# CVEs published 2025-08-19

173 CVEs were published on August 19, 2025: 19 critical, 45 high. Days are UTC.

- [CVE-2025-9176](https://cve.now/CVE-2025-9176.md): neurobin shc Environment Variable shc.c make os command injection (CVSS 4.8, neurobin shc)
- [CVE-2025-9175](https://cve.now/CVE-2025-9175.md): neurobin shc shc.c make stack-based overflow (CVSS 4.8, neurobin shc)
- [CVE-2025-9174](https://cve.now/CVE-2025-9174.md): neurobin shc Filename shc.c make os command injection (CVSS 4.8, neurobin shc)
- [CVE-2025-9171](https://cve.now/CVE-2025-9171.md): SolidInvoice Clients clients cross site scripting (CVSS 5.1, SolidInvoice)
- [CVE-2025-9170](https://cve.now/CVE-2025-9170.md): SolidInvoice Tax Rates rates cross site scripting (CVSS 5.1, SolidInvoice)
- [CVE-2025-9169](https://cve.now/CVE-2025-9169.md): SolidInvoice Quote quotes cross site scripting (CVSS 5.1, SolidInvoice)
- [CVE-2025-9168](https://cve.now/CVE-2025-9168.md): SolidInvoice Invoice Creation invoice cross site scripting (CVSS 5.1, SolidInvoice)
- [CVE-2025-55033](https://cve.now/CVE-2025-55033.md): Drag and drop gestures in Focus for iOS could allow JavaScript links to be executed incorrectly (CVSS 6.1, Mozilla Focus for iOS)
- [CVE-2025-55032](https://cve.now/CVE-2025-55032.md): Focus incorrectly ignores Content-Disposition headers for some MIME types (CVSS 6.1, Mozilla Focus for iOS)
- [CVE-2025-55029](https://cve.now/CVE-2025-55029.md): Malicious scripts could spam popups for denial of service attacks (CVSS 7.5, Mozilla Firefox for iOS)
- [CVE-2025-55031](https://cve.now/CVE-2025-55031.md): Passkey phishing within Bluetooth range (CVSS 9.8, Mozilla Firefox for iOS · Mozilla Focus for iOS)
- [CVE-2025-55028](https://cve.now/CVE-2025-55028.md): JavaScript alerts could impede UI interaction or allow denial of service attacks (CVSS 6.5, Mozilla Firefox for iOS)
- [CVE-2025-55030](https://cve.now/CVE-2025-55030.md): Content-Disposition headers incorrectly ignored for some MIME types (CVSS 6.1, Mozilla Firefox for iOS)
- [CVE-2025-54145](https://cve.now/CVE-2025-54145.md): Scanning a malicious URL utilizing Firefox's open-text scheme with the QR code scanner could load arbitrary websites (CVSS 9.1, Mozilla Firefox for iOS)
- [CVE-2025-54144](https://cve.now/CVE-2025-54144.md): Internal Firefox open-text URL scheme allowed loading of arbitrary URLs (CVSS 5.4, Mozilla Firefox for iOS)
- [CVE-2025-54143](https://cve.now/CVE-2025-54143.md): Sandboxed iframes could allow local downloads despite sandbox restrictions (CVSS 9.8, Mozilla Firefox for iOS)
- [CVE-2025-8364](https://cve.now/CVE-2025-8364.md): Address bar spoofing using an blob URI on Firefox for Android (CVSS 4.3, Mozilla Firefox)
- [CVE-2025-8042](https://cve.now/CVE-2025-8042.md): Sandboxed iframe could start downloads (CVSS 9.8, Mozilla Firefox)
- [CVE-2025-8041](https://cve.now/CVE-2025-8041.md): Incorrect URL truncation in Firefox for Android (CVSS 5.3, Mozilla Firefox)
- [CVE-2025-9184](https://cve.now/CVE-2025-9184.md): Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142 (CVSS 8.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-9187](https://cve.now/CVE-2025-9187.md): Memory safety bugs fixed in Firefox 142 and Thunderbird 142 (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-9183](https://cve.now/CVE-2025-9183.md): Spoofing issue in the Address Bar component (CVSS 6.5, Mozilla Firefox)
- [CVE-2025-9182](https://cve.now/CVE-2025-9182.md): Denial-of-service due to out-of-memory in the Graphics: WebRender component (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-9186](https://cve.now/CVE-2025-9186.md): Spoofing issue in the Address Bar component of Firefox Focus for Android (CVSS 6.5, Mozilla Firefox)
- [CVE-2025-9185](https://cve.now/CVE-2025-9185.md): Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142 (CVSS 8.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-9181](https://cve.now/CVE-2025-9181.md): Uninitialized memory in the JavaScript Engine component (CVSS 6.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-9180](https://cve.now/CVE-2025-9180.md): Same-origin policy bypass in the Graphics: Canvas2D component (CVSS 8.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-9179](https://cve.now/CVE-2025-9179.md): Sandbox escape due to invalid pointer in the Audio/Video: GMP component (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-9167](https://cve.now/CVE-2025-9167.md): SolidInvoice Recurring Invoice recurring cross site scripting (CVSS 5.1, SolidInvoice)
- [CVE-2025-9165](https://cve.now/CVE-2025-9165.md): LibTIFF tiffcmp tiffcmp.c InitCCITTFax3 memory leak (CVSS 2.0, LibTIFF)
- [CVE-2025-9157](https://cve.now/CVE-2025-9157.md): appneta tcpreplay tcprewrite edit\_packet.c untrunc\_packet use after free (CVSS 4.8, appneta tcpreplay)
- [CVE-2025-55740](https://cve.now/CVE-2025-55740.md): Default Credentials in nginx-defender Configuration Files (CVSS 6.5, Anipaleja nginx-defender · github.com/Anipaleja/nginx-defen…)
- [CVE-2025-43744](https://cve.now/CVE-2025-43744.md): A stored DOM-based Cross-Site Scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 202 (CVSS 5.1, Liferay Portal · Liferay DXP +1)
- [CVE-2025-9156](https://cve.now/CVE-2025-9156.md): itsourcecode Sports Management System sports.php sql injection (CVSS 6.9, itsourcecode Sports Management System)
- [CVE-2025-9155](https://cve.now/CVE-2025-9155.md): itsourcecode Online Tour and Travel Management System forget\_password.php sql injection (CVSS 6.9, itsourcecode Online Tour and Travel Management System)
- [CVE-2025-2988](https://cve.now/CVE-2025-2988.md): IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure (CVSS 2.7, IBM Sterling B2B Integrator · IBM Sterling File Gateway)
- [CVE-2025-43743](https://cve.now/CVE-2025-43743.md): Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3. (CVSS 5.3, Liferay Portal · Liferay DXP +1)
- [CVE-2025-55737](https://cve.now/CVE-2025-55737.md): flaskBlog arbitrary comment delete (CVSS 6.9, DogukanUrker FlaskBlog)
- [CVE-2025-55736](https://cve.now/CVE-2025-55736.md): flaskBlog allows arbitrary privilege escalation (CVSS 9.3, DogukanUrker FlaskBlog)
- [CVE-2025-33008](https://cve.now/CVE-2025-33008.md): IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting (CVSS 5.4, IBM Sterling B2B Integrator · IBM Sterling File Gateway)
- [CVE-2025-9154](https://cve.now/CVE-2025-9154.md): itsourcecode Online Tour and Travel Management System page-login.php sql injection (CVSS 6.9, itsourcecode Online Tour and Travel Management System)
- [CVE-2025-55735](https://cve.now/CVE-2025-55735.md): flaskBlog Stored XSS Vulnerability (CVSS 5.3, DogukanUrker FlaskBlog)
- [CVE-2025-43745](https://cve.now/CVE-2025-43745.md): A CSRF vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.7, 2025.Q1.0 through 2025.Q1.14, 2 (CVSS 6.9, Liferay Portal · Liferay DXP +1)
- [CVE-2025-55734](https://cve.now/CVE-2025-55734.md): flaskBlo Authorization Bypass (CVSS 6.9, DogukanUrker FlaskBlog)
- [CVE-2025-9153](https://cve.now/CVE-2025-9153.md): itsourcecode Online Tour and Travel Management System travellers.php unrestricted upload (CVSS 5.3, itsourcecode Online Tour and Travel Management System)
- [CVE-2025-55733](https://cve.now/CVE-2025-55733.md): DeepChat One-click Remote Code Execution through Custom URL Handling (CVSS 9.7, ThinkInAIXYZ deepchat)
- [CVE-2025-55306](https://cve.now/CVE-2025-55306.md): GenX\_FX authentication bypass in JWT validation (CVSS 9.8, Mouy-leng GenX\_FX)
- [CVE-2025-43737](https://cve.now/CVE-2025-43737.md): A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.8 and 2025.Q (CVSS 5.1, Liferay Portal · Liferay DXP +1)
- [CVE-2025-31988](https://cve.now/CVE-2025-31988.md): HCL Digital Experience is susceptible to cross site scripting (XSS) (CVSS 4.9, HCL Software Digital Experience)
- [CVE-2025-55303](https://cve.now/CVE-2025-55303.md): Unauthorized third-party images in Astro’s \_image endpoint (CVSS 6.9, withastro astro · astro +1)
- [CVE-2025-9151](https://cve.now/CVE-2025-9151.md): LiuYuYang01 ThriveX-Blog web updateJsonValueByName improper authorization (CVSS 5.3, LiuYuYang01 ThriveX-Blog)
- [CVE-2025-8450](https://cve.now/CVE-2025-8450.md): Unrestricted File Upload in FileCatalyst (CVSS 8.2, Fortra FileCatalyst)
- [CVE-2025-55295](https://cve.now/CVE-2025-55295.md): qBit Manage Path Traversal Vulnerability (CVSS 6.5, StuffAnThings qbit\_manage)
- [CVE-2025-55294](https://cve.now/CVE-2025-55294.md): Command Injection via \`format\` option in screenshot-desktop (CVSS 9.8, bencevans screenshot-desktop · screenshot-desktop)
- [CVE-2025-9150](https://cve.now/CVE-2025-9150.md): Surbowl dormitory-management-php violation\_add.php sql injection (CVSS 6.9, Surbowl dormitory-management-php)
- [CVE-2025-9149](https://cve.now/CVE-2025-9149.md): Wavlink WL-NU516U1 wireless.cgi sub\_4032E4 command injection (CVSS 5.3, Wavlink WL-NU516U1)
- [CVE-2025-54881](https://cve.now/CVE-2025-54881.md): Mermaid improperly sanitizes of sequence diagram labels leading to XSS (CVSS 5.3, mermaid-js mermaid · mermaid)
- [CVE-2025-38615](https://cve.now/CVE-2025-38615.md): fs/ntfs3: cancle set bad inode after removing name fails (CVSS 7.8, Linux)
- [CVE-2025-38614](https://cve.now/CVE-2025-38614.md): eventpoll: Fix semi-unbounded recursion (CVSS 7.8, Linux)
- [CVE-2025-38613](https://cve.now/CVE-2025-38613.md): staging: gpib: fix unset padding field copy back to userspace (no CVSS, Linux)
- [CVE-2025-38612](https://cve.now/CVE-2025-38612.md): staging: fbtft: fix potential memory leak in fbtft\_framebuffer\_alloc() (no CVSS, Linux)
- [CVE-2025-38610](https://cve.now/CVE-2025-38610.md): powercap: dtpm\_cpu: Fix NULL pointer dereference in get\_pd\_power\_uw() (no CVSS, Linux)
- [CVE-2025-38609](https://cve.now/CVE-2025-38609.md): PM / devfreq: Check governor before using governor-\>name (no CVSS, Linux)
- [CVE-2025-38608](https://cve.now/CVE-2025-38608.md): bpf, ktls: Fix data corruption when using bpf\_msg\_pop\_data() in ktls (CVSS 8.6, Linux)
- [CVE-2025-38607](https://cve.now/CVE-2025-38607.md): bpf: handle jset (if a & b ...) as a jump in CFG computation (CVSS 7.8, Linux)
- [CVE-2025-38606](https://cve.now/CVE-2025-38606.md): wifi: ath12k: Avoid accessing uninitialized arvif-\>ar during beacon miss (no CVSS, Linux)
- [CVE-2025-38605](https://cve.now/CVE-2025-38605.md): wifi: ath12k: Pass ab pointer directly to ath12k\_dp\_tx\_get\_encap\_type() (no CVSS, Linux)
- [CVE-2025-38604](https://cve.now/CVE-2025-38604.md): wifi: rtl818x: Kill URBs before clearing tx status queue (CVSS 7.8, Linux)
- [CVE-2025-38602](https://cve.now/CVE-2025-38602.md): iwlwifi: Add missing check for alloc\_ordered\_workqueue (no CVSS, Linux)
- [CVE-2025-38601](https://cve.now/CVE-2025-38601.md): wifi: ath11k: clear initialized flag for deinit-ed srng lists (CVSS 8.8, Linux)
- [CVE-2025-38600](https://cve.now/CVE-2025-38600.md): wifi: mt76: mt7925: fix off by one in mt7925\_mcu\_hw\_scan() (CVSS 8.8, Linux)
- [CVE-2025-38599](https://cve.now/CVE-2025-38599.md): wifi: mt76: mt7996: Fix possible OOB access in mt7996\_tx() (CVSS 8.8, Linux)
- [CVE-2025-38598](https://cve.now/CVE-2025-38598.md): drm/amdgpu: fix use-after-free in amdgpu\_userq\_suspend+0x51a/0x5a0 (CVSS 7.8, Linux)
- [CVE-2025-38597](https://cve.now/CVE-2025-38597.md): drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (no CVSS, Linux)
- [CVE-2025-38596](https://cve.now/CVE-2025-38596.md): drm/panthor: Fix UAF in panthor\_gem\_create\_with\_handle() debugfs code (CVSS 7.8, Linux)
- [CVE-2025-38595](https://cve.now/CVE-2025-38595.md): xen: fix UAF in dmabuf\_exp\_from\_pages() (CVSS 7.8, Linux)
- [CVE-2025-38594](https://cve.now/CVE-2025-38594.md): iommu/vt-d: Fix UAF on sva unbind with pending IOPFs (CVSS 7.8, Linux)
- [CVE-2025-38593](https://cve.now/CVE-2025-38593.md): Bluetooth: hci\_sync: fix double free in 'hci\_discovery\_filter\_clear()' (CVSS 7.8, Linux)
- [CVE-2025-38592](https://cve.now/CVE-2025-38592.md): Bluetooth: hci\_devcd\_dump: fix out-of-bounds via dev\_coredumpv (CVSS 8.8, Linux)
- [CVE-2025-38591](https://cve.now/CVE-2025-38591.md): bpf: Reject narrower access to pointer ctx fields (no CVSS, Linux)
- [CVE-2025-38590](https://cve.now/CVE-2025-38590.md): net/mlx5e: Remove skb secpath if xfrm state is not found (CVSS 7.5, Linux)
- [CVE-2025-38589](https://cve.now/CVE-2025-38589.md): neighbour: Fix null-ptr-deref in neigh\_flush\_dev(). (no CVSS, Linux)
- [CVE-2025-38588](https://cve.now/CVE-2025-38588.md): ipv6: prevent infinite loop in rt6\_nlmsg\_size() (no CVSS, Linux)
- [CVE-2025-38587](https://cve.now/CVE-2025-38587.md): ipv6: fix possible infinite loop in fib6\_info\_uses\_dev() (no CVSS, Linux)
- [CVE-2025-38586](https://cve.now/CVE-2025-38586.md): bpf, arm64: Fix fp initialization for exception boundary (CVSS 7.8, Linux)
- [CVE-2025-38585](https://cve.now/CVE-2025-38585.md): staging: media: atomisp: Fix stack buffer overflow in gmin\_get\_var\_int() (no CVSS, Linux)
- [CVE-2025-38584](https://cve.now/CVE-2025-38584.md): padata: Fix pd UAF once and for all (CVSS 7.0, Linux)
- [CVE-2025-38583](https://cve.now/CVE-2025-38583.md): clk: xilinx: vcu: unregister pll\_post only if registered correctly (no CVSS, Linux)
- [CVE-2025-38582](https://cve.now/CVE-2025-38582.md): RDMA/hns: Fix double destruction of rsv\_qp (CVSS 7.8, Linux)
- [CVE-2025-38581](https://cve.now/CVE-2025-38581.md): crypto: ccp - Fix crash when rebind ccp device for ccp.ko (no CVSS, Linux)
- [CVE-2025-38580](https://cve.now/CVE-2025-38580.md): ext4: fix inode use after free in ext4\_end\_io\_rsv\_work() (CVSS 7.8, Linux)
- [CVE-2025-38579](https://cve.now/CVE-2025-38579.md): f2fs: fix KMSAN uninit-value in extent\_info usage (CVSS 7.8, Linux)
- [CVE-2025-38578](https://cve.now/CVE-2025-38578.md): f2fs: fix to avoid UAF in f2fs\_sync\_inode\_meta() (CVSS 7.8, Linux)
- [CVE-2025-38577](https://cve.now/CVE-2025-38577.md): f2fs: fix to avoid panic in f2fs\_evict\_inode (CVSS 7.8, Linux)
- [CVE-2025-38576](https://cve.now/CVE-2025-38576.md): powerpc/eeh: Make EEH driver device hotplug safe (no CVSS, Linux)
- [CVE-2025-38574](https://cve.now/CVE-2025-38574.md): pptp: ensure minimal skb length in pptp\_xmit() (CVSS 8.6, Linux)
- [CVE-2025-38573](https://cve.now/CVE-2025-38573.md): spi: cs42l43: Property entry should be a null-terminated array (CVSS 7.3, Linux)
- [CVE-2025-38572](https://cve.now/CVE-2025-38572.md): ipv6: reject malicious packets in ipv6\_gso\_segment() (CVSS 7.8, Linux)
- [CVE-2025-38571](https://cve.now/CVE-2025-38571.md): sunrpc: fix client side handling of tls alerts (CVSS 8.2, Linux)
- [CVE-2025-38570](https://cve.now/CVE-2025-38570.md): eth: fbnic: unlink NAPIs from queues on error to open (CVSS 7.8, Linux)
- [CVE-2025-38569](https://cve.now/CVE-2025-38569.md): benet: fix BUG when creating VFs (no CVSS, Linux)
- [CVE-2025-38568](https://cve.now/CVE-2025-38568.md): net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CVSS 7.8, Linux)
- [CVE-2025-38567](https://cve.now/CVE-2025-38567.md): nfsd: avoid ref leak in nfsd\_open\_local\_fh() (no CVSS, Linux)
- [CVE-2025-38566](https://cve.now/CVE-2025-38566.md): sunrpc: fix handling of server side tls alerts (CVSS 9.8, Linux)
- [CVE-2025-38565](https://cve.now/CVE-2025-38565.md): perf/core: Exit early on perf\_mmap() fail (no CVSS, Linux)
- [CVE-2025-38564](https://cve.now/CVE-2025-38564.md): perf/core: Handle buffer mapping fail correctly in perf\_mmap() (no CVSS, Linux)
- [CVE-2025-38563](https://cve.now/CVE-2025-38563.md): perf/core: Prevent VMA split of buffer mappings (no CVSS, Linux)
- [CVE-2025-38562](https://cve.now/CVE-2025-38562.md): ksmbd: fix null pointer dereference error in generate\_encryptionkey (no CVSS, Linux)
- [CVE-2025-38561](https://cve.now/CVE-2025-38561.md): ksmbd: fix Preauh\_HashValue race condition (CVSS 9.8, Linux)
- [CVE-2025-38560](https://cve.now/CVE-2025-38560.md): x86/sev: Evict cache lines during SNP memory validation (CVSS 9.3, Linux)
- [CVE-2025-38559](https://cve.now/CVE-2025-38559.md): platform/x86/intel/pmt: fix a crashlog NULL pointer access (no CVSS, Linux)
- [CVE-2025-38558](https://cve.now/CVE-2025-38558.md): usb: gadget: uvc: Initialize frame-based format color matching descriptor (no CVSS, Linux)
- [CVE-2025-38557](https://cve.now/CVE-2025-38557.md): HID: apple: validate feature-report field count to prevent NULL pointer dereference (no CVSS, Linux)
- [CVE-2025-38556](https://cve.now/CVE-2025-38556.md): HID: core: Harden s32ton() against conversion to 0 bits (no CVSS, Linux)
- [CVE-2025-38555](https://cve.now/CVE-2025-38555.md): usb: gadget : fix use-after-free in composite\_dev\_cleanup() (CVSS 7.8, Linux)
- [CVE-2025-38554](https://cve.now/CVE-2025-38554.md): mm: fix a UAF when vma-\>mm is freed after vma-\>vm\_refcnt got dropped (CVSS 7.8, Linux)
- [CVE-2025-9148](https://cve.now/CVE-2025-9148.md): CodePhiliaX Chat2DB JDBC Connection DataSourceController.java sql injection (CVSS 5.3, CodePhiliaX Chat2DB)
- [CVE-2025-54880](https://cve.now/CVE-2025-54880.md): Mermaid does not properly sanitize architecture diagram iconText leading to XSS (CVSS 5.1, mermaid-js mermaid · mermaid)
- [CVE-2025-54411](https://cve.now/CVE-2025-54411.md): Discourse welcome banner user name XSS (CVSS 2.4, discourse)
- [CVE-2025-52478](https://cve.now/CVE-2025-52478.md): Stored XSS in n8n Form Trigger allows Account Takeover via injected iframe and video/source (CVSS 8.7, n8n-io n8n · n8n)
- [CVE-2025-9147](https://cve.now/CVE-2025-9147.md): jasonclark getsemantic index.php cross site scripting (CVSS 5.1, jasonclark getsemantic)
- [CVE-2025-9146](https://cve.now/CVE-2025-9146.md): Linksys E5600 Firmware checkFw.sh verify\_gemtek\_header risky encryption (CVSS 7.5, Linksys E5600)
- [CVE-2025-43738](https://cve.now/CVE-2025-43738.md): A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q (CVSS 5.1, Liferay Portal · Liferay DXP +1)
- [CVE-2025-9145](https://cve.now/CVE-2025-9145.md): Scada-LTS SVG File view\_edit.shtm cross site scripting (CVSS 5.1, Scada-LTS)
- [CVE-2025-9144](https://cve.now/CVE-2025-9144.md): Scada-LTS publisher\_edit.shtm cross site scripting (CVSS 5.1, Scada-LTS)
- [CVE-2025-9143](https://cve.now/CVE-2025-9143.md): Scada-LTS mailing\_lists.shtm cross site scripting (CVSS 5.1, Scada-LTS)
- [CVE-2025-43739](https://cve.now/CVE-2025-43739.md): Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.6, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3. (CVSS 5.3, Liferay Portal · Liferay DXP +1)
- [CVE-2024-45062](https://cve.now/CVE-2024-45062.md): A stack based buffer overflow vulnerability is present in OpenPrinting ippusbxd 1.34. (CVSS 6.4, OpenPrinting ippusbxd)
- [CVE-2025-9140](https://cve.now/CVE-2025-9140.md): Shanghai Lingdang Information Technology Lingdang CRM tabdetail\_moduleSave.php sql injection (CVSS 5.3, Shanghai Lingdang Information Technology Lingdang CRM)
- [CVE-2025-4690](https://cve.now/CVE-2025-4690.md): AngularJS 'linky' filter ReDoS (CVSS 4.3, Google AngularJS)
- [CVE-2025-4046](https://cve.now/CVE-2025-4046.md): Missing Authorization in Lexmark Cloud Services badge management (CVSS 8.5, Lexmark Cloud Services)
- [CVE-2025-4044](https://cve.now/CVE-2025-4044.md): XML External Entity Injection vulnerability in various Lexmark Universal Drivers (CVSS 8.2, Lexmark Universal Print Driver · Lexmark Printer Software G2)
- [CVE-2025-43740](https://cve.now/CVE-2025-43740.md): A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.3.120 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.8, (CVSS 4.6, Liferay Portal · Liferay DXP +1)
- [CVE-2025-9139](https://cve.now/CVE-2025-9139.md): Scada-LTS WatchListDwr.init.dwr information disclosure (CVSS 5.3, Scada-LTS)
- [CVE-2025-9138](https://cve.now/CVE-2025-9138.md): Scada-LTS new cross site scripting (CVSS 5.1, Scada-LTS)
- [CVE-2025-9137](https://cve.now/CVE-2025-9137.md): Scada-LTS scheduled\_events.shtm cross site scripting (CVSS 5.1, Scada-LTS)
- [CVE-2025-9136](https://cve.now/CVE-2025-9136.md): libretro RetroArch file\_stream.c filestream\_vscanf out-of-bounds (CVSS 4.8, libretro RetroArch)
- [CVE-2025-9135](https://cve.now/CVE-2025-9135.md): Verkehrsauskunft Österreich SmartRide/cleVVVer/BusBahnBim/Salzburg Verkehr AndroidManifest.xml improper export of android application components (CVSS 4.8, Verkehrsauskunft Österreich SmartRide · Verkehrsauskunft… +2)
- [CVE-2025-8783](https://cve.now/CVE-2025-8783.md): Contact Manager \<= 8.6.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'title' (CVSS 4.4, kleor Contact Manager)
- [CVE-2025-9134](https://cve.now/CVE-2025-9134.md): AfterShip Package Tracker App com.aftership.AfterShip AndroidManifest.xml improper export of android application components (CVSS 4.8, AfterShip Package Tracker App)
- [CVE-2025-8567](https://cve.now/CVE-2025-8567.md): Nexter Blocks \<= 4.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets (CVSS 6.4, posimyththemes Nexter Blocks – Gutenberg Blocks, Page Build…)
- [CVE-2025-41685](https://cve.now/CVE-2025-41685.md): SMA: Sunny Portal limited disclosure of personal data of registered users to an authenticated user (CVSS 6.5, SMA ennexos.sunnyportal.com)
- [CVE-2025-41689](https://cve.now/CVE-2025-41689.md): Wiesemann & Theis: Motherbox 3 allows unauthenticated read-only DB access (CVSS 7.5, Wiesemann & Theis Motherbox)
- [CVE-2025-8622](https://cve.now/CVE-2025-8622.md): Flexible Maps \<= 1.18.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Flexible Maps Shortcode (CVSS 6.4, webaware Flexible Map)
- [CVE-2025-7654](https://cve.now/CVE-2025-7654.md): Multiple Plugins By FunnelKit \<= (Various Versions) - Authenticated (Contributor+) Sensitive Information Exposure to Privilege Escalation via Woofunnel Library (CVSS 8.8, amans2k FunnelKit Automations – Email Marketing Automation…)
- [CVE-2025-7670](https://cve.now/CVE-2025-7670.md): JS Archive List \<= 6.1.5 - Unauthenticated SQL Injection via build\_sql\_where Function (CVSS 7.5, skatox JS Archive List)
- [CVE-2025-8723](https://cve.now/CVE-2025-8723.md): Cloudflare Image Resizing \<= 1.5.6 - Missing Authentication to Unauthenticated Remote Code Execution via rest\_pre\_dispatch Hook (CVSS 9.8, mecanik Cloudflare Image Resizing – Optimize & Accelerate Y…)
- [CVE-2025-6758](https://cve.now/CVE-2025-6758.md): Real Spaces - WordPress Properties Directory Theme \<= 3.6 - Unauthenticated Privilege Escalation to Administrator via 'imic\_agent\_register' (CVSS 9.8, imithemes Real Spaces - WordPress Properties Directory Theme)
- [CVE-2025-8218](https://cve.now/CVE-2025-8218.md): Real Spaces - WordPress Properties Directory Theme \<= 3.5 - Authenticated (Subscriber+) Privilege Escalation to Administrator via 'change\_role\_member' (CVSS 8.8, imithemes Real Spaces - WordPress Properties Directory Theme)
- [CVE-2025-5417](https://cve.now/CVE-2025-5417.md): Rhdh: red hat developer hub user permissions (CVSS 6.1, Red Hat Developer Hub)
- [CVE-2025-8357](https://cve.now/CVE-2025-8357.md): Media Library Assistant \<= 3.27 - Authenticated (Author+) Limited File Deletion (CVSS 4.3, dglingren Media Library Assistant)
- [CVE-2025-7496](https://cve.now/CVE-2025-7496.md): WPC Smart Compare for WooCommerce \<= 6.4.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting (CVSS 6.4, wpclever WPC Smart Compare for WooCommerce)
- [CVE-2024-44373](https://cve.now/CVE-2024-44373.md): A Path Traversal vulnerability in AllSky v2023.05.01 through v2024.12.06\_06 allows an unauthenticated attacker to create a webshell and remo (CVSS 9.8)
- [CVE-2025-50434](https://cve.now/CVE-2025-50434.md): A security issue has been identified in Appian Enterprise Business Process Management version 25.3. (CVSS 5.3)
- [CVE-2025-50461](https://cve.now/CVE-2025-50461.md): A deserialization vulnerability exists in Volcengine's verl 3.0.0, specifically in the scripts/model\_merger.py script when using the "fsdp" (CVSS 6.5)
- [CVE-2025-50567](https://cve.now/CVE-2025-50567.md): Saurus CMS Community Edition 4.7.1 contains a vulnerability in the custom DB::prepare() function, which uses preg\_replace() with the depreca (CVSS 10.0)
- [CVE-2025-50579](https://cve.now/CVE-2025-50579.md): A CORS misconfiguration in Nginx Proxy Manager v2.12.3 allows unauthorized domains to access sensitive data, particularly JWT tokens, due to (CVSS 5.3)
- [CVE-2025-50891](https://cve.now/CVE-2025-50891.md): The server-side backend for Adform Site Tracking before 2025-08-28 allows attackers to inject HTML or execute arbitrary code via cookie hija (CVSS 7.2, Adform server-side backend for Site Tracking)
- [CVE-2025-50897](https://cve.now/CVE-2025-50897.md): A vulnerability exists in riscv-boom SonicBOOM 1.2 (BOOMv1.2) processor implementation, where valid virtual-to-physical address translations (CVSS 4.3)
- [CVE-2025-50926](https://cve.now/CVE-2025-50926.md): Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id parameter in the List All Emai (CVSS 6.5)
- [CVE-2025-50938](https://cve.now/CVE-2025-50938.md): Cross site scripting (XSS) vulnerability in Hustoj 2025-01-31 via the TID parameter to thread.php. (CVSS 6.1)
- [CVE-2025-51487](https://cve.now/CVE-2025-51487.md): A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version \< 3.12.5, allowing to execute arbitrary JavaScript by using "j (CVSS 4.5, moonshine/moonshine)
- [CVE-2025-51488](https://cve.now/CVE-2025-51488.md): A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version \< 3.12.4, allowing remote attackers to store and execute arbit (CVSS 4.9, moonshine/moonshine)
- [CVE-2025-51489](https://cve.now/CVE-2025-51489.md): A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version \< 3.12.5, allowing remote attackers to upload a malicious SVG (CVSS 4.5, moonshine/moonshine)
- [CVE-2025-51506](https://cve.now/CVE-2025-51506.md): In the smartLibrary component of the HRForecast Suite 0.4.3, a SQL injection vulnerability was discovered in the valueKey parameter. (CVSS 6.5)
- [CVE-2025-51510](https://cve.now/CVE-2025-51510.md): MoonShine was discovered to contain a SQL injection vulnerability under the Blog -\> Categories page when using the moonshine-tree-resource ( (CVSS 4.9, moonshine/moonshine)
- [CVE-2025-51529](https://cve.now/CVE-2025-51529.md): Incorrect Access Control in the AJAX endpoint functionality in jonkastonka Cookies and Content Security Policy plugin through version 2.29 a (CVSS 5.3)
- [CVE-2025-51539](https://cve.now/CVE-2025-51539.md): EzGED3 3.5.0 contains an unauthenticated arbitrary file read vulnerability due to improper access control and insufficient input validation (CVSS 5.3)
- [CVE-2025-51540](https://cve.now/CVE-2025-51540.md): EzGED3 3.5.0 stores user passwords using an insecure hashing scheme: md5(md5(password)). (CVSS 5.3)
- [CVE-2025-51543](https://cve.now/CVE-2025-51543.md): An issue was discovered in Cicool builder 3.4.4 allowing attackers to reset the administrator's password via the /administrator/auth/reset\_p (CVSS 9.8)
- [CVE-2025-52337](https://cve.now/CVE-2025-52337.md): An authenticated arbitrary file upload vulnerability in the Content Explorer feature of LogicData eCommerce Framework v5.0.9.7000 allows att (CVSS 6.5)
- [CVE-2025-52338](https://cve.now/CVE-2025-52338.md): An issue in the default configuration of the password reset function in LogicData eCommerce Framework v5.0.9.7000 allows attackers to bypass (CVSS 5.3)
- [CVE-2025-54336](https://cve.now/CVE-2025-54336.md): In Plesk Obsidian 18.0.70, \_isAdminPasswordValid uses an == comparison. (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-08-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.