CVEs published August 2, 2025
42 CVEs were published on August 2, 2025: 2 critical, 10 high.
- Published
- 42
- Critical
- 2
- High
- 10
- Medium
- 27
- Low
- 3
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 6
Most affected products
- NVIDIA GPU Display Drivers
- 12
- Partner Software Partner Web
- 3
- code-projects Intern Membership Management System
- 2
- code-projects Wazifa System
- 2
- linux · Red Hat Enterprise Linux
- 2
- SourceCodester Online Hotel Reservation System
- 2
- aumsrini Image Gallery
- 1
- awssoft Magic Edge – Lite
- 1
- bitslip6 BitFire Security – Firewall, WAF, Bot/Spam Blocker…
- 1
- blendmedia WP CTA – Call Now Button, Sticky Button & Call t…
- 1
Critical 2
High 10
- CVE-2025-23284NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause a stack buffer overflow.NVIDIA GPU Display Drivers
- CVE-2025-23283NVIDIA vGPU software for Linux-style hypervisors contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause stNVIDIA GPU Display Drivers
- CVE-2025-23281NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker with local unprivileged access that can win a race conditioNVIDIA GPU Display Drivers
- CVE-2025-23279NVIDIA .run Installer for Linux and Solaris contains a vulnerability where an attacker could use a race condition to escalate privileges.NVIDIA GPU Display Drivers
- CVE-2025-23278NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker might cause an improper index validation by issuing aNVIDIA GPU Display Drivers
- CVE-2025-23277NVIDIA Display Driver for Linux and Windows contains a vulnerability in the kernel mode driver, where an attacker could access memory outsidNVIDIA GPU Display Drivers
- CVE-2025-23276NVIDIA Installer for Windows contains a vulnerability where an attacker may be able to escalate privileges.NVIDIA GPU Display Drivers
- CVE-2025-6754SEO Metrics <= 1.0.15 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalationseometricsplugin SEO Metrics
- CVE-2025-6076CVE-2025-6076Partner Software Partner Web
- CVE-2025-54955OpenNebula Community Edition (CE) before 7.0.0 and Enterprise Edition (EE) before 6.10.3 have a critical FireEdge race condition that can leOpenNebula
Medium, low and unrated 30
- CVE-2025-8494code-projects Intern Membership Management System delete_student.php sql injectioncode-projects Intern Membership Management System
- CVE-2025-8493code-projects Intern Membership Management System edit_student_query.php sql injectioncode-projects Intern Membership Management System
- CVE-2023-32253Kernel: deadlock in ksmbd_find_crypto_ctx()linux · Red Hat Enterprise Linux
- CVE-2023-32255Kernel: memory leak via ksmbd session setup request with unknown ntlmssp message typelinux · Red Hat Enterprise Linux
- CVE-2025-23290NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a guest could get global GPU metrics which may be influencedNVIDIA GPU Display Drivers
- CVE-2025-23285NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where it allows a guest to access global resources.NVIDIA GPU Display Drivers
- CVE-2025-23288NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may cause an exposure of sensitive system information withNVIDIA GPU Display Drivers
- CVE-2025-23287NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may access sensitive system-level information.NVIDIA GPU Display Drivers
- CVE-2025-23286NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an attacker could read invalid memory.NVIDIA GPU Display Drivers
- CVE-2025-8471projectworlds Online Admission System adminlogin.php sql injectionprojectworlds Online Admission System
- CVE-2025-8470SourceCodester Online Hotel Reservation System deleteroom.php sql injectionSourceCodester Online Hotel Reservation System
- CVE-2025-8469SourceCodester Online Hotel Reservation System deletegallery.php sql injectionSourceCodester Online Hotel Reservation System
- CVE-2025-8468code-projects Wazifa System reset.php sql injectioncode-projects Wazifa System
- CVE-2025-7500Ocean Social Sharing <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scriptingoceanwp Ocean Social Sharing
- CVE-2025-8467code-projects Wazifa System regcontrol.php sql injectioncode-projects Wazifa System
- CVE-2025-8488Ultimate Addons for Elementor (Formerly Elementor Header & Footer Builder) <= 2.4.6 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Updatebrainstormforce Ultimate Addons for Elementor
- CVE-2025-6722BitFire <= 4.5 - Unauthenticated Information Exposurebitslip6 BitFire Security – Firewall, WAF, Bot/Spam Blocker…
- CVE-2025-8466code-projects Online Farm System forgot_passfarmer.php sql injectioncode-projects Online Farm System
- CVE-2025-8391Magic Edge – Lite <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via height Parameterawssoft Magic Edge – Lite
- CVE-2025-8400Image Gallery <= 1.0.0 - Reflected Cross-Site Scriptingaumsrini Image Gallery
- CVE-2025-6832All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier <= 2.0 - Reflected Cross-Site Scriptingcodebangers All in One Time Clock Lite – Tracking Employee…
- CVE-2025-8399Mmm Unity Loader <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via attributes Parametermmanifesto Mmm Unity Loader
- CVE-2025-8317Custom Word Cloud <= 0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via angle Parameterbnielsen Custom Word Cloud
- CVE-2025-4588360 Photo Spheres <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scriptingmrgoodfellow 360 Photo Spheres
- CVE-2025-8212Medical Addon for Elementor <= 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typewriter Widgetnicheaddons Medical Addon for Elementor
- CVE-2025-8152WP CTA – Call To Action Plugin, Sticky CTA, Sticky Buttons <= 1.7.0 - Missing Authorization to Unauthenticated Sticky Status Updateblendmedia WP CTA – Call Now Button, Sticky Button & Call t…
- CVE-2025-6626ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization <= 3.10.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via API URLShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimiz…
- CVE-2025-8146Qi Addons for Elementor <= 1.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via TypeOut Text Widgetqodeinteractive Qi Addons For Elementor
- CVE-2025-7694Woffice Core <= 5.4.26 - Authenticated (Contributor+) Arbitrary File DeletionWofficeIO Woffice Core
- CVE-2025-6078CVE-2025-6078Partner Software Partner Web