CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- aveva pi connector for cygnetAVEVA PI Connector for CygNet Cross-site Scripting6.9 Medium
- amazon cloud camInsecure device pairing in end of life Amazon Cloud Cam7.7 High
- starcitizen.tools citizen, starcitizentools mediawiki-skins-citizen +1 moreCitizen allows stored XSS in search no result messages6.5 Medium
- starcitizen.tools citizen, starcitizentools mediawiki-skins-citizen +1 moreCitizen allows stored XSS in user registration date message6.5 Medium
- starcitizen.tools citizen, starcitizentools mediawiki-skins-citizen +1 moreCitizen allows stored XSS in menu heading message6.5 Medium
- starcitizen.tools citizen, starcitizentools mediawiki-skins-citizen +1 moreCitizen allows stored XSS in preference menu headings6.5 Medium
- vantage6Vantage6 Server JWT secret not cryptographically secure1.7 Low
- vantage6vantage6 lacks brute-force protection on change password functionality1.7 Low
- absolute secure accessInput validation vulnerability in the Secure Access prior to version 13.556.9 Medium
- absolute secure accessMemory management vulnerability in Absolute Secure Access server versions 9.0 to 13.548.7 High
- gitlabInsufficient Granularity of Access Control in GitLab3.7 Low
- revenera installshieldA potential elevated privilege issue has been reported with InstallShield built Standalone MSI...7.3 High
gitTuxCare,emacs-gitTuxCare,emacs-git-elTuxCare +19 more +21 moregit: Fix of CVE-2025-52005No score- jevents.net / gwe systems ltd jevents component for joomlaJoomla Extension - jevents.net - SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla9.3 Critical
- dell smart dock, pro smart dock sd25 firmware, pro thunderbolt 4 smart dock sd25tb4 firmware +2 moreDell Smart Dock Firmware, versions prior to 01.00.08.01, contain an Insertion of Sensitive...7.1 High
- xwiki, xwiki xwiki-platform +1 moreXWiki allows SQL injection in query endpoint of REST API with Oracle9.3 Critical
helmSUSESecurity update for helmNo score- sick field analyticsUnencrypted backup contains sensitive information6.5 Medium
- sick field analyticsBackup files can be modified and uploaded8.8 High
- sick media serverPoor quality of randomness in authorization tokens3.1 Low
- sick media serverDeprecated TLS version supported6.5 Medium
- sick field analyticsDeprecated TLS version supported6.5 Medium
- sick media serverNo protection against brute-force attacks5.3 Medium
- sick media serverUnencrypted communication7.5 High
- plex media server, sick baggage analytics, field analytics +3 more +5 moreMissing HTTP Security Headers4.2 Medium
- sick field analytics, media server +1 moreClickjacking4.3 Medium
- sick field analyticsDashboards and iFrames can link malicious web content4.8 Medium
- sick field analyticsServer-Side Request Forgery4.3 Medium
- sick media serverCookie missing HttpOnly flag5.3 Medium
- gitlabTime-of-check Time-of-use (TOCTOU) Race Condition in GitLab5.3 Medium
- sick field analyticsSensitive Data in URL5.3 Medium
- sick field analyticsUser enumeration5.3 Medium
- avaya media server, sick baggage analytics, field analytics +3 more +5 moreNo brute-force protection5.3 Medium
- sick field analyticsStored Cross-Site-Script5.5 Medium
- sick baggage analytics, enterprise analytics, field analytics +3 more +5 moreInformation disclosure to unauthorized user7.5 High
- sick media serverUnencrypted communication (HTTP)7.5 High
- sick media serverCredential disclosure7.5 High
- sick media serverConfigurations endpoint does not require authorization8.6 High
- xmlsoft libxml2, red hat discovery 2, enterprise linux 10 +46 more +48 moreLibxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml27.5 High
- gitlabLoop with Unreachable Exit Condition ('Infinite Loop') in GitLab7.5 High
- gitlabAuthorization Bypass Through User-Controlled Key in GitLab4.3 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab8.7 High
- gitlabImproper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLab8.7 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- google web designer app, web designer +1 moreClient side RCE in Google Web Designer App7.1 High
- cyberlord92 wordpress single sign-on (sso) - multisite all-inclusive, wordpress single sign-on (sso) - multisite enterprise, wordpress single sign-on (sso) - multisite premium +4 more +6 moreWordPress Single Sign-On (SSO) - Multiple Versions - Incorrect Authorization to Sensitive Information Exposure5.3 Medium
- siemens mendix studio pro 10, mendix studio pro 11, mendix studio pro 11.12 +2 more +4 moreA vulnerability has been identified in Mendix Studio Pro 10 (All versions < V10.23.0), Mendix...4.6 Medium
- onlyoffice docs (documentserver)Reflected Cross-Site Scripting in ONLYOFFICE Docs (DocumentServer)6.1 Medium
- Show moreLoading…