CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- gstreamerIn GStreamer through 1.26.1, the subparse plugin's tmplayer_parse_line function may dereference a...5.6 Medium
- gstreamerIn GStreamer through 1.26.1, the subparse plugin's parse_subrip_time function may write data past...5.6 Medium
- wpswings ultimate gift cards for woocommerceUltimate Gift Cards for WooCommerce <= 3.1.4 - Authenticated (Administrator+) SQL Injection via wps_wgm_save_post Function4.9 Medium
- brikou wp plugin info cardWP Plugin Info Card <= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via containerid Parameter6.4 Medium
- themehunk vayu blocks – website builder for the block editorVayu Blocks <= 1.3.1 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via containerWidth Parameter6.4 Medium
- bitpressadmin file managerBit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Uploads6.4 Medium
- keiyo system co., ltd pc time tracerIncorrect default permissions issue in PC Time Tracer prior to 5.2. If exploited, arbitrary code...7.0 High
- keiyo system co., ltd timeworksImproper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in...6.9 Medium
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +74 more +76 moreIncorrect Authorization in Graphics8.6 High
- infornweb post slider and post carousel, unknown post slider and post carousel with post vertical scrolling widget +1 morePost Slider and Carousel with Widget < 3.2.10 - Admin+ Stored XSS4.8 Medium
- colorlib fancybox, unknown fancybox for wordpress +1 moreFancyBox for WordPress < 3.3.6 - Unauthenticated Stored XSS6.1 Medium
- stefano lissa newsletterNewsletter < 8.8.2 - Admin+ Stored XSS via Subscription4.8 Medium
- qualcomm ar8031 firmware, csra6620 firmware, csra6640 firmware +43 more +45 moreUse After Free in Graphics7.5 High
- qualcomm fastconnect 6700 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +19 more +21 moreUse After Free in Bluetooth HOST7.8 High
- qualcomm fastconnect 7800 firmware, immersive home 3210 platform firmware, immersive home 326 platform firmware +65 more +67 moreBuffer Over-read in WLAN HAL7.5 High
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +75 more +77 moreIncorrect Authorization in Graphics Windows8.6 High
- qualcomm ar8035 firmware, csr8811 firmware, fastconnect 6700 firmware +209 more +211 moreBuffer Over-read in WLAN Host Communication7.5 High
- qualcomm 205 mobile platform firmware, 215 mobile platform firmware, apq8017 firmware +232 more +234 moreBuffer Over-read in Data Network Stack & Connectivity8.2 High
- qualcomm 205 mobile platform firmware, 215 mobile platform firmware, apq8017 firmware +223 more +225 moreBuffer Over-read in Data Network Stack & Connectivity8.2 High
- qualcomm 205 mobile platform firmware, 215 mobile platform firmware, apq8017 firmware +232 more +234 moreBuffer Over-read in Data Network Stack & Connectivity8.2 High
- qualcomm fastconnect 6200 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +79 more +81 moreBuffer Over-read in Data Network Stack & Connectivity8.2 High
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, sdm429w firmware +17 more +19 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver6.6 Medium
- qualcomm sdm429w firmware, snapdragon 429 mobile platform firmware, wcn3620 firmware +2 more +4 moreUse of Out-of-range Pointer Offset in Camera Driver6.6 Medium
- qualcomm fastconnect 6800 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +32 more +34 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver6.6 Medium
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +89 more +91 moreUse After Free in Computer Vision6.6 Medium
- qualcomm c-v2x 9150 firmware, fastconnect 6800 firmware, fastconnect 6900 firmware +58 more +60 moreBuffer Copy Without Checking Size of Input in Audio6.6 Medium
- qualcomm aqt1000 firmware, ar8035 firmware, fastconnect 6200 firmware +191 more +193 moreImproper Access Control in Core7.8 High
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t750/t765/t760/t770/t820/s8000/t8300/t9300 +1 moreIn cplog service, there is a possible out of bounds write due to a missing bounds check. This...5.1 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t750/t765/t760/t770/t820/s8000/t8300/t9300 +1 moreIn cplog service, there is a possible system crash due to null pointer dereference. This could...5.1 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/t606/t612/t616/t750/t765/t760/t770/t820/s8000/t8300/t9300 +1 moreIn engineermode service, there is a possible command injection due to improper input validation....5.9 Medium
- uxper golo - city travel guide wordpress themeGolo <= 1.7.0 - Authentication Bypass to Account Takeover9.8 Critical
- gvectors wpforo + wpforo advanced attachmentswpForo + wpForo Advanced Attachments <= 3.1.3 - Unauthenticated Stored Cross-Site Scripting7.2 High
- wpmu dev - your all-in-one wordpress platform broken link checkerBroken Link Checker <= 2.4.4 - Missing Autorization to Authenticated (Subscriber+) Plugin Status Dashboard View4.3 Medium
- techjewel ninja tables – easy data table builder, wpmanageninja ninja tables +1 moreNinja Tables – Easy Data Table Builder <= 5.0.18 - Unauthenticated PHP Object Injection to Limited Remote Code Execution5.6 Medium
rdkitOSS-FuzzUNKNOWN READ in RDKit::RDValue::destroyNo score- foxcmsFoxcms v1.25 has a SQL time injection in the $_POST['dbname'] parameter of installdb.php.8.4 High
- eruptErupt Unrestricted Upload of File with Dangerous Type vulnerability5.4 Medium
- jehc jehc-bpmAn arbitrary file upload vulnerability in the component /server/executeExec of JEHC-BPM v2.0.1...10.0 Critical
- mailenableCross Site Scripting (XSS) vulnerability in MailEnable before v10 allows a remote attacker to...9.8 Critical
- unicomsi focal pointAn issue was discovered in Unicom Focal Point 7.6.1. The database is encrypted with a hardcoded...4.6 Medium
- unicomsi focal pointCross Site Scripting vulnerability was discovered in Unicom Focal Point 7.6.1. The val parameter...6.1 Medium
- unicomsi focal pointAn issue was discovered in ReportController in Unicom Focal Point 7.6.1. A user who has...6.5 Medium
- audiocodes mp-112 firmware, mp-114 firmware, mp-118 firmware +2 moreIn Audiocodes Mediapack MP-11x through 6.60A.369.002, a crafted POST request request may result...9.8 Critical
- sangoma img2020 firmwareA buffer overflow in the the Sangoma IMG2020 HTTP server through 2.3.9.6 allows an...9.8 Critical
- samsung exynos 1480 firmware, exynos 2400 firmware +1 moreAn issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The lack of a length...8.6 High
- samsung exynos 1480 firmware, exynos 2400 firmware +1 moreAn issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The lack of a length...8.6 High
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1380 firmware +6 more +8 moreAn issue was discovered in Samsung Mobile Processor Exynos 9820, 9825, 980, 990, 1080, 2100, 1280...8.8 High
- samsung exynos 1280 firmware, exynos 1380 firmware, exynos 1480 firmware +2 more +4 moreAn issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400. The...7.5 High
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1380 firmware +4 more +6 moreAn issue was discovered in Samsung Mobile Processor Exynos 980, 990, 1080, 2100, 1280, 2200, 1380...7.8 High
- samsung exynos 1380 firmwareAn issue was discovered in Samsung Mobile Processor Exynos 1380. The lack of a length check leads...9.1 Critical
- Show moreLoading…