CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- samsung wear os, samsung mobile devices +1 moreIncorrect default permission in Samsung Cloud for Galaxy Watch prior to SMR Jun-2025 Release 1...6.8 Medium
- samsung android, samsung mobile devices +1 moreImproper access control in AudioService prior to SMR Jun-2025 Release 1 allows local attackers to...6.2 Medium
- zscaler client connectorMacOS Zscaler Client Connector Local Privilege Escalation7.3 High
- phpgurukul curfew e-pass management systemPHPGurukul Curfew e-Pass Management System view-pass-detail.php sql injection6.9 Medium
- emarket-design simple contact form plugin for wordpress – wp easy contact, emarketdesign wp easy contact +1 moreSimplify Contact Management: WP Easy Contact <= 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- phpgurukul curfew e-pass management systemPHPGurukul Curfew e-Pass Management System index.php sql injection6.9 Medium
- phpgurukul teacher subject allocation management systemPHPGurukul Teacher Subject Allocation Management System changeimage.php sql injection5.3 Medium
- emarket-design campus directory – faculty, staff & student directory plugin for wordpressFaculty Staff and Student Directory Plugin – Campus Directory <= 1.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- emarket-design employee directory – staff & team directoryStaff Directory – Employee Directory for WordPress <= 4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- phpgurukul teacher subject allocation management systemPHPGurukul Teacher Subject Allocation Management System edit-course.php sql injection5.3 Medium
- phpgurukul teacher subject allocation management systemPHPGurukul Teacher Subject Allocation Management System edit-teacher-info.php sql injection5.3 Medium
- phpgurukul rail pass management systemPHPGurukul Rail Pass Management System pass-bwdates-reports-details.php sql injection5.3 Medium
- phpgurukul rail pass management systemPHPGurukul Rail Pass Management System download-pass.php sql injection6.9 Medium
- 1000mz chestnutcmsChestnutCMS API Endpoint exec deserialization5.3 Medium
- naver billboard.jsbillboard.js allows prototype pollution via the function generate9.8 Critical
- freefloat ftp serverFreeFloat FTP Server SYSTEM Command buffer overflow6.9 Medium
- freefloat ftp serverFreeFloat FTP Server PBSZ Command buffer overflow6.9 Medium
- freefloat ftp serverFreeFloat FTP Server PASV Command buffer overflow6.9 Medium
- freefloat ftp serverFreeFloat FTP Server NOOP Command buffer overflow6.9 Medium
- freefloat ftp serverFreeFloat FTP Server CDUP Command buffer overflow6.9 Medium
- changeweb unifiedtransformAn issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the /course...6.5 Medium
- changeweb unifiedtransformAn issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the ...6.5 Medium
- nadh listmonkListmonk v2.4.0 through v4.1.0 is vulnerable to SQL Injection in the QuerySubscribers function...6.5 Medium
- motivian content management systemCross Site Scripting vulnerability in Motivian Content Mangment System v.41.0.0 allows a remote...6.1 Medium
- motivian content management systemFile Upload vulnerability in Motivian Content Mangment System v.41.0.0 allows a remote attacker...8.2 High
- razer synapse 4A local privilege escalation in the razer_elevation_service.exe in Razer Synapse 4 through 4.0.86...7.8 High
- samsung exynos 1480 firmware, exynos 2200 firmware, exynos 2400 firmware +2 moreAn issue was discovered in Samsung Mobile Processor Exynos 2200, 1480, and 2400. A Use-After-Free...6.5 Medium
- samsung exynos 1380 firmwareAn issue was discovered in Samsung Mobile Processor Exynos 1380. A Use-After-Free in the mobile...6.5 Medium
- samsung exynos 1280 firmware, exynos 1380 firmware, exynos 1480 firmware +2 more +4 moreAn issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400. A Double...6.5 Medium
- samsung exynos 1280 firmware, exynos 1380 firmware, exynos 1480 firmware +2 more +4 moreAn issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400. A Double...6.5 Medium
- phpgurukul daily expense tracker systemPHPGurukul Daily Expense Tracker System expense-reports-detailed.php sql injection5.3 Medium
- aaluoxiang oa systemaaluoxiang oa_system ProcedureController.java image path traversal5.3 Medium
- aaluoxiang oa systemaaluoxiang oa_system UserpanelController.java image path traversal5.3 Medium
- denoDeno's AES GCM authentication tags are not verified7.7 High
- totolink x2000r, x2000r firmware +1 moreTOTOLINK X2000R Parent Controls Page cross site scripting4.8 Medium
- totolink x2000r, x2000r firmware +1 moreTOTOLINK X2000R Virtual Server Page formPortFw cross site scripting4.8 Medium
- inventreeInvenTree has uncontrolled memory allocation via built-in label-sheet plugin3.5 Low
- auth0 auth0-phpAuth0-PHP SDK Deserialization of Untrusted Data vulnerability9.3 Critical
- dataeaseDataease H2 Database Remote Code Execution (RCE) Bypass Vulnerability8.2 High
- dataeaseDataease Authentication Bypass Vulnerability7.7 High
- dataeaseDataease Redshift Data Source JDBC Connection Parameters Not Verified Leads to RCE Vulnerability6.8 Medium
- tenda rx3, rx3 firmware +1 moreTenda RX3 SetStaticRouteCfg save_staticroute_data stack-based overflow8.7 High
- jrohy trojanJrohy trojan linux.go LogChan os command injection6.3 Medium
- enilu web-flashenilu web-flash File Upload upload fileService.upload cross site scripting5.1 Medium
- hibernate validator, redhat hibernate validator +1 morehibernate-validator insecure default Expression Language interpolation6.9 Medium
- jack0240 魏 bskms 蓝天幼儿园管理系统jack0240 魏 bskms 蓝天幼儿园管理系统 User Creation addUser improper authorization6.9 Medium
- wukongopensource wukongcrm, 5kcrm wukong crm +1 moreWuKongOpenSource WukongCRM updataPassword cross-site request forgery5.3 Medium
- dataeaseDataease MYSQL JDBC File Reading Vulnerability7.3 High
- expressjs multerMulter vulnerable to Denial of Service via unhandled exception8.7 High
- umbraco cms, umbraco-cms +1 moreUmbraco Vulnerable to By-Pass of Configured Allowed Extensions for File Uploads5.5 Medium
- Show moreLoading…