CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- totolink ex1200t, ex1200t firmware +1 moreTOTOLINK EX1200T HTTP POST Request formWirelessTbl buffer overflow8.7 High
- xmlsoft libxml2, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +34 more +36 moreLibxml2: stack buffer overflow in xmllint interactive shell command handling2.5 Low
- apache commons fileuploadApache Commons FileUpload, Apache Commons FileUpload: FileUpload DoS via part headers7.5 High
- phpgurukul nipah virus testing management systemPHPGurukul Nipah Virus Testing Management System search-report.php cross site scripting5.1 Medium
- weblateWeblate exposes personal IP address via e-mail2.1 Low
- weblateWeblate lacks rate limiting when verifying second factor4.9 Medium
- google protobuf-python, protocolbuffers python-protobuf +1 moreUnbounded recursion in Python Protobuf8.2 High
- phpgurukul rail pass management systemPHPGurukul Rail Pass Management System contact.php cross site scripting5.3 Medium
- apache tomcatApache Tomcat: exe side-loading via icalcs.exe in Tomcat installer for Windows8.4 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal SessionClicks does not restrict the saving of request parameters in the HTTP session8.7 High
- apache tomcatApache Tomcat: Security constraint bypass for pre/post-resources7.5 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal path traversal vulnerability with the downloading and installation of Xuggler8.6 High
- apache tomcatApache Tomcat: FileUpload large number of parts with headers DoS7.5 High
- phpgurukul rail pass management systemPHPGurukul Rail Pass Management System aboutus.php cross site scripting4.8 Medium
- tenable agent, nessus agent +1 moreLocal Privilege Escalation7.8 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal does not limit the depth of a GraphQL queries8.7 High
- carmelogarcia restaurant order systemcode-projects Restaurant Order System tablelow.php sql injection6.9 Medium
- carmelogarcia restaurant order systemcode-projects Restaurant Order System payment.php sql injection6.9 Medium
python-djangoUbuntupython-django vulnerabilityNo score- code-projects restaurant order systemcode-projects Restaurant Order System table.php sql injection5.3 Medium
- d-link dir-632, dlink dir-632 firmware +1 moreD-Link DIR-632 HTTP POST Request get_pure_content stack-based overflow9.3 Critical
slice-dequecrates.io,slice-ring-buffercrates.io +1 moreSlice Ring Buffer and Slice Deque contains four unique double-free vulnerabilities triggered through safe APIs8.1 High- canonical authdImproper Permission Management in SSH Session Handling8.5 High
cifs-utilsUbuntucifs-utils regressionNo score- assimpOpen Asset Import Library Assimp HL1MDLLoader.cpp read_meshes heap-based overflow4.8 Medium
- otrs ag ((otrs)) community edition, otrs +1 moreUnsafe handling of AJAX calls3.8 Low
- imagination technologies graphics ddk, imaginationtech ddk +1 morePossible kernel exceptions caused by reading and writing kernel heap data after free.5.7 Medium
- gryphon mojolicious::plugin::captchapngMojolicious::Plugin::CaptchaPNG version 1.05 for Perl uses a weak random number source for generating the captcha text9.1 Critical
- erlang otpAbsolute path traversal in zip:unzip/1,24.8 Medium
- apache nuttx, apache software foundation nuttx rtos +1 moreApache NuttX RTOS: examples/xmlrpc: Fix calls buffers size.9.8 Critical
- assimpOpen Asset Import Library Assimp BVHLoader.cpp ReadNodeChannels use after free4.8 Medium
- apache nuttx, apache software foundation nuttx rtos: tools/bdf-converter. +1 moreApache NuttX RTOS: tools/bdf-converter.: tools/bdf-converter: Fix loop termination condition.9.8 Critical
- das parking management system 停车场管理系统, parking management system +1 moreDas Parking Management System 停车场管理系统 API search sql injection6.9 Medium
- das parking management system 停车场管理系统, parking management system +1 moreDas Parking Management System 停车场管理系统 API Search sql injection6.9 Medium
- wago cc100 0751-9x01, edge controller 0752-8303/8000-0002, pfc100 g1 0750-810x/xxxx-xxxx +9 more +11 moreUnauthenticated File Read via Web Interface4.9 Medium
- wago cc100 0751-9x01, edge controller 0752-8303/8000-0002, pfc100 g1 0750-810x/xxxx-xxxx +9 more +11 moreOverly Permissive CORS Policy in WAGO Device Manager6.5 Medium
- das parking management system 停车场管理系统, parking management system +1 moreDas Parking Management System 停车场管理系统 API Search sql injection6.9 Medium
- asus armoury crateA race condition vulnerability exists in Armoury Crate. This vulnerability arises from a Time-of...8.4 High
- d-link dir-619l, dlink dir-619l firmware +1 moreD-Link DIR-619L form_macfilter stack-based overflow8.7 High
- tecno com.afmobi.boomplayerPermission vulnerability in the mobile application (com.afmobi.boomplayer) may lead to the risk...9.8 Critical
- d-link dir-619l, dlink dir-619l firmware +1 moreD-Link DIR-619L form_portforwarding stack-based overflow8.7 High
- customer support system support system, oretnom23 customer support system +1 moreReflected Cross-Site Scripting (XSS) vulnerability in Customer Support System4.8 Medium
- customer support system support system, oretnom23 customer support system +1 moreSQL injection vulnerability in Customer Support System8.7 High
- m-files mobileOpen redirection in M-Files Mobile4.8 Medium
- nostoCross-Site Scripting (XSS) reflected in Nosto5.1 Medium
- phoenix bv cmsReflected Cross-Site Scripting (XSS) in Phoenix CMS5.1 Medium
- tenda fh1203, fh1203 firmware +1 moreTenda FH1203 AdvSetLanip fromadvsetlanip buffer overflow8.7 High
- tenda fh1205, fh1205 firmware +1 moreTenda FH1205 AdvSetLanip fromadvsetlanip buffer overflow8.7 High
- dassault systèmes project portfolio managerStored Cross-site Scripting (XSS) vulnerability affecting Opportunity Management in Project Portfolio Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x8.7 High
- tenda fh1205, fh1205 firmware +1 moreTenda FH1205 VirtualSer fromVirtualSer stack-based overflow8.7 High
- Show moreLoading…