CVE-2025 records published in August 2025
Page two of four: records 1,001 to 2,000 of the 3,350 published in August 2025, newest first. The first page carries the figures for August 2025.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2025-55230 | Microsoft Windows MBT Transport driver elevation of privilege | 7.8CNA v3.1 | 0.4% | 2025-08-21 | Fix |
| CVE-2025-55229 | Microsoft Windows Certificate spoofing | 5.3CNA v3.1 | 0.5% | 2025-08-21 | Fix |
| CVE-2025-55107 | Bug-000177335 ArcGIS Enterprise Sites has a stored cross-site scripting | 4.8CNA v3.1 | 0.2% | 2025-08-21 | Fix |
| CVE-2025-55106 | Bug-000173171 ArcGIS Enterprise Sites has a cross-site scripting | 4.8CNA v3.1 | 0.2% | 2025-08-21 | Fix |
| CVE-2025-55105 | Bug-000177336 ArcGIS Enterprise Sites has a stored cross-site scripting | 4.8CNA v3.1 | 0.2% | 2025-08-21 | Fix |
| CVE-2025-55104 | Bug-000173918 ArcGIS Enterprise Sites has a security vulnerability | 4.8CNA v3.1 | 0.2% | 2025-08-21 | Fix |
| CVE-2025-55103 | Bug-000177333 ArcGIS Enterprise Sites has a stored cross-site scripting | 4.8CNA v3.1 | 0.2% | 2025-08-21 | Fix |
| CVE-2025-54460 | AVEVA PI Integrator unrestricted upload of file with dangerous type | 7.1CNA v4.0 | 0.3% | 2025-08-21 | Fix |
| CVE-2025-53971 | Mattermost channel and Team Membership APIs inadvertently allow loss of Member privileges | 3.8CNA v3.1 | 0.2% | 2025-08-21 | Fix |
| CVE-2025-53795 | Microsoft PC Manager elevation of privilege | 9.1CNA v3.1 | 0.6% | 2025-08-21 | Fix |
| CVE-2025-53763 | Microsoft Purview Data Governance azure Databricks elevation of privilege | 9.8CNA v3.1 | 0.7% | 2025-08-21 | Fix |
| CVE-2025-53505 | Intermesh groupoffice path traversal | 5.3v3.1 | 0.3% | 2025-08-21 | Fix |
| CVE-2025-53504 | Intermesh groupoffice cross-site scripting | 4.8CNA v4.0 | 0.2% | 2025-08-21 | Fix |
| CVE-2025-53251 | Pin WP WordPress theme arbitrary file upload | 9.9CNA v3.1 | 0.3% | 2025-08-21 | Fix |
| CVE-2025-52395 | Roadcute API password reset endpoint improper authentication | 9.8CISA ADP v3.1 | 0.6% | 2025-08-21 | |
| CVE-2025-52352 | Aikaan IoT management platform sign-up API endpoint missing authorization | 9.8CISA ADP v3.1 | 0.6% | 2025-08-21 | |
| CVE-2025-52351 | Aikaan IoT management platform account activation cleartext transmission of sensitive information | 8.8CISA ADP v3.1 | 0.2% | 2025-08-21 | |
| CVE-2025-52194 | libsndfile A buffer overflow | 7.5CISA ADP v3.1 | 0.6% | 2025-08-21 | Fix |
| CVE-2025-51989 | Evolution Consulting HRmaster registration firstname field HTML injection | 7.0CISA ADP v3.1 | 0.4% | 2025-08-21 | |
| CVE-2025-51818 | chshcms mccms files accessible to external parties | 5.4CISA ADP v3.1 | 0.3% | 2025-08-21 | |
| CVE-2025-51606 | Hippo4j Includes hard coded secret Key in JWT Creation | 8.8CISA ADP v3.1 | 0.4% | 2025-08-21 | |
| CVE-2025-50860 | Ehcp Easy Hosting Control Panel listdomains function SQL injection | 5.4CISA ADP v3.1 | 0.2% | 2025-08-21 | |
| CVE-2025-49810 | Mattermost thread summarization allows persistent access to channel | 3.5CNA v3.1 | 0.2% | 2025-08-21 | Fix |
| CVE-2025-49222 | Mattermost Shared Channel Upload Type Validation Bypass | 6.8CNA v3.1 | 0.3% | 2025-08-21 | Fix |
| CVE-2025-48978 | Ubiquiti EdgeMAX EdgeSwitch An improper input validation | 7.5CISA ADP v3.1 | 0.7% | 2025-08-21 | Fix |
| CVE-2025-48956 | vLLM API endpoints vulnerable to denial of service Attacks | 7.5CNA v3.1 | 0.6% | 2025-08-21 | Fix |
| CVE-2025-48355 | ProveSource Social Proof WordPress plugin sensitive data exposure | 5.3CNA v3.1 | 0.3% | 2025-08-21 | Fix |
| CVE-2025-47870 | Mattermost team invite ID leaked to team admin with no member invite privileges | 4.3CNA v3.1 | 0.2% | 2025-08-21 | Fix |
| CVE-2025-47700 | Mattermost AI plugin APIs can be triggered using post actions | 3.5CNA v3.1 | 0.2% | 2025-08-21 | Fix |
| CVE-2025-47184 | Exagid EX10 /init API endpoint XML external entity injection | 5.3CISA ADP v3.1 | 0.3% | 2025-08-21 | |
| CVE-2025-43756 | Liferay Portal reflected cross-site scripting vulnerability via snippet parameter | 6.9CNA v4.0 | 0.2% | 2025-08-21 | Fix |
| CVE-2025-43755 | Liferay Portal stored cross-site scripting vulnerability via GroupPagesPortlet_type parameter | 5.1CNA v4.0 | 0.2% | 2025-08-21 | Fix |
| CVE-2025-43754 | Liferay Portal timing side channel | 6.9CNA v4.0 | 0.3% | 2025-08-21 | Fix |
| CVE-2025-43753 | Liferay Portal reflected cross-site scripting vulnerability via Form Container | 2.1CNA v4.0 | 0.2% | 2025-08-21 | Fix |
| CVE-2025-43747 | Liferay DXP server-side request forgery | 4.8CNA v4.0 | 0.2% | 2025-08-21 | Fix |
| CVE-2025-43300 | Apple iOS, iPadOS, and macOS out-of-bounds write | 10.0CISA ADP v3.1 | 32.5% | 2025-08-21 | KEVExploit codeKCVFix |
| CVE-2025-41415 | AVEVA PI Integrator insertion of sensitive information into sent data | 7.1CNA v4.0 | 0.4% | 2025-08-21 | Fix |
| CVE-2025-38743 | Dell iDRAC Service Module (iSM) buffer access with incorrect length | 7.8CNA v3.1 | 0.1% | 2025-08-21 | Fix |
| CVE-2025-38742 | Dell iDRAC Service Module (iSM) incorrect permission assignment | 5.3CNA v3.1 | 0.1% | 2025-08-21 | Fix |
| CVE-2025-36530 | Mattermost import path traversal enables Unauthorized Unsigned Plugin Installation | 6.8CNA v3.1 | 0.5% | 2025-08-21 | Fix |
| CVE-2025-34158 | Plex Media Server incorrect resource transfer | 8.5CNA v3.1 | 0.6% | 2025-08-21 | Fix |
| CVE-2025-27721 | INFINITT Healthcare INFINITT PACS System Manager information disclosure | 8.7CNA v4.0 | 0.3% | 2025-08-21 | Fix |
| CVE-2025-27714 | INFINITT Healthcare INFINITT PACS unrestricted upload of file with dangerous type | 5.3CNA v4.0 | 0.4% | 2025-08-21 | Fix |
| CVE-2025-27217 | Ubiquiti UISP Application server-side request forgery | 9.1CISA ADP v3.1 | 0.4% | 2025-08-21 | Fix |
| CVE-2025-27216 | Ubiquiti UISP Application Multiple incorrect permission assignment | 8.8CISA ADP v3.1 | 0.3% | 2025-08-21 | Fix |
| CVE-2025-27215 | Ubiquiti UniFi Connect Display Cast improper access control | 8.1CISA ADP v3.1 | 0.3% | 2025-08-21 | Fix |
| CVE-2025-27214 | Ubiquiti UniFi Connect EV Station Pro missing authentication | 9.8CISA ADP v3.1 | 0.4% | 2025-08-21 | Fix |
| CVE-2025-27213 | Ubiquiti UniFi Connect EV Station Pro incorrect authorization | 4.9CISA ADP v3.1 | 0.2% | 2025-08-21 | Fix |
| CVE-2025-24489 | INFINITT Healthcare INFINITT PACS unrestricted upload of file with dangerous type | 5.3CNA v4.0 | 0.3% | 2025-08-21 | Fix |
| CVE-2025-24285 | Ubiquiti UniFi Connect EV Station Lite Multiple improper input validation | 9.8CISA ADP v3.1 | 1.2% | 2025-08-21 | Fix |
| CVE-2025-9311 | itsourcecode Apartment Management System addfair.php SQL injection | 9.8v3.1 | 0.4% | 2025-08-21 | |
| CVE-2025-9310 | yeqifu carRental Druid login.html hard-coded credentials | 7.5v3.1 | 0.6% | 2025-08-21 | |
| CVE-2025-9309 | Tenda AC10 MD5 Hash shadow hard-coded credentials | 7.0v3.1 | 0.2% | 2025-08-21 | |
| CVE-2025-9308 | yarnpkg Yarn request-manager.js setOptions redos | 5.5v3.1 | 0.2% | 2025-08-21 | Fix |
| CVE-2025-9307 | PHPGurukul Online Course Registration session.php SQL injection | 9.8v3.1 | 0.4% | 2025-08-21 | |
| CVE-2025-9306 | SourceCodester Advanced School Management System addNotice cross-site scripting | 5.4v3.1 | 0.3% | 2025-08-21 | |
| CVE-2025-9305 | SourceCodester Online Bank Management System mnotice.php SQL injection | 9.8v3.1 | 0.4% | 2025-08-21 | |
| CVE-2025-9304 | SourceCodester Online Bank Management System show.php SQL injection | 9.8v3.1 | 0.4% | 2025-08-21 | |
| CVE-2025-9303 | TOTOLINK A720R cstecgi.cgi setParentalRules buffer overflow | 9.8v3.1 | 0.9% | 2025-08-21 | |
| CVE-2025-9302 | PHPGurukul User Management System signup.php SQL injection | 9.8v3.1 | 0.4% | 2025-08-21 | |
| CVE-2025-9301 | cmake cmForEachCommand.cxx ReplayItems assertion | 4.8CNA v4.0 | 0.1% | 2025-08-21 | Fix |
| CVE-2025-9300 | saitoha libsixel img2sixel encoder.c sixel_debug_print_palette stack-based overflow | 7.8v3.1 | 0.2% | 2025-08-21 | Fix |
| CVE-2025-9299 | Tenda M3 getMasterPassengerAnalyseData formGetMasterPassengerAnalyseData stack-based overflow | 9.8v3.1 | 5.1% | 2025-08-21 | Emerging Threats |
| CVE-2025-9298 | Tenda M3 QuickIndex formQuickIndex stack-based overflow | 9.8v3.1 | 1.1% | 2025-08-21 | Emerging Threats |
| CVE-2025-9297 | Tenda i22 wxportalauth formWeixinAuthInfoGet stack-based overflow | 8.7CNA v4.0 | 1.1% | 2025-08-21 | Emerging Threats |
| CVE-2025-9296 | Emlog Pro blogger.php unrestricted upload | 9.8v3.1 | 0.4% | 2025-08-21 | |
| CVE-2025-9264 | Xuxueli xxl-job Jobs JobInfoController.java remove resource injection | 5.4v3.1 | 0.3% | 2025-08-21 | Fix |
| CVE-2025-9162 | keycloak Org.Keycloak/keycloak-model-storage-service: Variable injection into environment variables | 4.9CNA v3.1 | 0.5% | 2025-08-21 | Fix |
| CVE-2025-8895 | WP Webhooks WordPress plugin unauthenticated arbitrary file Copy | 9.8CNA v3.1 | 0.6% | 2025-08-21 | Fix |
| CVE-2025-8607 | SlingBlocks Gutenberg Blocks by FunnelKit WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-08-21 | Fix |
| CVE-2025-8592 | Inspiro WordPress theme cross-site request forgery to arbitrary plugin installation | 8.1CNA v3.1 | 0.2% | 2025-08-21 | Fix |
| CVE-2025-8402 | Mattermost nil pointer dereference in bulk import crashes server | 4.9CNA v3.1 | 0.3% | 2025-08-21 | Fix |
| CVE-2025-8064 | Bible SuperSearch WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-08-21 | Fix |
| CVE-2025-8023 | Mattermost path traversal in template upload allows Uploading Files Outside Target Directory | 6.8CNA v3.1 | 0.4% | 2025-08-21 | Fix |
| CVE-2025-7969 | Markdown-it cross-site scripting (XSS) | 6.1v3.1 | 0.2% | 2025-08-21 | |
| CVE-2025-7390 | Softing OPC UA C++ SDK client certificate trust check improper certificate validation | 9.1CNA v3.1 | 0.3% | 2025-08-21 | |
| CVE-2025-7221 | GiveWP WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.2% | 2025-08-21 | Fix |
| CVE-2025-7051 | N-central Syslog Configuration insecure direct object reference | 8.3CNA v3.1 | 0.3% | 2025-08-21 | Fix |
| CVE-2025-6465 | Mattermost path traversal in image upload with preview overwrite | 4.3CNA v3.1 | 0.8% | 2025-08-21 | Fix |
| CVE-2025-3128 | Mitsubishi Electric Europe smartRTU OS command injection | 9.3CNA v4.0 | 0.7% | 2025-08-21 | |
| CVE-2025-57791 | Commvault CommCell argument injection vulnerability in CommServe | 6.5v3.1 | 37.0% | 2025-08-20 | MetasploitExploit codeKCVFix |
| CVE-2025-57790 | Commvault CommCell path traversal | 8.8v3.1 | 29.0% | 2025-08-20 | MetasploitExploit codeKCVFix |
| CVE-2025-57789 | Commvault CommCell vulnerability in Initial Administrator Login Process | 5.4v3.1 | 1.2% | 2025-08-20 | NucleiKCVFix |
| CVE-2025-57788 | Commvault CommCell Unauthorized API Access Risk | 6.5v3.1 | 7.8% | 2025-08-20 | NucleiMetasploitExploit codeKCVFix |
| CVE-2025-57749 | n8n has a symlink traversal vulnerability in Read/Write file node allows access to restricted files | 6.5CNA v3.1 | 0.5% | 2025-08-20 | Fix |
| CVE-2025-57734 | JetBrains TeamCity sensitive information in an accessible file | 4.3CNA v3.1 | 0.8% | 2025-08-20 | Fix |
| CVE-2025-57733 | JetBrains TeamCity command injection | 5.5CNA v3.1 | 0.3% | 2025-08-20 | Fix |
| CVE-2025-57732 | JetBrains TeamCity privilege escalation | 7.5CNA v3.1 | 0.1% | 2025-08-20 | Fix |
| CVE-2025-57731 | JetBrains YouTrack cross-site scripting | 8.7CNA v3.1 | 0.3% | 2025-08-20 | Fix |
| CVE-2025-57730 | JetBrains IntelliJ IDEA cross-site scripting | 5.2CNA v3.1 | 0.4% | 2025-08-20 | Fix |
| CVE-2025-57729 | JetBrains IntelliJ IDEA inclusion of untrusted functionality | 6.5CNA v3.1 | 0.1% | 2025-08-20 | Fix |
| CVE-2025-57728 | JetBrains IntelliJ IDEA incorrect authorization | 6.5CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-57727 | JetBrains IntelliJ IDEA cleartext transmission of sensitive information | 4.7CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-55751 | OnboardLite open redirect endpoint | 5.1CNA v4.0 | 0.3% | 2025-08-20 | |
| CVE-2025-55746 | Directus allows unauthenticated file upload and file modification due to lacking input sanitization | 9.3CNA v3.1 | 1.4% | 2025-08-20 | NucleiFix |
| CVE-2025-55732 | Frappe has the possibility of SQL injection due to improper validations | 8.7CNA v4.0 | 0.3% | 2025-08-20 | Fix |
| CVE-2025-55731 | Frappe has the possibility of authenticated SQL injection due to improper validations | 6.3CNA v4.0 | 0.4% | 2025-08-20 | Fix |
| CVE-2025-55715 | Otter - Gutenberg Block WordPress plugin sensitive data exposure | 7.5CNA v3.1 | 0.4% | 2025-08-20 | Fix |
| CVE-2025-55706 | Six Apart Movable Type (Software Edition) open redirect | 5.1CNA v4.0 | 0.2% | 2025-08-20 | |
| CVE-2025-55503 | Tenda AC6 stack-based buffer overflow | 7.3CISA ADP v3.1 | 0.3% | 2025-08-20 | |
| CVE-2025-55499 | Tenda AC6 buffer overflow | 6.5CISA ADP v3.1 | 0.3% | 2025-08-20 | |
| CVE-2025-55498 | Tenda AC6 stack-based buffer overflow | 7.5CISA ADP v3.1 | 0.4% | 2025-08-20 | |
| CVE-2025-55483 | Tenda AC6 stack-based buffer overflow | 7.5CISA ADP v3.1 | 0.4% | 2025-08-20 | |
| CVE-2025-55482 | Tenda AC6 stack-based buffer overflow | 7.5CISA ADP v3.1 | 0.4% | 2025-08-20 | |
| CVE-2025-55444 | Vishalmathur Online Artwork And Fine Arts Project SQL injection | 9.8CISA ADP v3.1 | 0.8% | 2025-08-20 | |
| CVE-2025-54988 | Apache Tika PDF parser module: XXE vulnerability in PDFParser's handling of XFA | 8.4CNA v3.1 | 48.5% | 2025-08-20 | NucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2025-54927 | Schneider Electric EcoStruxure™ Power Monitoring Expert (PME) path traversal | 4.9CNA v3.1 | 0.6% | 2025-08-20 | Fix |
| CVE-2025-54926 | Schneider Electric EcoStruxure™ Power Monitoring Expert (PME) path traversal | 7.2CNA v3.1 | 0.9% | 2025-08-20 | Fix |
| CVE-2025-54925 | Schneider Electric EcoStruxure™ Power Monitoring Expert (PME) server-side request forgery | 7.5CNA v3.1 | 0.5% | 2025-08-20 | Fix |
| CVE-2025-54924 | Schneider Electric EcoStruxure™ Power Monitoring Expert (PME) server-side request forgery | 7.5CNA v3.1 | 0.5% | 2025-08-20 | Fix |
| CVE-2025-54923 | Schneider Electric EcoStruxure™ Power Monitoring Expert (PME) deserialization of untrusted data | 8.7CNA v4.0 | 0.7% | 2025-08-20 | Fix |
| CVE-2025-54750 | Funnel Builder by FunnelKit WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.6% | 2025-08-20 | Fix |
| CVE-2025-54735 | CubeWP Framework WordPress plugin privilege escalation | 8.8CNA v3.1 | 0.4% | 2025-08-20 | Fix |
| CVE-2025-54726 | JS Archive List WordPress plugin SQL injection | 9.3CNA v3.1 | 1.5% | 2025-08-20 | NucleiExploit codeFix |
| CVE-2025-54713 | Taxi Booking Manager for WooCommerce WordPress plugin broken authentication | 9.8CNA v3.1 | 0.6% | 2025-08-20 | Fix |
| CVE-2025-54677 | Online Booking and Scheduling Calendar for WordPress by vcita plugin arbitrary file upload | 7.2NVD v3.1 | 0.4% | 2025-08-20 | Exploit codeFix |
| CVE-2025-54670 | oik WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-54551 | FUJIFILM Healthcare Americas Synapse Mobility web parameter tampering | 5.3CNA v4.0 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-54364 | Microsoft Knack regular expression denial of service | 6.9CNA v4.0 | 0.4% | 2025-08-20 | |
| CVE-2025-54363 | Microsoft Knack regular expression denial of service | 6.9CNA v4.0 | 0.4% | 2025-08-20 | |
| CVE-2025-54175 | OpenSolution Quick.CMS.EXT reflected cross-site scripting in QuickCMS.EXT | 6.1v3.1 | 0.2% | 2025-08-20 | |
| CVE-2025-54174 | Cross-site request forgery in QuickCMS | 4.3v3.1 | 0.1% | 2025-08-20 | |
| CVE-2025-54172 | Stored cross-site scripting in QuickCMS | 4.8v3.1 | 0.2% | 2025-08-20 | |
| CVE-2025-54056 | WordPress Responsive HTML5 Audio Player PRO With Playlist plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-54055 | WordPress Druco theme cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-54053 | Groundhogg WordPress plugin PHP object injection | 6.6CNA v3.1 | 0.4% | 2025-08-20 | Fix |
| CVE-2025-54052 | Realtyna Organic IDX WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-54049 | WordPress Custom API for WP plugin privilege escalation | 9.9CNA v3.1 | 0.4% | 2025-08-20 | Fix |
| CVE-2025-54048 | WordPress Custom API for WP plugin SQL injection | 9.3CNA v3.1 | 0.4% | 2025-08-20 | Fix |
| CVE-2025-54046 | Cost Calculator WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-08-20 | Fix |
| CVE-2025-54044 | WordPress Elite Video Player plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-54040 | WordPress Webba Booking plugin broken access control | 6.5CNA v3.1 | 0.4% | 2025-08-20 | Fix |
| CVE-2025-54034 | Newsletters WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.6% | 2025-08-20 | Fix |
| CVE-2025-54032 | Real Estate Manager Pro WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-08-20 | Fix |
| CVE-2025-54031 | WordPress Support Board plugin local file inclusion | 8.1CNA v3.1 | 0.7% | 2025-08-20 | Fix |
| CVE-2025-54028 | CF7 WOW Styler WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.6% | 2025-08-20 | Fix |
| CVE-2025-54027 | WordPress Support Board plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-54025 | Coupon Affiliates WordPress plugin settings Change vulnerability | 6.5CNA v3.1 | 0.3% | 2025-08-20 | Fix |
| CVE-2025-54021 | Simple File List WordPress plugin arbitrary file download | 7.5CNA v3.1 | 0.4% | 2025-08-20 | Fix |
| CVE-2025-54019 | WordPress Alone theme arbitrary code execution | 6.5CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-54017 | WordPress Paid Member Subscriptions plugin local file inclusion | 7.5CNA v3.1 | 0.6% | 2025-08-20 | Fix |
| CVE-2025-54014 | WordPress MediCenter - Health Medical Clinic theme PHP object injection | 9.8CNA v3.1 | 0.4% | 2025-08-20 | Fix |
| CVE-2025-54012 | Welcart e-Commerce WordPress plugin PHP object injection | 7.2CNA v3.1 | 0.5% | 2025-08-20 | Fix |
| CVE-2025-54008 | WordPress JetSmartFilters plugin sensitive data exposure | 6.5CNA v3.1 | 0.3% | 2025-08-20 | Fix |
| CVE-2025-54007 | Post Grid and Gutenberg Blocks WordPress plugin PHP object injection | 8.8CNA v3.1 | 0.4% | 2025-08-20 | Fix |
| CVE-2025-53998 | WordPress JetWooBuilder plugin sensitive data exposure | 6.5CNA v3.1 | 0.4% | 2025-08-20 | Fix |
| CVE-2025-53993 | JetPopup WordPress plugin sensitive data exposure | 6.5CNA v3.1 | 0.4% | 2025-08-20 | Fix |
| CVE-2025-53992 | WordPress JetTricks plugin sensitive data exposure | 6.5CNA v3.1 | 0.3% | 2025-08-20 | Fix |
| CVE-2025-53988 | WordPress JetBlocks For Elementor plugin sensitive data exposure | 6.5CNA v3.1 | 0.3% | 2025-08-20 | Fix |
| CVE-2025-53987 | WordPress JetMenu plugin sensitive data exposure | 6.5CNA v3.1 | 0.4% | 2025-08-20 | Fix |
| CVE-2025-53985 | WordPress JetTabs plugin sensitive data exposure | 6.5CNA v3.1 | 0.4% | 2025-08-20 | Fix |
| CVE-2025-53983 | WordPress JetElements For Elementor plugin sensitive data exposure | 6.5CNA v3.1 | 0.4% | 2025-08-20 | Fix |
| CVE-2025-53580 | Simple Business Directory Pro WordPress plugin privilege escalation | 9.8CNA v3.1 | 0.4% | 2025-08-20 | Exploit codeFix |
| CVE-2025-53577 | Global DNS WordPress plugin remote code execution (RCE) | 10.0CNA v3.1 | 0.4% | 2025-08-20 | Fix |
| CVE-2025-53567 | WordPress Ghost Kit plugin local file inclusion | 8.1CNA v3.1 | 0.6% | 2025-08-20 | Fix |
| CVE-2025-53565 | WordPress Widget for Google Reviews plugin local file inclusion | 8.1CNA v3.1 | 0.6% | 2025-08-20 | Fix |
| CVE-2025-53564 | WordPress HTML5 Radio Player - WPBakery Page Builder Addon plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-53563 | WordPress Youtube Vimeo Video Player and Slider plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-53562 | WordPress Universal Video Player - Addon for WPBakery Page Builder plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-53561 | miniOrange WordPress Prevent files and Folders Access plugin path traversal | 6.5CNA v3.1 | 0.4% | 2025-08-20 | Fix |
| CVE-2025-53560 | Noisa WordPress theme PHP object injection | 8.8CNA v3.1 | 0.4% | 2025-08-20 | Fix |
| CVE-2025-53559 | WordPress Universal Video Player - Addon for WPBakery Page Builder plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-53522 | Six Apart Movable Type (Software Edition) use of a less trusted source | 6.9CNA v4.0 | 0.2% | 2025-08-20 | |
| CVE-2025-53319 | Raptive Ads WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-53299 | ThemeMakers Visual Content Composer WordPress plugin PHP object injection | 9.8CNA v3.1 | 0.5% | 2025-08-20 | |
| CVE-2025-53226 | Comments Capcha Box WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-20 | |
| CVE-2025-53213 | WordPress ReachShip WooCommerce Multi-Carrier and Conditional Shipping plugin arbitrary file upload | 9.9CNA v3.1 | 0.3% | 2025-08-20 | Fix |
| CVE-2025-53212 | WordPress Revolution Video Player With Bottom Playlist plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-53210 | ZoloBlocks WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.7% | 2025-08-20 | Fix |
| CVE-2025-53208 | WordPress Maya Business plugin insecure direct object references (IDOR) | 7.5CNA v3.1 | 0.4% | 2025-08-20 | Fix |
| CVE-2025-53207 | WP Travel Gutenberg Blocks WordPress plugin local file inclusion | 8.1CNA v3.1 | 0.5% | 2025-08-20 | Fix |
| CVE-2025-53205 | WordPress Radio Player Shoutcast and Icecast plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-53204 | eventlist WordPress plugin local file inclusion | 8.1CNA v3.1 | 0.7% | 2025-08-20 | Fix |
| CVE-2025-53201 | Jobmonster WordPress theme cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-08-20 | Fix |
| CVE-2025-53198 | Houzez WordPress theme local file inclusion | 8.1CNA v3.1 | 0.7% | 2025-08-20 | Fix |
| CVE-2025-53196 | WordPress JetEngine plugin sensitive data exposure | 6.5CNA v3.1 | 0.5% | 2025-08-20 | Fix |
| CVE-2025-53195 | JetEngine WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-08-20 | Fix |
| CVE-2025-53194 | WordPress JetEngine plugin remote code execution (RCE) | 8.5CNA v3.1 | 0.4% | 2025-08-20 | Fix |
| CVE-2025-51991 | Xwiki cross-site scripting | 8.8CISA ADP v3.1 | 3.7% | 2025-08-20 | Nuclei |
| CVE-2025-51990 | Xwiki cross-site scripting | 4.8CISA ADP v3.1 | 0.5% | 2025-08-20 | Nuclei |
| CVE-2025-50904 | WinterChenS my-site There is an authentication bypass | 9.8CISA ADP v3.1 | 0.4% | 2025-08-20 | |
| CVE-2025-50902 | Old-peanut Open Shop cross-site request forgery | 8.8CISA ADP v3.1 | 0.2% | 2025-08-20 | |
| CVE-2025-50901 | JEEWMS improper authentication | 9.8CISA ADP v3.1 | 0.4% | 2025-08-20 | |
| CVE-2025-50864 | Elysia-cors origin validation error | 6.5CISA ADP v3.1 | 0.5% | 2025-08-20 | Fix |
| CVE-2025-50503 | Touch Lebanon mobile app password reset workflow authentication bypass | 8.8CISA ADP v3.1 | 0.4% | 2025-08-20 | |
| CVE-2025-49896 | WP Discord Post Plus Supports Unlimited Channels WordPress plugin cross-site request forgery (CSRF) | 5.3CNA v3.1 | 0.2% | 2025-08-20 | |
| CVE-2025-49894 | Nuss WordPress plugin local file inclusion | 8.1CNA v3.1 | 0.9% | 2025-08-20 | |
| CVE-2025-49893 | Nuss WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-08-20 | |
| CVE-2025-49892 | Uxper Booking WordPress plugin local file inclusion | 8.1CNA v3.1 | 0.8% | 2025-08-20 | |
| CVE-2025-49891 | Uxper Booking WordPress plugin SQL injection | 8.5CNA v3.1 | 0.3% | 2025-08-20 | |
| CVE-2025-49890 | Organic Beauty WordPress plugin PHP object injection | 9.8CNA v3.1 | 0.5% | 2025-08-20 | |
| CVE-2025-49889 | Edge CPT WordPress plugin local file inclusion | 8.1CNA v3.1 | 0.7% | 2025-08-20 | |
| CVE-2025-49438 | Simple Login Log WordPress plugin PHP object injection | 8.1CNA v3.1 | 0.4% | 2025-08-20 | Fix |
| CVE-2025-49436 | Anotte WordPress plugin local file inclusion | 8.1CNA v3.1 | 0.6% | 2025-08-20 | Fix |
| CVE-2025-49434 | Cars4Rent WordPress plugin PHP object injection | 9.8CNA v3.1 | 0.5% | 2025-08-20 | Fix |
| CVE-2025-49428 | Cookie Warning WordPress plugin cross-site scripting (XSS) | 7.5CNA v3.1 | 0.4% | 2025-08-20 | |
| CVE-2025-49426 | Kitring WordPress theme local file inclusion | 8.1CNA v3.1 | 0.7% | 2025-08-20 | |
| CVE-2025-49424 | Support Ticket WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-20 | |
| CVE-2025-49422 | Support Ticket WordPress plugin privilege escalation | 9.8CNA v3.1 | 0.5% | 2025-08-20 | |
| CVE-2025-49420 | Ultra Portfolio - WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-49413 | Super Store Finder WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-08-20 | Fix |
| CVE-2025-49412 | Page Transition WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.2% | 2025-08-20 | |
| CVE-2025-49411 | iFrame Block WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-20 | |
| CVE-2025-49410 | TC Testimonials WordPress plugin cross-site scripting (XSS) | 10.0CNA v3.1 | 0.5% | 2025-08-20 | |
| CVE-2025-49409 | SensorPress WordPress plugin cross-site scripting (XSS) | 9.8CNA v3.1 | 0.5% | 2025-08-20 | |
| CVE-2025-49408 | Templately WordPress plugin sensitive data exposure | 10.0CNA v3.1 | 0.5% | 2025-08-20 | Fix |
| CVE-2025-49406 | Houzez WordPress theme broken access control | 8.5CNA v3.1 | 0.3% | 2025-08-20 | Fix |
| CVE-2025-49400 | WP Visitor Statistics (Real Time Traffic) WordPress plugin cross-site scripting (XSS) | 9.8CNA v3.1 | 0.5% | 2025-08-20 | Fix |
| CVE-2025-49399 | NEX-Forms WordPress plugin cross-site request forgery (CSRF) | 8.8CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-49397 | Colorbox Lightbox WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-49396 | Themify Builder WordPress plugin broken access control | 4.3CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-49395 | Themify Icons WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-49392 | Themify Audio Dock WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-49391 | Sign-up Sheets WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.1% | 2025-08-20 | Fix |
| CVE-2025-49389 | Notice Bar WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-49382 | JobZilla - Job Board WordPress theme cross-site request forgery (CSRF) | 8.8CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-49381 | ads.txt Guru Connect WordPress plugin cross-site request forgery (CSRF) | 9.6CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-48302 | FundEngine WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.6% | 2025-08-20 | Fix |
| CVE-2025-48298 | WordPress SEOPress for MainWP plugin local file inclusion | 7.5CNA v3.1 | 0.5% | 2025-08-20 | Fix |
| CVE-2025-48297 | WordPress Simple Link Directory plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-48296 | WordPress UpStore theme cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-48171 | WordPress Cena Store theme local file inclusion | 8.1CNA v3.1 | 0.5% | 2025-08-20 | Fix |
| CVE-2025-48170 | WordPress Universal Video Player - Addon for WPBakery Page Builder plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-48169 | Code Engine WordPress plugin remote code execution (RCE) | 9.9CNA v3.1 | 0.5% | 2025-08-20 | Fix |
| CVE-2025-48168 | WordPress Apollo - Sticky Full Width HTML5 Audio Player plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-48165 | DELUCKS SEO WordPress plugin privilege escalation | 8.8CNA v3.1 | 0.3% | 2025-08-20 | Fix |
| CVE-2025-48164 | WordPress SureDash plugin privilege escalation | 8.8CNA v3.1 | 0.4% | 2025-08-20 | Fix |
| CVE-2025-48163 | SHOUT WordPress plugin cross-site scripting | 7.1CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-48162 | WordPress Simple Business Directory Pro plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-48160 | WordPress Caliris theme local file inclusion | 8.1CNA v3.1 | 0.6% | 2025-08-20 | Fix |
| CVE-2025-48159 | Youtube Vimeo Video Player and Slider WP WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-48158 | BuddyPress XProfile Custom Image Field WordPress plugin arbitrary file deletion | 8.6CNA v3.1 | 0.5% | 2025-08-20 | Fix |
| CVE-2025-48157 | WordPress Formality plugin local file inclusion | 8.1CNA v3.1 | 2.7% | 2025-08-20 | NucleiFix |
| CVE-2025-48154 | Multimedia Playlist Slider Addon for WPBakery Page Builder WordPress plugin cross-site scripting | 7.1CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-48152 | Rentsyst WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-48151 | WordPress CM Map Locations plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-48149 | WordPress Cook&Meal theme local file inclusion | 8.1CNA v3.1 | 0.6% | 2025-08-20 | Fix |
| CVE-2025-48148 | StoreKeeper for WooCommerce WordPress plugin arbitrary file upload | 10.0CNA v3.1 | 16.7% | 2025-08-20 | Exploit codeFix |
| CVE-2025-48142 | WordPress Bookify plugin privilege escalation | 8.8CNA v3.1 | 0.4% | 2025-08-20 | Fix |
| CVE-2025-47650 | WordPress Infility Global plugin arbitrary file download | 6.5CNA v3.1 | 0.4% | 2025-08-20 | Fix |
| CVE-2025-47054 | Adobe Experience Manager cross-site scripting (DOM-based XSS) | 5.4CNA v3.1 | 0.4% | 2025-08-20 | Fix |
| CVE-2025-46998 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-46962 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-46936 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-46932 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-46856 | Adobe Experience Manager cross-site scripting (DOM-based XSS) | 5.4CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-46852 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-46849 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-43757 | Liferay Portal vulnerable to cross-site scripting via DDMPortlet_definition parameter | 4.8CNA v4.0 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-43750 | Liferay Portal Unvalidated file upload | 5.1CNA v4.0 | 0.3% | 2025-08-20 | Fix |
| CVE-2025-43749 | Liferay Portal Unauthenticated File Access via URL | 5.3CNA v4.0 | 0.3% | 2025-08-20 | Fix |
| CVE-2025-43748 | Liferay Portal vulnerable to cross-site request forgery | 7.1CNA v4.0 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-43746 | Liferay Portal vulnerable to cross-site scripting in Dynamic Data Mapping | 5.1CNA v4.0 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-43742 | Liferay Portal vulnerable to cross-site scripting through URLs | 6.9CNA v4.0 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-43741 | Liferay Portal vulnerable to cross-site scripting via assetTagNames parameter | 5.1CNA v4.0 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-36114 | IBM QRadar SOAR Plugin App path traversal | 6.5CNA v3.1 | 0.5% | 2025-08-20 | Fix |
| CVE-2025-32010 | Tenda AC6 Cloud API functionality stack-based buffer overflow | 9.8v3.1 | 0.7% | 2025-08-20 | |
| CVE-2025-31355 | Tenda AC6 download without integrity check | 9.8v3.1 | 0.3% | 2025-08-20 | |
| CVE-2025-30975 | WordPress Add Custom Codes plugin arbitrary code execution | 7.5CNA v3.1 | 0.4% | 2025-08-20 | Fix |
| CVE-2025-30256 | Tenda AC6 HTTP Header Parsing functionality denial of service | 7.5v3.1 | 0.4% | 2025-08-20 | |
| CVE-2025-28977 | WP Pipes WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.2% | 2025-08-20 | |
| CVE-2025-28041 | Liaoxuefeng itranswarp improper access control | 8.6CISA ADP v3.1 | 0.3% | 2025-08-20 | |
| CVE-2025-27129 | Tenda AC6 HTTP authentication functionality authentication bypass | 9.8CNA v3.1 | 2.1% | 2025-08-20 | |
| CVE-2025-24496 | Tenda AC6 /goform/getproductInfo functionality information disclosure | 7.5CNA v3.1 | 0.4% | 2025-08-20 | |
| CVE-2025-24322 | Tenda AC6 missing authentication step | 9.8v3.1 | 0.6% | 2025-08-20 | |
| CVE-2025-20345 | Cisco Duo Authentication Proxy information disclosure | 4.9CNA v3.1 | 0.5% | 2025-08-20 | Fix |
| CVE-2025-20269 | Cisco Evolved Programmable Network Manager and Prime Infrastructure arbitrary file download | 6.5CNA v3.1 | 0.4% | 2025-08-20 | Fix |
| CVE-2025-20131 | Cisco Identity Services Engine arbitrary file upload | 4.9CNA v3.1 | 0.3% | 2025-08-20 | Fix |
| CVE-2025-9288 | browserify Sha.js missing type checks leading to hash rewind and passing on crafted data | 9.1CNA v4.0 | 0.7% | 2025-08-20 | Fix |
| CVE-2025-9287 | browserify Cipher-base missing type checks leading to hash rewind and passing on crafted data | 9.1CNA v4.0 | 0.5% | 2025-08-20 | Fix |
| CVE-2025-9263 | Xuxueli xxl-job JobLogController.java getJobsByGroup resource injection | 5.3CNA v4.0 | 0.3% | 2025-08-20 | Fix |
| CVE-2025-9262 | wong2 mcp-cli oAuth provider.js redirectToAuthorization os command injection | 8.1v3.1 | 4.3% | 2025-08-20 | |
| CVE-2025-9253 | Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP_doSpecifySiteSurvey stack-based overflow | 8.7CNA v4.0 | 1.0% | 2025-08-20 | |
| CVE-2025-9252 | Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 DisablePasswordAlertRedirect stack-based overflow | 8.7CNA v4.0 | 1.0% | 2025-08-20 | |
| CVE-2025-9251 | Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 sta_wps_pin stack-based overflow | 8.7CNA v4.0 | 1.0% | 2025-08-20 | |
| CVE-2025-9250 | Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setPWDbyBBS stack-based overflow | 8.7CNA v4.0 | 1.0% | 2025-08-20 | |
| CVE-2025-9249 | Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 DHCPReserveAddGroup stack-based overflow | 8.7CNA v4.0 | 1.0% | 2025-08-20 | |
| CVE-2025-9248 | Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP_pingGatewayByBBS stack-based overflow | 8.7CNA v4.0 | 1.0% | 2025-08-20 | |
| CVE-2025-9247 | Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setVlan stack-based overflow | 8.7CNA v4.0 | 1.0% | 2025-08-20 | |
| CVE-2025-9246 | Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 check_port_conflict stack-based overflow | 8.7CNA v4.0 | 1.0% | 2025-08-20 | |
| CVE-2025-9245 | Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 WPSSTAPINEnr stack-based overflow | 8.7CNA v4.0 | 1.0% | 2025-08-20 | |
| CVE-2025-9244 | Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 addStaticRoute os command injection | 8.8v3.1 | 6.7% | 2025-08-20 | |
| CVE-2025-9241 | elunez Eladmin exportUser CSV injection | 7.5v3.1 | 0.3% | 2025-08-20 | |
| CVE-2025-9240 | elunez Eladmin info information disclosure | 5.3CNA v4.0 | 0.3% | 2025-08-20 | |
| CVE-2025-9239 | elunez Eladmin DES Key EncryptUtils.java EncryptUtils inadequate encryption | 6.3CNA v4.0 | 0.2% | 2025-08-20 | |
| CVE-2025-9238 | Swatadru Exam-Seating-Arrangement Student Login student.php SQL injection | 6.9CNA v4.0 | 0.3% | 2025-08-20 | |
| CVE-2025-9237 | CodeAstro Ecommerce Website Edit Your Account my_account.php cross-site scripting | 5.4v3.1 | 0.3% | 2025-08-20 | |
| CVE-2025-9236 | Portabilis i-Educar Tipos de usuàrio educar_tipo_usuario_lst.php SQL injection | 8.8v3.1 | 0.4% | 2025-08-20 | |
| CVE-2025-9235 | Scada-LTS compound_events.shtm cross-site scripting | 5.4v3.1 | 0.3% | 2025-08-20 | |
| CVE-2025-9234 | Scada-LTS maintenance_events.shtm cross-site scripting | 5.4v3.1 | 0.3% | 2025-08-20 | |
| CVE-2025-9233 | Scada-LTS view_edit.shtm cross-site scripting | 5.4v3.1 | 0.3% | 2025-08-20 | |
| CVE-2025-9229 | Information disclosure in MiR robots and MiR fleet through verbose error pages | 5.3CNA v3.1 | 0.3% | 2025-08-20 | Fix |
| CVE-2025-9228 | Mobile Industrial Robots MiR Robots insufficient authorization when creating notes | 4.3CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-9225 | Cross-site scripting (XSS) in MiR robots and MiR fleet | 5.5CNA v3.1 | 0.3% | 2025-08-20 | Fix |
| CVE-2025-9202 | ColorMag WordPress theme unauthorized access | 4.3CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-9193 | TOTVS Portal Meu RH Password Reset redirect | 5.1CNA v4.0 | 0.3% | 2025-08-20 | |
| CVE-2025-9176 | neurobin shc Environment variable shc.c make os command injection | 7.8v3.1 | 1.2% | 2025-08-20 | |
| CVE-2025-9132 | Google Chrome V8 out-of-bounds write | 8.8CISA ADP v3.1 | 3.1% | 2025-08-20 | Fix |
| CVE-2025-9074 | Docker Desktop allows unauthenticated access to Docker Engine API from containers | 9.3CNA v4.0 | 1.9% | 2025-08-20 | Exploit codeFix |
| CVE-2025-8618 | WPC Smart Quick View for WooCommerce WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-8612 | AOMEI Backupper Workstation link following local privilege escalation | 7.3CNA v3.0 | 0.2% | 2025-08-20 | |
| CVE-2025-8611 | AOMEI Cyber Backup missing authentication for critical function remote code execution | 9.8CNA v3.0 | 0.6% | 2025-08-20 | |
| CVE-2025-8610 | AOMEI Cyber Backup missing authentication for critical function remote code execution | 9.8CNA v3.0 | 0.6% | 2025-08-20 | |
| CVE-2025-8453 | Schneider Electric Saitel DR RTU improper privilege management | 8.4CNA v4.0 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-8449 | Schnieder Electric EcoStruxure Building Operation Enterprise Server resource exhaustion | 4.1CNA v4.0 | 0.3% | 2025-08-20 | Fix |
| CVE-2025-8448 | Schneider Eelctric EcoStruxure Building Operation Enterprise Server information disclosure | 1.0CNA v4.0 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-8415 | Cryostat: Authentication bypass if network policies are disabled | 5.9CNA v3.1 | 0.3% | 2025-08-20 | Fix |
| CVE-2025-8309 | ManageEngine Asset Explorer user privilege escalation | 8.1CNA v3.1 | 0.3% | 2025-08-20 | Fix |
| CVE-2025-8289 | Redirection for Contact Form 7 WordPress plugin unauthenticated PHP object injection | 7.5CNA v3.1 | 0.4% | 2025-08-20 | Fix |
| CVE-2025-8145 | Redirection for Contact Form 7 WordPress plugin unauthenticated PHP object injection | 8.8CNA v3.1 | 0.5% | 2025-08-20 | Fix |
| CVE-2025-8141 | Redirection for Contact Form 7 WordPress plugin unauthenticated arbitrary file deletion | 8.8CNA v3.1 | 0.6% | 2025-08-20 | Fix |
| CVE-2025-8102 | Easy Digital Downloads WordPress plugin cross-site request forgery to plugin deactivation | 5.4CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-7777 | Red Hat mirror registry for OpenShift open redirect | 6.5CNA v3.1 | 0.2% | 2025-08-20 | |
| CVE-2025-6183 | StrongDM sdm-cli configd injection | 7.0CNA v4.0 | 0.2% | 2025-08-20 | |
| CVE-2025-6182 | StrongDM sdm Root Certificate injection | 8.5CNA v4.0 | 0.1% | 2025-08-20 | |
| CVE-2025-6181 | StrongDM sdm-cli OS command injection | 8.5CNA v4.0 | 0.2% | 2025-08-20 | |
| CVE-2025-6180 | StrongDM sdm-cli pre-authentication token cleartext transmission of sensitive information | 8.5CNA v4.0 | 0.1% | 2025-08-20 | |
| CVE-2025-5261 | IDOR in PozitifIK's Pik Online | 7.5CNA v3.1 | 0.3% | 2025-08-20 | Fix |
| CVE-2025-5260 | SSRF in PozitifIK's Pik Online | 8.6CNA v3.1 | 0.3% | 2025-08-20 | Fix |
| CVE-2025-5115 | Eclipse Jetty HTTP/2 stream handling denial of service | 7.7CNA v4.0 | 3.6% | 2025-08-20 | Fix |
| CVE-2025-4877 | Red Hat Enterprise Linux 9 libssh: Write beyond bounds in binary to base64 conversion functions | 4.5CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-4437 | Red Hat OpenShift Container Platform 4 cri-o: Large /etc/passwd file may lead to denial of service | 5.7CNA v3.1 | 0.2% | 2025-08-20 | |
| CVE-2025-1142 | IBM Edge Application Manager server-side request forgery | 5.4CNA v3.1 | 0.2% | 2025-08-20 | Fix |
| CVE-2025-1139 | IBM Edge Application Manager incorrect permissions | 6.1CNA v3.1 | 0.1% | 2025-08-20 | Fix |
| CVE-2025-55740 | Default credentials in nginx-defender Configuration files | 6.5CNA v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-55737 | DogukanUrker FlaskBlog comment deletion insecure direct object reference | 6.9CNA v4.0 | 0.3% | 2025-08-19 | |
| CVE-2025-55736 | FlaskBlog allows arbitrary privilege escalation | 9.3CNA v4.0 | 0.3% | 2025-08-19 | |
| CVE-2025-55735 | FlaskBlog stored XSS | 5.3CNA v4.0 | 0.2% | 2025-08-19 | |
| CVE-2025-55734 | DogukanUrker FlaskBlog flaskBlo authorization bypass | 6.9CNA v4.0 | 0.4% | 2025-08-19 | |
| CVE-2025-55733 | DeepChat One-click remote code execution through Custom URL Handling | 9.7CNA v3.1 | 0.7% | 2025-08-19 | Fix |
| CVE-2025-55306 | GenX_FX authentication bypass in JWT validation | 9.8CNA v3.1 | 0.6% | 2025-08-19 | |
| CVE-2025-55303 | Unauthorized third-party images in Astro’s _image endpoint | 6.9CNA v4.0 | 0.6% | 2025-08-19 | NucleiFix |
| CVE-2025-55295 | StuffAnThings qbit_manage qBit Manage path traversal | 6.5CNA v3.1 | 0.5% | 2025-08-19 | Fix |
| CVE-2025-55294 | Command injection via `format` option in screenshot-desktop | 9.8CNA v3.1 | 1.4% | 2025-08-19 | Fix |
| CVE-2025-55033 | Mozilla Focus cross-site scripting | 6.1CISA ADP v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-55032 | Mozilla Focus incorrectly ignores Content-Disposition headers for some MIME types | 6.1CISA ADP v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-55031 | Mozilla Firefox passkey phishing within Bluetooth range | 9.8CISA ADP v3.1 | 0.4% | 2025-08-19 | Fix |
| CVE-2025-55030 | Mozilla Firefox Content-Disposition headers incorrectly ignored for some MIME types | 6.1CISA ADP v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-55029 | Mozilla Firefox malicious scripts could spam popups for denial of service attacks | 7.5CISA ADP v3.1 | 0.3% | 2025-08-19 | Fix |
| CVE-2025-55028 | Mozilla Firefox JavaScript alerts could impede UI interaction or allow denial of service attacks | 6.5CISA ADP v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-54881 | Mermaid improperly sanitizes of sequence diagram labels leading to XSS | 5.3CNA v4.0 | 0.8% | 2025-08-19 | Fix |
| CVE-2025-54880 | Mermaid does not properly sanitize architecture diagram iconText leading to XSS | 5.1CNA v4.0 | 0.4% | 2025-08-19 | Fix |
| CVE-2025-54411 | Discourse welcome banner user name XSS | 2.4CNA v4.0 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-54336 | Plesk Obsidian admin password check vulnerability | 9.8CISA ADP v3.1 | 0.5% | 2025-08-19 | |
| CVE-2025-54145 | Mozilla Firefox QR code scanner open redirect | 9.1CISA ADP v3.1 | 0.4% | 2025-08-19 | Fix |
| CVE-2025-54144 | Mozilla Internal Firefox open-text URL scheme allowed loading of arbitrary URLs | 5.4CISA ADP v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-54143 | Mozilla Firefox sandboxed iframes could allow local downloads despite sandbox restrictions | 9.8CISA ADP v3.1 | 0.5% | 2025-08-19 | Fix |
| CVE-2025-52478 | Stored XSS in n8n Form Trigger allows account takeover via injected iframe and video/source | 8.7CNA v3.1 | 0.4% | 2025-08-19 | Fix |
| CVE-2025-52338 | LogicData eCommerce Framework password reset function authentication bypass | 5.3CISA ADP v3.1 | 0.5% | 2025-08-19 | |
| CVE-2025-52337 | LogicData eCommerce Framework Content Explorer arbitrary file upload | 6.5CISA ADP v3.1 | 0.3% | 2025-08-19 | |
| CVE-2025-51543 | Cicool builder password reset endpoint missing authentication | 9.8CISA ADP v3.1 | 0.3% | 2025-08-19 | |
| CVE-2025-51540 | EzGED3 3.5.0 stores user passwords using an insecure hashing scheme: md5(md5(password)). This hashing method is cryptographically weak and allows attackers to perform efficient offline brute-force attacks if password hashes are disclosed. The lack of salting and use of a fast, outdated algorithm mak | 5.3CISA ADP v3.1 | 0.2% | 2025-08-19 | |
| CVE-2025-51539 | Ezged3 arbitrary file read | 5.3CISA ADP v3.1 | 0.7% | 2025-08-19 | |
| CVE-2025-51529 | Followmedarling Cookies and Content Security Policy denial of service | 5.3CISA ADP v3.1 | 0.4% | 2025-08-19 | Exploit code |
| CVE-2025-51510 | MoonShine SQL injection | 4.9CISA ADP v3.1 | 0.5% | 2025-08-19 | |
| CVE-2025-51506 | Talentneuron Hrforecast Suite SQL injection | 6.5CISA ADP v3.1 | 0.3% | 2025-08-19 | |
| CVE-2025-51489 | MoonShine arbitrary file upload | 5.4v3.1 | 0.3% | 2025-08-19 | Fix |
| CVE-2025-51488 | Moonshine stored cross-site scripting vulnerability in Create Admin | 4.9CISA ADP v3.1 | 0.6% | 2025-08-19 | Fix |
| CVE-2025-51487 | Moonshine stored cross-site scripting vulnerability in Create Article | 4.5CISA ADP v3.1 | 0.4% | 2025-08-19 | Fix |
| CVE-2025-50938 | hustoj cross-site scripting | 6.1CISA ADP v3.1 | 0.2% | 2025-08-19 | |
| CVE-2025-50926 | Ehcp Easy Hosting Control Panel SQL injection | 6.5CISA ADP v3.1 | 0.3% | 2025-08-19 | |
| CVE-2025-50897 | Boom-core Boomv unrestricted file upload | 4.3CISA ADP v3.1 | 0.3% | 2025-08-19 | |
| CVE-2025-50891 | Adform server-side backend for Site Tracking cross-site scripting | 6.5CISA ADP v3.1 | 0.4% | 2025-08-19 | Fix |
| CVE-2025-50579 | JC21 nginx-proxy-manager improper input validation | 5.3CISA ADP v3.1 | 0.4% | 2025-08-19 | |
| CVE-2025-50567 | Saurus CMS Community Edition DB::prepare function SQL injection | 10.0CISA ADP v3.1 | 0.6% | 2025-08-19 | |
| CVE-2025-50461 | Volcengine's verl A deserialization of untrusted data | 6.5CISA ADP v3.1 | 0.5% | 2025-08-19 | Exploit code |
| CVE-2025-50434 | Appian Enterprise Business Process Management improper access control | 5.3CISA ADP v3.1 | 0.2% | 2025-08-19 | |
| CVE-2025-43745 | Liferay Portal CSRF vulnerability via endpoint parameter | 6.9CNA v4.0 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-43744 | Liferay Portal vulnerable to cross-site scripting via DDM Structure Field Labels | 5.1CNA v4.0 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-43743 | Liferay Portal Enumeration Discrepancy in Calendars | 5.3CNA v4.0 | 0.3% | 2025-08-19 | Fix |
| CVE-2025-43740 | Liferay Portal has stored cross-site scripting vulnerability via Message Boards feature | 4.6CNA v4.0 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-43739 | Liferay Portal Email Modification vulnerability via Calendar Portlet | 5.3CNA v4.0 | 0.3% | 2025-08-19 | Fix |
| CVE-2025-43738 | Liferay Portal reflected cross-site scripting vulnerability in displayType parameter | 5.1CNA v4.0 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-43737 | Liferay Portal vulnerable to cross-site scripting via backURL Paramter | 5.1CNA v4.0 | 0.3% | 2025-08-19 | Fix |
| CVE-2025-41689 | Wiesemann and Theis: Motherbox 3 allows unauthenticated read-only DB access | 7.5CNA v3.1 | 0.4% | 2025-08-19 | Fix |
| CVE-2025-41685 | SMA: Sunny portal limited disclosure of personal data of registered users to an authenticated user | 6.5CNA v3.1 | 0.4% | 2025-08-19 | Fix |
| CVE-2025-38615 | Linux kernel NTFS3 filesystem vulnerability | 7.8CNA v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38614 | Linux kernel epoll instance nesting denial of service | 7.8CNA v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38613 | Linux kernel gpib driver ioctl handling vulnerability | 5.5v3.1 | 0.1% | 2025-08-19 | Fix |
| CVE-2025-38612 | Linux kernel fbtft framebuffer driver memory leak | 5.5v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38610 | Linux kernel dtpm_cpu powercap driver null pointer dereference | 5.5v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38609 | Linux kernel devfreq governor handling null pointer dereference | 5.5v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38608 | Linux kernel BPF kTLS message handling information disclosure | 8.6CNA v3.1 | 0.4% | 2025-08-19 | Fix |
| CVE-2025-38607 | Linux kernel BPF verifier control flow graph computation vulnerability | 7.8CNA v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38606 | Linux kernel ath12k Wi-Fi driver null pointer dereference | 5.5v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38605 | Linux kernel ath12k Wi-Fi driver null pointer dereference | 5.5NVD v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38604 | Linux kernel rtl818x Wi-Fi driver null pointer dereference | 7.8CNA v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38602 | Linux kernel iwlwifi driver null pointer dereference | 5.5v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38601 | Linux kernel ath11k Wi-Fi driver vulnerability | 8.8CNA v3.1 | 0.3% | 2025-08-19 | Fix |
| CVE-2025-38600 | Linux kernel mt7925 Wi-Fi driver off-by-one error | 8.8CNA v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38599 | Linux kernel mt7996 Wi-Fi driver out-of-bounds read | 8.8CNA v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38598 | Linux kernel drm/amdgpu use-after-free | 7.8CNA v3.1 | 0.1% | 2025-08-19 | Fix |
| CVE-2025-38597 | Linux kernel Rockchip VOP2 display driver null pointer dereference | 5.5NVD v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38596 | Linux kernel Panthor GPU driver debugfs use-after-free | 7.8CNA v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38595 | Linux kernel Xen gntdev dmabuf export use-after-free | 7.8CNA v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38594 | Linux kernel iommu/vt-d use-after-free | 7.8CNA v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38593 | Linux kernel Bluetooth discovery filter handling double free | 7.8CNA v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38592 | Linux kernel Bluetooth device coredump out-of-bounds read | 8.8CNA v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38591 | Linux kernel BPF verifier vulnerability | 5.5NVD v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38590 | Linux kernel net/mlx5e crash | 7.5CNA v3.1 | 0.4% | 2025-08-19 | Fix |
| CVE-2025-38589 | Linux kernel neighbour table null pointer dereference | 5.5v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38588 | Linux kernel ipv6 infinite loop | 5.5v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38587 | Linux kernel IPv6 FIB6 routing infinite loop | 5.5v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38586 | Linux kernel BPF ARM64 JIT compiler null pointer dereference | 7.8CNA v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38585 | Linux kernel atomisp camera driver out-of-bounds write | 7.8v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38584 | Linux kernel padata parallel processing use-after-free | 7.0CNA v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38583 | Linux kernel Xilinx VCU clock driver null pointer dereference | 5.5v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38582 | Linux kernel HNS RoCE driver double free | 7.8CNA v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38581 | Linux kernel CCP crypto driver null pointer dereference | 5.5v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38580 | Linux kernel ext4 I/O completion worker use-after-free | 7.8CNA v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38579 | Linux kernel f2fs extent tree vulnerability | 7.8CNA v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38578 | Linux kernel f2fs inode metadata sync use-after-free | 7.8CNA v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38577 | Linux kernel f2fs inode eviction use-after-free | 7.8CNA v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38576 | Linux kernel EEH driver race condition | 5.5v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38574 | Linux kernel pptp uninitialized resource use | 8.6CNA v3.1 | 0.4% | 2025-08-19 | Fix |
| CVE-2025-38573 | In the Linux kernel, the following vulnerability has been resolved: spi: cs42l43: Property entry should be a null-terminated array The software node does not specify a count of property entries, so the array must be null-terminated. When unterminated, this can lead to a fault in the downstream cs | 7.3CNA v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38572 | Linux kernel IPv6 GSO segmentation vulnerability | 7.8CNA v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38571 | Linux kernel SunRPC TLS alert handling vulnerability | 8.2CNA v3.1 | 0.3% | 2025-08-19 | Fix |
| CVE-2025-38570 | Linux kernel fbnic use-after-free | 7.8CNA v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38569 | Linux kernel be2net driver null pointer dereference | 5.5v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38568 | Linux kernel mqprio traffic control entry parsing out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38567 | Linux kernel NFS server local file handle lookup race condition | 4.7v3.1 | 0.1% | 2025-08-19 | Fix |
| CVE-2025-38566 | Linux kernel SunRPC TLS alert handling improper check for exceptional conditions | 9.8CNA v3.1 | 0.6% | 2025-08-19 | Fix |
| CVE-2025-38565 | Linux kernel perf buffer mapping reference count leak | 7.8v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38564 | Linux kernel perf buffer mapping vulnerability | 5.5v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38563 | Linux kernel perf ring buffer mapping vulnerability | 7.8v3.1 | 0.4% | 2025-08-19 | Fix |
| CVE-2025-38562 | Linux kernel ksmbd null pointer dereference | 5.5v3.1 | 11.9% | 2025-08-19 | Fix |
| CVE-2025-38561 | Linux kernel ksmbd race condition | 9.8CNA v3.1 | 0.4% | 2025-08-19 | Exploit codeFix |
| CVE-2025-38560 | In the Linux kernel, the following vulnerability has been resolved: x86/sev: Evict cache lines during SNP memory validation An SNP cache coherency vulnerability requires a cache line eviction mitigation when validating memory after a page state change to private. The specific mitigation is to touc | 9.3CNA v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38559 | Linux kernel Intel PMT crashlog driver null pointer dereference | 5.5v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38558 | Linux kernel USB gadget UVC driver null pointer dereference | 5.5v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38557 | Linux kernel Apple HID driver null pointer dereference | 5.5v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38556 | Linux kernel HID core out-of-bounds read | 7.1v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38555 | Linux kernel USB gadget composite driver use-after-free | 7.8CNA v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-38554 | Linux kernel mm use-after-free | 7.8CNA v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-33008 | IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting | 5.4CNA v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-31988 | HCL Digital Experience is susceptible to cross-site scripting (XSS) | 4.9CNA v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-9187 | Mozilla memory safety bugs fixed in Firefox 142 and Thunderbird 142 | 9.8NVD v3.1 | 0.5% | 2025-08-19 | Fix |
| CVE-2025-9186 | Mozilla spoofing issue in the Address Bar component of Firefox Focus for Android | 6.5CISA ADP v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-9185 | Mozilla Firefox memory safety bugs | 8.1NVD v3.1 | 0.5% | 2025-08-19 | Fix |
| CVE-2025-9184 | Mozilla memory safety bugs fixed in Firefox ESR, Thunderbird ESR, Firefox 142 and Thunderbird 142 | 8.1NVD v3.1 | 0.4% | 2025-08-19 | Fix |
| CVE-2025-9183 | Mozilla Firefox spoofing issue in the Address Bar component | 6.5CISA ADP v3.1 | 0.3% | 2025-08-19 | Fix |
| CVE-2025-9182 | Mozilla Firefox denial of service due to out-of-memory in the Graphics: WebRender component | 7.5CISA ADP v3.1 | 0.4% | 2025-08-19 | Fix |
| CVE-2025-9181 | Mozilla Firefox uninitialized memory in the JavaScript Engine component | 6.5CISA ADP v3.1 | 0.4% | 2025-08-19 | Fix |
| CVE-2025-9180 | Mozilla Firefox same-origin policy bypass in the Graphics: Canvas2D component | 8.1CISA ADP v3.1 | 0.3% | 2025-08-19 | Fix |
| CVE-2025-9179 | Mozilla Firefox sandbox escape due to invalid pointer in the Audio/Video: GMP component | 9.8CISA ADP v3.1 | 0.6% | 2025-08-19 | Fix |
| CVE-2025-9175 | neurobin shc shc.c make stack-based overflow | 7.8v3.1 | 0.2% | 2025-08-19 | |
| CVE-2025-9174 | neurobin shc Filename shc.c make os command injection | 7.8v3.1 | 1.2% | 2025-08-19 | |
| CVE-2025-9171 | SolidInvoice Clients clients cross-site scripting | 5.4v3.1 | 0.3% | 2025-08-19 | |
| CVE-2025-9170 | SolidInvoice Tax Rates rates cross-site scripting | 5.4v3.1 | 0.3% | 2025-08-19 | |
| CVE-2025-9169 | SolidInvoice Quote quotes cross-site scripting | 5.4v3.1 | 0.3% | 2025-08-19 | |
| CVE-2025-9168 | SolidInvoice Invoice Creation invoice cross-site scripting | 5.4v3.1 | 0.3% | 2025-08-19 | |
| CVE-2025-9167 | SolidInvoice Recurring Invoice recurring cross-site scripting | 5.4v3.1 | 0.3% | 2025-08-19 | |
| CVE-2025-9165 | LibTIFF tiffcmp tiffcmp.c InitCCITTFax3 memory leak | 2.0CNA v4.0 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-9157 | appneta tcpreplay tcprewrite edit_packet.c untrunc_packet use-after-free | 4.8CNA v4.0 | 0.1% | 2025-08-19 | Fix |
| CVE-2025-9156 | itsourcecode Sports Management System sports.php SQL injection | 9.8v3.1 | 0.4% | 2025-08-19 | |
| CVE-2025-9155 | itsourcecode Online Tour and Travel Management System forget_password.php SQL injection | 9.8v3.1 | 0.4% | 2025-08-19 | |
| CVE-2025-9154 | itsourcecode Online Tour and Travel Management System page-login.php SQL injection | 9.8v3.1 | 0.5% | 2025-08-19 | |
| CVE-2025-9153 | itsourcecode Online Tour and Travel Management System travellers.php unrestricted upload | 8.8v3.1 | 0.4% | 2025-08-19 | |
| CVE-2025-9151 | LiuYuYang01 ThriveX-Blog web updateJsonValueByName improper authorization | 5.3CNA v4.0 | 0.3% | 2025-08-19 | |
| CVE-2025-9150 | Surbowl dormitory-management-php violation_add.php SQL injection | 6.9CNA v4.0 | 0.3% | 2025-08-19 | |
| CVE-2025-9149 | Wavlink WL-NU516U1 wireless.cgi sub_4032E4 command injection | 9.8v3.1 | 5.1% | 2025-08-19 | Emerging Threats |
| CVE-2025-9148 | CodePhiliaX Chat2DB JDBC Connection DataSourceController.java SQL injection | 5.3CNA v4.0 | 0.3% | 2025-08-19 | |
| CVE-2025-9147 | jasonclark getsemantic index.php cross-site scripting | 6.1v3.1 | 0.4% | 2025-08-19 | |
| CVE-2025-9146 | Linksys E5600 Firmware checkFw.sh verify_gemtek_header risky encryption | 8.1v3.1 | 0.5% | 2025-08-19 | |
| CVE-2025-9145 | Scada-LTS SVG file view_edit.shtm cross-site scripting | 5.4v3.1 | 0.3% | 2025-08-19 | |
| CVE-2025-9144 | Scada-LTS publisher_edit.shtm cross-site scripting | 5.4v3.1 | 0.4% | 2025-08-19 | |
| CVE-2025-9143 | Scada-LTS mailing_lists.shtm cross-site scripting | 5.4v3.1 | 0.4% | 2025-08-19 | |
| CVE-2025-9140 | Shanghai Lingdang Information Technology Lingdang CRM tabdetail_moduleSave.php SQL injection | 8.8v3.1 | 0.5% | 2025-08-19 | Exploit code |
| CVE-2025-9139 | Scada-LTS WatchListDwr.init.dwr information disclosure | 6.5v3.1 | 0.3% | 2025-08-19 | |
| CVE-2025-9138 | Scada-LTS new cross-site scripting | 5.4v3.1 | 0.3% | 2025-08-19 | |
| CVE-2025-9137 | Scada-LTS scheduled_events.shtm cross-site scripting | 4.8v3.1 | 0.3% | 2025-08-19 | |
| CVE-2025-9136 | libretro RetroArch file_stream.c filestream_vscanf out-of-bounds | 7.8v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-9135 | Verkehrsauskunft Österreich SmartRide improper export of Android application components | 5.5v3.1 | 0.3% | 2025-08-19 | |
| CVE-2025-9134 | AfterShip Package Tracker App improper export of Android application components | 5.5v3.1 | 0.3% | 2025-08-19 | |
| CVE-2025-8783 | Contact Manager WordPress plugin stored cross-site scripting | 4.4CNA v3.1 | 0.3% | 2025-08-19 | Fix |
| CVE-2025-8723 | Cloudflare Image Resizing WordPress plugin remote code execution | 9.8CNA v3.1 | 18.0% | 2025-08-19 | Exploit codeFix |
| CVE-2025-8622 | Flexible Maps WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-08-19 | Fix |
| CVE-2025-8567 | Nexter Blocks WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-8450 | Unrestricted file upload in FileCatalyst | 8.2CNA v3.1 | 0.3% | 2025-08-19 | |
| CVE-2025-8364 | Mozilla address bar spoofing using an blob URI on Firefox for Android | 4.3CISA ADP v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-8357 | Media Library Assistant WordPress plugin authenticated (Author+) limited file deletion | 4.3CNA v3.1 | 0.3% | 2025-08-19 | Fix |
| CVE-2025-8218 | Real Spaces - WordPress Properties Directory theme privilege escalation to Administrator | 8.8CNA v3.1 | 0.3% | 2025-08-19 | Fix |
| CVE-2025-8042 | Mozilla Firefox sandboxed iframe could start downloads | 9.8CISA ADP v3.1 | 0.5% | 2025-08-19 | Fix |
| CVE-2025-8041 | Mozilla Incorrect URL truncation in Firefox for Android | 5.3CISA ADP v3.1 | 0.3% | 2025-08-19 | Fix |
| CVE-2025-7670 | JS Archive List WordPress plugin unauthenticated SQL injection via build_sql_where function | 7.5CNA v3.1 | 0.5% | 2025-08-19 | Fix |
| CVE-2025-7654 | FunnelKit Automations wf_get_cookie shortcode information disclosure | 8.8CNA v3.1 | 0.6% | 2025-08-19 | Fix |
| CVE-2025-7496 | WPC Smart Compare for WooCommerce WordPress plugin DOM-based stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-6758 | Real Spaces WordPress theme privilege escalation | 9.8CNA v3.1 | 0.4% | 2025-08-19 | Exploit codeFix |
| CVE-2025-5417 | Rhdh: Red Hat Developer Hub user permissions | 6.1CNA v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-4690 | Google AngularJS linky filter ReDoS | 4.3CNA v3.1 | 0.2% | 2025-08-19 | |
| CVE-2025-4046 | Missing authorization in Lexmark Cloud Services badge management | 8.5CNA v3.1 | 0.3% | 2025-08-19 | |
| CVE-2025-4044 | XML external entity injection vulnerability in various Lexmark Universal drivers | 8.2CNA v3.1 | 0.2% | 2025-08-19 | Fix |
| CVE-2025-2988 | IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure | 2.7CNA v3.1 | 0.3% | 2025-08-19 | Fix |
| CVE-2025-57703 | Reflected cross-site scripting in DIAEnergie | 5.9CNA v4.0 | 0.2% | 2025-08-18 | Fix |
| CVE-2025-57702 | Reflected cross-site scripting in DIAEnergie | 5.9CNA v4.0 | 0.2% | 2025-08-18 | Fix |
| CVE-2025-57701 | Reflected cross-site scripting in DIAEnergie | 5.9CNA v4.0 | 0.2% | 2025-08-18 | Fix |
| CVE-2025-57700 | Stored cross-site scripting in DIAEnergie | 7.0CNA v4.0 | 0.2% | 2025-08-18 | Fix |
| CVE-2025-55591 | TOTOLINK A3002R command injection | 9.8CISA ADP v3.1 | 7.6% | 2025-08-18 | |
| CVE-2025-55590 | TOTOLINK A3002R command injection | 6.5CISA ADP v3.1 | 0.8% | 2025-08-18 | |
| CVE-2025-55589 | TOTOLINK A3002R OS command injection | 6.5CISA ADP v3.1 | 1.1% | 2025-08-18 | |
| CVE-2025-55588 | TOTOLINK A3002R buffer overflow | 7.5CISA ADP v3.1 | 0.4% | 2025-08-18 | |
| CVE-2025-55587 | TOTOLINK A3002R buffer overflow | 7.5CISA ADP v3.1 | 0.4% | 2025-08-18 | |
| CVE-2025-55586 | TOTOLINK A3002R buffer overflow | 7.5CISA ADP v3.1 | 0.4% | 2025-08-18 | |
| CVE-2025-55585 | TOTOLINK A3002R eval injection | 6.5CISA ADP v3.1 | 0.3% | 2025-08-18 | |
| CVE-2025-55584 | TOTOLINK A3002R weak credentials | 5.3CISA ADP v3.1 | 0.3% | 2025-08-18 | |
| CVE-2025-55300 | Komari allows Cross-site WebSocket Hijacking | 8.6CNA v4.0 | 0.6% | 2025-08-18 | Fix |
| CVE-2025-55299 | VaulTLS has a password-based login exploit in additional user accounts | 9.4CNA v3.1 | 0.2% | 2025-08-18 | Fix |
| CVE-2025-55296 | LibreNMS allows stored XSS in Alert template name field | 5.5CNA v3.1 | 14.8% | 2025-08-18 | Fix |
| CVE-2025-55293 | Meshtastic firmware NodeInfo public key handling improper authentication | 9.4CNA v3.1 | 0.4% | 2025-08-18 | Fix |
| CVE-2025-55291 | Shaarli allows reflected XSS via searchtags parameter | 7.1CNA v3.1 | 0.2% | 2025-08-18 | Fix |
| CVE-2025-55288 | Genealogy has a reflected XSS | 5.5CNA v3.1 | 0.3% | 2025-08-18 | Fix |
| CVE-2025-55287 | Genealogy has a stored XSS | 8.0CNA v3.0 | 0.3% | 2025-08-18 | Exploit codeFix |
| CVE-2025-55283 | aiven-db-migrate allows privilege escalation through use of psql during migration | 9.1CNA v3.1 | 0.6% | 2025-08-18 | Fix |
| CVE-2025-55282 | aiven-db-migrate allows privilege escalation via unrestricted search_path during migration | 9.1CNA v3.1 | 0.7% | 2025-08-18 | Fix |
| CVE-2025-55214 | Copier safe template has filesystem write access outside destination path | 6.9CNA v4.0 | 0.3% | 2025-08-18 | Fix |
| CVE-2025-55213 | OpenFGA authorization bypass (Check) | 5.8CNA v4.0 | 0.3% | 2025-08-18 | Fix |
| CVE-2025-55205 | Capsule tenant owners with patch namespace permission can hijack system namespaces label | 9.1CNA v3.1 | 0.5% | 2025-08-18 | Fix |
| CVE-2025-55201 | Copier safe template has arbitrary filesystem read/write access | 8.5CNA v4.0 | 0.3% | 2025-08-18 | Fix |
| CVE-2025-54862 | Santesoft Sante PACS Server cross-site scripting | 4.8CNA v4.0 | 0.2% | 2025-08-18 | Fix |
| CVE-2025-54759 | Santesoft Sante PACS Server cross-site scripting | 5.1CNA v4.0 | 0.2% | 2025-08-18 | Fix |
| CVE-2025-54421 | NamelessMC allows stored cross-site scripting (XSS) in SEO component | 7.2CNA v3.1 | 0.4% | 2025-08-18 | Fix |
| CVE-2025-54234 | Adobe ColdFusion server-side request forgery (SSRF) | 2.7CNA v3.1 | 0.8% | 2025-08-18 | Fix |
| CVE-2025-54156 | Santesoft Sante PACS Server cleartext transmission of sensitive information | 7.5NVD v3.1 | 0.2% | 2025-08-18 | Fix |
| CVE-2025-54118 | NamelessMC allows sensitive information disclosure in member list component | 5.3CNA v3.1 | 0.4% | 2025-08-18 | Fix |
| CVE-2025-54117 | NamelessMC allows stored cross-site scripting (XSS) in dashboard text editor | 9.1CNA v3.1 | 0.4% | 2025-08-18 | Fix |
| CVE-2025-53948 | Santesoft Sante PACS Server double free | 8.7CNA v4.0 | 0.8% | 2025-08-18 | Fix |
| CVE-2025-53705 | Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share out-of-bounds write | 8.4CNA v4.0 | 0.2% | 2025-08-18 | Fix |
| CVE-2025-53192 | Apache Commons OGNL: Expression injection leading to RCE | 8.8CISA ADP v3.1 | 0.6% | 2025-08-18 | Fix |
| CVE-2025-52584 | Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share heap-based buffer overflow | 8.4CNA v4.0 | 0.2% | 2025-08-18 | Fix |
| CVE-2025-47206 | QNAP File Station 5 out-of-bounds write | 7.1CNA v4.0 | 0.4% | 2025-08-18 | Fix |
| CVE-2025-46269 | Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share heap-based buffer overflow | 8.4CNA v4.0 | 0.2% | 2025-08-18 | Fix |
| CVE-2025-43733 | Liferay Portal vulnerable to cross-site scripting | 2.3CNA v4.0 | 0.2% | 2025-08-18 | Fix |
| CVE-2025-43732 | Liferay Portal vulnerable to insecure direct object reference | 4.8CNA v4.0 | 0.2% | 2025-08-18 | Fix |
| CVE-2025-43731 | Liferay Portal vulnerable to cross-site scripting | 6.9CNA v4.0 | 0.2% | 2025-08-18 | Fix |
| CVE-2025-41392 | Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share out-of-bounds read | 8.4CNA v4.0 | 0.2% | 2025-08-18 | Fix |
| CVE-2025-41242 | VMware Spring Framework path traversal vulnerability on non-compliant Servlet containers | 5.9CNA v3.1 | 2.1% | 2025-08-18 | NucleiExploit codeFix |
| CVE-2025-36120 | IBM Storage Virtualize privilege escalation | 8.8CNA v3.1 | 0.3% | 2025-08-18 | Fix |
| CVE-2025-33100 | IBM Concert Software information disclosure | 6.2CNA v3.1 | 0.2% | 2025-08-18 | Fix |
| CVE-2025-33090 | IBM Concert Software denial of service | 7.5CNA v3.1 | 0.4% | 2025-08-18 | Fix |
| CVE-2025-32992 | Thermo Fisher Scientific ePort improper access control | 8.5CISA ADP v3.1 | 0.2% | 2025-08-18 | |
| CVE-2025-31715 | UNISOC SL8521E/SL8521ET/ SL8541E/UIS8141E/UWS6137/UWS6137E/UWS6151(E)/UWS6152 command injection | 9.8CNA v3.1 | 1.5% | 2025-08-18 | Fix |
| CVE-2025-31714 | UNISOC SL8521E/SL8521ET/ SL8541E/UIS8141E/UWS6137/UWS6137E/UWS6151(E)/UWS6152 privilege escalation | 6.8CNA v3.1 | 0.3% | 2025-08-18 | Fix |
| CVE-2025-31713 | UNISOC SL8521E/SL8521ET/ SL8541E/UIS8141E/UWS6137/UWS6137E/UWS6151(E)/UWS6152 command injection | 8.4CNA v3.1 | 0.7% | 2025-08-18 | Fix |
| CVE-2025-27909 | IBM Concert Software cross-origin resource sharing | 5.4CNA v3.1 | 0.2% | 2025-08-18 | Fix |
| CVE-2025-9119 | Netis WF2419 Wireless settings index.htm cross-site scripting | 4.8CNA v4.0 | 0.3% | 2025-08-18 | |
| CVE-2025-9109 | Portabilis i-Diario Password Recovery endpoint email observable response discrepancy | 3.7NVD v3.1 | 0.4% | 2025-08-18 | |
| CVE-2025-9108 | Portabilis i-Diario Login page UI layer | 5.3CNA v4.0 | 0.3% | 2025-08-18 | |
| CVE-2025-9107 | Portabilis i-Diario search_autocomplete cross-site scripting | 6.1v3.1 | 0.4% | 2025-08-18 | |
| CVE-2025-9106 | Portabilis i-Diario Informações Adicionais /planos-de-ensino-por-disciplina cross-site scripting | 5.4v3.1 | 0.3% | 2025-08-18 | |
| CVE-2025-9105 | Portabilis i-Diario additional information page cross-site scripting | 5.4v3.1 | 0.3% | 2025-08-18 | |
| CVE-2025-9104 | Portabilis i-Diario Informações Adicionais /planos-de-aulas-por-disciplina cross-site scripting | 5.4v3.1 | 0.3% | 2025-08-18 | |
| CVE-2025-9103 | Zen Cart ZenCart CKEditor cross-site scripting | 4.8CNA v4.0 | 0.3% | 2025-08-18 | |
| CVE-2025-9102 | 1&1 Mail & Media mail.com App improper export of Android application components | 5.5v3.1 | 0.2% | 2025-08-18 | |
| CVE-2025-9101 | zhenfeng13 My-Blog Tag save cross-site scripting | 5.4v3.1 | 0.3% | 2025-08-18 | |
| CVE-2025-9100 | zhenfeng13 My-Blog Frontend Blog Article Comment comment authentication replay | 3.7NVD v3.1 | 0.5% | 2025-08-18 | |
| CVE-2025-9099 | Acrel Environmental Monitoring Cloud Platform UploadNewsImg unrestricted upload | 5.3CNA v4.0 | 0.3% | 2025-08-18 | |
| CVE-2025-9098 | Elseplus File Recovery App AndroidManifest.xml improper export of android application components | 4.8CNA v4.0 | 0.2% | 2025-08-18 | |
| CVE-2025-9097 | Euro Information CIC banque et compte en ligne App improper export of Android application components | 4.8CNA v4.0 | 0.1% | 2025-08-18 | |
| CVE-2025-9096 | ExpressGateway express-gateway REST endpoint apps.js cross-site scripting | 5.1CNA v4.0 | 0.3% | 2025-08-18 | Fix |
| CVE-2025-8098 | Lenovo PC Manager incorrect default permissions | 8.5CNA v4.0 | 0.1% | 2025-08-18 | Fix |
| CVE-2025-7693 | Rockwell Automation Micro800 CIP Forward Close packet handling denial of service | 9.3CNA v4.0 | 0.4% | 2025-08-18 | Fix |
| CVE-2025-6625 | Schneider Electric Modicon M340 improper input validation | 8.7CNA v4.0 | 0.5% | 2025-08-18 | Fix |
| CVE-2025-5296 | Schneider Electric SESU link following | 7.0CNA v4.0 | 0.2% | 2025-08-18 | Fix |
| CVE-2025-4962 | IDOR vulnerability in Template Creation via `projectId` Manipulation in lunary-ai/lunary | 7.7CNA v3.0 | 0.2% | 2025-08-18 | Fix |
| CVE-2025-4371 | Lenovo Performance FHD Webcam improper signature verification | 7.0CNA v4.0 | 0.2% | 2025-08-18 | Fix |
| CVE-2025-3639 | Liferay Portal authentication bypass | 2.0CNA v4.0 | 0.5% | 2025-08-18 | Exploit code |
| CVE-2025-1759 | IBM Concert Software information disclosure | 5.9CNA v3.1 | 0.3% | 2025-08-18 | Fix |
| CVE-2025-9095 | ExpressGateway express-gateway REST endpoint users.js cross-site scripting | 5.1CNA v4.0 | 0.3% | 2025-08-17 | Fix |
| CVE-2025-9094 | ThingsBoard Add Gateway special elements used in a template engine | 5.3CNA v4.0 | 0.3% | 2025-08-17 | |
| CVE-2025-9093 | BuzzFeed App improper export of Android application components | 5.5v3.1 | 0.3% | 2025-08-17 | |
| CVE-2025-9091 | Tenda AC20 shadow hard-coded credentials | 7.8v3.1 | 0.2% | 2025-08-17 | |
| CVE-2025-9090 | Tenda AC20 Telnet service telnet websFormDefine command injection | 9.8v3.1 | 16.7% | 2025-08-17 | Exploit code |
| CVE-2025-9089 | Tenda AC20 SetIpMacBind sub_48E628 stack-based overflow | 9.8v3.1 | 1.2% | 2025-08-17 | Emerging Threats |
| CVE-2025-7342 | Kubernetes Image Builder Windows image build process hard-coded credentials | 7.5CNA v3.1 | 0.4% | 2025-08-17 | Fix |
| CVE-2025-55286 | vancluever z2d multi-sample anti-aliasing coverage buffer out-of-bounds write | 7.3CNA v4.0 | 0.1% | 2025-08-16 | |
| CVE-2025-55284 | Anthropic Claude Code command allowlist vulnerability | 7.1CNA v4.0 | 0.5% | 2025-08-16 | Fix |
| CVE-2025-49895 | ServerBuddy by PluginBuddy.com WordPress plugin CSRF to PHP object injection | 6.5CNA v3.1 | 0.2% | 2025-08-16 | |
| CVE-2025-38552 | Linux kernel MPTCP subflow creation race condition | 9.4CNA v3.1 | 0.3% | 2025-08-16 | Fix |
| CVE-2025-38551 | Linux kernel virtio-net driver deadlock | 5.5v3.1 | 0.1% | 2025-08-16 | Fix |
| CVE-2025-38550 | Linux kernel IPv6 multicast vulnerability | 7.8CNA v3.1 | 0.2% | 2025-08-16 | Fix |
| CVE-2025-38549 | Linux kernel efivarfs filesystem memory leak | 5.5v3.1 | 0.1% | 2025-08-16 | Fix |
| CVE-2025-38548 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (corsair-cpro) Validate the size of the received input buffer Add buffer_recv_size to store the size of the received bytes. Validate buffer_recv_size in send_usb_cmd(). | 7.8v3.1 | 0.2% | 2025-08-16 | Fix |
| CVE-2025-38547 | Linux kernel AXP20X ADC driver vulnerability | 7.3CNA v3.1 | 0.2% | 2025-08-16 | Fix |
| CVE-2025-38546 | Linux kernel ATM CLIP driver memory leak | 5.5v3.1 | 0.2% | 2025-08-16 | Fix |
| CVE-2025-38545 | Linux kernel TI AM65 CPSW Ethernet driver memory leak | 7.5CNA v3.1 | 0.3% | 2025-08-16 | Fix |
| CVE-2025-38544 | Linux kernel RxRPC preallocation reachable assertion | 5.5v3.1 | 0.1% | 2025-08-16 | Fix |
| CVE-2025-38543 | Linux kernel Tegra NVDEC driver null pointer dereference | 5.5v3.1 | 0.1% | 2025-08-16 | Fix |
| CVE-2025-38542 | Linux kernel AppleTalk routing reference count leak | 7.8CNA v3.1 | 0.2% | 2025-08-16 | Fix |
| CVE-2025-38541 | Linux kernel mt7925 Wi-Fi driver thermal management null pointer dereference | 5.5v3.1 | 0.1% | 2025-08-16 | Fix |
| CVE-2025-38540 | Linux kernel HID camera sensor interface quirk list denial of service | 5.5v3.1 | 0.2% | 2025-08-16 | Fix |
| CVE-2025-38539 | Linux kernel ftrace trace event registration vulnerability | 7.8CNA v3.1 | 0.2% | 2025-08-16 | Fix |
| CVE-2025-38538 | Linux kernel nbpfaxi memory corruption | 7.8v3.1 | 0.2% | 2025-08-16 | Fix |
| CVE-2025-38537 | Linux kernel generic PHY LED registration deadlock | 5.5v3.1 | 0.1% | 2025-08-16 | Fix |
| CVE-2025-38536 | Linux kernel Airoha NPU driver use-after-free | 7.8CNA v3.1 | 0.1% | 2025-08-16 | Fix |
| CVE-2025-38535 | Linux kernel Tegra XUSB PHY regulator control vulnerability | 7.8v3.1 | 0.2% | 2025-08-16 | Fix |
| CVE-2025-38534 | Linux kernel netfs Ceph fscache copy-to-cache vulnerability | 5.5v3.1 | 0.1% | 2025-08-16 | Fix |
| CVE-2025-38533 | Linux kernel libwx Ethernet driver Rx buffer DMA out-of-bounds write | 9.8CNA v3.1 | 0.3% | 2025-08-16 | Fix |
| CVE-2025-38532 | Linux kernel libwx Ethernet driver Rx ring missing resource initialization | 7.8CNA v3.1 | 0.2% | 2025-08-16 | Fix |
| CVE-2025-38531 | Linux kernel st_sensors IIO driver probe use of uninitialized resource | 5.5v3.1 | 0.2% | 2025-08-16 | Fix |
| CVE-2025-38530 | Linux kernel comedi pcl812 driver IRQ configuration out-of-bounds read | 7.1v3.1 | 0.2% | 2025-08-16 | Fix |
| CVE-2025-38529 | Linux kernel comedi aio_iiro_16 driver IRQ configuration out-of-bounds read | 7.1v3.1 | 0.2% | 2025-08-16 | Fix |
| CVE-2025-38528 | Linux kernel bpf bprintf format string helpers vulnerability | 7.1CNA v3.1 | 0.2% | 2025-08-16 | Fix |
| CVE-2025-38527 | Linux kernel SMB client oplock break handling use-after-free | 9.8CNA v3.1 | 0.4% | 2025-08-16 | Fix |
| CVE-2025-38526 | Linux kernel ice driver eswitch link aggregation null pointer dereference | 7.5CNA v3.1 | 0.4% | 2025-08-16 | Fix |
| CVE-2025-38525 | Linux kernel rxrpc MTU size assessment vulnerability | 7.5CNA v3.1 | 0.4% | 2025-08-16 | Fix |
| CVE-2025-38524 | Linux kernel rxrpc call receive path race condition | 7.5CNA v3.1 | 0.3% | 2025-08-16 | Fix |
| CVE-2025-38523 | Linux kernel cifs insecure default initialization | 7.5CNA v3.1 | 0.4% | 2025-08-16 | Fix |
| CVE-2025-38522 | Linux kernel sched_ext scheduler extension null pointer dereference | 5.5v3.1 | 0.1% | 2025-08-16 | Fix |
| CVE-2025-38521 | Linux kernel Imagination GPU driver power management denial of service | 7.1v3.1 | 0.1% | 2025-08-16 | Fix |
| CVE-2025-38520 | Linux kernel amdkfd MMU notifier callback deadlock | 5.5v3.1 | 0.1% | 2025-08-16 | Fix |
| CVE-2025-38519 | Linux kernel DAMON monitoring intervals divide by zero | 5.5v3.1 | 0.1% | 2025-08-16 | Fix |
| CVE-2025-38518 | Linux kernel AMD Zen2 CPU TLB flush support denial of service | 5.5v3.1 | 0.1% | 2025-08-16 | Fix |
| CVE-2025-38517 | Linux kernel memory allocation tagging (alloc_tag) null pointer dereference | 5.5v3.1 | 0.1% | 2025-08-16 | Fix |
| CVE-2025-38516 | Linux kernel msm null pointer dereference | 5.5v3.1 | 0.2% | 2025-08-16 | Fix |
| CVE-2025-38515 | Linux kernel DRM scheduler race condition | 4.7v3.1 | 0.2% | 2025-08-16 | Fix |
| CVE-2025-38514 | Linux kernel RxRPC vulnerability | 7.5CNA v3.1 | 0.4% | 2025-08-16 | Fix |
| CVE-2025-38513 | Linux kernel zd1211rw Wi-Fi driver null pointer dereference | 5.5v3.1 | 0.2% | 2025-08-16 | Fix |
| CVE-2025-38512 | Linux kernel mesh Wi-Fi networking spoofing | 8.8CNA v3.1 | 0.2% | 2025-08-16 | Fix |
| CVE-2025-38511 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Clear all LMTT pages on alloc Our LMEM buffer objects are not cleared by default on alloc and during VF provisioning we only setup LMTT PTEs for the actually provisioned LMEM range. But beyond that valid range we might | 8.8CNA v3.1 | 0.2% | 2025-08-16 | Fix |
| CVE-2025-38510 | Linux kernel KASAN deadlock | 5.5v3.1 | 0.1% | 2025-08-16 | Fix |
| CVE-2025-38509 | Linux kernel mac80211 VHT operating mode denial of service | 5.5v3.1 | 0.1% | 2025-08-16 | Fix |
| CVE-2025-38508 | Linux kernel SEV Secure TSC vulnerability | 7.3CNA v3.1 | 0.1% | 2025-08-16 | Fix |
| CVE-2025-38507 | Linux kernel Nintendo controller HID driver denial of service | 5.5NVD v3.1 | 0.2% | 2025-08-16 | Fix |
| CVE-2025-38506 | Linux kernel KVM memory attributes denial of service | 5.5v3.1 | 0.1% | 2025-08-16 | Fix |
| CVE-2025-38505 | Linux kernel mwifiex Wi-Fi driver vulnerability | 7.1CNA v3.1 | 0.2% | 2025-08-16 | Fix |
| CVE-2025-38504 | In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix pp destruction warnings With multiple page pools and in some other cases we can have allocated niovs on page pool destruction. Remove a misplaced warning checking that all niovs are returned to zcrx on io_pp_zc_ | 5.5v3.1 | 0.1% | 2025-08-16 | Fix |
| CVE-2025-38503 | Linux kernel Btrfs free space tree denial of service | 5.5v3.1 | 0.1% | 2025-08-16 | Fix |
| CVE-2025-38502 | Linux kernel BPF cgroup local storage out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2025-08-16 | Exploit codeFix |
| CVE-2025-38501 | Linux kernel ksmbd server denial of service | 7.5CNA v3.1 | 2.1% | 2025-08-16 | Exploit codeFix |
| CVE-2025-9092 | Bouncy Castle for Java uncontrolled resource consumption | 1.0CNA v4.0 | 0.1% | 2025-08-16 | Fix |
| CVE-2025-9088 | Tenda AC20 formSetVirtualSer save_virtualser_data stack-based overflow | 9.8v3.1 | 0.9% | 2025-08-16 | |
| CVE-2025-9087 | Tenda AC20 SetNetControlList endpoint set_qosMib_list stack-based overflow | 9.8v3.1 | 1.1% | 2025-08-16 | Emerging Threats |
| CVE-2025-8898 | Taxi Booking Manager for Woocommerce WordPress plugin privilege escalation | 9.8CNA v3.1 | 0.5% | 2025-08-16 | Fix |
| CVE-2025-8896 | User Profile Builder WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-08-16 | Fix |
| CVE-2025-8878 | Paid Membership Plugin WordPress plugin code injection | 6.5CNA v3.1 | 0.4% | 2025-08-16 | Fix |
| CVE-2025-8719 | Translate This - Google Translate Web Element Shortcode WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-08-16 | |
| CVE-2025-8464 | Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin directory traversal | 5.3CNA v3.1 | 0.7% | 2025-08-16 | Fix |
| CVE-2025-8293 | Intl DateTime Calendar WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-08-16 | |
| CVE-2025-8143 | Soledad WordPress theme stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-08-16 | Fix |
| CVE-2025-8142 | Soledad WordPress theme authenticated (Contributor+) local file inclusion via header_layout | 8.8CNA v3.1 | 0.5% | 2025-08-16 | Fix |
| CVE-2025-8113 | Ebook Store WordPress plugin reflected XSS via $_SERVER['REQUEST_URI'] | 6.1CISA ADP v3.1 | 0.2% | 2025-08-16 | Fix |
| CVE-2025-8105 | Soledad WordPress theme unauthenticated arbitrary shortcode execution | 7.3CNA v3.1 | 0.3% | 2025-08-16 | Fix |
| CVE-2025-8089 | Advanced iFrame WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4CNA v3.1 | 0.2% | 2025-08-16 | Fix |
| CVE-2025-7686 | weichuncai(WP伪春菜) WordPress plugin cross-site request forgery to stored cross-site scripting | 6.1CNA v3.1 | 0.1% | 2025-08-16 | |
| CVE-2025-7684 | Last.fm Recent Album Artwork WordPress plugin cross-site request forgery | 6.1CNA v3.1 | 0.2% | 2025-08-16 | |
| CVE-2025-7683 | LatestCheckins WordPress plugin cross-site request forgery to stored cross-site scripting | 6.1CNA v3.1 | 0.2% | 2025-08-16 | |
| CVE-2025-7668 | Linux Promotional WordPress plugin cross-site request forgery to stored cross-site scripting | 6.1CNA v3.1 | 0.2% | 2025-08-16 | |
| CVE-2025-7664 | Al Pack WordPress plugin missing authorization unauthenticated Premium feature activation | 7.5CNA v3.1 | 0.5% | 2025-08-16 | Fix |
| CVE-2025-7651 | Earnware Connect WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-08-16 | Fix |
| CVE-2025-7649 | Surbma Recent Comments Shortcode WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-08-16 | Fix |
| CVE-2025-7499 | BetterDocs WordPress plugin unauthorized access | 5.3CNA v3.1 | 0.3% | 2025-08-16 | Fix |
| CVE-2025-7441 | StoryChief WordPress plugin unauthenticated arbitrary file upload | 9.8CNA v3.1 | 50.1% | 2025-08-16 | MetasploitExploit codeFix |
| CVE-2025-7440 | Anber Elementor Addon WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-08-16 | |
| CVE-2025-7439 | Anber Elementor Addon WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-08-16 | |
| CVE-2025-6221 | Embed Bokun WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-08-16 | Fix |
| CVE-2025-6080 | WPGYM WordPress plugin missing authorization to admin account creation | 8.8CNA v3.1 | 0.3% | 2025-08-16 | |
| CVE-2025-6079 | School Management System WordPress plugin authenticated (Student+) arbitrary file upload | 8.8CNA v3.1 | 0.6% | 2025-08-16 | |
| CVE-2025-3671 | WPGYM - Wordpress Gym Management System plugin local file inclusion to privilege escalation | 8.8CNA v3.1 | 0.8% | 2025-08-16 | |
| CVE-2025-55285 | @backstage/plugin-scaffolder-backend template secret leakage in Logs in Scaffolder when | 2.6CNA v3.1 | 0.2% | 2025-08-15 | Fix |
| CVE-2025-55207 | withastro astro @astrojs/node's trailing slash handling causes open redirect issue | 5.5CNA v4.0 | 0.6% | 2025-08-15 | Fix |
| CVE-2025-55203 | Plane stored XSS in Add Work Item Functionality | 5.4CNA v3.1 | 0.2% | 2025-08-15 | Fix |
| CVE-2025-54989 | Firebird XDR Message Parsing null pointer dereference denial of service | 5.3CNA v3.1 | 0.6% | 2025-08-15 | Fix |
| CVE-2025-54475 | Extension joomsky.com SQL injection in JS jobs component for Joomla | 8.7CNA v4.0 | 0.3% | 2025-08-15 | |
| CVE-2025-54474 | Extension dj-extensions.com SQLi vulnerability in DJ-Classifieds component for Joomla | 8.5CNA v4.0 | 0.3% | 2025-08-15 | |
| CVE-2025-54473 | Extension phoca.cz authenticated RCE vulnerability in Phoca Commander component and for Joomla | 9.2CNA v4.0 | 0.4% | 2025-08-15 | |
| CVE-2025-54466 | Apache OFBiz: RCE vulnerability in scrum plugin | 9.8v3.1 | 19.5% | 2025-08-15 | Fix |
| CVE-2025-52621 | HCL BigFix SaaS Authentication service is vulnerable to cache poisoning | 5.3CNA v3.1 | 0.2% | 2025-08-15 | Fix |
| CVE-2025-52620 | HCL BigFix SaaS Authentication service is affected by a cross-site scripting (XSS) | 4.3CNA v3.1 | 0.2% | 2025-08-15 | Fix |
| CVE-2025-52619 | HCL BigFix SaaS Authentication service is affected by a sensitive information disclosure | 5.3CNA v3.1 | 0.3% | 2025-08-15 | Fix |
| CVE-2025-52618 | HCL BigFix SaaS Authentication service is affected by a SQL injection | 4.3CNA v3.1 | 0.3% | 2025-08-15 | Fix |
| CVE-2025-49898 | Dropshix WordPress plugin cross-site scripting (XSS) | 7.6CNA v3.1 | 0.4% | 2025-08-15 | |
| CVE-2025-49897 | Vertical scroll slideshow gallery v2 WordPress plugin SQL injection | 8.8CNA v3.1 | 0.4% | 2025-08-15 | |
| CVE-2025-49432 | Ultimate Video Player WordPress plugin broken access control | 5.3CNA v3.1 | 0.3% | 2025-08-15 | |
| CVE-2025-43490 | HP Hotkey Support escalation of privilege | 8.4CNA v4.0 | 0.2% | 2025-08-15 | |
| CVE-2025-43201 | Apple Music Classical information disclosure | 6.2CISA ADP v3.1 | 0.1% | 2025-08-15 | Fix |
| CVE-2025-36088 | IBM TS4500 cross-site scripting | 5.4CNA v3.1 | 0.2% | 2025-08-15 | Fix |
| CVE-2025-31961 | HCL Connections is vulnerable to broken access control | 3.7CNA v3.1 | 0.2% | 2025-08-15 | Fix |
| CVE-2025-26709 | Unauthorized access vulnerability in ZTE F50 | 5.7CNA v3.1 | 0.3% | 2025-08-15 | |
| CVE-2025-24975 | Firebird Non-Authorized Access to Encrypted Database using Execute Statement on External | 7.1CNA v3.1 | 0.5% | 2025-08-15 | Fix |
| CVE-2025-9060 | MFlash remote code execution (RCE) after authentication of a user with the administrator role | 9.1CNA v3.1 | 0.5% | 2025-08-15 | |
| CVE-2025-9053 | Projectworlds Travel Management System updatesubcategory.php SQL injection | 9.8v3.1 | 0.5% | 2025-08-15 | |
| CVE-2025-9052 | Projectworlds Travel Management System updatepackage.php SQL injection | 9.8v3.1 | 0.4% | 2025-08-15 | |
| CVE-2025-9051 | Projectworlds Travel Management System updatecategory.php SQL injection | 9.8v3.1 | 0.4% | 2025-08-15 | |
| CVE-2025-9050 | Projectworlds Travel Management System addcategory.php SQL injection | 9.8v3.1 | 0.4% | 2025-08-15 | |
| CVE-2025-9047 | Projectworlds Visitor Management System visitor_out.php SQL injection | 9.8v3.1 | 0.4% | 2025-08-15 | |
| CVE-2025-9046 | Tenda AC20 setMacFilterCfg sub_46A2AC stack-based overflow | 8.7CNA v4.0 | 0.8% | 2025-08-15 | |
| CVE-2025-9028 | code-projects Online Medicine Guide adphar.php SQL injection | 9.8v3.1 | 0.4% | 2025-08-15 | |
| CVE-2025-9027 | code-projects Online Medicine Guide addelivery.php SQL injection | 9.8v3.1 | 0.5% | 2025-08-15 | |
| CVE-2025-9026 | D-Link DIR-860L Simple Service Discovery protocol cgibin ssdpcgi_main os command injection | 9.8NVD v3.1 | 3.6% | 2025-08-15 | |
| CVE-2025-9025 | code-projects Simple Cafe Ordering System portal.php SQL injection | 8.8v3.1 | 0.3% | 2025-08-15 | |
| CVE-2025-9024 | PHPGurukul Beauty Parlour Management System book-appointment.php SQL injection | 9.8v3.1 | 0.4% | 2025-08-15 | |
| CVE-2025-9023 | Tenda AC7/AC18 SetLEDCfg formSetSchedLed buffer overflow | 8.7CNA v4.0 | 0.8% | 2025-08-15 | |
| CVE-2025-9022 | SourceCodester Online Bank Management System statements.php SQL injection | 9.8v3.1 | 0.5% | 2025-08-15 | |
| CVE-2025-9021 | SourceCodester Online Bank Management System transfer.php SQL injection | 9.8v3.1 | 0.5% | 2025-08-15 | |
| CVE-2025-9020 | PX4-Autopilot Mavlink shell closing handler use-after-free | 2.0CNA v4.0 | 0.2% | 2025-08-15 | |
| CVE-2025-9019 | tcpreplay tcpprep cidr.c mask_cidr6 heap-based overflow | 5.9v3.1 | 1.0% | 2025-08-15 | Fix |
| CVE-2025-9017 | PHPGurukul Zoo Management System foreigner ticket form cross-site scripting | 6.1v3.1 | 0.4% | 2025-08-15 | |
| CVE-2025-9016 | Mechrevo Control Center GX V2 Powershell script command uncontrolled search path | 7.0NVD v3.1 | 0.2% | 2025-08-15 | |
| CVE-2025-9013 | PHPGurukul Online Shopping Portal Project password-recovery.php SQL injection | 9.8v3.1 | 0.4% | 2025-08-15 | |
| CVE-2025-9012 | PHPGurukul Online Shopping Portal Project bill-ship-addresses.php SQL injection | 9.8v3.1 | 0.4% | 2025-08-15 | |
| CVE-2025-9011 | PHPGurukul Online Shopping Portal Project signup.php SQL injection | 9.8v3.1 | 0.4% | 2025-08-15 | |
| CVE-2025-9010 | itsourcecode Online Tour and Travel Management System booking_report.php SQL injection | 9.8v3.1 | 0.4% | 2025-08-15 | |
| CVE-2025-9009 | itsourcecode Online Tour and Travel Management System email_setup.php SQL injection | 9.8v3.1 | 0.4% | 2025-08-15 | |
| CVE-2025-9008 | itsourcecode Online Tour and Travel Management System sms_setting.php SQL injection | 9.8v3.1 | 0.4% | 2025-08-15 | |
| CVE-2025-9007 | Tenda CH22 editFileName formeditFileName buffer overflow | 8.7CNA v4.0 | 0.7% | 2025-08-15 | |
| CVE-2025-9006 | Tenda CH22 delFileName formdelFileName buffer overflow | 8.7CNA v4.0 | 1.0% | 2025-08-15 | |
| CVE-2025-9005 | mtons mblog register information exposure | 3.7NVD v3.1 | 0.6% | 2025-08-15 | |
| CVE-2025-9004 | mtons mblog password excessive authentication | 9.1v3.1 | 0.9% | 2025-08-15 | |
| CVE-2025-9003 | D-Link DIR-818LW DHCP reserved address handler cross-site scripting | 5.4v3.1 | 0.6% | 2025-08-15 | |
| CVE-2025-9002 | Surbowl dormitory-management-php login.php SQL injection | 9.8v3.1 | 0.5% | 2025-08-15 | |
| CVE-2025-9001 | LemonOS HTTP client main.cpp HTTPGet stack-based overflow | 7.5v3.1 | 1.0% | 2025-08-15 | |
| CVE-2025-9000 | Mechrevo Control Center GX V2 reg file uncontrolled search path | 7.3CNA v4.0 | 0.2% | 2025-08-15 | |
| CVE-2025-8996 | Layout Builder Advanced Permissions Moderately critical Access bypass SA-CONTRIB-2025-097 | 4.3CISA ADP v3.1 | 0.2% | 2025-08-15 | Fix |
| CVE-2025-8995 | Authenticator Login Highly critical Access bypass SA-CONTRIB-2025-096 | 9.8CISA ADP v3.1 | 0.5% | 2025-08-15 | Fix |
| CVE-2025-8993 | itsourcecode Online Tour and Travel Management System expense_report.php SQL injection | 9.8v3.1 | 0.4% | 2025-08-15 | |
| CVE-2025-8992 | mtons mblog cross-site request forgery | 6.5v3.1 | 0.3% | 2025-08-15 | |
| CVE-2025-8991 | linlinjava litemall Business Logic express logic error | 5.3CNA v4.0 | 0.3% | 2025-08-15 | |
| CVE-2025-8990 | code-projects Online Medicine Guide browsemdcn.php SQL injection | 9.8v3.1 | 0.4% | 2025-08-15 | |
| CVE-2025-8989 | SourceCodester COVID 19 Testing Management System edit-phlebotomist.php SQL injection | 9.8v3.1 | 0.4% | 2025-08-15 | |
| CVE-2025-8959 | HashiCorp go-getter vulnerable to arbitrary Read through symlink attack | 7.5CNA v3.1 | 0.6% | 2025-08-15 | Fix |
| CVE-2025-8905 | Inpersttion For WordPress plugin authenticated (Contributor+) arbitrary function Call | 6.3CNA v3.1 | 0.4% | 2025-08-15 | |
| CVE-2025-8867 | Graphina - Elementor Charts and Graphs WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2025-08-15 | Fix |
| CVE-2025-8720 | Plugin README Parser WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-08-15 | |
| CVE-2025-8680 | B Slider- Gutenberg Slider Block for WP WordPress plugin server-side request forgery | 4.3CNA v3.1 | 0.4% | 2025-08-15 | Fix |
| CVE-2025-8676 | B Slider- Gutenberg Slider Block for WP WordPress plugin information disclosure | 4.3CNA v3.1 | 0.4% | 2025-08-15 | Fix |
| CVE-2025-8675 | AI SEO Link Advisor Less critical server-side request forgery SA-CONTRIB-2025-095 | 8.8v3.1 | 0.3% | 2025-08-15 | Fix |
| CVE-2025-8604 | WP Table Builder WordPress Table plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-08-15 | Fix |
| CVE-2025-8451 | Essential Addons for Elementor WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-08-15 | Fix |
| CVE-2025-8362 | GoogleTag Manager Moderately critical cross-site scripting SA-CONTRIB-2025-094 | 6.1v3.1 | 0.2% | 2025-08-15 | Fix |
| CVE-2025-8361 | Config Pages Moderately critical Access bypass SA-CONTRIB-2025-093 | 7.6CISA ADP v3.1 | 0.3% | 2025-08-15 | Fix |
| CVE-2025-8342 | WooCommerce OTP Login With Phone Number, OTP Verification WordPress plugin authentication bypass | 8.1CNA v3.1 | 0.6% | 2025-08-15 | Fix |
| CVE-2025-8092 | COOKiES Consent Management Moderately critical cross-site scripting SA-CONTRIB-2025-092 | 7.6CISA ADP v3.1 | 0.3% | 2025-08-15 | Fix |
| CVE-2025-8091 | EventON Lite WordPress plugin authenticated (Contributor+) information disclosure | 4.3CNA v3.1 | 0.4% | 2025-08-15 | Fix |
| CVE-2025-8080 | Alobaidi Captcha WordPress plugin stored cross-site scripting | 4.4CNA v3.1 | 0.2% | 2025-08-15 | |
| CVE-2025-8066 | bunkerity bunkerweb bunker Web Uncontrolled external site redirect | 4.8CNA v4.0 | 0.4% | 2025-08-15 | Fix |
| CVE-2025-8013 | Quttera Web Malware Scanner WordPress plugin server-side request forgery | 3.8CNA v3.1 | 0.3% | 2025-08-15 | Fix |
| CVE-2025-7961 | Wulkano KAP code injection | 6.9CNA v4.0 | 0.2% | 2025-08-15 | |
| CVE-2025-7778 | Icons Factory WordPress plugin missing authorization unauthenticated arbitrary file deletion | 9.8CNA v3.1 | 0.7% | 2025-08-15 | |
| CVE-2025-7688 | jason-lau Add User Meta add-user-meta page cross-site request forgery | 6.1CNA v3.1 | 0.2% | 2025-08-15 | |
| CVE-2025-7662 | Gestion de tarifs WordPress plugin authenticated (Contributor+) SQL injection | 6.5CNA v3.1 | 0.3% | 2025-08-15 | |
| CVE-2025-7650 | BizCalendar Web WordPress plugin authenticated (Contributor+) local file inclusion | 7.5CNA v3.1 | 0.8% | 2025-08-15 | Fix |
| CVE-2025-7641 | Assistant for NextGEN Gallery WordPress plugin unauthenticated arbitrary directory deletion | 7.5CNA v3.1 | 0.5% | 2025-08-15 | |
| CVE-2025-7507 | elink Embed Content WordPress plugin authenticated (Contributor+) insufficient input validation | 6.4CNA v3.1 | 0.3% | 2025-08-15 | |
| CVE-2025-6679 | Contact Form by Bit Form - Bit Form WordPress plugin unauthenticated arbitrary file upload | 9.8CNA v3.1 | 0.8% | 2025-08-15 | Fix |
| CVE-2025-6025 | Order Tip for WooCommerce WordPress plugin improper input validation | 7.5CNA v3.1 | 0.5% | 2025-08-15 | Fix |
| CVE-2025-5844 | Radius Blocks WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-08-15 | |
| CVE-2025-5048 | Autodesk AutoCAD DGN File Parsing memory corruption | 7.8CNA v3.1 | 0.2% | 2025-08-15 | Fix |
| CVE-2025-5047 | Autodesk AutoCAD DGN File Parsing uninitialized variable | 7.8CNA v3.1 | 0.2% | 2025-08-15 | Fix |
| CVE-2025-5046 | Autodesk AutoCAD DGN File Parsing out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2025-08-15 | Fix |
| CVE-2025-1929 | Risk Yazılım Teknolojileri Reel Sektör Hazine ve Risk Yönetimi Yazılımı SQL injection | 7.2CNA v3.1 | 0.5% | 2025-08-15 | |
| CVE-2025-55716 | WP Statistics WordPress plugin broken access control | 4.3CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-55714 | JetElements For Elementor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-55713 | Blocksy WordPress theme cross-site scripting (XSS) | 5.9CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-55712 | The Plus Addons for Elementor Page Builder Lite WordPress plugin broken access control | 6.5CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-55711 | WP Table Builder WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-55710 | TaxoPress WordPress plugin sensitive data exposure | 4.3CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-55709 | Visual Composer Website Builder WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-55708 | Quiz And Survey Master WordPress plugin SQL injection | 8.5CNA v3.1 | 0.3% | 2025-08-14 | Fix |
| CVE-2025-55675 | Apache Superset: Incorrect datasource authorization on REST API | 5.3CNA v4.0 | 0.5% | 2025-08-14 | Fix |
| CVE-2025-55674 | Apache Superset: Improper SQL authorisation, parse not checking for specific engine functions | 5.3CNA v4.0 | 0.7% | 2025-08-14 | Fix |
| CVE-2025-55673 | Apache Superset: Metadata exposure in embedded charts | 5.3CNA v4.0 | 0.6% | 2025-08-14 | Fix |
| CVE-2025-55672 | Apache Superset: Stored XSS on charts metadata | 5.3CNA v4.0 | 0.7% | 2025-08-14 | Fix |
| CVE-2025-55346 | Unintended dynamic code execution leads to remote code execution by network attackers | 9.8CNA v3.1 | 22.0% | 2025-08-14 | |
| CVE-2025-55199 | Helm Charts with Specific JSON Schema Values can cause memory exhaustion | 6.5CNA v3.1 | 0.3% | 2025-08-14 | Fix |
| CVE-2025-55198 | Helm may panic due to Incorrect YAML Content | 6.5CNA v3.1 | 0.3% | 2025-08-14 | Fix |
| CVE-2025-55195 | @std/toml prototype pollution in Node.js and Browser | 7.3CNA v3.1 | 0.3% | 2025-08-14 | Fix |
| CVE-2025-55192 | HomeAssistant-Tapo-Control code injection vulnerability in issues.yml Workflow | 8.6CNA v4.0 | 0.4% | 2025-08-14 | |
| CVE-2025-54867 | Youki symlink following | 7.0CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-54749 | JetProductGallery WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-54747 | Templatera WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-54746 | Shortcode Redirect WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-54740 | Print My Blog WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-54739 | Nexter Blocks WordPress plugin broken access control | 5.3CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-54736 | Savoy WordPress theme sensitive data exposure | 5.3CNA v3.1 | 0.3% | 2025-08-14 | Fix |
| CVE-2025-54732 | WPDM Premium Packages WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.1% | 2025-08-14 | Fix |
| CVE-2025-54730 | Embedder for Google Reviews WordPress plugin broken access control | 5.3CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-54729 | Webba Booking WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-54728 | CM On Demand Search And Replace WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.1% | 2025-08-14 | Fix |
| CVE-2025-54727 | CM On Demand Search And Replace WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-54717 | WP Membership WordPress plugin settings Change vulnerability | 5.4CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-54715 | Barcode Scanner with Inventory and Order Manager WordPress plugin arbitrary file download | 4.9CNA v3.1 | 0.4% | 2025-08-14 | Fix |
| CVE-2025-54712 | Easy Elementor Addons WordPress plugin broken access control | 4.3CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-54708 | B Blocks WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-54707 | MDTF WordPress plugin SQL injection | 9.3CNA v3.1 | 0.3% | 2025-08-14 | Fix |
| CVE-2025-54706 | Magical Posts Display WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-54705 | WpEvently WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2025-08-14 | Fix |
| CVE-2025-54704 | Easy Elementor Addons WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-54703 | Integrate Google Drive WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.1% | 2025-08-14 | Fix |
| CVE-2025-54702 | Ebook Store WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.1% | 2025-08-14 | Fix |
| CVE-2025-54701 | Unicamp WordPress theme local file inclusion | 9.8v3.1 | 0.4% | 2025-08-14 | Fix |
| CVE-2025-54700 | Makeaholic WordPress theme local file inclusion | 9.8v3.1 | 0.4% | 2025-08-14 | Fix |
| CVE-2025-54699 | Masteriyo - LMS WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-54698 | Classified Listing WordPress plugin content injection | 5.4CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-54697 | Kadence WooCommerce Email Designer WordPress plugin privilege escalation | 7.2CNA v3.1 | 0.4% | 2025-08-14 | Fix |
| CVE-2025-54696 | WPFunnels WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-54695 | HT Mega WordPress plugin broken access control | 5.4CNA v3.1 | 0.3% | 2025-08-14 | Fix |
| CVE-2025-54694 | Button Block WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.1% | 2025-08-14 | Fix |
| CVE-2025-54693 | Form Block WordPress plugin arbitrary file upload | 9.0CNA v3.1 | 0.3% | 2025-08-14 | Fix |
| CVE-2025-54692 | Membership For WooCommerce WordPress plugin broken access control | 7.5CNA v3.1 | 0.4% | 2025-08-14 | Fix |
| CVE-2025-54691 | Motors WordPress plugin insecure direct object references (IDOR) | 5.3CNA v3.1 | 0.3% | 2025-08-14 | Fix |
| CVE-2025-54690 | Xinterio WordPress theme local file inclusion | 8.1CNA v3.1 | 0.6% | 2025-08-14 | Fix |
| CVE-2025-54689 | Urna WordPress theme local file inclusion | 8.1CNA v3.1 | 0.5% | 2025-08-14 | Fix |
| CVE-2025-54688 | JetEngine WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-54687 | JetTabs WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-54686 | Exertio WordPress theme PHP object injection | 9.8CNA v3.1 | 0.4% | 2025-08-14 | Fix |
| CVE-2025-54685 | SureDash WordPress plugin sensitive data exposure | 6.5CNA v3.1 | 0.4% | 2025-08-14 | Fix |
| CVE-2025-54684 | Integration for Contact Form 7 and Constant Contact WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-54683 | WP Modal Popup with Cookie Integration WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-54682 | Connector for Gravity Forms and Google Sheets WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.1% | 2025-08-14 | Fix |
| CVE-2025-54681 | Connector for Gravity Forms and Google Sheets WordPress plugin open redirection | 4.7CNA v3.1 | 0.3% | 2025-08-14 | Fix |
| CVE-2025-54680 | Blogger Buzz WordPress theme cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-54679 | Neon Channel Product Customizer Free WordPress plugin arbitrary content deletion vulnerability | 7.5CNA v3.1 | 0.4% | 2025-08-14 | Fix |
| CVE-2025-54678 | Easy Form Builder WordPress plugin SQL injection | 9.3CNA v3.1 | 0.3% | 2025-08-14 | Fix |
| CVE-2025-54676 | Online Booking and Scheduling Calendar for by vcita WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-54675 | YITH WooCommerce Popup WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.1% | 2025-08-14 | Fix |
| CVE-2025-54674 | Product Configurator for WooCommerce WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.1% | 2025-08-14 | Fix |
| CVE-2025-54673 | Chartify WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.1% | 2025-08-14 | Fix |
| CVE-2025-54672 | Photo Engine WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.1% | 2025-08-14 | Fix |
| CVE-2025-54671 | oik WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.1% | 2025-08-14 | Fix |
| CVE-2025-54669 | MapSVG WordPress plugin SQL injection | 9.3CNA v3.1 | 0.3% | 2025-08-14 | Fix |
| CVE-2025-54668 | myCred WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-54667 | myCred WordPress plugin race condition | 5.3CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-54472 | Apache bRPC: Redis Parser Remote denial of service | 7.5CISA ADP v3.1 | 1.3% | 2025-08-14 | Fix |
| CVE-2025-54409 | AIDE null pointer dereference when reading incorrectly encoded xattr attributes from database | 6.2CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-54389 | AIDE improper output neutralization vulnerability | 6.2CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-54054 | 12 Step Meeting List WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-53631 | FlaskBlog XSS vulnerability in postContent | 5.3CNA v4.0 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-53587 | Findgo WordPress theme cross-site request forgery (CSRF) | 8.8CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-53582 | WordLift WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-53581 | RSS Feed Pro WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-53575 | Primer MyData for Woocommerce WordPress plugin cross-site request forgery (CSRF) | 7.1CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-53347 | Kalium WordPress theme cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.1% | 2025-08-14 | Fix |
| CVE-2025-53343 | Modernize WordPress theme broken access control | 4.3CNA v3.1 | 0.2% | 2025-08-14 | |
| CVE-2025-53342 | Modernize WordPress theme cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-08-14 | |
| CVE-2025-53341 | Pixel Makers Creative App, SaaS and Software Startup Tech Theme missing authorization | 4.3CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-53330 | WP Rentals WordPress theme cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-53249 | Build App Online WordPress plugin cross-site request forgery (CSRF) | 6.5CNA v3.1 | 0.2% | 2025-08-14 | |
| CVE-2025-53241 | Simplified WordPress plugin server side request forgery (SSRF) | 5.5CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-53221 | CodeablePress WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2025-08-14 | |
| CVE-2025-53219 | WP-Database-Optimizer-Tools WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.1% | 2025-08-14 | |
| CVE-2025-52823 | Cube Portfolio WordPress plugin SQL injection | 8.5CNA v3.1 | 0.3% | 2025-08-14 | |
| CVE-2025-52820 | WordPress WooCommerce Point Of Sale (POS) plugin SQL injection | 8.5CNA v3.1 | 0.3% | 2025-08-14 | |
| CVE-2025-52806 | JobSearch WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.6% | 2025-08-14 | Fix |
| CVE-2025-52801 | TheBooking WordPress plugin broken access control | 7.3CNA v3.1 | 0.3% | 2025-08-14 | |
| CVE-2025-52800 | WordPress The E-Commerce ERP plugin broken access control | 7.3CNA v3.1 | 0.3% | 2025-08-14 | |
| CVE-2025-52797 | StoryMap WordPress plugin cross-site request forgery (CSRF) | 8.2CNA v3.1 | 0.2% | 2025-08-14 | |
| CVE-2025-52788 | WordPress CaptionPix plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-14 | |
| CVE-2025-52785 | SMM API WordPress plugin broken access control | 7.1CNA v3.1 | 0.3% | 2025-08-14 | |
| CVE-2025-52775 | Project Cost Calculator WordPress plugin broken access control | 7.1CNA v3.1 | 0.3% | 2025-08-14 | |
| CVE-2025-52771 | Video Expander WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-08-14 | |
| CVE-2025-52769 | flexo-social-gallery WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.1% | 2025-08-14 | |
| CVE-2025-52767 | NetInsight Analytics Implementation WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.1% | 2025-08-14 | |
| CVE-2025-52765 | NetInsight Analytics Implementation WordPress plugin cross-site request forgery (CSRF) | 7.1CNA v3.1 | 0.1% | 2025-08-14 | |
| CVE-2025-52732 | Google Map Targeting WordPress plugin local file inclusion | 8.8CNA v3.1 | 0.4% | 2025-08-14 | Fix |
| CVE-2025-52731 | WordPress Event Manager, Event Calendar and Booking plugin arbitrary content deletion vulnerability | 7.5CNA v3.1 | 0.4% | 2025-08-14 | Fix |
| CVE-2025-52730 | WordPress Event Manager, Event Calendar and Booking plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-52728 | Responsive Posts Carousel WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.6% | 2025-08-14 | Fix |
| CVE-2025-52721 | Global Gallery WordPress plugin broken access control | 6.5CNA v3.1 | 0.3% | 2025-08-14 | Fix |
| CVE-2025-52720 | Super Store Finder WordPress plugin SQL injection | 9.3CNA v3.1 | 0.3% | 2025-08-14 | Fix |
| CVE-2025-52716 | WordPress WP REST Cache plugin local file inclusion | 7.5CNA v3.1 | 0.6% | 2025-08-14 | Fix |
| CVE-2025-52712 | WordPress Post and Page Builder by BoldGrid Visual Drag and Drop Editor plugin path traversal | 4.2CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-52335 | EyouCMS cross-site scripting | 6.1CISA ADP v3.1 | 0.2% | 2025-08-14 | |
| CVE-2025-51986 | freemodbus LINUXTCP demo implementation infinite loop | 7.5CISA ADP v3.1 | 0.3% | 2025-08-14 | |
| CVE-2025-51965 | OURPHP profile name field cross-site scripting | 6.1CISA ADP v3.1 | 0.2% | 2025-08-14 | |
| CVE-2025-50862 | Lotus Cars Android app backup configuration information disclosure | 5.9CISA ADP v3.1 | 0.1% | 2025-08-14 | |
| CVE-2025-50861 | Lotus Cars Android app PushDeepLinkActivity improper access control | 6.5CISA ADP v3.1 | 0.3% | 2025-08-14 | |
| CVE-2025-50817 | Python-Future command injection | 5.4CISA ADP v3.1 | 0.3% | 2025-08-14 | Fix |
| CVE-2025-50518 | libcoap coap_delete_pdu_lkd function use-after-free | 9.8CISA ADP v3.1 | 0.4% | 2025-08-14 | |
| CVE-2025-50515 | phome Empirebak config.php vulnerability | 6.5CISA ADP v3.1 | 0.3% | 2025-08-14 | |
| CVE-2025-50040 | CF7 Spreadsheets WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-08-14 | |
| CVE-2025-50031 | WordPress DB Backup plugin broken access control | 6.5CNA v3.1 | 0.3% | 2025-08-14 | |
| CVE-2025-50029 | WordPress AI Tools plugin arbitrary content deletion vulnerability | 6.5CNA v3.1 | 0.3% | 2025-08-14 | |
| CVE-2025-49887 | Product XML Feed Manager for WooCommerce WordPress plugin remote code execution (RCE) | 9.9CNA v3.1 | 0.4% | 2025-08-14 | Fix |
| CVE-2025-49869 | Eventin WordPress plugin PHP object injection | 8.8CNA v3.1 | 0.4% | 2025-08-14 | Fix |
| CVE-2025-49437 | WordPress WP LOL Rotation plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-08-14 | |
| CVE-2025-49433 | WordPress Supermalink plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-08-14 | |
| CVE-2025-49271 | WordPress GravityWP - Merge Tags plugin local file inclusion | 7.5CNA v3.1 | 0.6% | 2025-08-14 | Fix |
| CVE-2025-49267 | Frontend Admin by DynamiApps WordPress plugin SQL injection | 8.5CNA v3.1 | 0.3% | 2025-08-14 | Fix |
| CVE-2025-49264 | WordPress Cloud SAML SSO - Single Sign On Login plugin local file inclusion | 7.5CNA v3.1 | 0.6% | 2025-08-14 | Fix |
| CVE-2025-49065 | Visit Counter WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-14 | |
| CVE-2025-49064 | User Language Switch WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-14 | |
| CVE-2025-49063 | BaiduXZH Submit(百度熊掌号) WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-14 | |
| CVE-2025-49062 | WP-jScrollPane WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-14 | |
| CVE-2025-49061 | Porn Videos Embed WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-08-14 | |
| CVE-2025-49059 | CleverReach® WP WordPress plugin SQL injection | 9.3CNA v3.1 | 0.3% | 2025-08-14 | Fix |
| CVE-2025-49058 | SoundSt SEO Search WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-14 | |
| CVE-2025-49057 | WP Voting WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-14 | |
| CVE-2025-49056 | 多说社会化评论框 WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-14 | |
| CVE-2025-49054 | Time Sheets WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-14 | |
| CVE-2025-49053 | WP Airdrop Manager WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.2% | 2025-08-14 | |
| CVE-2025-49052 | Netease Music WordPress plugin broken access control | 4.3CNA v3.1 | 0.2% | 2025-08-14 | |
| CVE-2025-49051 | Hide Text Shortcode WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-08-14 | |
| CVE-2025-49048 | Inspectlet User Session Recording and Heatmaps WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-49047 | DigitalOcean Spaces Sync WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.2% | 2025-08-14 | |
| CVE-2025-49044 | Simple Poll WordPress plugin cross-site request forgery (CSRF) to stored XSS | 7.1CNA v3.1 | 0.1% | 2025-08-14 | |
| CVE-2025-49038 | WP Dynamic Links WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-14 | |
| CVE-2025-49037 | Authentication and xmlrpc log writer WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2025-08-14 | |
| CVE-2025-49036 | Premium Addons for KingComposer WordPress plugin local file inclusion | 8.1CNA v3.1 | 0.5% | 2025-08-14 | |
| CVE-2025-49033 | ProfileGrid WordPress plugin SQL injection | 8.5CNA v3.1 | 0.3% | 2025-08-14 | Fix |
| CVE-2025-48862 | Bosch Rexroth ctrlX OS missing encryption | 7.1CNA v3.1 | 0.1% | 2025-08-14 | Fix |
| CVE-2025-48861 | Bosch Rexroth ctrlX OS improper access control | 5.3CNA v3.1 | 0.3% | 2025-08-14 | Fix |
| CVE-2025-48860 | Bosch Rexroth ctrlX OS information disclosure | 8.0CNA v3.1 | 0.3% | 2025-08-14 | Fix |
| CVE-2025-48332 | WordPress Gutenberg Blocks plugin local file inclusion | 7.5CNA v3.1 | 0.6% | 2025-08-14 | Fix |
| CVE-2025-48293 | Geo Mashup WordPress plugin local file inclusion | 9.8CNA v3.1 | 0.4% | 2025-08-14 | Fix |
| CVE-2025-47689 | Video Blogster Lite WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-14 | |
| CVE-2025-47610 | WordPress WooCommerce Fortnox Integration plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-47536 | Content Egg WordPress plugin PHP object injection | 7.2CNA v3.1 | 0.5% | 2025-08-14 | Fix |
| CVE-2025-43984 | KuWFi GC111 goform_set_cmd_process endpoint OS command injection | 9.8CISA ADP v3.1 | 22.9% | 2025-08-14 | |
| CVE-2025-43983 | KuWFi CPF908-CP5 goform command interface missing authentication | 9.1CISA ADP v3.1 | 0.4% | 2025-08-14 | |
| CVE-2025-40758 | Siemens Mendix SAML (Mendix improper signature verification | 8.7CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-39510 | Pinterest Automatic Pin WordPress plugin SQL injection | 8.5CNA v3.1 | 0.3% | 2025-08-14 | Fix |
| CVE-2025-39483 | Eventer WordPress plugin content injection | 6.5CNA v3.1 | 0.3% | 2025-08-14 | Fix |
| CVE-2025-38745 | Dell OpenManage Enterprise sensitive information in log files | 4.8CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-38738 | Dell SupportAssist for Home PCs incorrect privilege assignment | 6.7CNA v3.1 | 0.1% | 2025-08-14 | Fix |
| CVE-2025-36613 | Dell SupportAssist for Home PCs incorrect privilege assignment | 2.8CNA v3.1 | 0.1% | 2025-08-14 | Fix |
| CVE-2025-36612 | Dell SupportAssist for Business PCs incorrect privilege assignment | 6.7CNA v3.1 | 0.1% | 2025-08-14 | Fix |
| CVE-2025-36581 | Dell PowerEdge out-of-bounds access | 3.8CNA v3.1 | 0.1% | 2025-08-14 | Fix |
| CVE-2025-36047 | IBM WebSphere Application Server Liberty denial of service | 5.3CNA v3.1 | 0.5% | 2025-08-14 | Fix |
| CVE-2025-33142 | IBM WebSphere Application Server information disclosure | 5.3CNA v3.1 | 0.3% | 2025-08-14 | Fix |
| CVE-2025-32288 | RT-Theme 18 Extensions WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.6% | 2025-08-14 | Fix |
| CVE-2025-31987 | HCL Connections Docs is vulnerable to a denial of service (DoS) attack | 4.8CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-31425 | WP Lead Capturing Pages WordPress plugin arbitrary content deletion vulnerability | 7.5CNA v3.1 | 0.4% | 2025-08-14 | Fix |
| CVE-2025-31007 | Billplz Addon for Contact Form 7 WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-30998 | WP Links Page WordPress plugin SQL injection | 8.5CNA v3.1 | 0.3% | 2025-08-14 | Fix |
| CVE-2025-30993 | WordPress Thank You Page Customizer for WooCommerce Increase Your Sales plugin broken access control | 6.5CNA v3.1 | 0.3% | 2025-08-14 | Fix |
| CVE-2025-30639 | IDonatePro WordPress plugin broken access control | 7.5CNA v3.1 | 0.3% | 2025-08-14 | |
| CVE-2025-30635 | WordPress IDonatePro plugin local file inclusion | 8.1CNA v3.1 | 0.6% | 2025-08-14 | |
| CVE-2025-30626 | WordPress Multimedia Playlist Slider Addon for WPBakery Page Builder plugin cross-site scripting | 7.1CNA v3.1 | 0.2% | 2025-08-14 | |
| CVE-2025-29014 | WordPress FoodMenu plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-14 | |
| CVE-2025-28999 | WordPress WooCommerce Shop Page Builder plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-14 | |
| CVE-2025-28987 | WordPress PressForward plugin server side request forgery (SSRF) | 6.4CNA v3.1 | 0.2% | 2025-08-14 | |
| CVE-2025-28979 | WordPress WP Pipes plugin local file inclusion | 9.8v3.1 | 0.4% | 2025-08-14 | |
| CVE-2025-28975 | WordPress Alike - WordPress Custom Post Comparison plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2025-08-14 | |
| CVE-2025-28962 | Advanced Google Universal Analytics WordPress plugin stefanoai missing authorization | 6.5CNA v3.1 | 0.3% | 2025-08-14 | |
| CVE-2025-27847 | ESPEC North America Web Controller 3 session improper privilege management | 4.3CISA ADP v3.1 | 0.2% | 2025-08-14 | |
| CVE-2025-27846 | ESPEC North America Web Controller 3 GRUB and BIOS privilege escalation | 4.3CISA ADP v3.1 | 0.2% | 2025-08-14 | |
| CVE-2025-27845 | ESPEC North America Web Controller 3 /api/v4/auth/ endpoint information disclosure | 9.8CISA ADP v3.1 | 0.4% | 2025-08-14 | |
| CVE-2025-27388 | OPPO HEALTH APP arbitrary URL Loading in WebView leading to token leakage Risk | 8.3CNA v4.0 | 0.4% | 2025-08-14 | |
| CVE-2025-26484 | Dell CloudLink XML external entity injection | 5.5CNA v3.1 | 0.3% | 2025-08-14 | Fix |
| CVE-2025-25174 | BeeTeam368 Extensions WordPress plugin local file inclusion | 10.0CNA v3.1 | 0.5% | 2025-08-14 | |
| CVE-2025-25172 | WordPress VidMov theme local file inclusion | 8.1CNA v3.1 | 0.6% | 2025-08-14 | |
| CVE-2025-24775 | WordPress Forms plugin arbitrary file upload | 9.9CNA v3.1 | 0.4% | 2025-08-14 | Fix |
| CVE-2025-24766 | WordPress News Magazine X theme local file inclusion | 7.5CNA v3.1 | 0.6% | 2025-08-14 | Fix |
| CVE-2025-21110 | Dell Data Lakehouse execution with unnecessary privileges | 6.7CNA v3.1 | 0.1% | 2025-08-14 | Fix |
| CVE-2025-20306 | Cisco Secure Firewall Management Center software command injection | 4.9CNA v3.1 | 0.4% | 2025-08-14 | Fix |
| CVE-2025-20302 | Cisco Secure Firewall Management Center software authorization bypass | 4.3CNA v3.1 | 0.3% | 2025-08-14 | Fix |
| CVE-2025-20301 | Cisco Secure Firewall Management Center software authorization bypass | 6.5CNA v3.1 | 0.4% | 2025-08-14 | Fix |
| CVE-2025-20268 | Cisco Secure Firewall Threat Defense Software Geolocation Remote Access VPN Bypass vulnerability | 5.8CNA v3.1 | 0.5% | 2025-08-14 | Fix |
| CVE-2025-20265 | Cisco Secure Firewall Management Center Software Radius remote code execution | 10.0CNA v3.1 | 15.8% | 2025-08-14 | Exploit codeFix |
| CVE-2025-20263 | Cisco Adaptive Security Appliance (ASA) Software integer overflow to buffer overflow | 8.6CNA v3.1 | 0.7% | 2025-08-14 | Fix |
| CVE-2025-20254 | Cisco Adaptive Security Appliance (ASA) Software memory leak | 5.8CNA v3.1 | 0.4% | 2025-08-14 | Fix |
| CVE-2025-20253 | Cisco Adaptive Security Appliance (ASA) Software infinite loop | 8.6CNA v3.1 | 0.5% | 2025-08-14 | Fix |
| CVE-2025-20252 | Cisco Adaptive Security Appliance (ASA) Software memory leak | 5.8CNA v3.1 | 0.4% | 2025-08-14 | Fix |
| CVE-2025-20251 | Cisco Adaptive Security Appliance (ASA) Software improper type validation | 8.5CNA v3.1 | 0.5% | 2025-08-14 | Fix |
| CVE-2025-20244 | Cisco Adaptive Security Appliance (ASA) Software improper type validation | 7.7CNA v3.1 | 0.5% | 2025-08-14 | Fix |
| CVE-2025-20243 | Cisco Adaptive Security Appliance (ASA) Software infinite loop | 8.6CNA v3.1 | 0.6% | 2025-08-14 | Fix |
| CVE-2025-20239 | Cisco IOS memory leak | 8.6CNA v3.1 | 0.6% | 2025-08-14 | Fix |
| CVE-2025-20238 | Cisco Adaptive Security Appliance (ASA) Software improper input validation | 6.0CNA v3.1 | 0.1% | 2025-08-14 | Fix |
| CVE-2025-20237 | Cisco Adaptive Security Appliance (ASA) Software improper input validation | 6.0CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-20235 | Cisco Secure Firewall Management Center software cross-site scripting | 6.1CNA v3.1 | 0.3% | 2025-08-14 | Fix |
| CVE-2025-20225 | Cisco IOS memory leak | 5.8CNA v3.1 | 0.7% | 2025-08-14 | Fix |
| CVE-2025-20224 | Cisco Adaptive Security Appliance (ASA) Software memory leak | 5.8CNA v3.1 | 0.7% | 2025-08-14 | Fix |
| CVE-2025-20222 | Cisco Firepower Threat Defense Software buffer overflow | 8.6CNA v3.1 | 0.6% | 2025-08-14 | Fix |
| CVE-2025-20220 | Cisco Firepower Management Center OS command injection | 6.0CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-20219 | Cisco Adaptive Security Appliance (ASA) Software improper access control | 5.3CNA v3.1 | 0.4% | 2025-08-14 | Fix |
| CVE-2025-20218 | Cisco Secure Firepower Management Center Software XPATH injection | 4.9CNA v3.1 | 0.5% | 2025-08-14 | Fix |
| CVE-2025-20217 | Cisco Firepower Threat Defense Intrusion Detection denial of service | 8.6CNA v3.1 | 0.7% | 2025-08-14 | Fix |
| CVE-2025-20148 | Cisco Secure Firewall Management Center HTML injection | 8.5CNA v3.1 | 0.5% | 2025-08-14 | Fix |
| CVE-2025-20136 | Cisco Adaptive Security Appliance (ASA) Software infinite loop | 8.6CNA v3.1 | 0.6% | 2025-08-14 | Fix |
| CVE-2025-20135 | Cisco Adaptive Security Appliance and Firepower Threat Defense Software DHCP denial of service | 4.3CNA v3.1 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-20134 | Cisco Adaptive Security Appliance (ASA) Software double free | 8.6CNA v3.1 | 0.4% | 2025-08-14 | Fix |
| CVE-2025-20133 | Cisco Adaptive Security Appliance (ASA) Software memory leak | 8.6CNA v3.1 | 0.8% | 2025-08-14 | Fix |
| CVE-2025-20127 | Cisco Adaptive Security Appliance (ASA) Software improper resource release | 7.7CNA v3.1 | 0.7% | 2025-08-14 | Fix |
| CVE-2025-9043 | Seagate Toolkit unquoted search path | 6.7CNA v4.0 | 0.1% | 2025-08-14 | Fix |
| CVE-2025-9042 | Rockwell Automation FLEX 5000 I/O 5094-IY8 module vulnerability | 8.7CNA v4.0 | 0.3% | 2025-08-14 | Fix |
| CVE-2025-9041 | Rockwell Automation FLEX 5000 I/O 5094-IF8 module vulnerability | 8.7CNA v4.0 | 0.3% | 2025-08-14 | Fix |
| CVE-2025-9039 | Information disclosure in Amazon ECS Container agent | 5.3CNA v4.0 | 0.3% | 2025-08-14 | Fix |
| CVE-2025-9036 | Rockwell Automation FactoryTalk Action Manager information disclosure | 8.5CNA v4.0 | 0.2% | 2025-08-14 | Fix |
| CVE-2025-8988 | SourceCodester COVID 19 Testing Management System bwdates-report-result.php SQL injection | 9.8v3.1 | 0.4% | 2025-08-14 | |
| CVE-2025-8987 | SourceCodester COVID 19 Testing Management System test-details.php SQL injection | 9.8v3.1 | 0.4% | 2025-08-14 | |
| CVE-2025-8986 | SourceCodester COVID 19 Testing Management System search-report-result.php SQL injection | 9.8v3.1 | 0.4% | 2025-08-14 | |
| CVE-2025-8985 | SourceCodester COVID 19 Testing Management System profile.php SQL injection | 9.8v3.1 | 0.4% | 2025-08-14 | |
| CVE-2025-8984 | itsourcecode Online Tour and Travel Management System expense_category.php SQL injection | 9.8v3.1 | 0.4% | 2025-08-14 | |
| CVE-2025-8983 | itsourcecode Online Tour and Travel Management System expense.php SQL injection | 9.8v3.1 | 0.4% | 2025-08-14 | |
| CVE-2025-8982 | itsourcecode Online Tour and Travel Management System currency.php SQL injection | 9.8v3.1 | 0.4% | 2025-08-14 | |
| CVE-2025-8981 | itsourcecode Online Tour and Travel Management System payment.php SQL injection | 9.8v3.1 | 0.4% | 2025-08-14 | |
| CVE-2025-8980 | Tenda G1 Firmware Update check_upload_file data authenticity | 7.5CNA v4.0 | 0.4% | 2025-08-14 | |
| CVE-2025-8979 | Tenda AC15 Firmware Update check_fw data authenticity | 7.5CNA v4.0 | 0.4% | 2025-08-14 | |
| CVE-2025-8978 | D-Link DIR-619L boa FirmwareUpgrade data authenticity | 8.1v3.1 | 0.5% | 2025-08-14 | |
| CVE-2025-8976 | givanz Vvveb endpoint post cross-site scripting | 5.4v3.1 | 0.3% | 2025-08-14 | Fix |
| CVE-2025-8975 | givanz Vvveb edit.tpl cross-site scripting | 5.4v3.1 | 0.3% | 2025-08-14 | Fix |
| CVE-2025-8974 | linlinjava litemall JSON Web Token JwtHelper.java hard-coded credentials | 9.8v3.1 | 0.5% | 2025-08-14 | |
| CVE-2025-8973 | SourceCodester Cashier Queuing System Actions.php SQL injection | 9.8v3.1 | 0.4% | 2025-08-14 | |
| CVE-2025-8972 | itsourcecode Online Tour and Travel Management System page-login.php SQL injection | 9.8v3.1 | 0.4% | 2025-08-14 | |
| CVE-2025-8971 | itsourcecode Online Tour and Travel Management System travellers.php SQL injection | 9.8v3.1 | 0.4% | 2025-08-14 | Exploit code |
| CVE-2025-8970 | itsourcecode Online Tour and Travel Management System booking.php SQL injection | 9.8v3.1 | 0.4% | 2025-08-14 | |
| CVE-2025-8969 | itsourcecode Online Tour and Travel Management System approve_user.php SQL injection | 9.8v3.1 | 0.4% | 2025-08-14 | |
| CVE-2025-8968 | itsourcecode Online Tour and Travel Management System disapprove_user.php SQL injection | 9.8v3.1 | 0.4% | 2025-08-14 | |
| CVE-2025-8967 | itsourcecode Online Tour and Travel Management System packages.php SQL injection | 9.8v3.1 | 0.4% | 2025-08-14 |