CVE-2025 records published in August 2025

This page lists the 3,350 CVE-2025 records published in August 2025, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 12 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2025 list filters these records by severity or signal.

Critical
52815.8% of these records
Listed in CISA KEV
120.4% of these records
Reported exploited
80.2% of these records
Detection signal
762.3% of these records
Exploit code
1123.3% of these records
Actionable vendor fix
2,08462.2% of these records

Figures as of 2026-10-24 13:47 UTC. Records published in August 2025 have had from about 14 months to about 15 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.

CVE-2025 records published in August 2025, newest first: records 1 to 1,000 of 3,350
CVE Summary CVSS EPSS Published Signals
CVE-2025-47696Blog Designer PRO WordPress plugin unauthenticated Non-arbitrary local file inclusion8.1CNA v3.10.5%2025-08-31
CVE-2025-31100WordPress School Management plugin (02-07-2025) arbitrary file upload9.9CNA v3.10.4%2025-08-31
CVE-2025-9750Campcodes Online Learning Management System login.php SQL injection9.8v3.10.4%2025-08-31
CVE-2025-9749HKritesh009 Grocery List Management Web App update.php SQL injection9.8v3.10.5%2025-08-31
CVE-2025-9748Tenda CH22 httpd IPSECsave fromIpsecitem stack-based overflow9.8v3.10.8%2025-08-31
CVE-2025-9747Koillection csrf_protection_controller.js cross-site request forgery8.8v3.10.4%2025-08-31Fix
CVE-2025-9746Campcodes Hospital Management System Edit Doctor Specialization cross-site scripting4.8v3.10.3%2025-08-31
CVE-2025-9745D-Link DI-500WF jhttpd version_upgrade.asp os command injection7.2v3.111.0%2025-08-31
CVE-2025-9744Campcodes Online Loan Management System ajax.php SQL injection9.8v3.11.8%2025-08-31Nuclei
CVE-2025-9743code-projects Human Resource Integrated System login_attendance2.php SQL injection9.8v3.10.5%2025-08-31
CVE-2025-9742code-projects Human Resource Integrated System login.php SQL injection7.5v3.10.4%2025-08-31
CVE-2025-9741code-projects Human Resource Integrated System login_query12.php SQL injection5.3NVD v3.10.4%2025-08-31
CVE-2025-9740code-projects Human Resource Integrated System log_query.php SQL injection9.8v3.10.5%2025-08-31
CVE-2025-9739Campcodes Online Water Billing System process.php SQL injection9.8v3.10.4%2025-08-31
CVE-2025-9738Portabilis i-Educar educar_tipo_ensino_cad.php cross-site scripting5.4v3.10.3%2025-08-31
CVE-2025-9737O2OA Personal Profile importmodel cross-site scripting5.4v3.10.3%2025-08-31
CVE-2025-9736O2OA Personal Profile statement cross-site scripting5.4v3.10.3%2025-08-31
CVE-2025-9735O2OA Personal Profile table cross-site scripting5.4v3.10.3%2025-08-31
CVE-2025-9734O2OA Personal Profile stat cross-site scripting5.4v3.10.3%2025-08-31
CVE-2025-9733code-projects Human Resource Integrated System login_timeee.php SQL injection9.8v3.10.5%2025-08-31
CVE-2025-9732DCMTK dcm2img diybrpxt.h memory corruption7.8v3.10.2%2025-08-31Fix
CVE-2025-9731Tenda AC9 Administrative shadow hard-coded credentials7.0v3.10.1%2025-08-31
CVE-2025-9730itsourcecode Apartment Management System updateProfile.php SQL injection9.8v3.10.4%2025-08-31
CVE-2025-9729PHPGurukul Online Course Registration student-registration.php SQL injection9.8v3.10.4%2025-08-31
CVE-2025-9728givanz Vvveb login.tpl cross-site scripting6.1v3.10.4%2025-08-31Exploit code
CVE-2025-9727D-Link DIR-816L soap.cgi soapcgi_main os command injection9.8v3.14.8%2025-08-31
CVE-2025-9726Campcodes Farm Management System review.php SQL injection9.8v3.10.4%2025-08-31
CVE-2025-9725Cudy LT500E Web shadow hard-coded password8.8v3.10.4%2025-08-31
CVE-2025-9724Portabilis i-Educar educar_nivel_ensino_cad.php cross-site scripting5.4v3.10.2%2025-08-31
CVE-2025-9723Portabilis i-Educar educar_tipo_regime_cad.php cross-site scripting5.4v3.10.2%2025-08-31
CVE-2025-9722Portabilis i-Educar educar_tipo_ocorrencia_disciplinar_cad.php cross-site scripting5.4v3.10.2%2025-08-31
CVE-2025-9721Portabilis i-Educar edit cross-site scripting5.4v3.10.2%2025-08-31
CVE-2025-9720Portabilis i-Educar Cadastrar tabela de arredondamento edit cross-site scripting5.4v3.10.2%2025-08-31
CVE-2025-9719O2OA Personal Profile script cross-site scripting5.4v3.10.3%2025-08-31
CVE-2025-9718O2OA Personal Profile process cross-site scripting5.4v3.10.3%2025-08-31
CVE-2025-9717O2OA Personal Profile unit cross-site scripting5.4v3.10.3%2025-08-31
CVE-2025-9716O2OA Personal Profile form cross-site scripting5.4v3.10.3%2025-08-31
CVE-2025-9715O2OA Personal Profile script cross-site scripting5.4v3.10.3%2025-08-31
CVE-2025-5083Amministrazione Trasparente WordPress plugin stored cross-site scripting5.5CNA v3.10.3%2025-08-31Fix
CVE-2025-54946Sunnet Corporate Training Management System SQL injection9.8v3.10.5%2025-08-30Fix
CVE-2025-54945Sunnet Corporate Training Management System external control of file name or path9.8v3.10.5%2025-08-30Fix
CVE-2025-54944Sunnet Corporate Training Management System unrestricted upload of file with dangerous type9.8v3.10.7%2025-08-30Fix
CVE-2025-54943Sunnet Corporate Training Management System missing authorization9.8v3.10.5%2025-08-30Fix
CVE-2025-54942Sunnet Corporate Training Management System missing authentication for critical function9.8v3.10.5%2025-08-30Fix
CVE-2025-38677Linux kernel f2fs dnode page handling out-of-bounds read7.8CNA v3.10.2%2025-08-30Fix
CVE-2025-34165NetSupport Manager stack-based buffer overflow8.8CNA v4.00.5%2025-08-30Fix
CVE-2025-34164NetSupport Manager heap-based buffer overflow9.3CNA v4.00.7%2025-08-30Fix
CVE-2025-9706SourceCodester Water Billing System edit.php SQL injection9.8v3.10.4%2025-08-30
CVE-2025-9705SourceCodester Water Billing System paybill.php SQL injection9.8v3.10.4%2025-08-30
CVE-2025-9704SourceCodester Water Billing System viewbill.php SQL injection9.8v3.10.4%2025-08-30
CVE-2025-9702SourceCodester Simple Cafe Billing System sales_report.php SQL injection9.8v3.10.4%2025-08-30
CVE-2025-9701SourceCodester Simple Cafe Billing System receipt.php SQL injection9.8v3.10.4%2025-08-30
CVE-2025-9700SourceCodester Online Book Store publisher_list.php SQL injection9.8v3.10.4%2025-08-30
CVE-2025-9699SourceCodester Online Polling System Code checklogin.php SQL injection9.8v3.10.5%2025-08-30
CVE-2025-9695Gallery Vault App com.thinkyeah.galleryvault vulnerability5.5v3.10.2%2025-08-30
CVE-2025-9694Campcodes Advanced Online Voting System login.php SQL injection9.8v3.10.5%2025-08-30
CVE-2025-9692Campcodes Online Shopping System product.php SQL injection9.8v3.10.6%2025-08-30
CVE-2025-9691Campcodes Online Shopping System login.php SQL injection9.8v3.10.4%2025-08-30
CVE-2025-9690SourceCodester Advanced School Management System vendordetails SQL injection8.8v3.10.3%2025-08-30
CVE-2025-9689SourceCodester Advanced School Management System item_select SQL injection8.8v3.10.3%2025-08-30
CVE-2025-9688Mupen64Plus is_viewer.c write_is_viewer integer overflow2.3CNA v4.00.3%2025-08-30Fix
CVE-2025-9687Portabilis i-Educar processamentoApi improper authorization8.8v3.10.4%2025-08-30
CVE-2025-9686Portabilis i-Educar Listagem de áreas de conhecimento edit SQL injection8.8v3.10.4%2025-08-30
CVE-2025-9685Portabilis i-Educar Listagem de áreas de conhecimento view SQL injection8.8v3.10.4%2025-08-30
CVE-2025-9684Portabilis i-Educar Formula de Cálculo de Média edit SQL injection8.8v3.10.4%2025-08-30
CVE-2025-9683O2OA Personal Profile form cross-site scripting5.4v3.10.3%2025-08-30
CVE-2025-9682O2OA Personal Profile appdict cross-site scripting5.4v3.10.3%2025-08-30
CVE-2025-9681O2OA Personal Profile agent cross-site scripting5.4v3.10.3%2025-08-30
CVE-2025-9680O2OA Personal Profile page cross-site scripting5.4v3.10.4%2025-08-30
CVE-2025-9679itsourcecode Student Information System course_edit1.php SQL injection9.8v3.10.4%2025-08-30
CVE-2025-9618Related Posts Lite WordPress plugin cross-site request forgery4.3CNA v3.10.1%2025-08-30
CVE-2025-9500TablePress WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-08-30Fix
CVE-2025-9499Ocean Extra WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-08-30Fix
CVE-2025-4956Pro Bulk Watermark Plugin for WordPress path traversal4.3CNA v3.10.3%2025-08-30
CVE-2025-0165IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data SQL injection7.6CNA v3.10.4%2025-08-30Fix
CVE-2025-58323NAVER MYBOX Explorer incorrect privilege assignment7.7CISA ADP v3.10.1%2025-08-29Fix
CVE-2025-58160Tracing logging user input may result in poisoning logs with ANSI escape sequences2.3CNA v4.00.3%2025-08-29Fix
CVE-2025-58159WeGIA authenticated arbitrary file upload leading to remote code execution (RCE)10.0CNA v3.10.8%2025-08-29Fix
CVE-2025-58158Harness affected by arbitrary file write in Gitness LFS server8.8CNA v3.10.5%2025-08-29Fix
CVE-2025-58157gnark affected by denial of service when computing scalar multiplication using fake-GLV algorithm7.5CNA v3.10.5%2025-08-29Fix
CVE-2025-58156Centurion ERP authentication tokens information disclosure1.9CNA v3.10.3%2025-08-29Fix
CVE-2025-58068Eventlet affected by HTTP request smuggling in unparsed trailers6.3CNA v4.00.4%2025-08-29Fix
CVE-2025-58067Basecamp's Google Sign-In for Rails allowed redirects to protocol-relative URI4.2CNA v3.10.2%2025-08-29Fix
CVE-2025-58066DoS vulnerability in ntpd-rs5.3CNA v3.10.3%2025-08-29Fix
CVE-2025-57822Next.js Improper Middleware Redirect Handling leads to SSRF6.5CNA v3.12.5%2025-08-29NucleiFix
CVE-2025-57752Next.js affected by Cache Key Confusion for Image Optimization API Routes6.2CNA v3.10.3%2025-08-29Fix
CVE-2025-56577Evope Core hard-coded cryptographic key8.4CISA ADP v3.10.1%2025-08-29
CVE-2025-55763civetweb URI parser buffer overflow7.5CISA ADP v3.11.2%2025-08-29Exploit codeFix
CVE-2025-55750Gitpod Classic affected by Bitbucket OAuth token exposure via Redirect Fragment6.5CNA v3.10.3%2025-08-29
CVE-2025-55580SolidInvoice cross-site scripting5.4CISA ADP v3.10.3%2025-08-29Exploit code
CVE-2025-55579SolidInvoice cross-site scripting5.4CISA ADP v3.10.3%2025-08-29Exploit code
CVE-2025-55304Exiv2 has quadratic performance in ICC profile parsing in JpegBase::readMetadata1.8CNA v4.00.2%2025-08-29Fix
CVE-2025-55202Opencast has a partial path traversal vulnerability in UI config2.7CNA v4.00.4%2025-08-29Fix
CVE-2025-55177Meta Platforms WhatsApp incorrect authorization5.4CNA v3.14.7%2025-08-29KEVKCVFix
CVE-2025-55173Next.js content injection vulnerability for Image Optimization4.3CNA v3.10.5%2025-08-29Fix
CVE-2025-54877Tuleap's special and always there fields permissions are not verified in cross-tracker search5.3CNA v3.10.3%2025-08-29Fix
CVE-2025-54777Konica Minolta Multiple products in bizhub series improper error handling5.3CNA v4.00.1%2025-08-29
CVE-2025-54142AkamaiGhost HTTP request smuggling4.0CNA v3.10.3%2025-08-29Fix
CVE-2025-54080Exiv2 Segmentation Faults in Exiv2::EpsImage::writeMetadata via crafted EPS file1.8CNA v4.00.1%2025-08-29Fix
CVE-2025-53508iND HL330-DLS OS command injection8.6CNA v4.01.3%2025-08-29
CVE-2025-53507iND HL330-DLS insecure storage of sensitive information7.1CNA v4.00.3%2025-08-29
CVE-2025-52861QNAP VioStor path traversal7.0CNA v4.00.6%2025-08-29Fix
CVE-2025-52856QNAP VioStor improper authentication9.3CNA v4.00.6%2025-08-29Fix
CVE-2025-48979Ubiquiti UISP Application An improper input validation3.4CISA ADP v3.10.4%2025-08-29Fix
CVE-2025-47909Improper validation of TrustedOrigins allows CSRF attacks in github.com/gorilla/csrf7.3CISA ADP v3.10.2%2025-08-29
CVE-2025-44033aaluoxiang oa_system SQL injection9.8CISA ADP v3.10.6%2025-08-29
CVE-2025-44015QNAP HybridDesk Station command injection2.3CNA v4.00.9%2025-08-29Fix
CVE-2025-43773Liferay Portal allows improper access through the expandoTableLocalService4.6CNA v4.00.3%2025-08-29Fix
CVE-2025-43284Apple macOS out-of-bounds read5.5CISA ADP v3.10.2%2025-08-29Fix
CVE-2025-43268Apple macOS incorrect permission assignment7.8CISA ADP v3.10.2%2025-08-29Fix
CVE-2025-43255Apple macOS out-of-bounds read3.3CISA ADP v3.10.2%2025-08-29Fix
CVE-2025-43187Apple macOS arbitrary code execution7.8CISA ADP v3.10.2%2025-08-29Fix
CVE-2025-40927CGI::Simple for Perl has a HTTP response splitting flaw7.3CISA ADP v3.10.5%2025-08-29Fix
CVE-2025-40709Cross-site scripting (XSS) vulnerability in OpenAtlas by ACDH-CH5.4v3.10.2%2025-08-29Fix
CVE-2025-40708Cross-site scripting (XSS) vulnerability in OpenAtlas by ACDH-CH5.4v3.10.2%2025-08-29Fix
CVE-2025-40707Cross-site scripting (XSS) vulnerability in OpenAtlas by ACDH-CH5.4v3.10.2%2025-08-29Fix
CVE-2025-40706Cross-site scripting (XSS) vulnerability in OpenAtlas by ACDH-CH5.4v3.10.2%2025-08-29Fix
CVE-2025-40705Cross-site scripting (XSS) vulnerability in OpenAtlas by ACDH-CH5.4v3.10.2%2025-08-29Fix
CVE-2025-40704Cross-site scripting (XSS) vulnerability in OpenAtlas by ACDH-CH5.4v3.10.2%2025-08-29Fix
CVE-2025-40703Cross-site scripting (XSS) vulnerability in OpenAtlas by ACDH-CH5.4v3.10.2%2025-08-29Fix
CVE-2025-40702Cross-site scripting (XSS) vulnerability in OpenAtlas by ACDH-CH5.4v3.10.2%2025-08-29Fix
CVE-2025-39247Hikvision HikCentral Professional some improper access control8.6CNA v3.10.5%2025-08-29Exploit code
CVE-2025-39246Hikvision HikCentral FocSign unquoted search path5.3CNA v3.10.3%2025-08-29
CVE-2025-39245Hikvision HikCentral Master Lite some CSV injection4.7CNA v3.10.3%2025-08-29
CVE-2025-33038QNAP Qsync Central path traversal7.2CNA v4.00.5%2025-08-29Fix
CVE-2025-33037QNAP Qsync Central path traversal7.2CNA v4.00.5%2025-08-29Fix
CVE-2025-33036QNAP Qsync Central path traversal7.2CNA v4.00.5%2025-08-29Fix
CVE-2025-33033QNAP Qsync Central path traversal7.2CNA v4.00.5%2025-08-29Fix
CVE-2025-33032QNAP QTS and QuTS hero path traversal5.1CNA v4.00.5%2025-08-29Fix
CVE-2025-30278QNAP Qsync Central improper certificate validation8.3CNA v4.00.2%2025-08-29Fix
CVE-2025-30277QNAP Qsync Central improper certificate validation8.3CNA v4.00.2%2025-08-29Fix
CVE-2025-30275QNAP Qsync Central null pointer dereference5.3CNA v4.00.4%2025-08-29Fix
CVE-2025-30274QNAP QTS and QuTS hero null pointer dereference5.1CNA v4.00.3%2025-08-29Fix
CVE-2025-30273QNAP QTS and QuTS hero out-of-bounds write7.1CNA v4.00.4%2025-08-29Fix
CVE-2025-30272QNAP QTS and QuTS hero null pointer dereference5.1CNA v4.00.3%2025-08-29Fix
CVE-2025-30271QNAP QTS and QuTS hero path traversal5.3CNA v4.00.5%2025-08-29Fix
CVE-2025-30270QNAP QTS and QuTS hero path traversal5.3CNA v4.00.5%2025-08-29Fix
CVE-2025-30268QNAP QTS and QuTS hero null pointer dereference5.3CNA v4.00.4%2025-08-29Fix
CVE-2025-30267QNAP QTS and QuTS hero null pointer dereference5.3CNA v4.00.4%2025-08-29Fix
CVE-2025-30265QNAP QTS and QuTS hero buffer overflow2.3CNA v4.00.4%2025-08-29Fix
CVE-2025-30264QNAP QTS and QuTS hero command injection7.7CNA v4.00.9%2025-08-29Fix
CVE-2025-30263QNAP Qsync Central null pointer dereference5.3CNA v4.00.5%2025-08-29Fix
CVE-2025-30262QNAP Qsync Central null pointer dereference5.3CNA v4.00.5%2025-08-29Fix
CVE-2025-30261QNAP Qsync Central resource exhaustion7.1CNA v4.00.5%2025-08-29Fix
CVE-2025-30260QNAP Qsync Central resource exhaustion7.1CNA v4.00.5%2025-08-29Fix
CVE-2025-29900QNAP File Station 5 resource exhaustion7.1CNA v4.00.5%2025-08-29Fix
CVE-2025-29899QNAP File Station 5 resource exhaustion7.1CNA v4.00.5%2025-08-29Fix
CVE-2025-29898QNAP Qsync Central resource exhaustion6.0CNA v4.00.5%2025-08-29Fix
CVE-2025-29894QNAP Qsync Central SQL injection7.5CNA v4.00.5%2025-08-29Fix
CVE-2025-29893QNAP Qsync Central SQL injection7.5CNA v4.00.5%2025-08-29Fix
CVE-2025-29890QNAP File Station 5 resource exhaustion7.1CNA v4.00.5%2025-08-29Fix
CVE-2025-29889QNAP File Station 5 null pointer dereference5.3CNA v4.00.5%2025-08-29Fix
CVE-2025-29888QNAP File Station 5 null pointer dereference5.3CNA v4.00.5%2025-08-29Fix
CVE-2025-29887QNAP QuRouter command injection7.1CNA v4.00.8%2025-08-29Fix
CVE-2025-29886QNAP File Station 5 null pointer dereference5.3CNA v4.00.5%2025-08-29Fix
CVE-2025-29882QNAP QTS and QuTS hero null pointer dereference5.3CNA v4.00.5%2025-08-29Fix
CVE-2025-29879QNAP File Station 5 null pointer dereference5.3CNA v4.00.5%2025-08-29Fix
CVE-2025-29878QNAP File Station 5 null pointer dereference5.3CNA v4.00.5%2025-08-29Fix
CVE-2025-29875QNAP File Station 5 null pointer dereference7.1CNA v4.00.5%2025-08-29Fix
CVE-2025-29874QNAP File Station 5 null pointer dereference5.3CNA v4.00.5%2025-08-29Fix
CVE-2025-22483QNAP License Center cross-site scripting7.1CNA v4.00.2%2025-08-29Fix
CVE-2025-9678Campcodes Online Loan Management System ajax.php SQL injection9.8v3.10.4%2025-08-29
CVE-2025-9677Modo Legend of the Phoenix com.duige.hzw.multilingual vulnerability5.5v3.10.3%2025-08-29
CVE-2025-9676NCSOFT Universe App com.ncsoft.universeapp vulnerability5.5v3.10.3%2025-08-29
CVE-2025-9675Voice Changer App improper export of Android application components5.5v3.10.3%2025-08-29
CVE-2025-9674Transbyte Scooper News App com.hatsune.eagleee vulnerability5.5v3.10.3%2025-08-29
CVE-2025-9673Hey Kakao App com.kakao.i.connect vulnerability4.8CNA v4.00.1%2025-08-29
CVE-2025-9672Rejseplanen App de.hafas.android.rejseplanen vulnerability4.8CNA v4.00.1%2025-08-29
CVE-2025-9671UAB Paytend Paytend App com.passport.cash vulnerability4.8CNA v4.00.1%2025-08-29
CVE-2025-9670mixmark-io turndown commonmark-rules.js redos6.9CNA v4.00.5%2025-08-29Fix
CVE-2025-9669Jinher OA GetTreeDate.aspx SQL injection9.8v3.10.4%2025-08-29
CVE-2025-9667code-projects Simple Grading System Admin Panel delete_account.php SQL injection8.8v3.10.4%2025-08-29
CVE-2025-9666code-projects Simple Grading System Admin Panel delete_student.php SQL injection8.8v3.10.4%2025-08-29
CVE-2025-9665code-projects Simple Grading System Admin Panel edit_student.php SQL injection8.8v3.10.4%2025-08-29
CVE-2025-9664code-projects Simple Grading System Admin Panel add_student_grade.php SQL injection8.8v3.10.5%2025-08-29
CVE-2025-9663code-projects Simple Grading System Admin Panel edit_account.php SQL injection8.8v3.10.5%2025-08-29
CVE-2025-9662code-projects Simple Grading System Admin Panel login.php SQL injection9.8v3.10.6%2025-08-29
CVE-2025-9660SourceCodester Bakeshop Online Ordering System passwordrecover.php SQL injection9.8v3.10.5%2025-08-29
CVE-2025-9659O2OA Personal Profile widget cross-site scripting5.4v3.10.3%2025-08-29
CVE-2025-9658O2OA Personal Profile dict cross-site scripting5.4v3.10.3%2025-08-29
CVE-2025-9657O2OA Personal Profile script cross-site scripting5.4v3.10.3%2025-08-29
CVE-2025-9656PHPGurukul Directory Management System add-directory.php cross-site scripting6.1v3.10.3%2025-08-29
CVE-2025-9655O2OA Personal Profile person cross-site scripting5.4v3.10.3%2025-08-29
CVE-2025-9654AiondaDotCom mcp-ssh server-simple.mjs command injection5.3CNA v4.01.3%2025-08-29Fix
CVE-2025-9653Portabilis i-Educar Cadastrar projeto educar_projeto_cad.php cross-site scripting5.4v3.10.3%2025-08-29
CVE-2025-9652Portabilis i-Educar Cadastrar tipo de transferência page cross-site scripting5.4v3.10.3%2025-08-29
CVE-2025-9651shafhasan chatbox chat.php SQL injection5.3CNA v4.00.3%2025-08-29
CVE-2025-9650yeqifu carRental AppFileUtils.java removeFileByPath path traversal5.3CNA v4.00.4%2025-08-29
CVE-2025-9649appneta tcpreplay send_packets.c calc_sleep_time divide by zero5.5v3.10.3%2025-08-29Fix
CVE-2025-9647mtons mblog list cross-site scripting6.1v3.10.4%2025-08-29
CVE-2025-9646O2OA calendarConfig cross-site scripting5.4v3.10.3%2025-08-29
CVE-2025-9645itsourcecode Apartment Management System r_all_info.php SQL injection9.8v3.10.4%2025-08-29
CVE-2025-9644itsourcecode Apartment Management System bill_setup.php SQL injection9.8v3.10.4%2025-08-29
CVE-2025-9643itsourcecode Apartment Management System utility_bill_setup.php SQL injection9.8v3.10.4%2025-08-29
CVE-2025-9639Ai3|QbiCRMGateway arbitrary file reading through path traversal8.7CNA v4.00.6%2025-08-29Fix
CVE-2025-9619E4 Sistemas Mercatus ERP id resource injection6.9CNA v4.00.4%2025-08-29
CVE-2025-9610code-projects Online Event Judging System create_account.php SQL injection9.8v3.10.4%2025-08-29
CVE-2025-9609Portabilis i-Educar consulta improper authorization8.8v3.10.4%2025-08-29
CVE-2025-9608Portabilis i-Educar Formula de Cálculo de Média view SQL injection8.8v3.10.4%2025-08-29
CVE-2025-9607Portabilis i-Educar Tabelas de Arredondamento view SQL injection8.8v3.10.4%2025-08-29
CVE-2025-9606Portabilis i-Educar agenda_preferencias.php SQL injection8.8v3.10.3%2025-08-29
CVE-2025-9605Tenda AC21/AC23 GetParentControlInfo stack-based overflow9.3CNA v4.05.1%2025-08-29
CVE-2025-9604coze-studio aes.go hard-coded key6.3CNA v4.00.2%2025-08-29
CVE-2025-9603Telesquare TLR-2005KSH internet.cgi command injection9.8v3.16.2%2025-08-29
CVE-2025-9602Xinhu RockOA index.php publicsaveAjax improper authorization6.5v3.10.3%2025-08-29
CVE-2025-9601itsourcecode Apartment Management System employee_salary_setup.php SQL injection9.8v3.10.4%2025-08-29
CVE-2025-9600itsourcecode Apartment Management System member_type_setup.php SQL injection9.8v3.10.4%2025-08-29
CVE-2025-9599itsourcecode Apartment Management System month_setup.php SQL injection9.8v3.10.4%2025-08-29
CVE-2025-9598itsourcecode Apartment Management System year_setup.php SQL injection9.8v3.10.4%2025-08-29
CVE-2025-9597itsourcecode Apartment Management System rented_all_info.php SQL injection9.8v3.10.4%2025-08-29
CVE-2025-9596itsourcecode Sports Management System login.php SQL injection9.8v3.10.4%2025-08-29
CVE-2025-9595code-projects Student Information Management System login.php cross-site scripting6.1v3.10.4%2025-08-29
CVE-2025-9441iATS Online Forms WordPress plugin authenticated (Contributor+) SQL injection via order parameter6.5CNA v3.10.3%2025-08-29
CVE-2025-9377TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS command injection8.6CNA v4.036.9%2025-08-29KEVKCVFix
CVE-2025-9374Ultimate Tag Warrior Importer WordPress plugin cross-site request forgery4.3CNA v3.10.1%2025-08-29
CVE-2025-9217Slider Revolution WordPress plugin arbitrary file read6.5CNA v3.10.5%2025-08-29Fix
CVE-2025-9071Insecure RSA-OAEP implementation with all-zero seed for padding in Oberon PSA Crypto2.3CNA v4.00.2%2025-08-29
CVE-2025-8861Changing|TSA missing authentication9.3CNA v4.00.5%2025-08-29Fix
CVE-2025-8858Changing|Clinic Image System SQL injection8.7CNA v4.00.4%2025-08-29Fix
CVE-2025-8857Changing|Clinic Image System use of hard-coded credentials9.3CNA v4.00.5%2025-08-29Fix
CVE-2025-8619OSM Map Widget for Elementor WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-08-29Fix
CVE-2025-8290List Subpages WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-08-29Fix
CVE-2025-8150Events Addon for Elementor WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-08-29Fix
CVE-2025-8147LWSCache WordPress plugin missing authorization authenticated limited plugin activation4.3CNA v3.10.2%2025-08-29Fix
CVE-2025-7383Oberon microsystems PSA Crypto AES-CBC PKCS#7 padding decryption timing side channel5.9CNA v4.00.1%2025-08-29
CVE-2025-7071Timing side-channel vulnerability in AES-CBC decryption with PKCS#7 padding in ocrypto library5.9CNA v4.00.1%2025-08-29
CVE-2025-5808Authentication bypass vulnerability discovered in the OpenText™ Self-Service Password Reset7.3CNA v4.00.3%2025-08-29
CVE-2025-4644User session fixation after Account Removal in PayloadCMS5.3CNA v4.00.4%2025-08-29Fix
CVE-2025-4643Lack of JWT Expiration after Log Out in PayloadCMS6.3CNA v4.00.4%2025-08-29Fix
CVE-2025-58335JetBrains Junie missing warning for unsafe actions5.5CNA v3.10.2%2025-08-28Fix
CVE-2025-58334JetBrains IDE Services missing authorization8.1CNA v3.10.3%2025-08-28Fix
CVE-2025-58322NAVER MYBOX Explorer incorrect privilege assignment7.8CISA ADP v3.10.1%2025-08-28Fix
CVE-2025-58127Lack of TLS validation in plugin Dell Powerscale on Checkmk Exchange6.9CNA v4.00.1%2025-08-28
CVE-2025-58126Lack of TLS validation in plugin VMware vSAN on Checkmk Exchange6.9CNA v4.00.1%2025-08-28
CVE-2025-58125Lack of TLS validation in plugin Freebox V6 Agent on Checkmk Exchange6.9CNA v4.00.1%2025-08-28
CVE-2025-58124Heinlein-support Check Mk Python API improper certificate validation6.9CNA v4.00.1%2025-08-28Fix
CVE-2025-58123Lack of TLS validation in plugin BGP Monitoring on Checkmk Exchange6.9CNA v4.00.1%2025-08-28
CVE-2025-58081DOS SS1 hard-coded password8.7CNA v4.00.4%2025-08-28
CVE-2025-58072DOS SS1 path traversal8.7CNA v4.00.6%2025-08-28
CVE-2025-58062LSTM-Kirigaya's openmcp-client vulnerable to RCE in MCP Authorization Flow7.3CNA v4.01.2%2025-08-28Fix
CVE-2025-58061OpenEBS Local PV RawFile persistent volume data is world readable5.5CNA v3.10.1%2025-08-28Fix
CVE-2025-58059Valtimo process definition scripting engine vulnerability9.1CNA v3.10.4%2025-08-28Fix
CVE-2025-58058Github.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archives5.3CNA v3.10.4%2025-08-28Fix
CVE-2025-58049XWiki PDF export jobs store sensitive cookies unencrypted in job statuses5.8CNA v3.10.4%2025-08-28Fix
CVE-2025-58048Paymenter vulnerable to remote code execution via Public File Uploads10.0CNA v3.10.4%2025-08-28Fix
CVE-2025-58047Volto affected by possible DoS by invoking specific URL by anonymous user7.5CNA v3.10.6%2025-08-28Fix
CVE-2025-57819Sangoma FreePBX authentication bypass10.0CNA v4.095.0%2025-08-28KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix
CVE-2025-57767Asterisk can crash from a specifically malformed Authorization header in an incoming SIP request7.5CNA v3.10.4%2025-08-28Fix
CVE-2025-57759Contao has improper privilege management for page and article fields4.3CNA v3.10.2%2025-08-28Fix
CVE-2025-57758Contao has improper access control in the back end voters4.3CNA v3.10.2%2025-08-28Fix
CVE-2025-57757Contao discloses information in the news module5.3CNA v3.10.3%2025-08-28Fix
CVE-2025-57756Contao discloses sensitive information in the front end search index5.3CNA v3.10.3%2025-08-28Fix
CVE-2025-57220Tenda AC10 'ate' service improper input validation5.3CISA ADP v3.10.8%2025-08-28
CVE-2025-57219Tenda AC10 privilege escalation5.3CISA ADP v3.10.2%2025-08-28
CVE-2025-57218Tenda AC10 stack-based buffer overflow5.3CISA ADP v3.10.6%2025-08-28Emerging Threats
CVE-2025-57217Tenda AC10 stack-based buffer overflow5.3CISA ADP v3.10.5%2025-08-28Emerging Threats
CVE-2025-57215Tenda AC10 stack-based buffer overflow7.5CISA ADP v3.10.4%2025-08-28
CVE-2025-56236FormCms avatar upload feature has a stored cross-site scripting (XSS)6.1CISA ADP v3.10.2%2025-08-28Fix
CVE-2025-55583D-Link DIR-868L missing authentication9.8CISA ADP v3.17.0%2025-08-28Emerging Threats
CVE-2025-55175Reflected XSS in QuickCMS6.1v3.10.3%2025-08-28
CVE-2025-54995Asterisk remotely exploitable leak of RTP UDP ports and internal resources6.5CNA v3.10.5%2025-08-28Fix
CVE-2025-54819DOS SS1 path traversal7.1CNA v4.00.5%2025-08-28
CVE-2025-54762DOS SS1 unrestricted file upload9.3CNA v4.00.5%2025-08-28
CVE-2025-54742WpEvently WordPress plugin PHP object injection8.8CNA v3.10.4%2025-08-28Fix
CVE-2025-54738Jobmonster WordPress theme broken authentication9.8CNA v3.10.4%2025-08-28Fix
CVE-2025-54734B Slider WordPress plugin broken access control5.8CNA v3.10.2%2025-08-28Fix
CVE-2025-54733All Bootstrap Blocks WordPress plugin broken access control6.5CNA v3.10.2%2025-08-28Fix
CVE-2025-54731YouTube Showcase WordPress plugin PHP object injection8.1CNA v3.10.3%2025-08-28Fix
CVE-2025-54725Golo WordPress theme broken authentication9.8CNA v3.10.4%2025-08-28Fix
CVE-2025-54724Golo WordPress theme cross-site scripting (XSS)7.1CNA v3.10.2%2025-08-28Fix
CVE-2025-54720Nest Addons WordPress plugin SQL injection9.3CNA v3.10.3%2025-08-28Fix
CVE-2025-54716Ireca WordPress theme local file inclusion8.1CNA v3.10.4%2025-08-28Fix
CVE-2025-54714Zephyr Project Manager WordPress plugin broken access control7.1CNA v3.10.2%2025-08-28Fix
CVE-2025-54710Tiktok Feed WordPress plugin broken access control7.1CNA v3.10.2%2025-08-28Fix
CVE-2025-54544Stored XSS in QuickCMS4.8v3.10.2%2025-08-28
CVE-2025-54543Stored XSS in QuickCMS4.8v3.10.2%2025-08-28
CVE-2025-54542OpenSolution QuickCMS Sending Password in GET request5.5v3.10.1%2025-08-28
CVE-2025-54541Cross-site request forgery in QuickCMS4.3v3.10.1%2025-08-28
CVE-2025-54540Reflected XSS in QuickCMS6.1v3.10.3%2025-08-28
CVE-2025-54029WooCommerce csv import export WordPress plugin arbitrary file deletion7.7CNA v3.10.4%2025-08-28Fix
CVE-2025-53970DOS SS1 unrestricted file upload9.3CNA v4.00.5%2025-08-28
CVE-2025-53588UPC/EAN/GTIN Code Generator WordPress plugin arbitrary file deletion7.7CNA v3.10.4%2025-08-28Fix
CVE-2025-53584WP Ticket Customer Service Software and Support Ticket System WordPress plugin PHP object injection8.1CNA v3.10.3%2025-08-28Fix
CVE-2025-53583Employee Spotlight WordPress plugin PHP object injection8.1CNA v3.10.3%2025-08-28Fix
CVE-2025-53579Captcha.eu WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-08-28Fix
CVE-2025-53578Kipso WordPress theme local file inclusion8.1CNA v3.10.4%2025-08-28Fix
CVE-2025-53576Ovatheme Events WordPress plugin local file inclusion8.1CNA v3.10.4%2025-08-28Fix
CVE-2025-53572WP Easy Contact WordPress plugin PHP object injection8.1CNA v3.10.3%2025-08-28Fix
CVE-2025-53396DOS SS1 incorrect permission assignment7.3CNA v4.00.1%2025-08-28
CVE-2025-53337LifePress WordPress plugin broken access control5.4CNA v3.10.2%2025-08-28Fix
CVE-2025-53334Jannah WordPress theme local file inclusion8.1CNA v3.10.4%2025-08-28Fix
CVE-2025-53328Poll, Survey and Quiz Maker Plugin by Opinion Stage WordPress plugin local file inclusion7.5CNA v3.10.5%2025-08-28Fix
CVE-2025-53326Gutenify WordPress plugin local file inclusion7.5CNA v3.10.5%2025-08-28Fix
CVE-2025-53289Theme Blvd Widget Areas WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-08-28
CVE-2025-53250Chartbeat WordPress plugin server side request forgery (SSRF)6.4CNA v3.10.2%2025-08-28
CVE-2025-53248Magazine WordPress theme local file inclusion8.1CNA v3.10.4%2025-08-28
CVE-2025-53247BlogMarks WordPress theme local file inclusion8.1CNA v3.10.4%2025-08-28Fix
CVE-2025-53244Magazine Elite WordPress theme local file inclusion8.1CNA v3.10.4%2025-08-28
CVE-2025-53243Employee Directory Staff Listing and Team Directory plugin for WordPress PHP object injection8.1CNA v3.10.3%2025-08-28Fix
CVE-2025-53230Page Manager for Elementor WordPress plugin broken access control7.6CNA v3.10.3%2025-08-28
CVE-2025-53227Magazine Saga WordPress theme local file inclusion8.1CNA v3.10.4%2025-08-28
CVE-2025-53225e-Boekhouden.nl WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-08-28
CVE-2025-53224NextGEN Gallery Search WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-08-28
CVE-2025-53223Theme Switcher Reloaded WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-08-28
CVE-2025-53220XmasB Quotes WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-08-28
CVE-2025-53216Glamer WordPress theme local file inclusion8.1CNA v3.10.4%2025-08-28
CVE-2025-53215Yahoo! WebPlayer WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-08-28
CVE-2025-52761WP Funnel Manager WordPress plugin PHP object injection9.8CNA v3.10.4%2025-08-28Fix
CVE-2025-52460DOS SS1 files accessible to external parties6.9CNA v4.00.3%2025-08-28
CVE-2025-52054Tenda AC8 improper authentication5.3CISA ADP v3.10.3%2025-08-28
CVE-2025-51972PuneethReddyHC online-shopping-system-advanced login.php SQL injection6.5CISA ADP v3.10.2%2025-08-28
CVE-2025-51971PuneethReddyHC online-shopping-system-advanced register.php reflected cross-site scripting5.4CISA ADP v3.10.3%2025-08-28
CVE-2025-51969PuneethReddyHC online-shopping-system-advanced product.php page SQL injection6.5CISA ADP v3.10.2%2025-08-28
CVE-2025-51968PuneethReddyHC online-shopping-system-advanced action.php file SQL injection6.5CISA ADP v3.10.2%2025-08-28
CVE-2025-51967Oranbyte School Management System reflected cross-site scripting6.1CISA ADP v3.10.2%2025-08-28
CVE-2025-51643Meitrack T366l-g information disclosure2.4CISA ADP v3.10.3%2025-08-28Exploit code
CVE-2025-49407Houzez WordPress theme cross-site scripting (XSS)8.8CNA v3.10.4%2025-08-28Fix
CVE-2025-49405Houzez WordPress theme local file inclusion4.3CNA v3.10.3%2025-08-28Fix
CVE-2025-49404Listeo Core WordPress plugin SQL command improper neutralization8.5CNA v3.10.3%2025-08-28Fix
CVE-2025-49402Exertio Framework WordPress plugin SQL injection8.5CNA v3.10.3%2025-08-28
CVE-2025-49388Miraculous Core WordPress plugin privilege escalation9.8CNA v3.16.1%2025-08-28Exploit codeFix
CVE-2025-49387Drag and Drop File Upload for Elementor Forms WordPress plugin arbitrary file upload10.0CNA v3.10.4%2025-08-28Fix
CVE-2025-49383Neresa WordPress theme local file inclusion8.1CNA v3.10.4%2025-08-28Fix
CVE-2025-48963Acronis Cyber Protect Cloud Agent externally controlled resource reference7.3CNA v3.00.1%2025-08-28Fix
CVE-2025-48365Custom Comment WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-08-28
CVE-2025-48364rajce WordPress plugin server side request forgery (SSRF)4.9CNA v3.10.2%2025-08-28
CVE-2025-48363Popup for CF7 with Sweet Alert WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-08-28
CVE-2025-48362Hesabfa Accounting WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.1%2025-08-28
CVE-2025-48361Hesabfa Accounting WordPress plugin sensitive data exposure via Log file5.3CNA v3.10.3%2025-08-28
CVE-2025-48360Varnish/Nginx Proxy Caching WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-08-28
CVE-2025-48359ATT YouTube Widget WordPress plugin cross-site request forgery (CSRF) to stored XSS7.1CNA v3.10.1%2025-08-28
CVE-2025-48358Risk Free Cash On Delivery (COD) WooCommerce WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-08-28
CVE-2025-48357Century ToolKit WordPress plugin cross-site request forgery (CSRF) to arbitrary plugin activation5.4CNA v3.10.1%2025-08-28
CVE-2025-48356Kanpress WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-08-28
CVE-2025-48354Better Post and Filter Widgets for Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-08-28Fix
CVE-2025-48353Clickbank WordPress Plugin (Niche Storefront) cross-site request forgery (CSRF) to stored XSS7.1CNA v3.10.1%2025-08-28
CVE-2025-48352Yandex Site search pinger WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-08-28
CVE-2025-48351Kento Splash Screen WordPress plugin cross-site request forgery (CSRF) to stored XSS7.1CNA v3.10.1%2025-08-28
CVE-2025-48350AutoWP WordPress plugin broken access control4.3CNA v3.10.2%2025-08-28
CVE-2025-48349Video Gallery Vimeo and YouTube Gallery WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-08-28
CVE-2025-48348Site Offline WordPress plugin broken access control4.3CNA v3.10.2%2025-08-28
CVE-2025-48347bxSlider integration for WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-08-28
CVE-2025-48343WPMU Ldap Authentication WordPress plugin cross-site request forgery (CSRF) to stored XSS7.1CNA v3.10.1%2025-08-28Fix
CVE-2025-48327WP Mailgun SMTP WordPress plugin broken access control5.3CNA v3.10.3%2025-08-28
CVE-2025-48325WP Admin WordPress plugin cross-site request forgery (CSRF) to stored XSS7.1CNA v3.10.1%2025-08-28
CVE-2025-48324tli.tl auto Twitter poster WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-08-28
CVE-2025-48323Advance Food Menu WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-08-28
CVE-2025-48322Statify Widget WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-08-28Fix
CVE-2025-48321Ultimate twitter profile widget WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-08-28
CVE-2025-48320百度分享按钮 WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-08-28
CVE-2025-48319Mesa Mesa Reservation Widget WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-08-28
CVE-2025-48318多说社会化评论框 WordPress plugin cross-site request forgery (CSRF) to settings Change4.3CNA v3.10.1%2025-08-28
CVE-2025-48316Responsive Mobile-Friendly Tooltip WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-08-28
CVE-2025-48315WordPress HTML plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-08-28
CVE-2025-48314salubrio Add Code To Head stored cross-site scripting5.9CNA v3.10.2%2025-08-28Fix
CVE-2025-48313Tripadvisor Shortcode WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-08-28
CVE-2025-48312WPAvatar WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-08-28
CVE-2025-48311Invisible Optin WordPress plugin cross-site request forgery (CSRF) to stored XSS7.1CNA v3.10.1%2025-08-28
CVE-2025-48310Table Editor WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-08-28
CVE-2025-48309WordPress BetPress plugin Lite CSRF to stored XSS7.1CNA v3.10.1%2025-08-28
CVE-2025-48308Newsletter subscription optin module WordPress plugin cross-site request forgery to stored XSS7.1CNA v3.10.1%2025-08-28
CVE-2025-48307SEO For Images WordPress plugin cross-site request forgery (CSRF) to stored XSS7.1CNA v3.10.1%2025-08-28
CVE-2025-48306Savyour Affiliate Partner WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-08-28
CVE-2025-48305Goal Tracker for Patreon WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-08-28
CVE-2025-48304Google XML News Sitemap WordPress plugin cross-site request forgery (CSRF) to stored XSS7.1CNA v3.10.1%2025-08-28
CVE-2025-48110Link View WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-08-28
CVE-2025-48109XM-Backup WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-08-28
CVE-2025-48100bidorbuy Store Integrator WordPress plugin remote code execution (RCE)9.1CNA v3.10.4%2025-08-28
CVE-2025-46409DOS SS1 inadequate encryption strength8.7CNA v4.00.2%2025-08-28
CVE-2025-39496WooBeWoo Product Filter Pro WordPress plugin SQL injection9.3CNA v3.10.3%2025-08-28Fix
CVE-2025-36003IBM Security Verify Governance Identity Manager information disclosure7.5CNA v3.10.3%2025-08-28Fix
CVE-2025-31979HCL BigFix Service Management file upload validation vulnerability5.4CNA v3.10.2%2025-08-28
CVE-2025-31977A cryptographic weakness has been identified in the HCL BigFix Service Management (SM)5.3CNA v3.10.1%2025-08-28Fix
CVE-2025-31972HCL BigFix Service Management (SM) is affected by a sensitive information exposure6.5CNA v3.10.1%2025-08-28Fix
CVE-2025-31971AIML Solutions for HCL SX is susceptible to a URL validation vulnerability5.1CNA v3.10.1%2025-08-28
CVE-2025-29364Spimsimulator Spim stack-based buffer overflow6.5CISA ADP v3.10.4%2025-08-28
CVE-2025-25010Kibana privilege escalation via reporting_user role6.5CNA v3.10.3%2025-08-28Fix
CVE-2025-9594itsourcecode Apartment Management System complain_info.php SQL injection9.8v3.10.4%2025-08-28
CVE-2025-9593itsourcecode Apartment Management System unit_status_info.php SQL injection9.8v3.10.4%2025-08-28
CVE-2025-9592itsourcecode Apartment Management System bill_info.php SQL injection9.8v3.10.5%2025-08-28
CVE-2025-9591ZrLog Theme Configuration form config cross-site scripting4.8CNA v4.00.3%2025-08-28
CVE-2025-9590Weaver E-Mobile Mobile Management Platform cross-site scripting5.1CNA v4.00.3%2025-08-28
CVE-2025-9589Cudy WR1200EA shadow default password2.0CNA v4.00.1%2025-08-28
CVE-2025-9586Comfast CF-N1 webmgnt wireless_device_dissoc command injection8.8v3.18.3%2025-08-28Emerging Threats
CVE-2025-9585Comfast CF-N1 webmgnt wifilith_delete_pic_file command injection8.8v3.15.1%2025-08-28
CVE-2025-9584Comfast CF-N1 webmgnt update_interface_png command injection8.8v3.18.3%2025-08-28Emerging Threats
CVE-2025-9583Comfast CF-N1 webmgnt ping_config command injection8.8v3.15.1%2025-08-28
CVE-2025-9582Comfast CF-N1 webmgnt ntp_timezone command injection9.8v3.15.3%2025-08-28
CVE-2025-9581Comfast CF-N1 webmgnt multi_pppoe command injection9.8v3.15.3%2025-08-28
CVE-2025-9580LB-LINK BL-X26 HTTP set_blacklist os command injection8.8v3.15.5%2025-08-28
CVE-2025-9579LB-LINK BL-X26 HTTP set_hidessid_cfg os command injection8.8v3.15.7%2025-08-28
CVE-2025-9578Acronis Cyber Protect Cloud Agent incorrect permission assignment7.8CNA v3.00.1%2025-08-28Fix
CVE-2025-9577TOTOLINK X2000R Administrative shadow.sample default credentials7.0v3.10.2%2025-08-28
CVE-2025-9576seeedstudio ReSpeaker Administrative shadow default credentials7.0v3.10.2%2025-08-28
CVE-2025-9575Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 upload.cgi cgiMain os command injection8.8v3.16.9%2025-08-28Emerging Threats
CVE-2025-9376sminozzi Stop Bad Bots login cookie check incorrect authorization6.5CNA v3.10.4%2025-08-28Fix
CVE-2025-9352Pronamic Google Maps WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4CNA v3.10.2%2025-08-28Fix
CVE-2025-9346Booking Calendar WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-08-28Fix
CVE-2025-9345File Manager WordPress plugin path traversal4.9CNA v3.10.5%2025-08-28Fix
CVE-2025-9344UsersWP WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-08-28Fix
CVE-2025-9195Solidigm D7-PS1010/D7-PS1030 firmware of some improper input validation4.4CNA v3.10.1%2025-08-28
CVE-2025-8977Simple Download Monitor WordPress plugin SQL injection6.5CNA v3.10.3%2025-08-28Fix
CVE-2025-8897Beaver Builder Plugin (Lite Version) WordPress plugin reflected cross-site scripting6.1CNA v3.10.2%2025-08-28Fix
CVE-2025-8603Unlimited Elements For Elementor WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-08-28Fix
CVE-2025-8073Dynamic AJAX Product Filters for WooCommerce WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-08-28Fix
CVE-2025-8067Udisks: Out-of-bounds read in udisks daemon8.5CNA v3.10.7%2025-08-28Exploit codeFix
CVE-2025-7956Ajax Search Lite WordPress plugin missing authorization unauthenticated Basic information exposure5.3CNA v3.10.3%2025-08-28Fix
CVE-2025-7955RingCentral Communications - Missing Server‑Side Verification to authentication bypass9.8CNA v3.10.7%2025-08-28Exploit codeFix
CVE-2025-7812Video Share VOD WordPress plugin cross-site request forgery8.8CNA v3.10.3%2025-08-28Fix
CVE-2025-6255Dynamic AJAX Product Filters for WooCommerce WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-08-28Fix
CVE-2025-6203Vault unauthenticated denial of service through complex json payload7.5CNA v3.10.7%2025-08-28Fix
CVE-2025-0951AI Hub WordPress theme missing authorization4.3CNA v3.10.2%2025-08-28
CVE-2025-58218Small Package Quotes USPS Edition WordPress plugin PHP object injection7.2CNA v3.10.4%2025-08-27Fix
CVE-2025-58217Instant Breaking News WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-08-27Fix
CVE-2025-58216WP Thumbtack Review Slider WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-08-27Fix
CVE-2025-58213Booking System Trafft WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-08-27Fix
CVE-2025-58212Epeken All Kurir WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-08-27Fix
CVE-2025-58211Chatbox Manager WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-08-27Fix
CVE-2025-58209Transcoder WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-08-27Fix
CVE-2025-58208PDF for Elementor Forms + Drag And Drop Template Builder WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-08-27Fix
CVE-2025-58205ElementInvader Addons for Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-08-27Fix
CVE-2025-58204Podlove Podcast Publisher WordPress plugin open redirection4.7CNA v3.10.2%2025-08-27Fix
CVE-2025-58203Solace Extra WordPress plugin server side request forgery (SSRF)4.4CNA v3.10.2%2025-08-27Fix
CVE-2025-58202Simple Page Access Restriction WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-08-27Fix
CVE-2025-58201AfterShip Tracking WordPress plugin broken access control5.3CNA v3.10.2%2025-08-27Fix
CVE-2025-58198Xpro Theme Builder WordPress plugin broken access control6.5CNA v3.10.2%2025-08-27Fix
CVE-2025-58197Simple Download Monitor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-08-27Fix
CVE-2025-58196UiCore Elements WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-08-27Fix
CVE-2025-58195Xpro Elementor Addons WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-08-27Fix
CVE-2025-58194Bold Page Builder WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-08-27Fix
CVE-2025-58193Uncanny Automator WordPress plugin broken access control4.3CNA v3.10.2%2025-08-27Fix
CVE-2025-58192WP Bulk Delete WordPress plugin broken access control5.4v3.10.2%2025-08-27Fix
CVE-2025-58050PCRE2: Heap-buffer-overflow read in match_ref due to missing boundary restoration in SCS6.9CNA v4.00.8%2025-08-27Fix
CVE-2025-57846Digital Arts i-フィルター incorrect default permissions8.5CNA v4.00.2%2025-08-27
CVE-2025-57821Basecamp's Google Sign-In for Rails allowed redirects to a malformed URL4.2CNA v3.10.2%2025-08-27Fix
CVE-2025-57797PFU ScanSnap Manager installers incorrect privilege assignment8.5CNA v4.00.1%2025-08-27
CVE-2025-56694Lumasoft Fotoshare Cloud client-side enforcement of server-side security5.8CISA ADP v3.10.4%2025-08-27
CVE-2025-55618Hyundai Navigation cross-site scripting7.3CISA ADP v3.10.2%2025-08-27
CVE-2025-55582D-Link Dcs-825l Firmware improper privilege management6.6CISA ADP v3.10.2%2025-08-27
CVE-2025-55495Tenda AC6 buffer overflow6.5CISA ADP v3.10.2%2025-08-27
CVE-2025-55422FoxCMS cross-site scripting8.8CISA ADP v3.10.4%2025-08-27
CVE-2025-54598Bevy cross-site request forgery6.5CISA ADP v3.10.2%2025-08-27
CVE-2025-53105GLPI permits unauthorized rules execution order7.5CNA v3.10.4%2025-08-27Fix
CVE-2025-52122The Freeform CraftCMS plugin contains an server-side template injection (SSTI)9.8CISA ADP v3.10.6%2025-08-27Exploit codeFix
CVE-2025-51667Ryansu Simple Admin simple-admin-core SQL injection7.0CISA ADP v3.10.3%2025-08-27Fix
CVE-2025-50989OPNsense OS command injection8.8CISA ADP v3.110.1%2025-08-27Fix
CVE-2025-50986Diskoverdata Diskover cross-site scripting5.6CISA ADP v3.10.2%2025-08-27
CVE-2025-50985Diskoverdata Diskover cross-site scripting5.6CISA ADP v3.10.2%2025-08-27
CVE-2025-50984Diskoverdata Diskover SQL injection5.3CISA ADP v3.10.3%2025-08-27
CVE-2025-50983Readarr SQL injection8.3CISA ADP v3.10.3%2025-08-27
CVE-2025-50979NodeBB SQL injection8.6CISA ADP v3.19.2%2025-08-27
CVE-2025-50978Gitblit cross-site scripting6.1CISA ADP v3.10.3%2025-08-27
CVE-2025-50977Gitblit cross-site scripting6.1CISA ADP v3.10.3%2025-08-27
CVE-2025-50972AbanteCart SQL injection9.8CISA ADP v3.10.5%2025-08-27
CVE-2025-50428raspap-webgui command injection9.8CISA ADP v3.11.6%2025-08-27Exploit code
CVE-2025-49040Backup Bolt WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-08-27
CVE-2025-49039Link View WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-08-27
CVE-2025-49035Admin Menu Groups WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-08-27
CVE-2025-48081Printeers Print and Ship WordPress plugin directory traversal5.3CNA v3.10.3%2025-08-27
CVE-2025-43882Dell ThinOS 10 unauthorized access7.8CNA v3.10.1%2025-08-27Fix
CVE-2025-43730Dell ThinOS 10 argument injection8.4CNA v3.10.2%2025-08-27Fix
CVE-2025-43729Dell ThinOS 10 incorrect permission assignment7.8CNA v3.10.1%2025-08-27Fix
CVE-2025-43728Dell ThinOS 10 protection mechanism failure9.6CNA v3.10.4%2025-08-27Fix
CVE-2025-40779Kea crash upon interaction between specific client options and subnet selection7.5CNA v3.10.5%2025-08-27Fix
CVE-2025-34523Arcserve UDP Pre-authentication heap overflow9.8v3.10.5%2025-08-27Fix
CVE-2025-34522Arcserve UDP Pre-authentication heap overflow9.8v3.10.6%2025-08-27Fix
CVE-2025-34521Arcserve UDP reflected cross-site scripting (XSS)5.4v3.10.2%2025-08-27Fix
CVE-2025-34520Arcserve UDP authentication bypass9.8v3.10.4%2025-08-27Fix
CVE-2025-34163Dongsheng Logistics Software unauthenticated arbitrary file upload10.0CNA v4.00.7%2025-08-27
CVE-2025-34162Bian Que Feijiu Intelligent Emergency and Quality Control System SQL injection via GetLyfsByParams9.3CNA v4.00.6%2025-08-27
CVE-2025-34161Coolify Git Repository field command injection in Project Deployment Workflow8.8NVD v3.13.0%2025-08-27Fix
CVE-2025-34160AnyShare ServiceAgent API unauthenticated RCE10.0CNA v4.00.8%2025-08-27Fix
CVE-2025-34159Coolify Docker Compose Directive injection in Application Deployment Workflow8.8NVD v3.11.0%2025-08-27Exploit codeFix
CVE-2025-34157Coolify stored cross-site scripting (XSS) in Project Name field9.0v3.10.5%2025-08-27Exploit codeFix
CVE-2025-30064CLININET session verification vulnerability8.8CNA v4.00.1%2025-08-27Fix
CVE-2025-30063CGM CLININET excessive permissions on configuration files containing database logins and passwords9.4CNA v4.00.1%2025-08-27Fix
CVE-2025-30061CGM CLININET SQL injection in utils/Reporter/OpenReportWindow.pl via the UserID parameter6.9CNA v4.00.2%2025-08-27Fix
CVE-2025-30060CGM CLININET SQL injection in ReturnUserUnitsXML.pl via the UserID parameter6.9CNA v4.00.2%2025-08-27Fix
CVE-2025-30059CGM CLININET authenticated SQL injection in PrepareCDExportJSON.pl6.9CNA v4.00.2%2025-08-27Fix
CVE-2025-30058CGM CLININET SQL injection in getPatientIdentifier function of PatientService.pl6.9CNA v4.00.2%2025-08-27Fix
CVE-2025-30057CGM CLININET authenticated RCE with uhcapache privileges in ConvertToPDF9.4CNA v4.00.7%2025-08-27Fix
CVE-2025-30056CGM CLININET calling system commands via RunCommand9.4CNA v4.00.2%2025-08-27Fix
CVE-2025-30055CGM CLININET conditional RCE via the system function9.0CNA v4.00.2%2025-08-27Fix
CVE-2025-30048CGM CLININET unauthenticated access to module configuration endpoint5.3CNA v4.00.2%2025-08-27Fix
CVE-2025-30041CGM CLININET missing authentication in APIs returning statistical data along with session IDs9.0CNA v4.00.2%2025-08-27Fix
CVE-2025-30040CGM CLININET missing authentication in API returning request logs containing session IDs9.0CNA v4.00.2%2025-08-27Fix
CVE-2025-30039CGM CLININET missing authentication in API returning a list of all active sessions9.0CNA v4.00.2%2025-08-27Fix
CVE-2025-30038CGM CLININET session ID leakage in Zone.Identifier of downloaded files7.3CNA v4.00.2%2025-08-27Fix
CVE-2025-30037CGM CLININET missing authentication in APIs allowing data retrieval and modification8.8CNA v4.00.2%2025-08-27Fix
CVE-2025-30036CGM CLININET stored XSS permitting session takeover of arbitrary user8.8CNA v4.00.2%2025-08-27Fix
CVE-2025-20348Cisco Nexus Dashboard Unauthorized REST API vulnerability5.0CNA v3.10.3%2025-08-27Fix
CVE-2025-20347Cisco Nexus Dashboard Fabric Controller Unauthorized REST API vulnerability5.4CNA v3.10.3%2025-08-27Fix
CVE-2025-20344Cisco Nexus Dashboard path traversal6.5CNA v3.10.6%2025-08-27Fix
CVE-2025-20342Cisco Integrated Management Controller Virtual Keyboard Video Monitor stored cross-site scripting5.4CNA v3.10.2%2025-08-27Fix
CVE-2025-20317Cisco UCS Virtual Keyboard Video Monitor (vKVM) open redirect7.1CNA v3.10.4%2025-08-27Fix
CVE-2025-20296Cisco UCS Manager Software Stored software stored cross-site scripting5.4CNA v3.00.2%2025-08-27Fix
CVE-2025-20295Cisco UCS Manager software command injection6.0CNA v3.10.2%2025-08-27Fix
CVE-2025-20294Cisco UCS Manager software command injection6.5CNA v3.11.2%2025-08-27Fix
CVE-2025-20292Cisco NXOS software command injection4.4CNA v3.13.2%2025-08-27Fix
CVE-2025-20290Cisco NXOS Software Sensitive Log information disclosure5.5CNA v3.10.1%2025-08-27Fix
CVE-2025-20262Cisco NX-OS Software PIM6 ephemeral query processing null pointer dereference5.0CNA v3.10.4%2025-08-27Fix
CVE-2025-20241Cisco NX-OS Software IS-IS protocol denial of service7.4CNA v3.10.3%2025-08-27Fix
CVE-2025-9533TOTOLINK T10 formLoginAuth.htm improper authentication9.8v3.110.8%2025-08-27Emerging Threats
CVE-2025-9532Portabilis i-Educar view SQL injection8.8v3.10.4%2025-08-27
CVE-2025-9531Portabilis i-Educar Agenda agenda.php SQL injection8.8v3.10.4%2025-08-27
CVE-2025-9529Campcodes Payroll Management System index.php include file inclusion7.2v3.10.5%2025-08-27
CVE-2025-9528Linksys E1700 systemCommand os command injection7.2v3.154.5%2025-08-27Reported exploitedEmerging Threats
CVE-2025-9527Linksys E1700 QoSSetup stack-based overflow8.7CNA v4.01.5%2025-08-27Emerging Threats
CVE-2025-9526Linksys E1700 setSysAdm stack-based overflow8.7CNA v4.01.4%2025-08-27Emerging Threats
CVE-2025-9525Linksys E1700 setWan stack-based overflow8.7CNA v4.01.4%2025-08-27Emerging Threats
CVE-2025-9523Tenda AC1206 GetParentControlInfo stack-based overflow9.3CNA v4.01.1%2025-08-27
CVE-2025-9514macrozheng mall Registration weak password3.7NVD v3.10.4%2025-08-27
CVE-2025-9513editso fuso mod.rs PenetrateRsaAndAesHandshake inadequate encryption6.3CNA v4.00.2%2025-08-27
CVE-2025-9511itsourcecode Apartment Management System addvisitor.php SQL injection9.8v3.10.4%2025-08-27
CVE-2025-9510itsourcecode Apartment Management System addbranch.php SQL injection9.8v3.10.4%2025-08-27
CVE-2025-9509itsourcecode Apartment Management System fair_info_all.php SQL injection9.8v3.10.4%2025-08-27
CVE-2025-9508itsourcecode Apartment Management System rented_info.php SQL injection9.8v3.10.4%2025-08-27
CVE-2025-9507itsourcecode Apartment Management System visitor_info.php SQL injection9.8v3.10.4%2025-08-27
CVE-2025-9506Campcodes Online Loan Management System ajax.php SQL injection9.8v3.10.4%2025-08-27
CVE-2025-9505Campcodes Online Loan Management System ajax.php SQL injection9.8v3.10.5%2025-08-27
CVE-2025-9504Campcodes Online Loan Management System ajax.php SQL injection9.8v3.10.4%2025-08-27
CVE-2025-9503Campcodes Online Loan Management System ajax.php SQL injection9.8v3.10.4%2025-08-27
CVE-2025-9502Campcodes Online Loan Management System ajax.php SQL injection9.8v3.10.4%2025-08-27
CVE-2025-8490All-in-One WP Migration and Backup WordPress plugin stored cross-site scripting4.4CNA v3.10.2%2025-08-27Fix
CVE-2025-7732Lazy Load for Videos WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-08-27Fix
CVE-2025-5187Kubernetes nodes can delete themselves by adding an OwnerReference6.7CNA v3.10.6%2025-08-27Fix
CVE-2025-5101Improper control of generation of code (code injection) in GitLab5.0CNA v3.10.1%2025-08-27Fix
CVE-2025-4225Allocation of resources without limits or throttling in GitLab5.3CNA v3.10.4%2025-08-27Fix
CVE-2025-3601Allocation of resources without limits or throttling in GitLab6.5CNA v3.10.3%2025-08-27Fix
CVE-2025-2313CGM CLININET RCE via Print.pl in uhcPrintServerPrint9.4CNA v4.00.2%2025-08-27Fix
CVE-2025-2246Missing authorization in GitLab5.8CNA v3.10.3%2025-08-27Fix
CVE-2025-57820Svelte devalue vulnerable to prototype pollution7.9CNA v4.00.4%2025-08-26Fix
CVE-2025-57818Firecrawl SSRF vulnerability via malicious webhook6.3CNA v3.10.3%2025-08-26Fix
CVE-2025-57813Insertion of sensitive information into log file in github.com/traPtitech/traQ5.9CNA v3.10.4%2025-08-26Fix
CVE-2025-57810jsPDF Parsing of Corrupt PNGs leads to potential denial of service (DoS)8.7CNA v4.00.7%2025-08-26Fix
CVE-2025-57803ImageMagick: 32-bit integer overflow when writing BMP scanline stride → heap buffer overflow7.5CNA v3.10.8%2025-08-26Fix
CVE-2025-57704EIP Builder XML external entity Processing information disclosure5.5CNA v3.10.2%2025-08-26Fix
CVE-2025-57425Remyandrade FAQ Management System SourceCodester stored cross-site scripting6.1CISA ADP v3.10.3%2025-08-26
CVE-2025-56432Nagios XI cross-site scripting6.1CISA ADP v3.10.9%2025-08-26Fix
CVE-2025-55526ZIE619 N8N Workflow Collection path traversal9.1CISA ADP v3.10.8%2025-08-26
CVE-2025-55443Telpo Mdm cleartext storage of sensitive information9.1CISA ADP v3.10.2%2025-08-26
CVE-2025-55298ImageMagick format string Bug in InterpretImageFilename leads to arbitrary code execution7.5CNA v3.14.5%2025-08-26Fix
CVE-2025-55212ImageMagick affected by divide-by-zero in ThumbnailImage via montage -geometry: Leads to crash3.7CNA v3.10.9%2025-08-26Fix
CVE-2025-53813TCC Bypass via misconfigured Node fuses in Nozbe4.8CNA v4.00.1%2025-08-26Fix
CVE-2025-53811TCC Bypass via misconfigured Node fuses in Mosh-Pro4.8CNA v4.00.1%2025-08-26Fix
CVE-2025-53419COMMGR code injection7.8CNA v3.10.2%2025-08-26Fix
CVE-2025-53418COMMGR stack-based buffer overflow8.6CNA v3.10.4%2025-08-26Fix
CVE-2025-52353Badaso CMS file upload9.8CISA ADP v3.10.7%2025-08-26
CVE-2025-52219Selectzero open redirect6.5CISA ADP v3.10.2%2025-08-26Fix
CVE-2025-52218Selectzero code injection7.5CISA ADP v3.10.3%2025-08-26Fix
CVE-2025-52217Selectzero cross-site scripting5.4CISA ADP v3.10.2%2025-08-26Fix
CVE-2025-52184helpyio helpy cross-site scripting6.1CISA ADP v3.10.3%2025-08-26
CVE-2025-52037Exe-system Notescms cross-site scripting6.1CISA ADP v3.10.2%2025-08-26
CVE-2025-52036Exe-system Notescms cross-site scripting6.1CISA ADP v3.10.2%2025-08-26
CVE-2025-52035Exe-system Notescms cross-site scripting6.1CISA ADP v3.10.2%2025-08-26
CVE-2025-50976IPFire cross-site scripting6.1CISA ADP v3.10.2%2025-08-26
CVE-2025-50975IPFire cross-site scripting5.4CISA ADP v3.10.3%2025-08-26
CVE-2025-50974IPFire OS command injection6.5CISA ADP v3.10.4%2025-08-26
CVE-2025-50971AbanteCart path traversal7.5v3.11.0%2025-08-26
CVE-2025-50753Mitrastar GPT-2741GNAC-N2 restricted shell vulnerability8.4CISA ADP v3.10.2%2025-08-26
CVE-2025-48108School Management WordPress plugin broken access control6.5CNA v3.10.2%2025-08-26
CVE-2025-44002TeamViewer Full Client arbitrary file creation via Symbolic Link leading to denial of service6.1CNA v3.10.1%2025-08-26Fix
CVE-2025-41702Welotec EG400Mk2-D11001-000101 egOS WebGUI Hard-Coded JWT Secret enables authentication bypass9.8CNA v3.10.5%2025-08-26Fix
CVE-2025-38676Linux kernel AMD IOMMU command line parsing out-of-bounds write7.8v3.10.4%2025-08-26Exploit codeFix
CVE-2025-36729RACOM M!DGE2 privilege escalation via SDK Testing endpoint7.2CNA v3.10.4%2025-08-26
CVE-2025-35115Agiloft insecure download of system packages9.2CNA v4.00.2%2025-08-26Fix
CVE-2025-35114Agiloft local privilege escalation via default credentials8.7CNA v4.00.3%2025-08-26Fix
CVE-2025-35113Agiloft improper neutralization in EUI template engine7.2v3.10.4%2025-08-26Fix
CVE-2025-35112Agiloft XML external entity local path traversal4.9v3.10.3%2025-08-26Fix
CVE-2025-29992Mahara information disclosure7.5CISA ADP v3.10.3%2025-08-26Fix
CVE-2025-29901QNAP File Station 5 null pointer dereference7.1CNA v4.00.4%2025-08-26Fix
CVE-2025-26417Google Android DownloadProvider.java information disclosure4.0CISA ADP v3.10.3%2025-08-26Exploit codeFix
CVE-2025-25737Kapsch Ris-9160 weak password requirements6.8CISA ADP v3.10.4%2025-08-26
CVE-2025-25736Kapsch Ris-9260 missing authentication6.8CISA ADP v3.10.3%2025-08-26
CVE-2025-25735Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were discovered to lack SPI Protected Range Registers (PRRs), allowing attackers with software running on the system to modify SPI flash in real-time.4.6CISA ADP v3.10.3%2025-08-26
CVE-2025-25734Kapsch Ris-9160 arbitrary code execution6.8CISA ADP v3.10.4%2025-08-26
CVE-2025-25733Incorrect access control in the SPI Flash Chip of Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 allows physically proximate attackers to arbitrarily modify SPI flash regions, leading to a degradation of the security posture of the devic3.5CISA ADP v3.10.3%2025-08-26
CVE-2025-25732Kapsch Ris-9160 insecure storage of sensitive information6.8CISA ADP v3.10.4%2025-08-26
CVE-2025-23315NVIDIA NeMo Framework code injection7.8CNA v3.10.2%2025-08-26Fix
CVE-2025-23314NVIDIA NeMo Framework code injection7.8CNA v3.10.2%2025-08-26Fix
CVE-2025-23313NVIDIA NeMo Framework code injection7.8CNA v3.10.3%2025-08-26Fix
CVE-2025-23312NVIDIA NeMo Framework code injection7.8CNA v3.10.2%2025-08-26Fix
CVE-2025-23307NVIDIA NeMo Curator code injection7.8CNA v3.10.3%2025-08-26Fix
CVE-2025-22413Google Android hyp-main.c privilege escalation4.0CISA ADP v3.10.1%2025-08-26Fix
CVE-2025-22412Google Android sdp_server.cc use-after-free8.8CISA ADP v3.10.2%2025-08-26Fix
CVE-2025-22411Google Android sdp_discovery.cc use-after-free8.8CISA ADP v3.10.2%2025-08-26Fix
CVE-2025-22410Google Android multiple locations privilege escalation8.4CISA ADP v3.10.1%2025-08-26Fix
CVE-2025-22409Google Android rfc_ts_frames.cc privilege escalation8.4CISA ADP v3.10.1%2025-08-26Fix
CVE-2025-22408Google Android rfc_utils.cc remote code execution9.8CISA ADP v3.10.4%2025-08-26Fix
CVE-2025-22407Google Android hidd_conn.cc information disclosure5.5CISA ADP v3.10.1%2025-08-26Fix
CVE-2025-22406Google Android bnep_utils.cc code execution8.4CISA ADP v3.10.1%2025-08-26Fix
CVE-2025-22405Google Android multiple locations privilege escalation8.4CISA ADP v3.10.1%2025-08-26Fix
CVE-2025-22404Google Android avct_lcb_act.cc privilege escalation8.4CISA ADP v3.10.1%2025-08-26Fix
CVE-2025-22403Google Android sdp_discovery.cc remote code execution9.8CISA ADP v3.10.4%2025-08-26Fix
CVE-2025-9492Campcodes Online Water Billing System addclient1.php SQL injection9.8v3.10.6%2025-08-26
CVE-2025-9491Microsoft Windows LNK file UI misrepresentation remote code execution7.8v3.173.0%2025-08-26Reported exploitedExploit codeFix
CVE-2025-9483Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 singlePortForwardAdd stack-based overflow8.7CNA v4.01.0%2025-08-26
CVE-2025-9482Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 portRangeForwardAdd stack-based overflow8.7CNA v4.09.0%2025-08-26Emerging Threats
CVE-2025-9481Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setIpv6 stack-based overflow8.7CNA v4.01.4%2025-08-26Emerging Threats
CVE-2025-9478Google Chrome ANGLE use-after-free8.8CISA ADP v3.17.3%2025-08-26Fix
CVE-2025-9476SourceCodester Human Resource Information System editemployee_process.php unrestricted upload9.8v3.10.5%2025-08-26
CVE-2025-9475SourceCodester Human Resource Information System editemployee_process.php unrestricted upload9.8v3.10.5%2025-08-26
CVE-2025-9474Mihomo Party Socket sysproxy.ts enableSysProxy temp file2.0CNA v4.00.1%2025-08-26
CVE-2025-9473SourceCodester Online Bank Management System feedback.php SQL injection9.8v3.10.5%2025-08-26
CVE-2025-9472itsourcecode Apartment Management System add_owner_utility.php SQL injection9.8v3.10.4%2025-08-26
CVE-2025-9471itsourcecode Apartment Management System add_maintenance_cost.php SQL injection9.8v3.10.5%2025-08-26
CVE-2025-9470itsourcecode Apartment Management System add_m_committee.php SQL injection9.8v3.10.5%2025-08-26
CVE-2025-9469itsourcecode Apartment Management System add_fund.php SQL injection9.8v3.10.5%2025-08-26
CVE-2025-9468itsourcecode Apartment Management System add_bill.php SQL injection9.8v3.10.5%2025-08-26
CVE-2025-9461diyhi bbs File Compression FilePackageManageAction.java information disclosure7.5v3.10.4%2025-08-26
CVE-2025-94441000 Projects Online Project Report Submission and Evaluation System SQL injection9.8v3.10.4%2025-08-26
CVE-2025-9443Tenda CH22 editUserName formeditUserName buffer overflow8.7CNA v4.00.8%2025-08-26
CVE-2025-94401000 Projects Online Project Report Submission and Evaluation System cross-site scripting6.1v3.10.4%2025-08-26
CVE-2025-94391000 Projects Online Project Report Submission and Evaluation System cross-site scripting6.1v3.10.4%2025-08-26
CVE-2025-94381000 Projects Online Project Report Submission and Evaluation System cross-site scripting6.1v3.10.4%2025-08-26
CVE-2025-94341000 Projects Online Project Report Submission and Evaluation System cross-site scripting6.1v3.10.4%2025-08-26
CVE-2025-9433mtons mblog Admin Panel list cross-site scripting6.1v3.10.4%2025-08-26
CVE-2025-9432mtons mblog Admin Panel list cross-site scripting6.1v3.10.4%2025-08-26
CVE-2025-9431mtons mblog search cross-site scripting6.1v3.10.4%2025-08-26
CVE-2025-9430mtons mblog update cross-site scripting4.8v3.10.3%2025-08-26
CVE-2025-9429mtons mblog Post submit cross-site scripting5.4v3.10.3%2025-08-26
CVE-2025-9277SiteSEO SEO Simplified WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-08-26Fix
CVE-2025-9190TCC Bypass via misconfigured Node fuses in Cursor4.8CNA v4.00.2%2025-08-26
CVE-2025-9172Vibes WordPress plugin unauthenticated SQL injection via `resource` parameter7.5CNA v3.10.4%2025-08-26Fix
CVE-2025-8700Privilege escalation via get-task-allow entitlement in Invoice Ninja4.8CNA v4.00.1%2025-08-26Fix
CVE-2025-8597MacVim privilege escalation via get-task-allow entitlement in MacVim.app4.8CNA v4.00.1%2025-08-26Fix
CVE-2025-8447GitHub Enterprise Server repository diff feature improper access control7.0CNA v4.00.3%2025-08-26Fix
CVE-2025-8424Improper access control on the NetScaler Management interface8.7CNA v4.03.3%2025-08-26KCV
CVE-2025-7776NetScaler ADC and Gateway PCoIP Profile vulnerability8.8CNA v4.08.1%2025-08-26Fix
CVE-2025-7775Citrix NetScaler memory overflow9.2CNA v4.020.3%2025-08-26KEVExploit codeKCVFix
CVE-2025-6366Event List WordPress plugin authenticated (Subscriber+) privilege escalation8.8CNA v3.10.3%2025-08-26Fix
CVE-2025-6247WordPress Automatic Plugin WordPress plugin cross-site request forgery4.7CNA v3.10.2%2025-08-26Fix
CVE-2025-5931Dokan Pro WordPress plugin authenticated (Vendor+) privilege escalation8.8CNA v3.10.4%2025-08-26Fix
CVE-2025-2697IBM Cognos Command Center HTTP open redirect7.4CNA v3.10.4%2025-08-26Fix
CVE-2025-1994IBM Cognos Command Center code execution7.8CNA v3.10.2%2025-08-26Fix
CVE-2025-1501Incorrect authorization for traces request/download in CMC5.3CNA v4.00.2%2025-08-26Fix
CVE-2025-1494IBM Cognos Command Center clickjacking6.1CNA v3.10.3%2025-08-26Fix
CVE-2025-0093Google Android AdapterService.java information disclosure7.5CISA ADP v3.10.3%2025-08-26Fix
CVE-2025-0092Google Android AdapterService.java insecure permissions6.5CISA ADP v3.10.2%2025-08-26Fix
CVE-2025-0086Google Android AccountManagerService.java information disclosure6.2CISA ADP v3.10.1%2025-08-26Fix
CVE-2025-0084Google Android multiple locations out-of-bounds write8.8CISA ADP v3.10.2%2025-08-26Fix
CVE-2025-0083Google Android multiple locations information disclosure4.0CISA ADP v3.10.1%2025-08-26Fix
CVE-2025-0082Google Android TelecomServiceImpl.java information disclosure5.5CISA ADP v3.10.1%2025-08-26Fix
CVE-2025-0081Google Android dng_lossless_jpeg.cpp crash7.5CISA ADP v3.10.4%2025-08-26Fix
CVE-2025-0080Google Android multiple locations privilege escalation7.8CISA ADP v3.10.1%2025-08-26Fix
CVE-2025-0079Google Android multiple locations privilege escalation7.8CISA ADP v3.10.1%2025-08-26Fix
CVE-2025-0078Google Android main.cpp privilege escalation8.8CISA ADP v3.10.3%2025-08-26Fix
CVE-2025-0075Google Android sdp_server.cc remote code execution9.8CISA ADP v3.10.4%2025-08-26Fix
CVE-2025-0074Google Android sdp_discovery.cc remote code execution9.8CISA ADP v3.10.4%2025-08-26Fix
CVE-2025-57814request-filtering-agent SSRF Bypass via HTTPS requests5.5CNA v4.00.5%2025-08-25Fix
CVE-2025-57811Craft potential remote code execution via Twig SSTI6.1CNA v4.00.9%2025-08-25Fix
CVE-2025-57809XGrammar affected by denial of service by infinite recursion grammars7.7CNA v4.00.5%2025-08-25Fix
CVE-2025-57805The Scratch Channel tsc-web-client article publish endpoint improper input validation8.7CNA v4.00.3%2025-08-25Fix
CVE-2025-57804h2 allows HTTP request smuggling due to illegal characters in headers6.9CNA v4.01.7%2025-08-25Fix
CVE-2025-57802Airlink Labs Daemon mounted data directory symlink following8.7CNA v4.00.4%2025-08-25
CVE-2025-57773Dataease DB2 Aspectweaver deserialization arbitrary file write8.2CNA v4.08.9%2025-08-25Fix
CVE-2025-57772Dataease H2 JDBC RCE Bypass8.2CNA v4.010.0%2025-08-25Fix
CVE-2025-57760Langflow vulnerable to privilege escalation via CLI Superuser Creation8.8CNA v3.10.5%2025-08-25Fix
CVE-2025-56216PHPGurukul Hospital Management System SQL injection8.5CISA ADP v3.10.3%2025-08-25
CVE-2025-56215PHPGurukul Hospital Management System SQL injection6.5CISA ADP v3.10.3%2025-08-25
CVE-2025-56214PHPGurukul Hospital Management System SQL injection9.8CISA ADP v3.10.4%2025-08-25
CVE-2025-56212PHPGurukul Hospital Management System SQL injection9.8CISA ADP v3.10.4%2025-08-25
CVE-2025-55575SMM Panel SQL injection9.8CISA ADP v3.10.4%2025-08-25
CVE-2025-55574docmost cross-site scripting6.1CISA ADP v3.10.3%2025-08-25
CVE-2025-55409FoxCMS cross-site scripting8.8CISA ADP v3.10.5%2025-08-25
CVE-2025-55301the-scratch-channel.github.io The Scratch Channel allows Username Modification6.7CNA v3.10.2%2025-08-25
CVE-2025-54494The Biosig Project libbiosig MFER parsing functionality stack-based buffer overflow9.8CNA v3.10.7%2025-08-25Fix
CVE-2025-54493The Biosig Project libbiosig MFER parsing functionality stack-based buffer overflow9.8CNA v3.10.7%2025-08-25Fix
CVE-2025-54492The Biosig Project libbiosig MFER parsing functionality stack-based buffer overflow9.8CNA v3.10.7%2025-08-25Fix
CVE-2025-54491The Biosig Project libbiosig MFER parsing functionality stack-based buffer overflow9.8CNA v3.10.7%2025-08-25Fix
CVE-2025-54490The Biosig Project libbiosig MFER parsing functionality stack-based buffer overflow9.8CNA v3.10.7%2025-08-25Fix
CVE-2025-54489The Biosig Project libbiosig MFER parsing functionality stack-based buffer overflow9.8CNA v3.10.7%2025-08-25Fix
CVE-2025-54488The Biosig Project libbiosig MFER parsing functionality stack-based buffer overflow9.8CNA v3.10.7%2025-08-25Fix
CVE-2025-54487The Biosig Project libbiosig MFER parsing functionality stack-based buffer overflow9.8CNA v3.10.7%2025-08-25Fix
CVE-2025-54486The Biosig Project libbiosig MFER parsing functionality stack-based buffer overflow9.8CNA v3.10.7%2025-08-25Fix
CVE-2025-54485The Biosig Project libbiosig MFER parsing functionality stack-based buffer overflow9.8CNA v3.10.7%2025-08-25Fix
CVE-2025-54484The Biosig Project libbiosig MFER parsing functionality stack-based buffer overflow9.8CNA v3.10.7%2025-08-25Fix
CVE-2025-54483The Biosig Project libbiosig MFER parsing functionality stack-based buffer overflow9.8CNA v3.10.7%2025-08-25Fix
CVE-2025-54482The Biosig Project libbiosig MFER parsing functionality stack-based buffer overflow9.8CNA v3.10.7%2025-08-25Fix
CVE-2025-54481The Biosig Project libbiosig MFER parsing functionality stack-based buffer overflow9.8CNA v3.10.7%2025-08-25Fix
CVE-2025-54480The Biosig Project libbiosig MFER parsing functionality stack-based buffer overflow9.8CNA v3.10.7%2025-08-25Fix
CVE-2025-54462The Biosig Project libbiosig Nex parsing functionality heap-based buffer overflow9.8CNA v3.10.7%2025-08-25Fix
CVE-2025-54370PHPOffice PhpSpreadsheet HTML reader server-side request forgery8.7CNA v4.00.8%2025-08-25Fix
CVE-2025-54301Extension norrnext.com stored XSS vulnerability in Quantum Manager component for Joomla8.5CNA v4.00.3%2025-08-25
CVE-2025-54300Extension norrnext.com stored XSS vulnerability in Quantum Manager component for Joomla8.5CNA v4.00.3%2025-08-25
CVE-2025-53853The Biosig Project libbiosig ISHNE parsing functionality heap-based buffer overflow9.8v3.10.9%2025-08-25Fix
CVE-2025-53557The Biosig Project libbiosig MFER parsing functionality heap-based buffer overflow9.8CNA v3.10.7%2025-08-25Fix
CVE-2025-53518The Biosig Project libbiosig ABF parsing functionality integer overflow9.8CNA v3.10.9%2025-08-25Fix
CVE-2025-53511The Biosig Project libbiosig MFER parsing functionality heap-based buffer overflow9.8CNA v3.10.9%2025-08-25Fix
CVE-2025-53510SAIL Image Decoding Library PSD Image Decoding functionality of the memory corruption8.8CNA v3.10.7%2025-08-25Fix
CVE-2025-53120Securden Unified PAM path traversal in file upload9.4CNA v3.111.4%2025-08-25
CVE-2025-53119Securden Unified PAM unauthenticated unrestricted file upload7.5CNA v3.114.7%2025-08-25
CVE-2025-53118Securden Unified PAM authentication bypass9.8CNA v3.132.9%2025-08-25Reported exploitedNuclei
CVE-2025-53085SAIL Image Decoding Library PSD RLE Decoding functionality of the memory corruption8.8CNA v3.10.9%2025-08-25Fix
CVE-2025-52930SAIL Image Decoding Library BMPv3 RLE Decoding functionality of the memory corruption8.8CNA v3.10.9%2025-08-25Fix
CVE-2025-52581The Biosig Project libbiosig GDF parsing functionality integer overflow9.8CNA v3.10.7%2025-08-25Fix
CVE-2025-52461The Biosig Project libbiosig Nex parsing functionality out-of-bounds read9.1v3.10.5%2025-08-25Fix
CVE-2025-52456SAIL Image Decoding Library WebP Image Decoding functionality of the memory corruption8.8CNA v3.10.9%2025-08-25Fix
CVE-2025-52130WebErpMesv2 file upload5.4CISA ADP v3.10.2%2025-08-25
CVE-2025-51281D-Link DI-8100 buffer overflow7.0CISA ADP v3.10.4%2025-08-25
CVE-2025-50900getrebuild rebuild improper access control9.8CISA ADP v3.10.7%2025-08-25
CVE-2025-50722SparkShop insecure permissions9.8CISA ADP v3.10.8%2025-08-25
CVE-2025-50383Easy!Appointments SQL injection8.1CISA ADP v3.10.4%2025-08-25Exploit codeFix
CVE-2025-50129SAIL Image Decoding Library PCX Image Decoding functionality of the memory corruption8.8CNA v3.10.9%2025-08-25Fix
CVE-2025-48303Post Type Converter WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-08-25
CVE-2025-48005The Biosig Project libbiosig RHS2000 parsing functionality heap-based buffer overflow9.8CNA v3.10.7%2025-08-25Fix
CVE-2025-46411The Biosig Project libbiosig MFER parsing functionality stack-based buffer overflow9.8v3.10.9%2025-08-25Fix
CVE-2025-46407SAIL Image Decoding Library BMPv3 Palette Decoding functionality of the memory corruption8.8CNA v3.10.7%2025-08-25Fix
CVE-2025-45968System Pdv insecure direct object reference9.8CISA ADP v3.10.6%2025-08-25
CVE-2025-44179Hitron CGNF-TWN telnet service command injection6.5CISA ADP v3.10.8%2025-08-25
CVE-2025-44178DASAN GPON ONU H660WM UPnP WAN interface improper access control6.5CISA ADP v3.10.3%2025-08-25
CVE-2025-43960Adminer PHP object injection issue leads to denial of service8.6CISA ADP v3.10.7%2025-08-25Exploit code
CVE-2025-35984SAIL Image Decoding Library PCX Image Decoding functionality of the memory corruption8.8CNA v3.11.4%2025-08-25Fix
CVE-2025-32468SAIL Image Decoding Library BMPv3 Image Decoding functionality of the memory corruption8.8CNA v3.10.9%2025-08-25Fix
CVE-2025-29525DASAN GPON ONU H660WM control panel default credentials5.3CISA ADP v3.10.3%2025-08-25
CVE-2025-29524DASAN GPON ONU H660WM system_diagnostic_main.asp information disclosure6.5CISA ADP v3.10.3%2025-08-25
CVE-2025-29523D-Link DSL-7740C command injection7.2CISA ADP v3.12.1%2025-08-25
CVE-2025-29522D-Link DSL-7740C command injection6.5CISA ADP v3.11.4%2025-08-25
CVE-2025-29521D-Link DSL-7740C default credentials5.3CISA ADP v3.10.6%2025-08-25
CVE-2025-29520D-Link DSL-7740C privilege escalation5.3CISA ADP v3.10.6%2025-08-25
CVE-2025-29519D-Link DSL-7740C EXE parameter command injection5.3CISA ADP v3.11.7%2025-08-25
CVE-2025-29517D-Link DSL-7740C command injection6.8CISA ADP v3.11.6%2025-08-25
CVE-2025-29516D-Link DSL-7740C command injection7.2CISA ADP v3.12.1%2025-08-25
CVE-2025-29515D-Link DSL-7740C improper access control9.8CISA ADP v3.10.6%2025-08-25
CVE-2025-29514D-Link DSL-7740C improper access control9.8CISA ADP v3.10.6%2025-08-25
CVE-2025-29421PerfreeBlog arbitrary file read7.5CISA ADP v3.10.4%2025-08-25
CVE-2025-29420PerfreeBlog path traversal7.5CISA ADP v3.10.9%2025-08-25
CVE-2025-26467Apache Cassandra unsafe privilege definition8.8CISA ADP v3.10.5%2025-08-25Fix
CVE-2025-9426itsourcecode Online Tour and Travel Management System package.php SQL injection9.8v3.10.4%2025-08-25
CVE-2025-9425itsourcecode Online Tour and Travel Management System enquiry.php SQL injection9.8v3.10.4%2025-08-25
CVE-2025-9424Ruijie WS7204-A branch_import.php os command injection9.8v3.115.2%2025-08-25
CVE-2025-9423Campcodes Online Water Billing System editecex.php SQL injection9.8v3.10.4%2025-08-25
CVE-2025-9422oitcode samarium Team Image team cross-site scripting5.4v3.10.3%2025-08-25
CVE-2025-9421itsourcecode Apartment Management System addcomplain.php SQL injection9.8v3.10.5%2025-08-25
CVE-2025-9420itsourcecode Apartment Management System addfloor.php SQL injection9.8v3.10.5%2025-08-25
CVE-2025-9419itsourcecode Apartment Management System addunit.php SQL injection9.8v3.10.6%2025-08-25
CVE-2025-9418itsourcecode Apartment Management System addowner.php SQL injection9.8v3.10.5%2025-08-25
CVE-2025-9417itsourcecode Apartment Management System addemployee.php SQL injection8.8v3.10.5%2025-08-25
CVE-2025-9416oitcode samarium Pages Image webpage cross-site scripting4.8CNA v4.00.3%2025-08-25
CVE-2025-9415GreenCMS index.php unrestricted upload9.8v3.10.4%2025-08-25
CVE-2025-9414kalcaddle kodbox Download from Link serverDownload server-side request forgery4.9v3.10.3%2025-08-25
CVE-2025-9413lostvip-com ruoyi-go system_router.go SelectListByPage SQL injection9.8v3.10.5%2025-08-25
CVE-2025-9412lostvip-com ruoyi-go DictDataDao.go SelectListByPage SQL injection9.8v3.10.4%2025-08-25
CVE-2025-9411lostvip-com ruoyi-go LoginInforService.go SelectPageList SQL injection9.8v3.10.4%2025-08-25
CVE-2025-9410lostvip-com ruoyi-go GenTableDao.go SelectListByPage SQL injection9.8v3.10.4%2025-08-25
CVE-2025-9409lostvip-com ruoyi-go CommonController.go DownloadUpload path traversal6.5v3.10.8%2025-08-25
CVE-2025-9407mtons mblog profile cross-site scripting5.4v3.10.3%2025-08-25
CVE-2025-9406xuhuisheng lemon CmsArticleController.java uploadImage unrestricted upload9.8v3.10.4%2025-08-25
CVE-2025-9405Open5GS gmm-sm.c gmm_state_exception assertion6.9CNA v4.00.6%2025-08-25
CVE-2025-9404Scada-LTS Folder pointHierarchySLTS cross-site scripting5.4v3.10.3%2025-08-25
CVE-2025-9403jqlang jq JSON jq_test.c run_jq_tests assertion5.5v3.10.2%2025-08-25Fix
CVE-2025-9402HuangDou UTCMS Config update.php server-side request forgery7.2v3.10.4%2025-08-25
CVE-2025-9401HuangDou UTCMS Login login.php comparison6.3CNA v4.00.4%2025-08-25
CVE-2025-9400YiFang CMS P_file.php mergeMultipartUpload unrestricted upload8.8v3.10.3%2025-08-25
CVE-2025-9399YiFang CMS L_tool.php SQL injection8.8v3.10.3%2025-08-25
CVE-2025-9398YiFang CMS Migrate.php exportInstallTable information disclosure7.5v3.10.5%2025-08-25
CVE-2025-9118Dataform path traversal10.0CNA v4.00.7%2025-08-25Fix
CVE-2025-8997OpenText Enterprise Security Manager information exposure5.7CNA v4.00.3%2025-08-25Fix
CVE-2025-8627Unauthenticated protocol commands on TP-Link KP3038.7CNA v4.00.3%2025-08-25Fix
CVE-2025-8562Custom Query Shortcode WordPress plugin path traversal6.5CNA v3.10.4%2025-08-25Fix
CVE-2025-7426MINOVA TTA information disclosure and credential exposure9.3CNA v4.00.3%2025-08-25
CVE-2025-6737Securden Unified PAM Shared SSH Key and Cloud Infrastructure7.2CNA v3.10.3%2025-08-25Fix
CVE-2025-6188Arista EOS LspPing Echo Reply handling authentication bypass by spoofing7.5CNA v3.10.4%2025-08-25
CVE-2025-5514Denial of service(DoS) Vulnerability in Web server function on MELSEC iQ-F Series CPU module5.3CNA v3.10.6%2025-08-25
CVE-2025-5302Denial of service (DOS) in JSONReader in run-llama/llama_index8.6CNA v3.00.3%2025-08-25Fix
CVE-2025-5191Unquoted search path vulnerability in the Utility for Industrial Computers (Windows)7.3CNA v4.00.2%2025-08-25Fix
CVE-2025-3478OpenText Enterprise Security Manager stored XSS8.5CNA v4.00.3%2025-08-25Fix
CVE-2025-3456Arista Networks EOS accounting logs information disclosure3.8CNA v3.10.1%2025-08-25
CVE-2025-36174IBM Integrated Analytics System file upload8.0CNA v3.10.4%2025-08-24Fix
CVE-2025-36157IBM Engineering Lifecycle Management incorrect authorization9.8CNA v3.10.6%2025-08-24Fix
CVE-2025-9397givanz Vvveb media.php unrestricted upload9.8v3.10.5%2025-08-24
CVE-2025-9396ckolivas lrzip strtol_l.c __GI_____strtol_l_internal null pointer dereference5.5v3.10.3%2025-08-24Fix
CVE-2025-9395wangsongyan wblog backup.go RestorePost server-side request forgery5.3CNA v4.00.3%2025-08-24
CVE-2025-9394PoDoFo PDF Dictionary PdfTokenizer.cpp DetermineDataType use-after-free5.5v3.10.2%2025-08-24
CVE-2025-9393Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 addStaProfile stack-based overflow8.7CNA v4.01.0%2025-08-24
CVE-2025-9392Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 qosClassifier stack-based overflow8.7CNA v4.05.3%2025-08-24Emerging Threats
CVE-2025-9391Bjskzy Zhiyou ERP com.artery.workflow.ServiceImpl getFieldValue SQL injection9.8v3.10.4%2025-08-24
CVE-2025-9390Vim xxd xxd.c main buffer overflow5.5v3.10.3%2025-08-24Fix
CVE-2025-9389Vim memmove-vec-unaligned-erms.S __memmove_avx_unaligned_erms memory corruption5.5v3.10.2%2025-08-24Fix
CVE-2025-9388Scada-LTS watch_list.shtm cross-site scripting5.4v3.10.3%2025-08-24
CVE-2025-9387DCN DCME-720 Web Management Backend ip_block.php os command injection9.8v3.17.7%2025-08-24
CVE-2025-9386appneta tcpreplay tcprewrite get.c get_l2len_protocol use-after-free5.5v3.10.2%2025-08-24Fix
CVE-2025-9385appneta tcpreplay tcprewrite edit_packet.c fix_ipv6_checksums use-after-free5.5v3.10.2%2025-08-24Fix
CVE-2025-9384appneta tcpreplay parse_args.c tcpedit_post_args null pointer dereference5.5v3.10.2%2025-08-24Fix
CVE-2025-9383FNKvision Y215 CCTV Camera passwd crypt weak hash2.0CNA v4.00.1%2025-08-24
CVE-2025-9382FNKvision Y215 CCTV Camera Telnet Sevice s1_rf_test_config backdoor5.4CNA v4.00.2%2025-08-24
CVE-2025-9381FNKvision Y215 CCTV Camera wpa_supplicant.conf information disclosure1.0CNA v4.00.1%2025-08-24
CVE-2025-9380FNKvision Y215 CCTV Camera firmware passwd hard-coded credentials8.5CNA v4.00.1%2025-08-24
CVE-2025-9379Belkin AX1800 Firmware Update data authenticity8.6CNA v4.00.3%2025-08-24
CVE-2025-8208Spexo Addons for Elementor WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-08-24Fix
CVE-2025-43770Liferay Portal vulnerable to reflected XSS with the referer and forward parameter6.9CNA v4.00.2%2025-08-23Fix
CVE-2025-43769Liferay Portal vulnerable to stored XSS in components portlet4.6CNA v4.00.2%2025-08-23Fix
CVE-2025-43768Liferay Portal JSONWS API endpoint shares sensitive information5.1CNA v4.00.3%2025-08-23Fix
CVE-2025-43767Liferay Portal allows open redirect in /c/Portal/edit_info_item parameter redirect5.1CNA v4.00.2%2025-08-23Fix
CVE-2025-43766Liferay Portal allows unrestricted upload of file in the style books component6.8CNA v4.00.4%2025-08-23Fix
CVE-2025-43765Liferay Portal stored cross-site scripting in text field of the web content structure6.9CNA v4.00.2%2025-08-23Fix
CVE-2025-43764Liferay Portal ReDoS with Role Name search in KaleoDesignerPortlet6.9CNA v4.00.3%2025-08-23Fix
CVE-2025-9363Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 portTriggerManageRule stack-based overflow8.7CNA v4.04.4%2025-08-23Emerging Threats
CVE-2025-9362Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 urlFilterManageRule stack-based overflow8.8v3.10.6%2025-08-23
CVE-2025-9361Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 ipRangeBlockManageRule stack-based overflow8.7CNA v4.01.0%2025-08-23
CVE-2025-9360Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 accessControlAdd stack-based overflow8.7CNA v4.01.2%2025-08-23
CVE-2025-9359Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP_checkCredentialsByBBS stack-based overflow8.7CNA v4.01.0%2025-08-23
CVE-2025-9358Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setSysAdm stack-based overflow8.7CNA v4.01.0%2025-08-23
CVE-2025-9357Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 langSwitchByBBS stack-based overflow8.7CNA v4.01.0%2025-08-23
CVE-2025-9131Ogulo 360° Tour WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-08-23Fix
CVE-2025-9048Wptobe-memberships WordPress plugin authenticated (Subscriber+) arbitrary file deletion8.1CNA v3.10.6%2025-08-23
CVE-2025-8062WS Theme Addons WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-08-23
CVE-2025-7957ShortcodeHub WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-08-23
CVE-2025-7842Silencesoft RSS Reader WordPress plugin cross-site request forgery to RSS Feed deletion4.3CNA v3.10.1%2025-08-23
CVE-2025-7841Sertifier Certificate and Badge Maker for WordPress WordPress plugin cross-site request forgery4.3CNA v3.10.1%2025-08-23Fix
CVE-2025-7839Restore Permanently delete Post or Page Data WordPress plugin cross-site request forgery4.3CNA v3.10.1%2025-08-23
CVE-2025-7828WP Filter and Combine RSS Feeds WordPress plugin missing authorization authenticated Feed deletion4.3CNA v3.10.2%2025-08-23
CVE-2025-7827Ni WooCommerce Customer Product Report WordPress plugin unauthorized access4.3CNA v3.10.2%2025-08-23
CVE-2025-7821WC Plus WordPress plugin missing authorization to unauthenticated settings manipulation5.3CNA v3.10.2%2025-08-23
CVE-2025-7813Events Calendar WordPress plugin server-side request forgery7.2CNA v3.10.3%2025-08-23Fix
CVE-2025-7642Simpler Checkout - authentication bypass9.8CNA v3.10.5%2025-08-23Fix
CVE-2025-5821Case Theme User WordPress plugin authentication bypass via Social login9.8CNA v3.10.7%2025-08-23Fix
CVE-2025-5352Environment Variable XSS in Analytics component in lunary-ai/Lunary9.6v3.10.5%2025-08-23Fix
CVE-2025-5060Bravis User WordPress plugin authentication bypass to account takeover8.1CNA v3.10.4%2025-08-23Fix
CVE-2025-57896Church Admin WordPress plugin broken access control5.3CNA v3.10.2%2025-08-22Fix
CVE-2025-57895JobWP WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-08-22Fix
CVE-2025-57894WPPizza WordPress plugin broken access control4.3CNA v3.10.2%2025-08-22Fix
CVE-2025-57893WP Fast Total Search WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-08-22Fix
CVE-2025-57892Simple Statistics for Feeds WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-08-22Fix
CVE-2025-57891Recurring PayPal Donations WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-08-22Fix
CVE-2025-57890Sessions WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-08-22Fix
CVE-2025-57888Jobmonster WordPress theme sensitive data exposure5.3CNA v3.10.3%2025-08-22Fix
CVE-2025-57887Jobmonster WordPress theme cross-site scripting (XSS)6.5CNA v3.10.2%2025-08-22Fix
CVE-2025-57886Accessibility Checker by Equalize Digital WordPress plugin insecure direct object references (IDOR)5.4CNA v3.10.2%2025-08-22Fix
CVE-2025-57885Fluent Support WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-08-22Fix
CVE-2025-57884Greenshift WordPress plugin broken access control4.3CNA v3.10.2%2025-08-22Fix
CVE-2025-57801gnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checks8.6CNA v4.00.2%2025-08-22Fix
CVE-2025-57800Audiobookshelf vulnerable to OIDC token exfiltration and account takeover8.8CNA v3.10.5%2025-08-22Fix
CVE-2025-57771Roo-Code potential remote code execution via auto-execute command parsing flaw8.1CNA v3.10.7%2025-08-22Fix
CVE-2025-57770ZITADEL user enumeration vulnerability in login UI5.3CNA v3.10.4%2025-08-22Fix
CVE-2025-57699Western Digital Kitfox unquoted search path8.4CNA v4.00.2%2025-08-22
CVE-2025-57105D-Link DI-7400G+ command injection9.8CISA ADP v3.12.9%2025-08-22Emerging Threats
CVE-2025-55745UnoPim Quick Export feature is vulnerable to CSV injection2.5CNA v4.00.6%2025-08-22Fix
CVE-2025-55741Unopim/unopim allows unauthorized product deletion via mass-delete endpoint8.1CNA v3.10.4%2025-08-22Fix
CVE-2025-55637Reolink Smart 2k+ Plug-in Wi-fi Video Doorbell With Chime Firmware command injection9.8v3.11.7%2025-08-22
CVE-2025-55634Reolink Smart 2k+ Plug-in Wi-fi Video Doorbell With Chime Firmware denial of service7.5CISA ADP v3.10.5%2025-08-22
CVE-2025-55631Reolink Video Doorbell with Chime session management denial of service4.0CISA ADP v3.10.1%2025-08-22
CVE-2025-55630Reolink Smart 2k+ Plug-in Wi-fi Video Doorbell With Chime Firmware improper access control7.3v3.10.3%2025-08-22
CVE-2025-55629Reolink Smart insecure permissions6.5CISA ADP v3.10.2%2025-08-22
CVE-2025-55627Reolink Video Doorbell with Chime account creation privilege escalation5.3CISA ADP v3.10.2%2025-08-22
CVE-2025-55626Reolink Smart An insecure direct object reference5.3CISA ADP v3.10.2%2025-08-22
CVE-2025-55625Reolink An open redirect6.3CISA ADP v3.10.2%2025-08-22
CVE-2025-55624Reolink open redirect5.3CISA ADP v3.10.3%2025-08-22
CVE-2025-55623Reolink authentication bypass5.4CISA ADP v3.10.3%2025-08-22
CVE-2025-55622Reolink v4.54.0.4.20250526 was discovered to contain a task hijacking vulnerability due to inappropriate taskAffinity settings. NOTE: this is disputed by the Supplier because it is intentional behavior to ensure a predictable user experience.6.5CISA ADP v3.10.3%2025-08-22
CVE-2025-55621Reolink An insecure direct object reference6.5CISA ADP v3.10.2%2025-08-22
CVE-2025-55620Reolink valuateJavascript function cross-site scripting6.1CISA ADP v3.10.2%2025-08-22
CVE-2025-55619Reolink hard-coded cryptographic key9.8CISA ADP v3.10.4%2025-08-22
CVE-2025-55613Tenda O3 buffer overflow9.8CISA ADP v3.10.6%2025-08-22
CVE-2025-55611D-Link DIR-619L buffer overflow7.5NVD v3.10.4%2025-08-22
CVE-2025-55606Tenda AX3 buffer overflow7.5NVD v3.10.4%2025-08-22
CVE-2025-55605Tenda AX3 buffer overflow7.5NVD v3.10.4%2025-08-22
CVE-2025-55603Tenda AX3 buffer overflow7.5NVD v3.10.4%2025-08-22
CVE-2025-55602D-Link DIR-619L buffer overflow7.5NVD v3.10.5%2025-08-22
CVE-2025-55599D-Link DIR-619L buffer overflow7.5NVD v3.10.4%2025-08-22
CVE-2025-55581D-Link Dcs-825l Firmware improper privilege management7.3CISA ADP v3.10.2%2025-08-22
CVE-2025-55573new-api cross-site scripting8.8CISA ADP v3.10.4%2025-08-22
CVE-2025-55455DooTask unrestricted file upload3.5CISA ADP v3.10.3%2025-08-22
CVE-2025-55454DooTask component /msg/sendfiles arbitrary file upload8.8CISA ADP v3.10.7%2025-08-22
CVE-2025-55398mouse07410 asn1c UPER decoder improper input validation9.8CISA ADP v3.10.4%2025-08-22
CVE-2025-54813Apache LOG4CXX: Improper escaping with JSONLayout6.3CNA v4.01.3%2025-08-22Fix
CVE-2025-54812Apache LOG4CXX: Improper HTML escaping in HTMLLayout2.1CNA v4.01.2%2025-08-22Fix
CVE-2025-53363Dpanel has an arbitrary file read4.8CNA v4.00.5%2025-08-22
CVE-2025-52451Salesforce Tableau Server improper input validation8.5CISA ADP v3.10.2%2025-08-22Fix
CVE-2025-52450Salesforce Tableau Server path traversal6.5CISA ADP v3.10.4%2025-08-22Fix
CVE-2025-52287Elite deserialization of untrusted data8.8CISA ADP v3.10.5%2025-08-22
CVE-2025-52095Pdq Smart Deploy insufficiently protected credentials9.8CISA ADP v3.10.3%2025-08-22
CVE-2025-52094Pdq Smart Deploy insecure permissions7.8CISA ADP v3.10.2%2025-08-22
CVE-2025-52085Yoosee An SQL injection8.8CISA ADP v3.10.5%2025-08-22
CVE-2025-51825JeecgBoot SQL injection6.5CISA ADP v3.10.2%2025-08-22Fix
CVE-2025-51605Shopizer origin validation error8.1CISA ADP v3.10.2%2025-08-22
CVE-2025-51092Vishnusivadas Login-signup SQL injection9.8CISA ADP v3.10.4%2025-08-22
CVE-2025-50859Ehcp Easy Hosting Control Panel Change template function reflected cross-site scripting6.1CISA ADP v3.10.3%2025-08-22
CVE-2025-50858Ehcp Easy Hosting Control Panel List MySQL Databases function reflected cross-site scripting6.1CISA ADP v3.10.2%2025-08-22
CVE-2025-50733HTMLPreview component of artifacts.tsx NextChat contains a cross-site scripting6.1CISA ADP v3.10.2%2025-08-22
CVE-2025-50691MCSManager daemon process privilege escalation5.3CISA ADP v3.10.2%2025-08-22
CVE-2025-50674Openmediavault improper privilege management7.8CISA ADP v3.10.2%2025-08-22
CVE-2025-43762Liferay Portal users can upload an unlimited amount of files5.3CNA v4.00.4%2025-08-22Fix
CVE-2025-43761Liferay Portal reflected XSS in CKeditor endpoint6.9CNA v4.00.2%2025-08-22Fix
CVE-2025-43760Liferay Portal reflected cross-site scripting vulnerability via PortalUtil.escapeRedirect5.3CNA v4.00.3%2025-08-22Fix
CVE-2025-43759Liferay Portal users are able to add system admin portlets to pages6.7CNA v4.00.3%2025-08-22Fix
CVE-2025-43758Liferay Portal files accessible to external parties5.3CNA v4.00.3%2025-08-22Fix
CVE-2025-43752Liferay Portal's Unlimited file upload could result in DoS5.3CNA v4.00.3%2025-08-22Fix
CVE-2025-43751Liferay Portal User Enumeration vulnerability via the Create Account page6.9CNA v4.00.3%2025-08-22Fix
CVE-2025-41452Post auth nginx configuration injection in Danfoss AK-SM8xxA Series6.8CNA v4.00.7%2025-08-22KCVFix
CVE-2025-41451Post-authentication OS command injection RCE in Danfoss AK-SM8xxA Series8.7CNA v4.03.1%2025-08-22KCVFix
CVE-2025-38675Linux kernel state race condition7.8CNA v3.10.1%2025-08-22Fix
CVE-2025-38674Linux kernel DRM PRIME buffer sharing null pointer dereference5.5v3.10.1%2025-08-22Fix
CVE-2025-38673Linux kernel GEM framebuffer driver null pointer dereference5.5v3.10.1%2025-08-22Fix
CVE-2025-38672Linux kernel GEM DMA driver null pointer dereference5.5v3.10.1%2025-08-22Fix
CVE-2025-38671Linux kernel I2C QUP driver denial of service5.5v3.10.2%2025-08-22Fix
CVE-2025-38670Linux kernel arm64 stack switching vulnerability7.8CNA v3.10.2%2025-08-22Fix
CVE-2025-38669Linux kernel GEM shmem driver null pointer dereference5.5v3.10.1%2025-08-22Fix
CVE-2025-38668Linux kernel regulator coupling null pointer dereference5.5v3.10.2%2025-08-22Fix
CVE-2025-38667Linux kernel IIO subsystem out-of-bounds write7.8CNA v3.10.1%2025-08-22Fix
CVE-2025-38666Linux kernel AppleTalk AARP proxy use-after-free7.8v3.10.2%2025-08-22Fix
CVE-2025-38665Linux kernel CAN netlink interface null pointer dereference5.5v3.10.1%2025-08-22Fix
CVE-2025-38664Linux kernel ice null pointer dereference5.5v3.10.2%2025-08-22Fix
CVE-2025-38663Linux kernel NILFS2 inode handling vulnerability5.5v3.10.2%2025-08-22Fix
CVE-2025-38662Linux kernel MediaTek MT8365 I2S audio driver out-of-bounds write7.1CNA v3.10.2%2025-08-22Fix
CVE-2025-38661Linux kernel Alienware WMI WMAX driver vulnerability7.1CNA v3.10.1%2025-08-22Fix
CVE-2025-38660Linux kernel Ceph client vulnerability9.8CNA v3.10.4%2025-08-22Fix
CVE-2025-38659Linux kernel GFS2 journal recovery null pointer dereference7.8CNA v3.10.2%2025-08-22Fix
CVE-2025-38658Linux kernel NVMe PCI endpoint target vulnerability8.8CNA v3.10.2%2025-08-22Fix
CVE-2025-38657Linux kernel rtw89 multi-link switch handling out-of-bounds read7.3CNA v3.10.2%2025-08-22Fix
CVE-2025-38656Linux kernel iwlwifi DVM driver use-after-free7.8CNA v3.10.2%2025-08-22Fix
CVE-2025-38655Linux kernel Canaan K230 pin control driver null pointer dereference5.5v3.10.2%2025-08-22Fix
CVE-2025-38654Linux kernel Canaan K230 pin control driver vulnerability5.5v3.10.2%2025-08-22Fix
CVE-2025-38653Linux kernel procfs lseek handling use-after-free7.8CNA v3.10.2%2025-08-22Fix
CVE-2025-38652Linux kernel F2FS device path handling out-of-bounds read7.3CNA v3.10.2%2025-08-22Fix
CVE-2025-38651Linux kernel Landlock ID range calculation vulnerability5.5v3.10.2%2025-08-22Fix
CVE-2025-38650Linux kernel hfsplus improper locking5.5v3.10.1%2025-08-22Fix
CVE-2025-38649Linux kernel Coresight trace subsystem infinite loop5.5v3.10.2%2025-08-22Fix
CVE-2025-38648Linux kernel STM32 SPI driver null pointer dereference5.5v3.10.2%2025-08-22Fix
CVE-2025-38647Linux kernel rtw89 SAR ACPI init improper locking5.5v3.10.1%2025-08-22Fix
CVE-2025-38646Linux kernel rtw89 Wi-Fi driver null pointer dereference5.5v3.10.2%2025-08-22Fix
CVE-2025-38645Linux kernel mlx5 device memory access null pointer dereference5.5v3.10.2%2025-08-22Fix
CVE-2025-38644Linux kernel mac80211 TDLS handling vulnerability5.5v3.10.2%2025-08-22Fix
CVE-2025-38643Linux kernel cfg80211 DFS channel availability check improper locking8.8CNA v3.10.2%2025-08-22Fix
CVE-2025-38642Linux kernel mac80211 monitor mode reachable assertion5.5v3.10.2%2025-08-22Fix
CVE-2025-38641Linux kernel Bluetooth USB driver null pointer dereference5.5v3.10.1%2025-08-22Fix
CVE-2025-38640Linux kernel netfilter BPF hook reachable assertion7.8CNA v3.10.2%2025-08-22Fix
CVE-2025-38639Linux kernel netfilter nfacct match vulnerability7.1CNA v3.10.2%2025-08-22Fix
CVE-2025-38638In the Linux kernel, the following vulnerability has been resolved: ipv6: add a retry logic in net6_rt_notify() inet6_rt_notify() can be called under RCU protection only. This means the route could be changed concurrently and rt6_fill_node() could return -EMSGSIZE. Re-size the skb when this happe5.5v3.10.1%2025-08-22Fix
CVE-2025-38636Linux kernel runtime verification da monitor tracepoints out-of-bounds read7.1NVD v3.10.2%2025-08-22Fix
CVE-2025-38635Linux kernel DaVinci LPSC clock driver null pointer dereference5.5v3.10.2%2025-08-22Fix
CVE-2025-38634Linux kernel CPCAP charger driver null pointer dereference5.5v3.10.2%2025-08-22Fix
CVE-2025-38633Linux kernel SpacemiT K1 clock driver denial of service5.5v3.10.1%2025-08-22Fix
CVE-2025-38632Linux kernel pinmux subsystem race condition4.7v3.10.1%2025-08-22Fix
CVE-2025-38631Linux kernel imx95-blk-ctl crash5.5v3.10.2%2025-08-22Fix
CVE-2025-38630Linux kernel imxfb null pointer dereference5.5v3.10.2%2025-08-22Fix
CVE-2025-38629Linux kernel Scarlett2 USB audio driver null pointer dereference5.5v3.10.2%2025-08-22Fix
CVE-2025-38628Linux kernel mlx5 vDPA driver vulnerability5.5v3.10.2%2025-08-22Fix
CVE-2025-38627Linux kernel f2fs compression use-after-free7.8CNA v3.10.2%2025-08-22Fix
CVE-2025-38626Linux kernel f2fs kernel panic5.5v3.10.2%2025-08-22Fix
CVE-2025-38625Linux kernel pds VFIO driver vulnerability5.5v3.10.2%2025-08-22Fix
CVE-2025-38624Linux kernel pnv_php kernel panic5.5v3.10.2%2025-08-22Fix
CVE-2025-38623Linux kernel PowerNV PCI hotplug driver denial of service5.5v3.10.2%2025-08-22Fix
CVE-2025-38622Linux kernel UDP receive segmentation denial of service5.5v3.10.2%2025-08-22Fix
CVE-2025-38621Linux kernel md kernel panic5.5v3.10.2%2025-08-22Fix
CVE-2025-38620Linux kernel zoned loop device driver use-after-free7.8v3.10.2%2025-08-22Fix
CVE-2025-38619Linux kernel j721e-csi2rx crash7.8CNA v3.10.2%2025-08-22Fix
CVE-2025-38618Linux kernel vsock binding use-after-free7.8CNA v3.10.2%2025-08-22Fix
CVE-2025-38617Linux kernel net/packet race condition7.8CNA v3.10.4%2025-08-22Fix
CVE-2025-38616Linux kernel TLS socket layer out-of-bounds read7.8CNA v3.10.2%2025-08-22Fix
CVE-2025-36042IBM QRadar SIEM cross-site scripting5.4CNA v3.10.2%2025-08-22Fix
CVE-2025-33120IBM QRadar SIEM privilege escalation7.8CNA v3.10.2%2025-08-22Fix
CVE-2025-29366mupen64plus write_rdram_regs function vulnerability9.8CISA ADP v3.10.6%2025-08-22
CVE-2025-29365Spimsimulator Spim buffer overflow9.8CISA ADP v3.10.5%2025-08-22
CVE-2025-26498Salesforce Tableau Server unrestricted file upload7.3CISA ADP v3.10.3%2025-08-22Fix
CVE-2025-26497Salesforce Tableau Server unrestricted file upload7.3CISA ADP v3.10.3%2025-08-22Fix
CVE-2025-26496Salesforce Tableau Server, Tableau Desktop type confusion9.3CISA ADP v3.10.2%2025-08-22Fix
CVE-2025-9356Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 inboundFilterAdd stack-based overflow8.7CNA v4.01.0%2025-08-22
CVE-2025-9355Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 scheduleAdd stack-based overflow8.7CNA v4.01.0%2025-08-22
CVE-2025-9341Bouncy Castle for Java has uncontrolled resource consumption5.9CNA v4.00.2%2025-08-22Fix
CVE-2025-9340Bouncy Castle for Java has out-of-bounds write0.0CNA v4.00.2%2025-08-22Fix
CVE-2025-9331Spacious WordPress theme missing authorization to Autheticated (Subscriber+) Demo data import4.3CNA v3.10.3%2025-08-22Fix
CVE-2025-9259Uniong|WebITR arbitrary file reading through path traversal7.1CNA v4.00.6%2025-08-22Fix
CVE-2025-9258Uniong|WebITR arbitrary file reading through path traversal7.1CNA v4.00.6%2025-08-22Fix
CVE-2025-9257Uniong|WebITR arbitrary file reading through path traversal7.1CNA v4.00.6%2025-08-22Fix
CVE-2025-9256Uniong|WebITR arbitrary file reading through path traversal7.1CNA v4.00.6%2025-08-22Fix
CVE-2025-9255Uniong|WebITR SQL injection8.7CNA v4.00.5%2025-08-22Fix
CVE-2025-9254Uniong|WebITR missing authentication9.3CNA v4.00.6%2025-08-22Fix
CVE-2025-8678WP Crontrol - Authenticated (Administrator+) blind server-side request forgery5.9CNA v3.10.3%2025-08-22Fix
CVE-2025-8281WP Talroo WordPress plugin reflected XSS7.1CISA ADP v3.10.3%2025-08-22
CVE-2025-6791Centreon web second order SQL injection available to user with low privilege8.8CNA v3.10.3%2025-08-22Fix
CVE-2025-4650Centreon web user with high privileges is able to introduce a SQLi7.2CNA v3.10.4%2025-08-22Fix
CVE-2025-4609Google Chrome incorrect permission assignment9.6CISA ADP v3.10.4%2025-08-22Fix
CVE-2025-57768Alanaktion phproject stored XSS in hours fields when creating or editing an issue6.9CNA v4.00.4%2025-08-21Fix
CVE-2025-57765WeGIA cross-site scripting (XSS) Reflected endpoint pre_cadastro_adotante.php parameter msg_e6.5CNA v3.10.3%2025-08-21Fix
CVE-2025-57764WeGIA cross-site scripting (XSS) Reflected endpoint cargos.php parameter msg_e6.5CNA v3.10.3%2025-08-21Fix
CVE-2025-57763LabRedesCefetRJ WeGIA cross-site scripting (XSS) Reflected in insere_despacho.php parameter sccs6.4CNA v4.00.2%2025-08-21Fix
CVE-2025-57762WeGIA dependente_docdependente.php endpoint stored cross-site scripting6.4CNA v4.00.2%2025-08-21Fix
CVE-2025-57761WeGIA SQL injection vulnerability9.4CNA v4.00.4%2025-08-21Fix
CVE-2025-57755@musistudio/claude-code-router has improper CORS configuration8.1CNA v4.00.3%2025-08-21Fix
CVE-2025-57754eslint-ban-moment exposed a sensitive Supabase URI in .env (credential leak)9.8CNA v3.10.4%2025-08-21
CVE-2025-57753vite-plugin-static-copy files not included in `src` are accessible with a crafted request6.0CNA v4.00.4%2025-08-21Fix
CVE-2025-57751Denial of service attack in pyLoad CNL Blueprint using dukpy.evaljs7.7CNA v4.00.3%2025-08-21Fix
CVE-2025-55744UnoPim vulnerable to CSRF on Product edit feature and creation of other types6.9CNA v4.00.2%2025-08-21Fix
CVE-2025-55743UnoPim vulnerable to remote code execution through arbitrary file upload7.3CNA v4.00.5%2025-08-21Fix
CVE-2025-55742UnoPim stored XSS via SVG MIME/Sanitizer Bypass8.0CNA v3.10.4%2025-08-21Fix
CVE-2025-55564Tenda AC15 stack-based buffer overflow7.5CISA ADP v3.10.4%2025-08-21
CVE-2025-55524agent-zero insecure permissions7.3CISA ADP v3.10.3%2025-08-21
CVE-2025-55523agent-zero path traversal3.5CISA ADP v3.11.1%2025-08-21Nuclei
CVE-2025-55522Akaunting component /common/reports cross-site scripting6.5CISA ADP v3.10.4%2025-08-21
CVE-2025-55521Akaunting denial of service6.5CISA ADP v3.10.5%2025-08-21
CVE-2025-55420FoxCMS cross-site scripting8.8CISA ADP v3.10.5%2025-08-21
CVE-2025-55383Moss upload function vulnerability8.6CISA ADP v3.10.3%2025-08-21
CVE-2025-55371jishenghua jshERP improper access control5.3CISA ADP v3.10.3%2025-08-21
CVE-2025-55370jishenghua jshERP insecure direct object reference8.8CISA ADP v3.10.4%2025-08-21
CVE-2025-55368jishenghua jshERP improper access control8.8CISA ADP v3.10.4%2025-08-21
CVE-2025-55367jishenghua jshERP improper access control5.3CISA ADP v3.10.3%2025-08-21
CVE-2025-55366jishenghua jshERP privilege escalation5.3CISA ADP v3.10.3%2025-08-21
CVE-2025-55297espressif esp-idf ESF-IDF BluFi Example Memory Overflow vulnerability5.2CNA v4.00.3%2025-08-21Fix
CVE-2025-55231Microsoft Windows Storage-based Management service remote code execution7.5CNA v3.10.5%2025-08-21Fix