Archive

August 2025

Vulnerabilities first published in this month (UTC), newest first.

← July 2025 2025 / August September 2025 →

All Critical High Medium Low Exploited only Public exploit

1,498 results · Clear filters · Feed

Medium 6.8

CVE-2025-8650

Kenwood DMX958XR libSystemLib Command Injection Remote Code Execution Vulnerability

Kenwood DMX958XR libSystemLib Command Injection Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to expl…

Kenwood DMX958XR

Aug 6, 2025
Medium 6.8

CVE-2025-8649

Kenwood DMX958XR JKWifiService Command Injection Remote Code Execution Vulnerability

Kenwood DMX958XR JKWifiService Command Injection Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exp…

Kenwood DMX958XR

Aug 6, 2025
Medium 6.8

CVE-2025-8648

Kenwood DMX958XR Firmware Update Command Injection Vulnerability

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerabil…

Kenwood DMX958XR

Aug 6, 2025
Medium 6.8

CVE-2025-8647

Kenwood DMX958XR Firmware Update Command Injection Vulnerability

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerabil…

Kenwood DMX958XR

Aug 6, 2025
Medium 6.8

CVE-2025-8646

Kenwood DMX958XR Firmware Update Command Injection Vulnerability

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerabil…

Kenwood DMX958XR

Aug 6, 2025
Medium 6.8

CVE-2025-8645

Kenwood DMX958XR Firmware Update Command Injection Vulnerability

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerabil…

Kenwood DMX958XR

Aug 6, 2025
Medium 6.8

CVE-2025-8644

Kenwood DMX958XR Firmware Update Command Injection Vulnerability

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerabil…

Kenwood DMX958XR

Aug 6, 2025
Medium 6.8

CVE-2025-8643

Kenwood DMX958XR Firmware Update Command Injection Vulnerability

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerabil…

Kenwood DMX958XR

Aug 6, 2025
Medium 6.8

CVE-2025-8642

Kenwood DMX958XR Firmware Update Command Injection Vulnerability

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerabil…

Kenwood DMX958XR

Aug 6, 2025
Medium 6.8

CVE-2025-8641

Kenwood DMX958XR Firmware Update Command Injection Vulnerability

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerabil…

Kenwood DMX958XR

Aug 6, 2025
Medium 6.8

CVE-2025-8640

Kenwood DMX958XR Firmware Update Command Injection Vulnerability

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerabil…

Kenwood DMX958XR

Aug 6, 2025
Medium 6.8

CVE-2025-8639

Kenwood DMX958XR Firmware Update Command Injection Vulnerability

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific…

Kenwood DMX958XR

Aug 6, 2025
Medium 6.8

CVE-2025-8638

Kenwood DMX958XR Firmware Update Command Injection Vulnerability

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerabil…

Kenwood DMX958XR

Aug 6, 2025
Medium 6.8

CVE-2025-8637

Kenwood DMX958XR Firmware Update Command Injection Vulnerability

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerabil…

Kenwood DMX958XR

Aug 6, 2025
Medium 6.8

CVE-2025-8636

Kenwood DMX958XR Firmware Update Command Injection Vulnerability

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerabil…

Kenwood DMX958XR

Aug 6, 2025
Medium 6.8

CVE-2025-8635

Kenwood DMX958XR Firmware Update Command Injection Vulnerability

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerabil…

Kenwood DMX958XR

Aug 6, 2025
Medium 6.8

CVE-2025-8634

Kenwood DMX958XR Firmware Update Command Injection Vulnerability

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerabil…

Kenwood DMX958XR

Aug 6, 2025
Medium 6.8

CVE-2025-8633

Kenwood DMX958XR Firmware Update Command Injection Vulnerability

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerabil…

Kenwood DMX958XR

Aug 6, 2025
Medium 6.8

CVE-2025-8632

Kenwood DMX958XR Firmware Update Command Injection Vulnerability

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerabil…

Kenwood DMX958XR

Aug 6, 2025
Medium 6.8

CVE-2025-8631

Kenwood DMX958XR Firmware Update Command Injection Vulnerability

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerabil…

Kenwood DMX958XR

Aug 6, 2025
Medium 6.8

CVE-2025-8630

Kenwood DMX958XR Firmware Update Command Injection Vulnerability

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerabil…

Kenwood DMX958XR

Aug 6, 2025
Medium 6.8

CVE-2025-8629

Kenwood DMX958XR Firmware Update Command Injection Vulnerability

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerabil…

Kenwood DMX958XR

Aug 6, 2025
Medium 6.8

CVE-2025-8628

Kenwood DMX958XR Firmware Update Command Injection Vulnerability

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerabil…

Kenwood DMX958XR

Aug 6, 2025
Medium 5.4

CVE-2025-54610

Out-of-bounds access vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may…

Huawei HarmonyOS Network devices

Aug 6, 2025
Medium 5.4

CVE-2025-54609

Out-of-bounds access vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may…

Huawei HarmonyOS Network devices

Aug 6, 2025
Medium 6.2

CVE-2025-54608

Vulnerability that allows setting screen rotation direction without permission verification in the screen management mo…

Huawei HarmonyOS Network devices

Aug 6, 2025
Medium 6.5

CVE-2024-55398

4C Strategies Exonaut before v22.4 was discovered to contain insecure permissions.

Aug 6, 2025
Medium 5.3

CVE-2024-55402

4C Strategies Exonaut before v22.4 was discovered to contain an access control issue.

Aug 6, 2025
Medium 6.5

CVE-2024-55399

4C Strategies Exonaut before v21.6.2.1-1 was discovered to contain a Server-Side Request Forgery (SSRF).

Aug 6, 2025
Medium 6.1

CVE-2025-50740

AutoConnect 1.4.2, an Arduino library, is vulnerable to a cross site scripting (xss) vulnerability. The AutoConnect web…

Aug 6, 2025
Medium 6.5

CVE-2025-50233

A vulnerability in QCMS version 6.0.5 allows authenticated users to read arbitrary files from the server due to insuffi…

Aug 6, 2025
Medium 6.5

CVE-2025-50234

MCCMS v2.7.0 has an SSRF vulnerability located in the index() method of the sys\apps\controllers\api\Gf.php file, where…

Aug 6, 2025
Medium 5.3

CVE-2025-46660

An issue was discovered in 4C Strategies Exonaut 21.6. Passwords, stored in the database, are hashed without a salt.

Aug 6, 2025
Medium 5.3

CVE-2025-51308

In Gatling Enterprise versions below 1.25.0, a low-privileged user that does not hold the role "admin" could perform a …

Aug 6, 2025
Medium 6.5

CVE-2025-51058

Bottinelli Informatical Vedo Suite 2024.17 is vulnerable to Server-side Request Forgery (SSRF) in the /api_vedo/video/p…

Aug 6, 2025
Medium 6.5

CVE-2025-51054

Vedo Suite 2024.17 is vulnerable to Incorrect Access Control, which allows remote attackers to obtain a valid high priv…

Aug 6, 2025
Medium 6.5

CVE-2025-51306

In Gatling Enterprise versions below 1.25.0, a user logging-out can still use his session token to continue using the a…

Aug 6, 2025
Medium 6.5

CVE-2025-51052

A path traversal vulnerability in Vedo Suite 2024.17 allows remote authenticated attackers to read arbitrary filesystem…

Aug 6, 2025
Medium 6.5

CVE-2025-51057

A local file inclusion (LFI) vulnerability in Vedo Suite version 2024.17 allows remote authenticated attackers to read …

Aug 6, 2025
Medium 6.1

CVE-2025-51053

A Cross-site scripting (XSS) vulnerability in /api_vedo/ in Vedo Suite version 2024.17 allows remote attackers to injec…

Aug 6, 2025