - Use of Hard-coded Credentials9.3 Critical
- carmelo online event judging systemcode-projects Online Event Judging System create_account.php sql injection6.9 Medium
- portabilis i-educarPortabilis i-Educar consulta improper authorization5.3 Medium
- changing tsaChanging｜TSA - Missing Authentication9.3 Critical
- portabilis i-educarPortabilis i-Educar Formula de Cálculo de Média view sql injection5.3 Medium
- portabilis i-educarPortabilis i-Educar Tabelas de Arredondamento view sql injection5.3 Medium
- portabilis i-educarPortabilis i-Educar agenda_preferencias.php sql injection5.3 Medium
- tenda ac21, ac23, ac21 firmware +1 more +3 moreTenda AC21/AC23 GetParentControlInfo stack-based overflow9.3 Critical
- naver mybox explorer, navercorp mybox +1 moreNAVER MYBOX Explorer for Windows before 3.0.8.133 allows a local attacker to escalate privileges...7.7 High
- hikvision hikcentral professionalThere is an Access Control Vulnerability in some HikCentral Professional versions. This could...8.6 High
- hikvision hikcentral focsignThere is an Unquoted Service Path Vulnerability in some HikCentral FocSign versions. This could...5.3 Medium
- hikvision hikcentral master liteThere is a CSV Injection Vulnerability in some HikCentral Master Lite versions. This could allow...4.7 Medium
- bytedance coze-studiocoze-studio aes.go hard-coded key6.3 Medium
- telesquare tlr-2005ksh, tlr-2005ksh firmware +1 moreTelesquare TLR-2005KSH internet.cgi command injection5.3 Medium
- rockoaXinhu RockOA index.php publicsaveAjax improper authorization5.3 Medium
- admerc apartment management systemitsourcecode Apartment Management System employee_salary_setup.php sql injection6.9 Medium
- admerc apartment management systemitsourcecode Apartment Management System member_type_setup.php sql injection6.9 Medium
- admerc apartment management systemitsourcecode Apartment Management System month_setup.php sql injection6.9 Medium
- apple macosThis issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia...5.5 Medium
- apple macosThis issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14...7.8 High
- apple macosAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS...5.5 Medium
- apple macosThe issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.2....4.3 Medium
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app...3.3 Low
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...7.8 High
- apple macosAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS...3.3 Low
- manwar cgi::simpleCGI::Simple versions 1.281 and earlier for Perl has a HTTP response splitting flaw7.3 High
- admerc apartment management systemitsourcecode Apartment Management System year_setup.php sql injection6.9 Medium
- admerc apartment management systemitsourcecode Apartment Management System rented_all_info.php sql injection6.9 Medium
- evope coreAn issue in Evope Core v.1.1.3.20 allows a local attacker to obtain sensitive information via the...8.4 High
- civetweb project civetwebBuffer Overflow in the URI parser of CivetWeb 1.14 through 1.16 (latest) allows a remote attacker...7.5 High
- solidinvoiceSolidInvoice 2.3.7 and v.2.3.8 is vulnerable to Cross Site Scripting (XSS) in the client's...5.4 Medium
- solidinvoiceSolidInvoice 2.3.7 and fixed in v.2.3.8 is vulnerable to Cross Site Scripting (XSS) in the Tax...5.4 Medium
- akamai akamaighostAkamai Ghost before 2025-07-21 allows HTTP Request Smuggling via an OPTIONS request that has an...4.0 Medium
- aaluoxiang oa systemSQL injection vulnerability in oa_system oasys v.1.1 allows a remote attacker to execute...9.8 Critical
- dieboldnixdorf vynamic security suiteDiebold Nixdorf Vynamic Security Suite through 4.3.0 SR01 does not validate file attributes or...8.1 High
- Show moreLoading…