CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- galleryvault gallery vault app, gallery vault +1 moreGalleryVault Gallery Vault App com.thinkyeah.galleryvault AndroidManifest.xml improper export of android application components4.8 Medium
- campcodes advanced online voting systemCampcodes Advanced Online Voting System login.php sql injection6.9 Medium
- campcodes online shopping systemCampcodes Online Shopping System product.php sql injection6.9 Medium
- campcodes online shopping systemCampcodes Online Shopping System login.php sql injection6.9 Medium
- apache friends xamppXAMPP WebDAV PHP Upload Authentication Bypass RCE8.7 High
- wm downloader downloaderWM Downloader 3.1.2.2 Buffer Overflow via Malformed M3U File8.4 High
- sunway forcecontrolSunway Forcecontrol SNMP NetDBServer.exe Opcode 0x579.3 Critical
- zhengzhou jinhui computer system engineering co. ltd. ; beijing dazheng human language technology academy green dam youth escortGreen Dam 3.17 URL Processing Buffer Overflow8.6 High
- dogfood crm crmDogfood CRM spell.php RCE9.3 Critical
- contentkeeper technologies web applianceContentKeeper Web Appliance < 125.10 RCE via mimencode10.0 Critical
- cactiCacti graph_view.php RCE via graph_start Parameter Injection8.7 High
- bs.player free and pro editionsBS.Player 2.57 Buffer Overflow via M3U Playlist Import10.0 Critical
- belkin international, inc. bulldog plus ups monitoring softwareBelkin Bulldog Plus Web Service Buffer Overflow9.3 Critical
- activepdf webgrabberactivePDF WebGrabber ActiveX Control Buffer Overflow7.5 High
- donbermoy advanced school management systemSourceCodester Advanced School Management System vendordetails sql injection5.3 Medium
- donbermoy advanced school management systemSourceCodester Advanced School Management System item_select sql injection5.3 Medium
- ibm watsonx orchestrate cartridge for ibm cloud pak for dataIBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data SQL injection7.6 High
mupen64plusopenSUSE,mupen64plus-coreDebian +1 moreMupen64Plus is_viewer.c write_is_viewer integer overflow2.3 Low- portabilis i-educarPortabilis i-Educar processamentoApi improper authorization5.3 Medium
- portabilis i-educarPortabilis i-Educar Listagem de áreas de conhecimento edit sql injection5.3 Medium
- portabilis i-educarPortabilis i-Educar Listagem de áreas de conhecimento view sql injection5.3 Medium
- portabilis i-educarPortabilis i-Educar Formula de Cálculo de Média edit sql injection5.3 Medium
- zoneland o2oaO2OA Personal Profile form cross site scripting5.1 Medium
- zoneland o2oaO2OA Personal Profile appdict cross site scripting5.1 Medium
- debian linux, linux kernel, siemens simatic cn 4100 +2 moref2fs: fix to avoid out-of-boundary access in dnode page7.8 High
- zoneland o2oaO2OA Personal Profile agent cross site scripting5.1 Medium
- zoneland o2oaO2OA Personal Profile page cross site scripting5.1 Medium
- code-projects student information systemitsourcecode Student Information System course_edit1.php sql injection6.9 Medium
- tobiasbg tablepress – tables in wordpress made easyTablePress <= 3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode_debug Parameter6.4 Medium
- oceanwp ocean extraOcean Extra <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via oceanwp_library Shortcode6.4 Medium
- sunnet technology co., ltd. corporate training management system, sun.net ehrd ctms +1 moreSUNNET Corporate Training Management System - SQL Injection9.3 Critical
- sunnet technology co., ltd. corporate training management system, sun.net ehrd ctms +1 moreSUNNET Corporate Training Management System - External Control of File Name or Path10.0 Critical
- sunnet technology co., ltd. corporate training management system, sun.net ehrd ctms +1 moreSUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous Type6.9 Medium
- sunnet technology co., ltd. corporate training management system, sun.net ehrd ctms +1 moreSUNNET Corporate Training Management System - Missing Authorization9.3 Critical
- sunnet technology co., ltd. corporate training management system, sun.net ehrd ctms +1 moreSUNNET Corporate Training Management System - Missing Authentication for Critical Function9.3 Critical
- aa-team pro bulk watermark plugin for wordpressWordPress Pro Bulk Watermark Plugin for WordPress Theme <= 2.0 - Path Traversal Vulnerability4.3 Medium
- wpdreams related posts liteRelated Posts Lite <= 1.12 - Cross-Site Request Forgery4.3 Medium
- netsupport ltd. managerNetSupport Manager < 14.12.0000 Stack-Based Buffer Overflow8.8 High
- netsupport ltd. managerNetSupport Manager < 14.12.0000 Heap-Based Buffer Overflow9.3 Critical
- labredescefetrj wegiaWeGIA Authenticated Arbitrary File Upload Leading To Remote Code Execution (RCE)10.0 Critical
- vercel next.jsNext.js Affected by Cache Key Confusion for Image Optimization API Routes6.2 Medium
- vercel next.jsNext.js Content Injection Vulnerability for Image Optimization4.3 Medium
- nofusscomputing centurion erpCenturion ERP users can view hashed authentication tokens that belong to other users1.9 Low
- vercel next.jsNext.js Improper Middleware Redirect Handling Leads to SSRF6.5 Medium
- campcodes online loan management systemCampcodes Online Loan Management System ajax.php sql injection6.9 Medium
- modo legend of the phoenixModo Legend of the Phoenix com.duige.hzw.multilingual AndroidManifest.xml improper export of android application components4.8 Medium
- ncsoft universe, universe app +1 moreNCSOFT Universe App com.ncsoft.universeapp AndroidManifest.xml improper export of android application components4.8 Medium
- voice changer project changerVoice Changer App com.tuyangkeji.changevoice AndroidManifest.xml improper export of android application components4.8 Medium
- transbyte scooper news app, scooper news +1 moreTransbyte Scooper News App com.hatsune.eagleee AndroidManifest.xml improper export of android application components4.8 Medium
- suse rancherRancher Fleet Helm Values are stored inside BundleDeployment in plain text7.7 High
- Show moreLoading…