CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
java-1.8.0-openjdkTuxCare,java-1.8.0-openjdk-demoTuxCare,java-1.8.0-openjdk-demo-fastdebugTuxCare +14 more +16 moreUpdate of java-1.8.0-openjdkNo score- nautobotNautobot may allows uploaded media files to be accessible without authentication6.3 Medium
- nautobotNautobot vulnerable to secrets exposure and data manipulation through Jinja2 templating6.0 Medium
- matrix-org matrix-rust-sdkmatrix-sdk-crypto vulnerable to sender of encrypted events being spoofed by homeserver administrator4.9 Medium
- octoprintOctoPrint Vulnerable to Denial of Service through malformed HTTP request6.5 Medium
- octoprintOctoPrint vulnerable to possible file extraction via upload endpoints5.4 Medium
- siemens ruggedcom rox mx5000, ruggedcom rox mx5000re, ruggedcom rox rx1400 +8 more +10 moreA vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM...8.3 High
- siemens energy servicesA vulnerability has been identified in Energy Services (All versions with G5DFR). Affected...9.5 Critical
- siemens ruggedcom rst2428p, scalance xch328, scalance xcm324 +12 more +14 moreA vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2),...5.9 Medium
- siemens ruggedcom rst2428p, scalance xch328, scalance xcm324 +12 more +14 moreA vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2),...5.3 Medium
- siemens ruggedcom rst2428p, scalance xch328, scalance xcm324 +12 more +14 moreA vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2),...7.1 High
- siemens ruggedcom rst2428p, scalance xc316-8, scalance xc324-4 +26 more +28 moreA vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.1),...5.3 Medium
- geoserver, geotools, osgeo geonetwork +2 moreGeoTools, GeoServer, and GeoNetwork XML External Entity (XXE) Processing Vulnerability in XSD schema handling9.9 Critical
- hewlett packard enterprise (hpe) hpe aruba networking private 5g coreExposure of Sensitive Information to an Unauthorized User in HPE Aruba Networking Private 5G Core7.7 High
- geoserverGeoServer has an Infinite Loop Vulnerability in Jiffle process7.5 High
- geoserverGeoServer Missing Authorization on REST API Index5.3 Medium
- autodesk installerPrivilege Ecalation due to Untrusted Search Path Vulnerability7.8 High
- solarwinds observability self-hostedSolarWinds SWOSH DOM-based reflective XSS Vulnerability7.1 High
- solarwinds observability self-hostedSolarWinds SWOSH Open Redirection Vulnerability4.8 Medium
- ivanti workspace controlA hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local...8.8 High
- ivanti workspace controlA hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local...7.3 High
- ivanti workspace controlA hardcoded key in Ivanti Workspace Control before version 10.19.0.0 allows a local authenticated...8.8 High
- geoserverGeoServer Coverage REST API Allows Server Side Request Forgery5.5 Medium
- geoserverGWC Home Page communicate version and revision information5.3 Medium
- geoserverGeoServer has improper ENTITY_RESOLUTION_ALLOWLIST URI validation in XML Processing (SSRF)9.3 Critical
- geoserverGeoServer Vulnerable to Unauthenticated SSRF via TestWfsPost7.5 High
- loftocean tinysaltWordPress TinySalt theme < 3.10.0 - Local File Inclusion vulnerability8.1 High
- clickandpledge wordpress-wpjobboardWordPress WordPress-WPJobBoard <= 25.07010000-WP6.8.1-JB5.11.5 - SQL Injection Vulnerability9.3 Critical
- loftocean cozystayWordPress CozyStay theme < 1.7.1 - PHP Object Injection vulnerability9.8 Critical
- roland beaussant audio editor & recorderWordPress Audio Editor & Recorder plugin <= 2.2.1 - Broken Access Control vulnerability5.3 Medium
- wpfactory min max step quantity limits manager for woocommerceWordPress Min Max Step Quantity Limits Manager for WooCommerce plugin <= 5.1.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- uxper civi frameworkWordPress Civi Framework plugin <= 2.1.6 - Cross Site Request Forgery (CSRF) to User Deactivation vulnerability7.1 High
- salesforce omnistudioImproper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows...5.3 Medium
- salesforce omnistudioImproper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows...9.1 Critical
- salesforce omnistudioImproper Preservation of Permissions vulnerability in Salesforce OmniStudio (DataMapper) allows...7.5 High
- smub smash balloon social post feed – simple social feeds for wordpress, wpbeginner smash balloon social post feed +1 moreSmash Balloon Custom Facebook Feed <= 4.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-color` Attribute6.4 Medium
- dotcamp ultimate blocks, ultimateblocks ultimate blocks – 25+ gutenberg blocks for block editor +1 moreUltimate Blocks – WordPress Blocks Plugin <= 3.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets6.4 Medium
- leap13 premium addons for elementor, premium addons for elementor – powerful elementor templates & widgets +1 morePremium Addons for Elementor <= 4.11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget6.4 Medium
- salesforce omnistudioImproper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows...7.5 High
- salesforce omnistudioImproper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows...7.5 High
- auma ac1.2, profox +1 moreAUMA: Incorrect delivery status of the Bluetooth configuration4.3 Medium
- hashgraph guardian, nozomi networks cmc +1 morePrivilege escalation in Guardian/CMC before 24.6.07.3 High
- hashgraph guardian, nozomi networks cmc +1 moreAuthenticated RCE in update functionality in Guardian/CMC before 24.6.07.5 High
- acc dm corporative cmsAbsolute path disclosure vulnerability in DM Corporative CMS6.9 Medium
- acc dm corporative cmsInsecure Direct Object Reference (IDOR) vulnerability in DM Corporative CMS6.9 Medium
- acc dm corporative cmsInsecure Direct Object Reference (IDOR) vulnerability in DM Corporative CMS6.9 Medium
- acc dm corporative cmsInsecure Direct Object Reference (IDOR) vulnerability in DM Corporative CMS6.9 Medium
- acc dm corporative cmsInsecure Direct Object Reference (IDOR) vulnerability in DM Corporative CMS6.9 Medium
- acc dm corporative cmsSQL injection vulnerability in DM Corporative CMS9.3 Critical
- acc dm corporative cmsSQL injection vulnerability in DM Corporative CMS9.3 Critical
- Show moreLoading…