CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- phpgurukul online fire reporting systemPHPGurukul Online Fire Reporting System profile.php sql injection5.3 Medium
- phpgurukul online fire reporting systemPHPGurukul Online Fire Reporting System details.php sql injection5.3 Medium
- phpgurukul online fire reporting systemPHPGurukul Online Fire Reporting System search-report-result.php sql injection5.3 Medium
- dalibo postgresql anonymizerCursor allows PostgreSQL Anonymizer masked user to gain unauthorized access to authentic data6.5 Medium
- phpgurukul online fire reporting systemPHPGurukul Online Fire Reporting System request-details.php sql injection5.3 Medium
- phpgurukul online fire reporting systemPHPGurukul Online Fire Reporting System reporting.php sql injection5.3 Medium
- codeastro real estate management systemCodeAstro Real Estate Management System submitpropertyupdate.php sql injection5.3 Medium
- codeastro real estate management systemCodeAstro Real Estate Management System submitpropertydelete.php sql injection5.3 Medium
- auth0 nextjs-auth0NextJS-Auth0 SDK Vulnerable to CDN Caching of Session Cookies7.7 High
- freshrssPrivilege escalation via SSRF when using HTTP auth7.1 High
- freshrssFreshRSS vulnerable to favicon cache poisoning via proxy4.3 Medium
- tenda ac18, ac18 firmware +1 moreTenda AC18 AdvSetLanip fromadvsetlanip buffer overflow8.7 High
- tenda ac18, ac18 firmware +1 moreTenda AC18 SetSysAutoRebbotCfg formsetreboottimer buffer overflow8.7 High
- freshrssFreshRSS vulnerable to Cross-site Scripting by embedding <script> tag inside <iframe srcdoc>6.7 Medium
- freshrssFreshRSS vulnerable to DoS by malicious feed entry loading logout URL4.3 Medium
- freshrssFreshRSS vulnerable to Cross-site Scripting by <iframe>'ing a vulnerable same-origin page in a feed entry6.7 Medium
- freshrssFreshRSS vulnerable to directory enumeration via ext.php5.5 Medium
- broadcom vmware nsx, vmware nsx, cloud foundation +2 more +4 moreVMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the router port due to...5.9 Medium
- broadcom vmware nsx, vmware nsx, cloud foundation +2 more +4 moreVMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the gateway firewall due...6.9 Medium
- broadcom vmware nsx, vmware nsx, cloud foundation +2 more +4 moreVMware NSX Manager UI is vulnerable to a stored Cross-Site Scripting (XSS) attack due to improper...7.5 High
- tenda ac18, ac18 firmware +1 moreTenda AC18 setPptpUserList formSetPPTPUserList buffer overflow8.7 High
- denoDeno.env.toObject() ignores the variables listed in --deny-env and returns all environment variables5.5 Medium
- denoDeno run with --allow-read and --deny-read flags results in allowed5.5 Medium
- tenda ac18, ac18 firmware +1 moreTenda AC18 SetIPTVCfg formSetIptv command injection5.3 Medium
- campcodes hospital management system, online hospital management system +1 moreCampcodes Hospital Management System user-login.php sql injection6.9 Medium
- campcodes hospital management system, online hospital management system +1 moreCampcodes Hospital Management System registration.php sql injection6.9 Medium
- campcodes hospital management system, online hospital management system +1 moreCampcodes Hospital Management System registration.php sql injection6.9 Medium
- totolink ex1200t, ex1200t firmware +1 moreTOTOLINK EX1200T cstecgi.cgi setLanguageCfg stack-based overflow9.3 Critical
- phpgurukul student result management systemPHPGurukul Student Result Management System editmyexp.php sql injection6.9 Medium
- amazon freertosOut of Bounds Write in FreeRTOS-Plus-TCP7.5 High
- freefloat ftp serverFreeFloat FTP Server REGET Command buffer overflow6.9 Medium
- google angularjsAngularJS improper sanitization in SVG '<image>' element with 'ngSanitize'4.8 Medium
- freefloat ftp serverFreeFloat FTP Server PROGRESS Command buffer overflow6.9 Medium
- cisco thousandeyes endpoint agentCisco ThousandEyes Endpoint Agent for Windows Arbitrary File Write Vulnerability5.3 Medium
- cisco identity services engine, identity services engine software +1 moreISE on AWS Static Credential9.9 Critical
- cisco unified contact center expressCisco Unifed Contact Center Express Stored Cross-Site Scripting Vulnerability4.8 Medium
- cisco finesse, socialminer, unified communications manager +5 more +7 moreCisco Unified Communications Products Command Injection Vulnerability6.0 Medium
- cisco unified contact center expressCisco Unified Contact Center Express Path Traversal Vulnerability3.4 Low
- cisco unified contact center expressCisco Unified Contact Center Express Remote Code Execution Vulnerability3.8 Low
- cisco unified contact center expressCisco Unified Contact Center Express Editor Remote Code Execution Vulnerability5.3 Medium
- cisco unified intelligent contact management enterpriseCisco Unified Intelligent Contact Management Enterprise Cross-Site Scripting vulnerability6.1 Medium
- cisco unified computing system (managed), unified computing system (standalone) +1 moreCisco Integrated Management Controller Privilege Escalation Vulnerability8.8 High
- cisco nexus dashboard, data center network manager +1 moreCisco Nexus Dashboard Fabric Controller SSH Host Key Vulnerability8.7 High
- cisco identity services engine, identity services engine software, identity services engine passive identity connector +2 moreCisco Identity Services Engine Access Control Bypass Vulnerability4.9 Medium
- cisco socialminer, unified contact center express +1 moreCisco Customer Collaboration Platform Information Disclosure Vulnerability4.3 Medium
- freefloat ftp serverFreeFloat FTP Server SET Command buffer overflow6.9 Medium
- freefloat ftp serverFreeFloat FTP Server HOST Command buffer overflow6.9 Medium
- freefloat ftp serverFreeFloat FTP Server PASSIVE Command buffer overflow6.9 Medium
- djangoproject django, debian linux +1 moreDjango Improper Output Neutralization for Logs vulnerability4.0 Medium
- acronis cyber protect 16Sensitive information disclosure due to SSRF. The following products are affected: Acronis Cyber...4.3 Medium
- Show moreLoading…