CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- gsaraiva developer formatterDeveloper Formatter <= 2015.0.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Custom CSS5.5 Medium
- tushargohel wordpress ajax load more and infinite scrollWordPress Ajax Load More and Infinite Scroll <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter6.4 Medium
- hivesupport hive support | ai-powered help desk, live chat and chatbotHive Support <= 1.2.5 - Cross-Site Request Forgery via hs_update_ai_chat_settings Function5.4 Medium
- calebzahnd esv bible shortcode for wordpressESV Bible Shortcode for WordPress <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- ajay knowledge baseKnowledge Base <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- huawei harmonyosResource allocation control failure vulnerability in the ArkUI framework Impact: Successful...4.0 Medium
- huawei harmonyosDeserialization vulnerability in the IPC module Impact: Successful exploitation of this...6.2 Medium
- huawei harmonyosAuthentication bypass vulnerability in the DSoftBus module Impact: Successful exploitation of...8.8 High
- huawei harmonyosWasm exception capture vulnerability in the arkweb v8 module Impact: Successful exploitation of...8.1 High
- huawei harmonyosVulnerability that cards can call unauthorized APIs in the FRS process Impact: Successful...4.4 Medium
- huawei harmonyosPermission bypass vulnerability in the media library module Impact: Successful exploitation of...7.8 High
- huawei emui, harmonyos +1 moreVulnerability of uncontrolled system resource applications in the setting module Impact:...6.6 Medium
- razormist student result management systemSourceCodester Student Result Management System Announcement Page announcement cross site scripting4.8 Medium
- psf requestsRequests vulnerable to .netrc credentials leak via malicious URLs5.3 Medium
- razormist student result management systemSourceCodester Student Result Management System Division System Page division-system cross site scripting4.8 Medium
- kaizencoders short urlShort URL <= 1.6.8 - Subscriber+ SQLi8.8 High
- munyweki student result management systemSourceCodester Student Result Management System Grading System Page grading-system cross site scripting4.8 Medium
- munyweki student result management systemSourceCodester Student Result Management System Subjects Page subjects cross site scripting4.8 Medium
- seatheme bm content builderBM Content Builder <= 3.16.2.1 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via ux_cb_page_options_save6.4 Medium
- seatheme art themeArt Theme <= 3.12.2.3 - Missing Authorization to Authenticated (Subscriber+) Theme Option Delete4.3 Medium
- munyweki student result management systemSourceCodester Student Result Management System Classes Page classes cross site scripting4.8 Medium
- munyweki student result management systemSourceCodester Student Result Management System Add Academic Term terms cross site scripting4.8 Medium
- i-pro co., ltd. surveillance cameras provided by i-pro co., ltd.Cross-site request forgery vulnerability exists in surveillance cameras provided by i-PRO Co.,...5.1 Medium
- razormist student result management systemSourceCodester Student Result Management System Profile Setting Page update_profile cross site scripting4.8 Medium
- webnus/ modern events calendar liteModern Events Calendar <= 7.21.9 - Information Exposure5.3 Medium
- vivo walletThe wallet has an authentication bypass vulnerability that allows access to specific pages.5.1 Medium
- nikhil-bhalerao open source clinic management systemSourceCodester Open Source Clinic Management System login.php sql injection6.9 Medium
- vivo systemuiSystemUI component protection settings vulnerability4.8 Medium
- signal app, signal +1 moreSignal App Biometric Authentication missing critical step in authentication1.0 Low
- soluçõescoop isoluçõesweb, isolucoesweb solucoescoop +1 moreSoluçõesCoop iSoluçõesWEB Profile Information Update up.upload.php path traversal5.3 Medium
- soluçõescoop isoluçõesweb, isolucoesweb solucoescoop +1 moreSoluçõesCoop iSoluçõesWEB Flow fluxos-dashboard cross site scripting5.1 Medium
- nikhil-bhalerao open source clinic management systemSourceCodester Open Source Clinic Management System appointment.php sql injection6.9 Medium
- code-projects real estate property management systemcode-projects Real Estate Property Management System InsertCity.php sql injection6.9 Medium
- code-projects real estate property management systemcode-projects Real Estate Property Management System InsertState.php sql injection6.9 Medium
- code-projects real estate property management systemcode-projects Real Estate Property Management System InsertCategory.php sql injection6.9 Medium
- ibm verify identity access digital credentialsIBM Verify Identity Access Digital Credentials denial of service4.3 Medium
- ibm verify identity access digital credentialsIBM Verify Identity Access Digital Credentials information disclosure4.3 Medium
- ibm security verify governanceIBM Security Verify Governance information disclosure5.9 Medium
- code-projects real estate property management systemcode-projects Real Estate Property Management System NewsReport.php sql injection6.9 Medium
- phpgurukul human metapneumovirus testing management system, anujk305 human metapneumovirus \(hmpv\) - testing management system +1 morePHPGurukul Human Metapneumovirus Testing Management System registered-user-testing.php sql injection6.9 Medium
shadercOSS-FuzzSegv on unknown address in glslang::TIntermediate::addSymbolNo scorejsoupOSS-FuzzSecurity exception in org.jsoup.parser.HtmlTreeBuilder.processNo scoreauth0/symfonyPackagistAuth0 Symfony SDK Deserialization of Untrusted Data vulnerability9.3 Critical- phpgurukul human metapneumovirus testing management system, anujk305 human metapneumovirus \(hmpv\) - testing management system +1 morePHPGurukul Human Metapneumovirus Testing Management System new-user-testing.php sql injection6.9 Medium
- gimpGIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerability7.8 High
- huawei eg8141a5, eg8145v5, eg8145v5-v2 +2 moreHuawei EG8141A5 devices through V5R019C00S100, EG8145V5 devices through V5R019C00S100, and...4.1 Medium
- code-projects real estate property management systemcode-projects Real Estate Property Management System Property.php sql injection6.9 Medium
- code-projects real estate property management systemcode-projects Real Estate Property Management System User.php sql injection6.9 Medium
- himmelblau-idm himmelblauHimmelblau's Name-Based Group Matching in `pam_allow_groups` Leads to Potential Security Bypass5.4 Medium
- brilliance golden link secondary systemBrilliance Golden Link Secondary System logSelect.htm sql injection5.3 Medium
- Show moreLoading…