CVEs published August 19, 2025
173 CVEs were published on August 19, 2025: 19 critical, 45 high.
- Published
- 173
- Critical
- 19
- High
- 45
- Medium
- 80
- Low
- 3
- Unrated
- 26
- Now in CISA KEV
- 0
- Fix available
- 45
Most affected products
- Linux
- 59
- Liferay Portal · Liferay DXP +1
- 7
- Mozilla Firefox · Mozilla Thunderbird
- 7
- Mozilla Firefox for iOS
- 6
- Scada-LTS
- 6
- Mozilla Firefox
- 5
- SolidInvoice
- 5
- DogukanUrker FlaskBlog
- 4
- moonshine/moonshine
- 4
- itsourcecode Online Tour and Travel Management System
- 3
Critical 19
- CVE-2025-55031Passkey phishing within Bluetooth rangeMozilla Firefox for iOS · Mozilla Focus for iOS
- CVE-2025-54145Scanning a malicious URL utilizing Firefox's open-text scheme with the QR code scanner could load arbitrary websitesMozilla Firefox for iOS
- CVE-2025-54143Sandboxed iframes could allow local downloads despite sandbox restrictionsMozilla Firefox for iOS
- CVE-2025-8042Sandboxed iframe could start downloadsMozilla Firefox
- CVE-2025-9187Memory safety bugs fixed in Firefox 142 and Thunderbird 142Mozilla Firefox · Mozilla Thunderbird
- CVE-2025-9179Sandbox escape due to invalid pointer in the Audio/Video: GMP componentMozilla Firefox · Mozilla Thunderbird
- CVE-2025-55736flaskBlog allows arbitrary privilege escalationDogukanUrker FlaskBlog
- CVE-2025-55733DeepChat One-click Remote Code Execution through Custom URL HandlingThinkInAIXYZ deepchat
- CVE-2025-55306GenX_FX authentication bypass in JWT validationMouy-leng GenX_FX
- CVE-2025-55294Command Injection via `format` option in screenshot-desktopbencevans screenshot-desktop · screenshot-desktop
- CVE-2025-38566sunrpc: fix handling of server side tls alertsLinux
- CVE-2025-38561ksmbd: fix Preauh_HashValue race conditionLinux
- CVE-2025-38560x86/sev: Evict cache lines during SNP memory validationLinux
- CVE-2025-8723Cloudflare Image Resizing <= 1.5.6 - Missing Authentication to Unauthenticated Remote Code Execution via rest_pre_dispatch Hookmecanik Cloudflare Image Resizing – Optimize & Accelerate Y…
- CVE-2025-6758Real Spaces - WordPress Properties Directory Theme <= 3.6 - Unauthenticated Privilege Escalation to Administrator via 'imic_agent_register'imithemes Real Spaces - WordPress Properties Directory Theme
- CVE-2024-44373A Path Traversal vulnerability in AllSky v2023.05.01 through v2024.12.06_06 allows an unauthenticated attacker to create a webshell and remo
- CVE-2025-50567Saurus CMS Community Edition 4.7.1 contains a vulnerability in the custom DB::prepare() function, which uses preg_replace() with the depreca
- CVE-2025-51543An issue was discovered in Cicool builder 3.4.4 allowing attackers to reset the administrator's password via the /administrator/auth/reset_p
- CVE-2025-54336In Plesk Obsidian 18.0.70, _isAdminPasswordValid uses an == comparison.
High 45
- CVE-2025-55029Malicious scripts could spam popups for denial of service attacksMozilla Firefox for iOS
- CVE-2025-9184Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142Mozilla Firefox · Mozilla Thunderbird
- CVE-2025-9182Denial-of-service due to out-of-memory in the Graphics: WebRender componentMozilla Firefox · Mozilla Thunderbird
- CVE-2025-9185Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142Mozilla Firefox · Mozilla Thunderbird
- CVE-2025-9180Same-origin policy bypass in the Graphics: Canvas2D componentMozilla Firefox · Mozilla Thunderbird
- CVE-2025-8450Unrestricted File Upload in FileCatalystFortra FileCatalyst
- CVE-2025-38615fs/ntfs3: cancle set bad inode after removing name failsLinux
- CVE-2025-38614eventpoll: Fix semi-unbounded recursionLinux
- CVE-2025-38608bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktlsLinux
- CVE-2025-38607bpf: handle jset (if a & b ...) as a jump in CFG computationLinux
- CVE-2025-38604wifi: rtl818x: Kill URBs before clearing tx status queueLinux
- CVE-2025-38601wifi: ath11k: clear initialized flag for deinit-ed srng listsLinux
- CVE-2025-38600wifi: mt76: mt7925: fix off by one in mt7925_mcu_hw_scan()Linux
- CVE-2025-38599wifi: mt76: mt7996: Fix possible OOB access in mt7996_tx()Linux
- CVE-2025-38598drm/amdgpu: fix use-after-free in amdgpu_userq_suspend+0x51a/0x5a0Linux
- CVE-2025-38596drm/panthor: Fix UAF in panthor_gem_create_with_handle() debugfs codeLinux
- CVE-2025-38595xen: fix UAF in dmabuf_exp_from_pages()Linux
- CVE-2025-38594iommu/vt-d: Fix UAF on sva unbind with pending IOPFsLinux
- CVE-2025-38593Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()'Linux
- CVE-2025-38592Bluetooth: hci_devcd_dump: fix out-of-bounds via dev_coredumpvLinux
- CVE-2025-38590net/mlx5e: Remove skb secpath if xfrm state is not foundLinux
- CVE-2025-38586bpf, arm64: Fix fp initialization for exception boundaryLinux
- CVE-2025-38584padata: Fix pd UAF once and for allLinux
- CVE-2025-38582RDMA/hns: Fix double destruction of rsv_qpLinux
- CVE-2025-38580ext4: fix inode use after free in ext4_end_io_rsv_work()Linux
- CVE-2025-38579f2fs: fix KMSAN uninit-value in extent_info usageLinux
- CVE-2025-38578f2fs: fix to avoid UAF in f2fs_sync_inode_meta()Linux
- CVE-2025-38577f2fs: fix to avoid panic in f2fs_evict_inodeLinux
- CVE-2025-38574pptp: ensure minimal skb length in pptp_xmit()Linux
- CVE-2025-38573spi: cs42l43: Property entry should be a null-terminated arrayLinux
- CVE-2025-38572ipv6: reject malicious packets in ipv6_gso_segment()Linux
- CVE-2025-38571sunrpc: fix client side handling of tls alertsLinux
- CVE-2025-38570eth: fbnic: unlink NAPIs from queues on error to openLinux
- CVE-2025-38568net/sched: mqprio: fix stack out-of-bounds write in tc entry parsingLinux
- CVE-2025-38555usb: gadget : fix use-after-free in composite_dev_cleanup()Linux
- CVE-2025-38554mm: fix a UAF when vma->mm is freed after vma->vm_refcnt got droppedLinux
- CVE-2025-52478Stored XSS in n8n Form Trigger allows Account Takeover via injected iframe and video/sourcen8n-io n8n · n8n
- CVE-2025-9146Linksys E5600 Firmware checkFw.sh verify_gemtek_header risky encryptionLinksys E5600
- CVE-2025-4046Missing Authorization in Lexmark Cloud Services badge managementLexmark Cloud Services
- CVE-2025-4044XML External Entity Injection vulnerability in various Lexmark Universal DriversLexmark Universal Print Driver · Lexmark Printer Software G2
- CVE-2025-41689Wiesemann & Theis: Motherbox 3 allows unauthenticated read-only DB accessWiesemann & Theis Motherbox
- CVE-2025-7654Multiple Plugins By FunnelKit <= (Various Versions) - Authenticated (Contributor+) Sensitive Information Exposure to Privilege Escalation via Woofunnel Libraryamans2k FunnelKit Automations – Email Marketing Automation…
- CVE-2025-7670JS Archive List <= 6.1.5 - Unauthenticated SQL Injection via build_sql_where Functionskatox JS Archive List
- CVE-2025-8218Real Spaces - WordPress Properties Directory Theme <= 3.5 - Authenticated (Subscriber+) Privilege Escalation to Administrator via 'change_role_member'imithemes Real Spaces - WordPress Properties Directory Theme
- CVE-2025-50891The server-side backend for Adform Site Tracking before 2025-08-28 allows attackers to inject HTML or execute arbitrary code via cookie hijaAdform server-side backend for Site Tracking
Medium, low and unrated 109
- CVE-2025-9176neurobin shc Environment Variable shc.c make os command injectionneurobin shc
- CVE-2025-9175neurobin shc shc.c make stack-based overflowneurobin shc
- CVE-2025-9174neurobin shc Filename shc.c make os command injectionneurobin shc
- CVE-2025-9171SolidInvoice Clients clients cross site scriptingSolidInvoice
- CVE-2025-9170SolidInvoice Tax Rates rates cross site scriptingSolidInvoice
- CVE-2025-9169SolidInvoice Quote quotes cross site scriptingSolidInvoice
- CVE-2025-9168SolidInvoice Invoice Creation invoice cross site scriptingSolidInvoice
- CVE-2025-55033Drag and drop gestures in Focus for iOS could allow JavaScript links to be executed incorrectlyMozilla Focus for iOS
- CVE-2025-55032Focus incorrectly ignores Content-Disposition headers for some MIME typesMozilla Focus for iOS
- CVE-2025-55028JavaScript alerts could impede UI interaction or allow denial of service attacksMozilla Firefox for iOS
- CVE-2025-55030Content-Disposition headers incorrectly ignored for some MIME typesMozilla Firefox for iOS
- CVE-2025-54144Internal Firefox open-text URL scheme allowed loading of arbitrary URLsMozilla Firefox for iOS
- CVE-2025-8364Address bar spoofing using an blob URI on Firefox for AndroidMozilla Firefox
- CVE-2025-8041Incorrect URL truncation in Firefox for AndroidMozilla Firefox
- CVE-2025-9183Spoofing issue in the Address Bar componentMozilla Firefox
- CVE-2025-9186Spoofing issue in the Address Bar component of Firefox Focus for AndroidMozilla Firefox
- CVE-2025-9181Uninitialized memory in the JavaScript Engine componentMozilla Firefox · Mozilla Thunderbird
- CVE-2025-9167SolidInvoice Recurring Invoice recurring cross site scriptingSolidInvoice
- CVE-2025-9165LibTIFF tiffcmp tiffcmp.c InitCCITTFax3 memory leakLibTIFF
- CVE-2025-9157appneta tcpreplay tcprewrite edit_packet.c untrunc_packet use after freeappneta tcpreplay
- CVE-2025-55740Default Credentials in nginx-defender Configuration FilesAnipaleja nginx-defender · github.com/Anipaleja/nginx-defen…
- CVE-2025-43744A stored DOM-based Cross-Site Scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 202Liferay Portal · Liferay DXP +1
- CVE-2025-9156itsourcecode Sports Management System sports.php sql injectionitsourcecode Sports Management System
- CVE-2025-9155itsourcecode Online Tour and Travel Management System forget_password.php sql injectionitsourcecode Online Tour and Travel Management System
- CVE-2025-2988IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosureIBM Sterling B2B Integrator · IBM Sterling File Gateway
- CVE-2025-43743Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.Liferay Portal · Liferay DXP +1
- CVE-2025-55737flaskBlog arbitrary comment deleteDogukanUrker FlaskBlog
- CVE-2025-33008IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scriptingIBM Sterling B2B Integrator · IBM Sterling File Gateway
- CVE-2025-9154itsourcecode Online Tour and Travel Management System page-login.php sql injectionitsourcecode Online Tour and Travel Management System
- CVE-2025-55735flaskBlog Stored XSS VulnerabilityDogukanUrker FlaskBlog
- CVE-2025-43745A CSRF vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.7, 2025.Q1.0 through 2025.Q1.14, 2Liferay Portal · Liferay DXP +1
- CVE-2025-55734flaskBlo Authorization BypassDogukanUrker FlaskBlog
- CVE-2025-9153itsourcecode Online Tour and Travel Management System travellers.php unrestricted uploaditsourcecode Online Tour and Travel Management System
- CVE-2025-43737A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.8 and 2025.QLiferay Portal · Liferay DXP +1
- CVE-2025-31988HCL Digital Experience is susceptible to cross site scripting (XSS)HCL Software Digital Experience
- CVE-2025-55303Unauthorized third-party images in Astro’s _image endpointwithastro astro · astro +1
- CVE-2025-9151LiuYuYang01 ThriveX-Blog web updateJsonValueByName improper authorizationLiuYuYang01 ThriveX-Blog
- CVE-2025-55295qBit Manage Path Traversal VulnerabilityStuffAnThings qbit_manage
- CVE-2025-9150Surbowl dormitory-management-php violation_add.php sql injectionSurbowl dormitory-management-php
- CVE-2025-9149Wavlink WL-NU516U1 wireless.cgi sub_4032E4 command injectionWavlink WL-NU516U1
- CVE-2025-54881Mermaid improperly sanitizes of sequence diagram labels leading to XSSmermaid-js mermaid · mermaid
- CVE-2025-38613staging: gpib: fix unset padding field copy back to userspaceLinux
- CVE-2025-38612staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc()Linux
- CVE-2025-38610powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw()Linux
- CVE-2025-38609PM / devfreq: Check governor before using governor->nameLinux
- CVE-2025-38606wifi: ath12k: Avoid accessing uninitialized arvif->ar during beacon missLinux
- CVE-2025-38605wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type()Linux
- CVE-2025-38602iwlwifi: Add missing check for alloc_ordered_workqueueLinux
- CVE-2025-38597drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-portLinux
- CVE-2025-38591bpf: Reject narrower access to pointer ctx fieldsLinux
- CVE-2025-38589neighbour: Fix null-ptr-deref in neigh_flush_dev().Linux
- CVE-2025-38588ipv6: prevent infinite loop in rt6_nlmsg_size()Linux
- CVE-2025-38587ipv6: fix possible infinite loop in fib6_info_uses_dev()Linux
- CVE-2025-38585staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int()Linux
- CVE-2025-38583clk: xilinx: vcu: unregister pll_post only if registered correctlyLinux
- CVE-2025-38581crypto: ccp - Fix crash when rebind ccp device for ccp.koLinux
- CVE-2025-38576powerpc/eeh: Make EEH driver device hotplug safeLinux
- CVE-2025-38569benet: fix BUG when creating VFsLinux
- CVE-2025-38567nfsd: avoid ref leak in nfsd_open_local_fh()Linux
- CVE-2025-38565perf/core: Exit early on perf_mmap() failLinux
- CVE-2025-38564perf/core: Handle buffer mapping fail correctly in perf_mmap()Linux
- CVE-2025-38563perf/core: Prevent VMA split of buffer mappingsLinux
- CVE-2025-38562ksmbd: fix null pointer dereference error in generate_encryptionkeyLinux
- CVE-2025-38559platform/x86/intel/pmt: fix a crashlog NULL pointer accessLinux
- CVE-2025-38558usb: gadget: uvc: Initialize frame-based format color matching descriptorLinux
- CVE-2025-38557HID: apple: validate feature-report field count to prevent NULL pointer dereferenceLinux
- CVE-2025-38556HID: core: Harden s32ton() against conversion to 0 bitsLinux
- CVE-2025-9148CodePhiliaX Chat2DB JDBC Connection DataSourceController.java sql injectionCodePhiliaX Chat2DB
- CVE-2025-54880Mermaid does not properly sanitize architecture diagram iconText leading to XSSmermaid-js mermaid · mermaid
- CVE-2025-54411Discourse welcome banner user name XSSdiscourse
- CVE-2025-9147jasonclark getsemantic index.php cross site scriptingjasonclark getsemantic
- CVE-2025-43738A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.QLiferay Portal · Liferay DXP +1
- CVE-2025-9145Scada-LTS SVG File view_edit.shtm cross site scriptingScada-LTS
- CVE-2025-9144Scada-LTS publisher_edit.shtm cross site scriptingScada-LTS
- CVE-2025-9143Scada-LTS mailing_lists.shtm cross site scriptingScada-LTS
- CVE-2025-43739Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.6, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.Liferay Portal · Liferay DXP +1
- CVE-2024-45062A stack based buffer overflow vulnerability is present in OpenPrinting ippusbxd 1.34.OpenPrinting ippusbxd
- CVE-2025-9140Shanghai Lingdang Information Technology Lingdang CRM tabdetail_moduleSave.php sql injectionShanghai Lingdang Information Technology Lingdang CRM
- CVE-2025-4690AngularJS 'linky' filter ReDoSGoogle AngularJS
- CVE-2025-43740A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.3.120 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.8, Liferay Portal · Liferay DXP +1
- CVE-2025-9139Scada-LTS WatchListDwr.init.dwr information disclosureScada-LTS
- CVE-2025-9138Scada-LTS new cross site scriptingScada-LTS
- CVE-2025-9137Scada-LTS scheduled_events.shtm cross site scriptingScada-LTS
- CVE-2025-9136libretro RetroArch file_stream.c filestream_vscanf out-of-boundslibretro RetroArch
- CVE-2025-9135Verkehrsauskunft Österreich SmartRide/cleVVVer/BusBahnBim/Salzburg Verkehr AndroidManifest.xml improper export of android application componentsVerkehrsauskunft Österreich SmartRide · Verkehrsauskunft… +2
- CVE-2025-8783Contact Manager <= 8.6.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'title'kleor Contact Manager
- CVE-2025-9134AfterShip Package Tracker App com.aftership.AfterShip AndroidManifest.xml improper export of android application componentsAfterShip Package Tracker App
- CVE-2025-8567Nexter Blocks <= 4.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgetsposimyththemes Nexter Blocks – Gutenberg Blocks, Page Build…
- CVE-2025-41685SMA: Sunny Portal limited disclosure of personal data of registered users to an authenticated userSMA ennexos.sunnyportal.com
- CVE-2025-8622Flexible Maps <= 1.18.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Flexible Maps Shortcodewebaware Flexible Map
- CVE-2025-5417Rhdh: red hat developer hub user permissionsRed Hat Developer Hub
- CVE-2025-8357Media Library Assistant <= 3.27 - Authenticated (Author+) Limited File Deletiondglingren Media Library Assistant
- CVE-2025-7496WPC Smart Compare for WooCommerce <= 6.4.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scriptingwpclever WPC Smart Compare for WooCommerce
- CVE-2025-50434A security issue has been identified in Appian Enterprise Business Process Management version 25.3.
- CVE-2025-50461A deserialization vulnerability exists in Volcengine's verl 3.0.0, specifically in the scripts/model_merger.py script when using the "fsdp"
- CVE-2025-50579A CORS misconfiguration in Nginx Proxy Manager v2.12.3 allows unauthorized domains to access sensitive data, particularly JWT tokens, due to
- CVE-2025-50897A vulnerability exists in riscv-boom SonicBOOM 1.2 (BOOMv1.2) processor implementation, where valid virtual-to-physical address translations
- CVE-2025-50926Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id parameter in the List All Emai
- CVE-2025-50938Cross site scripting (XSS) vulnerability in Hustoj 2025-01-31 via the TID parameter to thread.php.
- CVE-2025-51487A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.5, allowing to execute arbitrary JavaScript by using "jmoonshine/moonshine
- CVE-2025-51488A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.4, allowing remote attackers to store and execute arbitmoonshine/moonshine
- CVE-2025-51489A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.5, allowing remote attackers to upload a malicious SVG moonshine/moonshine
- CVE-2025-51506In the smartLibrary component of the HRForecast Suite 0.4.3, a SQL injection vulnerability was discovered in the valueKey parameter.
- CVE-2025-51510MoonShine was discovered to contain a SQL injection vulnerability under the Blog -> Categories page when using the moonshine-tree-resource (moonshine/moonshine
- CVE-2025-51529Incorrect Access Control in the AJAX endpoint functionality in jonkastonka Cookies and Content Security Policy plugin through version 2.29 a
- CVE-2025-51539EzGED3 3.5.0 contains an unauthenticated arbitrary file read vulnerability due to improper access control and insufficient input validation
- CVE-2025-51540EzGED3 3.5.0 stores user passwords using an insecure hashing scheme: md5(md5(password)).
- CVE-2025-52337An authenticated arbitrary file upload vulnerability in the Content Explorer feature of LogicData eCommerce Framework v5.0.9.7000 allows att
- CVE-2025-52338An issue in the default configuration of the password reset function in LogicData eCommerce Framework v5.0.9.7000 allows attackers to bypass