CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- red hat builds for red hat openshift, custom metric autoscaler operator for red hat openshift, multicluster global hub +24 more +26 moreGithub.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results3.7 Low
- carmelogarcia restaurant order systemcode-projects Restaurant Order System order.php sql injection6.9 Medium
- code-projects school fees payment systemcode-projects School Fees Payment System branch.php sql injection6.9 Medium
- tenda fh1202, fh1202 firmware +1 moreTenda FH1202 VirtualSer fromVirtualSer stack-based overflow8.7 High
- gfi archiverHard-coded ArchiverSpaApi JWT Signing Key8.1 High
org.geoserver:gs-wfsMavenGeoServer vulnerable to SSRF in TestWfsPost for specific targets, e.g. PHP + Nginx7.5 Highorg.geonetwork-opensource:gn-web-appMaven,org.geonetwork-opensource:gn-wfsfeature-harvesterMaven +1 moreGeoNetwork affected by XML External Entity (XXE) processing vulnerability in WFS indexing REST API endpoint8.2 High- code-projects school fees payment systemcode-projects School Fees Payment System datatable.php sql injection6.9 Medium
- phpgurukul rail pass management systemPHPGurukul Rail Pass Management System add-pass.php cross site scripting5.1 Medium
- libtpms project libtpmsLibtpms contains a possible out-of-bound access and abort due to HMAC signing issue5.9 Medium
- phpgurukul rail pass management systemPHPGurukul Rail Pass Management System download-pass.php cross site scripting5.3 Medium
- phpgurukul restaurant table booking systemPHPGurukul Restaurant Table Booking System check-status.php cross site scripting5.1 Medium
- niklas portmann azure based remote cache plugin for nx, minio based remote cache plugin for nx, nx remote cache utilities +4 more +6 moreBuild Cache Poisoning via Untrusted Pull Requests9.4 Critical
- dt research biosflashshell, dtbios +1 moreAn arbitrary write vulnerability in Microsoft signed UEFI firmware from DT Research Inc.8.2 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAcrobat Reader | NULL Pointer Dereference (CWE-476)5.5 Medium
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAcrobat Reader | Information Exposure (CWE-200)5.5 Medium
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAcrobat Reader | Use After Free (CWE-416)7.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAcrobat Reader | Use After Free (CWE-416)7.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAcrobat Reader | Use After Free (CWE-416)7.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAcrobat Reader | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAcrobat Reader | Out-of-bounds Write (CWE-787)7.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAcrobat Reader | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAcrobat Reader | Use After Free (CWE-416)7.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAcrobat Reader | Use After Free (CWE-416)7.8 High
- adobe incopyInCopy | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe incopyInCopy | Integer Overflow or Wraparound (CWE-190)7.8 High
- phpgurukul restaurant table booking systemPHPGurukul Restaurant Table Booking System add-table.php cross site scripting4.8 Medium
- phpgurukul restaurant table booking systemPHPGurukul Restaurant Table Booking System manage-subadmins.php cross site scripting4.8 Medium
- code-projects school fees payment systemcode-projects School Fees Payment System ajx.php sql injection5.3 Medium
- dell wyse management suiteDell Wyse Management Suite, versions prior to WMS 5.2, contain a Cross-Site Request Forgery (CSRF...2.7 Low
- dell wyse management suiteDell Wyse Management Suite, versions prior to WMS 5.2, contain an Improper Neutralization of...6.1 Medium
- microdicom dicom viewerMicroDicom DICOM Viewer Out-of-bounds Write8.6 High
- pure storage flashbladeFlashBlade DOS Vulnerability8.3 High
- dell wyse management suiteDell Wyse Management Suite, versions prior to WMS 5.2, contain an Improper Neutralization of...6.1 Medium
- blackberry qnx software development platform, qnx software development platform (sdp) +1 moreVulnerability in PCX Image Codec Impacts QNX Software Development Platform9.8 Critical
- dell wyse management suiteDell Wyse Management Suite, versions prior to WMS 5.2, contain an Incorrect Authorization...6.8 Medium
- pure storage flasharrayFlashArray DOS Vulnerability8.7 High
- trusted computing group tpm2.0, siemens simatic cn 4100, simatic field pg m5 +22 more +24 moreOut-of-Bounds read vulnerability in TCG TPM2.0 reference implementation6.6 Medium
- dell wyse management suiteDell Wyse Management Suite, versions prior to WMS 5.2, contain an Absolute Path Traversal...8.2 High
- adobe substance3d - sampler, substance 3d sampler +1 moreSubstance3D - Sampler | Out-of-bounds Write (CWE-787)7.8 High
- Show moreLoading…