CVEs published August 11, 2025
92 CVEs were published on August 11, 2025: 8 critical, 30 high.
- Published
- 92
- Critical
- 8
- High
- 30
- Medium
- 46
- Low
- 8
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 38
Most affected products
- Linksys RE6250 · Linksys RE6300 +4
- 13
- Mattermost Confluence Plugin · github.com/mattermost/matter…
- 13
- OpenHarmony
- 10
- NASM Netwide Assember
- 5
- JasPer
- 3
- Stirling-Tools Stirling-PDF
- 3
- YugabyteDB
- 3
- ABB Aspect
- 2
- Broadcom Symantec PGP Encryption
- 2
- jshERP
- 2
Critical 8
- CVE-2024-32640MasaCMS SQL Injection vulnerabilityMasaCMS
- CVE-2025-53187Unauthenticated RCEABB ASPECT
- CVE-2012-10040Openfiler v2.x NetworkCard Command ExecutionOpenfiler
- CVE-2012-10039ZEN Load Balancer Filelog Command ExecutionZEN Load Balancer
- CVE-2012-10038Auxilium RateMyPet Arbitrary File Upload RCEAuxilium RateMyPet
- CVE-2012-10037PhpTax pfilez Parameter Exec Remote Code InjectionPhpTax
- CVE-2025-88532100 Technology｜Official Document Management System - Authentication Bypass2100 Technology Official Document Management System
- CVE-2025-45146ModelCache for LLM through v0.2.0 was discovered to contain an deserialization vulnerability via the component /manager/data_manager.py.
High 30
- CVE-2025-55161Stirling-PDF SSRF vulnerability on /api/v1/convert/markdown/pdfStirling-Tools Stirling-PDF
- CVE-2025-55156PyLoad vulnerable to SQL Injection via API /json/add_package in add_links parameterpyload · pyload-ng
- CVE-2025-55150Stirling-PDF SSRF vulnerability on /api/v1/convert/html/pdfStirling-Tools Stirling-PDF
- CVE-2025-55151Stirling-PDF SSRF vulnerability on /api/v1/convert/file/pdfStirling-Tools Stirling-PDF
- CVE-2025-25235Omnissa Secure Email Gateway (SEG) updates address Server-Side Request Forgery (SSRF) vulnerabilityOmnissa Secure Email Gateway
- CVE-2025-55012Zed AI Agent Remote Code Executionzed-industries zed
- CVE-2025-54878Heap Buffer Overflow in NASA CryptoLib 1.4.0 `Crypto_TC_Check_IV_Setup`nasa CryptoLib
- CVE-2025-40920Catalyst::Authentication::Credential::HTTP versions 1.018 and earlier for Perl use insecurely generated noncesETHER Catalyst::Authentication::Credential::HTTP
- CVE-2025-54525Unexpected input to Create Channel Subscription endpoint causes DoS in Mattermost Confluence PluginMattermost Confluence Plugin · github.com/mattermost/matter…
- CVE-2025-54478Unauthenticated Channel Subscription Edit in Mattermost Confluence PluginMattermost Confluence Plugin · github.com/mattermost/matter…
- CVE-2025-52931Unexpected input to Update Channel Subscription endpoint causes DoS in Mattermost Confluence PluginMattermost Confluence Plugin · github.com/mattermost/matter…
- CVE-2025-44004Unauthenticated Channel Subscription Creation in Mattermost Confluence PluginMattermost Confluence Plugin · github.com/mattermost/matter…
- CVE-2025-7679Session ID Basic Auth BypassABB Aspect
- CVE-2025-25231Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability.Omnissa Workspace ONE UEM
- CVE-2025-54063Cherry Studio One-click Remote Code Execution Vulnerability through Custom URL HandlingCherryHQ cherry-studio
- CVE-2025-38499clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right usernsLinux
- CVE-2025-8863YugabyteDB diagnostic information was transmitted over HTTP, which could expose sensitive data during transmissionYugabyteDB
- CVE-2025-8862YugabyteDB has been collecting diagnostics information from YugabyteDB servers, which may include sensitive gflag configurations.YugabyteDB
- CVE-2025-8747Keras safe_mode bypass allows arbitrary code execution when loading a malicious model.Google Keras · keras
- CVE-2025-8833Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 langSwitchBack stack-based overflowLinksys RE6250 · Linksys RE6300 +4
- CVE-2025-8832Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setDMZ stack-based overflowLinksys RE6250 · Linksys RE6300 +4
- CVE-2025-8831Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 remoteManagement stack-based overflowLinksys RE6250 · Linksys RE6300 +4
- CVE-2025-8854bullet3 VHACD utility: stack-based buffer overflow in OFF parser (LoadOFF)bulletphysics bullet3
- CVE-2025-27128liteos_a has an UAF vulnerabilityOpenHarmony
- CVE-2025-24298liteos_a has an UAF vulnerabilityOpenHarmony
- CVE-2025-25278liteos_a has a race condition vulnerabilityOpenHarmony
- CVE-2025-27577liteos_a has a race condition vulnerabilityOpenHarmony
- CVE-2025-8826Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP_setBasicAuto um_rp_autochannel stack-based overflowLinksys RE6250 · Linksys RE6300 +4
- CVE-2025-8824Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setRIP stack-based overflowLinksys RE6250 · Linksys RE6300 +4
- CVE-2025-8822Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setOpMode algDisable stack-based overflowLinksys RE6250 · Linksys RE6300 +4
Medium, low and unrated 54
- CVE-2025-55159slab allows out-of-bounds access in `get_disjoint_mut` due to incorrect bounds checktokio-rs slab · slab
- CVE-2025-55157Vim heap use-after-free vulnerability when processing recursive tuple data typesvim
- CVE-2025-55158Vim double-free vulnerability during Vim9 script import operationsvim
- CVE-2025-54992OpenKilda XXE in SAML configurationtelstra open-kilda
- CVE-2025-8285Unauthorized Channel Subscription Creation in Mattermost Confluence PluginMattermost Confluence Plugin · github.com/mattermost/matter…
- CVE-2025-54463Unexpected Input to Cloud Webhook endpoint Causes DoS in Mattermost Confluence PluginMattermost Confluence Plugin · github.com/mattermost/matter…
- CVE-2025-54458Unauthorized Subscription Creation to Confluence Space in Mattermost Confluence PluginMattermost Confluence Plugin · github.com/mattermost/matter…
- CVE-2025-53910Unauthorized Channel Subscription Edit in Mattermost Confluence PluginMattermost Confluence Plugin · github.com/mattermost/matter…
- CVE-2025-53857Lack of Authorization on Get Channel Subscriptions for Autocomplete in Mattermost Confluence PluginMattermost Confluence Plugin · github.com/mattermost/matter…
- CVE-2025-53514Unexpected Input to Server Webhook endpoint Causes DoS in Mattermost Confluence PluginMattermost Confluence Plugin · github.com/mattermost/matter…
- CVE-2025-49221Unauthenticated Access to Channel Subscription in Mattermost Confluence PluginMattermost Confluence Plugin · github.com/mattermost/matter…
- CVE-2025-48731Unauthorized Subscription Edit to Confluence Space in Mattermost Confluence PluginMattermost Confluence Plugin · github.com/mattermost/matter…
- CVE-2025-44001Unauthorized Channel Subscription Read in Mattermost Confluence PluginMattermost Confluence Plugin · github.com/mattermost/matter…
- CVE-2025-7677DOS attack possibleABB Aspect
- CVE-2025-25229Omnissa Workspace ONE UEM contains a Server-Side Request Forgery (SSRF) Vulnerability.Omnissa Workspace ONE UEM
- CVE-2025-8866YugabyteDB Anywhere web server does not properly enforce authentication for the /metamaster/universe API endpoint.YugabyteDB Anywhere
- CVE-2025-8859code-projects eBlog Site File Upload save-slider.php unrestricted uploadcode-projects eBlog Site
- CVE-2025-8865The YugabyteDB tablet server contains a flaw in its YCQL query handling that can trigger a null pointer dereference when processing certain YugabyteDB
- CVE-2025-8852WuKongOpenSource WukongCRM API Response upload information exposureWuKongOpenSource WukongCRM
- CVE-2025-8851LibTIFF tiffcrop tiffcrop.c readSeparateStripsetoBuffer stack-based overflowLibTIFF
- CVE-2025-8864Shared Access Signature token is not masked in the backup configuration response and is also exposed in the yb_backup logsYugabyteDB Anywhere
- CVE-2025-8847yangzongzhuan RuoYi edit cross site scriptingyangzongzhuan RuoYi
- CVE-2025-8846NASM Netwide Assember parser.c parse_line stack-based overflowNASM Netwide Assember
- CVE-2025-8672TCC Bypass via Inherited Permissions in Bundled Interpreter in GIMP.appGIMP
- CVE-2025-8845NASM Netwide Assember nasm.c assemble_file stack-based overflowNASM Netwide Assember
- CVE-2025-8844NASM Netwide Assember preproc.c parse_smacro_template null pointer dereferenceNASM Netwide Assember
- CVE-2025-8843NASM Netwide Assember outmacho.c macho_no_dead_strip heap-based overflowNASM Netwide Assember
- CVE-2025-8842NASM Netwide Assember preproc.c do_directive use after freeNASM Netwide Assember
- CVE-2025-8841zlt2000 microservices-platform FileController.java upload unrestricted uploadzlt2000 microservices-platform
- CVE-2025-8840jshERP Endpoint deleteBatch improper authorizationjshERP
- CVE-2025-8839jshERP Endpoint addUser improper authorizationjshERP
- CVE-2025-8838WinterChenS my-site Backend admin preHandle improper authenticationWinterChenS my-site
- CVE-2025-8837JasPer JPEG2000 File jpc_dec.c jpc_dec_dump use after freeJasPer
- CVE-2025-8661Stored Cross-Site Scripting in Symantec PGP Encryption 11.0.1Broadcom Symantec PGP Encryption
- CVE-2025-8836JasPer JPEG2000 Encoder jpc_enc.c jpc_floorlog2 assertionJasPer
- CVE-2025-8660Privilege Escalation in Symantec PGP Encryption 11.0.1Broadcom Symantec PGP Encryption
- CVE-2025-8835JasPer Image Color Space Conversion jas_image.c jas_image_chclrspc null pointer dereferenceJasPer
- CVE-2025-8834JCG Link-net LW-N915R Wireless Basic Settings basic.asp cross site scriptingJCG Link-net LW-N915R
- CVE-2025-7965CBX Restaurant Booking <= 1.2.1 - Plugin Reset via CSRFCBX Restaurant Booking
- CVE-2025-8830Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setWan sub_3517C os command injectionLinksys RE6250 · Linksys RE6300 +4
- CVE-2025-8829Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP_setBasicAuto um_red os command injectionLinksys RE6250 · Linksys RE6300 +4
- CVE-2025-8828Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setIpv6 ipv6cmd os command injectionLinksys RE6250 · Linksys RE6300 +4
- CVE-2025-8827Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP_setBasicAuto um_inspect_cross_band os command injectionLinksys RE6250 · Linksys RE6300 +4
- CVE-2025-27562communication_dsoftbus has a missing release of memory vulnerabilityOpenHarmony
- CVE-2025-25212pasteboard has an improper input vulnerabilityOpenHarmony
- CVE-2025-24844communication_dsoftbus has a missing release of memory vulnerabilityOpenHarmony
- CVE-2025-27536arkcompiler_ets_runtime has a type confusion vulnerabilityOpenHarmony
- CVE-2025-26690communication dsoftbus has a NULL pointer vulnerabilityOpenHarmony
- CVE-2025-24925applications_settings has a missing release of memory vulnerabilityOpenHarmony
- CVE-2025-8825Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP_setBasicAuto os command injectionLinksys RE6250 · Linksys RE6300 +4
- CVE-2025-8823Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setDeviceName os command injectionLinksys RE6250 · Linksys RE6300 +4
- CVE-2025-8821Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP_setBasic os command injectionLinksys RE6250 · Linksys RE6300 +4
- CVE-2025-51823libcsp 2.0 is vulnerable to Buffer Overflow in the csp_eth_init() function due to improper handling of the ifname parameter.
- CVE-2025-51824libcsp 2.0 is vulnerable to Buffer Overflow in the csp_usart_open() function at drivers/usart/zephyr.c.