CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- campcodes sales and inventory system Campcodes Sales and Inventory System payment_add.php sql injection 6.9 Medium
- d-link dcs-7517, dlink dcs-7517 firmware +1 more D-Link DCS-7517 Qlync Password Generation httpd g_F_n_GenPassForQlync hard-coded password 6.3 Medium
- d-link dcs-6517, dcs-7517, dlink dcs-6517 firmware +1 more +3 more D-Link DCS-6517/DCS-7517 Root Password Generation httpd generate_pass_from_mac entropy 6.3 Medium
- phpgurukul zoo management system PHPGurukul Zoo Management System manage-foreigners-ticket.php sql injection 5.3 Medium
- google chrome, chromium v8 +1 more Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform... 8.1 High
- phpgurukul zoo management system PHPGurukul Zoo Management System view-normal-ticket.php sql injection 5.3 Medium
- red hat ansible automation platform 2.5 for rhel 8, ansible automation platform 2.5 for rhel 9 +1 more Event-driven-ansible: authenticated argument injection in git url in eda project creation 8.8 High
- red hat ansible automation platform 2.5 for rhel 8, ansible automation platform 2.5 for rhel 9 +1 more Event-driven-ansible: template injection via git branch and refspec in eda projects 8.8 High
- dataease Dataease Redshift Data Source JDBC Connection Parameters Bypass Vulnerability 8.9 High
- graylog, graylog2 graylog2-server +1 more Graylog vulnerable to privilege escalation through API tokens 8.8 High
- cyanheads git-mcp-server @cyanheads/git-mcp-server vulnerable to command injection in several tools 7.5 High
- electron Electron Vulnerable to Heap Buffer Overflow in NativeImage::CreateFromPath 4.4 Medium
- dell openmanage network integration Dell OpenManage Network Integration, versions prior to 3.8, contains an Authentication Bypass by... 8.8 High
- dromara ruoyi-vue-plus Dromara RuoYi-Vue-Plus Mail MailController.java path traversal 6.9 Medium
- electron Electron ASAR Integrity bypass by just modifying the content 7.8 High
-
github.com/babylonlabs-io/babylonGo,github.com/babylonlabs-io/babylon/v2Go +1 more Babylon vulnerable to chain half when transaction has fees different than `ubbn` 8.7 High - janssenproject jans Janssen Config API returns results without scope verification 8.2 High
- filebrowser File Browser Insecurely Handles Passwords 5.9 Medium
- filebrowser File Browser's Password Protection of Links Vulnerable to Bypass 3.1 Low
- filebrowser File Browser vulnerable to command execution allowlist bypass 8.1 High
- filebrowser File Browser allows sensitive data to be transferred in URL 4.5 Medium
- bitcoinjs tiny-secp256k1 tiny-secp256k1 allows for verify() bypass when running in bundled environment 8.1 High
- bitcoinjs tiny-secp256k1 tiny-secp256k1 vulnerable to private key extraction when signing a malicious JSON-stringifyable message in bundled environment 8.1 High
- anisha online hotel booking code-projects Online Hotel Booking registration.php sql injection 6.9 Medium
- elated-themes frappe Frappe account takeover via password reset token leakage 8.7 High
- elated-themes frappe Frappe authenticated XSS via data import 8.6 High
- elated-themes frappe Frappe possibility of SQL injection due to improper validations 8.7 High
- totolink t6, t6 firmware +1 more TOTOLINK T6 formLoginAuth.htm Form_Login missing authentication 8.7 High
- mattermost, mattermost server +1 more Mattermost Playbooks exposes private channel metadata to unauthorized users via run metadata API 4.3 Medium
- mattermost, mattermost server +1 more Mattermost Playbooks allows privilege escalation through improper access control in playbook run participant management 5.4 Medium
- phpgurukul student record system PHPGurukul Student Record System register.php sql injection 5.3 Medium
- phpgurukul student record system PHPGurukul Student Record System edit-student.php sql injection 5.3 Medium
- devinim software library software Reflected XSS in Devinim Software's Modified Koha Library Software 4.6 Medium
- phpgurukul student record system PHPGurukul Student Record System admin-profile.php sql injection 5.3 Medium
- phpgurukul student record system PHPGurukul Student Record System manage-students.php sql injection 5.3 Medium
- ibm cloud pak system IBM Cloud Pak System HTML injection 5.4 Medium
- phpgurukul student record system PHPGurukul Student Record System manage-subjects.php sql injection 5.3 Medium
- phpgurukul student record system PHPGurukul Student Record System session.php sql injection 5.3 Medium
-
ImageMagickTuxCare,ImageMagick-c++TuxCare,ImageMagick-c++-develTuxCare +5 more +7 more Update of ImageMagick No score - phpgurukul old age home management system PHPGurukul Old Age Home Management System add-scdetails.php sql injection 5.3 Medium
- phpgurukul old age home management system PHPGurukul Old Age Home Management System edit-services.php sql injection 5.3 Medium
- anisha car rental system code-projects Car Rental System book_car.php sql injection 6.9 Medium
- anisha car rental system code-projects Car Rental System login.php sql injection 6.9 Medium
- anisha car rental system code-projects Car Rental System signup.php sql injection 6.9 Medium
- abb lite panel pro Application does not invalidate session after password reset 6.8 Medium
- anisha car rental system code-projects Car Rental System add_cars.php sql injection 6.9 Medium
- hotspot shield vpn client Host Header Injection (HHI) in the Hotspot Shield VPN client 2.3 Low
- anisha car rental system code-projects Car Rental System approve.php sql injection 6.9 Medium
- code-projects inventory management system code-projects Inventory Management System editUser.php sql injection 6.9 Medium
- ifm electronic gmbh smart plc ac402s, smart plc ac422s, smart plc ac424s +2 more +4 more Improper Access Control vulnerability in AC4xxS devices 7.5 High
- Show olderLoading…