Skip to content
OpenAdvisories

Archive

August 2025

Vulnerabilities first published in this month (UTC), newest first.

← July 2025 2025 / August September 2025 →
  1. 1112
  2. 242
  3. 329
  4. 485
  5. 5120
  6. 6217
  7. 791
  8. 876
  9. 941
  10. 1036
  11. 1193
  12. 12355
  13. 13147
  14. 14311
  15. 1593
  16. 1695
  17. 177
  18. 1875
  19. 19174
  20. 20274
  21. 21128
  22. 22169
  23. 2329
  24. 2424
  25. 25124
  26. 26130
  27. 27130
  28. 28192
  29. 29165
  30. 3044
  31. 3142
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • High 8.6
    CVE-2025-9377 Exploited EPSS 41%

    Authenticated RCE via Parental Control command injection

    The authenticated remote command execution (RCE) vulnerability exists in the Parental Control page on TP-Link Archer C7(EU) V2 and TL-WR841N/ND(MS) V9. This issue affects Archer C7(EU) V2: before 241108 and TL-WR841N/ND(MS) V9: before 241108. Both products ha…

    TP-Link Systems Archer C7(EU) V2 TL-WR841N/ND(MS) V9 Network devices
    KEV Sep 3, 2025
  • Medium 5.4
    CVE-2025-55177 Exploited Public exploit EPSS 14%

    Incomplete authorization of linked device synchronization messages in WhatsApp for iOS prior to v2.25.21.73, WhatsApp B…

    Facebook WhatsApp for iOS WhatsApp Business for iOS WhatsApp Desktop for Mac iOS
    KEV Sep 2, 2025
  • Critical 10.0
    CVE-2025-57819 Exploited Public exploit Scanner template EPSS 95%

    FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE

    FreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable due to insufficiently sanitized user-supplied data allowing unauthenticated access to FreePBX Administrator leading to arbitrary database manipulatio…

    FreePBX endpoint
    KEV Aug 29, 2025
  • Critical 9.2
    CVE-2025-7775 Exploited Public exploit EPSS 21%

    Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service

    Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server (OR) NetScaler ADC an…

    NetScaler ADC Gateway
    KEV Aug 26, 2025
  • Critical 10.0
    CVE-2025-43300 Exploited Public exploit EPSS 65%

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS …

    Apple macOS iOS and iPadOS iPadOS macOS iOS
    KEV Aug 21, 2025
  • Critical 9.4
    CVE-2025-8875 Exploited Public exploit

    Insecure Deserialization Vulnerability

    Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before 2025.3.1.

    N-able N-central
    KEV Aug 13, 2025
  • Critical 9.4
    CVE-2025-8876 Exploited

    Command Injection Vulnerability

    Improper Input Validation vulnerability in N-able N-central allows OS Command Injection.This issue affects N-central: before 2025.3.1.

    N-able N-central
    KEV Aug 13, 2025
  • High 7.5
    CVE-2025-25231 Exploited Public exploit Scanner template EPSS 25%

    Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor may be able to g…

    Omnissa Omnissa Workspace ONE UEM
  • High 8.4
    CVE-2025-8088 Exploited · Ransomware Public exploit EPSS 94%

    Path traversal vulnerability in WinRAR

    A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and …

    Win-Rar WinRAR clamav Alpine
    KEV Aug 12, 2025
  • Critical 10.0
    CVE-2025-54253 Exploited Public exploit EPSS 81%

    Adobe Experience Manager | Incorrect Authorization (CWE-863)

    Adobe Experience Manager versions 6.5.23 and earlier are affected by a Misconfiguration vulnerability that could result in arbitrary code execution. An attacker could leverage this vulnerability to bypass security mechanisms and execute code. Exploitation of …

    Adobe Adobe Experience Manager
    KEV Oct 15, 2025
  • Critical 9.4
    CVE-2025-54948 Exploited EPSS 33%

    A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker…

    Trend Micro Trend Micro Apex One
    KEV Aug 18, 2025
  • Critical 9.1
    CVE-2025-6205 Exploited Scanner template EPSS 67%

    Missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025

    A missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to gain privileged access to the application.

    Dassault Systèmes DELMIA Apriso
    KEV Oct 28, 2025
  • High 8.0
    CVE-2025-6204 Exploited Scanner template EPSS 77%

    Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025

    An Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to execute arbitrary code.

    Dassault Systèmes DELMIA Apriso
    KEV Oct 28, 2025