CVEs published August 30, 2025
44 CVEs were published on August 30, 2025: 9 critical, 7 high.
- Published
- 44
- Critical
- 9
- High
- 7
- Medium
- 27
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 9
Most affected products
- SUNNET Technology Co. Corporate Training Management System
- 5
- O2OA
- 4
- Portabilis i-Educar
- 4
- SourceCodester Water Billing System
- 3
- Campcodes Online Shopping System
- 2
- SourceCodester Advanced School Management System
- 2
- SourceCodester Simple Cafe Billing System
- 2
- AA-Team Pro Bulk Watermark Plugin for WordPress
- 1
- activePDF WebGrabber
- 1
- Apache Friends XAMPP
- 1
Critical 9
- CVE-2011-10032Sunway Forcecontrol SNMP NetDBServer.exe Opcode 0x57Sunway ForceControl
- CVE-2009-20010Dogfood CRM spell.php RCEDogfood CRM
- CVE-2009-20011ContentKeeper Web Appliance < 125.10 RCE via mimencodeContentKeeper Technologies ContentKeeper Web Appliance
- CVE-2010-10016BS.Player 2.57 Buffer Overflow via M3U Playlist ImportBS.Player Free and Pro Editions
- CVE-2009-20009Belkin Bulldog Plus Web Service Buffer OverflowBelkin International Bulldog Plus UPS Monitoring Software
- CVE-2025-54946SUNNET Corporate Training Management System - SQL InjectionSUNNET Technology Co. Corporate Training Management System
- CVE-2025-54945SUNNET Corporate Training Management System - External Control of File Name or PathSUNNET Technology Co. Corporate Training Management System
- CVE-2025-54943SUNNET Corporate Training Management System - Missing AuthorizationSUNNET Technology Co. Corporate Training Management System
- CVE-2025-54942SUNNET Corporate Training Management System - Missing Authentication for Critical FunctionSUNNET Technology Co. Corporate Training Management System
High 7
- CVE-2012-10062XAMPP WebDAV PHP Upload Authentication Bypass RCEApache Friends XAMPP
- CVE-2010-10017WM Downloader 3.1.2.2 Buffer Overflow via Malformed M3U FileWM Downloader
- CVE-2009-20008Green Dam 3.17 URL Processing Buffer OverflowZhengzhou Jinhui Computer System Engineering Co. Ltd. ; Bei…
- CVE-2005-10004Cacti graph_view.php RCE via graph_start Parameter InjectionRaxnet/Ian Berry Cacti
- CVE-2008-20001activePDF WebGrabber ActiveX Control Buffer OverflowactivePDF WebGrabber
- CVE-2025-0165IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data SQL injectionwatsonx Orchestrate Cartridge for IBM Cloud Pak for Data
- CVE-2025-38677f2fs: fix to avoid out-of-boundary access in dnode pageLinux
Medium, low and unrated 28
- CVE-2025-9706SourceCodester Water Billing System edit.php sql injectionSourceCodester Water Billing System
- CVE-2025-9705SourceCodester Water Billing System paybill.php sql injectionSourceCodester Water Billing System
- CVE-2025-9704SourceCodester Water Billing System viewbill.php sql injectionSourceCodester Water Billing System
- CVE-2025-9702SourceCodester Simple Cafe Billing System sales_report.php sql injectionSourceCodester Simple Cafe Billing System
- CVE-2025-9701SourceCodester Simple Cafe Billing System receipt.php sql injectionSourceCodester Simple Cafe Billing System
- CVE-2025-9700SourceCodester Online Book Store publisher_list.php sql injectionSourceCodester Online Book Store
- CVE-2025-9699SourceCodester Online Polling System Code checklogin.php sql injectionSourceCodester Online Polling System Code
- CVE-2025-9695GalleryVault Gallery Vault App com.thinkyeah.galleryvault AndroidManifest.xml improper export of android application componentsGalleryVault Gallery Vault App
- CVE-2025-9694Campcodes Advanced Online Voting System login.php sql injectionCampcodes Advanced Online Voting System
- CVE-2025-9692Campcodes Online Shopping System product.php sql injectionCampcodes Online Shopping System
- CVE-2025-9691Campcodes Online Shopping System login.php sql injectionCampcodes Online Shopping System
- CVE-2025-9690SourceCodester Advanced School Management System vendordetails sql injectionSourceCodester Advanced School Management System
- CVE-2025-9689SourceCodester Advanced School Management System item_select sql injectionSourceCodester Advanced School Management System
- CVE-2025-9688Mupen64Plus is_viewer.c write_is_viewer integer overflowMupen64Plus
- CVE-2025-9687Portabilis i-Educar processamentoApi improper authorizationPortabilis i-Educar
- CVE-2025-9686Portabilis i-Educar Listagem de áreas de conhecimento edit sql injectionPortabilis i-Educar
- CVE-2025-9685Portabilis i-Educar Listagem de áreas de conhecimento view sql injectionPortabilis i-Educar
- CVE-2025-9684Portabilis i-Educar Formula de Cálculo de Média edit sql injectionPortabilis i-Educar
- CVE-2025-9683O2OA Personal Profile form cross site scriptingO2OA
- CVE-2025-9682O2OA Personal Profile appdict cross site scriptingO2OA
- CVE-2025-9681O2OA Personal Profile agent cross site scriptingO2OA
- CVE-2025-9680O2OA Personal Profile page cross site scriptingO2OA
- CVE-2025-9679itsourcecode Student Information System course_edit1.php sql injectionitsourcecode Student Information System
- CVE-2025-9500TablePress <= 3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode_debug Parametertobiasbg TablePress – Tables in WordPress made easy
- CVE-2025-9499Ocean Extra <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via oceanwp_library Shortcodeoceanwp Ocean Extra
- CVE-2025-54944SUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous TypeSUNNET Technology Co. Corporate Training Management System
- CVE-2025-4956WordPress Pro Bulk Watermark Plugin for WordPress Theme <= 2.0 - Path Traversal VulnerabilityAA-Team Pro Bulk Watermark Plugin for WordPress
- CVE-2025-9618Related Posts Lite <= 1.12 - Cross-Site Request Forgerywpdreams Related Posts Lite