CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- acc dm corporative cmsSQL injection vulnerability in DM Corporative CMS9.3 Critical
- acc dm corporative cmsSQL injection vulnerability in DM Corporative CMS9.3 Critical
linux-cloud-tools-genericTuxCare,linux-cloud-tools-lowlatencyTuxCare,linux-crashdumpTuxCare +9 more +11 moreUpdate of linux-metaNo scorelinux-cloud-tools-genericTuxCare,linux-cloud-tools-lowlatencyTuxCare,linux-crashdumpTuxCare +9 more +11 moreUpdate of linux-metaNo score- upkeeper solutions instant privilege accessImproper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege...8.6 High
- schneider electric modicon controllers m241/m251, modicon controllers m262 +1 moreCWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...5.1 Medium
- upkeeper solutions instant privilege accessImproper Input Validation vulnerability in upKeeper Solutions upKeeper Instant Privilege Access...8.6 High
- schneider electric modicon controllers m241/m251, modicon controllers m258 / lmc058 +1 moreCWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an...7.1 High
- schneider electric modicon controllers m241/m251, modicon controllers m258 / lmc058 +1 moreCWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...5.1 Medium
- schneider electric modicon controllers m241/m251CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause Denial of...7.1 High
- schneider electric modicon controllers m241/m251CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...5.1 Medium
- schneider electric modicon controllers m241/m251, modicon controllers m262 +1 moreCWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an...7.1 High
- schneider electric evlink wallboxCWE-78: I Improper Neutralization of Special Elements used in an OS Command ('OS Command...7.0 High
- schneider electric evlink wallboxCWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’)...5.1 Medium
- schneider electric evlink wallboxCWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...6.9 Medium
- schneider electric evlink wallboxCWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...8.6 High
- apache kafka, apache software foundation kafka client +1 moreApache Kafka Client: Arbitrary file read and SSRF vulnerability7.5 High
- apache kafkaApache Kafka: Possible RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration7.5 High
- apache kafkaApache Kafka: Possible RCE attack via SASL JAAS LdapLoginModule configuration8.8 High
- avaya call management systemAvaya Call Management System RCE vulnerability9.9 Critical
- axlethemes axle demo importerAxle Demo Importer <= 1.0.3 - Author+ Arbitrary File Upload8.8 High
- erumfaham likes and dislikes, unknown inprosysmedia-likes-dislikes-post +1 moreLikes and Dislikes Plugin <= 1.0.0 - Unauthenticated SQL Injection7.5 High
- No product listedZend.To NSSDropoff.php exec os command injection6.9 Medium
- open5gsOpen5GS AMF/MME emm-sm.c common_register_state denial of service6.9 Medium
- https://elementor.com/ elementor website builder pro, elementor page builder +1 moreElementor Pro <= 3.29.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- inspirythemes rh - real estate wordpress themeRH - Real Estate WordPress Theme <= 4.4.0 - Authenticated (Subscriber+) Privilege Escalation8.8 High
- steph bunny’s print cssBunny’s Print CSS <= 0.95 - Cross-Site Request Forgery to Settings Update4.3 Medium
- tyche softwares abandoned cart pro for woocommerceAbandoned Cart Pro for WooCommerce <= 9.16.0 - Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- netgear ex3700, ex3700 firmware +1 moreNetgear EX3700 mtd sub_41619C stack-based overflow8.7 High
- anujk305 vehicle record management systemPHPGurukul Vehicle Record Management System search-vehicle.php sql injection6.9 Medium
- d-link dir-632, dlink dir-632 firmware +1 moreD-Link DIR-632 HTTP POST Request do_file stack-based overflow8.7 High
- totolink ex1200t, ex1200t firmware +1 moreTOTOLINK EX1200T HTTP POST Request formDMZ buffer overflow8.7 High
- totolink ex1200t, ex1200t firmware +1 moreTOTOLINK EX1200T HTTP POST Request formWsc buffer overflow8.7 High
- totolink ex1200t, ex1200t firmware +1 moreTOTOLINK EX1200T HTTP POST Request formReflashClientTbl buffer overflow8.7 High
- totolink ex1200t, ex1200t firmware +1 moreTOTOLINK EX1200T HTTP POST Request formIpQoS buffer overflow8.7 High
- totolink ex1200t, ex1200t firmware +1 moreTOTOLINK EX1200T HTTP POST Request formFilter buffer overflow8.7 High
- code-projects laundry systemcode-projects Laundry System data missing authentication6.9 Medium
ndpiOSS-FuzzHeap-buffer-overflow in check_content_type_and_change_protocolNo score- sap se business one integration frameworkSecurity misconfiguration vulnerability in SAP Business One Integration Framework5.3 Medium
- sap se mdm serverMultiple vulnerabilities in SAP MDM Server5.6 Medium
- sap se mdm serverMultiple vulnerabilities in SAP MDM Server7.5 High
- sap se mdm serverMultiple vulnerabilities in SAP MDM Server7.5 High
- sap se s/4hana (enterprise event enablement)Missing Authorization Check in SAP S/4HANA (Enterprise Event Enablement)6.7 Medium
- sap se s/4hana (bank account application)Missing Authorization check in SAP S/4HANA (Bank Account Application)4.3 Medium
- sap se sapui5 applicationsHTML Injection in Unprotected SAPUI5 applications3.0 Low
- sap se netweaver application server for abapMissing Authorization check in SAP NetWeaver Application Server for ABAP9.6 Critical
- sap se business objects business intelligence platform, sap businessobjects business intelligence platform +1 moreServer-Side Request Forgery in SAP Business Objects Business Intelligence Platform3.7 Low
- sap se s/4hana (manage processing rules - for bank statement)Missing Authorization Check in SAP S/4HANA (Manage Processing Rules - For Bank Statement)4.3 Medium
- sap se s/4hana (manage central purchase contract application)Missing Authorization check in SAP S/4HANA (Manage Central Purchase Contract application)5.4 Medium
- sap se business warehouse and sap plug-in basisMissing Authorization check in SAP Business Warehouse and SAP Plug-In Basis8.5 High
- Show moreLoading…