CVE-2025 list

CVE-2025 records published in August 2025

Page three of four: records 2,001 to 3,000 of the 3,350 published in August 2025, newest first. The first page carries the figures for August 2025.

CVE-2025 records published in August 2025, newest first: records 2,001 to 3,000 of 3,350
CVE Summary CVSS EPSS Published Signals
CVE-2025-8966itsourcecode Online Tour and Travel Management System tax.php SQL injection9.8v3.10.4%2025-08-14
CVE-2025-8965linlinjava litemall Endpoint AdminStorageController.java create unrestricted upload8.8v3.10.4%2025-08-14
CVE-2025-8964code-projects Hostel Management System Login hostel_manage.exe improper authentication7.8v3.10.3%2025-08-14
CVE-2025-8963jeecgboot JimuReport Data Large Screen template testConnection deserialization9.8v3.10.5%2025-08-14
CVE-2025-8962code-projects Hostel Management System Login form hostel_manage.exe stack-based overflow7.8v3.10.3%2025-08-14
CVE-2025-8961LibTIFF tiffcrop tiffcrop.c main memory corruption4.8CNA v4.00.2%2025-08-14Fix
CVE-2025-8960Campcodes Online Flight Booking Management System save_airlines.php SQL injection9.8v3.10.5%2025-08-14
CVE-2025-8958Tenda TX3 fast_setting_wifi_set stack-based overflow8.7CNA v4.00.8%2025-08-14
CVE-2025-8957Campcodes Online Flight Booking Management System flights.php SQL injection9.8v3.10.4%2025-08-14
CVE-2025-8956D-Link DIR‑818L ssdpcgi cgibin getenv command injection8.8v3.123.5%2025-08-14
CVE-2025-8955PHPGurukul Hospital Management System edit-doctor.php SQL injection9.8v3.10.5%2025-08-14
CVE-2025-8954PHPGurukul Hospital Management System doctor-specilization.php SQL injection9.8v3.10.4%2025-08-14
CVE-2025-8953SourceCodester COVID 19 Testing Management System check_availability.php SQL injection9.8v3.10.4%2025-08-14
CVE-2025-8952Campcodes Online Flight Booking Management System Login ajax.php SQL injection9.8v3.10.4%2025-08-14
CVE-2025-8951PHPGurukul Teachers Record Management System search.php SQL injection9.8v3.10.4%2025-08-14
CVE-2025-8950Campcodes Online Recruitment Management System index.php SQL injection9.8v3.10.4%2025-08-14
CVE-2025-8949D-Link DIR-825 httpd ping_response.cgi get_ping_app_stat stack-based overflow9.8NVD v3.10.9%2025-08-14
CVE-2025-8948Projectworlds Visitor Management System front.php SQL injection9.8v3.10.4%2025-08-14
CVE-2025-8947Projectworlds Visitor Management System query_data.php SQL injection9.8v3.10.4%2025-08-14
CVE-2025-8946Projectworlds Online Notes Sharing Platform login.php SQL injection9.8v3.10.4%2025-08-14
CVE-2025-8943Flowise OS command remote code execution9.8CNA v3.174.8%2025-08-14Reported exploitedNucleiMetasploitExploit codeFix
CVE-2025-8940Tenda AC20 saveParentControlInfo strcpy buffer overflow8.7CNA v4.00.9%2025-08-14
CVE-2025-8939Tenda AC20 WifiGuestSet buffer overflow8.7CNA v4.00.9%2025-08-14
CVE-2025-8938TOTOLINK N350R Telnet service formSysTel backdoor5.3CNA v4.00.3%2025-08-14
CVE-2025-8937TOTOLINK N350R formSysCmd command injection8.8v3.12.1%2025-08-14
CVE-2025-89361000 Projects Sales Management System dordupdate.php SQL injection9.8v3.10.4%2025-08-14
CVE-2025-89351000 Projects Sales Management System custcmp.php SQL injection9.8v3.10.5%2025-08-14
CVE-2025-89341000 Projects Sales Management System sales.php cross-site scripting6.1v3.10.4%2025-08-14
CVE-2025-89331000 Projects Sales Management System sales.php cross-site scripting6.1v3.10.4%2025-08-14
CVE-2025-89321000 Projects Sales Management System sales.php SQL injection9.8v3.10.5%2025-08-14
CVE-2025-8931code-projects Medical Store Management System ChangePassword.java SQL injection8.8v3.10.4%2025-08-14
CVE-2025-8930code-projects Medical Store Management System Update Company UpdateCompany.java SQL injection8.8v3.10.4%2025-08-14
CVE-2025-8876N-able N-Central command injection9.4CNA v4.03.4%2025-08-14KEVFix
CVE-2025-8875N-able N-Central insecure deserialization9.4CNA v4.01.9%2025-08-14KEVFix
CVE-2025-8715PostgreSQL pg_dump improper neutralization8.8CNA v3.10.4%2025-08-14Fix
CVE-2025-8714PostgreSQL pg_dump lets superuser of origin server execute arbitrary code in psql client8.8CNA v3.10.8%2025-08-14Exploit codeFix
CVE-2025-8713PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table3.1CNA v3.10.2%2025-08-14Fix
CVE-2025-8047The disable-right-click-powered-by-pixterme through v1.2 and pixter-image-digital-license thtough v1.0 WordPress plugins load a JavaScript file which has been compromised from an apparent abandoned S3 bucket. It can be used as a backdoor by those who control it, but it currently displays an alert ma9.8CISA ADP v3.10.4%2025-08-14
CVE-2025-8046Injection Guard WordPress plugin reflected XSS via $_SERVER['REQUEST_URI']6.1CISA ADP v3.10.2%2025-08-14Fix
CVE-2025-7973Rockwell Automation FactoryTalk® ViewPoint privilege escalation8.5CNA v4.00.1%2025-08-14Fix
CVE-2025-7972Rockwell Automation FactoryTalk® Linx Network Browser Security Bypass vulnerability8.4CNA v4.00.5%2025-08-14Fix
CVE-2025-7971Studio 5000 Logix Designer® arbitrary code execution7.3CNA v4.00.1%2025-08-14Fix
CVE-2025-7808WP Shopify WordPress plugin reflected XSS6.1CISA ADP v3.10.2%2025-08-14Fix
CVE-2025-7774Rockwell Automation ArmorBlock 5000 I/O Web Server vulnerabilities8.8CNA v4.00.4%2025-08-14Fix
CVE-2025-7773Rockwell Automation ArmorBlock 5000 I/O Web Server vulnerabilities8.8CNA v4.00.4%2025-08-14Fix
CVE-2025-7761Reflected XSS in Lepszy BIP5.1CNA v4.00.4%2025-08-14
CVE-2025-7353Rockwell Automation ControlLogix® Ethernet remote code execution9.3CNA v4.00.9%2025-08-14Fix
CVE-2025-6790QSM WordPress plugin Template creation via CSRF4.3CISA ADP v3.10.1%2025-08-14Fix
CVE-2025-5998PPWP WordPress plugin Subscriber+ access bypass via REST API6.5CISA ADP v3.10.3%2025-08-14Fix
CVE-2025-5942Heap overflow in Netskope Endpoint DLP driver5.7CNA v4.00.1%2025-08-14Fix
CVE-2025-5941Out-of-bounds read vulnerability in Netskope Client2.0CNA v4.00.1%2025-08-14Fix
CVE-2025-3703CSS and JavaScript Toolbox WordPress plugin local file inclusion7.5CNA v3.10.6%2025-08-14Fix
CVE-2025-3414Structured Content WordPress plugin Contributor stored XSS5.4CISA ADP v3.10.2%2025-08-14Fix
CVE-2025-0309Netskope Client Local elevation of privileges6.0CNA v4.00.2%2025-08-14Exploit codeFix
CVE-2025-55668Apache Tomcat: Session fixation via rewrite valve6.5CISA ADP v3.10.9%2025-08-13Exploit codeFix
CVE-2025-55345Unsafe symlink following in restricted workspace-write sandbox leads to RCE8.8CNA v3.10.8%2025-08-13Fix
CVE-2025-55280Information disclosure vulnerability in ZKTeco WL205.2CNA v4.00.1%2025-08-13
CVE-2025-55279Hard-coded private key vulnerability in ZKTeco WL206.9CNA v4.00.2%2025-08-13
CVE-2025-55197Pypdf's Manipulated FlateDecode streams can exhaust RAM6.6CNA v4.00.5%2025-08-13Fix
CVE-2025-55196External Secrets Operator PushSecret controller namespace restriction improper access control7.1CNA v4.00.4%2025-08-13Fix
CVE-2025-55194Part-DB Persistent denial of service5.7CNA v3.10.4%2025-08-13Fix
CVE-2025-55193rails active Record logging vulnerable to ANSI escape injection2.7CNA v4.00.6%2025-08-13Fix
CVE-2025-55163Netty MadeYouReset HTTP/2 DDoS vulnerability8.2CNA v4.01.1%2025-08-13Fix
CVE-2025-55160ImageMagick undefined behavior (function-type-mismatch) in CloneSplayTree6.1CNA v3.10.4%2025-08-13Fix
CVE-2025-55154ImageMagick: Integer overflows in MNG magnification8.8CNA v3.11.0%2025-08-13Fix
CVE-2025-55005ImageMagick: Heap-buffer overflow in log colorspace handling5.5CNA v3.10.3%2025-08-13Fix
CVE-2025-55004ImageMagick: Heap-buffer overflow read in MNG magnification with alpha7.6CNA v3.10.5%2025-08-13Fix
CVE-2025-54809F5 Access for Android improper certificate validation8.8CNA v4.00.3%2025-08-13Fix
CVE-2025-54791omero-web OMERO.web displays unecessary user information when requesting to reset the password5.3CNA v3.10.3%2025-08-13Fix
CVE-2025-54500F5 BIG-IP HTTP/2 implementation denial of service6.9CNA v4.00.5%2025-08-13Fix
CVE-2025-54465Hard-coded credentials vulnerability in ZKTeco WL206.8CNA v4.00.2%2025-08-13Fix
CVE-2025-54464Cleartext storage vulnerability in ZKTeco WL207.0CNA v4.00.1%2025-08-13Fix
CVE-2025-54382CherryHQ cherry-studio Cherry Studio RCE vulnerability Disclosure9.7CNA v3.17.4%2025-08-13
CVE-2025-54074Cherry Studio MCP server connection OS command injection7.7CNA v4.02.1%2025-08-13Fix
CVE-2025-53859F5 NGINX SMTP authentication module out-of-bounds read6.3CNA v4.00.4%2025-08-13Fix
CVE-2025-52585BIG-IP Client SSL profile vulnerability8.7CNA v4.00.3%2025-08-13Fix
CVE-2025-52392Soosyze CMS's /user/login endpoint missing rate-limiting and lockout mechanisms5.4CISA ADP v3.10.9%2025-08-13Exploit code
CVE-2025-52386CycloneDX Sunshine CSV injection5.4CISA ADP v3.10.2%2025-08-13
CVE-2025-52385Studio 3T child_process module code injection9.8CISA ADP v3.11.1%2025-08-13Exploit code
CVE-2025-51691MarkTwo commit e3a1d3f90cce4ea9c26efcbbf3a1cbfb9dcdb298 cross-site scripting6.1CISA ADP v3.10.4%2025-08-13
CVE-2025-51452TOTOLINK A7000R Firmware authentication bypass9.8v3.10.4%2025-08-13
CVE-2025-51451TOTOLINK EX1200T Firmware improper authentication9.8v3.10.4%2025-08-13
CVE-2025-50946OliveTin OS command injection6.5CISA ADP v3.11.3%2025-08-13Exploit code
CVE-2025-50690SpatialReference.org cross-site scripting6.1CISA ADP v3.10.2%2025-08-13
CVE-2025-50635Netis Systems WF2780 null pointer dereference7.5CISA ADP v3.10.4%2025-08-13
CVE-2025-50617Netis Systems WF2880 heap-based buffer overflow7.5CISA ADP v3.10.4%2025-08-13
CVE-2025-50616Netis Systems WF2880 buffer overflow7.5CISA ADP v3.10.4%2025-08-13
CVE-2025-50615Netis Systems WF2880 buffer overflow7.5CISA ADP v3.10.4%2025-08-13
CVE-2025-50614Netis Systems WF2880 buffer overflow7.5CISA ADP v3.10.4%2025-08-13
CVE-2025-50613Netis Systems WF2880 buffer overflow7.5CISA ADP v3.10.4%2025-08-13
CVE-2025-50612Netis Systems WF2880 buffer overflow7.5CISA ADP v3.10.4%2025-08-13
CVE-2025-50611Netis Systems WF2880 buffer overflow7.5CISA ADP v3.10.4%2025-08-13
CVE-2025-50610Netis Systems WF2880 buffer overflow7.5CISA ADP v3.10.4%2025-08-13
CVE-2025-50609Netis Systems WF2880 buffer overflow7.5CISA ADP v3.10.4%2025-08-13
CVE-2025-50608Netis Systems WF2880 buffer overflow7.5CISA ADP v3.10.4%2025-08-13
CVE-2025-50594Danphe Health Hospital Management System EMR SecuritySettingsController weak password recovery9.8CISA ADP v3.10.4%2025-08-13
CVE-2025-50251makeplane plane server-side request forgery9.1CISA ADP v3.10.3%2025-08-13Exploit code
CVE-2025-48989Apache Tomcat: H2 DoS Made You Reset7.5CISA ADP v3.13.7%2025-08-13Fix
CVE-2025-48500BIG-IP APM VPN web client for macOS vulnerability7.0CNA v4.00.1%2025-08-13Fix
CVE-2025-46405F5 BIG-IP Access Policy Manager Traffic Management Microkernel stack-based buffer overflow8.7CNA v4.00.3%2025-08-13Fix
CVE-2025-45317HortusFox command injection6.5CISA ADP v3.10.3%2025-08-13
CVE-2025-45316HortusFox TextBlockModule.php component cross-site scripting6.1CISA ADP v3.10.3%2025-08-13
CVE-2025-45315HortusFox /controller/admin.php endpoint cross-site scripting5.4CISA ADP v3.10.3%2025-08-13
CVE-2025-45314HortusFox /Calendar endpoint cross-site scripting6.1CISA ADP v3.10.2%2025-08-13
CVE-2025-45313HortusFox /tasks endpoint cross-site scripting6.1CISA ADP v3.10.2%2025-08-13
CVE-2025-43989Shenzhen Tuoshi NR500-EA /goform/formJsonAjaxReq endpoint OS command injection6.5CISA ADP v3.17.3%2025-08-13Emerging Threats
CVE-2025-43988KuWFi 5G01-X55 ajax_get.cgi information disclosure7.5CISA ADP v3.10.5%2025-08-13
CVE-2025-43986KuWFi GC111 TELNET service missing authentication9.8CISA ADP v3.10.5%2025-08-13
CVE-2025-43982Shenzhen Tuoshi NR500-EA SSH service hard-coded credentials9.8CISA ADP v3.10.4%2025-08-13
CVE-2025-34154UnForm Server Manager Unauthenticated arbitrary file read9.2CNA v4.00.6%2025-08-13Fix
CVE-2025-34153Hyland OnBase .NET Remoting TCP Channel Unauthenticated RCE10.0CNA v4.00.7%2025-08-13Fix
CVE-2025-32451Foxit Reader memory corruption8.8CNA v3.10.6%2025-08-13Fix
CVE-2025-23306NVIDIA Megatron-LM code injection7.8CNA v3.10.2%2025-08-13Fix
CVE-2025-23305NVIDIA Megatron-LM code injection7.8CNA v3.10.2%2025-08-13Fix
CVE-2025-23304NVIDIA NeMo Framework path traversal7.8CNA v3.11.1%2025-08-13Fix
CVE-2025-23303NVIDIA NeMo Framework deserialization of untrusted data7.8CNA v3.10.6%2025-08-13Fix
CVE-2025-23298NVIDIA Merlin Transformers4Rec code injection7.8CNA v3.10.7%2025-08-13Fix
CVE-2025-23296NVIDIA Isaac-GR00T N1 code injection7.8CNA v3.10.6%2025-08-13Fix
CVE-2025-23295NVIDIA Apex code injection7.8CNA v3.10.2%2025-08-13Fix
CVE-2025-23294NVIDIA WebDataset OS command injection7.8CNA v3.10.2%2025-08-13Fix
CVE-2025-8941Linux-PAM pam_namespace module path traversal7.8CNA v3.10.3%2025-08-13Fix
CVE-2025-8929code-projects Medical Store Management System MainPanel.java SQL injection8.8v3.10.4%2025-08-13
CVE-2025-8928code-projects Medical Store Management System Update Medicines UpdateMedicines.java SQL injection8.8v3.10.4%2025-08-13
CVE-2025-8927mtons mblog Verification Code send_code excessive authentication3.7NVD v3.10.6%2025-08-13
CVE-2025-8926SourceCodester COVID 19 Testing Management System login.php SQL injection9.8v3.10.4%2025-08-13
CVE-2025-8925itsourcecode Sports Management System match.php SQL injection9.8v3.10.4%2025-08-13
CVE-2025-8924Campcodes Online Water Billing System viewbill.php SQL injection9.8v3.10.4%2025-08-13
CVE-2025-8923code-projects Job Diary edit-details.php SQL injection9.8v3.10.4%2025-08-13
CVE-2025-8922code-projects Job Diary admin-inbox.php SQL injection9.8v3.10.4%2025-08-13
CVE-2025-8921code-projects Job Diary user-apply.php SQL injection9.8v3.10.4%2025-08-13
CVE-2025-8920Portabilis i-Diario Dicionário de Termos BNCC dicionario-de-termos-bncc cross-site scripting5.4v3.10.3%2025-08-13
CVE-2025-8919Portabilis i-Diario History objetivos-de-aprendizagem-e-habilidades cross-site scripting4.8v3.10.3%2025-08-13
CVE-2025-8918Portabilis i-Educar Editar educar_instituicao_cad.php cross-site scripting4.8v3.10.3%2025-08-13
CVE-2025-8916Bouncy Castle for Java bcpkix, bcprov, bcpkix-fips on All (API modules) allows Excessive Allocation6.3CNA v4.00.5%2025-08-13Fix
CVE-2025-8914WellChoose｜Organization Portal System SQL injection7.5v3.10.4%2025-08-13Fix
CVE-2025-8913WellChoose｜Organization Portal System local file inclusion9.3CNA v4.00.6%2025-08-13Fix
CVE-2025-8912WellChoose｜Organization Portal System arbitrary file reading through path traversal8.7CNA v4.00.6%2025-08-13Fix
CVE-2025-8911WellChoose｜Organization Portal System reflected cross-site scripting5.3CNA v4.00.3%2025-08-13Fix
CVE-2025-8910WellChoose｜Organization Portal System reflected cross-site scripting5.3CNA v4.00.3%2025-08-13Fix
CVE-2025-8909WellChoose｜Organization Portal System arbitrary file reading through path traversal7.1CNA v4.00.6%2025-08-13Fix
CVE-2025-8908Shanghai Lingdang Information Technology Lingdang CRM event.php SQL injection9.8v3.10.3%2025-08-13
CVE-2025-8907H3C M2 NAS Webserver Configuration unnecessary privileges7.3CNA v4.00.2%2025-08-13
CVE-2025-8904Privilege escalation issue in Amazon EMR Secret agent component9.0CNA v4.00.4%2025-08-13Fix
CVE-2025-8901Google Chrome ANGLE out-of-bounds write8.8CISA ADP v3.10.3%2025-08-13Fix
CVE-2025-8891OceanWP WordPress theme cross-site request forgery4.3CNA v3.10.2%2025-08-13Fix
CVE-2025-8882Google Chrome Aura use-after-free8.8CISA ADP v3.10.3%2025-08-13Fix
CVE-2025-8881Google Chrome File Picker inappropriate implementation6.5CISA ADP v3.10.2%2025-08-13Fix
CVE-2025-8880Google Chrome race condition8.8CISA ADP v3.10.3%2025-08-13Fix
CVE-2025-8879Google Chrome libaom heap-based buffer overflow8.8CISA ADP v3.10.3%2025-08-13Fix
CVE-2025-8770Authorization bypass through user-controlled key in GitLab6.5CNA v3.10.3%2025-08-13Fix
CVE-2025-8762INSTAR 2K+/4K UART improper physical access control7.0CNA v4.00.2%2025-08-13
CVE-2025-8761INSTAR 2K+/4K Backend IPC server denial of service8.7CNA v4.08.0%2025-08-13
CVE-2025-8760INSTAR 2K+/4K fcgi_server base64_decode buffer overflow9.3CNA v4.00.8%2025-08-13Exploit code
CVE-2025-8754ABB AbilityTM zenon missing authentication8.7CNA v4.00.4%2025-08-13Fix
CVE-2025-8671Varnish Cache HTTP/2 stream handling denial of service7.5CISA ADP v3.13.7%2025-08-13Exploit codeFix
CVE-2025-8491Easy restaurant menu manager WordPress plugin cross-site request forgery to Menu upload4.3CNA v3.10.2%2025-08-13Fix
CVE-2025-7739Improper neutralization of input during web page generation (cross-site scripting) in GitLab8.7CNA v3.10.3%2025-08-13Fix
CVE-2025-7734Improper neutralization of input during web page generation (cross-site scripting) in GitLab8.7CNA v3.10.3%2025-08-13Fix
CVE-2025-7384Database for Contact Form 7 WordPress plugin PHP object injection9.8CNA v3.11.3%2025-08-13Fix
CVE-2025-6715Latepoint WordPress plugin unauthenticated LFI9.8CISA ADP v3.10.6%2025-08-13Fix
CVE-2025-6186Improper neutralization of input during web page generation (cross-site scripting) in GitLab8.7CNA v3.10.3%2025-08-13Fix
CVE-2025-6184Tutor LMS Pro eLearning and online course solution WordPress plugin SQL injection8.8CNA v3.10.4%2025-08-13Fix
CVE-2025-5819Incorrect permission assignment for critical resource in GitLab5.0CNA v3.10.3%2025-08-13Fix
CVE-2025-4410Insyde Software InsydeH2O module SetupUtility buffer overflow7.5CNA v3.10.1%2025-08-13
CVE-2025-4277Insyde Software InsydeH2O Tcg2Smm: Improper input validation may lead to arbitrary code execution7.5CNA v3.10.1%2025-08-13Fix
CVE-2025-4276Insyde Software InsydeH2O UsbCoreDxe: Improper input validation may lead to arbitrary code execution7.5CNA v3.10.1%2025-08-13Fix
CVE-2025-2937Inefficient regular expression complexity in GitLab6.5CNA v3.10.4%2025-08-13Fix
CVE-2025-2614Allocation of resources without limits or throttling in GitLab6.5CNA v3.10.4%2025-08-13Fix
CVE-2025-2498Insufficient granularity of access control in GitLab3.1CNA v3.10.3%2025-08-13Fix
CVE-2025-2184Cortex XDR Broker VM: Secrets Shared across multiple Broker VM Images5.3CNA v4.00.2%2025-08-13Fix
CVE-2025-2183GlobalProtect App: Improper certificate validation leads to privilege escalation5.3CNA v4.00.1%2025-08-13Fix
CVE-2025-2182PAN-OS: Firewall Clusters using the MACsec Protocol Expose the Connectivity Association Key (CAK)5.6CNA v4.00.1%2025-08-13Fix
CVE-2025-2181Checkov by Prisma Cloud: Cleartext Exposure of Credentials5.9CNA v4.00.2%2025-08-13Fix
CVE-2025-2180Checkov by Prisma Cloud: Unsafe deserialization of Terraform files allows code execution4.8CNA v4.00.2%2025-08-13Fix
CVE-2025-1477Allocation of resources without limits or throttling in GitLab6.5CNA v3.10.5%2025-08-13Fix
CVE-2025-0818File Manager Pro WordPress plugin path traversal6.5CNA v3.10.8%2025-08-13Fix
CVE-2025-55171WeGIA personalizacao_remover.php endpoint missing authentication7.5CNA v3.10.6%2025-08-12Fix
CVE-2025-55170WeGIA reflected XSS via `verificacao` and `redir_config` param at endpoint `/html/alterar_senha.php`6.5CNA v3.10.4%2025-08-12Fix
CVE-2025-55169WeGIA path traversal at endpoint html/socio/sistema/download_remessa.php via parameter file10.0CNA v4.01.6%2025-08-12NucleiFix
CVE-2025-55168WeGIA SQL injection via id_fichamedica at endpoint `GET /html/saude/aplicar_medicamento.php`9.4CNA v4.00.4%2025-08-12Fix
CVE-2025-55167WeGIA SQL injection via id_fichamedica at endpoint `GET/html/funcionario/dependente_remover.php`9.4CNA v4.00.5%2025-08-12Fix
CVE-2025-55166svg-sanitizer By-Passing Attribute Sanitization5.1CNA v4.00.5%2025-08-12Fix
CVE-2025-55165Autocaliweb exposure of sensitive information to an unauthorized actor in `config_sql.py`8.3CNA v3.10.2%2025-08-12Fix
CVE-2025-55164content-security-policy-parser prototype pollution vulnerability may lead to RCE8.8CNA v4.00.4%2025-08-12Fix
CVE-2025-55011Kanboard path traversal in File Write via Task file upload Api6.4CNA v3.10.4%2025-08-12Fix
CVE-2025-55010Kanboard Authenticated Admin remote code execution via unsafe deserialization of Events9.1CNA v3.10.9%2025-08-12Fix
CVE-2025-54864Hydra missing authentication when triggering evaluations through GitHub and Gitea plugins6.9CNA v4.00.4%2025-08-12Fix
CVE-2025-54800Hydra persistent XSS in build metrics7.1CNA v4.00.2%2025-08-12Fix
CVE-2025-54238Adobe Dimension out-of-bounds read5.5CNA v3.10.2%2025-08-12Fix
CVE-2025-54235Adobe Substance3D Modeler out-of-bounds read5.5CNA v3.10.2%2025-08-12Fix
CVE-2025-54233Adobe FrameMaker out-of-bounds read5.5CNA v3.10.2%2025-08-12Fix
CVE-2025-54232Adobe FrameMaker use-after-free7.8CNA v3.10.2%2025-08-12Fix
CVE-2025-54231Adobe FrameMaker use-after-free7.8CNA v3.10.2%2025-08-12Fix
CVE-2025-54230Adobe FrameMaker use-after-free7.8CNA v3.10.2%2025-08-12Fix
CVE-2025-54229Adobe FrameMaker use-after-free7.8CNA v3.10.2%2025-08-12Fix
CVE-2025-54228Adobe InDesign Desktop out-of-bounds read5.5CNA v3.10.3%2025-08-12Fix
CVE-2025-54227Adobe InDesign Desktop out-of-bounds read5.5CNA v3.10.3%2025-08-12Fix
CVE-2025-54226Adobe InDesign Desktop use-after-free7.8CNA v3.10.3%2025-08-12Fix
CVE-2025-54225Adobe InDesign Desktop use-after-free7.8CNA v3.10.3%2025-08-12Fix
CVE-2025-54224Adobe InDesign Desktop use-after-free7.8CNA v3.10.3%2025-08-12Fix
CVE-2025-54223Adobe InCopy use-after-free7.8CNA v3.10.3%2025-08-12Fix
CVE-2025-54222Adobe Substance3D Stager out-of-bounds write7.8CNA v3.10.2%2025-08-12Fix
CVE-2025-54221Adobe InCopy out-of-bounds write7.8CNA v3.10.3%2025-08-12Fix
CVE-2025-54220Adobe InCopy heap-based buffer overflow7.8CNA v3.10.3%2025-08-12Fix
CVE-2025-54219Adobe InCopy heap-based buffer overflow7.8CNA v3.10.3%2025-08-12Fix
CVE-2025-54218Adobe InCopy out-of-bounds write7.8CNA v3.10.3%2025-08-12Fix
CVE-2025-54217Adobe InCopy heap-based buffer overflow7.8CNA v3.10.3%2025-08-12Fix
CVE-2025-54216Adobe InCopy out-of-bounds write7.8CNA v3.10.3%2025-08-12Fix
CVE-2025-54215Adobe InCopy out-of-bounds write7.8CNA v3.10.3%2025-08-12Fix
CVE-2025-54214Adobe InDesign Desktop out-of-bounds read5.5CNA v3.10.3%2025-08-12Fix
CVE-2025-54213Adobe InDesign Desktop out-of-bounds write7.8CNA v3.10.3%2025-08-12Fix
CVE-2025-54212Adobe InDesign Desktop heap-based buffer overflow7.8CNA v3.10.3%2025-08-12Fix
CVE-2025-54211Adobe InDesign Desktop heap-based buffer overflow7.8CNA v3.10.3%2025-08-12Fix
CVE-2025-54210Adobe InDesign Desktop out-of-bounds write7.8CNA v3.10.3%2025-08-12Fix
CVE-2025-54209Adobe InDesign Desktop heap-based buffer overflow7.8CNA v3.10.3%2025-08-12Fix
CVE-2025-54208Adobe InDesign Desktop out-of-bounds write7.8CNA v3.10.2%2025-08-12Fix
CVE-2025-54207Adobe InDesign Desktop access of uninitialized pointer7.8CNA v3.10.3%2025-08-12Fix
CVE-2025-54206Adobe InDesign Desktop out-of-bounds write7.8CNA v3.10.2%2025-08-12Fix
CVE-2025-54205Adobe Substance3D Sampler out-of-bounds read5.5CNA v3.10.2%2025-08-12Fix
CVE-2025-54204Adobe Substance3D Modeler out-of-bounds read5.5CNA v3.10.2%2025-08-12Fix
CVE-2025-54203Adobe Substance3D Modeler out-of-bounds read5.5CNA v3.10.2%2025-08-12Fix
CVE-2025-54202Adobe Substance3D Modeler out-of-bounds read5.5CNA v3.10.2%2025-08-12Fix
CVE-2025-54201Adobe Substance3D Modeler out-of-bounds read5.5CNA v3.10.2%2025-08-12Fix
CVE-2025-54200Adobe Substance3D Modeler out-of-bounds read5.5CNA v3.10.2%2025-08-12Fix
CVE-2025-54199Adobe Substance3D Modeler out-of-bounds read5.5CNA v3.10.2%2025-08-12Fix
CVE-2025-54198Adobe Substance3D Modeler out-of-bounds read5.5CNA v3.10.2%2025-08-12Fix
CVE-2025-54197Adobe Substance3D Modeler out-of-bounds read5.5CNA v3.10.2%2025-08-12Fix
CVE-2025-54195Adobe Substance3D Painter out-of-bounds read5.5CNA v3.10.2%2025-08-12Fix
CVE-2025-54194Adobe Substance3D Painter out-of-bounds read5.5CNA v3.10.2%2025-08-12Fix
CVE-2025-54193Adobe Substance3D Painter out-of-bounds read5.5CNA v3.10.2%2025-08-12Fix
CVE-2025-54192Adobe Substance3D Painter out-of-bounds read5.5CNA v3.10.2%2025-08-12Fix
CVE-2025-54191Adobe Substance3D Painter out-of-bounds read5.5CNA v3.10.2%2025-08-12Fix
CVE-2025-54190Adobe Substance3D Painter out-of-bounds read5.5CNA v3.10.2%2025-08-12Fix
CVE-2025-54189Adobe Substance3D Painter out-of-bounds read5.5CNA v3.10.2%2025-08-12Fix
CVE-2025-54188Adobe Substance3D Painter out-of-bounds read5.5CNA v3.10.2%2025-08-12Fix
CVE-2025-54187Adobe Substance3D Painter out-of-bounds write7.8CNA v3.10.2%2025-08-12Fix
CVE-2025-54186Adobe Substance3D Modeler out-of-bounds read5.5CNA v3.10.2%2025-08-12Fix
CVE-2025-53793Microsoft Azure Stack Hub information disclosure7.5CNA v3.11.3%2025-08-12Fix
CVE-2025-53789Microsoft Windows StateRepository API Server file elevation of privilege7.8CNA v3.10.4%2025-08-12Fix
CVE-2025-53788Microsoft Windows Subsystem for Linux (WSL2) Kernel elevation of privilege7.0CNA v3.10.2%2025-08-12Fix
CVE-2025-53784Microsoft Word remote code execution8.4CNA v3.10.5%2025-08-12Fix
CVE-2025-53783Microsoft Teams remote code execution7.5CNA v3.10.8%2025-08-12Fix
CVE-2025-53781Microsoft Azure Virtual Machines information disclosure7.7CNA v3.11.2%2025-08-12Fix
CVE-2025-53779Microsoft Windows Kerberos elevation of privilege7.2CNA v3.12.7%2025-08-12Exploit codeFix
CVE-2025-53778Microsoft Windows NTLM elevation of privilege8.8CNA v3.151.5%2025-08-12Fix
CVE-2025-53773GitHub Copilot and Visual Studio remote code execution7.8CNA v3.13.2%2025-08-12Fix
CVE-2025-53772Microsoft Web Deploy remote code execution8.8CNA v3.127.7%2025-08-12Emerging ThreatsExploit codeFix
CVE-2025-53769Microsoft Windows Security App spoofing5.5CNA v3.10.4%2025-08-12Fix
CVE-2025-53766Microsoft Office GDI+ remote code execution9.8CNA v3.18.2%2025-08-12Fix
CVE-2025-53765Microsoft Azure Stack Hub information disclosure4.4CNA v3.10.5%2025-08-12Fix
CVE-2025-53761Microsoft PowerPoint remote code execution7.8CNA v3.10.5%2025-08-12Fix
CVE-2025-53760Microsoft SharePoint elevation of privilege7.1CNA v3.118.9%2025-08-12Fix
CVE-2025-53759Microsoft Excel remote code execution7.8CNA v3.10.5%2025-08-12Fix
CVE-2025-53744Fortinet FortiOS incorrect privilege assignment6.8CNA v3.10.6%2025-08-12Fix
CVE-2025-53741Microsoft Excel remote code execution7.8CNA v3.10.5%2025-08-12Fix
CVE-2025-53740Microsoft Office remote code execution8.4CNA v3.10.6%2025-08-12Fix
CVE-2025-53739Microsoft Excel remote code execution7.8CNA v3.10.6%2025-08-12Fix
CVE-2025-53738Microsoft Word remote code execution7.8CNA v3.10.5%2025-08-12Fix
CVE-2025-53737Microsoft Excel remote code execution7.8CNA v3.10.5%2025-08-12Fix
CVE-2025-53736Microsoft Word information disclosure6.8CNA v3.10.5%2025-08-12Fix
CVE-2025-53735Microsoft Excel remote code execution7.8CNA v3.10.6%2025-08-12Fix
CVE-2025-53734Microsoft Office Visio remote code execution7.8CNA v3.10.4%2025-08-12Fix
CVE-2025-53733Microsoft Word remote code execution8.4CNA v3.10.5%2025-08-12Fix
CVE-2025-53732Microsoft Office remote code execution7.8CNA v3.10.5%2025-08-12Fix
CVE-2025-53731Microsoft Office remote code execution8.4CNA v3.10.6%2025-08-12Fix
CVE-2025-53730Microsoft Office Visio remote code execution7.8CNA v3.10.4%2025-08-12Fix
CVE-2025-53729Microsoft Azure File Sync elevation of privilege7.8CNA v3.10.3%2025-08-12Fix
CVE-2025-53728Microsoft Dynamics 365 (on-premises) information disclosure6.5CNA v3.11.2%2025-08-12Fix
CVE-2025-53727Microsoft SQL server elevation of privilege8.8CNA v3.11.2%2025-08-12Fix
CVE-2025-53726Microsoft Windows Push Notifications Apps elevation of privilege7.8CNA v3.10.4%2025-08-12Fix
CVE-2025-53725Microsoft Windows Push Notifications Apps elevation of privilege7.8CNA v3.10.4%2025-08-12Fix
CVE-2025-53724Microsoft Windows Push Notifications Apps elevation of privilege7.8CNA v3.10.4%2025-08-12Fix
CVE-2025-53723Microsoft Windows Hyper-V elevation of privilege7.8CNA v3.10.5%2025-08-12Fix
CVE-2025-53722Microsoft Windows Remote Desktop services denial of service7.5CNA v3.122.3%2025-08-12Fix
CVE-2025-53721Microsoft Windows Connected Devices Platform service elevation of privilege7.0CNA v3.10.4%2025-08-12Fix
CVE-2025-53720Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.0CNA v3.10.9%2025-08-12Fix
CVE-2025-53719Microsoft Windows Routing and Remote Access Service (RRAS) information disclosure5.7CNA v3.11.3%2025-08-12Fix
CVE-2025-53718Microsoft Windows Ancillary function driver for WinSock elevation of privilege7.0CNA v3.10.4%2025-08-12Fix
CVE-2025-53716Microsoft Windows Local Security Authority subsystem Service (LSASS) denial of service6.5CNA v3.11.5%2025-08-12Fix
CVE-2025-53156Microsoft Windows Storage Port driver information disclosure5.5CNA v3.10.7%2025-08-12Fix
CVE-2025-53155Microsoft Windows Hyper-V elevation of privilege7.8CNA v3.10.5%2025-08-12Fix
CVE-2025-53154Microsoft Windows Ancillary function driver for WinSock elevation of privilege7.8CNA v3.10.4%2025-08-12Fix
CVE-2025-53153Microsoft Windows Routing and Remote Access Service (RRAS) information disclosure5.7CNA v3.11.2%2025-08-12Fix
CVE-2025-53152Microsoft Desktop Windows Manager remote code execution7.8CNA v3.10.4%2025-08-12Fix
CVE-2025-53151Microsoft Windows Kernel elevation of privilege7.8CNA v3.10.4%2025-08-12Fix
CVE-2025-53149Microsoft Windows kernel Streaming WOW Thunk service driver elevation of privilege7.8CNA v3.10.7%2025-08-12Fix
CVE-2025-53148Microsoft Windows Routing and Remote Access Service (RRAS) information disclosure5.7CNA v3.11.2%2025-08-12Fix
CVE-2025-53147Microsoft Windows Ancillary function driver for WinSock elevation of privilege7.0CNA v3.10.5%2025-08-12Fix
CVE-2025-53145Microsoft Message Queuing (MSMQ) remote code execution8.8CNA v3.18.2%2025-08-12Fix
CVE-2025-53144Microsoft Message Queuing (MSMQ) remote code execution8.8CNA v3.18.2%2025-08-12Fix
CVE-2025-53143Microsoft Message Queuing (MSMQ) remote code execution8.8CNA v3.18.7%2025-08-12Fix
CVE-2025-53142Microsoft Brokering File System elevation of privilege7.0CNA v3.10.4%2025-08-12Fix
CVE-2025-53141Microsoft Windows Ancillary function driver for WinSock elevation of privilege7.8CNA v3.10.4%2025-08-12Fix
CVE-2025-53140Microsoft Windows Kernel Transaction Manager elevation of privilege7.0CNA v3.10.4%2025-08-12Fix
CVE-2025-53138Microsoft Windows Routing and Remote Access Service (RRAS) information disclosure5.7CNA v3.11.2%2025-08-12Fix
CVE-2025-53137Microsoft Windows Ancillary function driver for WinSock elevation of privilege7.0CNA v3.10.4%2025-08-12Fix
CVE-2025-53136Microsoft Windows NT OS Kernel information disclosure5.5CNA v3.10.9%2025-08-12Exploit codeFix
CVE-2025-53135Microsoft Windows DirectX Graphics Kernel elevation of privilege7.0CNA v3.10.3%2025-08-12Fix
CVE-2025-53134Microsoft Windows Ancillary function driver for WinSock elevation of privilege7.0CNA v3.10.3%2025-08-12Fix
CVE-2025-53133Microsoft Windows PrintWorkflowUserSvc elevation of privilege7.8CNA v3.10.4%2025-08-12Fix
CVE-2025-53132Microsoft Windows win32k elevation of privilege7.8CNA v3.10.4%2025-08-12Fix
CVE-2025-53131Microsoft Windows Media remote code execution8.8CNA v3.10.9%2025-08-12Fix
CVE-2025-52970Fortinet FortiWeb improper parameter handling7.7CNA v3.110.1%2025-08-12NucleiEmerging ThreatsExploit codeFix
CVE-2025-50177Microsoft Message Queuing (MSMQ) remote code execution8.1CNA v3.14.4%2025-08-12Fix
CVE-2025-50176Microsoft Windows DirectX Graphics Kernel remote code execution7.8CNA v3.10.5%2025-08-12Fix
CVE-2025-50173Microsoft Windows Installer elevation of privilege7.8CNA v3.10.5%2025-08-12Fix
CVE-2025-50172Microsoft Windows DirectX Graphics Kernel denial of service6.5CNA v3.11.5%2025-08-12Fix
CVE-2025-50171Microsoft Windows Remote Desktop spoofing9.1CNA v3.11.0%2025-08-12Fix
CVE-2025-50170Microsoft Windows Cloud Files Mini Filter driver elevation of privilege7.8CNA v3.10.4%2025-08-12Fix
CVE-2025-50169Microsoft Windows SMB remote code execution7.5CNA v3.10.7%2025-08-12Fix
CVE-2025-50168Microsoft Windows win32k elevation of privilege7.8CNA v3.10.8%2025-08-12Exploit codeFix
CVE-2025-50167Microsoft Windows Hyper-V elevation of privilege7.0CNA v3.10.4%2025-08-12Fix
CVE-2025-50166Microsoft Windows Distributed Transaction Coordinator (MSDTC) information disclosure6.5CNA v3.11.4%2025-08-12Fix
CVE-2025-50165Microsoft Windows Graphics component remote code execution9.8CNA v3.110.3%2025-08-12Exploit codeFix
CVE-2025-50164Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.0CNA v3.10.9%2025-08-12Fix
CVE-2025-50163Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.8CNA v3.10.9%2025-08-12Fix
CVE-2025-50162Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.0CNA v3.10.9%2025-08-12Fix
CVE-2025-50161Microsoft Windows win32k elevation of privilege7.3CNA v3.10.6%2025-08-12Fix
CVE-2025-50160Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.0CNA v3.10.9%2025-08-12Fix
CVE-2025-50159Microsoft Windows Remote Access Point-to-Point Protocol (PPP) EAP-TLS elevation of privilege7.3CNA v3.10.6%2025-08-12Fix
CVE-2025-50158Microsoft Windows NTFS information disclosure7.0CNA v3.10.4%2025-08-12Fix
CVE-2025-50157Microsoft Windows Routing and Remote Access Service (RRAS) information disclosure5.7CNA v3.11.2%2025-08-12Fix
CVE-2025-50156Microsoft Windows Routing and Remote Access Service (RRAS) information disclosure5.7CNA v3.11.2%2025-08-12Fix
CVE-2025-50155Microsoft Windows Push Notifications Apps elevation of privilege7.8CNA v3.10.4%2025-08-12Fix
CVE-2025-50154Microsoft Windows File Explorer spoofing6.5CNA v3.129.8%2025-08-12Exploit codeFix
CVE-2025-50153Microsoft Windows Desktop Window Manager elevation of privilege7.8CNA v3.10.4%2025-08-12Fix
CVE-2025-49813Fortinet FortiADC OS command injection6.6CNA v3.11.1%2025-08-12Fix
CVE-2025-49762Microsoft Windows Ancillary function driver for WinSock elevation of privilege7.0CNA v3.10.3%2025-08-12Fix
CVE-2025-49761Microsoft Windows Kernel elevation of privilege7.8CNA v3.10.4%2025-08-12Fix
CVE-2025-49759Microsoft SQL server elevation of privilege8.8CNA v3.11.2%2025-08-12Fix
CVE-2025-49758Microsoft SQL server elevation of privilege8.8CNA v3.11.0%2025-08-12Fix
CVE-2025-49757Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.8CNA v3.11.0%2025-08-12Fix
CVE-2025-49755Microsoft Edge (Chromium-based) for Android spoofing4.3CNA v3.10.5%2025-08-12Fix
CVE-2025-49751Microsoft Windows Hyper-V denial of service6.8CNA v3.10.5%2025-08-12Fix
CVE-2025-49745Microsoft Dynamics 365 (on-premises) cross-site scripting5.4CNA v3.10.5%2025-08-12Fix
CVE-2025-49743Microsoft Windows Graphics component elevation of privilege6.7CNA v3.10.5%2025-08-12Fix
CVE-2025-49736Microsoft Edge (Chromium-based) for Android spoofing4.3CNA v3.10.5%2025-08-12Fix
CVE-2025-49712Microsoft SharePoint remote code execution8.8CNA v3.120.7%2025-08-12Fix
CVE-2025-49707Microsoft Azure Virtual Machines spoofing7.9CNA v3.10.4%2025-08-12Fix
CVE-2025-49573Adobe Substance3D Modeler out-of-bounds write7.8CNA v3.10.2%2025-08-12Fix
CVE-2025-49572Adobe Substance3D Modeler out-of-bounds write7.8CNA v3.10.2%2025-08-12Fix
CVE-2025-49571Adobe Substance3D Modeler uncontrolled search path element7.8CNA v3.10.2%2025-08-12Fix
CVE-2025-49570Adobe Photoshop Desktop out-of-bounds write7.8CNA v3.10.2%2025-08-12Fix
CVE-2025-49569Adobe Substance3D Viewer out-of-bounds write7.8CNA v3.10.2%2025-08-12Fix
CVE-2025-49568Adobe Illustrator use-after-free5.5CNA v3.10.3%2025-08-12Fix
CVE-2025-49567Adobe Illustrator null pointer dereference5.5CNA v3.10.2%2025-08-12Fix
CVE-2025-49564Adobe Illustrator stack-based buffer overflow7.8CNA v3.10.3%2025-08-12Fix
CVE-2025-49563Adobe Illustrator out-of-bounds write7.8CNA v3.10.2%2025-08-12Fix
CVE-2025-49562Adobe Animate use-after-free5.5CNA v3.10.3%2025-08-12Fix
CVE-2025-49561Adobe Animate use-after-free7.8CNA v3.10.3%2025-08-12Fix
CVE-2025-49560Adobe Substance3D Viewer heap-based buffer overflow7.8CNA v3.10.2%2025-08-12Fix
CVE-2025-49559Adobe Commerce improper limitation of a pathname to a restricted directory (path traversal)5.3CNA v3.10.7%2025-08-12Fix
CVE-2025-49558Adobe Commerce time-of-check time-of-use (TOCTOU) race condition5.9CNA v3.10.4%2025-08-12Fix
CVE-2025-49557Adobe Commerce cross-site scripting (stored XSS)8.7CNA v3.10.6%2025-08-12Fix
CVE-2025-49556Adobe Commerce incorrect authorization7.5CNA v3.10.6%2025-08-12Fix
CVE-2025-49555Adobe Commerce cross-site request forgery (CSRF)8.1CNA v3.10.9%2025-08-12Fix
CVE-2025-49554Adobe Commerce improper input validation7.5CNA v3.10.6%2025-08-12Fix
CVE-2025-49457Zoom Clients for Windows untrusted search path9.6CNA v3.10.6%2025-08-12Fix
CVE-2025-49456Zoom Clients for Windows- race condition6.2CNA v3.10.1%2025-08-12Fix
CVE-2025-48807Microsoft Windows Hyper-V remote code execution6.7CNA v3.10.6%2025-08-12Fix
CVE-2025-47954Microsoft SQL Server elevation of privilege8.8CNA v3.11.5%2025-08-12Fix
CVE-2025-47857Fortinet FortiWeb OS command injection6.5CNA v3.10.5%2025-08-12Fix
CVE-2025-47444FiboSearch WordPress plugin broken access control5.3CNA v3.10.2%2025-08-12Fix
CVE-2025-43736Liferay Portal and Liferay DXP have a denial of service via file upload (DOS)6.9CNA v4.00.3%2025-08-12Fix
CVE-2025-43735Liferay Portal and Liferay DXP have a reflected cross-site scripting6.9CNA v4.00.2%2025-08-12Fix
CVE-2025-43734Liferay Portal and Liferay DXP have a reflected cross-site scripting (XSS)5.1CNA v4.00.2%2025-08-12Fix
CVE-2025-42976SAP NetWeaver Application Server ABAP BIC Document out-of-bounds read8.1CNA v3.10.4%2025-08-12Fix
CVE-2025-42975SAP NetWeaver Application Server ABAP BIC Document application cross-site scripting6.1CNA v3.10.3%2025-08-12Fix
CVE-2025-42957Code injection vulnerability in SAP S/4HANA (Private Cloud or On-Premise)9.9CNA v3.11.6%2025-08-12Exploit codeFix
CVE-2025-42955Missing authorization check in SAP Cloud Connector3.5CNA v3.10.5%2025-08-12Fix
CVE-2025-42951SAP Business One (SLD) incorrect authorization8.8CNA v3.10.5%2025-08-12Fix
CVE-2025-42950Code injection vulnerability in SAP Landscape Transformation (Analysis Platform)9.9CNA v3.10.7%2025-08-12Fix
CVE-2025-42949Missing authorization check in ABAP Platform4.9CNA v3.10.3%2025-08-12Fix
CVE-2025-42948Cross-site scripting (XSS) vulnerability in SAP NetWeaver ABAP Platform6.1CNA v3.10.2%2025-08-12Fix
CVE-2025-42946Directory traversal vulnerability in SAP S/4HANA (Bank Communication Management)6.9CNA v3.11.0%2025-08-12Fix
CVE-2025-42945HTML injection vulnerability in SAP NetWeaver Application Server ABAP6.1CNA v3.10.2%2025-08-12Fix
CVE-2025-42943Information disclosure in SAP GUI for Windows4.5CNA v3.10.3%2025-08-12Fix
CVE-2025-42942Cross-site scripting (XSS) vulnerability in SAP NetWeaver Application Server for ABAP6.1CNA v3.10.2%2025-08-12Fix
CVE-2025-42941Reverse tabnabbing vulnerability in SAP Fiori (Launchpad)3.5CNA v3.10.2%2025-08-12Fix
CVE-2025-42936Missing authorization check in SAP NetWeaver Application Server for ABAP5.4CNA v3.10.2%2025-08-12Fix
CVE-2025-42935Information disclosure vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform4.1CNA v3.10.1%2025-08-12Fix
CVE-2025-42934CRLF injection vulnerability in SAP S/4HANA (Supplier invoice)4.3CNA v3.10.3%2025-08-12Fix
CVE-2025-41686Phoenix Contact DaUM improper File Permissions allow local privilege escalation7.8CNA v3.10.1%2025-08-12Fix
CVE-2025-40770Siemens SINEC Traffic Analyzer man-in-the-middle7.5CNA v4.00.1%2025-08-12
CVE-2025-40769Siemens SINEC Traffic Analyzer cross-site scripting7.5CNA v4.00.1%2025-08-12Fix
CVE-2025-40768Siemens SINEC Traffic Analyzer information disclosure7.0CNA v4.00.1%2025-08-12Fix
CVE-2025-40767Siemens SINEC Traffic Analyzer execution with unnecessary privileges8.8CNA v4.00.1%2025-08-12Fix
CVE-2025-40766Siemens SINEC Traffic Analyzer denial of service6.8CNA v4.00.2%2025-08-12Fix
CVE-2025-40764Siemens Simcenter Femap V2406 out-of-bounds read7.3CNA v4.00.2%2025-08-12Fix
CVE-2025-40762Siemens Simcenter Femap V2406 out-of-bounds write7.3CNA v4.00.2%2025-08-12Fix
CVE-2025-40761Siemens RUGGEDCOM ROX MX5000 authentication bypass8.6CNA v4.00.2%2025-08-12
CVE-2025-40759Siemens SIMATIC S7-PLCSIM V17 deserialization of untrusted data8.5CNA v4.00.2%2025-08-12Fix
CVE-2025-40753Siemens POWER METER SICAM Q100 cleartext storage of sensitive information6.8CNA v4.00.1%2025-08-12Fix
CVE-2025-40752Siemens POWER METER SICAM Q100 cleartext storage of sensitive information6.8CNA v4.00.1%2025-08-12Fix
CVE-2025-40751Siemens SIMATIC RTLS Locating Manager insufficiently protected credentials4.8CNA v4.00.1%2025-08-12Fix
CVE-2025-40746Siemens SIMATIC RTLS Locating Manager arbitrary code execution9.4CNA v4.00.7%2025-08-12Fix
CVE-2025-40743Siemens SINUMERIK 828D PPU.4 authentication bypass8.7CNA v4.00.2%2025-08-12Fix
CVE-2025-40584Siemens SIMOTION SCOUT TIA XML external entity injection6.8CNA v4.00.2%2025-08-12Fix
CVE-2025-40570Siemens SIPROTEC 5 6MD84 (CP300) resource exhaustion2.4CNA v4.00.2%2025-08-12Fix
CVE-2025-38500Linux kernel xfrm interface driver use-after-free7.8CNA v3.10.2%2025-08-12Fix
CVE-2025-36124IBM WebSphere Application Server Liberty bypass security5.9CNA v3.10.4%2025-08-12Fix
CVE-2025-36000IBM WebSphere Application Server Liberty cross-site scripting4.4CNA v3.10.2%2025-08-12Fix
CVE-2025-33051Microsoft Exchange Server information disclosure7.5CNA v3.11.3%2025-08-12Fix
CVE-2025-33023Siemens RUGGEDCOM ROX MX5000 unrestricted file upload5.1CNA v4.00.3%2025-08-12
CVE-2025-32932Fortinet FortiSOAR cross-site scripting6.2CNA v3.10.2%2025-08-12Fix
CVE-2025-32766Fortinet FortiWeb stack-based buffer overflow6.3CNA v3.10.1%2025-08-12Fix
CVE-2025-32086Intel Xeon 6 processors DDRIO configuration for SGX and TDX improperly implemented security check4.5CNA v4.00.1%2025-08-12Fix
CVE-2025-32004Intel(R) SGX SDK Intel Edger8r tool for some improper input validation1.8CNA v4.00.1%2025-08-12Fix
CVE-2025-30034Siemens SIMATIC RTLS Locating Manager reachable assertion6.9CNA v4.00.1%2025-08-12Fix
CVE-2025-30033Siemens Automation License Manager uncontrolled search path8.5CNA v4.00.2%2025-08-12Fix
CVE-2025-30027Axis Communications AXIS OS improper type validation6.7CNA v3.10.2%2025-08-12Fix
CVE-2025-27759Fortinet FortiWeb OS command injection6.7CNA v3.10.5%2025-08-12Fix
CVE-2025-27717Intel(R) Graphics Driver software uncontrolled search path5.4CNA v4.00.1%2025-08-12Fix
CVE-2025-27707Edge Orchestrator software information disclosure2.1CNA v4.00.2%2025-08-12Fix
CVE-2025-27576Edge Orchestrator software resource exhaustion2.9CNA v4.00.1%2025-08-12Fix
CVE-2025-27559AI Playground software incorrect default permissions5.4CNA v4.00.1%2025-08-12Fix
CVE-2025-27537Edge Orchestrator software improper input validation5.1CNA v4.00.2%2025-08-12Fix
CVE-2025-27250Edge Orchestrator software resource exhaustion5.1CNA v4.00.2%2025-08-12Fix
CVE-2025-26863Intel(R) 700 Series Ethernet resource exhaustion4.8CNA v4.00.1%2025-08-12Fix
CVE-2025-26697Intel(R) 700 Series Ethernet resource exhaustion4.8CNA v4.00.1%2025-08-12Fix
CVE-2025-26472Edge Orchestrator software resource exhaustion5.9CNA v4.00.2%2025-08-12Fix
CVE-2025-26470Intel(R) Distribution for Python software installers incorrect default permissions5.4CNA v4.00.1%2025-08-12Fix
CVE-2025-26404Intel(R) DSA software uncontrolled search path5.4CNA v4.00.1%2025-08-12Fix
CVE-2025-26403Intel(R) Xeon(R) 6 Processors when using Intel(R) SGX or Intel(R) TDX out-of-bounds write4.5CNA v4.00.1%2025-08-12Fix
CVE-2025-26398SolarWinds Database Performance Analyzer hard-coded cryptographic key5.6CNA v3.10.2%2025-08-12Fix
CVE-2025-25273Intel(R) 700 Series Ethernet insufficient control flow management8.8CNA v4.00.1%2025-08-12Fix
CVE-2025-25256Fortinet FortiSIEM OS command injection9.8CNA v3.164.7%2025-08-12Reported exploitedNucleiEmerging ThreatsExploit codeFix
CVE-2025-25248Fortinet FortiOS integer overflow4.8CNA v3.10.5%2025-08-12Fix
CVE-2025-25007Microsoft Exchange Server spoofing5.3CNA v3.10.9%2025-08-12Fix
CVE-2025-25006Microsoft Exchange Server spoofing5.3CNA v3.10.9%2025-08-12Fix
CVE-2025-25005Microsoft Exchange Server tampering6.5CNA v3.11.4%2025-08-12Fix
CVE-2025-24999Microsoft SQL server elevation of privilege8.8CNA v3.11.7%2025-08-12Exploit codeFix
CVE-2025-24923Intel(R) AI for Enterprise Retrieval-augmented Generation software some uncontrolled search path5.4CNA v4.00.1%2025-08-12Fix
CVE-2025-24921Edge Orchestrator software improper neutralization6.9CNA v4.00.2%2025-08-12Fix
CVE-2025-24840Edge Orchestrator software improper access control2.3CNA v4.00.2%2025-08-12Fix
CVE-2025-24835Intel(R) Arc(TM) B-Series graphics Intel(R) Graphics driver for the protection mechanism failure4.1CNA v4.00.1%2025-08-12Fix
CVE-2025-24523Edge Orchestrator software protection mechanism failure5.1CNA v4.00.2%2025-08-12Fix
CVE-2025-24520Intel(R) Local Manageability Service software sensitive information in log files4.8CNA v4.00.1%2025-08-12Fix
CVE-2025-24515Intel(R) Graphics Drivers null pointer dereference6.8CNA v4.00.1%2025-08-12Fix
CVE-2025-24511Intel(R) I350 Series Ethernet Linux kernel-mode driver for some improper initialization2.0CNA v4.00.1%2025-08-12Fix
CVE-2025-24486Intel(R) 700 Series Ethernet improper input validation8.8CNA v4.00.1%2025-08-12Fix
CVE-2025-24484Intel(R) 800 Series Ethernet improper input validation8.8CNA v4.00.1%2025-08-12Fix
CVE-2025-24325Intel(R) 800 Series Ethernet improper input validation9.3CNA v4.00.1%2025-08-12Fix
CVE-2025-24324Intel(R) 800 Series Ethernet integer overflow2.0CNA v4.00.1%2025-08-12Fix
CVE-2025-24323Intel PCIe Switch software LED mode toggle tool privilege escalation7.0CNA v4.00.1%2025-08-12
CVE-2025-24313Device Plugins for Kubernetes software maintained by Intel improper access control6.7CNA v4.00.1%2025-08-12Fix
CVE-2025-24305Intel(R) Xeon(R) Processors Alias Checking Trusted module insufficient control flow management7.0CNA v4.00.1%2025-08-12Fix
CVE-2025-24303Intel(R) 800 Series Ethernet improper check for exceptional conditions8.8CNA v4.00.1%2025-08-12Fix
CVE-2025-24302TinyCBOR libraries maintained by Intel(R) uncontrolled recursion5.4CNA v4.00.1%2025-08-12Fix
CVE-2025-24296firmware for the Intel(R) E810 Ethernet some improper input validation5.1CNA v4.00.2%2025-08-12Fix
CVE-2025-23241Intel(R) 800 Series Ethernet integer overflow8.4CNA v4.00.1%2025-08-12Fix
CVE-2025-22893Intel(R) 800 Series Ethernet insufficient control flow management8.8CNA v4.00.1%2025-08-12Fix
CVE-2025-22889Intel(R) Xeon(R) 6 processor with Intel(R) TDX privilege escalation7.0CNA v4.00.2%2025-08-12Fix
CVE-2025-22853Intel(R) TDX firmware for some improper synchronization1.8CNA v4.00.1%2025-08-12Fix
CVE-2025-22840Intel(R) Xeon(R) 6 Scalable processors privilege escalation5.3CNA v4.00.1%2025-08-12Fix
CVE-2025-22839Intel(R) Xeon(R) 6 Scalable processors insufficient access control granularity7.3CNA v4.00.2%2025-08-12Fix
CVE-2025-22838Intel(R) RealSense(TM) Dynamic Calibrator software uncontrolled search path5.4CNA v4.00.1%2025-08-12Fix
CVE-2025-22836Intel(R) 800 Series Ethernet integer overflow8.8CNA v4.00.1%2025-08-12Fix
CVE-2025-22834AMI AptioV ThirdPartyVideo SetVariable interface improper initialization4.2CNA v3.10.1%2025-08-12Fix
CVE-2025-22830AMI AptioV SmiFlash race condition7.3CNA v4.00.1%2025-08-12Fix
CVE-2025-22392Intel(R) AMT and Intel(R) Standard Manageability firmware for some out-of-bounds read5.9CNA v4.00.3%2025-08-12Fix
CVE-2025-21096Intel(R) TDX privilege escalation2.0CNA v4.00.1%2025-08-12Fix
CVE-2025-21093Intel(R) Driver and Support Assistant Tool software uncontrolled search path5.4CNA v4.00.1%2025-08-12Fix
CVE-2025-21090Intel(R) Xeon(R) Processors missing resource release4.1CNA v4.00.1%2025-08-12Fix
CVE-2025-21086Intel(R) 700 Series Ethernet improper input validation6.9CNA v4.00.1%2025-08-12Fix
CVE-2025-20627Intel(R) oneAPI DPC++/C++ Compiler software uncontrolled search path5.4CNA v4.00.1%2025-08-12Fix
CVE-2025-20625Intel(R) PROSet/Wireless WiFi Software improper check for exceptional conditions7.1CNA v4.00.2%2025-08-12Fix
CVE-2025-20613Intel(R) TDX information disclosure2.0CNA v4.00.1%2025-08-12Fix
CVE-2025-20109Intel(R) Processors stream cache mechanism for some improper isolation7.3CNA v4.00.1%2025-08-12Fix
CVE-2025-20099Intel(R) Rapid Storage Technology installation software improper access control5.4CNA v4.00.1%2025-08-12Fix
CVE-2025-20093Intel(R) 800 Series Ethernet improper check for exceptional conditions8.6CNA v4.00.1%2025-08-12Fix
CVE-2025-20092Clock Jitter Tool software uncontrolled search path5.4CNA v4.00.1%2025-08-12Fix
CVE-2025-20090Intel(R) QuickAssist Technology software untrusted pointer dereference6.8CNA v4.00.1%2025-08-12Fix
CVE-2025-20087Intel(R) oneAPI DPC++/C++ Compiler software installers incorrect default permissions5.4CNA v4.00.1%2025-08-12Fix
CVE-2025-20077Intel(R) reference server platforms UEFI OobRasMmbiHandlerDriver module for some memory leak5.6CNA v4.00.1%2025-08-12Fix
CVE-2025-20074Intel(R) Connectivity Performance Suite software installers time-of-check time-of-use race condition7.3CNA v4.00.1%2025-08-12Fix
CVE-2025-20067Intel(R) CSME and Intel(R) SPS firmware for some timing side channel6.8CNA v4.00.2%2025-08-12Fix
CVE-2025-20053Intel(R) Xeon(R) Processor firmware with SGX enabled privilege escalation7.0CNA v4.00.2%2025-08-12Fix
CVE-2025-20048Intel(R) Trace Analyzer and Collector software uncontrolled search path5.4CNA v4.00.1%2025-08-12
CVE-2025-20044Intel(R) TDX Module firmware improper locking5.6CNA v4.00.1%2025-08-12Fix
CVE-2025-20037Intel(R) Converged Security and Management Engine time-of-check time-of-use race condition6.8CNA v4.00.1%2025-08-12Fix
CVE-2025-20025TinyCBOR libraries maintained by Intel(R) uncontrolled recursion4.1CNA v4.00.1%2025-08-12Fix
CVE-2025-20023Intel(R) Graphics Driver software installers incorrect default permissions5.4CNA v4.00.1%2025-08-12Fix
CVE-2025-20017Intel(R) oneAPI Toolkit and component software installers uncontrolled search path5.4CNA v4.00.1%2025-08-12Fix
CVE-2025-8885Bouncy Castle for Java on All (API modules) allows Excessive Allocation6.3CNA v4.00.5%2025-08-12Fix
CVE-2025-8874Master Addons WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-08-12Fix
CVE-2025-8767AnWP Football Leagues WordPress plugin authenticated (Administrator+) CSV injection4.8CNA v3.10.3%2025-08-12Fix
CVE-2025-8690Simple Responsive Slider WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.3%2025-08-12
CVE-2025-8688Inline Stock Quotes WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-08-12
CVE-2025-8685Wp chart generator WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-08-12
CVE-2025-8621Mosaic Generator WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-08-12
CVE-2025-8568GMap - Venturit WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-08-12
CVE-2025-8482Simple Local Avatars WordPress plugin missing authorization authenticated Avatar Migration4.3CNA v3.10.3%2025-08-12Fix
CVE-2025-8462RT Easy Builder WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-08-12Fix
CVE-2025-8452Brother Industries DCP-L8410CDW sensitive information in an accessible file4.3CNA v3.10.2%2025-08-12Fix
CVE-2025-8418bPlugins B Slider plugin installation handler missing authorization8.8CNA v3.10.6%2025-08-12Fix
CVE-2025-8314Software Issue Manager WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-08-12Fix
CVE-2025-8310Ivanti Virtual Application Delivery ControllerCWE-862 admin console missing authorization6.5CNA v3.10.8%2025-08-12Fix
CVE-2025-8297Ivanti Avalanche unrestricted file upload7.2CNA v3.11.3%2025-08-12Fix
CVE-2025-8296Ivanti Avalanche SQL injection7.2CNA v3.11.1%2025-08-12Fix
CVE-2025-8081Elementor WordPress plugin authenticated (Administrator+) arbitrary file read via Image import4.9CNA v3.10.5%2025-08-12Exploit codeFix
CVE-2025-8059B Blocks WordPress plugin privilege escalation9.8CNA v3.10.5%2025-08-12Fix
CVE-2025-7622Axis Communications AXIS Camera Station Pro server-side request forgery5.1CNA v4.00.2%2025-08-12Fix
CVE-2025-6253UiCore Elements WordPress plugin missing authorization to unauthenticated arbitrary file read7.5CNA v3.10.4%2025-08-12Fix
CVE-2025-5468Ivanti Connect Secure symlink following5.5CNA v3.10.4%2025-08-12Fix
CVE-2025-5466Ivanti Connect Secure XML entity expansion4.9CNA v3.10.7%2025-08-12Fix
CVE-2025-5462Ivanti Connect Secure heap-based buffer overflow7.5CNA v3.11.1%2025-08-12Fix
CVE-2025-5456Ivanti Connect Secure buffer over-read7.5CNA v3.11.1%2025-08-12Fix
CVE-2025-5391WooCommerce Purchase Orders WordPress plugin authenticated (Subscriber+) arbitrary file deletion8.1CNA v3.10.9%2025-08-12Fix
CVE-2025-4390WP Private Content Plus WordPress plugin unauthenticated sensitive information exposure5.3CNA v3.10.3%2025-08-12
CVE-2025-3892Axis Communications AXIS OS execution with unnecessary privileges6.7CNA v3.10.1%2025-08-12Fix
CVE-2025-3831Log files uploaded during troubleshooting by the Harmony SASE agent may have been accessible to unauthorized parties.8.1CNA v3.10.4%2025-08-12Fix
CVE-2025-3089Broken access control in ServiceNow AI Platform5.3CNA v4.00.4%2025-08-12Fix
CVE-2025-55161Stirling-PDF SSRF vulnerability on /API/v1/convert/markdown/pdf8.6CNA v3.12.0%2025-08-11NucleiFix
CVE-2025-55159slab allows out-of-bounds access in `get_disjoint_mut` due to incorrect bounds check5.1CNA v4.00.2%2025-08-11Fix
CVE-2025-55158Vim double free vulnerability during Vim9 script import operations6.9CNA v4.00.4%2025-08-11Fix
CVE-2025-55157Vim heap use-after-free vulnerability when processing recursive tuple data types6.9CNA v4.00.3%2025-08-11Fix
CVE-2025-55156PyLoad vulnerable to SQL injection via API /json/add_package in add_links parameter7.8CNA v4.00.3%2025-08-11Fix
CVE-2025-55151Stirling-PDF SSRF vulnerability on /API/v1/convert/file/pdf8.6CNA v3.10.4%2025-08-11Fix
CVE-2025-55150Stirling-PDF SSRF vulnerability on /API/v1/convert/html/pdf8.6CNA v3.11.7%2025-08-11NucleiFix
CVE-2025-55012Zed AI agent remote code execution8.5CNA v4.00.2%2025-08-11Fix
CVE-2025-54992Telstra open-kilda OpenKilda XXE in SAML configuration6.9CNA v4.00.4%2025-08-11Fix
CVE-2025-54878Heap buffer overflow in NASA CryptoLib `Crypto_TC_Check_IV_Setup`8.6CNA v3.10.4%2025-08-11Fix
CVE-2025-54525Unexpected input to Create Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin7.5CNA v3.10.3%2025-08-11Fix
CVE-2025-54478Unauthenticated Channel Subscription Edit in Mattermost Confluence Plugin7.2CNA v3.10.2%2025-08-11Fix
CVE-2025-54463Unexpected Input to Cloud Webhook endpoint causes DoS in Mattermost Confluence Plugin5.9CNA v3.10.3%2025-08-11Fix
CVE-2025-54458Unauthorized Subscription Creation to Confluence Space in Mattermost Confluence Plugin5.0CNA v3.10.2%2025-08-11Fix
CVE-2025-54063CherryHQ cherry-studio Cherry Studio One-click remote code execution vulnerability8.0CNA v3.10.8%2025-08-11Fix
CVE-2025-53910Unauthorized Channel Subscription Edit in Mattermost Confluence Plugin4.0CNA v3.10.2%2025-08-11Fix
CVE-2025-53857Lack of Authorization on Get Channel Subscriptions for Autocomplete in Mattermost Confluence Plugin3.7CNA v3.10.2%2025-08-11Fix
CVE-2025-53514Unexpected Input to Server Webhook endpoint causes DoS in Mattermost Confluence Plugin5.9CNA v3.10.3%2025-08-11Fix
CVE-2025-53187ABB Aspect unauthenticated RCE9.3CNA v4.00.6%2025-08-11Fix
CVE-2025-52931Unexpected input to Update Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin7.5CNA v3.10.3%2025-08-11Fix
CVE-2025-51824Libcsp buffer overflow6.5CISA ADP v3.10.3%2025-08-11
CVE-2025-51823Libcsp buffer overflow6.5CISA ADP v3.10.3%2025-08-11
CVE-2025-49221Unauthenticated access to Channel Subscription in Mattermost Confluence Plugin3.7CNA v3.10.2%2025-08-11Fix
CVE-2025-48731Unauthorized Subscription Edit to Confluence Space in Mattermost Confluence Plugin6.4CNA v3.10.2%2025-08-11Fix
CVE-2025-45146Codefuse Modelcache deserialization of untrusted data9.8CISA ADP v3.10.8%2025-08-11
CVE-2025-44004Unauthenticated Channel Subscription Creation in Mattermost Confluence Plugin7.2CNA v3.10.2%2025-08-11Fix
CVE-2025-44001Unauthorized Channel Subscription Read in Mattermost Confluence Plugin4.0CNA v3.10.2%2025-08-11Fix
CVE-2025-40920Catalyst::Authentication::Credential::HTTP for Perl use insecurely generated nonces8.6CISA ADP v3.10.4%2025-08-11Fix
CVE-2025-38499Linux kernel mount namespace cloning vulnerability7.8CNA v3.10.2%2025-08-11Fix
CVE-2025-27577OpenHarmony liteos_a has a race condition8.4CNA v3.10.1%2025-08-11Fix
CVE-2025-27562OpenHarmony communication_dsoftbus has a missing release of memory vulnerability3.3CNA v3.10.1%2025-08-11Fix
CVE-2025-27536OpenHarmony arkcompiler_ets_runtime has a type confusion3.3CNA v3.10.1%2025-08-11Fix
CVE-2025-27128OpenHarmony liteos_a has an UAF8.4CNA v3.10.1%2025-08-11Fix
CVE-2025-26690OpenHarmony communication dsoftbus has a null pointer3.3CNA v3.10.1%2025-08-11Fix
CVE-2025-25278OpenHarmony liteos_a has a race condition8.4CNA v3.10.1%2025-08-11Fix
CVE-2025-25235Omnissa Secure Email Gateway (SEG) updates address server-side request forgery (SSRF)8.6CNA v3.10.3%2025-08-11
CVE-2025-25231Omnissa Workspace ONE UEM path traversal7.5CNA v3.123.5%2025-08-11Reported exploitedNucleiEmerging Threats
CVE-2025-25229Omnissa Workspace ONE UEM server-side request forgery5.4CNA v3.10.2%2025-08-11
CVE-2025-25212OpenHarmony pasteboard has an improper input vulnerability3.3CNA v3.10.1%2025-08-11Fix
CVE-2025-24925OpenHarmony applications_settings has a missing release of memory vulnerability3.3CNA v3.10.1%2025-08-11Fix
CVE-2025-24844OpenHarmony communication_dsoftbus has a missing release of memory vulnerability3.3CNA v3.10.1%2025-08-11Fix
CVE-2025-24298OpenHarmony liteos_a has an UAF8.4CNA v3.10.1%2025-08-11Fix
CVE-2025-8866YugabyteDB Anywhere information disclosure5.1CNA v4.00.2%2025-08-11
CVE-2025-8865YugabyteDB null pointer dereference4.1CNA v4.00.2%2025-08-11Fix
CVE-2025-8864YugabyteDB Anywhere sensitive information in log files6.8CNA v4.00.2%2025-08-11Fix
CVE-2025-8863YugabyteDB cleartext transmission of sensitive information7.0CNA v4.00.2%2025-08-11Fix
CVE-2025-8862YugabyteDB information disclosure7.0CNA v4.00.3%2025-08-11Fix
CVE-2025-8859code-projects eBlog Site file upload save-slider.php unrestricted upload8.8v3.10.3%2025-08-11
CVE-2025-8854bullet3 VHACD utility: Stack-based buffer overflow in OFF parser (LoadOFF)9.8NVD v3.10.6%2025-08-11
CVE-2025-88532100 Technology｜Official Document Management System authentication bypass9.3CNA v4.00.7%2025-08-11Fix
CVE-2025-8852WuKongOpenSource WukongCRM API Response upload information exposure5.3CNA v4.00.4%2025-08-11
CVE-2025-8851LibTIFF tiffcrop tiffcrop.c readSeparateStripsetoBuffer stack-based overflow4.8CNA v4.00.2%2025-08-11Fix
CVE-2025-8847yangzongzhuan RuoYi edit cross-site scripting5.4v3.10.3%2025-08-11
CVE-2025-8846NASM Netwide Assember parser.c parse_line stack-based overflow7.8v3.10.3%2025-08-11
CVE-2025-8845NASM Netwide Assember nasm.c assemble_file stack-based overflow7.8v3.10.3%2025-08-11
CVE-2025-8844NASM Netwide Assember preproc.c parse_smacro_template null pointer dereference5.5v3.10.3%2025-08-11
CVE-2025-8843NASM Netwide Assember outmacho.c macho_no_dead_strip heap-based overflow7.8v3.10.3%2025-08-11
CVE-2025-8842NASM Netwide Assember preproc.c do_directive use-after-free7.8v3.10.2%2025-08-11
CVE-2025-8841zlt2000 microservices-platform FileController.java upload unrestricted upload6.1v3.10.3%2025-08-11
CVE-2025-8840jshERP endpoint deleteBatch improper authorization5.3CNA v4.00.4%2025-08-11
CVE-2025-8839jshERP endpoint addUser improper authorization8.8v3.10.3%2025-08-11
CVE-2025-8838WinterChenS my-site Backend admin preHandle improper authentication9.8v3.10.5%2025-08-11
CVE-2025-8837JasPer JPEG2000 file jpc_dec.c jpc_dec_dump use-after-free7.8v3.10.2%2025-08-11Fix
CVE-2025-8836JasPer JPEG2000 Encoder jpc_enc.c jpc_floorlog2 assertion4.8CNA v4.00.2%2025-08-11Fix
CVE-2025-8835JasPer Image Color Space Conversion jas_image.c jas_image_chclrspc null pointer dereference5.5v3.10.2%2025-08-11Fix
CVE-2025-8834JCG Link-net LW-N915R Wireless Basic settings basic.asp cross-site scripting4.8CNA v4.00.3%2025-08-11
CVE-2025-8833Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 langSwitchBack stack-based overflow8.7CNA v4.01.0%2025-08-11
CVE-2025-8832Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setDMZ stack-based overflow8.7CNA v4.01.0%2025-08-11
CVE-2025-8831Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 remoteManagement stack-based overflow8.7CNA v4.01.0%2025-08-11
CVE-2025-8830Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setWan sub_3517C os command injection8.8v3.16.8%2025-08-11
CVE-2025-8829Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP_setBasicAuto um_red os command injection8.8v3.16.8%2025-08-11
CVE-2025-8828Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setIpv6 ipv6cmd os command injection8.8v3.16.8%2025-08-11
CVE-2025-8827Linksys RE6250 command injection8.8v3.16.8%2025-08-11
CVE-2025-8826Linksys RE6250 stack-based buffer overflow8.7CNA v4.01.0%2025-08-11
CVE-2025-8825Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP_setBasicAuto os command injection8.8v3.16.8%2025-08-11
CVE-2025-8824Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setRIP stack-based overflow8.7CNA v4.01.0%2025-08-11
CVE-2025-8823Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setDeviceName os command injection8.8v3.16.8%2025-08-11
CVE-2025-8822Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setOpMode algDisable stack-based overflow8.7CNA v4.01.0%2025-08-11
CVE-2025-8821Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP_setBasic os command injection8.8v3.16.8%2025-08-11
CVE-2025-8820Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 wirelessBasic stack-based overflow8.7CNA v4.01.0%2025-08-11
CVE-2025-8747Google Keras safe_mode bypass allows arbitrary code execution when loading a malicious model8.6CNA v4.00.1%2025-08-11Fix
CVE-2025-8672GIMP TCC Bypass via Inherited Permissions in Bundled Interpreter in GIMP.app7.8v3.10.3%2025-08-11Fix
CVE-2025-8661Stored cross-site scripting in Symantec PGP Encryption4.6CNA v4.00.2%2025-08-11
CVE-2025-8660Privilege escalation in Symantec PGP Encryption5.6CNA v4.00.3%2025-08-11Fix
CVE-2025-8285Unauthorized Channel Subscription Creation in Mattermost Confluence Plugin4.0CNA v3.10.2%2025-08-11Fix
CVE-2025-7965CBX Restaurant Booking WordPress plugin plugin reset via CSRF4.3CISA ADP v3.10.1%2025-08-11
CVE-2025-7679ABB Aspect Session ID Basic Auth Bypass9.2CNA v4.00.5%2025-08-11Fix
CVE-2025-7677ABB Aspect DOS attack possible8.2CNA v4.00.3%2025-08-11Fix
CVE-2025-52136EMQX improper check for exceptional conditions3.0CNA v3.10.3%2025-08-10Exploit codeFix
CVE-2025-8819Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setWan stack-based overflow8.7CNA v4.01.0%2025-08-10
CVE-2025-8818Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setLan setDFSSetting os command injection8.8v3.16.5%2025-08-10
CVE-2025-8817Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setLan stack-based overflow8.7CNA v4.01.0%2025-08-10
CVE-2025-8816Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setOpMode stack-based overflow8.7CNA v4.01.0%2025-08-10
CVE-2025-8815猫宁i Morning Shiro Configuration index path traversal9.8v3.10.6%2025-08-10
CVE-2025-8814atjiu pybbs CookieUtil.java setCookie cross-site request forgery5.3CNA v4.00.3%2025-08-10
CVE-2025-8813atjiu pybbs IndexController.java changeLanguage redirect6.1v3.10.3%2025-08-10
CVE-2025-8812atjiu pybbs Admin Panel settings cross-site scripting5.4v3.10.3%2025-08-10
CVE-2025-8811code-projects Simple Art Gallery registration.php SQL injection9.8v3.10.5%2025-08-10
CVE-2025-8810Tenda AC20 SetFirewallCfg strcpy stack-based overflow8.7CNA v4.01.1%2025-08-10Emerging Threats
CVE-2025-8809code-projects Online Medicine Guide addelidetails.php SQL injection9.8v3.10.4%2025-08-10
CVE-2025-8808xujeff tianti 天梯 com.jeff.tianti.controller save exportOrder CSV injection5.3CNA v4.00.3%2025-08-10
CVE-2025-8807xujeff tianti user save function missing authorization8.8v3.10.4%2025-08-10
CVE-2025-8806zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 treeData SQL injection9.8v3.10.3%2025-08-10
CVE-2025-8805Open5GS SMF gsm-sm.c smf_gsm_state_wait_pfcp_deletion denial of service7.5v3.10.7%2025-08-10Fix
CVE-2025-8804Open5GS AMF ngap_build_downlink_nas_transport assertion7.5v3.10.8%2025-08-10Fix
CVE-2025-8803Open5GS AMF gmm-sm.c gmm_state_exception denial of service7.5v3.10.6%2025-08-10Fix
CVE-2025-8802Open5GS SMF smf-sm.c smf_state_operational denial of service7.5v3.10.6%2025-08-10Fix
CVE-2025-8801Open5GS AMF gmm-sm.c gmm_state_exception denial of service7.5v3.10.7%2025-08-10Fix
CVE-2025-8800Open5GS AMF esm-handler.c esm_handle_pdn_connectivity_request denial of service7.5v3.10.6%2025-08-10Fix
CVE-2025-8799Open5GS AMF npcf-build.c amf_nsmf_pdusession_build_create_sm_context denial of service7.5v3.10.7%2025-08-10Fix
CVE-2025-8798oitcode samarium Create Product product unrestricted upload6.1NVD v3.10.5%2025-08-10
CVE-2025-8797LitmusChaos Litmus LocalStorage handler incorrect privilege assignment8.8v3.10.5%2025-08-10
CVE-2025-8796LitmusChaos Litmus Delete request delete_project authorization5.3CNA v4.00.4%2025-08-10
CVE-2025-8795LitmusChaos Litmus login access control9.9v3.10.4%2025-08-10
CVE-2025-8794LitmusChaos Litmus LocalStorage handler authorization bypass7.8v3.10.2%2025-08-10
CVE-2025-8793LitmusChaos Litmus resource injection5.3CNA v4.00.4%2025-08-10
CVE-2025-8792LitmusChaos Litmus client-side enforcement of server-side security5.3CNA v4.01.0%2025-08-10
CVE-2025-8791LitmusChaos Litmus list_projects improper authorization5.3CNA v4.00.3%2025-08-10
CVE-2025-8790Portabilis i-Educar API endpoint pessoa improper authorization5.3CNA v4.00.3%2025-08-10
CVE-2025-8789Portabilis i-Educar API Endpoint Diario authorization5.3CNA v4.00.4%2025-08-10
CVE-2025-8788Portabilis i-Diario Informações adicionais module cross-site scripting5.4v3.10.3%2025-08-10
CVE-2025-8787Portabilis i-Diario cross-site scripting5.4NVD v3.10.4%2025-08-10
CVE-2025-8786Portabilis i-Diario cross-site scripting5.4NVD v3.10.4%2025-08-10
CVE-2025-8785Portabilis i-Educar educar_usuario_lst.php cross-site scripting5.4v3.10.3%2025-08-10
CVE-2025-55152Oak Server has ReDoS in x-forwarded-proto and x-forwarded-for headers5.3CNA v3.10.4%2025-08-09Fix
CVE-2025-55149ulab-uiuc tiny-scientist path traversal vulnerability in PDF Review function6.7CNA v4.00.6%2025-08-09
CVE-2025-55013Assemblyline 4 service Client: Arbitrary Write through path traversal in client code4.2CNA v3.10.6%2025-08-09Fix
CVE-2025-55009workos authkit-remix AuthKit: Sensitive auth data rendered in HTML7.1CNA v3.10.4%2025-08-09Fix
CVE-2025-55008workos authkit-react-router AuthKit React Router: Sensitive auth data rendered in HTML7.1CNA v3.10.4%2025-08-09Fix
CVE-2025-55006Frappe Learning Holds potential for Malicious SVG upload in Image upload feature4.3CNA v3.10.3%2025-08-09Fix
CVE-2025-55003OpenBao Login MFA Bypasses Rate Limiting and TOTP Token Reuse5.7CNA v3.10.2%2025-08-09Fix
CVE-2025-55001OpenBao LDAP MFA Enforcement Bypass when using Username as Alias6.5CNA v3.10.2%2025-08-09Fix
CVE-2025-55000OpenBao TOTP Secrets Engine enables Code Reuse6.5CNA v3.10.2%2025-08-09Fix
CVE-2025-54999OpenBao: Timing side-channel in Userpass Auth method3.7CNA v3.10.2%2025-08-09Fix
CVE-2025-54998OpenBao Userpass and LDAP User Lockout Bypass5.3CNA v3.10.2%2025-08-09Fix
CVE-2025-54997OpenBao: Privileged Operator may Execute Code on the Underlying host9.1CNA v3.10.4%2025-08-09Fix
CVE-2025-54996OpenBao Root Namespace Operator may Elevate Token Privileges7.2CNA v3.10.3%2025-08-09Fix
CVE-2025-54888@fedify/fedify: Improper authentication and incorrect authorization8.7CNA v4.00.6%2025-08-09Fix
CVE-2025-54417Craft contains a theoretical bypass for5.2CNA v4.00.5%2025-08-09Fix
CVE-2025-46709GPU Ddk Security fix for PP-171570 can lead to an uninitialised pointer dereference and memory leak7.5CISA ADP v3.10.3%2025-08-09Fix
CVE-2025-8784Portabilis i-Educar Cadastrar Vínculo funcionario_vinculo_cad.php cross-site scripting5.4v3.10.3%2025-08-09
CVE-2025-8775Qiyuesuo Eelectronic Signature Platform Scheduled Task upload execute unrestricted upload9.8v3.10.4%2025-08-09
CVE-2025-8774riscv-boom SonicBOOM L1 Data Cache timing discrepancy4.7v3.10.2%2025-08-09
CVE-2025-8773Dinstar Monitoring Platform 甘肃省危险品库监控平台 login_getPasswordErrorNum.action SQL injection9.8v3.10.6%2025-08-09
CVE-2025-8772Vinades NukeViet module index.php server-side request forgery4.3v3.10.5%2025-08-09
CVE-2025-8765Datacom DM955 5GT 1200 Wireless Basic settings cross-site scripting5.1CNA v4.00.3%2025-08-09
CVE-2025-8764linlinjava litemall upload unrestricted upload5.4v3.10.2%2025-08-09
CVE-2025-8763Ruijie EG306MG strongSwan strongswan.conf missing encryption6.3CNA v4.00.1%2025-08-09
CVE-2025-8759TRENDnet TN-200 Lighttpd hard-coded key5.9v3.10.5%2025-08-09
CVE-2025-8758TRENDnet TEW-822DRE vsftpd least privilege violation7.3CNA v4.00.2%2025-08-09
CVE-2025-8757TRENDnet TV-IP110WN Embedded Boa Web Server boa.conf least privilege violation7.3CNA v4.00.2%2025-08-09
CVE-2025-8756TDuckCloud tduck-platform manage preHandle improper authorization8.8v3.10.4%2025-08-09
CVE-2025-8755macrozheng mall com.macro.mall.portal.controller UmsMemberController.java detail authorization6.9CNA v4.00.5%2025-08-09
CVE-2025-8753linlinjava litemall file delete path traversal5.3CNA v4.00.5%2025-08-09
CVE-2025-8752wangzhixuan spring-shiro-training add command injection9.8v3.14.4%2025-08-09
CVE-2025-8751Protected Total WebShield Extension block page cross-site scripting6.1v3.10.5%2025-08-09
CVE-2025-8750macrozheng mall Add Product page upload cross-site scripting5.4v3.10.3%2025-08-09
CVE-2025-8746GNU libopts __strstr_sse2 memory corruption5.5v3.10.2%2025-08-09Fix
CVE-2025-8745Weee Ricepo App com.Ricepo.app AndroidManifest.xml improper export of android application components5.5v3.10.2%2025-08-09
CVE-2025-8744CesiumLab Web lodmodels SQL injection6.9CNA v4.00.3%2025-08-09
CVE-2025-7726The7 WordPress theme stored cross-site scripting6.4CNA v3.10.2%2025-08-09Fix
CVE-2025-7020BYD DiLink OS Incorrect encryption Implementation of system log dumps5.1CNA v4.00.1%2025-08-09
CVE-2025-6573GPU DDK RGXFW_CTL.pui8FWScratchBuf Leak/Overwrite9.8CISA ADP v3.10.4%2025-08-09Fix
CVE-2025-4655Liferay Portal and Liferay DXP vulnerable to server-side request forgery5.1CNA v4.00.2%2025-08-09Fix
CVE-2025-4581Liferay Portal and Liferay DXP vulnerable to server-side request forgery5.3CNA v4.00.4%2025-08-09Fix
CVE-2025-551887-Zip link following3.6CNA v3.11.0%2025-08-08Exploit codeFix
CVE-2025-54959Mubit Powered BLUE 870 path traversal5.3CNA v4.00.3%2025-08-08
CVE-2025-54958Mubit Powered BLUE 870 OS command injection5.3CNA v4.00.8%2025-08-08
CVE-2025-54952ExecuTorch integer overflow vulnerability leads to code execution9.8CISA ADP v3.10.6%2025-08-08
CVE-2025-54940WP Engine Advanced Custom Fields WordPress plugin " HTML injection4.6CNA v4.00.2%2025-08-08Fix
CVE-2025-54887jwt ruby-jwe jwe: Missing AES-GCM authentication tag validation in encrypted JWEs9.1CNA v3.10.3%2025-08-08Exploit codeFix
CVE-2025-54886SKOPS Card.get_model happily allows arbitrary code execution8.4CNA v3.10.2%2025-08-08Fix
CVE-2025-54793Astro: Duplicate trailing slash feature can lead to Open Redirects5.5CNA v4.00.6%2025-08-08NucleiFix
CVE-2025-54368uv is vulnerable to ZIP payload obfuscation through parsing differentials6.8CNA v4.00.2%2025-08-08Fix
CVE-2025-53606Apache Seata (incubating): Deserialization of untrusted data in Apache Seata Server9.8CISA ADP v3.10.6%2025-08-08Fix
CVE-2025-53520EG4 Electronics EG4 Inverters download of code without integrity check8.6CNA v4.00.2%2025-08-08Fix
CVE-2025-52914Mitel MiCollab SQL injection8.8NVD v3.10.6%2025-08-08Fix
CVE-2025-52913Mitel MiCollab NuPoint Unified Messaging path traversal9.8CISA ADP v3.10.5%2025-08-08Exploit codeFix
CVE-2025-52586EG4 Electronics EG4 Inverters cleartext transmission of sensitive information7.5CNA v4.00.1%2025-08-08Fix
CVE-2025-50928Ehcp Easy Hosting Control Panel SQL injection4.8CISA ADP v3.10.2%2025-08-08
CVE-2025-50927Ehcp Easy Hosting Control Panel List All FTP User function reflected cross-site scripting6.3CISA ADP v3.10.2%2025-08-08
CVE-2025-50468OpenMetadata SQL injection6.5CISA ADP v3.10.3%2025-08-08
CVE-2025-50467OpenMetadata SQL injection6.5CISA ADP v3.10.3%2025-08-08
CVE-2025-50466OpenMetadata SQL injection6.5NVD v3.10.3%2025-08-08
CVE-2025-50465OpenMetadata SQL injection8.8v3.10.3%2025-08-08
CVE-2025-48913Apache CXF: Untrusted JMS configuration can lead to RCE9.8CISA ADP v3.10.8%2025-08-08Fix
CVE-2025-47872EG4 Electronics EG4 Inverters observable discrepancy6.9CNA v4.00.3%2025-08-08
CVE-2025-46414EG4 Electronics EG4 Inverters improper restriction of excessive authentication attempts9.2CNA v4.00.4%2025-08-08Fix
CVE-2025-36119IBM i authentication bypass7.1CNA v3.10.2%2025-08-08Fix
CVE-2025-36023IBM Cloud Pak for Business Automation security bypass6.5CNA v3.10.3%2025-08-08Fix
CVE-2025-8749Path traversal vulnerability in MiR robot software via API requests6.5CNA v3.10.4%2025-08-08Fix
CVE-2025-8748OS command injection in MiR robots and MiR fleet via crafted HTTP requests8.8CNA v3.11.3%2025-08-08Fix
CVE-2025-8743Scada-LTS Virtual Data Source Property data_source_edit.shtm cross-site scripting5.4v3.10.3%2025-08-08
CVE-2025-8742macrozheng mall Admin Login excessive authentication6.3CNA v4.00.6%2025-08-08
CVE-2025-8741macrozheng mall login cleartext transmission5.9v3.10.4%2025-08-08
CVE-2025-8740zhenfeng13 My-Blog Category save cross-site scripting5.4v3.10.3%2025-08-08
CVE-2025-8739zhenfeng13 My-Blog save cross-site request forgery5.3CNA v4.00.2%2025-08-08
CVE-2025-8738zlt2000 microservices-platform Spring Actuator interface actuator information disclosure6.9CNA v4.00.4%2025-08-08
CVE-2025-8737zlt2000 microservices-platform OauthLogoutSuccessHandler.java onLogoutSuccess redirect5.1CNA v4.00.2%2025-08-08
CVE-2025-8736GNU cflow Lexer c.c yylex buffer overflow4.8CNA v4.00.2%2025-08-08
CVE-2025-8735GNU cflow Lexer c.c yylex null pointer dereference4.8CNA v4.00.1%2025-08-08
CVE-2025-8732libxml2 xmlcatalog xmlParseSGMLCatalog recursion4.8CNA v4.00.2%2025-08-08Fix
CVE-2025-8731TRENDnet TI-G160i/TI-PG102i/TPL-430AP SSH service default credentials9.3CNA v4.00.6%2025-08-08
CVE-2025-8730Belkin F9K1009/F9K1010 web interface hard-coded credentials9.3CNA v4.03.4%2025-08-08Exploit code
CVE-2025-8729MigoXLab LMeterX upload_service.py process_cert_files path traversal9.1v3.10.7%2025-08-08
CVE-2025-8708Antabot White-Jotter deserialization of untrusted data7.5v3.10.4%2025-08-08
CVE-2025-8707Huuge Box App improper export of Android application components5.5v3.10.2%2025-08-08
CVE-2025-8706Wanzhou WOES Energy Saving System Energy Overview Module SQL injection8.8v3.10.3%2025-08-08
CVE-2025-8705Wanzhou WOES Energy Saving System Energy Overview Module SQL injection8.8v3.10.3%2025-08-08
CVE-2025-8704Wanzhou WOES Energy Saving System Analysis Conclusion Query Module SQL injection8.8v3.10.3%2025-08-08
CVE-2025-8703Wanzhou WOES Energy Saving System Environmental Real-Time Data Module SQL injection8.8v3.10.3%2025-08-08
CVE-2025-8702Wanzhou WOES Energy Saving System Historical Data Query Module SQL injection8.8v3.10.3%2025-08-08
CVE-2025-8393Dreame Technology iOS and Android Mobile Applications improper certificate validation8.5CNA v4.00.1%2025-08-08Fix
CVE-2025-8356Xerox FreeFlow Core path traversal leading to RCE9.8CNA v3.119.1%2025-08-08Emerging ThreatsKCVFix
CVE-2025-8355Xerox FreeFlow Core XXE leading to SSRF7.5CNA v3.18.6%2025-08-08Emerging ThreatsKCVFix
CVE-2025-8284Packet Power EMX and EG missing authentication for critical function9.3CNA v4.00.5%2025-08-08Fix
CVE-2025-8088RARLAB WinRAR path traversal8.8NVD v3.194.5%2025-08-08KEVEmerging ThreatsExploit codeKCVFix
CVE-2025-6572OpenStreetMap for Gutenberg and WPBakery Page Builder WordPress plugin Contributor+ stored XSS5.9CISA ADP v3.10.2%2025-08-08
CVE-2025-5095Burk Technology ARC Solo missing authentication for critical function9.3CNA v4.01.0%2025-08-08Exploit codeFix
CVE-2025-4796Eventin WordPress plugin privilege escalation8.8CNA v3.10.6%2025-08-08Exploit codeFix
CVE-2025-4576Liferay Portal reflected XSS in blogs-web6.9CNA v4.00.6%2025-08-08NucleiFix
CVE-2025-55138Latkecrszy LinkJoin missing authentication step7.4CNA v3.10.3%2025-08-07
CVE-2025-55137Latkecrszy LinkJoin type confusion7.4CNA v3.10.3%2025-08-07
CVE-2025-55136tae898 ERC deserialization of untrusted data5.7CNA v3.10.2%2025-08-07
CVE-2025-55135Agora unrestricted file upload6.4CNA v3.10.2%2025-08-07
CVE-2025-55134Agora cross-site scripting6.4CNA v3.10.2%2025-08-07
CVE-2025-55133Agora cross-site scripting6.4CNA v3.10.2%2025-08-07
CVE-2025-55077Tyler Technologies ERP Pro 9 SaaS application escape7.4v3.10.2%2025-08-07Fix
CVE-2025-54951ExecuTorch vulnerable to heap-based buffer overflow9.8CISA ADP v3.10.7%2025-08-07Fix
CVE-2025-54950ExecuTorch out-of-bounds access9.8CISA ADP v3.10.6%2025-08-07Fix
CVE-2025-54949ExecuTorch heap buffer overflow9.8CISA ADP v3.10.7%2025-08-07Fix
CVE-2025-54885simbo1905 thinbus-srp-npm thinbus generates insufficient entropy: 252 bits vs minimum 256 bits6.9CNA v4.00.4%2025-08-07Fix
CVE-2025-54882Himmelblau's Kerberos credential cache collection is world readable7.1CNA v3.10.2%2025-08-07Fix
CVE-2025-54799Lego does not enforce HTTPS2.3CNA v4.00.2%2025-08-07Fix
CVE-2025-54798Tmp does not restrict arbitrary temporary file / directory write via symbolic link `dir` parameter2.5CNA v3.10.3%2025-08-07Fix
CVE-2025-54788SuiteCRM: Authenticated blind SQL injection in InboundEmail module8.8CNA v3.10.4%2025-08-07Fix
CVE-2025-54787SuiteCRM: Improper authorization for attachment downloads3.7CNA v3.10.2%2025-08-07Fix
CVE-2025-54786SuiteCRM: Legacy iCal service allows unauthenticated access to meeting data5.3CNA v3.10.3%2025-08-07Fix
CVE-2025-54785SuiteCRM is vulnerable to PHP object injection in Reports8.8CNA v3.10.4%2025-08-07Fix
CVE-2025-54784SuiteCRM is vulnerable to cross-site scripting (XSS) through its email viewer8.6CNA v4.00.2%2025-08-07Fix
CVE-2025-54783SuiteCRM: Reflected cross-site scripting (XSS) through HTTP Referrer header5.1CNA v4.00.2%2025-08-07Fix
CVE-2025-54397Netwrix Directory Manager improper access control4.3CISA ADP v3.10.3%2025-08-07Fix
CVE-2025-54396Netwrix Directory Manager SQL injection5.4CISA ADP v3.10.2%2025-08-07Fix
CVE-2025-54395Netwrix Directory Manager cross-site scripting6.1CISA ADP v3.10.3%2025-08-07Fix
CVE-2025-54394Netwrix Directory Manager insufficiently protected credentials5.3CISA ADP v3.10.3%2025-08-07Fix
CVE-2025-54393Netwrix Directory Manager command injection5.4CISA ADP v3.10.2%2025-08-07Fix
CVE-2025-54392Netwrix Directory Manager cross-site scripting6.1CISA ADP v3.10.3%2025-08-07Fix
CVE-2025-53792Microsoft Azure Portal elevation of privilege9.1CNA v3.10.8%2025-08-07Fix
CVE-2025-53787Microsoft 365 Copilot BizChat information disclosure8.2CNA v3.10.7%2025-08-07Fix
CVE-2025-53774Microsoft 365 Copilot BizChat information disclosure6.5CNA v3.10.6%2025-08-07Fix
CVE-2025-53767Microsoft Azure OpenAI elevation of privilege10.0CNA v3.11.1%2025-08-07Fix
CVE-2025-51629Agenzia Impresa Eccobook PdfViewer cross-site scripting8.8CISA ADP v3.10.3%2025-08-07
CVE-2025-51533Sage Dpw An insecure direct object reference5.3CNA v3.10.3%2025-08-07
CVE-2025-50952uclouvain openjpeg null pointer dereference6.5CISA ADP v3.10.3%2025-08-07Fix
CVE-2025-50692FoxCMS code injection9.8CISA ADP v3.10.7%2025-08-07
CVE-2025-50675GPMAW installation directory incorrect permission assignment7.8CISA ADP v3.10.2%2025-08-07Exploit code
CVE-2025-48709BMC Control-M/Server cleartext database credentials in process lists and logs7.8v3.10.1%2025-08-07Fix
CVE-2025-47907Incorrect results returned from Rows.Scan in database/sql7.0CISA ADP v3.10.4%2025-08-07Fix
CVE-2025-47808GStreamer null pointer dereference5.6CISA ADP v3.10.5%2025-08-07Fix
CVE-2025-47807GStreamer null pointer dereference5.5v3.10.2%2025-08-07Fix
CVE-2025-47806GStreamer stack-based buffer overflow5.6CISA ADP v3.10.3%2025-08-07Fix
CVE-2025-47219GStreamer out-of-bounds read8.1CISA ADP v3.10.6%2025-08-07Fix
CVE-2025-47188Mitel 6800 and 6900 Series SIP phones command injection6.5CISA ADP v3.153.3%2025-08-07NucleiEmerging ThreatsFix
CVE-2025-47183GStreamer out-of-bounds read6.6CISA ADP v3.10.2%2025-08-07Fix
CVE-2025-45765ruby-jwt weak encryption9.1CISA ADP v3.10.2%2025-08-07
CVE-2025-44779Ollama files accessible to external parties6.6CISA ADP v3.10.2%2025-08-07Fix
CVE-2025-35970SEIKO EPSON Multiple EPSON product weak credentials8.7CNA v4.00.5%2025-08-07
CVE-2025-34152Shenzhen Aitemi M300 Wi-Fi Repeater OS command injection via Time parameter9.4CNA v4.086.8%2025-08-07Reported exploitedNucleiMetasploitEmerging ThreatsExploit code
CVE-2025-34151Shenzhen Aitemi M300 Wi-Fi Repeater PPPoE password command injection9.4CNA v4.03.7%2025-08-07Emerging Threats
CVE-2025-34150Shenzhen Aitemi M300 Wi-Fi Repeater PPPoE Username command injection9.4CNA v4.01.4%2025-08-07Emerging Threats
CVE-2025-34149Shenzhen Aitemi M300 Wi-Fi Repeater OS command injection via WPA2 Key9.4CNA v4.01.4%2025-08-07Emerging Threats
CVE-2025-34148Shenzhen Aitemi M300 Wi-Fi Repeater OS command injection via WISP SSID9.4CNA v4.01.3%2025-08-07Emerging Threats
CVE-2025-32094AkamaiGhost HTTP request smuggling4.0CNA v3.10.6%2025-08-07Fix
CVE-2025-30405ExecuTorch integer overflow9.8CISA ADP v3.10.6%2025-08-07Fix
CVE-2025-30404ExecuTorch integer overflow9.8CISA ADP v3.10.6%2025-08-07Fix
CVE-2025-29866TAGFREE X-Free Uploader external control of a file path8.8CNA v4.00.3%2025-08-07Fix
CVE-2025-29865TAGFREE X-Free Uploader path traversal8.7CNA v4.00.4%2025-08-07Fix
CVE-2025-26513NetApp SAN Host Utilities improper privilege management7.0CNA v3.10.1%2025-08-07Fix
CVE-2025-24000Post SMTP WordPress plugin account takeover8.8CNA v3.10.6%2025-08-07Exploit codeFix
CVE-2025-8701Wanzhou WOES Intelligent Optimization Energy Saving System GetPageList SQL injection8.8v3.10.3%2025-08-07
CVE-2025-8698Open5GS AMF service nsmf-handler.c amf_nsmf_pdusession_handle_release_sm_context assertion4.8CNA v4.00.2%2025-08-07
CVE-2025-8697agentUniverse MCPSessionManager/MCPTool/MCPToolkit StdioServerParameters os command injection5.3CNA v4.01.8%2025-08-07
CVE-2025-8583Google Chrome Permissions inappropriate implementation4.3CISA ADP v3.10.2%2025-08-07Fix
CVE-2025-8582Google Chrome improper input validation4.3CISA ADP v3.10.2%2025-08-07Fix
CVE-2025-8581Google Chrome extensions inappropriate implementation4.3CISA ADP v3.10.3%2025-08-07Fix
CVE-2025-8580Google Chrome Filesystems inappropriate implementation4.3CISA ADP v3.10.2%2025-08-07Fix
CVE-2025-8579Google Chrome Picture In Picture inappropriate implementation4.3CISA ADP v3.10.2%2025-08-07Fix
CVE-2025-8578Google Chrome Cast use-after-free8.8CISA ADP v3.10.3%2025-08-07Fix
CVE-2025-8577Google Chrome Picture In Picture inappropriate implementation4.3CISA ADP v3.10.2%2025-08-07Fix
CVE-2025-8576Google Chrome extensions use-after-free8.8CISA ADP v3.10.3%2025-08-07Fix
CVE-2025-8533Flexibits Fantastical incorrect authorization of XPC service in Fantastical.app6.9CNA v4.00.4%2025-08-07Fix
CVE-2025-7195Operator-sdk: Privilege escalation due to incorrect permissions of /etc/passwd6.4CNA v3.10.2%2025-08-07Fix
CVE-2025-7054Cloudflare quiche infinite loop triggered by connection ID retirement8.7CNA v4.00.4%2025-08-07Fix
CVE-2025-3770TianoCore edk2 SMM IDT privilege escalation7.0CNA v3.10.2%2025-08-07Fix
CVE-2025-54884Vision UI security-kit random id generation resource exhaustion8.7CNA v4.00.4%2025-08-06Fix
CVE-2025-54883DavidOsipov Vision-ui vision UI's security-kit Contains cryptographic weakness9.3CNA v4.00.4%2025-08-06Fix
CVE-2025-54879Mastodon confirmation email rate limiting resource exhaustion5.3CNA v3.10.6%2025-08-06Fix
CVE-2025-54876Jans CLI stores plaintext passwords in the local cli_cmd.log file6.9CNA v4.00.5%2025-08-06
CVE-2025-54873risc0 RISC Zero Underconstrained vulnerability: Division2.7CNA v4.00.4%2025-08-06Fix
CVE-2025-54872onion-site-template tor Secrets Baked into Image8.7CNA v4.00.3%2025-08-06
CVE-2025-54869FPDI is vulnerable to memory exhaustion (OOM) through its PDF parser6.0CNA v4.00.3%2025-08-06Fix
CVE-2025-54801Fiber Susceptible to crash via `BodyParser` due to Unvalidated Large Slice Index in Decoder8.7CNA v4.00.4%2025-08-06Fix
CVE-2025-54655Huawei HarmonyOS virtualization base module race condition8.1CNA v3.10.1%2025-08-06Fix
CVE-2025-54653Huawei HarmonyOS virtualization file module path traversal8.4CNA v3.10.1%2025-08-06Fix
CVE-2025-54652Huawei HarmonyOS virtualization base module path traversal8.4CNA v3.10.1%2025-08-06Fix
CVE-2025-54651Huawei HarmonyOS race condition vulnerability in the kernel hufs module4.8CNA v3.10.1%2025-08-06Fix
CVE-2025-54650Huawei HarmonyOS improper array index verification vulnerability in the audio codec module4.2CNA v3.10.1%2025-08-06Fix
CVE-2025-54649Huawei HarmonyOS type confusion4.5CNA v3.10.1%2025-08-06Fix
CVE-2025-54648Huawei HarmonyOS out-of-bounds read vulnerability in the SSAP module of the NearLink protocol stack5.4CNA v3.10.1%2025-08-06Fix
CVE-2025-54647Huawei HarmonyOS out-of-bounds read vulnerability in the SSAP module of the NearLink protocol stack5.4CNA v3.10.1%2025-08-06Fix
CVE-2025-54646Huawei HarmonyOS vulnerability of inadequate packet length check in the BLE module5.1CNA v3.10.1%2025-08-06Fix
CVE-2025-54645Huawei HarmonyOS improper array index validation5.0CNA v3.10.1%2025-08-06Fix
CVE-2025-54644Huawei HarmonyOS out-of-bounds read6.6CNA v3.10.1%2025-08-06Fix
CVE-2025-54643Huawei HarmonyOS out-of-bounds read6.6CNA v3.10.1%2025-08-06Fix
CVE-2025-54642Huawei HarmonyOS buffer overflow6.7CNA v3.10.1%2025-08-06Fix
CVE-2025-54641Huawei HarmonyOS buffer overflow6.7CNA v3.10.1%2025-08-06Fix
CVE-2025-54640Huawei HarmonyOS ParcelMismatch vulnerability in attribute deserialization5.5CNA v3.10.1%2025-08-06Fix
CVE-2025-54639Huawei HarmonyOS ParcelMismatch vulnerability in attribute deserialization5.5CNA v3.10.1%2025-08-06Fix
CVE-2025-54638Huawei HarmonyOS issue of inconsistent read/write serialization in the ad module5.5CNA v3.10.1%2025-08-06Fix
CVE-2025-54637Huawei HarmonyOS out-of-bounds read4.4CNA v3.10.1%2025-08-06Fix
CVE-2025-54636Huawei HarmonyOS buffer overflow4.4CNA v3.10.1%2025-08-06Fix
CVE-2025-54635Huawei HarmonyOS use-after-free5.9CNA v3.10.1%2025-08-06Fix
CVE-2025-54634Huawei HarmonyOS vulnerability of improper processing of abnormal conditions in huge page separation8.0CNA v3.10.1%2025-08-06Fix
CVE-2025-54633Huawei HarmonyOS out-of-bounds read vulnerability in the register configuration of the DMA module6.7CNA v3.10.1%2025-08-06Fix
CVE-2025-54632Huawei HarmonyOS vulnerability of insufficient data length verification in the HVB module6.8CNA v3.10.1%2025-08-06Fix
CVE-2025-54631Huawei HarmonyOS vulnerability of insufficient data length verification in the partition module6.7CNA v3.10.1%2025-08-06Fix
CVE-2025-54630Huawei HarmonyOS vulnerability of insufficient data length verification in the DFA module6.8CNA v3.10.2%2025-08-06Fix
CVE-2025-54629Huawei HarmonyOS race condition6.7CNA v3.10.1%2025-08-06Fix
CVE-2025-54628Huawei HarmonyOS vulnerability of incomplete verification information in the communication module5.3CNA v3.10.2%2025-08-06Fix
CVE-2025-54627Huawei HarmonyOS out-of-bounds write vulnerability in the skia module8.8CNA v3.10.2%2025-08-06Fix
CVE-2025-54626Huawei HarmonyOS pointer dangling vulnerability in the cjwindow module4.4CNA v3.10.1%2025-08-06Fix
CVE-2025-54625Huawei HarmonyOS race condition vulnerability in the kernel file system module6.7CNA v3.10.1%2025-08-06Fix
CVE-2025-54624Huawei HarmonyOS unexpected injection event vulnerability in the multimodalinput module5.7CNA v3.10.2%2025-08-06Fix
CVE-2025-54623Huawei HarmonyOS out-of-bounds read vulnerability in the devicemanager module6.3CNA v3.10.2%2025-08-06Fix
CVE-2025-54622Huawei HarmonyOS binding authentication bypass vulnerability in the devicemanager module8.3CNA v3.10.1%2025-08-06Fix
CVE-2025-54621Huawei HarmonyOS iterator failure issue in the WantAgent module5.3CNA v3.10.1%2025-08-06Fix
CVE-2025-54620Huawei HarmonyOS deserialization vulnerability of untrusted data in the ability module5.5CNA v3.10.1%2025-08-06Fix
CVE-2025-54619Huawei HarmonyOS iterator failure issue in the multi-mode input module5.3CNA v3.10.1%2025-08-06Fix
CVE-2025-54618Huawei HarmonyOS permission control vulnerability in the distributed clipboard module5.7CNA v3.10.1%2025-08-06Fix
CVE-2025-54617Huawei HarmonyOS stack-based buffer overflow vulnerability in the dms_fwk module6.8CNA v3.10.3%2025-08-06Fix
CVE-2025-54616Huawei HarmonyOS out-of-bounds array access vulnerability in the ArkUI framework4.0CNA v3.10.1%2025-08-06Fix
CVE-2025-54615Huawei HarmonyOS vulnerability of insufficient information protection in the media library module6.2CNA v3.10.1%2025-08-06Fix
CVE-2025-54614Huawei HarmonyOS input verification vulnerability in the home screen module6.2CNA v3.10.1%2025-08-06Fix
CVE-2025-54613Huawei HarmonyOS iterator failure vulnerability in the card management module5.9CNA v3.10.1%2025-08-06Fix
CVE-2025-54612Huawei HarmonyOS iterator failure vulnerability in the card management module5.9CNA v3.10.1%2025-08-06Fix
CVE-2025-54611Huawei HarmonyOS EXTRA_REFERRER resource read vulnerability in the Gallery module7.3CNA v3.10.1%2025-08-06Fix
CVE-2025-54610Huawei HarmonyOS out-of-bounds access vulnerability in the audio codec module5.4CNA v3.10.2%2025-08-06Fix
CVE-2025-54609Huawei HarmonyOS out-of-bounds access vulnerability in the audio codec module5.4CNA v3.10.2%2025-08-06Fix
CVE-2025-54608Huawei HarmonyOS access control weakness6.2CNA v3.10.1%2025-08-06Fix
CVE-2025-54607Huawei HarmonyOS authentication management vulnerability in the ArkWeb module7.7CNA v3.10.3%2025-08-06Fix
CVE-2025-54606Huawei HarmonyOS status verification vulnerability in the lock screen module7.3CNA v3.10.1%2025-08-06Fix
CVE-2025-54594react-native-bottom-tabs GitHub Actions canary workflow code injection9.1CNA v3.10.5%2025-08-06Exploit code
CVE-2025-54571ModSecurity's Insufficient Return Value Handling can lead to XSS and Source Code Disclosure6.9CNA v4.00.3%2025-08-06Fix
CVE-2025-54125XWiki Platform: Password and email exposure in xml.vm fields8.7CNA v4.01.4%2025-08-06NucleiFix
CVE-2025-54124XWiki leaks password hashes and other accessible password properties7.1CNA v4.00.5%2025-08-06Fix
CVE-2025-53786Microsoft Exchange Server Hybrid Deployment elevation of privilege8.0CNA v3.17.7%2025-08-06Fix
CVE-2025-51624Zone Bitaqati thru cross-site scripting7.6CISA ADP v3.10.3%2025-08-06
CVE-2025-51532Sage Dpw improper access control7.5CNA v3.10.4%2025-08-06
CVE-2025-51531Sage Dpw reflected cross-site scripting6.1CISA ADP v3.10.3%2025-08-06
CVE-2025-51308Gatling missing authorization5.3CISA ADP v3.10.3%2025-08-06
CVE-2025-51306Gatling Enterprise session logout vulnerability6.5CISA ADP v3.10.4%2025-08-06
CVE-2025-51058Vedo Suite server-side request forgery6.5CISA ADP v3.10.5%2025-08-06
CVE-2025-51057Vedo Suite A local file inclusion6.5CISA ADP v3.10.5%2025-08-06
CVE-2025-51056Vedo Suite An arbitrary file upload8.2CISA ADP v3.10.5%2025-08-06
CVE-2025-51055Vedo Suite cleartext storage of sensitive information8.6CISA ADP v3.10.3%2025-08-06
CVE-2025-51054Vedo Suite improper access control6.5CISA ADP v3.10.4%2025-08-06
CVE-2025-51053Vedo Suite /api_vedo/ cross-site scripting6.1CISA ADP v3.10.4%2025-08-06
CVE-2025-51052Vedo Suite A path traversal6.5CISA ADP v3.10.4%2025-08-06
CVE-2025-51040Electrolink Fm/dab/tv Transmitter Web Management System unauthorized access7.5CISA ADP v3.10.4%2025-08-06Exploit code
CVE-2025-50740AutoConnect web configuration interface cross-site scripting6.1CISA ADP v3.10.3%2025-08-06
CVE-2025-50286getgrav grav remote code execution8.1CISA ADP v3.113.6%2025-08-06MetasploitExploit code
CVE-2025-50234chshcms mccms server-side request forgery6.5CISA ADP v3.10.2%2025-08-06
CVE-2025-50233QCMS template editor directory traversal6.5CISA ADP v3.10.5%2025-08-06
CVE-2025-48394Eaton G4 PDU path traversal4.7CNA v3.10.3%2025-08-06Fix
CVE-2025-48393Eaton G4 PDU improper certificate validation5.7CNA v3.10.2%2025-08-06Fix
CVE-2025-47908Denial of service via malicious preflight requests in github.com/rs/cors7.5CISA ADP v3.10.6%2025-08-06Fix
CVE-2025-47324Exposure of sensitive information through Metadata in Powerline Communication Firmware7.5CNA v3.10.2%2025-08-06Fix
CVE-2025-466604cstrategies Exonaut insecure storage of sensitive information5.3CISA ADP v3.10.3%2025-08-06
CVE-2025-466594cstrategies Exonaut information disclosure7.5CISA ADP v3.10.3%2025-08-06
CVE-2025-46391Emby MediaBrowser improper access control6.5CNA v3.10.2%2025-08-06
CVE-2025-46390Emby MediaBrowser response discrepancy7.5CNA v3.10.3%2025-08-06
CVE-2025-46389Emby MediaBrowser unverified password change6.5CNA v3.10.2%2025-08-06
CVE-2025-46388Emby MediaBrowser information disclosure4.3CNA v3.10.2%2025-08-06
CVE-2025-46387Emby MediaBrowser insecure direct object reference8.8CNA v3.10.3%2025-08-06
CVE-2025-46386Emby MediaBrowser insecure direct object reference8.8CNA v3.10.3%2025-08-06
CVE-2025-45766Pocoproject poco weak cryptographic algorithm7.0CISA ADP v3.10.1%2025-08-06
CVE-2025-45764jsrsasign inadequate encryption strength3.2CNA v3.10.1%2025-08-06
CVE-2025-38747Dell SupportAssist OS Recovery insecure temporary file7.8CNA v3.10.1%2025-08-06Fix
CVE-2025-38746Dell SupportAssist OS Recovery information disclosure3.5CNA v3.10.2%2025-08-06Fix
CVE-2025-36020IBM Guardium Data Protection information disclosure5.9CNA v3.10.2%2025-08-06Fix
CVE-2025-32430XWiki Platform contains reflected XSS vulnerability in two templates6.5CNA v4.00.7%2025-08-06NucleiFix
CVE-2025-30127Marbella KR8s Dashcam FF video and audio streaming improper access control9.8CISA ADP v3.10.4%2025-08-06
CVE-2025-27076Qualcomm Snapdragon time-of-check time-of-use (TOCTOU) race condition in Display7.8CNA v3.10.1%2025-08-06Fix
CVE-2025-27075Qualcomm Snapdragon improper validation of array index in Bluetooth host7.8CNA v3.10.1%2025-08-06Fix
CVE-2025-27073Qualcomm Snapdragon reachable assertion in WLAN firmware7.5CNA v3.10.2%2025-08-06Fix
CVE-2025-27072Qualcomm Snapdragon buffer copy without checking size of input in Automotive Vehicle Networks5.5CNA v3.10.1%2025-08-06Fix
CVE-2025-27071Qualcomm Snapdragon buffer copy without checking size of input in Powerline Communication firmware7.3CNA v3.10.2%2025-08-06Fix
CVE-2025-27069Qualcomm Snapdragon untrusted pointer dereference in DSP service7.8CNA v3.10.1%2025-08-06Fix
CVE-2025-27068Qualcomm Snapdragon buffer over-read in Camera7.8CNA v3.10.1%2025-08-06Fix
CVE-2025-27067Qualcomm Snapdragon improper validation of array index in DSP service7.8CNA v3.10.1%2025-08-06Fix
CVE-2025-27066Qualcomm Snapdragon reachable assertion in WLAN firmware7.5CNA v3.10.3%2025-08-06Fix
CVE-2025-27065Qualcomm Snapdragon buffer over-read in WLAN firmware7.5CNA v3.10.2%2025-08-06Fix
CVE-2025-27062Qualcomm Snapdragon improper access control in Automotive Multimedia7.8CNA v3.10.1%2025-08-06Fix
CVE-2025-23335NVIDIA Triton Inference Server integer underflow4.4CNA v3.10.5%2025-08-06Fix
CVE-2025-23334NVIDIA Triton Inference Server out-of-bounds read5.9CNA v3.10.8%2025-08-06KCVFix
CVE-2025-23333NVIDIA Triton Inference Server out-of-bounds read5.9CNA v3.10.5%2025-08-06Fix
CVE-2025-23331NVIDIA Triton Inference Server excessive memory allocation7.5CNA v3.10.6%2025-08-06Fix
CVE-2025-23327NVIDIA Triton Inference Server integer overflow7.5CNA v3.10.5%2025-08-06Fix
CVE-2025-23326NVIDIA Triton Inference Server integer overflow to buffer overflow7.5CNA v3.10.5%2025-08-06Fix
CVE-2025-23325NVIDIA Triton Inference Server uncontrolled recursion7.5CNA v3.10.5%2025-08-06Fix
CVE-2025-23324NVIDIA Triton Inference Server integer overflow7.5CNA v3.10.5%2025-08-06Fix
CVE-2025-23323NVIDIA Triton Inference Server integer overflow7.5CNA v3.10.5%2025-08-06Fix
CVE-2025-23322NVIDIA Triton Inference Server double free7.5CNA v3.10.6%2025-08-06Fix
CVE-2025-23321NVIDIA Triton Inference Server divide by zero7.5CNA v3.10.5%2025-08-06Fix
CVE-2025-23320NVIDIA Triton Inference Server information disclosure through error messages7.5CNA v3.10.9%2025-08-06KCVFix
CVE-2025-23319NVIDIA Triton Inference Server buffer access with incorrect length8.1CNA v3.11.6%2025-08-06KCVFix
CVE-2025-23318NVIDIA Triton Inference Server buffer access with incorrect length8.1CNA v3.10.7%2025-08-06Fix
CVE-2025-23317NVIDIA Triton Inference Server heap-based buffer overflow9.1CNA v3.12.0%2025-08-06Fix
CVE-2025-23311NVIDIA Triton Inference Server stack-based buffer overflow9.8CNA v3.12.6%2025-08-06Fix
CVE-2025-23310NVIDIA Triton Inference Server stack-based buffer overflow9.8CNA v3.11.9%2025-08-06Fix
CVE-2025-22470SATO CL4/6NX Plus unrestricted file upload9.3CNA v4.00.7%2025-08-06
CVE-2025-22469SATO CL4/6NX Plus OS command injection6.9CNA v4.01.1%2025-08-06
CVE-2025-21477Improper input validation in Modem7.5CNA v3.10.2%2025-08-06Fix
CVE-2025-21474Qualcomm Snapdragon use-after-free in BTHOST7.8CNA v3.10.1%2025-08-06Fix
CVE-2025-21473Qualcomm Snapdragon time-of-check time-of-use (TOCTOU) race condition in Camera_Linux7.8CNA v3.10.1%2025-08-06Fix
CVE-2025-21472Qualcomm Snapdragon Leftover Debug Code in Secure Element5.5CNA v3.10.1%2025-08-06Fix
CVE-2025-21465Qualcomm Snapdragon out-of-bounds read in Core6.5CNA v3.10.1%2025-08-06Fix
CVE-2025-21464Qualcomm Snapdragon out-of-bounds read in Core6.5CNA v3.10.1%2025-08-06Fix
CVE-2025-21461Qualcomm Snapdragon out-of-bounds write in Camera_Linux7.8CNA v3.10.1%2025-08-06Fix
CVE-2025-21458Qualcomm Snapdragon use-after-free in NPU7.8CNA v3.10.1%2025-08-06Fix
CVE-2025-21457Qualcomm Snapdragon buffer over-read in Automotive OS Platform Android6.1CNA v3.10.1%2025-08-06Fix
CVE-2025-21456Qualcomm Snapdragon use-after-free in NPU7.8CNA v3.10.1%2025-08-06Fix
CVE-2025-21455Qualcomm Snapdragon time-of-check time-of-use (TOCTOU) race condition in Camera_Linux7.8CNA v3.10.1%2025-08-06Fix
CVE-2025-21452Reachable assertion in Modem7.5CNA v3.10.2%2025-08-06Fix
CVE-2025-21024Samsung Mobile Smart View implicit intent for sensitive communication3.3CNA v3.10.1%2025-08-06Fix
CVE-2025-21023Samsung Mobile WcsExtension for Galaxy Watch improper access control3.3CNA v3.10.1%2025-08-06
CVE-2025-21022Samsung Mobile Galaxy Wearable improper access control3.3CNA v3.10.1%2025-08-06Fix
CVE-2025-21021Samsung Mobile Blockchain Keystore drawing pinpad out-of-bounds write5.7CNA v3.10.1%2025-08-06Fix
CVE-2025-21020Samsung Mobile Blockchain Keystore creating bitmap images out-of-bounds write5.7CNA v3.10.1%2025-08-06Fix
CVE-2025-21019Samsung Mobile Samsung Health improper authorization5.5CNA v3.10.1%2025-08-06Fix
CVE-2025-21018Samsung Mobile Blockchain Keystore out-of-bounds read4.4CNA v3.10.1%2025-08-06Fix
CVE-2025-21017Samsung Mobile Blockchain Keystore detaching crypto box out-of-bounds write6.3CNA v3.10.1%2025-08-06Fix
CVE-2025-21016Samsung Mobile Devices PkgPredictorService improper access control4.3CNA v3.10.2%2025-08-06
CVE-2025-21015Samsung Mobile Devices Document scanner path traversal4.0CNA v3.10.2%2025-08-06Fix
CVE-2025-21014Samsung Mobile Devices information disclosure4.3CNA v3.10.1%2025-08-06Fix
CVE-2025-21013Samsung Mobile Devices SemSensorManager for Galaxy Watch improper access control6.2CNA v3.10.1%2025-08-06
CVE-2025-21012Samsung Mobile Devices fall detection for Galaxy Watch improper access control5.5CNA v3.10.1%2025-08-06
CVE-2025-21011Samsung Mobile Devices SemSensorService for Galaxy Watch improper access control5.5CNA v3.10.1%2025-08-06
CVE-2025-21010Samsung Mobile Devices improper privilege management6.0CNA v3.10.1%2025-08-06Fix
CVE-2025-20990Samsung Mobile Devices accessing system device node improper access control4.0CNA v3.10.1%2025-08-06Fix
CVE-2025-20332Cisco Identity Services Engine authorization bypass4.3CNA v3.10.4%2025-08-06Fix
CVE-2025-20331Cisco Identity Services Engine stored cross-site scripting Vulnerabiliy5.4CNA v3.10.2%2025-08-06Fix
CVE-2025-20215Cisco Webex Meeting Client Join Certificate Validation vulnerability5.4CNA v3.10.1%2025-08-06Fix
CVE-2025-8667SkyworkAI DeepResearchAgent tools.py from_mcp os command injection5.3CNA v4.01.8%2025-08-06
CVE-2025-8665agno-agi agno Model Context protocol mcp.py MultiMCPTools os command injection5.3CNA v4.01.8%2025-08-06
CVE-2025-8656Kenwood DMX958XR protection mechanism failure Software Downgrade6.8CNA v3.00.2%2025-08-06
CVE-2025-8655Kenwood DMX958XR libSystemLib command injection remote code execution6.8CNA v3.00.7%2025-08-06
CVE-2025-8654Kenwood DMX958XR ReadMVGImage command injection remote code execution8.8CNA v3.00.8%2025-08-06
CVE-2025-8653Kenwood DMX958XR JKRadioService stack-based buffer overflow remote code execution8.8CNA v3.00.3%2025-08-06
CVE-2025-8652Kenwood DMX958XR JKWifiService command injection remote code execution6.8CNA v3.00.7%2025-08-06
CVE-2025-8651Kenwood DMX958XR JKWifiService command injection remote code execution6.8CNA v3.00.7%2025-08-06
CVE-2025-8650Kenwood DMX958XR libSystemLib command injection remote code execution6.8CNA v3.00.7%2025-08-06
CVE-2025-8649Kenwood DMX958XR JKWifiService command injection remote code execution6.8CNA v3.00.7%2025-08-06
CVE-2025-8648Kenwood DMX958XR Firmware update command injection6.8CNA v3.00.9%2025-08-06
CVE-2025-8647Kenwood DMX958XR Firmware update command injection6.8CNA v3.00.9%2025-08-06
CVE-2025-8646Kenwood DMX958XR Firmware update command injection6.8CNA v3.00.9%2025-08-06
CVE-2025-8645Kenwood DMX958XR Firmware update command injection6.8CNA v3.00.9%2025-08-06
CVE-2025-8644Kenwood DMX958XR Firmware update command injection6.8CNA v3.00.9%2025-08-06
CVE-2025-8643Kenwood DMX958XR Firmware update command injection6.8CNA v3.00.9%2025-08-06
CVE-2025-8642Kenwood DMX958XR Firmware update command injection6.8CNA v3.00.9%2025-08-06
CVE-2025-8641Kenwood DMX958XR Firmware update command injection6.8CNA v3.00.9%2025-08-06
CVE-2025-8640Kenwood DMX958XR Firmware update command injection6.8CNA v3.00.9%2025-08-06
CVE-2025-8639Kenwood DMX958XR Firmware update command injection6.8CNA v3.00.9%2025-08-06
CVE-2025-8638Kenwood DMX958XR Firmware update command injection6.8CNA v3.00.9%2025-08-06
CVE-2025-8637Kenwood DMX958XR Firmware update command injection6.8CNA v3.00.9%2025-08-06
CVE-2025-8636Kenwood DMX958XR Firmware update command injection6.8CNA v3.00.9%2025-08-06
CVE-2025-8635Kenwood DMX958XR Firmware update command injection6.8CNA v3.00.9%2025-08-06
CVE-2025-8634Kenwood DMX958XR Firmware update command injection6.8CNA v3.00.9%2025-08-06
CVE-2025-8633Kenwood DMX958XR Firmware update command injection6.8CNA v3.00.9%2025-08-06
CVE-2025-8632Kenwood DMX958XR Firmware update command injection6.8CNA v3.00.9%2025-08-06
CVE-2025-8631Kenwood DMX958XR Firmware update command injection6.8CNA v3.00.9%2025-08-06
CVE-2025-8630Kenwood DMX958XR Firmware update command injection6.8CNA v3.00.9%2025-08-06
CVE-2025-8629Kenwood DMX958XR Firmware update command injection6.8CNA v3.00.9%2025-08-06
CVE-2025-8628Kenwood DMX958XR Firmware update command injection6.8CNA v3.00.9%2025-08-06
CVE-2025-8620GiveWP Donation Plugin and Fundraising Platform WordPress plugin unauthenticated Donor data exposure5.3v3.10.5%2025-08-06Fix
CVE-2025-8616OpenText Advanced Authentication authentication bypass by replay6.1CNA v4.00.3%2025-08-06
CVE-2025-8595Zakra WordPress theme missing authorization to Subscriber+ Demo import4.3CNA v3.10.2%2025-08-06Fix