CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- sap se grc (ac plugin)Information Disclosure in SAP GRC (AC Plugin)8.8 High
- sap se netweaver visual composerDirectory Traversal vulnerability in SAP NetWeaver Visual Composer7.6 High
- sap se netweaver (abap keyword documentation)Cross-Site Scripting (XSS) Vulnerability in SAP NetWeaver (ABAP Keyword Documentation)5.8 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence (bi workspace) +1 moreCross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence (BI Workspace)8.2 High
- totolink t10, t10 firmware +1 moreTOTOLINK T10 POST Request cstecgi.cgi setWiFiRepeaterCfg buffer overflow8.7 High
- totolink t10, t10 firmware +1 moreTOTOLINK T10 POST Request cstecgi.cgi setWiFiMeshName buffer overflow8.7 High
- airleader easy firmware, master ii\+ firmware +1 moreThe Panel Designer dashboard in Airleader Master and Easy before 6.36 allows remote attackers to...7.2 High
- No product listedKeyoti SearchUnit prior to 9.0.0. is vulnerable to XML External Entity (XXE). An attacker who can...7.5 High
- No product listedKeyoti SearchUnit prior to 9.0.0. is vulnerable to Server-Side Request Forgery (SSRF) in ...5.4 Medium
- microsoft .net, .net 8.0, .net 9.0 +8 more +10 more.NET and Visual Studio Remote Code Execution Vulnerability7.5 High
- erxesErxes Incorrect Access Control vulnerability9.8 Critical
- erxesErxes Path Traversal vulnerability5.4 Medium
- erxesErxes Path Traversal vulnerability5.4 Medium
- jetimob imobiliariaJetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS) in the ...6.1 Medium
- jetimob imobiliariaJetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS). In the ...6.1 Medium
- jetimob imobiliariaJetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS) in the...6.1 Medium
- jetimob imobiliariaJetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS) via the...6.1 Medium
- vanderbilt redcapA stored cross-site scripting (XSS) vulnerability in the Calendar function of REDCap 13.1.9...5.4 Medium
- vanderbilt redcapA stored cross-site scripting (XSS) vulnerability in the Public Survey function of REDCap 13.1.9...5.4 Medium
- vanderbilt redcapA stored cross-site scripting (XSS) vulnerability in the Project Dashboards of REDCap 13.1.9...5.4 Medium
- amd versal adaptive soc devices, alveo v80 compute accelerator, platform loader and manager (plm) +6 more +8 moreIn AMD Versal Adaptive SoC devices, the incorrect configuration of the SSS during runtime (post...3.2 Low
- amd platform loader and manager (plm)In AMD Versal Adaptive SoC devices, the lack of address validation when executing PLM runtime...6.6 Medium
- totolink t10, t10 firmware +1 moreTOTOLINK T10 POST Request cstecgi.cgi setWiFiAclRules buffer overflow8.7 High
org.geotools:gt-wfs-ngMaven,org.geotools:gt-xsd-coreMaven +1 moreGeoTools has XML External Entity (XXE) Processing Vulnerability in XSD schema handling9.9 Critical- totolink t10, t10 firmware +1 moreTOTOLINK T10 POST Request cstecgi.cgi setUpgradeFW buffer overflow8.7 High
- cyberdata 011209 sip emergency intercom, 011209 sip emergency intercom firmware +1 moreCyberData 011209 SIP Emergency Intercom Path Traversal9.3 Critical
- totolink t10, t10 firmware +1 moreTOTOLINK T10 POST Request cstecgi.cgi UploadCustomModule buffer overflow8.7 High
- cyberdata 011209 sip emergency intercom, 011209 sip emergency intercom firmware +1 moreCyberData 011209 SIP Emergency Intercom Insufficiently Protected Credentials8.7 High
- cyberdata 011209 sip emergency intercom, 011209 sip emergency intercom firmware +1 moreCyberData 011209 SIP Emergency Intercom SQL Injection6.9 Medium
- cyberdata 011209 sip emergency intercomCyberData 011209 SIP Emergency Intercom Missing Authentication for Critical Function8.7 High
- cyberdata 011209 sip emergency intercom, 011209 sip emergency intercom firmware +1 moreCyberData 011209 SIP Emergency Intercom Authentication Bypass Using an Alternate Path or Channel9.3 Critical
- tenda ac9, ac9 firmware +1 moreTenda AC9 cross-site request forgery5.3 Medium
- gnu psppGNU PSPP pspp-convert.c parse_variables_option free of memory not on the heap4.8 Medium
- gnu psppGNU PSPP pspp-convert.c parse_variables_option out-of-bounds write4.8 Medium
- vuejs vue-cli, vue cli +1 morevuejs vue-cli Markdown Code HtmlPwaPlugin.js HtmlPwaPlugin redos5.3 Medium
- tarotarojs taro index.js redos5.3 Medium
- psu haxcms-php, haxtheweb issues, psu haxcms-nodejs +2 moreHaxCMS-PHP Command Injection Vulnerability8.6 High
- pion interceptorPion Interceptor's improper RTP padding handling allows remote crash for SFU users (DoS)7.5 High
- caidoHijacking Caido instance during the initial setup via DNS Rebinding to achieve RCE7.5 High
- metabaseMetabase dom.js parseDataUri redos5.3 Medium
- libarchive, red hat cert-manager operator for red hat openshift 1.16, openshift compliance operator 1 +35 more +37 moreLibarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c7.8 High
- libarchive, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibarchive: reading past eof may be triggered for piped file streams3.9 Low
- libarchive, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibarchive: off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c2.8 Low
- libarchive, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibarchive: integer overflow while reading warc files at archive_read_support_format_warc.c3.9 Low
- libarchive, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c6.6 Medium
- rocket.chatRocketChat parseMessage.js parseMessage redos5.3 Medium
- psu haxcms-nodejs, haxtheweb issues, psu haxcms-php +2 more@haxtheweb/haxcms-nodejs Iframe Phishing vulnerability5.3 Medium
- keymetric pm2Unitech pm2 Config.js redos5.3 Medium
- actions toolkitactions toolkit glob internal-pattern.ts globEscape redos5.3 Medium
- juliangruber brace-expansionjuliangruber brace-expansion index.js expand redos2.3 Low
- Show moreLoading…