Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: August 2025

328 records · 12 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 1 of 4

  • CVE-2025-5947
    40Plan

    Service Finder Bookings <= 6.0 - Authentication Bypass via User Switch Cookie

    CriticalCVSS 9.8Proof of conceptEPSS 4%

    aonetheme · service finder bookingsAug 1, 2025

  • CVE-2025-54939
    30Monitor

    LiteSpeed QUIC (LSQUIC) Library before 4.3.1 has an lsquic_engine_packet_in memory leak.

    HighCVSS 7.5Proof of conceptEPSS 0%

    litespeedtech · litespeed web adcAug 1, 2025

  • CVE-2025-41373
    34Monitor

    SQL injection vulnerability in Gandia Integra Total

    HighCVSS 8.7Proof of conceptEPSS 1%

    tesigandia · gandia integra totalAug 1, 2025

  • CVE-2023-44976
    12Monitor

    Hangzhou Shunwang Rentdrv2 before 2024-12-24 allows local users to terminate EDR processes and possibly have unspecified other impact via De

    LowCVSS 3.2Proof of conceptEPSS 0%

    hangzhou shunwang · rentdrv2Aug 1, 2025

  • CVE-2025-46018
    21Monitor

    CSC Pay Mobile App 2.19.4 (fixed in version 2.20.0) contains a vulnerability allowing users to bypass payment authorization by disabling Blu

    MediumCVSS 5.4Proof of conceptEPSS 0%

    cscsw · pay mobileAug 1, 2025

  • CVE-2025-50460
    40Plan

    A remote code execution (RCE) vulnerability exists in the ms-swift project version 3.3.0 due to unsafe deserialization in tests/run.py using

    CriticalCVSS 9.8Proof of conceptEPSS 2%

    Aug 1, 2025

  • CVE-2025-50472
    39Monitor

    The modelscope/ms-swift library thru 2.6.1 is vulnerable to arbitrary code execution through deserialization of untrusted data within the `l

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    Aug 1, 2025

  • CVE-2025-45778
    24Monitor

    A stored cross-site scripting (XSS) vulnerability in The Language Sloth Web Application v1.0 allows attackers to execute arbitrary web scrip

    MediumCVSS 6.1Proof of conceptEPSS 0%

    languagesloth · the language slothAug 1, 2025

  • CVE-2025-51501
    24Monitor

    Reflected Cross-Site Scripting (XSS) in the id parameter of the live_edit.module_settings API endpoint in Microweber CMS2.0 allows execution

    MediumCVSS 6.1Proof of conceptEPSS 0%

    microweber · microweberAug 1, 2025

  • CVE-2025-51502
    24Monitor

    Reflected Cross-Site Scripting (XSS) in Microweber CMS 2.0 via the layout parameter on the /admin/page/create page allows arbitrary JavaScri

    MediumCVSS 6.1Proof of conceptEPSS 0%

    microweber · microweberAug 1, 2025

  • CVE-2025-54574
    46Plan

    Squid's URN Handling can lead to Buffer Overflow

    CriticalCVSS 9.8Proof of conceptEPSS 23%

    squid-cache · squidAug 1, 2025

  • CVE-2012-10022
    40Plan

    Kloxo <= 6.1.12 Local Privilege Escalation

    HighCVSS 8.5WeaponizedEPSS 0%

    lxcenter · kloxoAug 1, 2025

  • CVE-2013-10044
    40Plan

    OpenEMR ≤ 4.1.1 SQL Injection Privilege Escalation and RCE

    HighCVSS 8.7WeaponizedEPSS 1%

    open-emr · openemrAug 1, 2025

  • CVE-2013-10046
    40Plan

    Agnitum Outpost Internet Security Local Privilege Escalation

    HighCVSS 8.5WeaponizedEPSS 0%

    agnitum ltd. · outpost internet securityAug 1, 2025

  • CVE-2013-10047
    60This week

    MiniWeb <= Build 300 Arbitrary File Upload

    CriticalCVSS 9.3WeaponizedEPSS 1%

    miniweb · miniwebAug 1, 2025

  • CVE-2013-10048
    60This week

    D-Link Devices command.php Unauthenticated RCE

    CriticalCVSS 9.3WeaponizedEPSS 17%

    dlink · dir-300 firmwareAug 1, 2025

  • CVE-2013-10049
    60This week

    Raidsonic NAS Devices Unauthenticated Remote Command Execution

    CriticalCVSS 9.3WeaponizedEPSS 2%

    raidsonic technology gmbh · ib-nas5220Aug 1, 2025

  • CVE-2013-10050
    40Plan

    D-Link Devices tools_vct.xgi Authenticated RCE

    HighCVSS 8.7WeaponizedEPSS 13%

    dlink · dir-300 firmwareAug 1, 2025

  • CVE-2013-10051
    60This week

    InstantCMS <= 1.6 Remote PHP Code Execution

    CriticalCVSS 9.3WeaponizedEPSS 2%

    instantcms · instantcmsAug 1, 2025

  • CVE-2013-10053
    40Plan

    ZPanel <= 10.0.0.2 htpasswd Module Username Command Execution

    HighCVSS 8.7WeaponizedEPSS 1%

    zpanel project · zpanelAug 1, 2025

  • CVE-2013-10055
    60This week

    Havalite CMS Arbitary File Upload RCE

    CriticalCVSS 9.3WeaponizedEPSS 1%

    havalite cms · havalite cmsAug 1, 2025

  • CVE-2013-10057
    60This week

    Synactis PDF In-The-Box ConnectToSynactic Stack-Based Buffer Overflow

    HighCVSS 7.5WeaponizedEPSS 1%

    synactis · pdf in-the-boxAug 1, 2025

  • CVE-2013-10058
    40Plan

    Linksys Routers apply.cgi Remote Command Injection

    HighCVSS 8.6WeaponizedEPSS 4%

    linksys · wrt160nv2Aug 1, 2025

  • CVE-2013-10059
    42Plan

    D-Link Routers tools_vct.htm OS Command Injection

    HighCVSS 8.6WeaponizedEPSS 26%

    dlink · dir-615h firmwareAug 1, 2025

  • CVE-2013-10060
    40Plan

    Netgear Routers pppoe.cgi RCE

    CriticalCVSS 9.4WeaponizedEPSS 6%

    netgear · dgn2200b firmwareAug 1, 2025

  • CVE-2013-10061
    40Plan

    Netgear Routers setup.cgi RCE

    HighCVSS 8.6WeaponizedEPSS 6%

    netgear · dgn1000b firmwareAug 1, 2025

  • CVE-2013-10062
    40Plan

    Linksys Routers apply.cgi Path Traversal

    MediumCVSS 6.9WeaponizedEPSS 2%

    linksys · e1500Aug 1, 2025

  • CVE-2013-10063
    40Plan

    Netgear SPH200D <= 1.0.4.80 Path Traversal via HTTP GET

    MediumCVSS 6.9WeaponizedEPSS 1%

    netgear · sph200dAug 1, 2025

  • CVE-2025-54424
    39Monitor

    1Panel Agent Bypasses Certificate Verification Leading to Arbitrary Command Execution

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    fit2cloud · 1panelAug 1, 2025

  • CVE-2025-54136
    43Plan

    Cursor's Modification of MCP Server Definitions Bypasses Manual Re-approvals

    HighCVSS 8.8Proof of conceptEPSS 28%

    anysphere · cursorAug 1, 2025

  • CVE-2025-54782
    53Plan

    @nestjs/devtools-integration's CSRF to Sandbox Escape Allows for RCE against JS Developers

    CriticalCVSS 9.4Proof of conceptEPSS 52%

    nestjs · devtools-integrationAug 1, 2025

  • CVE-2025-8471
    22Monitor

    projectworlds Online Admission System adminlogin.php sql injection

    MediumCVSS 5.5Proof of conceptEPSS 0%

    projectworlds · online admission systemAug 2, 2025

  • CVE-2025-54962
    25Monitor

    /edit-user in webserver in OpenPLC Runtime 3 through 9cd8f1b allows authenticated users to upload arbitrary files (such as .html or .svg), a

    MediumCVSS 6.4Proof of conceptEPSS 0%

    thiagoralves · openplc_v3Aug 3, 2025

  • CVE-2025-20700
    38Monitor

    In the Airoha Bluetooth audio SDK, there is a possible permission bypass that allows access critical data of RACE protocol through Bluetooth

    HighCVSS 8.8Proof of conceptEPSS 9%

    airoha technology corp. · ab156x, ab157x, ab158x, ab159x series, ab1627Aug 4, 2025

  • CVE-2025-20701
    38Monitor

    In the Airoha Bluetooth audio SDK, there is a possible way to pair Bluetooth audio device without user consent.

    HighCVSS 8.8Proof of conceptEPSS 8%

    airoha technology corp. · ab156x, ab157x, ab158x, ab159x seriesAug 4, 2025

  • CVE-2025-20702
    38Monitor

    In the Airoha Bluetooth audio SDK, there is a possible unauthorized access to the RACE protocol.

    HighCVSS 8.8No exploitEPSS 11%

    airoha technology corp. · ab156x, ab157x, ab158x, ab159x series, ab1627Aug 4, 2025

  • CVE-2025-6204
    86Now

    Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025

    HighCVSS 8.0KEVWeaponizedEPSS 79%

    3ds · delmia aprisoAug 4, 2025

  • CVE-2025-6205
    88Now

    Missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025

    CriticalCVSS 9.1KEVWeaponizedEPSS 73%

    3ds · delmia aprisoAug 4, 2025

  • CVE-2025-36604
    59Plan

    Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection

    CriticalCVSS 9.8Proof of conceptEPSS 66%

    dell · unity operating environmentAug 4, 2025

  • CVE-2025-8517
    9Monitor

    givanz Vvveb session fixiation

    LowCVSS 2.1Proof of conceptEPSS 2%

    vvveb · vvvebAug 4, 2025

  • CVE-2025-50420
    26Monitor

    An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted

    MediumCVSS 6.5Proof of conceptEPSS 0%

    freedesktop · popplerAug 4, 2025

  • CVE-2025-50422
    11Monitor

    Cairo through 1.18.4, as used in Poppler through 25.08.0, has an "unscaled->face == NULL" assertion failure for _cairo_ft_unscaled_font_fini

    LowCVSS 2.9Proof of conceptEPSS 0%

    cairographics · cairoAug 4, 2025

  • CVE-2025-8518
    40Plan

    givanz Vvveb Code Editor code.php save code injection

    LowCVSS 2.0WeaponizedEPSS 2%

    vvveb · vvvebAug 4, 2025

  • CVE-2013-10052
    40Plan

    ZPanel zsudo Local Privilege Escalation

    HighCVSS 8.5WeaponizedEPSS 0%

    zpanel project · zpanelAug 4, 2025

  • CVE-2013-10054
    60This week

    LibrettoCMS File Manager Arbitrary File Upload

    CriticalCVSS 9.3WeaponizedEPSS 1%

    librettocms · librettocmsAug 4, 2025

  • CVE-2025-46206
    26Monitor

    An issue in Artifex mupdf 1.25.6, 1.25.5 allows a remote attacker to cause a denial of service via an infinite recursion in the `mutool clea

    MediumCVSS 6.5Proof of conceptEPSS 0%

    artifex · mupdfAug 4, 2025

  • CVE-2025-50340
    17Monitor

    An Insecure Direct Object Reference (IDOR) vulnerability was discovered in SOGo Webmail thru 5.6.0, allowing an authenticated user to send e

    MediumCVSS 4.3Proof of conceptEPSS 0%

    Aug 4, 2025

  • CVE-2025-50341
    39Monitor

    A Boolean-based SQL injection vulnerability was discovered in Axelor 5.2.4 via the _domain parameter.

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    Aug 4, 2025

  • CVE-2025-50754
    38Monitor

    Unisite CMS version 5.0 contains a stored Cross-Site Scripting (XSS) vulnerability in the "Report" functionality.

    CriticalCVSS 9.6Proof of conceptEPSS 0%

    Aug 4, 2025

  • CVE-2025-51726
    33Monitor

    CyberGhostVPNSetup.exe (Windows installer) is signed using the weak cryptographic hash algorithm SHA-1, which is vulnerable to collision att

    HighCVSS 8.4Proof of conceptEPSS 0%

    Aug 4, 2025

  • CVE-2025-54554
    21Monitor

    tiaudit in Tera Insights tiCrypt before 2025-07-17 allows unauthenticated REST API requests that reveal sensitive information about the unde

    MediumCVSS 5.3Proof of conceptEPSS 0%

    tera insights · ticryptAug 4, 2025

  • CVE-2025-46094
    15Monitor

    LiquidFiles before 4.1.2 allows directory traversal by configuring the pathname of a local executable file as an Actionscript.

    LowCVSS 3.8No exploitEPSS 0%

    liquidfiles · liquidfilesAug 4, 2025

  • CVE-2025-54135
    40Plan

    Cursor Agent is vulnerable to prompt injection via MCP Special Files

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    anysphere · cursorAug 4, 2025

  • CVE-2025-54794
    30Monitor

    Claude Code Research Preview has a Path Restriction Bypass which could allow unauthorized file access

    HighCVSS 7.7Proof of conceptEPSS 1%

    anthropic · claude codeAug 4, 2025

  • CVE-2025-54795
    34Monitor

    Claude Code echo command allowed bypass of user approval prompt for command execution

    HighCVSS 8.7Proof of conceptEPSS 1%

    anthropic · claude codeAug 4, 2025

  • CVE-2025-53417
    41Plan

    File Parsing Deserialization of Untrusted Data in DTM Soft

    CriticalCVSS 9.3No exploitEPSS 14%

    delta electronics · diaviewAug 4, 2025

  • CVE-2025-8550
    7Monitor

    atjiu pybbs list cross site scripting

    LowCVSS 1.9Proof of conceptEPSS 0%

    pybbs project · pybbsAug 5, 2025

  • CVE-2025-54948
    76This week

    A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious

    CriticalCVSS 9.8KEVWeaponizedEPSS 23%

    trendmicro · apex oneAug 5, 2025

  • CVE-2025-54987
    45Plan

    A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious

    CriticalCVSS 9.8No exploitEPSS 19%

    trendmicro · apex oneAug 5, 2025

  • CVE-2025-2611
    60This week

    ICTBroadcast <= 7.4 Unauthenticated Session Cookie RCE

    CriticalCVSS 9.3WeaponizedEPSS 8%

    ict innovations · ictbroadcastAug 5, 2025

  • CVE-2025-54874
    26Monitor

    OpenJPEG allows OOB heap memory write in opj_jp2_read_header

    MediumCVSS 6.6Proof of conceptEPSS 0%

    uclouvain · openjpegAug 5, 2025

  • CVE-2025-54253
    96Now

    Adobe Experience Manager | Incorrect Authorization (CWE-863)

    CriticalCVSS 10.0KEVWeaponizedEPSS 88%

    adobe · experience manager formsAug 5, 2025

  • CVE-2025-54254
    57Plan

    Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)

    HighCVSS 8.6No exploitEPSS 77%

    adobe · experience manager formsAug 5, 2025

  • CVE-2025-45512
    26Monitor

    A lack of signature verification in the bootloader of DENX Software Engineering Das U-Boot (U-Boot) v1.1.3 allows attackers to install craft

    MediumCVSS 6.5Proof of conceptEPSS 0%

    denx · u-bootAug 5, 2025

  • CVE-2012-10023
    60This week

    FreeFloat FTP Server USER Command Buffer Overflow

    MediumCVSS 6.9WeaponizedEPSS 2%

    freefloat · freefloat ftp serverAug 5, 2025

  • CVE-2012-10024
    40Plan

    XBMC ≤ 11.0 Web Server Path Traversal

    HighCVSS 7.1WeaponizedEPSS 1%

    xbmc · media centerAug 5, 2025

  • CVE-2012-10025
    60This week

    WordPress Plugin Advanced Custom Fields <= 3.5.1 Remote File Inclusion

    CriticalCVSS 10.0WeaponizedEPSS 1%

    advanced custom fields · wordpress pluginAug 5, 2025

  • CVE-2012-10026
    60This week

    WordPress Plugin Asset-Manager <= 2.0 PHP File Upload

    CriticalCVSS 10.0WeaponizedEPSS 1%

    jkriddle · asset-managerAug 5, 2025

  • CVE-2012-10027
    60This week

    WordPress Plugin WP-Property <= 1.35.0 PHP File Upload

    CriticalCVSS 9.3WeaponizedEPSS 1%

    wp-property · wordpress pluginAug 5, 2025

  • CVE-2012-10028
    40Plan

    Netwin SurgeFTP <= v23c8 Authenticated RCE

    HighCVSS 8.6WeaponizedEPSS 1%

    netwin · surgeftpAug 5, 2025

  • CVE-2012-10029
    40Plan

    Nagios XI Network Monitor Graph Explorer Component < 1.3 Authenticated Command Injection

    HighCVSS 8.6WeaponizedEPSS 3%

    nagios enterprises · nagios xi graph explorerAug 5, 2025

  • CVE-2012-10030
    60This week

    FreeFloat FTP Server Arbitrary File Upload

    CriticalCVSS 9.3WeaponizedEPSS 2%

    freefloat · freefloat ftp serverAug 5, 2025

  • CVE-2012-10031
    60This week

    BlazeVideo HDTV Player Pro 6.6.0.3 Filename Handling Buffer Overflow

    HighCVSS 8.6WeaponizedEPSS 1%

    blazevideo inc. · hdtv player proAug 5, 2025

  • CVE-2012-10032
    60This week

    Maxthon3 about:history XCS Trusted Zone Code Execution

    HighCVSS 8.7WeaponizedEPSS 1%

    maxthon international ltd. · maxthon3 browserAug 5, 2025

  • CVE-2012-10033
    60This week

    Narcissus backend.php Image Configuration Command Injection

    CriticalCVSS 9.3WeaponizedEPSS 1%

    ångström distribution project · narcissusAug 5, 2025

  • CVE-2012-10034
    60This week

    ClanSphere 2011.3 Local File Inclusion via cs_lang Cookie

    HighCVSS 8.7WeaponizedEPSS 1%

    csphere · clansphereAug 5, 2025

  • CVE-2012-10035
    60This week

    Turbo FTP Server 1.30.823/826 PORT Command Buffer Overflow

    CriticalCVSS 10.0WeaponizedEPSS 1%

    turbosoft, inc. · turboftp serverAug 5, 2025

  • CVE-2013-10064
    60This week

    ActFax 5.01 RAW Server Buffer Overflow

    CriticalCVSS 9.3WeaponizedEPSS 1%

    actfax communication · actfax serverAug 5, 2025

  • CVE-2013-10065
    60This week

    Sysax Multi-Server <= 6.10 SSHD Key Exchange DoS

    HighCVSS 8.7WeaponizedEPSS 1%

    sysax · multi serverAug 5, 2025

  • CVE-2013-10066
    60This week

    Kordil EDMS v2.2.60rc3 Unauthenticated Arbitrary File Upload

    CriticalCVSS 10.0WeaponizedEPSS 1%

    kordil · edmsAug 5, 2025

  • CVE-2013-10067
    40Plan

    Glossword 1.8.8 - 1.8.12 Arbitrary File Upload RCE

    CriticalCVSS 9.4WeaponizedEPSS 1%

    glossword team · glosswordAug 5, 2025

  • CVE-2013-10068
    60This week

    Foxit Reader <= 5.4.5.0114 Plugin URL Processing Buffer Overflow

    CriticalCVSS 9.4WeaponizedEPSS 1%

    foxit · foxit readerAug 5, 2025

  • CVE-2013-10069
    60This week

    D-Link Devices Unauthenticated RCE

    CriticalCVSS 10.0WeaponizedEPSS 16%

    dlink · dir-600 firmwareAug 5, 2025

  • CVE-2013-10070
    60This week

    PHP-Charts v1.0 PHP Code Execution

    CriticalCVSS 10.0WeaponizedEPSS 2%

    php-charts · php-chartsAug 5, 2025

  • CVE-2014-125113
    60This week

    Dell/Quest KACE K1000 Unauthenticated File Upload RCE

    CriticalCVSS 9.3WeaponizedEPSS 1%

    dell/quest · kace k1000 systems management applianceAug 5, 2025

  • CVE-2025-50592
    21Monitor

    Cross site scripting vulnerability in seacms before 13.2 via the vid parameter to Upload/js/player/dmplayer/player.

    MediumCVSS 5.4Proof of conceptEPSS 0%

    seacms · seacmsAug 5, 2025

  • CVE-2025-52078
    26Monitor

    File upload vulnerability in Writebot AI Content Generator SaaS React Template thru 4.0.0, allowing remote attackers to gain escalated privi

    MediumCVSS 6.5Proof of conceptEPSS 0%

    Aug 5, 2025

  • CVE-2025-8571
    19Monitor

    Concrete CMS 9 through 9.4.2 and below 8.5.21 is vulnerable to Reflected Cross-Site Scripting (XSS) in Conversation Messages Dashboard Page

    MediumCVSS 4.8Proof of conceptEPSS 0%

    concretecms · concrete cmsAug 5, 2025

  • CVE-2025-8573
    8Monitor

    Concrete CMS 9 through 9.4.2 is vulnerable to Stored XSS from Home Folder on Members Dashboard page

    LowCVSS 2.0Proof of conceptEPSS 0%

    concretecms · concrete cmsAug 5, 2025

  • CVE-2025-32430
    26Monitor

    XWiki Platform contains Reflected XSS vulnerability in two templates

    MediumCVSS 6.5Proof of conceptEPSS 0%

    xwiki · xwikiAug 5, 2025

  • CVE-2025-54125
    34Monitor

    XWiki Platform: Password and email exposure in xml.vm fields

    HighCVSS 8.7Proof of conceptEPSS 1%

    xwiki · xwikiAug 5, 2025

  • CVE-2025-54594
    36Monitor

    react-native-bottom-tabs: Arbitrary code execution in GitHub Actions canary workflow leads to secret exfiltration

    CriticalCVSS 9.1Proof of conceptEPSS 0%

    callstackincubator · react-native-bottom-tabsAug 5, 2025

  • CVE-2025-7771
    36Monitor

    Code Execution / Escalation of Privileges in ThrottleStop

    HighCVSS 8.7Proof of conceptEPSS 8%

    techpowerup · throttlestopAug 6, 2025

  • CVE-2025-23320
    30Monitor

    NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause the share

    HighCVSS 7.5Proof of conceptEPSS 0%

    nvidia · triton inference serverAug 6, 2025

  • CVE-2025-50286
    60This week

    A Remote Code Execution (RCE) vulnerability in Grav CMS v1.7.48 allows an authenticated admin to upload a malicious plugin via the /admin/to

    HighCVSS 8.1WeaponizedEPSS 13%

    getgrav · gravAug 6, 2025

  • CVE-2025-51040
    30Monitor

    Electrolink FM/DAB/TV Transmitter Web Management System Unauthorized access vulnerability via the /FrameSetCore.html endpoint in Electrolink

    HighCVSS 7.5Proof of conceptEPSS 0%

    electrolink · fm\/dab\/tv transmitter web management systemAug 6, 2025

  • CVE-2025-53786
    34Monitor

    Microsoft Exchange Server Hybrid Deployment Elevation of Privilege Vulnerability

    HighCVSS 8.0Proof of conceptEPSS 7%

    microsoft · exchange serverAug 6, 2025

  • CVE-2025-7769
    40Plan

    Improper Neutralization of Special Elements used in a Command ('Command Injection') in Tigo Energy Cloud Connect Advanced

    HighCVSS 8.7Proof of conceptEPSS 19%

    tigo energy · cloud connect advancedAug 6, 2025

  • CVE-2025-32094
    16Monitor

    An issue was discovered in Akamai Ghost, as used for the Akamai CDN platform before 2025-03-26.

    MediumCVSS 4.0Proof of conceptEPSS 0%

    akamai · akamaighostAug 7, 2025

  • CVE-2025-47188
    42Plan

    A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones through 6.4 SP4 (R6.4.0.4006), and the 6970 Conference Un

    MediumCVSS 6.5Proof of conceptEPSS 53%

    Aug 7, 2025