CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- howardehrenberg custom post carousels with owlCustom Post Carousels with Owl < 1.4.12 - Contributor+ Stored XSS4.8 Medium
- campcodes sales and inventory systemCampcodes Sales and Inventory System account_add.php sql injection6.9 Medium
- phpgurukul emergency ambulance hiring portalPHPGurukul Emergency Ambulance Hiring Portal index.php sql injection6.9 Medium
- phpgurukul emergency ambulance hiring portalPHPGurukul Emergency Ambulance Hiring Portal add-ambulance.php sql injection5.3 Medium
- phpgurukul emergency ambulance hiring portalPHPGurukul Emergency Ambulance Hiring Portal bwdates-request-report-details.php sql injection5.3 Medium
- code-projects online shoe storecode-projects Online Shoe Store edit_customer.php sql injection6.9 Medium
- code-projects online shoe storecode-projects Online Shoe Store admin_index.php sql injection6.9 Medium
- code-projects online shoe storecode-projects Online Shoe Store admin_feature.php sql injection6.9 Medium
- code-projects online shoe storecode-projects Online Shoe Store cart.php sql injection6.9 Medium
- code-projects online shoe storecode-projects Online Shoe Store contactus1.php sql injection6.9 Medium
- totolink ex1200t, ex1200t firmware +1 moreTOTOLINK EX1200T cstecgi.cgi setStaticDhcpConfig stack-based overflow8.7 High
- anujk305 notice board systemPHPGurukul Notice Board System Add Notice manage-notices.php cross site scripting4.8 Medium
- rapid7 velociraptorVelociraptor priviledge escalation via UpdateConfig artifact5.5 Medium
- phpgurukul employee record management systemPHPGurukul Employee Record Management System editempeducation.php sql injection6.9 Medium
- totolink n150rt, n150rt firmware +1 moreTOTOLINK N150RT formWSC os command injection5.1 Medium
- code-projects hostel management systemcode-projects Hostel Management System empty_rooms.php sql injection6.9 Medium
- code-projects hostel management systemcode-projects Hostel Management System allocated_rooms.php sql injection6.9 Medium
- microsoft dynamics 365 fasttrack implementation, dynamics 365 +1 moreDynamics 365 FastTrack Implementation Assets Information Disclosure Vulnerability7.5 High
- code-projects hostel management systemcode-projects Hostel Management System contact.php sql injection6.9 Medium
- code-projects hostel management systemcode-projects Hostel Management System contact_manager.php sql injection6.9 Medium
- d-link dir-825, dlink dir-825 firmware +1 moreD-Link DIR-825 HTTP POST Request sub_4091AC stack-based overflow8.7 High
glazeOSS-FuzzStack-buffer-overflow in void glz::from<10000u, int>::op<glz::opts_csv{10000u,No scoreglazeOSS-FuzzStack-buffer-overflow in void glz::from<10000u, std::__1::__bit_reference<std::__1::vector<bool, std::__1No score- d-link dir-825, dlink dir-825 firmware +1 moreD-Link DIR-825 HTTP POST Request do_file stack-based overflow8.7 High
- anujk305 bus pass management systemPHPGurukul Bus Pass Management System Profile Page admin-profile.php cross site scripting4.8 Medium
- yftech coros pace 3 firmwareAn issue was discovered in COROS PACE 3 through 3.0808.0. Due to an out-of-bounds read...9.1 Critical
- yftech coros pace 3 firmwareAn issue was discovered in COROS PACE 3 through 3.0808.0. Due to a NULL pointer dereference...7.5 High
- vishalmathur cloudclassroom-php projectA SQL Injection vulnerability was discovered in the askquery.php file of CloudClassroom-PHP...9.8 Critical
- redox-os redoxAn issue in redoxOS kernel before commit 5d41cd7c allows a local attacker to cause a denial of...6.2 Medium
- xxyopen novel-plusDirectory Traversal vulnerability in novel plus before v.5.1.0 allows a remote attacker to...9.8 Critical
- ricko brplotbrplot v420.69.1 contains a Null Pointer Dereference (NPD) vulnerability in the...7.5 High
- No product listedThere are multiple unauthorized remote command execution vulnerabilities in the H3C ER2200G2,...9.8 Critical
- digitaldruid hoteldruidIn HotelDruid 3.0.7, an unauthenticated attacker can exploit verbose SQL error messages on creadb...7.5 High
- yftech coros pace 3 firmwareAn issue was discovered on COROS PACE 3 devices through 3.0808.0. It implements a function to...9.8 Critical
- yftech coros pace 3 firmwareAn issue was discovered on COROS PACE 3 devices through 3.0808.0. It starts advertising if no...8.8 High
- yftech coros pace 3 firmwareAn issue was discovered on COROS PACE 3 devices through 3.0808.0. It implements a function to...9.8 Critical
- yftech coros pace 3 firmwareAn issue was discovered on COROS PACE 3 devices through 3.0808.0. It identifies itself as a...9.8 Critical
- yftech coros pace 3 firmwareAn issue was discovered on COROS PACE 3 devices through 3.0808.0. The BLE implementation of the...6.8 Medium
- No product listedAn issue was discovered in the COROS application through 3.8.12 for Android. Bluetooth pairing...5.7 Medium
- phpgurukul covid19 testing management systemPHPGurukul COVID19 Testing Management System Take Action test-details.php cross site scripting5.1 Medium
- phpgurukul covid19 testing management systemPHPGurukul COVID19 Testing Management System search-report-result.php redirect5.1 Medium
- phpgurukul covid19 testing management systemPHPGurukul COVID19 Testing Management System search-report-result.php cross site scripting5.3 Medium
- phpgurukul car rental portalPHPGurukul Car Rental Portal cross-site request forgery5.3 Medium
- xata agent, xataio xata agent +1 morexataio Xata Agent route.ts GET path traversal5.1 Medium
- xlang openagentsxlang-ai OpenAgents file.py create_upload_file path traversal5.1 Medium
- openbmb xagentOpenBMB XAgent community path traversal5.1 Medium
- superagiTransformerOptimus SuperAGI EmailToolKit read_email.py download_attachment path traversal5.1 Medium
- upsonicUpsonic Pickle add_tool cloudpickle.loads deserialization5.1 Medium
- craftercmsImproper Control of Dynamically-Managed Code Resources in Crafter Studio7.3 High
- upsonicUpsonic server.py os.path.join path traversal5.1 Medium
- Show moreLoading…