CVEs published in August 2025
70 tracked CVEs from 8 vendors had their first vendor advisory published in August 2025: 7 critical, 21 high, 1 in CISA KEV. Newest first.
6 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2025-52861Unrated
path traversal vulnerability has been reported to affect VioStor.
QNAP · 1 advisory - Added
CVE-2025-52856Critical
improper authentication vulnerability has been reported to affect VioStor.
QNAP · 1 advisory - Added
CVE-2025-44015High
command injection vulnerability has been reported to affect HybridDesk Station.
QNAP · 1 advisory - Added
CVE-2025-33038Medium
Qsync: path traversal vulnerability has been reported to affect Qsync Central.
QNAP · 1 advisory - Added
CVE-2025-33037Medium
Qsync: path traversal vulnerability has been reported to affect Qsync Central.
QNAP · 1 advisory - Added
CVE-2025-33036Medium
Qsync: path traversal vulnerability has been reported to affect Qsync Central.
QNAP · 1 advisory - Added
CVE-2025-33033Medium
Qsync: path traversal vulnerability has been reported to affect Qsync Central.
QNAP · 1 advisory - Added
CVE-2025-33032Medium
QTS: path traversal vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2025-30278High
Qsync: improper certificate validation vulnerability has been reported to affect Qsync Central.
QNAP · 1 advisory - Added
CVE-2025-30277High
Qsync: improper certificate validation vulnerability has been reported to affect Qsync Central.
QNAP · 1 advisory - Added
CVE-2025-30275Medium
Qsync: NULL pointer dereference vulnerability has been reported to affect Qsync Central.
QNAP · 1 advisory - Added
CVE-2025-30274Medium
QTS: NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2025-30273High
QTS: out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2025-30272Medium
QTS: NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2025-30271Medium
QTS: path traversal vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2025-30270Medium
QTS: path traversal vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2025-30268Medium
QTS: NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2025-30267Medium
QTS: NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2025-30265Medium
QTS: buffer overflow vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2025-30264High
QTS: command injection vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2025-30263Medium
Qsync: NULL pointer dereference vulnerability has been reported to affect Qsync Central.
QNAP · 1 advisory - Added
CVE-2025-30262Medium
Qsync: NULL pointer dereference vulnerability has been reported to affect Qsync Central.
QNAP · 1 advisory - Added
CVE-2025-30261Medium
Qsync: allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central.
QNAP · 1 advisory - Added
CVE-2025-30260Medium
Qsync: allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central.
QNAP · 1 advisory - Added
CVE-2025-29900Medium
allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5.
QNAP · 1 advisory - Added
CVE-2025-29899Medium
allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5.
QNAP · 1 advisory - Added
CVE-2025-29898Medium
Qsync: uncontrolled resource consumption vulnerability has been reported to affect Qsync Central.
QNAP · 1 advisory - Added
CVE-2025-29894High
Qsync: SQL injection vulnerability has been reported to affect Qsync Central.
QNAP · 1 advisory - Added
CVE-2025-29893High
Qsync: SQL injection vulnerability has been reported to affect Qsync Central.
QNAP · 1 advisory - Added
CVE-2025-29890Medium
allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5.
QNAP · 1 advisory - Added
CVE-2025-29889Medium
NULL pointer dereference vulnerability has been reported to affect File Station 5.
QNAP · 1 advisory - Added
CVE-2025-29888Medium
NULL pointer dereference vulnerability has been reported to affect File Station 5.
QNAP · 1 advisory - Added
CVE-2025-29887High
command injection vulnerability has been reported to affect QuRouter 2.5.1.
QNAP · 1 advisory - Added
CVE-2025-29886Medium
NULL pointer dereference vulnerability has been reported to affect File Station 5.
QNAP · 1 advisory - Added
CVE-2025-29882Medium
QTS: NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2025-29879Medium
NULL pointer dereference vulnerability has been reported to affect File Station 5.
QNAP · 1 advisory - Added
CVE-2025-29878Medium
NULL pointer dereference vulnerability has been reported to affect File Station 5.
QNAP · 1 advisory - Added
CVE-2025-29875Medium
NULL pointer dereference vulnerability has been reported to affect File Station 5.
QNAP · 1 advisory - Added
CVE-2025-29874Medium
NULL pointer dereference vulnerability has been reported to affect File Station 5.
QNAP · 1 advisory - Added
CVE-2025-22483Medium
License Center: cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2024-12923Medium
Photo Station: cross-site scripting (XSS) vulnerability has been reported to affect Photo Station.
QNAP · 1 advisory - Added
CVE-2025-47907High
Golang Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-8424Critical
NetScaler · 1 advisory - Added
CVE-2025-7776Critical
NetScaler · 1 advisory - Added
CVE-2025-7775CriticalCISA KEV
Citrix NetScaler Memory Overflow Vulnerability
NetScaler · 1 advisory - Added
CVE-2025-29901Medium
NULL pointer dereference vulnerability has been reported to affect File Station 5.
QNAP · 1 advisory - Added
CVE-2025-48989High
Apache Tomcat Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-4673Medium
Golang Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-4877Medium
Libssh: write beyond bounds in binary to base64 conversion functions
NetApp, Red Hat · 2 advisories - Added
CVE-2025-47206High
out-of-bounds write vulnerability has been reported to affect File Station 5.
QNAP · 1 advisory - Added
CVE-2025-8194High
Python Vulnerability in NetApp Products
NetApp · 1 advisory - Added
GNU Binutils Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-54809High
F5 Access for Android before version 3.1.2 which uses HTTPS does not verify the remote endpoint identity.
F5 · 1 advisory - Added
CVE-2025-54500Medium
HTTP/2 implementation flaw
F5 · 1 advisory - Added
CVE-2025-53859Critical
NGINX Open Source and NGINX Plus have a vulnerability in the ngx_mail_smtp_module that might
F5, Splunk · 2 advisories - Added
CVE-2025-52585High
When a BIG-IP LTM Client SSL profile is configured on a virtual server with SSL Forward Proxy enabled and Anonymous…
F5 · 1 advisory - Added
CVE-2025-48500High
missing file integrity check vulnerability exists on MacOS F5 VPN browser client installer that may
F5 · 1 advisory - Added
CVE-2025-46405High
When Network Access is configured on a BIG-IP APM virtual server, undisclosed traffic
F5 · 1 advisory - Added
CVE-2025-25248Medium
Integer Overflow or Wraparound vulnerability [CWE-190] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version…
Fortinet · 1 advisory - Added
CVE-2025-52970High
improper handling of parameters vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.1 through 7.4.7, FortiWeb 7.2.0 through 7.2.10, FortiWeb 7.0.0 through 7.0.10 may allow an unauthenticated remote attacker with non-public information pertaining to the device and targeted user to gain admin privileges on the device via a specially crafted request
Fortinet · 1 advisory - Added
CVE-2025-53744High
incorrect privilege assignment vulnerability [CWE-266] in FortiOS Security Fabric version 7.6.0 through 7.6.2, 7.4.0 through…
Fortinet · 1 advisory - Added
CVE-2025-25256Critical
improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet FortiSIEM 7.3.0 through 7.3.1, FortiSIEM 7.2.0 through 7.2.5, FortiSIEM 7.1.0 through 7.1.7, FortiSIEM 7.0.0 through 7.0.3, FortiSIEM 6.7.0 through 6.7.9, FortiSIEM 6.6 all versions, FortiSIEM 6.5 all versions, FortiSIEM 6.4 all versions, FortiSIEM 6.3 all versions, FortiSIEM 6.2 all versions, FortiSIEM 6.1 all versions, FortiSIEM 5.4 all versions, FortiSIEM 5.3 all versions, FortiSIEM 5.2 all versions, FortiSIEM 5.1 all versions, FortiSIEM 5.0 all versions, FortiSIEM 4.10 all versions, FortiSIEM 4.9 all versions, FortiSIEM 4.7 all versions allows an unauthenticated attacker to execute unauthorized code or commands via crafted CLI requests
Fortinet · 1 advisory - Added
CVE-2025-3831High
Harmony: Log files uploaded during troubleshooting by the Harmony SASE agent may have been accessible to unauthorized parties.
Check Point · 1 advisory - Added
CVE-2025-8058Medium
Glibc Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-6297Medium
Dpkg Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-27144High
Go-Jose Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-2028Medium
Lack of TLS validation when downloading a CSV file including mapping from IPs to countries used ONLY for displaying country…
Check Point · 1 advisory - Added
CVE-2024-52885Medium
The Mobile Access Portal's File Share application is vulnerable to a directory traversal attack, allowing an authenticated…
Check Point · 1 advisory - Added
CVE-2025-7783Critical
Form-Data Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-27210High
Node.js Vulnerability in NetApp Products
NetApp · 1 advisory