CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- fujitsu client computing limited updatenavi, updatenaviinstallservice +1 moreImproper restriction of communication channel to intended endpoints issue exists in UpdateNavi V1...6.9 Medium
- gnome libxml2, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreLibxml: null pointer dereference leads to denial of service (dos)7.5 High
- red hat cert-manager operator for red hat openshift 1.16, openshift file integrity operator - fio 1, discovery 2 +43 more +45 moreLibxml: type confusion leads to denial of service (dos)9.1 Critical
- red hat cert-manager operator for red hat openshift 1.16, openshift file integrity operator - fio 1, 3scale api management platform 2 +43 more +45 moreLibxml: heap use after free (uaf) leads to denial of service (dos)9.1 Critical
- amentotech workreapWorkreap <= 3.3.2 - Authenticated (Subscriber+) Arbitrary File Upload via 'workreap_temp_upload_to_media'8.8 High
- amentotech workreapWorkreap <= 3.3.1 - Authentication Bypass via 'workreap_verify_user_account'9.8 Critical
- kicode111 like-girlkiCode111 like-girl ipAddPost.php sql injection5.1 Medium
- kicode111 like-girlkiCode111 like-girl ImgAddPost.php sql injection5.1 Medium
- kicode111 like-girlkiCode111 like-girl CopyadminPost.php sql injection5.1 Medium
- kicode111 like-girlkiCode111 like-girl ImgUpdaPost.php sql injection5.1 Medium
- kicode111 like-girlkiCode111 like-girl aboutPost.php sql injection5.1 Medium
- etj archive::unzip::burstArchive::Unzip::Burst from 0.01 through 0.09 for Perl contains a bundled InfoZip library that is affected by several vulnerabilities9.8 Critical
cupsOSS-FuzzUse-of-uninitialized-value in ppd_hash_optionNo score- tenda ac6 firmwareBuffer Overflow vulnerability in Tenda AC6 v.15.03.05.16 allows a remote attacker to cause a...7.5 High
- yangyouwang crudyangyouwang crud v1.0.0 is vulnerable to Cross Site Scripting (XSS) via the role management...5.4 Medium
- vitaly-t pg-promisepg-promise SQL Injection vulnerability5.4 Medium
- insyde insydeh2oImproper input validation was discovered in UsbCoreDxe in Insyde InsydeH2O kernel 5.4 before 05...7.5 High
- uptrace pgdriveruptrace pgdriver SQL injection vulnerability6.5 Medium
- uptrace pggo-pg SQL injection vulnerability via the component /types/append_value.go6.5 Medium
- No product listedMultiple SQL injection vulnerabilities in the EuroInformation MoneticoPaiement module before 1.1...5.4 Medium
- starcitizen.tools citizen, starcitizentools mediawiki-skins-citizen +1 moreCitizen allows stored XSS in Command Palette tip messages6.5 Medium
- rsjoomla.com rsform!pro component for joomlaExtension - rsjoomla.com - Remote code execution vulnerability in RSForm!pro component 3.0.0 - 3.3.14 for Joomla9.2 Critical
- rsjoomla.com rsmediagallery component for joomlaExtension - rsjoomla.com - SQL injection vulnerability in RSMediaGallery! component 1.7.4 - 2.1.7 for Joomla6.7 Medium
- rsjoomla.com rstickets! component for joomlaExtension - rsjoomla.com - Stored XSS vulnerability in RSTickets! component 1.9.12 - 3.3.0 for Joomla8.5 High
- cursorCursor Agent Potentially Leaks Information using JSON schema5.9 Medium
- mik cryptxCryptX for Perl before version 0.065 contains a dependency that may be susceptible to malformed unicode9.8 Critical
- ibm cognos analyticsIBM Cognos Analytics information disclosure5.3 Medium
- ibm cognos analyticsIBM Cognos Analytics cross-site scripting5.5 Medium
- ibm cognos analyticsIBM Cognos Analytics denial of service7.5 High
- gryphon mojolicious::plugin::csrfMojolicious::Plugin::CSRF 1.03 for Perl uses a weak random number source for generating CSRF tokens7.0 High
- virtuemartVirtueMart - Unrestricted File Upload7.2 High
- virtuemartVirtueMart - Cross Site Request Forgery (CSRF)8.3 High
- motorola g34, g34t, g45 5g +2 moreAn incorrect default permissions vulnerability was reported in the MotoSignature application that...2.4 Low
- motorola edge 40 pro, edge+ 2023, razr 2023 +2 more +4 moreNull pointer exception vulnerabilities were reported in the fingerprint sensor service that could...2.4 Low
- johnson controls istar configuration utility (icu)The iSTAR Configuration Utility (ICU) tool leaks memory, which could result in the unintended...6.3 Medium
- thevindu-w clip share serverClipShare Server Allows Local Privilege Escalation via DLL Hijacking7.3 High
hurlcrates.ioRegex literal in Hurl files are not escaped when exported to HTML, allowing injectionsNo scoregithub.com/CosmWasm/wasmdGoCWA-2025-006: wasmd's improper error handling may lead to IBC channel opening despite errorNo score- pgjdbc, postgresql jdbc driver +1 morepgjdbc Client Allows Fallback to Insecure Authentication Despite channelBinding=require Configuration8.2 High
- ibm security guardium, guardium data protection +1 moreIBM Security Guardium privilege escalation6.7 Medium
- ibm security verify access, security verify access docker +1 moreIBM Security Verify Access information disclosure5.3 Medium
- atrodo net::dropbearNet::Dropbear versions through 0.16 for Perl contains a dependency that may be susceptible to an integer overflow6.5 Medium
- mik cryptxPerl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow9.8 Critical
- autodesk maya, universal scene description, usd for 3ds max +1 more +3 moreUSD File Parsing Memory Allocation Vulnerability6.6 Medium
- hashicorp nomad, nomad enterprise +1 moreNomad Vulnerable To Incorrect ACL Policy Lookup Attached To A Job8.1 High
- microsoft 365 copilotM365 Copilot Information Disclosure Vulnerability9.3 Critical
- myscada mypromySCADA PRO Manager Password Disclosure5.5 Medium
- stellarwp the events calendarThe Events Calendar <= 6.13.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting6.4 Medium
- mozilla thunderbirdUnsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links6.5 Medium
- mozilla firefoxInteger overflow in OrderedHashTable9.8 Critical
- Show moreLoading…