CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- totolink x15, x15 firmware +1 moreTOTOLINK X15 HTTP POST Request formMultiAP buffer overflow8.7 High
- totolink a3002r, a3002r firmware +1 moreTOTOLINK A3002R HTTP POST Request formSysLog buffer overflow8.7 High
- totolink a3002ru, a3002ru firmware +1 moreTOTOLINK A3002RU HTTP POST Request formSysLog buffer overflow8.7 High
- totolink a702r, a702r firmware +1 moreTOTOLINK A702R HTTP POST Request formSysLog buffer overflow8.7 High
- red hat enterprise linux 10, enterprise linux 7 extended lifecycle support, enterprise linux 8 +10 more +12 moreLibblockdev: lpe from allow_active to root in libblockdev via udisks7.0 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension7.8 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension7.3 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore5.5 Medium
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreXorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmode6.1 Medium
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension7.3 High
- x.org xwayland, red hat enterprise linux 10, enterprise linux 6 +18 more +20 moreXorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors6.1 Medium
- miliaris amygdalaA cross-site scripting (XSS) vulnerability in the data resource management function of Miliaris...6.1 Medium
- miliaris amygdalaA cross-site scripting (XSS) vulnerability in the e-mail manager function of Miliaris Amigdala v2...6.1 Medium
- miliaris amygdalaA cross-site scripting (XSS) vulnerability in the report manager function of Miliaris Amigdala v2...6.1 Medium
- asvd microlightWithdrawn Advisory: microlight allows a denial of service2.9 Low
- asvd microlightWithdrawn Advisory: microlight.js has a null pointer dereference vulnerability2.9 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +12 more +14 moreFreeipa: idm: privilege escalation from host to domain admin in freeipa9.1 Critical
- seacmsSQL Injection vulnerability in SeaCMS v.12.9 allows a remote attacker to obtain sensitive...6.5 Medium
- totolink x15, x15 firmware +1 moreTOTOLINK X15 HTTP POST Request formSysLog buffer overflow8.7 High
- totolink ex1200t, ex1200t firmware +1 moreTOTOLINK EX1200T HTTP POST Request formSysLog buffer overflow8.7 High
- totolink ex1200t, ex1200t firmware +1 moreTOTOLINK EX1200T HTTP POST Request formSysCmd buffer overflow8.7 High
- totolink ex1200t, ex1200t firmware +1 moreTOTOLINK EX1200T HTTP POST Request formNtp buffer overflow8.7 High
- intermesh group-office, groupoffice +1 moreGroup-Office vulnerable to blind XSS5.2 Medium
- intera inhireIntera InHire server-side request forgery5.3 Medium
- gnu ncurses, siemens ruggedcom rst2428p, scalance xc-300/xr-300/xc-400/xr-500wg/xr-500 family +14 more +16 moreGNU ncurses parse_entry.c postprocess_termcap stack-based overflow4.8 Medium
- apple ipados, macos, visionos +4 more +6 moreThis issue was addressed with improved checks. This issue is fixed in watchOS 11.3.1, macOS...4.2 Medium
- gabime spdlogspdlog pattern_formatter-inl.h scoped_padder resource consumption4.8 Medium
- totolink t10, t10 firmware +1 moreTOTOLINK T10 shadow.sample hard-coded password2.0 Low
- anaconda conda-buildConda-build vulnerable to supply chain attack vector due to pyproject.toml referring to dependencies not present in PyPI7.2 High
- totolink t10, t10 firmware +1 moreTOTOLINK T10 HTTP POST Request cstecgi.cgi setWizardCfg buffer overflow8.7 High
- anaconda conda-buildConda-build Vulnerable to Path Traversal via Malicious Tar File5.6 Medium
- anaconda conda-buildConda-build Allows Arbitrary Code Execution via Malicious Recipe Selectors8.2 High
- totolink t10, t10 firmware +1 moreTOTOLINK T10 HTTP POST Request cstecgi.cgi setWiFiScheduleCfg buffer overflow8.7 High
- projectworlds life insurance management systemProjectworlds Life Insurance Management System insertPayment.php sql injection5.3 Medium
- projectworlds life insurance management systemProjectworlds Life Insurance Management System insertNominee.php sql injection5.3 Medium
- anaconda conda-buildConda-build Insecure Build Script Permissions Enabling Arbitrary Code Execution6.0 Medium
- projectworlds life insurance management systemProjectworlds Life Insurance Management System insertClient.php sql injection5.3 Medium
- opennextjs @opennextjs/cloudflare, opennext for cloudflare +1 moreSSRF vulnerability in opennextjs-cloudflare via /cdn-cgi/ path normalization bypass7.7 High
- cloudflare create-cloudflare, opennextjs opennext for cloudflare +1 moreSSRF vulnerability in opennextjs-cloudflare via /_next/image endpoint7.8 High
- projectworlds life insurance management systemProjectworlds Life Insurance Management System insertagent.php sql injection5.3 Medium
- chanjet crmChanjet CRM departmentsetting.php sql injection6.9 Medium
- gravitational teleportTeleport allows remote authentication bypass9.8 Critical
- code-projects food ordering systemCodeAstro Food Ordering System POST Request Parameter edit cross site scripting4.8 Medium
- google chromeos, chrome os +1 moreChromeOS Extension Disablement and Developer Mode Bypass via ExtHang3r and ExtPrint3r Exploits9.8 Critical
- google chromeos, chrome os +1 moreChromeOS MiniOS Root Code Execution Bypass While Dev Mode Blocked7.4 High
- totolink ex1200t, ex1200t firmware +1 moreTOTOLINK EX1200T HTTP POST Request formStats buffer overflow8.7 High
- pure storage flasharrayFlashArray KEK Logging Vulnerability5.1 Medium
- aio-libs aiodnspycares has a Use-After-Free Vulnerability8.2 High
- beyondtrust privileged remote access, remote support & privileged remote access, remote support +1 more +3 moreRemote Support & Privileged Remote Access server side template injection8.6 High
- totolink ex1200t, ex1200t firmware +1 moreTOTOLINK EX1200T HTTP POST Request formSaveConfig buffer overflow8.7 High
- Show moreLoading…