CVEs published August 22, 2025
168 CVEs were published on August 22, 2025: 27 critical, 52 high.
- Published
- 168
- Critical
- 27
- High
- 52
- Medium
- 46
- Low
- 4
- Unrated
- 39
- Now in CISA KEV
- 0
- Fix available
- 44
Most affected products
- Linux
- 60
- Uniong WebITR
- 6
- Liferay Portal · Liferay DXP +1
- 4
- Salesforce Tableau Server
- 4
- Apache Software Foundation Apache Log4cxx
- 2
- Centreon web
- 2
- Danfoss AK-SM8xxA Series
- 2
- IBM QRadar SIEM
- 2
- Liferay Portal · Liferay DXP +3
- 2
- Linksys RE6250 · Linksys RE6300 +4
- 2
Critical 27
- CVE-2025-4609Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 136.0.7103.113 allowed a remote attackerGoogle Chrome
- CVE-2025-26496Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Salesforce Tableau Server, Tableau Desktop on Windows, Linux Salesforce Tableau Server, Tableau Desktop
- CVE-2025-38660[ceph] parse_longname(): strrchr() expects NUL-terminated stringLinux
- CVE-2009-10006UFO: Alien Invasion <= 2.2.1 IRC Client Buffer OverflowUFO: Alien Invasion Project UFO: Alien Invasion
- CVE-2025-9254Uniong｜WebITR - Missing AuthenticationUniong WebITR
- CVE-2022-31491Voltronic Power ViewPower through 1.04-24215, ViewPower Pro through 2.0-22165, and PowerShield Netguard before 1.04-23292 allows a remote at
- CVE-2022-43110Voltronic Power ViewPower through 1.04-21353 and PowerShield Netguard before 1.04-23292 allows a remote attacker to configure the system via
- CVE-2022-45134Mahara 21.10 before 21.10.6, 22.04 before 22.04.4, and 22.10 before 22.10.1 deserializes user input unsafely during skin import.
- CVE-2024-50644zhisheng17 blog 3.0.1-SNAPSHOT has an authentication bypass vulnerability.
- CVE-2024-50645MallChat v1.0-SNAPSHOT has an authentication bypass vulnerability.
- CVE-2024-52786An authentication bypass vulnerability in anji-plus AJ-Report up to v1.4.2 allows unauthenticated attackers to execute arbitrary code via a
- CVE-2024-53496Incorrect access control in the doFilter function of my-site v1.0.2.RELEASE allows attackers to access sensitive components without authenti
- CVE-2024-53499Jeewms v3.7 was discovered to contain a SQL injection vulnerability via the CgReportController API.
- CVE-2025-29365spimsimulator spim v9.1.24 and before is vulnerable to Buffer Overflow in READ_STRING_SYSCALL.
- CVE-2025-29366In mupen64plus v2.6.0 there is an array overflow vulnerability in the write_rdram_regs and write_rdram_regs functions, which enables executi
- CVE-2025-51092The LogIn-SignUp project by VishnuSivadasVS is vulnerable to SQL Injection due to unsafe construction of SQL queries in DataBase.php.
- CVE-2025-52095An issue in PDQ Smart Deploy V.3.0.2040 allows an attacker to escalate privileges via the Credential encryption routines in SDCommon.dll
- CVE-2025-55398An issue was discovered in mouse07410 asn1c thru 0.9.29 (2025-03-20) - a fork of vlm asn1c.
- CVE-2025-55599D-Link DIR-619L 2.06B01 is vulnerable to Buffer Overflow in the formWlanSetup function via the parameter f_wds_wepKey.
- CVE-2025-55602D-Link DIR-619L 2.06B01 is vulnerable to Buffer Overflow in the formSysCmd function via the submit-url parameter.
- CVE-2025-55603Tenda AX3 V16.03.12.10_CN is vulnerable to Buffer Overflow in the fromSetSysTime function via the ntpServer parameter.
- CVE-2025-55605Tenda AX3 V16.03.12.10_CN is vulnerable to Buffer Overflow in the saveParentControlInfo function via the deviceName parameter.
- CVE-2025-55606Tenda AX3 V16.03.12.10_CN is vulnerable to Buffer Overflow in the fromAdvSetMacMtuWan function via the serverName parameter.
- CVE-2025-55611D-Link DIR-619L 2.06B01 is vulnerable to Buffer Overflow in the formLanguageChange function via the nextPage parameter.
- CVE-2025-55613Tenda O3V2 1.0.0.12(3880) is vulnerable to Buffer Overflow in the fromSafeSetMacFilter function via the mac parameter.
- CVE-2025-55619Reolink v4.54.0.4.20250526 was discovered to contain a hardcoded encryption key and initialization vector.
- CVE-2025-57105The DI-7400G+ router has a command injection vulnerability, which allows attackers to execute arbitrary commands on the device.
High 52
- CVE-2025-9356Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 inboundFilterAdd stack-based overflowLinksys RE6250 · Linksys RE6300 +4
- CVE-2025-9355Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 scheduleAdd stack-based overflowLinksys RE6250 · Linksys RE6300 +4
- CVE-2025-52451Improper Input Validation vulnerability in Salesforce Tableau Server on Windows, Linux (tabdoc api - create-data-source-from-file-upload modSalesforce Tableau Server
- CVE-2025-26498Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (establish-connection-no-undo mSalesforce Tableau Server
- CVE-2025-26497Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (Flow Editor modules) allows AbSalesforce Tableau Server
- CVE-2025-57801gnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checksConsensys gnark · github.com/consensys/gnark
- CVE-2025-6791Second order SQL injection available to user with low privilegeCentreon web
- CVE-2025-4650User with high privileges is able to introduce a SQLi using the Meta Service indicator pageCentreon web
- CVE-2024-48988Apache StreamPark: SQL injection vulnerabilityApache Software Foundation Apache StreamPark
- CVE-2025-57800Audiobookshelf vulnerable to OIDC token exfiltration and account takeoveradvplyr audiobookshelf
- CVE-2025-57771Roo-Code potential remote code execution via auto-execute command parsing flawRooCodeInc Roo-Code
- CVE-2025-55741unopim/unopim allows unauthorized product deletion via mass-delete endpointunopim · unopim/unopim
- CVE-2025-38675xfrm: state: initialize state_ptrs earlier in xfrm_state_findLinux
- CVE-2025-38670arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()Linux
- CVE-2025-38667iio: fix potential out-of-bound writeLinux
- CVE-2025-38662ASoC: mediatek: mt8365-dai-i2s: pass correct size to mt8365_dai_set_privLinux
- CVE-2025-38661platform/x86: alienware-wmi-wmax: Fix `dmi_system_id` arrayLinux
- CVE-2025-38659gfs2: No more self recoveryLinux
- CVE-2025-38658nvmet: pci-epf: Do not complete commands twice if nvmet_req_init() failsLinux
- CVE-2025-38657wifi: rtw89: mcc: prevent shift wrapping in rtw89_core_mlsr_switch()Linux
- CVE-2025-38656wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start()Linux
- CVE-2025-38653proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.alLinux
- CVE-2025-38652f2fs: fix to avoid out-of-boundary access in devs.pathLinux
- CVE-2025-38643wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac()Linux
- CVE-2025-38640bpf: Disable migration in nf_hook_run_bpf().Linux
- CVE-2025-38639netfilter: xt_nfacct: don't assume acct name is null-terminatedLinux
- CVE-2025-38627f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dicLinux
- CVE-2025-38619media: ti: j721e-csi2rx: fix list_del corruptionLinux
- CVE-2025-33120IBM QRadar SIEM privilege escalationIBM QRadar SIEM
- CVE-2025-38618vsock: Do not allow binding to VMADDR_PORT_ANYLinux
- CVE-2025-38617net/packet: fix a race in packet_set_ring() and packet_notifier()Linux
- CVE-2025-38616tls: handle data disappearing from under the TLS ULPLinux
- CVE-2024-58239tls: stop recv() if initial process_rx_list gave us non-DATALinux
- CVE-2025-9259Uniong｜WebITR - Arbitrary File Reading through Path TraversalUniong WebITR
- CVE-2025-9258Uniong｜WebITR - Arbitrary File Reading through Path TraversalUniong WebITR
- CVE-2025-9257Uniong｜WebITR - Arbitrary File Reading through Path TraversalUniong WebITR
- CVE-2025-9256Uniong｜WebITR - Arbitrary File Reading through Path TraversalUniong WebITR
- CVE-2025-9255Uniong｜WebITR - SQL InjectionUniong WebITR
- CVE-2025-8281WP Talroo <= 2.4 - Reflected XSSWP Talroo
- CVE-2025-41451Post-Authentication OS Command Injection RCE in Danfoss AK-SM8xxA SeriesDanfoss AK-SM8xxA Series
- CVE-2024-53494Incorrect access control in the preHandle function of SpringBootBlog v1.0.0 allows attackers to access sensitive components without authenti
- CVE-2024-56179In MindManager Windows versions prior to 24.1.150, attackers could potentially write to unexpected directories in victims' machines via dire
- CVE-2025-50674An issue was discovered in the changePassword method in file /usr/share/php/openmediavault/system/user.inc in OpenMediaVault 7.4.17 allowing
- CVE-2025-51605An issue was discovered in Shopizer 3.2.7.
- CVE-2025-52085An SQL injection vulnerability in Yoosee application v6.32.4 allows authenticated users to inject arbitrary SQL queries via a request to a b
- CVE-2025-52094Insecure Permissions vulnerability in PDQ Smart Deploy V.3.0.2040 allows a local attacker to execute arbtirary code via the \HKLM\SYSTEM\Set
- CVE-2025-52287OperaMasks SDK ELite Script Engine v0.5.0 was discovered to contain a deserialization vulnerability.
- CVE-2025-55454An authenticated arbitrary file upload vulnerability in the component /msg/sendfiles of DooTask v1.0.51 allows attackers to execute arbitrar
- CVE-2025-55573QuantumNous new-api v.0.8.5.2 is vulnerable to Cross Site Scripting (XSS).
- CVE-2025-55581D-Link DCS-825L firmware version 1.08.01 and possibly prior versions contain an insecure implementation in the mydlink-watch-dog.sh script.
- CVE-2025-55630A discrepancy in the error message returned by the login function of Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3
- CVE-2025-55634Incorrect access control in the RTMP server settings of Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_250
Medium, low and unrated 89
- CVE-2025-43761A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.QLiferay Portal · Liferay DXP +3
- CVE-2025-52450Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salesforce Tableau Server on Windows, Linux Salesforce Tableau Server
- CVE-2025-43759Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 throLiferay Portal · Liferay DXP +1
- CVE-2025-54812Apache Log4cxx: Improper HTML escaping in HTMLLayoutApache Software Foundation Apache Log4cxx
- CVE-2025-54813Apache Log4cxx: Improper escaping with JSONLayoutApache Software Foundation Apache Log4cxx
- CVE-2025-43762Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.1, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.Liferay Portal · Liferay DXP +2
- CVE-2025-43758Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.Liferay Portal · Liferay DXP +3
- CVE-2025-43760A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.QLiferay Portal · Liferay DXP +1
- CVE-2025-57770ZITADEL user enumeration vulnerability in login UIzitadel
- CVE-2025-55745UnoPim Quick Export feature is vulnerable to CSV injectionunopim · unopim/unopim
- CVE-2025-38674Revert "drm/prime: Use dma_buf from GEM object instance"Linux
- CVE-2025-38673Revert "drm/gem-framebuffer: Use dma_buf from GEM object instance"Linux
- CVE-2025-38672Revert "drm/gem-dma: Use dma_buf from GEM object instance"Linux
- CVE-2025-38671i2c: qup: jump out of the loop in case of timeoutLinux
- CVE-2025-38669Revert "drm/gem-shmem: Use dma_buf from GEM object instance"Linux
- CVE-2025-38668regulator: core: fix NULL dereference on unbind due to stale coupling dataLinux
- CVE-2025-38666net: appletalk: Fix use-after-free in AARP proxy probeLinux
- CVE-2025-38665can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_modeLinux
- CVE-2025-38664ice: Fix a null pointer dereference in ice_copy_and_init_pkg()Linux
- CVE-2025-38663nilfs2: reject invalid file types when reading inodesLinux
- CVE-2025-38655pinctrl: canaan: k230: add NULL check in DT parseLinux
- CVE-2025-38654pinctrl: canaan: k230: Fix order of DT parse and pinctrl registerLinux
- CVE-2025-38651landlock: Fix warning from KUnit testsLinux
- CVE-2025-38650hfsplus: remove mutex_lock check in hfsplus_free_extentsLinux
- CVE-2025-38649arm64: dts: qcom: qcs615: fix a crash issue caused by infinite loop for CoresightLinux
- CVE-2025-38648spi: stm32: Check for cfg availability in stm32_spi_probeLinux
- CVE-2025-38647wifi: rtw89: sar: drop lockdep assertion in rtw89_set_sar_from_acpiLinux
- CVE-2025-38646wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz bandLinux
- CVE-2025-38645net/mlx5: Check device memory pointer before usageLinux
- CVE-2025-38644wifi: mac80211: reject TDLS operations when station is not associatedLinux
- CVE-2025-38642wifi: mac80211: fix WARN_ON for monitor mode on some devicesLinux
- CVE-2025-38641Bluetooth: btusb: Fix potential NULL dereference on kmalloc failureLinux
- CVE-2025-38638ipv6: add a retry logic in net6_rt_notify()Linux
- CVE-2025-38636rv: Use strings in da monitors tracepointsLinux
- CVE-2025-38635clk: davinci: Add NULL check in davinci_lpsc_clk_register()Linux
- CVE-2025-38634power: supply: cpcap-charger: Fix null check for power_supply_get_by_nameLinux
- CVE-2025-38633clk: spacemit: mark K1 pll1_d8 as criticalLinux
- CVE-2025-38632pinmux: fix race causing mux_owner NULL with active mux_usecountLinux
- CVE-2025-38631clk: imx95-blk-ctl: Fix synchronous abortLinux
- CVE-2025-38630fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-derefLinux
- CVE-2025-38629ALSA: usb: scarlett2: Fix missing NULL checkLinux
- CVE-2025-38628vdpa/mlx5: Fix release of uninitialized resources on error pathLinux
- CVE-2025-38626f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs modeLinux
- CVE-2025-38625vfio/pds: Fix missing detach_ioas opLinux
- CVE-2025-38624PCI: pnv_php: Clean up allocated IRQs on unplugLinux
- CVE-2025-38623PCI: pnv_php: Fix surprise plug detection and recoveryLinux
- CVE-2025-38622net: drop UFO packets in udp_rcv_segment()Linux
- CVE-2025-38621md: make rdev_addable usable for rcu modeLinux
- CVE-2025-38620zloop: fix KASAN use-after-free of tag setLinux
- CVE-2025-43751User enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 202Liferay Portal · Liferay DXP +1
- CVE-2025-53363Dpanel has an arbitrary file read vulnerabilitydonknap dpanel · github.com/donknap/dpanel
- CVE-2025-36042IBM QRadar SIEM cross-site scriptingIBM QRadar SIEM
- CVE-2025-57896WordPress Church Admin Plugin <= 5.0.26 - Broken Access Control Vulnerabilityandy_moyle Church Admin
- CVE-2025-57895WordPress JobWP Plugin <= 2.4.3 - Cross Site Request Forgery (CSRF) VulnerabilityHossni Mubarak JobWP
- CVE-2025-57894WordPress WPPizza Plugin <= 3.19.8 - Broken Access Control Vulnerabilityollybach WPPizza
- CVE-2025-57893WordPress WP Fast Total Search Plugin <= 1.79.270 - Cross Site Request Forgery (CSRF) VulnerabilityEpsiloncool WP Fast Total Search
- CVE-2025-57892WordPress Simple Statistics for Feeds Plugin <= 20250322 - Cross Site Request Forgery (CSRF) VulnerabilityJeff Starr Simple Statistics for Feeds
- CVE-2025-57891WordPress Recurring PayPal Donations Plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerabilitywpecommerce Recurring PayPal Donations
- CVE-2025-57890WordPress Sessions Plugin <= 3.2.0 - Cross Site Scripting (XSS) VulnerabilityPierre Lannoy Sessions
- CVE-2025-57888WordPress Jobmonster Theme <= 4.8.0 - Sensitive Data Exposure VulnerabilityNooTheme Jobmonster
- CVE-2025-57887WordPress Jobmonster Theme <= 4.8.0 - Cross Site Scripting (XSS) VulnerabilityNooTheme Jobmonster
- CVE-2025-57886WordPress Accessibility Checker by Equalize Digital Plugin <= 1.30.0 - Insecure Direct Object References (IDOR) VulnerabilityAccessibility Checker by Equalize Digital
- CVE-2025-57885WordPress Fluent Support Plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) VulnerabilityShahjahan Jewel Fluent Support
- CVE-2025-57884WordPress Greenshift Plugin <= 12.1.1 - Broken Access Control Vulnerabilitywpsoul Greenshift
- CVE-2025-9331Spacious <= 1.9.11 - Missing Authorization to Autheticated (Subscriber+) Demo Data Importthemegrill Spacious
- CVE-2025-9340native encrypt/decrypt operations in JCE may corrupt data if same byte array used for input and output.Legion of the Bouncy Castle Bouncy Castle for Java · org.bo…
- CVE-2025-9341Garbage collection can delay for AES CBC Native support, resulting in heap exhaustionLegion of the Bouncy Castle Bouncy Castle for Java FIPS… +2
- CVE-2025-8678WP Crontrol - 1.17.0 - 1.19.1 - Authenticated (Administrator+) Blind Server-Side Request Forgeryjohnbillion WP Crontrol · johnbillion/wp-crontrol
- CVE-2025-57699Western Digital Kitfox for Windows provided by Western Digital Corporation registers a Windows service with an unquoted file path.Western Digital Kitfox for Windows
- CVE-2025-41452Post auth nginx configuration injection in Danfoss AK-SM8xxA SeriesDanfoss AK-SM8xxA Series
- CVE-2025-43752Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.Liferay Portal · Liferay DXP +1
- CVE-2022-45133Mahara 21.10 before 21.10.6, 22.04 before 22.04.4, and 22.10 before 22.10.1 allows unsafe font upload for skins.
- CVE-2025-50691MCSManager 10.5.3 daemon process runs as a root account by default, and its sensitive data (including tokens and terminal content) is stored
- CVE-2025-50733NextChat contains a cross-site scripting (XSS) vulnerability in the HTMLPreview component of artifacts.tsx that allows attackers to execute
- CVE-2025-50858Reflected Cross-Site Scripting in the List MySQL Databases function in Easy Hosting Control Panel (EHCP) 20.04.1.b allows authenticated atta
- CVE-2025-50859Reflected Cross-Site Scripting in the Change Template function in Easy Hosting Control Panel (EHCP) 20.04.1.b allows authenticated attackers
- CVE-2025-51825JeecgBoot versions from 3.4.3 up to 3.8.0 were found to contain a SQL injection vulnerability in the /jeecg-boot/online/cgreport/head/parseSorg.jeecgframework.boot:jeecg-boot-base-core
- CVE-2025-55455DooTask v1.0.51 was dicovered to contain an authenticated arbitrary download vulnerability via the component /msg/sendtext.
- CVE-2025-55620A cross-site scripting (XSS) vulnerability in the valuateJavascript() function of Reolink v4.54.0.4.20250526 allows attackers to execute arb
- CVE-2025-55621An Insecure Direct Object Reference (IDOR) vulnerability in Reolink v4.54.0.4.20250526 allows unauthorized attackers to access and download
- CVE-2025-55622Reolink v4.54.0.4.20250526 was discovered to contain a task hijacking vulnerability due to inappropriate taskAffinity settings.
- CVE-2025-55623An issue in the lock screen component of Reolink v4.54.0.4.20250526 allows attackers to bypass authentication via using an ADB (Android Debu
- CVE-2025-55624An intent redirection vulnerability in Reolink v4.54.0.4.20250526 allows unauthorized attackers to access internal functions or access non-p
- CVE-2025-55625An open redirect vulnerability in Reolink v4.54.0.4.20250526 allows attackers to redirect users to a malicious site via a crafted URL.
- CVE-2025-55626An Insecure Direct Object Reference (IDOR) vulnerability in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662
- CVE-2025-55627Insufficient privilege verification in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 allows au
- CVE-2025-55629Insecure permissions in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 allow attackers to arbit
- CVE-2025-55631Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 was discovered to manage users' sessions system
- CVE-2025-55637Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 was discovered to contain a command injection vu