CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- numan react-native-keysreact-native-keys insecurely stores encryption cipher and Base64 chunks7.5 High
- keepersecurity keeperchatAn issue in KeeperChat IOS Application v.5.8.8 allows a physically proximate attacker to escalate...6.8 Medium
- No product listedA Host Header injection vulnerability in the password reset function of VigyBag Open Source...6.1 Medium
- tenda ac15, ac15 firmware +1 moreTenda AC15 HTTP POST Request AdvSetLanip fromadvsetlanip buffer overflow8.7 High
- tenda ac15, ac15 firmware +1 moreTenda AC15 HTTP POST Request SetLEDCf formsetschedled buffer overflow8.7 High
- tenda ac15, ac15 firmware +1 moreTenda AC15 HTTP POST Request SetRemoteWebCfg formSetSafeWanWebMan stack-based overflow8.7 High
- tenda ac15, ac15 firmware +1 moreTenda AC15 HTTP POST Request setPptpUserList formSetPPTPUserList buffer overflow8.7 High
- microhard ipn4gii / bullet-lte firmware, microhardcorp bulletlte-na2 firmware, ipn4gii-na2 firmware +2 moreMicrohard Bullet-LTE and IPn4Gii AT+MNPINGTM Argument Injection7.1 High
- microhard ipn4gii / bullet-lte firmware, microhardcorp bulletlte-na2 firmware, ipn4gii-na2 firmware +2 moreMicrohard Bullet-LTE and IPn4Gii AT+MNNETSP Argument Injection7.1 High
- microhard ipn4gii / bullet-lte firmware, microhardcorp bulletlte-na2 firmware, ipn4gii-na2 firmware +2 moreMicrohard Bullet-LTE and IPn4Gii AT+MMNAME Argument Injection7.1 High
- microhard ipn4gii / bullet-lte firmware, microhardcorp bulletlte-na2 firmware, ipn4gii-na2 firmware +2 moreMicrohard Bullet-LTE and IPn4Gii AT+MFRULE Argument Injection7.1 High
- microhard ipn4gii / bullet-lte firmware, microhardcorp bulletlte-na2 firmware, ipn4gii-na2 firmware +2 moreMicrohard Bullet-LTE and IPn4Gii AT+MFPORTFWD Argument Injection7.1 High
- microhard ipn4gii / bullet-lte firmware, microhardcorp bulletlte-na2 firmware, ipn4gii-na2 firmware +2 moreMicrohard Bullet-LTE and IPn4Gii AT+MFMAC Argument Injection7.1 High
- microhard ipn4gii / bullet-lte firmware, microhardcorp bulletlte-na2 firmware, ipn4gii-na2 firmware +2 moreMicrohard Bullet-LTE and IPn4Gii AT+MFIP Argument Injection7.1 High
- on semiconductor quantenna wi-fi chipset, onsemi qcs-ax2-a12 firmware, qcs-ax2-s5 firmware +16 more +18 moreON Semiconductor Quantenna router_command.sh (in the sync_time argument) Argument Injection7.7 High
- on semiconductor quantenna wi-fi chipset, onsemi qcs-ax2-a12 firmware, qcs-ax2-s5 firmware +16 more +18 moreON Semiconductor Quantenna router_command.sh (in the get_syslog_from_qtn argument) Argument Injection7.7 High
- on semiconductor quantenna wi-fi chipset, onsemi qcs-ax2-a12 firmware, qcs-ax2-s5 firmware +16 more +18 moreON Semiconductor Quantenna router_command.sh (in the get_file_from_qtn argument) Argument Injection7.7 High
- on semiconductor quantenna wi-fi chipset, onsemi qcs-ax2-a12 firmware, qcs-ax2-s5 firmware +16 more +18 moreON Semiconductor Quantenna router_command.sh (in the put_file_to_qtn argument) Argument Injection7.7 High
- on semiconductor quantenna wi-fi chipset, onsemi qcs-ax2-a12 firmware, qcs-ax2-s5 firmware +16 more +18 moreON Semiconductor Quantenna router_command.sh (in the run_cmd argument) Argument Injection7.7 High
- on semiconductor quantenna wi-fi chipset, onsemi qcs-ax2-a12 firmware, qcs-ax2-s5 firmware +16 more +18 moreON Semiconductor Quantenna Telnet Missing Authentication9.1 Critical
- on semiconductor quantenna wi-fi chipset, onsemi qcs-ax2-a12 firmware, qcs-ax2-s5 firmware +16 more +18 moreON Semiconductor Quantenna set_tx_pow Argument Injection7.7 High
- on semiconductor quantenna wi-fi chipset, onsemi qcs-ax2-a12 firmware, qcs-ax2-s5 firmware +16 more +18 moreON Semiconductor Quantenna transmit_file Argument Injection7.7 High
- tenda ac9, ac9 firmware +1 moreTenda AC9 HTTP POST Request SetRemoteWebCfg formSetSafeWanWebMan stack-based overflow8.7 High
- openatom openharmonyPasteboard has an improper preservation of permissions vulnerability5.5 Medium
- openatom openharmonySsecurity_component_manager has an improper input vulnerability3.3 Low
- openatom openharmonysecurity_access_token has an improper preservation of permissions vulnerability3.3 Low
- openatom openharmonysecurity_access_token has an improper preservation of permissions vulnerability3.3 Low
- openatom openharmonytelephony_call_manager has an improper preservation of permissions vulnerability5.5 Medium
- openatom openharmonykernel_liteos_m has an improper input vulnerability6.1 Medium
- openatom openharmonykernel_liteos_a has a race condition vulnerability5.5 Medium
- openatom openharmonyarkui_ace_enginehas a NULL pointer dereference vulnerability3.3 Low
- openatom openharmonyarkcompiler_ets_runtime has an out-of-bounds write vulnerability3.3 Low
- openatom openharmonyarkui_ace_engine has a type confusion vulnerability3.3 Low
- openatom openharmonyarkui_ace_engine has a type confusion vulnerability3.3 Low
- debian linux, linux kernel +1 morecan: bcm: add locking for bcm_op runtime updates7.3 High
- debian linux, linux kernel +1 morecan: bcm: add missing rcu read protection for procfs content7.8 High
- lerouxyxchire client database management systemSourceCodester Client Database Management System user_update_customer_order.php unrestricted upload6.9 Medium
- tenda ac9, ac9 firmware +1 moreTenda AC9 POST Request AdvSetLanip fromadvsetlanip buffer overflow8.7 High
- phpgurukul employee record management systemPHPGurukul Employee Record Management System adminprofile.php sql injection5.3 Medium
- phpgurukul employee record management systemPHPGurukul Employee Record Management System allemployees.php sql injection5.3 Medium
- tenda ac9, ac9 firmware +1 moreTenda AC9 POST Request SetIPTVCfg formSetIptv command injection5.3 Medium
- wpdeveloper essential addons for elementor, wpdevteam essential addons for elementor – popular elementor templates & widgets +1 moreEssential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Event Calendar Widget6.4 Medium
- mage-people event manager and tickets selling for woocommerce, magepeopleteam event booking manager for woocommerce +1 moreWpEvently <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- heateor sassy social share, social sharing plugin – sassy social share +1 moreSocial Sharing Plugin – Sassy Social Share <= 3.3.75 - Reflected Cross-Site Scripting via 'heateor_mastodon_share' Parameter6.1 Medium
- wpdeveloper essential addons for elementor, wpdevteam essential addons for elementor – popular elementor templates & widgets +1 moreEssential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Pricing Table Widget6.4 Medium
- enituretechnology ltl freight quotes – day & ross edition, ltl freight quotes – daylight edition, ltl freight quotes – freightview edition +2 moreLTL Freight Quotes – Freightview Edition <= 1.0.11, LTL Freight Quotes – Daylight Edition <=2.2.6 and LTL Freight Quotes – Day & Ross Edition <= 2.1.10 - Unauthenticated Stored Cross-Site Scripting vi…7.2 High
- christiaan pieterse maxiblocksWordPress MaxiBlocks plugin <= 2.1.0 - Arbitrary Option Update to Privilege Escalation vulnerability8.8 High
- switcorp profiler – what slowing down your wpProfiler – What Slowing Down Your WP <= 1.0.0 - Missing Authentication to Unauthenticated Arbitrary Plugin Reactivation via State Restoration5.3 Medium
metadata-extractorOSS-FuzzSecurity exception in com.drew.imaging.quicktime.QuickTimeReader.processAtomsNo score- skyvernSkyvern has a Jinja runtime leak8.5 High
- Show moreLoading…