CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- ce-phoenixcart phoenixcartPhoenixCart Vulnerable to Account Deletion Without Password Confirmation5.5 Medium
- quic-goquic-go Has Panic in Path Probe Loss Recovery Handling7.5 High
- linksys re6250, re6300, re6350 +9 more +11 moreLinksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 setDeviceURL os command injection5.3 Medium
- grafanaGrafana vulnerable to authenticated users bypassing dashboard, folder permissions8.3 High
- llamaindex, run-llama run-llama/llama index +1 moreSQL Injection in run-llama/llama_index9.8 Critical
- linksys re6250, re6300, re6350 +9 more +11 moreLinksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 NTP os command injection5.3 Medium
- linksys re6250, re6300, re6350 +9 more +11 moreLinksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 verifyFacebookLike os command injection5.3 Medium
- linksys re6250, re6300, re6350 +9 more +11 moreLinksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 WPS command injection5.3 Medium
- qtPossible denial of service when passing malformed data in a URL to qDecodeDataUrl8.4 High
- multilaser sirius re016Multilaser Sirius RE016 Password Change cstecgi.cgi improper authentication6.9 Medium
- multilaser sirius re016Multilaser Sirius RE016 cstecgi.cgi information disclosure6.9 Medium
- axis osDuring an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a...8.8 High
- axis communications ab osA Guard Tour VAPIX API parameter allowed the use of arbitrary values and can be incorrectly...4.3 Medium
- axis os, os 2024 +1 moreThe VAPIX Device Configuration framework allowed a privilege escalation, enabling a lower...9.4 Critical
- marwal infotech cmsMarwal Infotech CMS page.php sql injection6.9 Medium
- diviotec nbf232p, nbf233p, nbr222p +6 more +8 moreAuthenticated Remote Command Injection in Diviotec NBR IP Cameras8.6 High
- netcomm ntc 6200, nwl-222 +1 moreArbitrary Command Injection in Netcom NTC-6200 & NWL-2228.6 High
- aem solutions cmsAem Solutions CMS page.php sql injection6.9 Medium
- fengoffice feng officeFengoffice Feng Office index.php sql injection5.3 Medium
- wago fully managed switches 0852-0303, fully managed switches 0852-1305, fully managed switches 0852-1305/0000-0001 +10 more +12 moreWAGO: Switches affected by year 2k38 problem4.3 Medium
- assamlook cmsAssamLook CMS view_tender.php sql injection5.3 Medium
- unknown wp-optimizeWP-Optimize < 4.2.0 - Admin+ SQLi4.1 Medium
- devowl real cookie banner: gdpr & eprivacy cookie consent, unknown real-cookie-banner-pro, devowl wordpress real cookie banner +2 moreReal Cookie Banner < 5.1.6 - Admin+ Stored XSS4.8 Medium
- assamlook cmsAssamLook CMS department-profile.php sql injection5.3 Medium
- assamlook cmsAssamLook CMS product.php sql injection5.3 Medium
- juzaweb cmsjuzaweb CMS Plugins Page install access control5.3 Medium
- imaginationtech ddk, imagination technologies graphics ddk +1 moreGPU DDK - Freelist GPU VA can be remapped to another reservation/PMR to trigger GPU arbitrary write to physical memory7.8 High
- juzaweb cmsjuzaweb CMS Error Logs Page log-viewer access control5.3 Medium
- juzaweb cmsjuzaweb CMS Permalinks Page permalinks access control5.3 Medium
- realtek bluetooth hci adaptorRealtek Bluetooth HCI Adaptor - Privilege Escalation8.5 High
- juzaweb cmsjuzaweb CMS Menu Page menus access control5.3 Medium
- juzaweb cmsjuzaweb CMS Theme Editor Page default access control5.3 Medium
- mediatek lr12a, lr13, nr15 +4 more +6 moreIn ims service, there is a possible system crash due to incorrect error handling. This could lead...6.5 Medium
- mediatek nbiot sdk, mediatek, inc. mt7902, mt7921, mt7922, mt7925, mt7927 +1 moreIn Bluetooth driver, there is a possible system crash due to an uncaught exception. This could...5.5 Medium
- mediatek nbiot sdk, mediatek, inc. mt7902, mt7921, mt7922, mt7925, mt7927 +1 moreIn wlan STA driver, there is a possible system crash due to an uncaught exception. This could...5.5 Medium
- mediatek mt7902 firmware, mt7921 firmware, mt7922 firmware +3 more +5 moreIn wlan STA driver, there is a possible system crash due to an uncaught exception. This could...5.5 Medium
- mediatek software development kit, mediatek, inc. mt6890, mt6990, mt7915, mt7916, mt7981, mt7986, mt7990, mt7992, mt7993, openwrt +2 moreIn wlan AP driver, there is a possible way to inject arbitrary packet due to a missing permission...9.8 Critical
- mediatek mt7902 firmware, mt7921 firmware, mt7922 firmware +3 more +5 moreIn wlan STA driver, there is a possible system crash due to an uncaught exception. This could...5.5 Medium
- mediatek mt7902 firmware, mt7921 firmware, mt7922 firmware +3 more +5 moreIn Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check....9.8 Critical
- juzaweb cmsjuzaweb CMS Media Page media access control5.3 Medium
- juzaweb cmsjuzaweb CMS General Setting Page general access control5.3 Medium
- juzaweb cmsjuzaweb CMS Email Logs Page email access control5.3 Medium
- juzaweb cmsjuzaweb CMS Plugin Editor Page editor access control5.3 Medium
- juzaweb cmsjuzaweb CMS Profile Page upload cross site scripting5.1 Medium
- arris vip1113Arris VIP1113 devices through 2025-05-30 with KreaTV SDK have a firmware decryption key of...4.3 Medium
- arris vip1113Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow booting an arbitrary image via a...6.7 Medium
- arris vip1113Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow file overwrite via TFTP because a...6.4 Medium
- bulwarkmail webmail, debian linux +1 moreRoundcube Webmail Vulnerable to Authenticated RCE via PHP Object Deserialization9.9 Critical
- valkeysetDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev->size ...3.1 Low
- https://github.com/yrutschle/sslh/releases/tag/v2.2.4 sslhFile Descriptor Exhaustion in sslh-select and sslh-ev triggers SEGFAULT8.7 High
- Show moreLoading…