CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- mozilla vpn 2.28.0, vpn +1 moreLocal privilege escalation vulnerability in Mozilla VPN clients for macOS v2.27.0 and below.7.8 High
- mozilla firefoxMemory corruption in canvas surfaces9.8 Critical
- xagio seo – ai powered seoXagio SEO <= 7.1.0.16 - Unauthenticated Stored Cross-Site Scripting via 'HTTP_REFERER'7.2 High
- mattermost, mattermost server +1 moreMattermost Guest User Information Disclosure Vulnerability3.1 Low
- mattermost, mattermost server +1 moreLDAP Injection in Mattermost Enterprise Edition When Using Active Directory4.1 Medium
- cubewp, cubewp1211 cubewp framework +1 moreCubeWP – All-in-One Dynamic Content Framework <= 1.1.23 - Authenticated (Subscriber+) Privilege Escalation8.8 High
- simcom sim7600g modemUndocumented Root Shell Access in SIMCom SIM7600G Modem6.8 Medium
- weidmueller ie-sr-2tx-wl, ie-sr-2tx-wl-4g-eu, ie-sr-2tx-wl-4g-us-v +2 moreWeidmueller: Security routers IE-SR-2TX are affected by Command Injection9.8 Critical
- weidmueller ie-sr-2tx-wl, ie-sr-2tx-wl-4g-eu, ie-sr-2tx-wl-4g-us-v +2 moreWeidmueller: Security routers IE-SR-2TX are affected by CSRF8.8 High
- sungrow isolarcloudMQTT implementation in Sungrow iSolarCloud allowed users to subscribe to all data of all connected inverters8.3 High
- qtUse after free in QHttp2ProtocolHandler2.1 Low
- innomotics perfect harmony gh180A vulnerability has been identified in Perfect Harmony GH180 (All versions >= V8.0 < V8.3.3 with...5.2 Medium
- valvepress wordpress automatic pluginWordPress Automatic Plugin - AI content generator and auto poster plugin <= 3.115.0 - Authenticated (Author+) Arbitrary File Upload8.8 High
- gamerz wp-downloadmanagerWP-DownloadManager <= 1.68.10 - Authenticated (Administrator+) Arbitrary File Deletion7.2 High
- gamerz wp-downloadmanagerWP-DownloadManager <= 1.68.10 - Authenticated (Administrator+) Arbitrary File Read4.9 Medium
- kseaborn zotpressZotPress <= 7.3.15 - Authenticated (Author+) Stored Cross-Site Scripting via 'nickname'6.4 Medium
- ossec ossec-hids agentRemote code execution and local privilege escalation due to UNC access and NetNTLMv2 hash theft9.5 Critical
- wazuh, wazuh agent +1 moreRemote code execution and local privilege escalation in Wazuh Windows agent via NetNTLMv2 hash theft9.5 Critical
- insyde software insydeh2oSecureFlashDxe: Incorrect UEFI variable attributes check allows usage of invalid certificate7.8 High
cupsOSS-FuzzUse-of-uninitialized-value in _cups_strcasecmpNo scorecurlDebiancurl - regression updateNo score- google chromeType Confusion in V8 in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to...8.8 High
- google chromeUse after free in Media in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to...8.8 High
- kde konsoleKDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports...8.2 High
- archifymacOS Archify: Local Privilege Escalation7.8 High
- k7 security anti-malwareK7 Security Anti-Malware: IOCTL in K7RKScan.sys Allows Arbitrary Termination of High-Privilege and System Processes by a Low-Privilege User5.6 Medium
- rocket.chat desktopmacOS Rocket.Chat: TCC Policy Bypass via Dylib Injection Due to Missing Code Signing Flags and Dangerous Entitlements5.5 Medium
- stashmacOS Stash network-management utility: Unauthorized Manipulation of System Network Preferences7.8 High
- microsoft 365 apps, 365 apps for enterprise +1 moreMicrosoft Word Remote Code Execution Vulnerability8.4 High
- apache cloudstackApache CloudStack: Unauthorised template/ISO list access to the domain/resource admins4.7 Medium
- apache cloudstackApache CloudStack: Unauthorised access to dedicated resources in Quota plugin2.3 Low
- apache cloudstackApache CloudStack: CKS cluster in project exposes user API keys8.1 High
- apache cloudstackApache CloudStack: Insecure access of user's API/Secret Keys in the same domain8.8 High
- apache cloudstackApache CloudStack: Domain Admin can reset Admin password in Root Domain8.8 High
- code-projects school fees payment systemcode-projects School Fees Payment System improper authentication6.9 Medium
- senior-walter online student clearance systemSourceCodester Online Student Clearance System add-fee.php cross site scripting5.1 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)5.4 Medium
- Show moreLoading…