CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- acronis cyber protect 16Local privilege escalation due to insecure folder permissions. The following products are...7.3 High
- acronis cyber protect 16Weak server key used for TLS encryption. The following products are affected: Acronis Cyber...5.9 Medium
- mim software admin serviceLocal Privilege Escalation in MIM Admin Service8.9 High
- acronis cyber protect cloud agentLocal privilege escalation due to insecure file permissions. The following products are affected:...6.7 Medium
- acronis cyber protect 17, cyber protect cloud agent +1 moreDenial of service due to improper handling of malformed input. The following products are...7.5 High
- airleader gmbh master, wf steuerungstechnik gmbh airleader master +1 moreWF Steuerungstechnik GmbH - airleader MASTER - Authentication Bypass10.0 Critical
- airleader gmbh master, wf steuerungstechnik gmbh airleader master +1 moreWF Steuerungstechnik GmbH - airleader MASTER - Path Traversal9.2 Critical
- wiresharkBuffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark7.8 High
- anujk305 hospital management systemPHPGurukul Hospital Management System POST Parameter edit-patient.php cross site scripting4.8 Medium
- phoenix contact ilc 131, ilc 151, ilc 171 +1 more +3 morePHOENIX CONTACT: ILC 1x1 ETH Denial of Service7.5 High
- codeastro real estate management systemCodeAstro Real Estate Management System register.php sql injection6.9 Medium
govulncheck-vulndbopenSUSESecurity update for govulncheck-vulndbNo score- codeastro real estate management systemCodeAstro Real Estate Management System profile.php sql injection5.3 Medium
- codeastro real estate management systemCodeAstro Real Estate Management System index.php sql injection6.9 Medium
- codeastro real estate management systemCodeAstro Real Estate Management System login.php sql injection6.9 Medium
- delta electronics cncsoft-g2File Parsing Memory Corruption in CNCSoft-G27.3 High
- abb eibport v3 knx, eibport v3 knx gsm +1 moreession-Management Failure9.4 Critical
- phpgurukul dairy farm shop management systemPHPGurukul Dairy Farm Shop Management System search-product.php sql injection6.9 Medium
- phpgurukul dairy farm shop management systemPHPGurukul Dairy Farm Shop Management System sales-report-details.php sql injection6.9 Medium
- curlWebSocket endless loop7.5 High
- phpgurukul dairy farm shop management systemPHPGurukul Dairy Farm Shop Management System profile.php sql injection6.9 Medium
- phpgurukul dairy farm shop management systemPHPGurukul Dairy Farm Shop Management System bwdate-report-details.php sql injection6.9 Medium
- delta electronics cncsoftOut-of-bounds Write in CNCSoft7.3 High
- rsjoomla rsform\!pro, rsjoomla.com rsform!pro component for joomla +1 moreExtension - rsjoomla.com - A reflected XSS vulnerability RSform!Pro component 3.0.0 - 3.3.13 for Joomla4.8 Medium
- delta electronics cncsoftOut-of-bounds Write in CNCSoft7.3 High
- delta electronics cncsoftOut-of-bounds Write in CNCSoft7.3 High
- delta electronics cncsoftOut-of-bounds Write in CNCSoft7.3 High
- sunshinephotocart sunshine photo cart, sunshine photo cart – client photo gallery & photo proofing for photographers +1 moreSunshine Photo Cart <= 3.4.11 - Authenticated (Subscriber+) Privilege Escalation8.8 High
- phpgurukul dairy farm shop management systemPHPGurukul Dairy Farm Shop Management System add-product.php sql injection6.9 Medium
- phpgurukul dairy farm shop management systemPHPGurukul Dairy Farm Shop Management System add-company.php sql injection6.9 Medium
- d-link dcs-932l, dlink dcs-932l firmware +1 moreD-Link DCS-932L setSystemWizard setSystemControl os command injection5.3 Medium
- d-link dcs-932l, dlink dcs-932l firmware +1 moreD-Link DCS-932L setSystemEmail stack-based overflow8.7 High
- dimdavid file providerFile Provider <= 1.2.3 - Item Deletion via CSRF4.3 Medium
- dimdavid file providerFile Provider <= 1.2.3 - Unauthenticated SQLi9.8 Critical
- kro.run krokro Confused Deputy vulnerability4.1 Medium
- d-link dcs-932l, dlink dcs-932l firmware +1 moreD-Link DCS-932L setSystemAdmin os command injection5.3 Medium
- ideacmsIdeaCMS getList.html Goods sql injection5.3 Medium
- phpgurukul notice board systemPHPGurukul Notice Board System search-notice.php sql injection5.3 Medium
- phpgurukul curfew e-pass management systemPHPGurukul Curfew e-Pass Management System edit-category-detail.php sql injection6.9 Medium
- samsung smart switchImproper authorization in Smart Switch installed on non-Samsung Device prior to version 3.7.64.10...5.0 Medium
- samsung internetImproper handling of insufficient permission in ClientProvider in Samsung Internet installed on...4.9 Medium
- samsung internetImproper handling of insufficient permission in SyncClientProvider in Samsung Internet installed...4.5 Medium
- samsung android, samsung mobile devices +1 moreOut-of-bounds write in libsecimaging.camera.samsung.so prior to SMR Jun-2025 Release 1 allows...4.0 Medium
- samsung android, samsung mobile devices +1 moreOut-of-bound read in libsecimaging.camera.samsung.so prior to SMR Feb-2025 Release 1 allows local...4.0 Medium
- samsung android, samsung mobile devices +1 moreImproper export of Android application components in Bluetooth prior to SMR Jun-2025 Release 1...4.0 Medium
- samsung android, samsung mobile devices +1 moreImproper logging in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged...5.2 Medium
- samsung android, samsung mobile devices +1 moreOut-of-bounds read in fingerprint trustlet prior to SMR May-2025 Release 1 allows local...5.5 Medium
- samsung android, samsung mobile devices +1 moreImproper access control in fingerprint trustlet prior to SMR May-2025 Release 1 allows local...5.2 Medium
- samsung wear os, samsung mobile devices +1 moreImproper access control in ScreenCapture for Galaxy Watch prior to SMR Jun-2025 Release 1 allows...5.5 Medium
- samsung android, samsung mobile devices +1 moreImproper privilege management in ThemeManager prior to SMR Jun-2025 Release 1 allows local...5.5 Medium
- Show moreLoading…