CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- discourseDiscourse vulnerable to HTML injection when inviting to topic via email7.1 High
- fengoffice feng officeFengoffice Feng Office Document Upload ApplicationDataObject.class.php xml external entity reference5.3 Medium
- discourseDiscourse vulnerable to DoS via large URL payload in PM to a bot8.7 High
- tcman gimIncorrect Authorization vulnerability in TCMAN GIM7.1 High
- tcman gimIncorrect Authorization vulnerability in TCMAN GIM7.1 High
- tcman gimIncorrect Authorization vulnerability in TCMAN GIM7.1 High
- lucky lm-520-fsc, lm-520-fsc-sam, lm-520-sc +2 moreLucky LM-520-SC/LM-520-FSC/LM-520-FSC-SAM missing authentication6.9 Medium
- tp-link technologies tl-ipc544ep-w4, tp-link tl-ipc544ep-w4 firmware +1 moreTP-LINK Technologies TL-IPC544EP-W4 main sub_69064 buffer overflow8.7 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL Injection8.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL Injection8.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL Injection8.3 High
- No product listedRedash getattr python.py run_query sandbox2.1 Low
- manageengine opmanagerReflected XSS4.3 Medium
- echarge hardy barth salia plcceCharge Hardy Barth Salia PLCC Web UI firmware.php unrestricted upload5.3 Medium
- manageengine exchange reporter plus, zohocorp manageengine exchange reporter plus +1 moreRemote Code Execution9.6 Critical
- egauge eg3000 energy monitoreGauge EG3000 Energy Monitor Setting missing authentication6.9 Medium
- bagistoReflected Cross-Site Scripting (XSS) in Bagisto5.1 Medium
- papendorf sol connect centerPapendorf SOL Connect Center Web Interface missing authentication6.9 Medium
- trendnet tv-ip121wTRENDnet TV-IP121W Web Interface setup.cgi improper authentication6.9 Medium
- rt-threadRT-Thread lwp_syscall.c sys_recvfrom memory corruption8.6 High
- rt-threadRT-Thread lwp_syscall.c sys_thread_sigprocmask array index8.6 High
- honding technology smart parking management systemHonding Technology Smart Parking Management System - Missing Authorization8.7 High
- rt-threadRT-Thread lwp_syscall.c csys_sendto null pointer dereference8.6 High
- rt-threadRT-Thread lwp_syscall.c sys_sigprocmask array index8.6 High
- honding technology smart parking management systemHonding Technology Smart Parking Management System - Exposure of Sensitive Information9.3 Critical
- rt-threadRT-Thread Parameter lwp_syscall.c sys_select memory corruption8.6 High
- red hat connectivity link 1Rhcl: sharedsecretref can be used to leak secrets severity5.7 Medium
- red hat connectivity link 1, openshift ai (rhoai) +1 moreRhcl: authorino denial of service through authpolicy with sharedsecretref severity5.7 Medium
- red hat connectivity link 1, openshift ai (rhoai) +1 moreRhcl: authpolicy callbacks result in denial of service in authorino severity5.7 Medium
- tenda tdsee appTenda TDSEE App Password Reset Confirmation Code ConfirmSmsCode excessive authentication6.3 Medium
- broadstreetads broadstreetBroadstreet < 1.51.8 - Reflected XSS6.1 Medium
- stefano lissa newsletterNewsletter < 8.8.5 - Admin+ Stored XSS via Form4.8 Medium
- stefano lissa newsletterNewsletter < 8.8.5 - Admin+ Stored XSS via Widget4.8 Medium
- tenda ac5, ac5 firmware +1 moreTenda AC5 SetRebootTimer formSetRebootTimer stack-based overflow8.7 High
- tenda ac7, ac7 firmware +1 moreTenda AC7 setPptpUserList formSetPPTPUserList buffer overflow8.7 High
- tenda ac7, ac7 firmware +1 moreTenda AC7 AdvSetLanip fromadvsetlanip buffer overflow8.7 High
- phpgurukul maid hiring management systemPHPGurukul Maid Hiring Management System search-booking-request.php sql injection6.9 Medium
- phpgurukul nipah virus testing management systemPHPGurukul Nipah Virus Testing Management System test-details.php sql injection5.3 Medium
- phpgurukul nipah virus testing management systemPHPGurukul Nipah Virus Testing Management System patient-report.php sql injection5.3 Medium
- code-projects patient record management systemcode-projects Patient Record Management System urinalysis_record.php sql injection5.3 Medium
- phpgurukul bp monitoring management systemPHPGurukul BP Monitoring Management System registration.php sql injection6.9 Medium
- tenda ac6, ac6 firmware +1 moreTenda AC6 SetRebootTimer formSetRebootTimer stack-based overflow8.7 High
- tenda ac6, ac6 firmware +1 moreTenda AC6 AdvSetLanip fromadvsetlanip buffer overflow8.7 High
- tenda ac6, ac6 firmware +1 moreTenda AC6 SetRemoteWebCfg formSetSafeWanWebMan stack-based overflow8.7 High
spirv-toolsOSS-FuzzUse-of-uninitialized-value in spvtools::EmitNumericLiteralNo score- tenda ac6, ac6 firmware +1 moreTenda AC6 setPptpUserList formSetPPTPUserList buffer overflow8.7 High
- vishalmathur cloudclassroom-php projectCross-Site Scripting (XSS) vulnerability exists in askquery.php via the eid parameter in the...6.1 Medium
- anchorcms anchor cmsA stored cross-site scripting (XSS) vulnerability in Anchor CMS v0.12.7 allows attackers to...5.4 Medium
- silverpeasSilverpeas 6.4.2 contains a stored cross-site scripting (XSS) vulnerability in the event...5.4 Medium
- codervivek vigybagVigybag v1.0 and before is vulnerable to Cross Site Scripting (XSS) via the upload profile...5.4 Medium
- Show moreLoading…