CVEs published August 3, 2025
29 CVEs were published on August 3, 2025: 0 critical, 3 high. Browse them by severity, product and exploitation status.
- Published
- 29
- Critical
- 0
- High
- 3
- Medium
- 24
- Low
- 2
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 12
Most affected products
- code-projects Online Medicine Guide
- 5
- Portabilis i-Educar
- 4
- ES iperf3
- 3
- xwiki-contrib Mocca Calendar
- 3
- 495300897 wx-shop
- 2
- code-projects Human Resource Integrated System
- 2
- Apache Software Foundation org.apache.zeppelin:zeppelin-jdb…
- 1
- Apache Software Foundation org.apache.zeppelin:zeppelin-she…
- 1
- Apache Software Foundation org.apache.zeppelin:zeppelin-web…
- 1
- Caixin News App
- 1
High 3
- CVE-2024-51775Apache Zeppelin: Command Injection via CSWSHApache Software Foundation org.apache.zeppelin:zeppelin-she…
- CVE-2024-52279Apache Zeppelin: Arbitrary file read by adding malicious JDBC connection stringApache Software Foundation org.apache.zeppelin:zeppelin-jdb…
- CVE-2025-54351In iperf before 3.19.1, net.c has a buffer overflow when --skip-rx-copy is used (for MSG_TRUNC in recv).ES iperf3
Medium, low and unrated 26
- CVE-2025-8513Caixin News App com.caixin.news AndroidManifest.xml improper export of android application componentsCaixin News App
- CVE-2025-8512TVB Big Big Shop App hk.com.tvb.bigbigshop AndroidManifest.xml improper export of android application componentsTVB Big Big Shop App
- CVE-2025-8511Portabilis i-Diario Observações diario-de-observacoes cross site scriptingPortabilis i-Diario
- CVE-2025-8510Portabilis i-Educar educar_matricula_lst.php Gerar cross site scriptingPortabilis i-Educar
- CVE-2025-8509Portabilis i-Educar educar_servidor_cad.php cross site scriptingPortabilis i-Educar
- CVE-2025-8508Portabilis i-Educar educar_avaliacao_desempenho_cad.php cross site scriptingPortabilis i-Educar
- CVE-2024-41177Apache Zeppelin: XSS in the Helium moduleApache Software Foundation org.apache.zeppelin:zeppelin-web…
- CVE-2025-8507Portabilis i-Educar educar_funcao_lst.php cross site scriptingPortabilis i-Educar
- CVE-2025-8506495300897 wx-shop editUI cross site scripting495300897 wx-shop
- CVE-2025-8505495300897 wx-shop cross-site request forgery495300897 wx-shop
- CVE-2025-8504code-projects Kitchen Treasure userregistration.php unrestricted uploadcode-projects Kitchen Treasure
- CVE-2025-8503code-projects Online Medicine Guide adaddmed.php sql injectioncode-projects Online Medicine Guide
- CVE-2025-8502code-projects Online Medicine Guide changepass.php sql injectioncode-projects Online Medicine Guide
- CVE-2025-8501code-projects Human Resource Integrated System action.php cross site scriptingcode-projects Human Resource Integrated System
- CVE-2025-8500code-projects Human Resource Integrated System action.php sql injectioncode-projects Human Resource Integrated System
- CVE-2025-8499code-projects Online Medicine Guide cusfindambulence2.php sql injectioncode-projects Online Medicine Guide
- CVE-2025-8498code-projects Online Medicine Guide index.php sql injectioncode-projects Online Medicine Guide
- CVE-2025-8497code-projects Online Medicine Guide cusfindphar2.php sql injectioncode-projects Online Medicine Guide
- CVE-2025-8496projectworlds Online Admission System viewform.php sql injectionprojectworlds Online Admission System
- CVE-2025-8495code-projects Intern Membership Management System edit_admin_query.php sql injectioncode-projects Intern Membership Management System
- CVE-2025-52131The Mocca Calendar application before 2.15 for XWiki allows XSS via the background or text color field.xwiki-contrib Mocca Calendar
- CVE-2025-52132The Mocca Calendar application before 2.15 for XWiki allows XSS via a title to the view event page.xwiki-contrib Mocca Calendar
- CVE-2025-52133The Mocca Calendar application before 2.15 for XWiki allows XSS via a title upon calendar import.xwiki-contrib Mocca Calendar
- CVE-2025-54349In iperf before 3.19.1, iperf_auth.c has an off-by-one error and resultant heap-based buffer overflow.ES iperf3
- CVE-2025-54350In iperf before 3.19.1, iperf_auth.c has a Base64Decode assertion failure and application exit upon a malformed authentication attempt.ES iperf3
- CVE-2025-54956The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header from the…r-lib gh