Skip to content
TrackCVE
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Week 32, 2025

4 August to 10 August 2025. The CVEs published in the week, the most severe of them, and what CISA added to its catalog of known exploited vulnerabilities.

CVEs published
666
Critical
93
High
183
Added to KEV
3

Critical 93High 183Medium 363Low 27Not scored 0All 666 in the list

Added to KEVAttackers use these now; patch them first

  • CVE-2022-40799

    Data Integrity Failure in 'Backup Config' in D-Link DNR-322L <= 2.60B15 allows an authenticated attacker to execute OS level commands on the device.

    Product not named

    ExploitedHigh8.8
  • CVE-2020-25079

    An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. cgi-bin/ddns_enc.cgi allows authenticated command…

    Product not named

    ExploitedHigh8.8
  • CVE-2020-25078

    An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. The unauthenticated /config/getuser endpoint allows for…

    Product not named

    ExploitedHigh7.5

Most severe new CVEsBy CVSS score

  • CVE-2025-54253

    Adobe Experience Manager | Incorrect Authorization (CWE-863)

    Adobe · Adobe Experience Manager

    ExploitedCritical10.0
  • CVE-2013-10069

    D-Link Devices Unauthenticated RCE

    D-Link · DIR-600 rev B

    Critical10.0
  • CVE-2013-10070

    PHP-Charts v1.0 PHP Code Execution

    PHP-Charts · PHP-Charts

    Critical10.0
  • CVE-2012-10025

    WordPress Plugin Advanced Custom Fields <= 3.5.1 Remote File Inclusion

    Advanced Custom Fields · WordPress Plugin

    Critical10.0
  • CVE-2012-10026

    WordPress Plugin Asset-Manager <= 2.0 PHP File Upload

    jkriddle · asset-manager

    Critical10.0
  • CVE-2012-10044

    MobileCartly 1.0 savepage.php Arbitrary File Creation

    MobileCartly · MobileCartly

    Critical10.0
  • CVE-2013-10066

    Kordil EDMS v2.2.60rc3 Unauthenticated Arbitrary File Upload

    Kordil · EDMS

    Critical10.0
  • CVE-2012-10035

    Turbo FTP Server 1.30.823/826 PORT Command Buffer Overflow

    TurboSoft, Inc. · TurboFTP Server

    Critical10.0
  • CVE-2012-10047

    Cyclope Employee Surveillance Solution v6.x SQL Injection

    Cyclope-Series · Cyclope Employee Surveillance Solution

    Critical10.0
  • CVE-2025-53767

    Azure OpenAI Elevation of Privilege Vulnerability

    Microsoft · Azure Open AI

    Critical10.0

Vendors with the most CVEs

  1. Huawei52
  2. Kenwood29
  3. Qualcomm, Inc.24
  4. NVIDIA17
  5. Samsung Mobile16
  6. Dell15
  7. Portabilis15
  8. atjiu13
  9. Google8
  10. RUCKUS8

Most common weaknesses

  1. CWE-79 Cross-site scripting (XSS)78
  2. CWE-78 OS command injection67
  3. CWE-94 Code injection39
  4. CWE-89 SQL injection38
  5. CWE-434 Unrestricted file upload27
  6. CWE-22 Path traversal23
  7. CWE-284 Improper access control22
  8. CWE-121 Stack-based buffer overflow19
  9. CWE-125 Out-of-bounds read19
  10. CWE-200 Exposure of sensitive information19