CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- https://github.com/yrutschle/sslh/releases/tag/v2.2.4 sslhMisaligned Memory Accesses in `is_openvpn_protocol()`6.9 Medium
- vishalmathur cloudclassroom-php projectSQL injection vulnerability in the registrationform endpoint of CloudClassroom-PHP-Project v1.0....7.3 High
- osticketosTicket prior to v1.17.6 and v1.18.2 are vulnerable to Broken Access Control Vulnerability in ...5.4 Medium
- tenda ac6 firmwareTenda AC6 V15.03.05.16 was discovered to contain a stack overflow via the time parameter in the...6.5 Medium
- cotonti sienaA vulnerability has been found in Cotonti Siena v0.9.25. Affected by this vulnerability is the...5.4 Medium
shadowsocks-v2ray-pluginopenSUSE,v2ray-coreopenSUSE +1 moregolang-github-teddysun-v2ray-plugin-5.25.0-1.1 on GA mediaNo score- pixeon weblaudosDirectory Traversal vulnerability in WebLaudos 24.2 (04) allows a remote attacker to obtain...7.5 High
- philips clinical collaboration platformClinical Collaboration Platform 12.2.1.5 has a weak logout system where the session token remains...6.5 Medium
- philips clinical collaboration platformAn issue in Clinical Collaboration Platform 12.2.1.5 allows a remote attacker to obtain sensitive...6.5 Medium
- philips clinical collaboration platformAn issue in Clinical Collaboration Platform 12.2.1.5 allows a remote attacker to obtain sensitive...6.5 Medium
- samsung exynos 1480 firmware, exynos 2200 firmware, exynos 2400 firmware +2 moreAn issue was discovered in Samsung Mobile Processor Exynos 2200, 1480, and 2400. A Use-After-Free...7.8 High
- samsung exynos 2200 firmwareAn issue was discovered in Samsung Mobile Processor Exynos 2200, 1480, and 2400. A Use-After-Free...6.5 Medium
- samsung exynos 1480 firmware, exynos 2400 firmware +1 moreAn issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The lack of a length...9.1 Critical
- alexpinel dotThe desktop application in Dot through 0.9.3 allows XSS and resultant command execution because...8.1 High
- vishalmathur cloudclassroom-php projectA time-based SQL injection vulnerability exists in mydetailsstudent.php in the CloudClassroom PHP...7.3 High
- sitecom wlx-2006 firmwareA Cross Site Scripting (XSS) vulnerability in Sitecom WLX-2006 Wall Mount Range Extender N300 v1...6.1 Medium
- sitecom wlx-2006 firmwareSitecom WLX-2006 Wall Mount Range Extender N300 v.1.5 and before is vulnerable to Use of Default...6.5 Medium
- sitecom wlx-2006 firmwareA Local File Inclusion (LFI) vulnerability exists in Sitecom WLX-2006 Wall Mount Range Extender...5.9 Medium
- mist community edition, mist +1 moreMist Community Edition Authentication Endpoint views.py login cross site scripting5.1 Medium
- mist community edition, mist +1 moreMist Community Edition views.py tag_resources cross site scripting5.1 Medium
- mist community edition, mist +1 moreMist Community Edition middleware.py session_start_response cross-site request forgery5.3 Medium
- mist community edition, mist +1 moreMist Community Edition API Token views.py create_token access control6.9 Medium
- wavlink quantum d2g, quantum d3g, wl-wn530g3a +3 more +5 moreWAVLINK WL-WN576K1 HTTP POST Request login.cgi sys_login buffer overflow9.3 Critical
- chaitak-gorai blogbookchaitak-gorai Blogbook register_script.php cross site scripting4.8 Medium
- chaitak-gorai blogbookchaitak-gorai Blogbook posts.php unrestricted upload5.3 Medium
- chaitak-gorai blogbookchaitak-gorai Blogbook post.php cross site scripting5.1 Medium
- chaitak-gorai blogbookchaitak-gorai Blogbook GET Parameter search.php denial of service5.3 Medium
- chaitak-gorai blogbookchaitak-gorai Blogbook GET Parameter view_all_posts.php sql injection5.3 Medium
- chaitak-gorai blogbookchaitak-gorai Blogbook GET Parameter edit_post.php sql injection6.9 Medium
- ingydotnet yaml-libyaml, tinita yaml::libyaml +1 moreYAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified9.1 Critical
- chaitak-gorai blogbookchaitak-gorai Blogbook GET Parameter post.php sql injection6.9 Medium
- ibm planning analytics localIBM Planning Analytics Local session fixation6.3 Medium
- ibm planning analytics localIBM Planning Analytics Local path traversal6.5 Medium
- ibm planning analytics localIBM Planning Analytics Local cross-site scripting4.8 Medium
- ibm planning analytics localIBM Planning Analytics Local cross-site scripting5.4 Medium
- ibm infosphere information server, infosphere information server on cloud +1 moreIBM InfoSphere Information Server information disclosure6.5 Medium
- chaitak-gorai blogbookchaitak-gorai Blogbook GET Parameter user.php sql injection6.9 Medium
- google androidIn wl_cfgscan_update_v3_schedscan_results() of wl_cfgscan.c, there is a possible out of bounds...7.8 High
:unknown:AndroidIn ProtocolMiscCurrentLinkCapacityEstimate() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no a…No score:unknown:AndroidIn TBD of TBD, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction…No score:unknown:AndroidIn nvt_flash_read of nt36xxx.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed.…No score:unknown:AndroidIn sms_SetTpUdIe() of sms_PduCodec.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileges…No score:unknown:AndroidIn wl_escan_handler of TBD, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User…No score:unknown:AndroidAnalysis: Access Vector: Local Layer: Userland Root Causes: Heap Buffer Overflow SRS Categories: - Android Security SRS Category: Memory Safety Writeup: A stack trace alone with PoC app is insufficien…No score:unknown:AndroidIn tbd of tbd, there is a possible lockscreen bypass due to an unusual root cause. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is…No score:unknown:AndroidIn ppmp_protect_buf of drm_fw.c, there is a possible memory protection issue due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges…No score- google androidIn createIntentsList of PackageParser.java , there is a possible way to bypass lazy bundle...7.8 High
- google androidIn allowPackageAccess of multiple files, resource exhaustion is possible when repeatedly adding...5.5 Medium
- google androidIn AccessibilityServiceConnection.java, there is a possible background activity launch due to a...7.8 High
:unknown:AndroidIn CopyDataFromFmq of common_utils.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges…No score- Show moreLoading…