CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- qnap file station, qnap systems inc. file station 5 +1 moreFile Station 55.3 Medium
- qnap file station, qnap systems inc. file station 5 +1 moreFile Station 57.1 High
- qnap file station, qnap systems inc. file station 5 +1 moreFile Station 55.3 Medium
- qnap license centerLicense Center7.1 High
- qnap photo stationPhoto Station2.0 Low
- code-projects simple grading systemcode-projects Simple Grading System Admin Panel add_student_grade.php sql injection5.3 Medium
- code-projects simple grading systemcode-projects Simple Grading System Admin Panel edit_account.php sql injection5.3 Medium
- harnessHarness Affected by Arbitrary File Write in Gitness LFS server8.8 High
- code-projects simple grading systemcode-projects Simple Grading System Admin Panel login.php sql injection6.9 Medium
- janobe bakeshop online ordering systemSourceCodester Bakeshop Online Ordering System passwordrecover.php sql injection6.9 Medium
github.com/versity/versitygwGoVersity panic induced by AWS chunked data sent to port7.7 High- zoneland o2oaO2OA Personal Profile widget cross site scripting5.1 Medium
- zoneland o2oaO2OA Personal Profile dict cross site scripting5.1 Medium
- gitpod-io gitpodGitpod Classic Affected by Bitbucket OAuth Token Exposure via Redirect Fragment6.5 Medium
- facebook whatsapp business for ios, whatsapp for ios, meta platforms whatsapp +2 more +4 moreIncomplete authorization of linked device synchronization messages in WhatsApp for iOS prior to...5.4 Medium
- github.com/gorilla/csrfImproper validation of TrustedOrigins allows CSRF attacks in github.com/gorilla/csrf7.3 High
- opentext self service password resetAuthentication Bypass vulnerability discovered in the OpenText™ Self-Service Password Reset7.3 High
- suse rancherRancher affected by unauthenticated Denial of Service8.2 High
- apereo opencastOpencast has a partial path traversal vulnerability in UI config2.7 Low
- zoneland o2oaO2OA Personal Profile script cross site scripting5.1 Medium
- itsourcecode directory management systemPHPGurukul Directory Management System add-directory.php cross site scripting5.3 Medium
- enalean tuleapTuleap's special and always there fields permissions are not verified in cross-tracker search5.3 Medium
- zoneland o2oaO2OA Personal Profile person cross site scripting5.1 Medium
- aiondadotcom mcp-sshAiondaDotCom mcp-ssh server-simple.mjs command injection5.3 Medium
- exiv2Exiv2 has quadratic performance in ICC profile parsing in JpegBase::readMetadata1.8 Low
- exiv2Exiv2 Segmentation Faults in Exiv2::EpsImage::writeMetadata() via crafted EPS file1.8 Low
- portabilis i-educarPortabilis i-Educar Cadastrar projeto educar_projeto_cad.php cross site scripting5.1 Medium
- portabilis i-educarPortabilis i-Educar Cadastrar tipo de transferência educar_transferencia_tipo_cad.php cross site scripting5.1 Medium
- chatboxai chatboxshafhasan chatbox chat.php sql injection5.3 Medium
- yeqifu carrentalyeqifu carRental AppFileUtils.java removeFileByPath path traversal5.3 Medium
- appneta tcpreplayappneta tcpreplay send_packets.c calc_sleep_time divide by zero4.8 Medium
- mtons mblogmtons mblog list cross site scripting5.3 Medium
- zoneland o2oaO2OA calendarConfig cross site scripting5.1 Medium
- admerc apartment management systemitsourcecode Apartment Management System r_all_info.php sql injection6.9 Medium
- admerc apartment management systemitsourcecode Apartment Management System bill_setup.php sql injection6.9 Medium
- admerc apartment management systemitsourcecode Apartment Management System utility_bill_setup.php sql injection6.9 Medium
- tokio-rs tracingTracing logging user input may result in poisoning logs with ANSI escape sequences2.3 Low
- acdh-ch openatlasCross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CH5.1 Medium
- acdh-ch openatlasCross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CH5.1 Medium
- acdh-ch openatlasCross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CH5.1 Medium
- acdh-ch openatlasCross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CH5.1 Medium
- acdh-ch openatlasCross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CH5.1 Medium
- acdh-ch openatlasCross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CH5.1 Medium
- acdh-ch openatlasCross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CH5.1 Medium
- acdh-ch openatlasCross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CH5.1 Medium
- revolution slider slider revolutionSlider Revolution <= 6.7.36 - Authenticated (Contributor+) Arbitrary File Read via 'used_svg' and 'used_images'6.5 Medium
- booster for woocommerce, pluggabl booster for woocommerce – pdf invoices, abandoned cart, variation swatches & 100+ tools +1 moreBooster for WooCommerce <= 7.2.4 - Unauthenticated Double Extension Arbitrary File Upload8.1 High
- payload cms payloadUser Session Fixation after Account Removal in PayloadCMS5.3 Medium
- payload cms payloadLack of JWT Expiration after Log Out in PayloadCMS6.3 Medium
- oberon microsystems ag psa cryptoInsecure RSA-OAEP implementation with all-zero seed for padding in Oberon PSA Crypto2.3 Low
- Show moreLoading…