CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- 1panel-dev maxkbMaxKB Python Sandbox Bypass in Function Library5.8 Medium
- open5gsOpen5GS AMF/MME emm_state_authentication assertion6.9 Medium
- totolink x2000r, x2000r firmware +1 moreTOTOLINK X2000R URL Filtering Page formFilter cross site scripting4.8 Medium
- webpack webpack-dev-serverwebpack-dev-server users' source code may be stolen when they access a malicious web site with non-Chromium based browser6.5 Medium
- webpack webpack-dev-serverwebpack-dev-server users' source code may be stolen when they access a malicious web site5.3 Medium
- totolink x2000r, x2000r firmware +1 moreTOTOLINK X2000R formMapDel command injection5.3 Medium
- quequnlong shiyi-blogquequnlong shiyi-blog add cross site scripting5.1 Medium
- quequnlong shiyi-blogquequnlong shiyi-blog Administrator Backend verifyPassword improper authentication6.9 Medium
- quequnlong shiyi-blogquequnlong shiyi-blog photos improper authorization6.9 Medium
- jupyter coreJupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability7.3 High
linux-firmwareTuxCare,iwl1000-firmwareTuxCare,iwl100-firmwareTuxCare +18 more +20 moreUpdate of linux-firmwareNo score- quequnlong shiyi-blogquequnlong shiyi-blog optimize server-side request forgery5.3 Medium
- quequnlong shiyi-blogquequnlong shiyi-blog upload path traversal5.3 Medium
- totolink a3002ru, a3002ru firmware +1 moreTOTOLINK A3002RU IP Port Filtering Page cross site scripting4.8 Medium
- totolink a3002ru, a3002ru firmware +1 moreTOTOLINK A3002RU MAC Filtering Page cross site scripting4.8 Medium
- ibm cloud pak for security, qradar suite software, qradar suite +2 moreIBM QRadar Suite Software and IBM Cloud Pak for Security improper input validation6.5 Medium
- ibm cloud pak for security, qradar suite software, qradar suite +2 moreIBM QRadar Suite Software and IBM Cloud Pak for Security information disclosure4.0 Medium
- ibm cloud pak for security, qradar suite software, qradar suite +2 moreIBM QRadar Suite Software and IBM Cloud Pak for Security code injection7.2 High
- ibm cloud pak for security, qradar suite software, qradar suite +2 moreIBM QRadar Suite Software and IBM Cloud Pak for Security information disclosure9.6 Critical
- ibm cloud pak for security, qradar suite software, qradar suite +2 moreIBM QRadar Suite Software and IBM Cloud Pak for Security session fixation4.8 Medium
- totolink a3002ru, a3002ru firmware +1 moreTOTOLINK A3002RU NAT Mapping Page cross site scripting4.8 Medium
- totolink a3002ru, a3002ru firmware +1 moreTOTOLINK A3002RU Virtual Server Page formPortFw cross site scripting4.8 Medium
- ibm application gatewayIBM Application Gateway incorrect permission assignment5.5 Medium
- akka management, apache pekko management, lightbend akka management +2 moreApache Pekko Management, Apache Pekko Management, Apache Pekko Management, Akka Management, Akka Management, Akka Management: management API basic authentication is not effective6.5 Medium
- dell encryption, encryption admin utilities +1 moreDell Encryption Admin Utilities versions prior to 11.10.2 contain an Improper Link Resolution...7.8 High
- totolink x2000r, x2000r firmware +1 moreTOTOLINK X2000R formWsc command injection5.3 Medium
- totolink x15, x15 firmware +1 moreTOTOLINK X15 formMapReboot stack-based overflow8.7 High
- totolink x15, x15 firmware +1 moreTOTOLINK X15 formMapReboot command injection5.3 Medium
- open5gsOpen5GS NGAP PathSwitchRequest Message ngap-handler.c ngap_handle_path_switch_request_transfer assertion6.9 Medium
- phpwcmsslackero phpwcms image_resized.php getimagesize deserialization6.9 Medium
- phpwcmsslackero phpwcms Custom Source Tab cnt21.readform.inc.php is_file deserialization5.1 Medium
- phpwcmsslackero phpwcms Feedimport processing.inc.php deserialization5.3 Medium
- python software foundation cpythonBypass extraction filter to modify file metadata outside extraction directory5.3 Medium
- python software foundation cpythonTarfile extracts filtered members when errorlevel=07.5 High
- python software foundation cpythonBypassing extraction filter to create symlinks to arbitrary targets outside extraction directory7.5 High
- python software foundation cpythonExtraction filter bypass for linking outside extraction directory7.5 High
- python software foundation cpythonArbitrary writes via tarfile realpath overflow9.4 Critical
- netgear wnr614, wnr614 firmware +1 moreNetgear WNR614 URL improper authentication6.9 Medium
- denoDeno has --allow-read / --allow-write permission bypass in `node:sqlite`5.5 Medium
- danieliser popup maker – boost sales, conversions, optins, subscribers with the ultimate wp popup builderPopup Maker <= 1.20.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via popupID Parameter6.4 Medium
- smartwpress music player for elementor – audio player & podcast playerMusic Player for Elementor <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via album_buy_url Parameter6.4 Medium
- cozmoslabs user profile builder – beautiful user registration forms, user profiles & user role editorProfile Builder <= 3.13.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via user_meta and compare Shortcodes6.4 Medium
- baison channel middleware productBaison Channel Middleware Product ToJsonByControlName sql injection5.3 Medium
- d-link di-500wf-wt, dlink di-500wf-wt firmware +1 moreD-Link DI-500WF-WT /usr/sbin/jhttpd msp_info.htm sub_456DE8 command injection5.3 Medium
- parallels desktop for mac, desktop +1 moreA privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop...7.8 High
- parallels desktop for mac, desktop +1 moreA privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop...7.8 High
- parallels desktop for mac, desktop +1 moreA privilege escalation vulnerability exists in the virtual machine archive restoration...7.8 High
- parallels desktop for mac, desktop +1 moreA directory traversal vulnerability exists in the PVMP package unpacking functionality of...8.8 High
- anssilaitila shared files – frontend file upload form & secure file sharingShared Files <= 1.7.48 - Unauthenticated Stored Cross-Site Scripting via sanitize_file Function7.2 High
- gstreamerIn GStreamer through 1.26.1, the subparse plugin's subrip_unescape_formatting function may...5.5 Medium
- Show moreLoading…