CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- brilliance golden link secondary systemBrilliance Golden Link Secondary System tcCustDeferPosiQuery.htm sql injection5.3 Medium
- brilliance golden link secondary systemBrilliance Golden Link Secondary System rentChangeCheckInfoPage.htm sql injection5.3 Medium
- teledyne flir ax8, flir ax8 firmware +1 moreTeledyne FLIR AX8 Backend subscriptions.php subscribe_to_alarm command injection5.1 Medium
- microsoft power automate for desktopPower Automate Elevation of Privilege Vulnerability9.8 Critical
- uncanny owl automator, uncannyowl uncanny automator +1 moreWordPress Uncanny Automator plugin <= 6.4.0.2 - Broken Access Control Vulnerability6.5 Medium
- phpgurukul human metapneumovirus testing management system, anujk305 human metapneumovirus \(hmpv\) - testing management system +1 morePHPGurukul Human Metapneumovirus Testing Management System search-report-result.php sql injection5.3 Medium
- phpgurukul human metapneumovirus testing management system, anujk305 human metapneumovirus \(hmpv\) - testing management system +1 morePHPGurukul Human Metapneumovirus Testing Management System bwdates-report-result.php sql injection5.3 Medium
- tenda ch22, ch22 firmware +1 moreTenda CH22 Natlimit formNatlimit stack-based overflow8.7 High
- hp support assistant, hp, inc. hp support assistant +1 moreHP Support Assistant – Potential Escalation of Privilege7.1 High
- shenzhen dashi tongzhou information technology agilebpmShenzhen Dashi Tongzhou Information Technology AgileBPM Groovy Script SysScriptController.java executeScript deserialization5.3 Medium
- gnu glibcThe strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40...5.6 Medium
- shenzhen dashi tongzhou information technology agilebpmShenzhen Dashi Tongzhou Information Technology AgileBPM SysToolsController.java parseStrByFreeMarker deserialization5.3 Medium
- campcodes online recruitment management systemCampcodes Online Recruitment Management System ajax.php sql injection6.9 Medium
- campcodes online recruitment management systemCampcodes Online Recruitment Management System ajax.php sql injection6.9 Medium
- campcodes online teacher record management systemCampcodes Online Teacher Record Management System bwdates-reports-details.php sql injection6.9 Medium
- gnu glibcThe strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39...5.6 Medium
- code-projects patient record management systemcode-projects Patient Record Management System urinalysis_form.php sql injection5.3 Medium
- bdthemes element pack proWordPress Element Pack Pro Plugin < 8.0.0 - Broken Access Control vulnerability5.4 Medium
- bdthemes element pack proWordPress Element Pack Pro Plugin < 8.0.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- totolink n302r plus, n302r plus firmware +1 moreTOTOLINK N302R Plus HTTP POST Request formFilter buffer overflow8.7 High
- totolink n302r plus, n302r plus firmware +1 moreTOTOLINK N302R Plus HTTP POST Request formPortFw buffer overflow8.7 High
- phpgurukul medical card generation systemPHPGurukul Medical Card Generation System manage-card.php sql injection5.3 Medium
- erudika paraPara Inserts Sensitive Information into Log File for Facebook authentication6.2 Medium
- yiiframework yii2-redisYii 2 Redis may expose AUTH paramters in logs in case of connection failure5.1 Medium
- phpgurukul medical card generation systemPHPGurukul Medical Card Generation System unreadenq.php sql injection5.3 Medium
- phpgurukul medical card generation systemPHPGurukul Medical Card Generation System readenq.php sql injection5.3 Medium
- freefloat ftp serverFreeFloat FTP Server REIN Command buffer overflow6.9 Medium
- freefloat ftp serverFreeFloat FTP Server XMKD Command buffer overflow6.9 Medium
- freefloat ftp serverFreeFloat FTP Server XCWD Command buffer overflow6.9 Medium
- freefloat ftp serverFreeFloat FTP Server RESTART Command buffer overflow6.9 Medium
- phpgurukul auto taxi stand management system, auto\/taxi stand management system +1 morePHPGurukul Auto Taxi Stand Management System search-autoortaxi.php sql injection6.9 Medium
- devolutions serverImproper access control in permissions component in Devolutions Server 2025.1.10.0 and earlier...5.0 Medium
- devolutions serverImproper access control in users MFA feature in Devolutions Server 2025.1.7.0 and earlier allows...6.8 Medium
- devolutions serverImproper access control in Tor network blocking feature in Devolutions Server 2025.1.10.0 and...5.0 Medium
- carmelo traffic offense reporting systemcode-projects Traffic Offense Reporting System Setting save-settings.php cross site scripting4.8 Medium
- rsjoomla rsform\!blog, rsjoomla.com rsblog component for joomla +1 moreExtension - rsjoomla.com - A stored XSS vulnerability RSBlog! component 1.11.6 - 1.14.4 for Joomla6.5 Medium
- rsjoomla.com rsmediagallery component for joomlaExtension - rsjoomla.com - A SQLi vulnerability RSMediaGallery component 1.7.4 - 2.1.6 for Joomla6.5 Medium
- rsjoomla.com rsfirewall component for joomlaExtension - rsjoomla.com - A path traversal vulnerability RSFirewall component 2.9.7 - 3.1.5 for Joomla5.4 Medium
- rsjoomla rsmail\!, rsjoomla.com rsmail! component for joomla +1 moreExtension - rsjoomla.com - Reflected XSS vulnerability RSMail! component 1.19.20-1.22.26 for Joomla6.1 Medium
- phpgurukul complaint management systemPHPGurukul Complaint Management System register-complaint.php sql injection5.3 Medium
- phpgurukul complaint management systemPHPGurukul Complaint Management System profile.php sql injection5.3 Medium
- phpgurukul complaint management systemPHPGurukul Complaint Management System updatecomplaint.php sql injection5.3 Medium
- phpgurukul complaint management systemPHPGurukul Complaint Management System manage-users.php sql injection5.3 Medium
- phpgurukul complaint management systemPHPGurukul Complaint Management System edit-category.php sql injection5.3 Medium
- wpmudev forminator forms – contact form, payment form & custom form builder, forminator forms +1 moreForminator <= 1.44.1 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via id and data-size Parameters6.4 Medium
- siteheart hypercommentsHyperComments <= 1.2.2 - Unauthenticated (Subscriber+) Arbitrary Options Update8.8 High
- phpgurukul complaint management systemPHPGurukul Complaint Management System edit-subcategory.php sql injection5.3 Medium
- phpgurukul complaint management systemPHPGurukul Complaint Management System edit-state.php sql injection5.3 Medium
- phpgurukul complaint management systemPHPGurukul Complaint Management System between-date-userreport.php sql injection5.3 Medium
- trol intermedia 2clickportalSQL Injection in 2ClickPortal9.3 Critical
- Show moreLoading…