CVEs published August 29, 2025
163 CVEs were published on August 29, 2025: 8 critical, 39 high. 2 are now in CISA KEV.
- Published
- 163
- Critical
- 8
- High
- 39
- Medium
- 105
- Low
- 11
- Unrated
- 0
- Now in CISA KEV
- 2
- Fix available
- 77
Most affected products
- QNAP Systems Qsync Central
- 14
- QNAP Systems QTS · QNAP Systems QuTS hero
- 11
- QNAP Systems File Station
- 10
- ACDH-CH OpenAtlas
- 8
- itsourcecode Apartment Management System
- 8
- Apple macOS
- 7
- code-projects Simple Grading System
- 6
- Portabilis i-Educar
- 6
- O2OA
- 5
- vercel next.js · next
- 3
Critical 8
- CVE-2025-34164NetSupport Manager < 14.12.0000 Heap-Based Buffer OverflowNetSupport Manager
- CVE-2025-58159WeGIA Authenticated Arbitrary File Upload Leading To Remote Code Execution (RCE)LabRedesCefetRJ WeGIA
- CVE-2025-52856VioStorQNAP Systems VioStor
- CVE-2025-8857Changing｜Clinic Image System - Use of Hard-coded CredentialsChanging Clinic Image System
- CVE-2025-8861Changing｜TSA - Missing AuthenticationChanging TSA
- CVE-2025-9605Tenda AC21/AC23 GetParentControlInfo stack-based overflowTenda AC21 · Tenda AC23
- CVE-2024-46484TRENDnet TV-IP410 vA1.0R was discovered to contain an OS command injection vulnerability via the /server/cgi-bin/testserv.cgi component.
- CVE-2025-44033SQL injection vulnerability in oa_system oasys v.1.1 allows a remote attacker to execute arbitrary code via the allDirector() method declara
High 39
- CVE-2025-34165NetSupport Manager < 14.12.0000 Stack-Based Buffer OverflowNetSupport Manager
- CVE-2025-58157gnark affected by denial of service when computing scalar multiplication using fake-GLV algorithmConsensys gnark · github.com/consensys/gnark
- CVE-2025-58158Harness Affected by Arbitrary File Write in Gitness LFS serverharness · github.com/harness/gitness
- CVE-2025-9377Authenticated RCE via Parental Control command injectionTP-Link Systems Archer C7(EU) · TP-Link Systems TL-WR841N/N…
- CVE-2025-52861VioStorQNAP Systems VioStor
- CVE-2025-33038Qsync CentralQNAP Systems Qsync Central
- CVE-2025-33037Qsync CentralQNAP Systems Qsync Central
- CVE-2025-33036Qsync CentralQNAP Systems Qsync Central
- CVE-2025-33033Qsync CentralQNAP Systems Qsync Central
- CVE-2025-30278Qsync CentralQNAP Systems Qsync Central
- CVE-2025-30277Qsync CentralQNAP Systems Qsync Central
- CVE-2025-30273QTS, QuTS heroQNAP Systems QTS · QNAP Systems QuTS hero
- CVE-2025-30264QTS, QuTS heroQNAP Systems QTS · QNAP Systems QuTS hero
- CVE-2025-30261Qsync CentralQNAP Systems Qsync Central
- CVE-2025-30260Qsync CentralQNAP Systems Qsync Central
- CVE-2025-29900File Station 5QNAP Systems File Station
- CVE-2025-29899File Station 5QNAP Systems File Station
- CVE-2025-29894Qsync CentralQNAP Systems Qsync Central
- CVE-2025-29893Qsync CentralQNAP Systems Qsync Central
- CVE-2025-29890File Station 5QNAP Systems File Station
- CVE-2025-29887QuRouter 2.5QNAP Systems QuRouter
- CVE-2025-29875File Station 5QNAP Systems File Station
- CVE-2025-22483License CenterQNAP Systems License Center
- CVE-2025-47909Improper validation of TrustedOrigins allows CSRF attacks in github.com/gorilla/csrfgithub.com/gorilla/csrf
- CVE-2025-5808Authentication Bypass vulnerability discovered in the OpenText™ Self-Service Password ResetOpenText Self Service Password Reset
- CVE-2024-13342Booster for WooCommerce <= 7.2.4 - Unauthenticated Double Extension Arbitrary File Uploadpluggabl Booster for WooCommerce – PDF Invoices, Abandoned…
- CVE-2025-53508Multiple products provided by iND Co.,Ltd contain an OS command injection vulnerability.iND Co. HL330-DLS · iND Co. HL320-DLS +7
- CVE-2025-9639Ai3｜QbiCRMGateway - Arbitrary File Reading through Path TraversalAi3 QbiCRMGateway
- CVE-2025-8858Changing｜Clinic Image System - SQL InjectionChanging Clinic Image System
- CVE-2025-58323NAVER MYBOX Explorer for Windows before 3.0.8.133 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM by executing arbitraNAVER MYBOX Explorer
- CVE-2025-39247There is an Access Control Vulnerability in some HikCentral Professional versions.Hikvision HikCentral Professional
- CVE-2025-43187This issue was addressed by removing the vulnerable code.Apple macOS
- CVE-2025-43268A permissions issue was addressed with additional restrictions.Apple macOS
- CVE-2025-40927CGI::Simple versions 1.281 and earlier for Perl has a HTTP response splitting flawMANWAR CGI::Simple
- CVE-2023-41471Cross Site Scripting vulnerability in copyparty before 1.9.2 allows a local attacker to execute arbitrary code via a crafted payload to the copyparty
- CVE-2024-46916Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR06 contains functionality that allows the removal of critical system files before the
- CVE-2024-46917Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR01 does not validate file attributes or the contents of /root during integrity valida
- CVE-2025-55763Buffer Overflow in the URI parser of CivetWeb 1.14 through 1.16 (latest) allows a remote attacker to achieve remote code execution via a cra
- CVE-2025-56577An issue in Evope Core v.1.1.3.20 allows a local attacker to obtain sensitive information via the use of hard coded cryptographic keys.
Medium, low and unrated 116
- CVE-2025-57752Next.js Affected by Cache Key Confusion for Image Optimization API Routesvercel next.js · next
- CVE-2025-55173Next.js Content Injection Vulnerability for Image Optimizationvercel next.js · next
- CVE-2025-58156Centurion ERP users can view hashed authentication tokens that belong to other usersnofusscomputing centurion_erp
- CVE-2025-57822Next.js Improper Middleware Redirect Handling Leads to SSRFvercel next.js · next
- CVE-2025-9678Campcodes Online Loan Management System ajax.php sql injectionCampcodes Online Loan Management System
- CVE-2025-58160Tracing logging user input may result in poisoning logs with ANSI escape sequencestokio-rs tracing · tracing-subscriber
- CVE-2025-58068Eventlet affected by HTTP request smuggling in unparsed trailerseventlet
- CVE-2025-58067Basecamp's Google Sign-In for Rails allowed redirects to protocol-relative URIbasecamp google_sign_in · google_sign_in
- CVE-2025-9677Modo Legend of the Phoenix com.duige.hzw.multilingual AndroidManifest.xml improper export of android application componentsModo Legend of the Phoenix
- CVE-2025-9676NCSOFT Universe App com.ncsoft.universeapp AndroidManifest.xml improper export of android application componentsNCSOFT Universe App
- CVE-2025-58066DoS Vulnerability in ntpd-rspendulum-project ntpd-rs · ntpd-rs
- CVE-2025-9675Voice Changer App com.tuyangkeji.changevoice AndroidManifest.xml improper export of android application componentsVoice Changer App
- CVE-2025-9674Transbyte Scooper News App com.hatsune.eagleee AndroidManifest.xml improper export of android application componentsTransbyte Scooper News App
- CVE-2025-9673Kakao 헤이카카오 Hey Kakao App com.kakao.i.connect AndroidManifest.xml improper export of android application components헤이카카오 Hey Kakao App
- CVE-2025-9672Rejseplanen App de.hafas.android.rejseplanen AndroidManifest.xml improper export of android application componentsRejseplanen App
- CVE-2025-9671UAB Paytend App com.passport.cash AndroidManifest.xml improper export of android application componentsUAB Paytend App
- CVE-2025-9670mixmark-io turndown commonmark-rules.js redosmixmark-io turndown
- CVE-2025-9669Jinher OA GetTreeDate.aspx sql injectionJinher OA
- CVE-2025-43773Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0, 2025.Q1.0 through 2025.Q1.14, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 thrLiferay Portal · Liferay DXP +1
- CVE-2025-9667code-projects Simple Grading System Admin Panel delete_account.php sql injectioncode-projects Simple Grading System
- CVE-2025-9666code-projects Simple Grading System Admin Panel delete_student.php sql injectioncode-projects Simple Grading System
- CVE-2025-9665code-projects Simple Grading System Admin Panel edit_student.php sql injectioncode-projects Simple Grading System
- CVE-2025-44015HybridDesk StationQNAP Systems HybridDesk Station
- CVE-2025-33032QTS, QuTS heroQNAP Systems QTS · QNAP Systems QuTS hero
- CVE-2025-30275Qsync CentralQNAP Systems Qsync Central
- CVE-2025-30274QTS, QuTS heroQNAP Systems QTS · QNAP Systems QuTS hero
- CVE-2025-30272QTS, QuTS heroQNAP Systems QTS · QNAP Systems QuTS hero
- CVE-2025-30271QTS, QuTS heroQNAP Systems QTS · QNAP Systems QuTS hero
- CVE-2025-30270QTS, QuTS heroQNAP Systems QTS · QNAP Systems QuTS hero
- CVE-2025-30268QTS, QuTS heroQNAP Systems QTS · QNAP Systems QuTS hero
- CVE-2025-30267QTS, QuTS heroQNAP Systems QTS · QNAP Systems QuTS hero
- CVE-2025-30265QTS, QuTS heroQNAP Systems QTS · QNAP Systems QuTS hero
- CVE-2025-30263Qsync CentralQNAP Systems Qsync Central
- CVE-2025-30262Qsync CentralQNAP Systems Qsync Central
- CVE-2025-29898Qsync CentralQNAP Systems Qsync Central
- CVE-2025-29889File Station 5QNAP Systems File Station
- CVE-2025-29888File Station 5QNAP Systems File Station
- CVE-2025-29886File Station 5QNAP Systems File Station
- CVE-2025-29882QTS, QuTS heroQNAP Systems QTS · QNAP Systems QuTS hero
- CVE-2025-29879File Station 5QNAP Systems File Station
- CVE-2025-29878File Station 5QNAP Systems File Station
- CVE-2025-29874File Station 5QNAP Systems File Station
- CVE-2024-12923Photo StationQNAP Systems Photo Station
- CVE-2025-9664code-projects Simple Grading System Admin Panel add_student_grade.php sql injectioncode-projects Simple Grading System
- CVE-2025-9663code-projects Simple Grading System Admin Panel edit_account.php sql injectioncode-projects Simple Grading System
- CVE-2025-9662code-projects Simple Grading System Admin Panel login.php sql injectioncode-projects Simple Grading System
- CVE-2025-9660SourceCodester Bakeshop Online Ordering System passwordrecover.php sql injectionSourceCodester Bakeshop Online Ordering System
- CVE-2025-9659O2OA Personal Profile widget cross site scriptingO2OA
- CVE-2025-9658O2OA Personal Profile dict cross site scriptingO2OA
- CVE-2025-55750Gitpod Classic Affected by Bitbucket OAuth Token Exposure via Redirect Fragmentgitpod-io gitpod
- CVE-2025-55177Incomplete authorization of linked device synchronization messages in WhatsApp for iOS prior to v2.25.21.73, WhatsApp Business for iOS v2.25Facebook WhatsApp Desktop for Mac · Facebook WhatsApp Bu… +1
- CVE-2025-55202Opencast has a partial path traversal vulnerability in UI configopencast · org.opencastproject:opencast-user-interface-conf…
- CVE-2025-9657O2OA Personal Profile script cross site scriptingO2OA
- CVE-2025-9656PHPGurukul Directory Management System add-directory.php cross site scriptingPHPGurukul Directory Management System
- CVE-2025-54877Tuleap's special and always there fields permissions are not verified in cross-tracker searchEnalean tuleap
- CVE-2025-9655O2OA Personal Profile person cross site scriptingO2OA
- CVE-2025-9654AiondaDotCom mcp-ssh server-simple.mjs command injectionAiondaDotCom mcp-ssh · @aiondadotcom/mcp-ssh
- CVE-2025-55304Exiv2 has quadratic performance in ICC profile parsing in JpegBase::readMetadataexiv2
- CVE-2025-54080Exiv2 Segmentation Faults in Exiv2::EpsImage::writeMetadata() via crafted EPS fileexiv2
- CVE-2025-9653Portabilis i-Educar Cadastrar projeto educar_projeto_cad.php cross site scriptingPortabilis i-Educar
- CVE-2025-9652Portabilis i-Educar Cadastrar tipo de transferência educar_transferencia_tipo_cad.php cross site scriptingPortabilis i-Educar
- CVE-2025-9651shafhasan chatbox chat.php sql injectionshafhasan chatbox
- CVE-2025-9650yeqifu carRental AppFileUtils.java removeFileByPath path traversalyeqifu carRental
- CVE-2025-9649appneta tcpreplay send_packets.c calc_sleep_time divide by zeroappneta tcpreplay
- CVE-2025-9647mtons mblog list cross site scriptingmtons mblog
- CVE-2025-9646O2OA calendarConfig cross site scriptingO2OA
- CVE-2025-9645itsourcecode Apartment Management System r_all_info.php sql injectionitsourcecode Apartment Management System
- CVE-2025-9644itsourcecode Apartment Management System bill_setup.php sql injectionitsourcecode Apartment Management System
- CVE-2025-9643itsourcecode Apartment Management System utility_bill_setup.php sql injectionitsourcecode Apartment Management System
- CVE-2025-40709Cross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CHACDH-CH OpenAtlas
- CVE-2025-40708Cross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CHACDH-CH OpenAtlas
- CVE-2025-40707Cross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CHACDH-CH OpenAtlas
- CVE-2025-40706Cross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CHACDH-CH OpenAtlas
- CVE-2025-40705Cross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CHACDH-CH OpenAtlas
- CVE-2025-40704Cross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CHACDH-CH OpenAtlas
- CVE-2025-40703Cross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CHACDH-CH OpenAtlas
- CVE-2025-40702Cross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CHACDH-CH OpenAtlas
- CVE-2025-9217Slider Revolution <= 6.7.36 - Authenticated (Contributor+) Arbitrary File Read via 'used_svg' and 'used_images'Revolution Slider Slider Revolution
- CVE-2025-4644User Session Fixation after Account Removal in PayloadCMSPayload CMS Payload · payload +2
- CVE-2025-4643Lack of JWT Expiration after Log Out in PayloadCMSPayload CMS Payload · payload +2
- CVE-2025-9071Insecure RSA-OAEP implementation with all-zero seed for padding in Oberon PSA CryptoOberon microsystems AG Oberon PSA Crypto
- CVE-2025-7383Timing side-channel vulnerability in AES-CBC decryption with PKCS#7 padding in Oberon PSA Crypto libraryOberon microsystems AG Oberon PSA Crypto
- CVE-2025-7071Timing side-channel vulnerability in AES-CBC decryption with PKCS#7 padding in ocrypto libraryOberon microsystems AG ocrypto
- CVE-2025-8150Events Addon for Elementor <= 2.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typewriter and Countdown Widgetsnicheaddons Events Addon for Elementor
- CVE-2024-13987Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Synology RADIUS Server allows remote aSynology RADIUS Server
- CVE-2025-54777Uncaught exception issue exists in Multiple products in bizhub series.Konica Minolta Multiple products in bizhub series
- CVE-2025-9441iATS Online Forms <= 1.2 - Authenticated (Contributor+) SQL Injection via order Parameteriatspaymentsdev iATS Online Forms
- CVE-2025-8290List Subpages <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via title Parameterweblineindia List Sub Pages
- CVE-2025-8619OSM Map Widget for Elementor <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button URLgarbowza OSM Map Widget for Elementor
- CVE-2025-9374Ultimate Tag Warrior Importer <= 0.2 - Cross-Site Request Forgerybriancolinger Ultimate Tag Warrior Importer
- CVE-2025-8147LWSCache <= 2.8.5 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Activation via lwscache_activatePlugin Functionaurelienlws LWSCache
- CVE-2025-53507Multiple products provided by iND Co.,Ltd contain an insecure storage of sensitive information vulnerability.iND Co. HL330-DLS · iND Co. HL320-DLS +7
- CVE-2025-9619E4 Sistemas Mercatus ERP id resource injectionE4 Sistemas Mercatus ERP
- CVE-2025-9610code-projects Online Event Judging System create_account.php sql injectioncode-projects Online Event Judging System
- CVE-2025-9609Portabilis i-Educar consulta improper authorizationPortabilis i-Educar
- CVE-2025-9608Portabilis i-Educar Formula de Cálculo de Média view sql injectionPortabilis i-Educar
- CVE-2025-9607Portabilis i-Educar Tabelas de Arredondamento view sql injectionPortabilis i-Educar
- CVE-2025-9606Portabilis i-Educar agenda_preferencias.php sql injectionPortabilis i-Educar
- CVE-2025-39246There is an Unquoted Service Path Vulnerability in some HikCentral FocSign versions.Hikvision HikCentral FocSign
- CVE-2025-39245There is a CSV Injection Vulnerability in some HikCentral Master Lite versions.Hikvision HikCentral Master Lite
- CVE-2025-9604coze-studio aes.go hard-coded keycoze-studio
- CVE-2025-9603Telesquare TLR-2005KSH internet.cgi command injectionTelesquare TLR-2005KSH
- CVE-2025-9602Xinhu RockOA index.php publicsaveAjax improper authorizationXinhu RockOA
- CVE-2025-9601itsourcecode Apartment Management System employee_salary_setup.php sql injectionitsourcecode Apartment Management System
- CVE-2025-9600itsourcecode Apartment Management System member_type_setup.php sql injectionitsourcecode Apartment Management System
- CVE-2025-9599itsourcecode Apartment Management System month_setup.php sql injectionitsourcecode Apartment Management System
- CVE-2024-54554This issue was addressed with improved handling of symlinks.Apple macOS
- CVE-2025-43284An out-of-bounds read was addressed with improved bounds checking.Apple macOS
- CVE-2024-54568The issue was addressed with improved memory handling.Apple macOS
- CVE-2024-44271The issue was addressed with improved checks.Apple macOS
- CVE-2025-43255An out-of-bounds read was addressed with improved bounds checking.Apple macOS
- CVE-2025-9598itsourcecode Apartment Management System year_setup.php sql injectionitsourcecode Apartment Management System
- CVE-2025-9597itsourcecode Apartment Management System rented_all_info.php sql injectionitsourcecode Apartment Management System
- CVE-2025-54142Akamai Ghost before 2025-07-21 allows HTTP Request Smuggling via an OPTIONS request that has an entity body, because there can be a subsequeAkamaiGhost
- CVE-2025-55579SolidInvoice version 2.3.7 is vulnerable to a Stored Cross-Site Scripting (XSS) issue in the Tax Rates functionality.
- CVE-2025-55580SolidInvoice version 2.3.7 is vulnerable to a stored cross-site scripting (XSS) issue in the Clients module.