CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- brilliance golden link secondary systemBrilliance Golden Link Secondary System custTakeInfoPage.htm sql injection5.3 Medium
- brilliance golden link secondary systemBrilliance Golden Link Secondary System rentTakeInfoPage.htm sql injection5.3 Medium
- convoypanel panelPterodactyl Panel Allows Unauthenticated Arbitrary Remote Code Execution10.0 Critical
- webassembly wabtWebAssembly wabt binary-reader-interp.cc GetFuncOffset use after free4.8 Medium
- webassembly wabtWebAssembly wabt binary-reader-interp.cc OnDataCount resource consumption4.8 Medium
- webassembly wabtWebAssembly wabt binary-reader-objdump.cc LogOpcode assertion4.8 Medium
- wasm3 project wasm3wasm3 m3_compile.c MarkSlotAllocated out-of-bounds write4.8 Medium
- swftoolsswftools wav2swf wav.c wav_convert2mono out-of-bounds4.8 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM command execution9.1 Critical
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM XML external entity injection7.1 High
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM information disclosure6.2 Medium
- hdfgroup hdf5HDF5 H5FSsection.c H5FS__sect_find_node heap-based overflow4.8 Medium
- powsybl powsybl-corePowSyBl Core Contains a Polynomial ReDoS in RegexCriterion2.7 Low
- powsybl powsybl-corePowSyBl Core contains Polynomial REDoS’es6.3 Medium
- powsybl powsybl-corePowSyBl Core allows deserialization of untrusted SparseMatrix data8.1 High
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ Node can log Basic Auth header from an HTTP request6.7 Medium
- hdfgroup hdf5HDF5 H5Cimage.c H5C__reconstruct_cache_entry heap-based overflow4.8 Medium
- meshtastic firmwareMeshtastic Repeated Public and Private Keypairs9.5 Critical
- jqlang jqjq heap use after free vulnerability in f_strflocaltime5.5 Medium
- luna imagingLuna Imaging search cross site scripting5.3 Medium
DotVVMNuGetDotVVM allows path traversal when deployed in Debug mode7.5 High- powsybl powsybl-corePowSyBl Core XML Reader allows XXE and SSRF2.7 Low
- cardano-scaling hydrahydra-node dangerously assumes L1 event finality and does not consider failed transactions4.8 Medium
- zhilink adp application developer platform, zhilink 智互联(深圳)科技有限公司 adp application developer platform 应用开发者平台 +1 morezhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 barcodeDetail sql injection5.3 Medium
- checkpoint check point smartconsole, smartconsole +1 moreDLL-HiJacking6.5 Medium
- yirmibes software my erpAuthenticated SQLi in Yirmibes Software's MY ERP9.8 Critical
- teledyne flir ax8, flir ax8 firmware +1 moreTeledyne FLIR AX8 upload.php unrestricted upload5.3 Medium
- apache seatunnelApache SeaTunnel: Unauthenticated insecure access6.5 Medium
- apache traffic serverApache Traffic Server: Client IP address from PROXY protocol is not used for ACL7.5 High
- apache traffic serverApache Traffic Server: Remote DoS via memory exhaustion in ESI Plugin7.5 High
- jegstudio gutenverse news, gutenverse news – advanced news magazine blog gutenberg blocks addons +1 moreGutenverse News <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via elementId Parameter6.4 Medium
- jordy meow ai engineAI Engine 2.8.0 - 2.8.3 - Authenticated (Subscriber+) Insufficient Authorization to Privilege Escalation via MCP8.8 High
- wpbakery page builderWPBakery Page Builder <= 8.4.1 - Authenticated (Author+) Stored Cross-Site Scripting via Grid Builder6.4 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGiveWP – Donation Plugin and Fundraising Platform <= 4.3.0 - Missing Authorization To Authenticated (Contributor+) Campaign Data View And Modification5.4 Medium
- antoineh football poolFootball Pool <= 2.12.4 - Authenticated (Administrator+) Stored Cross-Site Scripting5.5 Medium
- oceanwpOceanWP <= 4.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Select HTML Tag4.9 Medium
- labredescefetrj wegiaWeGIA SQL Injection Vulnerability in id Parameter on control.php Endpoint8.3 High
- wpmet elementskit elementor addons, roxnor elementskit elementor addons – advanced widgets & templates addons for elementor +1 moreElementsKit Lite <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget6.4 Medium
- codename065 download managerDownload Manager <= 3.3.18 - Authenticated (Author+) Stored Cross-site Scripting via wpdm_user_dashboard Shortcode6.4 Medium
- labredescefetrj wegiaWeGIA OS Command Injection in debug_info.php parameter 'branch'9.8 Critical
- timescale pgaipgai secrets exfiltration via `pull_request_target`9.1 Critical
- brocade fabric os, broadcom fabric operating system +1 morePath transversal vulnerability potentially leading to sensitive information disclosure4.8 Medium
- alekv pixel manager for woocommerce – conversion tracking, google ads, ga4, tiktok, dynamic remarketingPixel Manager for WooCommerce (PRO) <= 1.49.0 - Authenticated (Contributor+) Cross-Site Scripting via Shortcode6.4 Medium
- versa director, versa-networks versa director +1 moreThe Versa Director software exposes a number of services by default and allow attackers an easy...9.8 Critical
- versa director, versa-networks versa director +1 moreThe Versa Director SD-WAN orchestration platform provides functionality to upload various types...6.1 Medium
- versa director, versa-networks versa director +1 moreThe Versa Director SD-WAN orchestration platform provides an option to upload various types of...7.2 High
- versa directorThe Versa Director SD-WAN orchestration platform which makes use of Cisco NCS application service...9.8 Critical
- versa director, versa-networks versa director +1 moreThe Versa Director SD-WAN orchestration platform implements Two-Factor Authentication (2FA) using...6.3 Medium
- veeam backup and recovery, backup \& replication +1 moreA vulnerability allowing an authenticated user with the Backup Operator role to modify backup...7.2 High
- versa director, versa-networks versa director +1 moreThe Versa Director SD-WAN orchestration platform includes a Webhook feature for sending...7.2 High
- Show moreLoading…