# CVEs published 2025-08-07

91 CVEs were published on August 7, 2025: 20 critical, 25 high. Days are UTC.

- [CVE-2025-8702](https://cve.now/CVE-2025-8702.md): Wanzhou WOES Intelligent Optimization Energy Saving System Historical Data Query Module GetVariableByOneIDNew sql injection (CVSS 5.3, Wanzhou WOES Intelligent Optimization Energy Saving System)
- [CVE-2025-54952](https://cve.now/CVE-2025-54952.md): An integer overflow vulnerability in the loading of ExecuTorch models can cause smaller-than-expected memory regions to be allocated, potent (CVSS 9.8, Meta Platforms ExecuTorch · executorch)
- [CVE-2025-54951](https://cve.now/CVE-2025-54951.md): A group of related buffer overflow vulnerabilities in the loading of ExecuTorch models can cause the runtime to crash and potentially result (CVSS 9.8, Meta Platforms ExecuTorch · executorch +2)
- [CVE-2025-54950](https://cve.now/CVE-2025-54950.md): An out-of-bounds access vulnerability in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code exec (CVSS 9.8, Meta Platforms ExecuTorch · executorch +2)
- [CVE-2025-54949](https://cve.now/CVE-2025-54949.md): A heap buffer overflow vulnerability in the loading of ExecuTorch models can potentially result in code execution or other undesirable effec (CVSS 9.8, Meta Platforms ExecuTorch · executorch +2)
- [CVE-2025-30405](https://cve.now/CVE-2025-30405.md): An integer overflow vulnerability in the loading of ExecuTorch models can cause objects to be placed outside their allocated memory area, po (CVSS 9.8, Meta Platforms ExecuTorch · executorch +2)
- [CVE-2025-30404](https://cve.now/CVE-2025-30404.md): An integer overflow vulnerability in the loading of ExecuTorch models can cause overlapping allocations, potentially resulting in code execu (CVSS 9.8, Meta Platforms ExecuTorch · executorch +2)
- [CVE-2025-54787](https://cve.now/CVE-2025-54787.md): SuiteCRM: Improper Authorization for attachment downloads (CVSS 3.7, SuiteCRM)
- [CVE-2025-8701](https://cve.now/CVE-2025-8701.md): Wanzhou WOES Intelligent Optimization Energy Saving System GetPageList sql injection (CVSS 5.3, Wanzhou WOES Intelligent Optimization Energy Saving System)
- [CVE-2025-53787](https://cve.now/CVE-2025-53787.md): Microsoft 365 Copilot BizChat Information Disclosure Vulnerability (CVSS 8.2, Microsoft 365 Copilot's Business Chat)
- [CVE-2025-53774](https://cve.now/CVE-2025-53774.md): Microsoft 365 Copilot BizChat Information Disclosure Vulnerability (CVSS 6.5, Microsoft 365 Copilot's Business Chat)
- [CVE-2025-53767](https://cve.now/CVE-2025-53767.md): Azure OpenAI Elevation of Privilege Vulnerability (CVSS 10.0, Microsoft Azure Open AI)
- [CVE-2025-53792](https://cve.now/CVE-2025-53792.md): Azure Portal Elevation of Privilege Vulnerability (CVSS 9.1, Microsoft Azure Portal)
- [CVE-2025-8698](https://cve.now/CVE-2025-8698.md): Open5GS AMF Service nsmf-handler.c amf\_nsmf\_pdusession\_handle\_release\_sm\_context assertion (CVSS 4.8, Open5GS)
- [CVE-2025-26513](https://cve.now/CVE-2025-26513.md): The installer for SAN Host Utilities for Windows versions prior to 8.0 is susceptible to a vulnerability which when successfully exploited c (CVSS 7.0, NetApp SAN Host Utilities for Windows)
- [CVE-2025-7195](https://cve.now/CVE-2025-7195.md): Operator-sdk: privilege escalation due to incorrect permissions of /etc/passwd (CVSS 6.4, operator-framework operator-sdk · Red Hat RHEL-9-CNV-4.… +15)
- [CVE-2025-8697](https://cve.now/CVE-2025-8697.md): agentUniverse MCPSessionManager/MCPTool/MCPToolkit StdioServerParameters os command injection (CVSS 5.3, agentUniverse)
- [CVE-2025-55077](https://cve.now/CVE-2025-55077.md): Tyler Technologies ERP Pro 9 SaaS application escape (CVSS 5.3, Tyler Technologies ERP Pro 9 SaaS)
- [CVE-2025-24000](https://cve.now/CVE-2025-24000.md): WordPress Post SMTP plugin \<= 3.2.0 - Account Takeover Vulnerability (CVSS 8.8, Saad Iqbal Post SMTP)
- [CVE-2025-34148](https://cve.now/CVE-2025-34148.md): Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via WISP SSID (CVSS 9.4, Shenzhen Aitemi E Commerce Co. M300 Wi-Fi Repeater)
- [CVE-2025-34149](https://cve.now/CVE-2025-34149.md): Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via WPA2 Key (CVSS 9.4, Shenzhen Aitemi E Commerce Co. M300 Wi-Fi Repeater)
- [CVE-2025-34150](https://cve.now/CVE-2025-34150.md): Shenzhen Aitemi M300 Wi-Fi Repeater PPPoE Username Command Injection (CVSS 9.4, Shenzhen Aitemi E Commerce Co. M300 Wi-Fi Repeater)
- [CVE-2025-34151](https://cve.now/CVE-2025-34151.md): Shenzhen Aitemi M300 Wi-Fi Repeater PPPoE Password Command Injection (CVSS 9.4, Shenzhen Aitemi E Commerce Co. M300 Wi-Fi Repeater)
- [CVE-2025-34152](https://cve.now/CVE-2025-34152.md): Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via Time Parameter (CVSS 9.4, Shenzhen Aitemi E Commerce Co. M300 Wi-Fi Repeater)
- [CVE-2024-56339](https://cve.now/CVE-2024-56339.md): IBM WebSphere Application Server information disclosure (CVSS 3.7, IBM WebSphere Application Server)
- [CVE-2025-47907](https://cve.now/CVE-2025-47907.md): Incorrect results returned from Rows.Scan in database/sql (CVSS 7.0, Go standard library database/sql · stdlib)
- [CVE-2025-7054](https://cve.now/CVE-2025-7054.md): Infinite loop triggered by connection ID retirement (CVSS 8.7, Cloudflare quiche · quiche)
- [CVE-2025-8533](https://cve.now/CVE-2025-8533.md): Incorrect Authorization of XPC Service in Fantastical.app (CVSS 6.9, Flexibits Fantastical)
- [CVE-2025-35970](https://cve.now/CVE-2025-35970.md): On multiple products of SEIKO EPSON and FUJIFILM Corporation, the initial administrator password is easy to guess from the information avail (CVSS 7.5, SEIKO EPSON Multiple EPSON product · FUJIFILM FRONTIER DX40…)
- [CVE-2025-29866](https://cve.now/CVE-2025-29866.md): : External Control of File Name or Path vulnerability in TAGFREE X-Free Uploader XFU allows : Parameter Injection.This issue affects X-Free (CVSS 8.8, TAGFREE X-Free Uploader)
- [CVE-2025-8583](https://cve.now/CVE-2025-8583.md): Inappropriate implementation in Permissions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to perform UI spoofing via a c (CVSS 4.3, Google Chrome)
- [CVE-2025-8582](https://cve.now/CVE-2025-8582.md): Insufficient validation of untrusted input in Core in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to spoof the contents o (CVSS 4.3, Google Chrome)
- [CVE-2025-8581](https://cve.now/CVE-2025-8581.md): Inappropriate implementation in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage (CVSS 4.3, Google Chrome)
- [CVE-2025-8580](https://cve.now/CVE-2025-8580.md): Inappropriate implementation in Filesystems in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to perform UI spoofing via a c (CVSS 4.3, Google Chrome)
- [CVE-2025-8579](https://cve.now/CVE-2025-8579.md): Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to (CVSS 4.3, Google Chrome)
- [CVE-2025-8578](https://cve.now/CVE-2025-8578.md): Use after free in Cast in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafte (CVSS 8.8, Google Chrome)
- [CVE-2025-8577](https://cve.now/CVE-2025-8577.md): Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to (CVSS 4.3, Google Chrome)
- [CVE-2025-8576](https://cve.now/CVE-2025-8576.md): Use after free in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a (CVSS 8.8, Google Chrome)
- [CVE-2025-29865](https://cve.now/CVE-2025-29865.md): : Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TAGFREE X-Free Uploader XFU allows Path Tr (CVSS 8.7, TAGFREE X-Free Uploader)
- [CVE-2025-3770](https://cve.now/CVE-2025-3770.md): SMM IDT Privilege Escalation Vulnerability (CVSS 7.0, TianoCore EDK2)
- [CVE-2025-54784](https://cve.now/CVE-2025-54784.md): SuiteCRM is vulnerable to Cross Site Scripting (XSS) through its email viewer (CVSS 8.6, SuiteCRM)
- [CVE-2025-54783](https://cve.now/CVE-2025-54783.md): SuiteCRM: Reflected Cross Site Scripting (XSS) through HTTP Referrer header (CVSS 5.1, SuiteCRM)
- [CVE-2025-54798](https://cve.now/CVE-2025-54798.md): tmp does not restrict arbitrary temporary file / directory write via symbolic link \`dir\` parameter (CVSS 2.5, raszi node-tmp · tmp)
- [CVE-2025-54799](https://cve.now/CVE-2025-54799.md): Lego does not enforce HTTPS (CVSS 2.3, go-acme lego · github.com/go-acme/lego +2)
- [CVE-2025-54885](https://cve.now/CVE-2025-54885.md): Thinbus generates insufficient entropy: 252 bits vs minimum 256 bits (CVSS 6.9, simbo1905 thinbus-srp-npm · thinbus-srp)
- [CVE-2025-54882](https://cve.now/CVE-2025-54882.md): Himmelblau's Kerberos credential cache collection is world readable (CVSS 7.1, himmelblau-idm himmelblau)
- [CVE-2023-40992](https://cve.now/CVE-2023-40992.md): Hospital Management System 4 is vulnerable to a SQL injection in /Hospital-Management-System-master/func.php via the password2 parameter. (CVSS 6.5)
- [CVE-2023-41519](https://cve.now/CVE-2023-41519.md): Student Attendance Management System v1 was discovered to contain a cross-site scripting (XSS) vulnerability via the sessionName parameter a (CVSS 6.1)
- [CVE-2023-41520](https://cve.now/CVE-2023-41520.md): Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createClassArms.php via the clas (CVSS 8.8)
- [CVE-2023-41521](https://cve.now/CVE-2023-41521.md): Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createSessionTerm.php via the id (CVSS 8.8)
- [CVE-2023-41522](https://cve.now/CVE-2023-41522.md): Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createStudents.php via the Id, f (CVSS 8.8)
- [CVE-2023-41523](https://cve.now/CVE-2023-41523.md): Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the emailAddress parameter at createClas (CVSS 8.8)
- [CVE-2023-41524](https://cve.now/CVE-2023-41524.md): Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the username parameter at index.php. (CVSS 8.8)
- [CVE-2023-41525](https://cve.now/CVE-2023-41525.md): Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the patient\_contact parameter in patientsearch.php (CVSS 9.8)
- [CVE-2023-41526](https://cve.now/CVE-2023-41526.md): Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func1.php via the username3 and password3 (CVSS 9.8)
- [CVE-2023-41527](https://cve.now/CVE-2023-41527.md): Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the password2 parameter in func.php. (CVSS 9.8)
- [CVE-2023-41528](https://cve.now/CVE-2023-41528.md): Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in contact.php via the txtname, txtphone, and (CVSS 9.8)
- [CVE-2023-41529](https://cve.now/CVE-2023-41529.md): Hospital Management System v4 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in func2.php via the fname and l (CVSS 6.1)
- [CVE-2023-41530](https://cve.now/CVE-2023-41530.md): Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the app\_contact parameter in appsearch.php. (CVSS 9.8)
- [CVE-2023-41531](https://cve.now/CVE-2023-41531.md): Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func3.php via the username1 and password2 (CVSS 8.8)
- [CVE-2023-41532](https://cve.now/CVE-2023-41532.md): Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the doctor\_contact parameter in doctorsearch.php. (CVSS 8.8)
- [CVE-2024-42048](https://cve.now/CVE-2024-42048.md): OpenOrange Business Framework version 1.15.5 installs to a directory with overly permissive access control, allowing all authenticated users (CVSS 6.5)
- [CVE-2024-52680](https://cve.now/CVE-2024-52680.md): EyouCMS 1.6.7 is vulnerable to Cross Site Scripting (XSS) in /login.php?m=admin&c=System&a=web&lang=cn. (CVSS 6.1)
- [CVE-2024-55401](https://cve.now/CVE-2024-55401.md): An issue in 4C Strategies Exonaut before v22.4 allows attackers to execute a directory traversal. (CVSS 6.5)
- [CVE-2025-32094](https://cve.now/CVE-2025-32094.md): An issue was discovered in Akamai Ghost, as used for the Akamai CDN platform before 2025-03-26. (CVSS 4.0, AkamaiGhost)
- [CVE-2025-44779](https://cve.now/CVE-2025-44779.md): An issue in Ollama v0.1.33 allows attackers to delete arbitrary files via sending a crafted packet to the endpoint /api/pull. (CVSS 6.6, github.com/ollama/ollama)
- [CVE-2025-45765](https://cve.now/CVE-2025-45765.md): ruby-jwt v3.0.0.beta1 was discovered to contain weak encryption. (CVSS 9.1)
- [CVE-2025-47183](https://cve.now/CVE-2025-47183.md): In GStreamer through 1.26.1, the isomp4 plugin's qtdemux\_parse\_tree function may read past the end of a heap buffer while parsing an MP4 fil (CVSS 6.6)
- [CVE-2025-47188](https://cve.now/CVE-2025-47188.md): A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones through 6.4 SP4 (R6.4.0.4006), and the 6970 Conference Un (CVSS 6.5)
- [CVE-2025-47219](https://cve.now/CVE-2025-47219.md): In GStreamer through 1.26.1, the isomp4 plugin's qtdemux\_parse\_trak function may read past the end of a heap buffer while parsing an MP4 fil (CVSS 8.1)
- [CVE-2025-47806](https://cve.now/CVE-2025-47806.md): In GStreamer through 1.26.1, the subparse plugin's parse\_subrip\_time function may write data past the bounds of a stack buffer, leading to a (CVSS 5.6)
- [CVE-2025-47807](https://cve.now/CVE-2025-47807.md): In GStreamer through 1.26.1, the subparse plugin's subrip\_unescape\_formatting function may dereference a NULL pointer while parsing a subtit (CVSS 5.5)
- [CVE-2025-47808](https://cve.now/CVE-2025-47808.md): In GStreamer through 1.26.1, the subparse plugin's tmplayer\_parse\_line function may dereference a NULL pointer while parsing a subtitle file (CVSS 5.6)
- [CVE-2025-48709](https://cve.now/CVE-2025-48709.md): BMC Control-M/Server cleartext database credentials in process lists and logs (CVSS 4.8, BMC Control-M/Server)
- [CVE-2025-50675](https://cve.now/CVE-2025-50675.md): GPMAW 14, a bioinformatics software, has a critical vulnerability related to insecure file permissions in its installation directory. (CVSS 7.8)
- [CVE-2025-50692](https://cve.now/CVE-2025-50692.md): FoxCMS \<=v1.2.5 is vulnerable to Code Execution in admin/template\_file/editFile.html. (CVSS 9.8)
- [CVE-2025-50952](https://cve.now/CVE-2025-50952.md): openjpeg v 2.5.0 was discovered to contain a NULL pointer dereference via the component /openjp2/dwt.c. (CVSS 6.5)
- [CVE-2025-51533](https://cve.now/CVE-2025-51533.md): An Insecure Direct Object Reference (IDOR) in Sage DPW v2024\_12\_004 and below allows unauthorized attackers to access internal forms via sen (CVSS 5.3)
- [CVE-2025-51629](https://cve.now/CVE-2025-51629.md): A cross-site scripting (XSS) vulnerability in the PdfViewer component of Agenzia Impresa Eccobook 2.81.1 allows attackers to execute arbitra (CVSS 8.8)
- [CVE-2025-54392](https://cve.now/CVE-2025-54392.md): Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows XSS for authentication error data, a different vul (CVSS 6.1)
- [CVE-2025-54393](https://cve.now/CVE-2025-54393.md): Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows Static Code Injection. (CVSS 5.4)
- [CVE-2025-54394](https://cve.now/CVE-2025-54394.md): Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 has Insufficiently Protected Credentials for requests to (CVSS 5.3)
- [CVE-2025-54395](https://cve.now/CVE-2025-54395.md): Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows XSS for authentication configuration data. (CVSS 6.1)
- [CVE-2025-54396](https://cve.now/CVE-2025-54396.md): Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows SQL Injection. (CVSS 5.4)
- [CVE-2025-54397](https://cve.now/CVE-2025-54397.md): Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 inserts Sensitive Information Into Sent Data to authentic (CVSS 4.3)
- [CVE-2025-55133](https://cve.now/CVE-2025-55133.md): In Agora Foundation Agora fall23-Alpha1 before b087490, there is XSS via topicName in client/agora/public/js/editorManager.js. (CVSS 6.4, Agora Foundation Agora)
- [CVE-2025-55134](https://cve.now/CVE-2025-55134.md): In Agora Foundation Agora fall23-Alpha1 before b087490, there is XSS via tag in client/agora/public/js/editorManager.js. (CVSS 6.4, Agora Foundation Agora)
- [CVE-2025-55135](https://cve.now/CVE-2025-55135.md): In Agora Foundation Agora fall23-Alpha1 before 690ce56, there is XSS via a profile picture to server/controller/userController.js. (CVSS 6.4, Agora Foundation Agora)
- [CVE-2025-55136](https://cve.now/CVE-2025-55136.md): ERC (aka Emotion Recognition in Conversation) through 0.3 has insecure deserialization via a serialized object because jsonpickle is used. (CVSS 5.7, tae898 ERC)
- [CVE-2025-55137](https://cve.now/CVE-2025-55137.md): LinkJoin through 882f196 mishandles lacks type checking in password reset. (CVSS 7.4, Latkecrszy LinkJoin)
- [CVE-2025-55138](https://cve.now/CVE-2025-55138.md): LinkJoin through 882f196 mishandles token ownership in password reset. (CVSS 7.4, Latkecrszy LinkJoin)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-08-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.