CVEs published August 31, 2025
42 CVEs were published on August 31, 2025: 2 critical, 3 high.
- Published
- 42
- Critical
- 2
- High
- 3
- Medium
- 35
- Low
- 2
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- O2OA
- 9
- Portabilis i-Educar
- 6
- code-projects Human Resource Integrated System
- 5
- Campcodes Online Learning Management System
- 2
- Campcodes Farm Management System
- 1
- Campcodes Hospital Management System
- 1
- Campcodes Online Loan Management System
- 1
- Campcodes Online Water Billing System
- 1
- Cudy LT500E
- 1
- D-Link DI-500WF
- 1
Critical 2
High 3
- CVE-2025-9748Tenda CH22 httpd IPSECsave fromIpsecitem stack-based overflowTenda CH22
- CVE-2025-47696WordPress Blog Designer PRO plugin <= 3.4.7 - Unauthenticated Non-Arbitrary Local File Inclusion vulnerabilitysolwin Blog Designer PRO
- CVE-2024-32589WordPress Barcode Scanner and Inventory manager plugin <= 1.5.3 - Broken Access Control to XSS vulnerabilityDmitry V. (CEO of "UKR Solution") Barcode Scanner with Inve…
Medium, low and unrated 37
- CVE-2025-9751Campcodes Online Learning Management System login.php sql injectionCampcodes Online Learning Management System
- CVE-2025-9750Campcodes Online Learning Management System login.php sql injectionCampcodes Online Learning Management System
- CVE-2025-9749HKritesh009 Grocery List Management Web App update.php sql injectionHKritesh009 Grocery List Management Web App
- CVE-2025-9747Koillection csrf_protection_controller.js cross-site request forgeryKoillection
- CVE-2025-9746Campcodes Hospital Management System Edit Doctor Specialization edit-doctor-specialization.php cross site scriptingCampcodes Hospital Management System
- CVE-2025-9745D-Link DI-500WF jhttpd version_upgrade.asp os command injectionD-Link DI-500WF
- CVE-2025-9744Campcodes Online Loan Management System ajax.php sql injectionCampcodes Online Loan Management System
- CVE-2025-9743code-projects Human Resource Integrated System login_attendance2.php sql injectioncode-projects Human Resource Integrated System
- CVE-2025-9742code-projects Human Resource Integrated System login.php sql injectioncode-projects Human Resource Integrated System
- CVE-2025-9741code-projects Human Resource Integrated System login_query12.php sql injectioncode-projects Human Resource Integrated System
- CVE-2025-9740code-projects Human Resource Integrated System log_query.php sql injectioncode-projects Human Resource Integrated System
- CVE-2025-9739Campcodes Online Water Billing System process.php sql injectionCampcodes Online Water Billing System
- CVE-2025-9738Portabilis i-Educar educar_tipo_ensino_cad.php cross site scriptingPortabilis i-Educar
- CVE-2025-9737O2OA Personal Profile importmodel cross site scriptingO2OA
- CVE-2025-9736O2OA Personal Profile statement cross site scriptingO2OA
- CVE-2025-9735O2OA Personal Profile table cross site scriptingO2OA
- CVE-2025-9734O2OA Personal Profile stat cross site scriptingO2OA
- CVE-2025-9733code-projects Human Resource Integrated System login_timeee.php sql injectioncode-projects Human Resource Integrated System
- CVE-2025-9732DCMTK dcm2img diybrpxt.h memory corruptionDCMTK
- CVE-2025-9731Tenda AC9 Administrative shadow hard-coded credentialsTenda AC9
- CVE-2025-9730itsourcecode Apartment Management System updateProfile.php sql injectionitsourcecode Apartment Management System
- CVE-2025-9729PHPGurukul Online Course Registration student-registration.php sql injectionPHPGurukul Online Course Registration
- CVE-2025-9728givanz Vvveb login.tpl cross site scriptinggivanz Vvveb
- CVE-2025-9727D-Link DIR-816L soap.cgi soapcgi_main os command injectionD-Link DIR-816L
- CVE-2025-9726Campcodes Farm Management System review.php sql injectionCampcodes Farm Management System
- CVE-2025-9725Cudy LT500E Web shadow hard-coded passwordCudy LT500E
- CVE-2025-9724Portabilis i-Educar educar_nivel_ensino_cad.php cross site scriptingPortabilis i-Educar
- CVE-2025-9723Portabilis i-Educar educar_tipo_regime_cad.php cross site scriptingPortabilis i-Educar
- CVE-2025-9722Portabilis i-Educar educar_tipo_ocorrencia_disciplinar_cad.php cross site scriptingPortabilis i-Educar
- CVE-2025-9721Portabilis i-Educar edit cross site scriptingPortabilis i-Educar
- CVE-2025-9720Portabilis i-Educar Cadastrar tabela de arredondamento edit cross site scriptingPortabilis i-Educar
- CVE-2025-9719O2OA Personal Profile script cross site scriptingO2OA
- CVE-2025-9718O2OA Personal Profile process cross site scriptingO2OA
- CVE-2025-9717O2OA Personal Profile unit cross site scriptingO2OA
- CVE-2025-9716O2OA Personal Profile form cross site scriptingO2OA
- CVE-2025-5083Amministrazione Trasparente <= 9.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via print_r Functionmilmor Amministrazione Trasparente
- CVE-2025-9715O2OA Personal Profile script cross site scriptingO2OA