CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- ninjateam file manager pro – filesterFile Manager Pro – Filester <= 1.8.8 - Authenticated (Administrator+) Arbitrary File Upload7.2 High
- seraphinitesoft seraphinite acceleratorSeraphinite Accelerator <= 2.27.21 - Cross-Site Request Forgery to Multiple Administrative Actions4.3 Medium
- ibm backup recovery and media services for i, i +1 moreIBM Backup Recovery and Media Services for i code execution8.5 High
xmlsecOSS-FuzzHeap-buffer-overflow in xmlParsePubidLiteralNo scorelibxml2OSS-FuzzHeap-buffer-overflow in xmlParsePubidLiteralNo score- dell controlvault3, controlvault3 plus, broadcom bcm5820x +2 moreDell ControlVault3/ControlVault3 Plus deserialization of untrusted input vulnerability8.1 High
- dell controlvault3, controlvault3 plus, broadcom bcm5820x +2 moreDell ControlVault3/ControlVault3 Plus cv_close arbitrary free vulnerability8.8 High
- extreme networks extremecloud universal ztnaExtremeCloud Universal ZTNA Improper Authorization5.2 Medium
- dell controlvault3, controlvault3 plus, broadcom bcm5820x +2 moreDell ControlVault3/ControlVault3 Plus cv_upgrade_sensor_firmware out-of-bounds write vulnerability8.8 High
- dell controlvault3, controlvault3 plus, broadcom bcm5820x +2 moreDell ControlVault3/ControlVault3 Plus securebio_identify stack-based buffer overflow vulnerability8.8 High
- dell controlvault3, controlvault3 plus, broadcom bcm5820x +2 moreDell ControlVault3/ControlVault3 Plus cv_send_blockdata out-of-bounds read vulnerability8.4 High
- conda-forge conda-forge-ci-setup-feedstockconda-forge-ci-setup Allows Arbitrary Code Execution via Insecure Version Parsing4.4 Medium
- mcpjam inspectorMCP Inspector proxy server lacks authentication between the Inspector client and proxy9.4 Critical
- handcraftedinthealps goodby-csvhandcraftedinthealps goodby-csv Potential Gadget Chain allowing Remote Code Execution3.9 Low
- xwiki, xwiki xwiki-platform +1 moreXWiki does not require right warnings for notification displayer objects6.4 Medium
- xwiki, xwiki xwiki-platform +1 moreXWiki allows remote code execution through preview of XClass changes in AWM editor8.7 High
- xwiki, xwiki xwiki-platform +1 moreXWiki does not require right warnings for XClass definitions8.6 High
- xwiki, xwiki xwiki-platform +1 moreXWiki makes title of inaccessible pages available through the class property values REST API8.7 High
- xwiki, xwiki xwiki-platform +1 moreXWiki provides no warning when granting XWiki.Notifications.Code.NotificationEmailRendererClass admin right5.1 Medium
- xwiki, xwiki xwiki-platform +1 moreXWiki's required right warnings for macros are incomplete8.6 High
- xwiki, xwiki xwiki-platform +1 moreXWiki allows remote code execution through default value of wiki macro wiki-type parameters8.7 High
- xwiki, xwiki xwiki-platform +1 moreXWiki allows privilege escalation through link refactoring8.5 High
- gnome glib, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreGlib: integer overflow in g_string_maybe_expand() leading to potential buffer overflow in glib gstring3.7 Low
- gimp, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp integer overflow6.1 Medium
ibexa/fieldtype-richtextPackagistIbexa RichText Field Type XSS vulnerabilities in back office6.1 Mediumibexa/admin-uiPackagistIbexa Admin UI XSS vulnerabilities in back office6.1 Mediumibexa/admin-ui-assetsPackagistIbexa Admin UI assets XSS vulnerabilities in back office6.1 Mediumezsystems/ezplatform-admin-ui-assetsPackagistIbexa eZ Platform Admin UI assets XSS vulnerabilities in back office6.1 Mediumezsystems/ezplatform-admin-uiPackagistIbexa eZ Platform Admin UI XSS vulnerabilities in back office6.1 Medium- autoeastern cyclone matrix trfAutoeastern Smart Keyless Entry System Replay Attack9.4 Critical
- tenable agent, nessus agent +1 moreLocal Privilege Escalation8.4 High
- kia aftermarket generic smart keyless entry systemKIA-branded Aftermarket Generic Smart Keyless Entry System Replay Attack9.4 Critical
- tenable agent, nessus agent +1 moreLocal Privilege Escalation8.8 High
- nobossextensions.com no boss calendar component for joomlaJoomla Extension - nobossextensions.com - SQL injection vulnerability in No Boss Calendar component before 5.0.7 for Joomla8.6 High
- rts vlink virtual matrix software, telex remote dispatch console server +1 moreRemote code execution that allows unauthorized users to execute arbitrary code on the server...10.0 Critical
- ricoh company, ltd. streamline nx v3 pc clientRICOH Streamline NX V3 PC Client versions 3.5.0 to 3.7.0 contains an issue with use of less...2.0 Low
- ricoh company, ltd. streamline nx v3 pc clientPath traversal vulnerability exists in RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.242.0...9.3 Critical
- ricoh company, ltd. streamline nx v3 pc clientExternal control of file name or path issue exists in RICOH Streamline NX V3 PC Client versions 3...6.9 Medium
- kaisercrazy auto attachmentsAuto Attachments <= 1.8.5 - Authenticated (Administrator+) Stored Cross-Site Scripting5.5 Medium
- hikvision ds-3wap521-si, ds-3wap522-si, ds-3wap621e-si +3 more +5 moreSome Hikvision Wireless Access Point are vulnerable to authenticated remote command execution due...7.2 High
- salt project saltCVE-2024-38824 salt advisory9.6 Critical
- salt project saltCVE-2025-22242 salt advisory5.6 Medium
- salt project saltCVE-2025-22241 salt advisory5.6 Medium
- salt project saltCVE-2025-22240 salt advisory6.3 Medium
- salt project saltCVE-2025-22239 salt advisory8.1 High
- salt project saltCVE-2025-22238 salt advisory4.2 Medium
- salt project saltCVE-2025-22237 salt advisory6.7 Medium
- salt project saltCVE-2025-22236 salt advisory8.1 High
- salt project saltCVE-2024-38825 Salt Advisory6.4 Medium
- salt project saltCVE-2024-38823 Salt Advisory2.7 Low
- Show moreLoading…