# CVEs published 2025-08-11

92 CVEs were published on August 11, 2025: 8 critical, 30 high. Days are UTC.

- [CVE-2025-55159](https://cve.now/CVE-2025-55159.md): slab allows out-of-bounds access in \`get\_disjoint\_mut\` due to incorrect bounds check (CVSS 5.1, tokio-rs slab · slab)
- [CVE-2025-55157](https://cve.now/CVE-2025-55157.md): Vim heap use-after-free vulnerability when processing recursive tuple data types (CVSS 6.9, vim)
- [CVE-2025-55158](https://cve.now/CVE-2025-55158.md): Vim double-free vulnerability during Vim9 script import operations (CVSS 6.9, vim)
- [CVE-2025-55161](https://cve.now/CVE-2025-55161.md): Stirling-PDF SSRF vulnerability on /api/v1/convert/markdown/pdf (CVSS 8.6, Stirling-Tools Stirling-PDF)
- [CVE-2025-55156](https://cve.now/CVE-2025-55156.md): PyLoad vulnerable to SQL Injection via API /json/add\_package in add\_links parameter (CVSS 7.8, pyload · pyload-ng)
- [CVE-2025-55150](https://cve.now/CVE-2025-55150.md): Stirling-PDF SSRF vulnerability on /api/v1/convert/html/pdf (CVSS 8.6, Stirling-Tools Stirling-PDF)
- [CVE-2025-55151](https://cve.now/CVE-2025-55151.md): Stirling-PDF SSRF vulnerability on /api/v1/convert/file/pdf (CVSS 8.6, Stirling-Tools Stirling-PDF)
- [CVE-2025-25235](https://cve.now/CVE-2025-25235.md): Omnissa Secure Email Gateway (SEG) updates address Server-Side Request Forgery (SSRF) vulnerability (CVSS 8.6, Omnissa Secure Email Gateway)
- [CVE-2025-54992](https://cve.now/CVE-2025-54992.md): OpenKilda XXE in SAML configuration (CVSS 6.9, telstra open-kilda)
- [CVE-2025-55012](https://cve.now/CVE-2025-55012.md): Zed AI Agent Remote Code Execution (CVSS 8.5, zed-industries zed)
- [CVE-2025-54878](https://cve.now/CVE-2025-54878.md): Heap Buffer Overflow in NASA CryptoLib 1.4.0 \`Crypto\_TC\_Check\_IV\_Setup\` (CVSS 8.6, nasa CryptoLib)
- [CVE-2024-32640](https://cve.now/CVE-2024-32640.md): MasaCMS SQL Injection vulnerability (CVSS 9.8, MasaCMS)
- [CVE-2025-40920](https://cve.now/CVE-2025-40920.md): Catalyst::Authentication::Credential::HTTP versions 1.018 and earlier for Perl use insecurely generated nonces (CVSS 8.6, ETHER Catalyst::Authentication::Credential::HTTP)
- [CVE-2025-8285](https://cve.now/CVE-2025-8285.md): Unauthorized Channel Subscription Creation in Mattermost Confluence Plugin (CVSS 4.0, Mattermost Confluence Plugin · github.com/mattermost/matter…)
- [CVE-2025-54525](https://cve.now/CVE-2025-54525.md): Unexpected input to Create Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin (CVSS 7.5, Mattermost Confluence Plugin · github.com/mattermost/matter…)
- [CVE-2025-54478](https://cve.now/CVE-2025-54478.md): Unauthenticated Channel Subscription Edit in Mattermost Confluence Plugin (CVSS 7.2, Mattermost Confluence Plugin · github.com/mattermost/matter…)
- [CVE-2025-54463](https://cve.now/CVE-2025-54463.md): Unexpected Input to Cloud Webhook endpoint Causes DoS in Mattermost Confluence Plugin (CVSS 5.9, Mattermost Confluence Plugin · github.com/mattermost/matter…)
- [CVE-2025-54458](https://cve.now/CVE-2025-54458.md): Unauthorized Subscription Creation to Confluence Space in Mattermost Confluence Plugin (CVSS 5.0, Mattermost Confluence Plugin · github.com/mattermost/matter…)
- [CVE-2025-53910](https://cve.now/CVE-2025-53910.md): Unauthorized Channel Subscription Edit in Mattermost Confluence Plugin (CVSS 4.0, Mattermost Confluence Plugin · github.com/mattermost/matter…)
- [CVE-2025-53857](https://cve.now/CVE-2025-53857.md): Lack of Authorization on Get Channel Subscriptions for Autocomplete in Mattermost Confluence Plugin (CVSS 3.7, Mattermost Confluence Plugin · github.com/mattermost/matter…)
- [CVE-2025-53514](https://cve.now/CVE-2025-53514.md): Unexpected Input to Server Webhook endpoint Causes DoS in Mattermost Confluence Plugin (CVSS 5.9, Mattermost Confluence Plugin · github.com/mattermost/matter…)
- [CVE-2025-52931](https://cve.now/CVE-2025-52931.md): Unexpected input to Update Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin (CVSS 7.5, Mattermost Confluence Plugin · github.com/mattermost/matter…)
- [CVE-2025-49221](https://cve.now/CVE-2025-49221.md): Unauthenticated Access to Channel Subscription in Mattermost Confluence Plugin (CVSS 3.7, Mattermost Confluence Plugin · github.com/mattermost/matter…)
- [CVE-2025-48731](https://cve.now/CVE-2025-48731.md): Unauthorized Subscription Edit to Confluence Space in Mattermost Confluence Plugin (CVSS 6.4, Mattermost Confluence Plugin · github.com/mattermost/matter…)
- [CVE-2025-44004](https://cve.now/CVE-2025-44004.md): Unauthenticated Channel Subscription Creation in Mattermost Confluence Plugin (CVSS 7.2, Mattermost Confluence Plugin · github.com/mattermost/matter…)
- [CVE-2025-44001](https://cve.now/CVE-2025-44001.md): Unauthorized Channel Subscription Read in Mattermost Confluence Plugin (CVSS 4.0, Mattermost Confluence Plugin · github.com/mattermost/matter…)
- [CVE-2025-7679](https://cve.now/CVE-2025-7679.md): Session ID Basic Auth Bypass (CVSS 8.1, ABB Aspect)
- [CVE-2025-7677](https://cve.now/CVE-2025-7677.md): DOS attack possible (CVSS 5.9, ABB Aspect)
- [CVE-2025-25229](https://cve.now/CVE-2025-25229.md): Omnissa Workspace ONE UEM contains a Server-Side Request Forgery (SSRF) Vulnerability. (CVSS 5.4, Omnissa Workspace ONE UEM)
- [CVE-2025-25231](https://cve.now/CVE-2025-25231.md): Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. (CVSS 7.5, Omnissa Workspace ONE UEM)
- [CVE-2025-54063](https://cve.now/CVE-2025-54063.md): Cherry Studio One-click Remote Code Execution Vulnerability through Custom URL Handling (CVSS 8.0, CherryHQ cherry-studio)
- [CVE-2025-53187](https://cve.now/CVE-2025-53187.md): Unauthenticated RCE (CVSS 9.8, ABB ASPECT)
- [CVE-2025-8866](https://cve.now/CVE-2025-8866.md): YugabyteDB Anywhere web server does not properly enforce authentication for the /metamaster/universe API endpoint. (CVSS 5.1, YugabyteDB Anywhere)
- [CVE-2025-38499](https://cve.now/CVE-2025-38499.md): clone\_private\_mnt(): make sure that caller has CAP\_SYS\_ADMIN in the right userns (CVSS 7.8, Linux)
- [CVE-2012-10040](https://cve.now/CVE-2012-10040.md): Openfiler v2.x NetworkCard Command Execution (CVSS 9.4, Openfiler)
- [CVE-2012-10039](https://cve.now/CVE-2012-10039.md): ZEN Load Balancer Filelog Command Execution (CVSS 9.4, ZEN Load Balancer)
- [CVE-2012-10038](https://cve.now/CVE-2012-10038.md): Auxilium RateMyPet Arbitrary File Upload RCE (CVSS 9.3, Auxilium RateMyPet)
- [CVE-2012-10037](https://cve.now/CVE-2012-10037.md): PhpTax pfilez Parameter Exec Remote Code Injection (CVSS 9.3, PhpTax)
- [CVE-2025-8859](https://cve.now/CVE-2025-8859.md): code-projects eBlog Site File Upload save-slider.php unrestricted upload (CVSS 5.3, code-projects eBlog Site)
- [CVE-2025-8865](https://cve.now/CVE-2025-8865.md): The YugabyteDB tablet server contains a flaw in its YCQL query handling that can trigger a null pointer dereference when processing certain (CVSS 4.1, YugabyteDB)
- [CVE-2025-8852](https://cve.now/CVE-2025-8852.md): WuKongOpenSource WukongCRM API Response upload information exposure (CVSS 5.3, WuKongOpenSource WukongCRM)
- [CVE-2025-8851](https://cve.now/CVE-2025-8851.md): LibTIFF tiffcrop tiffcrop.c readSeparateStripsetoBuffer stack-based overflow (CVSS 4.8, LibTIFF)
- [CVE-2025-8864](https://cve.now/CVE-2025-8864.md): Shared Access Signature token is not masked in the backup configuration response and is also exposed in the yb\_backup logs (CVSS 6.8, YugabyteDB Anywhere)
- [CVE-2025-8863](https://cve.now/CVE-2025-8863.md): YugabyteDB diagnostic information was transmitted over HTTP, which could expose sensitive data during transmission (CVSS 7.0, YugabyteDB)
- [CVE-2025-8847](https://cve.now/CVE-2025-8847.md): yangzongzhuan RuoYi edit cross site scripting (CVSS 5.1, yangzongzhuan RuoYi)
- [CVE-2025-8862](https://cve.now/CVE-2025-8862.md): YugabyteDB has been collecting diagnostics information from YugabyteDB servers, which may include sensitive gflag configurations. (CVSS 7.0, YugabyteDB)
- [CVE-2025-8846](https://cve.now/CVE-2025-8846.md): NASM Netwide Assember parser.c parse\_line stack-based overflow (CVSS 4.8, NASM Netwide Assember)
- [CVE-2025-8672](https://cve.now/CVE-2025-8672.md): TCC Bypass via Inherited Permissions in Bundled Interpreter in GIMP.app (CVSS 4.8, GIMP)
- [CVE-2025-8845](https://cve.now/CVE-2025-8845.md): NASM Netwide Assember nasm.c assemble\_file stack-based overflow (CVSS 4.8, NASM Netwide Assember)
- [CVE-2025-8844](https://cve.now/CVE-2025-8844.md): NASM Netwide Assember preproc.c parse\_smacro\_template null pointer dereference (CVSS 4.8, NASM Netwide Assember)
- [CVE-2025-8843](https://cve.now/CVE-2025-8843.md): NASM Netwide Assember outmacho.c macho\_no\_dead\_strip heap-based overflow (CVSS 4.8, NASM Netwide Assember)
- [CVE-2025-8842](https://cve.now/CVE-2025-8842.md): NASM Netwide Assember preproc.c do\_directive use after free (CVSS 4.8, NASM Netwide Assember)
- [CVE-2025-8841](https://cve.now/CVE-2025-8841.md): zlt2000 microservices-platform FileController.java upload unrestricted upload (CVSS 5.3, zlt2000 microservices-platform)
- [CVE-2025-8840](https://cve.now/CVE-2025-8840.md): jshERP Endpoint deleteBatch improper authorization (CVSS 5.3, jshERP)
- [CVE-2025-8853](https://cve.now/CVE-2025-8853.md): 2100 Technology｜Official Document Management System - Authentication Bypass (CVSS 9.8, 2100 Technology Official Document Management System)
- [CVE-2025-8839](https://cve.now/CVE-2025-8839.md): jshERP Endpoint addUser improper authorization (CVSS 5.3, jshERP)
- [CVE-2025-8838](https://cve.now/CVE-2025-8838.md): WinterChenS my-site Backend admin preHandle improper authentication (CVSS 6.9, WinterChenS my-site)
- [CVE-2025-8837](https://cve.now/CVE-2025-8837.md): JasPer JPEG2000 File jpc\_dec.c jpc\_dec\_dump use after free (CVSS 4.8, JasPer)
- [CVE-2025-8661](https://cve.now/CVE-2025-8661.md): Stored Cross-Site Scripting in Symantec PGP Encryption 11.0.1 (CVSS 4.6, Broadcom Symantec PGP Encryption)
- [CVE-2025-8836](https://cve.now/CVE-2025-8836.md): JasPer JPEG2000 Encoder jpc\_enc.c jpc\_floorlog2 assertion (CVSS 4.8, JasPer)
- [CVE-2025-8747](https://cve.now/CVE-2025-8747.md): Keras safe\_mode bypass allows arbitrary code execution when loading a malicious model. (CVSS 8.6, Google Keras · keras)
- [CVE-2025-8660](https://cve.now/CVE-2025-8660.md): Privilege Escalation in Symantec PGP Encryption 11.0.1 (CVSS 5.6, Broadcom Symantec PGP Encryption)
- [CVE-2025-8835](https://cve.now/CVE-2025-8835.md): JasPer Image Color Space Conversion jas\_image.c jas\_image\_chclrspc null pointer dereference (CVSS 4.8, JasPer)
- [CVE-2025-8834](https://cve.now/CVE-2025-8834.md): JCG Link-net LW-N915R Wireless Basic Settings basic.asp cross site scripting (CVSS 4.8, JCG Link-net LW-N915R)
- [CVE-2025-8833](https://cve.now/CVE-2025-8833.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 langSwitchBack stack-based overflow (CVSS 8.7, Linksys RE6250 · Linksys RE6300 +4)
- [CVE-2025-7965](https://cve.now/CVE-2025-7965.md): CBX Restaurant Booking \<= 1.2.1 - Plugin Reset via CSRF (CVSS 4.3, CBX Restaurant Booking)
- [CVE-2025-8832](https://cve.now/CVE-2025-8832.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setDMZ stack-based overflow (CVSS 8.7, Linksys RE6250 · Linksys RE6300 +4)
- [CVE-2025-8831](https://cve.now/CVE-2025-8831.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 remoteManagement stack-based overflow (CVSS 8.7, Linksys RE6250 · Linksys RE6300 +4)
- [CVE-2025-8830](https://cve.now/CVE-2025-8830.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setWan sub\_3517C os command injection (CVSS 5.3, Linksys RE6250 · Linksys RE6300 +4)
- [CVE-2025-8854](https://cve.now/CVE-2025-8854.md): bullet3 VHACD utility: stack-based buffer overflow in OFF parser (LoadOFF) (CVSS 8.4, bulletphysics bullet3)
- [CVE-2025-8829](https://cve.now/CVE-2025-8829.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP\_setBasicAuto um\_red os command injection (CVSS 5.3, Linksys RE6250 · Linksys RE6300 +4)
- [CVE-2025-8828](https://cve.now/CVE-2025-8828.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setIpv6 ipv6cmd os command injection (CVSS 5.3, Linksys RE6250 · Linksys RE6300 +4)
- [CVE-2025-8827](https://cve.now/CVE-2025-8827.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP\_setBasicAuto um\_inspect\_cross\_band os command injection (CVSS 5.3, Linksys RE6250 · Linksys RE6300 +4)
- [CVE-2025-27562](https://cve.now/CVE-2025-27562.md): communication\_dsoftbus has a missing release of memory vulnerability (CVSS 3.3, OpenHarmony)
- [CVE-2025-27128](https://cve.now/CVE-2025-27128.md): liteos\_a has an UAF vulnerability (CVSS 8.4, OpenHarmony)
- [CVE-2025-25212](https://cve.now/CVE-2025-25212.md): pasteboard has an improper input vulnerability (CVSS 3.3, OpenHarmony)
- [CVE-2025-24844](https://cve.now/CVE-2025-24844.md): communication\_dsoftbus has a missing release of memory vulnerability (CVSS 3.3, OpenHarmony)
- [CVE-2025-27536](https://cve.now/CVE-2025-27536.md): arkcompiler\_ets\_runtime has a type confusion vulnerability (CVSS 3.3, OpenHarmony)
- [CVE-2025-26690](https://cve.now/CVE-2025-26690.md): communication dsoftbus has a NULL pointer vulnerability (CVSS 3.3, OpenHarmony)
- [CVE-2025-24925](https://cve.now/CVE-2025-24925.md): applications\_settings has a missing release of memory vulnerability (CVSS 3.3, OpenHarmony)
- [CVE-2025-24298](https://cve.now/CVE-2025-24298.md): liteos\_a has an UAF vulnerability (CVSS 8.4, OpenHarmony)
- [CVE-2025-25278](https://cve.now/CVE-2025-25278.md): liteos\_a has a race condition vulnerability (CVSS 8.4, OpenHarmony)
- [CVE-2025-27577](https://cve.now/CVE-2025-27577.md): liteos\_a has a race condition vulnerability (CVSS 8.4, OpenHarmony)
- [CVE-2025-8826](https://cve.now/CVE-2025-8826.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP\_setBasicAuto um\_rp\_autochannel stack-based overflow (CVSS 8.7, Linksys RE6250 · Linksys RE6300 +4)
- [CVE-2025-8825](https://cve.now/CVE-2025-8825.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP\_setBasicAuto os command injection (CVSS 5.3, Linksys RE6250 · Linksys RE6300 +4)
- [CVE-2025-8824](https://cve.now/CVE-2025-8824.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setRIP stack-based overflow (CVSS 8.7, Linksys RE6250 · Linksys RE6300 +4)
- [CVE-2025-8823](https://cve.now/CVE-2025-8823.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setDeviceName os command injection (CVSS 5.3, Linksys RE6250 · Linksys RE6300 +4)
- [CVE-2025-8822](https://cve.now/CVE-2025-8822.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setOpMode algDisable stack-based overflow (CVSS 8.7, Linksys RE6250 · Linksys RE6300 +4)
- [CVE-2025-8821](https://cve.now/CVE-2025-8821.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP\_setBasic os command injection (CVSS 5.3, Linksys RE6250 · Linksys RE6300 +4)
- [CVE-2025-45146](https://cve.now/CVE-2025-45146.md): ModelCache for LLM through v0.2.0 was discovered to contain an deserialization vulnerability via the component /manager/data\_manager.py. (CVSS 9.8)
- [CVE-2025-51823](https://cve.now/CVE-2025-51823.md): libcsp 2.0 is vulnerable to Buffer Overflow in the csp\_eth\_init() function due to improper handling of the ifname parameter. (CVSS 6.5)
- [CVE-2025-51824](https://cve.now/CVE-2025-51824.md): libcsp 2.0 is vulnerable to Buffer Overflow in the csp\_usart\_open() function at drivers/usart/zephyr.c. (CVSS 6.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-08-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.