# CVEs published 2025-08-04

85 CVEs were published on August 4, 2025: 16 critical, 26 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2025-8534](https://cve.now/CVE-2025-8534.md): libtiff tiff2ps tiff2ps.c PS\_Lvl2page null pointer dereference (CVSS 2.0, libtiff)
- [CVE-2025-8530](https://cve.now/CVE-2025-8530.md): elunez eladmin Druid application-prod.yml default credentials (CVSS 6.9, elunez eladmin)
- [CVE-2025-8529](https://cve.now/CVE-2025-8529.md): cloudfavorites favorites-web CollectController.java getCollectLogoUrl server-side request forgery (CVSS 5.3, cloudfavorites favorites-web)
- [CVE-2025-27211](https://cve.now/CVE-2025-27211.md): An Improper Input Validation in EdgeMAX EdgeSwitch (Version 1.10.4 and earlier) could allow a Command Injection by a malicious actor with ac (CVSS 7.5, Ubiquiti EdgeMAX EdgeSwitch)
- [CVE-2025-27212](https://cve.now/CVE-2025-27212.md): An Improper Input Validation in certain UniFi Access devices could allow a Command Injection by a malicious actor with access to UniFi Acces (CVSS 9.8, Ubiquiti UniFi Access Reader Pro · Ubiquiti UniFi Access… +3)
- [CVE-2025-4604](https://cve.now/CVE-2025-4604.md): The vulnerable code can bypass the Captcha check in Liferay Portal 7.4.3.80 through 7.4.3.132, and Liferay DXP 2024.Q1.1 through 2024.Q1.19, (CVSS 6.9, Liferay Portal · Liferay DXP +1)
- [CVE-2025-8528](https://cve.now/CVE-2025-8528.md): Exrick xboot getMenuList sensitive information in a cookie (CVSS 6.3, Exrick xboot)
- [CVE-2025-7844](https://cve.now/CVE-2025-7844.md): wolfTPM library wrapper function \`wolfTPM2\_RsaKey\_TpmToWolf\` copies external data to a fixed-size stack buffer without length validation potentially causing stack-based buffer overflow (CVSS 1.0, wolfSSL wolfTPM)
- [CVE-2025-8527](https://cve.now/CVE-2025-8527.md): Exrick xboot Swagger SecurityController.java server-side request forgery (CVSS 5.3, Exrick xboot)
- [CVE-2025-4599](https://cve.now/CVE-2025-4599.md): The fragment preview functionality in Liferay Portal 7.4.3.61 through 7.4.3.132, and Liferay DXP 2024.Q4.1 through 2024.Q4.5, 2024.Q3.1 thro (CVSS 2.0, Liferay Portal · Liferay DXP)
- [CVE-2025-8526](https://cve.now/CVE-2025-8526.md): Exrick xboot UploadController.java upload unrestricted upload (CVSS 5.3, Exrick xboot)
- [CVE-2025-8525](https://cve.now/CVE-2025-8525.md): Exrick xboot Spring Boot Admin/Spring Actuator information disclosure (CVSS 6.9, Exrick xboot)
- [CVE-2025-8524](https://cve.now/CVE-2025-8524.md): Boquan DotWallet App com.boquanhash.dotwallet AndroidManifest.xml improper export of android application components (CVSS 4.8, Boquan DotWallet App)
- [CVE-2025-8523](https://cve.now/CVE-2025-8523.md): RiderLike Fruit Crush-Brain App com.fruitcrush.fun AndroidManifest.xml improper export of android application components (CVSS 4.8, RiderLike Fruit Crush-Brain App)
- [CVE-2025-8522](https://cve.now/CVE-2025-8522.md): givanz Vvvebjs node.js save.php path traversal (CVSS 2.3, givanz Vvvebjs)
- [CVE-2025-26476](https://cve.now/CVE-2025-26476.md): Dell ECS versions prior to 3.8.1.5/ ObjectScale version 4.0.0.0, contain a Use of Hard-coded Cryptographic Key vulnerability. (CVSS 8.4, Dell ECS · Dell ObjectScale)
- [CVE-2025-21120](https://cve.now/CVE-2025-21120.md): Dell Avamar, versions prior to 19.10 SP1 with patch 338904, contains a Trusting HTTP Permission Methods on the Server-Side vulnerability in (CVSS 8.3, Dell Avamar Server · Dell Avamar Virtual Edition)
- [CVE-2025-8521](https://cve.now/CVE-2025-8521.md): givanz Vvveb Add Type post-types cross site scripting (CVSS 4.8, givanz Vvveb)
- [CVE-2025-38741](https://cve.now/CVE-2025-38741.md): Dell Enterprise SONiC OS, version 4.5.0, contains a cryptographic key vulnerability in SSH. (CVSS 7.5, Dell Enterprise SONiC OS)
- [CVE-2013-10054](https://cve.now/CVE-2013-10054.md): LibrettoCMS File Manager Arbitrary File Upload (CVSS 9.3, LibrettoCMS)
- [CVE-2013-10052](https://cve.now/CVE-2013-10052.md): ZPanel zsudo Local Privilege Escalation (CVSS 8.5, ZPanel Project ZPanel)
- [CVE-2025-8520](https://cve.now/CVE-2025-8520.md): givanz Vvveb Drag-and-Drop Editor editor server-side request forgery (CVSS 5.1, givanz Vvveb)
- [CVE-2025-34147](https://cve.now/CVE-2025-34147.md): Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via SSID (CVSS 9.4, Shenzhen Aitemi E Commerce Co. M300 Wi-Fi Repeater)
- [CVE-2025-8519](https://cve.now/CVE-2025-8519.md): givanz Vvveb Drag-and-Drop Editor editor information disclosure (CVSS 5.1, givanz Vvveb)
- [CVE-2025-8518](https://cve.now/CVE-2025-8518.md): givanz Vvveb Code Editor code.php save code injection (CVSS 5.1, givanz Vvveb)
- [CVE-2025-8517](https://cve.now/CVE-2025-8517.md): givanz Vvveb session fixiation (CVSS 5.3, givanz Vvveb)
- [CVE-2025-38739](https://cve.now/CVE-2025-38739.md): Dell Digital Delivery, versions prior to 5.6.1.0, contains an Insufficiently Protected Credentials vulnerability. (CVSS 7.2, Dell Digital Delivery)
- [CVE-2025-8516](https://cve.now/CVE-2025-8516.md): Kingdee Cloud-Starry-Sky Enterprise Edition IIS-K3CloudMiniApp FileUploadAction.class path traversal (CVSS 6.9, Kingdee Cloud-Starry-Sky Enterprise Edition)
- [CVE-2025-5988](https://cve.now/CVE-2025-5988.md): Aap-gateway: csrf origin checking is disabled (CVSS 5.3, automation-gateway-server · Red Hat Ansible Automation Plat…)
- [CVE-2025-30099](https://cve.now/CVE-2025-30099.md): Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 releas (CVSS 7.8, Dell PowerProtect Data Domain Feature Release · Dell Pow… +1)
- [CVE-2025-30098](https://cve.now/CVE-2025-30098.md): Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 releas (CVSS 6.7, Dell PowerProtect Data Domain Feature Release · Dell Pow… +1)
- [CVE-2025-30097](https://cve.now/CVE-2025-30097.md): Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 releas (CVSS 6.7, Dell PowerProtect Data Domain Feature Release · Dell Pow… +1)
- [CVE-2025-30096](https://cve.now/CVE-2025-30096.md): Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 releas (CVSS 6.7, Dell PowerProtect Data Domain Feature Release · Dell Pow… +1)
- [CVE-2025-36594](https://cve.now/CVE-2025-36594.md): Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2024 releas (CVSS 9.8, Dell PowerProtect Data Domain Feature Release · Dell Pow… +1)
- [CVE-2025-36607](https://cve.now/CVE-2025-36607.md): Dell Unity, version(s) 5.5 and prior, contain(s) an OS Command Injection Vulnerability in its svc\_nas utility. (CVSS 7.8, Dell Unity)
- [CVE-2025-36606](https://cve.now/CVE-2025-36606.md): Dell Unity, version(s) 5.5 and prior, contain(s) an OS Command Injection Vulnerability in its svc\_nfssupport utility. (CVSS 7.8, Dell Unity)
- [CVE-2025-36605](https://cve.now/CVE-2025-36605.md): Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vul (CVSS 6.1, Dell Unity)
- [CVE-2025-36604](https://cve.now/CVE-2025-36604.md): Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection (CVSS 7.3, Dell Unity)
- [CVE-2025-8109](https://cve.now/CVE-2025-8109.md): GPU DDK - GPU shader shared memory corrupted using ptrace to disrupt GPU operation (CVSS 8.8, Imagination Technologies Graphics DDK)
- [CVE-2025-8515](https://cve.now/CVE-2025-8515.md): Intelbras InControl JSON Endpoint operador information disclosure (CVSS 2.3, Intelbras InControl)
- [CVE-2025-0932](https://cve.now/CVE-2025-0932.md): Mali GPU Userspace Driver allows access to already freed memory (CVSS 4.3, Arm Bifrost GPU Userspace Driver · Arm Valhall GPU Users… +1)
- [CVE-2025-6205](https://cve.now/CVE-2025-6205.md): Missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 (CVSS 9.1, KEV, Dassault Systèmes DELMIA Apriso)
- [CVE-2025-6204](https://cve.now/CVE-2025-6204.md): Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 (CVSS 8.0, KEV, Dassault Systèmes DELMIA Apriso)
- [CVE-2025-8341](https://cve.now/CVE-2025-8341.md): SSRF in Infinity Datasource Plugin (CVSS 5.0, grafana-infinity-datasource · github.com/grafana/grafana-in…)
- [CVE-2025-41691](https://cve.now/CVE-2025-41691.md): CODESYS Control DoS via Unauthenticated NULL Pointer Dereference (CVSS 7.5, CODESYS Control RTE · CODESYS Control Win +12)
- [CVE-2025-41659](https://cve.now/CVE-2025-41659.md): CODESYS Control PKI Exposure Enables Remote Certificate Access (CVSS 8.3, CODESYS Control RTE · CODESYS Control Win +13)
- [CVE-2025-41658](https://cve.now/CVE-2025-41658.md): CODESYS Toolkit Exposes Sensitive Files via Default Permissions (CVSS 5.5, CODESYS Runtime Toolkit · CODESYS Control for BeagleBon… +10)
- [CVE-2025-20702](https://cve.now/CVE-2025-20702.md): In the Airoha Bluetooth audio SDK, there is a possible unauthorized access to the RACE protocol. (CVSS 8.8, Airoha Technology AB156x, AB157x, AB158x, AB159x series, AB…)
- [CVE-2025-20701](https://cve.now/CVE-2025-20701.md): In the Airoha Bluetooth audio SDK, there is a possible way to pair Bluetooth audio device without user consent. (CVSS 8.8, Airoha Technology AB156x, AB157x, AB158x, AB159x series)
- [CVE-2025-20700](https://cve.now/CVE-2025-20700.md): In the Airoha Bluetooth audio SDK, there is a possible permission bypass that allows access critical data of RACE protocol through Bluetooth (CVSS 8.8, Airoha Technology AB156x, AB157x, AB158x, AB159x series, AB…)
- [CVE-2025-48499](https://cve.now/CVE-2025-48499.md): Out-of-bounds write vulnerability exists in FUJIFILM Business Innovation MFPs. (CVSS 5.3, FUJIFILM Business Innovation DocuPrint CP225 w · FUJIFI… +12)
- [CVE-2025-20698](https://cve.now/CVE-2025-20698.md): In Power HAL, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek MT2718, MT6739, MT6761, MT6765, MT6768, MT6781, MT…)
- [CVE-2025-20697](https://cve.now/CVE-2025-20697.md): In Power HAL, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek MT2718, MT6761, MT6765, MT6768, MT6853, MT6855, MT…)
- [CVE-2025-20696](https://cve.now/CVE-2025-20696.md): In DA, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.8, MediaTek MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT…)
- [CVE-2024-45183](https://cve.now/CVE-2024-45183.md): An issue was discovered in Samsung Mobile Processor Exynos 2100, 1280, 2200, 1330, 1380, 1480, and 2400. (CVSS 6.5)
- [CVE-2025-26065](https://cve.now/CVE-2025-26065.md): A cross-site scripting (XSS) vulnerability in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows attackers to execute arbitrary web scripts o (CVSS 7.3)
- [CVE-2025-44643](https://cve.now/CVE-2025-44643.md): Certain Draytek products are affected by Insecure Configuration. (CVSS 8.6)
- [CVE-2025-44954](https://cve.now/CVE-2025-44954.md): RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account. (CVSS 9.0, RUCKUS SmartZone)
- [CVE-2025-44955](https://cve.now/CVE-2025-44955.md): RUCKUS Network Director (RND) before 4.5 allows jailed users to obtain root access vis a weak, hardcoded password. (CVSS 8.8, RUCKUS Network Director)
- [CVE-2025-44957](https://cve.now/CVE-2025-44957.md): Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP headers. (CVSS 8.5, RUCKUS SmartZone)
- [CVE-2025-44958](https://cve.now/CVE-2025-44958.md): RUCKUS Network Director (RND) before 4.5 stores passwords in a recoverable format. (CVSS 5.3, RUCKUS Network Director)
- [CVE-2025-44960](https://cve.now/CVE-2025-44960.md): RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route. (CVSS 8.5, RUCKUS SmartZone)
- [CVE-2025-44961](https://cve.now/CVE-2025-44961.md): In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated u (CVSS 9.9, RUCKUS SmartZone)
- [CVE-2025-44962](https://cve.now/CVE-2025-44962.md): RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files. (CVSS 5.0, RUCKUS SmartZone)
- [CVE-2025-44963](https://cve.now/CVE-2025-44963.md): RUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker who knows the hardcoded value of a certain s (CVSS 9.0, RUCKUS Network Director)
- [CVE-2025-46093](https://cve.now/CVE-2025-46093.md): LiquidFiles before 4.1.2 supports FTP SITE CHMOD for mode 6777 (setuid and setgid), which allows FTPDrop users to execute arbitrary code as (CVSS 9.9, LiquidFiles)
- [CVE-2025-46094](https://cve.now/CVE-2025-46094.md): LiquidFiles before 4.1.2 allows directory traversal by configuring the pathname of a local executable file as an Actionscript. (CVSS 3.8, LiquidFiles)
- [CVE-2025-46206](https://cve.now/CVE-2025-46206.md): An issue in Artifex mupdf 1.25.6, 1.25.5 allows a remote attacker to cause a denial of service via an infinite recursion in the \`mutool clea (CVSS 6.5)
- [CVE-2025-50340](https://cve.now/CVE-2025-50340.md): An Insecure Direct Object Reference (IDOR) vulnerability was discovered in SOGo Webmail thru 5.6.0, allowing an authenticated user to send e (CVSS 4.3)
- [CVE-2025-50341](https://cve.now/CVE-2025-50341.md): A Boolean-based SQL injection vulnerability was discovered in Axelor 5.2.4 via the \_domain parameter. (CVSS 9.8)
- [CVE-2025-50420](https://cve.now/CVE-2025-50420.md): An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted (CVSS 6.5)
- [CVE-2025-50422](https://cve.now/CVE-2025-50422.md): Cairo through 1.18.4, as used in Poppler through 25.08.0, has an "unscaled-\>face == NULL" assertion failure for \_cairo\_ft\_unscaled\_font\_fini (CVSS 2.9, cairographics Cairo)
- [CVE-2025-50754](https://cve.now/CVE-2025-50754.md): Unisite CMS version 5.0 contains a stored Cross-Site Scripting (XSS) vulnerability in the "Report" functionality. (CVSS 9.6)
- [CVE-2025-51387](https://cve.now/CVE-2025-51387.md): The GitKraken Desktop 10.8.0 and 11.1.0 is susceptible to code injection due to misconfigured Electron Fuses. (CVSS 9.8)
- [CVE-2025-51390](https://cve.now/CVE-2025-51390.md): TOTOLINK N600R V4.3.0cu.7647\_B20210106 was discovered to contain a command injection vulnerability via the pin parameter in the setWiFiWpsCo (CVSS 9.8)
- [CVE-2025-51534](https://cve.now/CVE-2025-51534.md): A cross-site scripting (XSS) vulnerability in Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 allows attackers to execute arbitrary (CVSS 8.1)
- [CVE-2025-51535](https://cve.now/CVE-2025-51535.md): Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 as discovered to contain a SQL injection vulnerability. (CVSS 9.1)
- [CVE-2025-51536](https://cve.now/CVE-2025-51536.md): Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 as discovered to contain a hardcoded Administrator password. (CVSS 9.8)
- [CVE-2025-51726](https://cve.now/CVE-2025-51726.md): CyberGhostVPNSetup.exe (Windows installer) is signed using the weak cryptographic hash algorithm SHA-1, which is vulnerable to collision att (CVSS 8.4)
- [CVE-2025-52239](https://cve.now/CVE-2025-52239.md): An arbitrary file upload vulnerability in ZKEACMS v4.1 allows attackers to execute arbitrary code via a crafted file. (CVSS 9.8)
- [CVE-2025-53394](https://cve.now/CVE-2025-53394.md): Paramount Macrium Reflect through 2025-06-26 allows attackers to execute arbitrary code with administrator privileges via a crafted .mrimgx (CVSS 7.7)
- [CVE-2025-53395](https://cve.now/CVE-2025-53395.md): Paramount Macrium Reflect through 2025-06-26 allows local attackers to execute arbitrary code with administrator privileges via a crafted .m (CVSS 7.7)
- [CVE-2025-54554](https://cve.now/CVE-2025-54554.md): tiaudit in Tera Insights tiCrypt before 2025-07-17 allows unauthenticated REST API requests that reveal sensitive information about the unde (CVSS 5.3, Tera Insights tiCrypt)
- [CVE-2025-54962](https://cve.now/CVE-2025-54962.md): /edit-user in webserver in OpenPLC Runtime 3 through 9cd8f1b allows authenticated users to upload arbitrary files (such as .html or .svg), a (CVSS 6.4, thiagoralves OpenPLC\_v3)
- [CVE-2025-55014](https://cve.now/CVE-2025-55014.md): The YouDao plugin for StarDict, as used in stardict 3.0.7+git20220909+dfsg-6 in Debian trixie and elsewhere, sends an X11 selection to the d (CVSS 4.7, StarDict)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-08-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.