CVEs published August 24, 2025
23 CVEs were published on August 24, 2025: 1 critical, 5 high.
- Published
- 23
- Critical
- 1
- High
- 5
- Medium
- 15
- Low
- 2
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- FNKvision Y215 CCTV Camera
- 4
- appneta tcpreplay
- 3
- Linksys RE6250 · Linksys RE6300 +4
- 2
- vim
- 2
- Belkin AX1800
- 1
- Bjskzy Zhiyou ERP
- 1
- ckolivas lrzip
- 1
- DCN DCME-720
- 1
- givanz Vvveb
- 1
- IBM Engineering Lifecycle Management
- 1
Critical 1
High 5
- CVE-2025-9393Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 addStaProfile stack-based overflowLinksys RE6250 · Linksys RE6300 +4
- CVE-2025-9392Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 qosClassifier stack-based overflowLinksys RE6250 · Linksys RE6300 +4
- CVE-2025-9380FNKvision Y215 CCTV Camera Firmware passwd hard-coded credentialsFNKvision Y215 CCTV Camera
- CVE-2025-9379Belkin AX1800 Firmware Update data authenticityBelkin AX1800
- CVE-2025-36174IBM Integrated Analytics System file uploadIBM Integrated Analytics System
Medium, low and unrated 17
- CVE-2025-9398YiFang CMS Migrate.php exportInstallTable information disclosureYiFang CMS
- CVE-2025-9397givanz Vvveb media.php unrestricted uploadgivanz Vvveb
- CVE-2025-9396ckolivas lrzip strtol_l.c __GI_____strtol_l_internal null pointer dereferenceckolivas lrzip
- CVE-2025-9395wangsongyan wblog backup.go RestorePost server-side request forgerywangsongyan wblog
- CVE-2025-9394PoDoFo PDF Dictionary PdfTokenizer.cpp DetermineDataType use after freePoDoFo
- CVE-2025-9391Bjskzy Zhiyou ERP com.artery.workflow.ServiceImpl getFieldValue sql injectionBjskzy Zhiyou ERP
- CVE-2025-9390vim xxd xxd.c main buffer overflowvim
- CVE-2025-9389vim memmove-vec-unaligned-erms.S __memmove_avx_unaligned_erms memory corruptionvim
- CVE-2025-9388Scada-LTS watch_list.shtm cross site scriptingScada-LTS
- CVE-2025-9387DCN DCME-720 Web Management Backend ip_block.php os command injectionDCN DCME-720
- CVE-2025-9386appneta tcpreplay tcprewrite get.c get_l2len_protocol use after freeappneta tcpreplay
- CVE-2025-9385appneta tcpreplay tcprewrite edit_packet.c fix_ipv6_checksums use after freeappneta tcpreplay
- CVE-2025-9384appneta tcpreplay parse_args.c tcpedit_post_args null pointer dereferenceappneta tcpreplay
- CVE-2025-9383FNKvision Y215 CCTV Camera passwd crypt weak hashFNKvision Y215 CCTV Camera
- CVE-2025-9382FNKvision Y215 CCTV Camera Telnet Sevice s1_rf_test_config backdoorFNKvision Y215 CCTV Camera
- CVE-2025-9381FNKvision Y215 CCTV Camera wpa_supplicant.conf information disclosureFNKvision Y215 CCTV Camera
- CVE-2025-8208Spexo Addons for Elementor <= 1.0.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widgettemplatescoderthemes Spexo Addons for Elementor – Elementor…