CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- firelight lightbox, firelightwp firelight lightbox +1 moreWordPress Firelight Lightbox plugin <= 2.3.16 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- aown-shah advance charity management systemSourceCodester Advance Charity Management System fundDetails.php sql injection5.3 Medium
- dnnsoftware dnn.platform, dotnetnuke +1 moreDNN.PLATFORM Allows Stored Cross-Site Scripting (XSS) in Activity Feed5.1 Medium
- dnnsoftware dnn.platform, dotnetnuke +1 moreDNN.PLATFORM Allows Reflected Cross-Site Scripting (XSS) in some TokenReplace situations with SkinObjects6.1 Medium
- ibm spectrum protect serverIBM Spectrum Protect Server authentication bypass8.1 High
- mattermost, mattermost server +1 moreUnauthorized Guest user access to Playbook4.3 Medium
- mattermost, mattermost server +1 moreUnauthorized channel member management through playbook runs4.3 Medium
- rems my food recipeSourceCodester My Food Recipe Add Recipe Page add-recipe.php addRecipeModal cross site scripting5.1 Medium
- iputilsModerate: iputils security update6.5 Medium
- code-projects online shoe storecode-projects Online Shoe Store contactus.php sql injection6.9 Medium
- gitlabInsertion of Sensitive Information into Log File in GitLab4.1 Medium
- dell powerscale onefsDell PowerScale OneFS, versions 9.5.0.0 through 9.10.0.1, contains a missing authorization...9.8 Critical
- dell powerscale onefsDell PowerScale OneFS, versions 9.5.0.0 through 9.10.0.1, contains an improper neutralization of...5.3 Medium
- code-projects online shoe storecode-projects Online Shoe Store admin_product.php sql injection6.9 Medium
io.root.io.sentry:sentry-androidRoot,io.root.io.sentry:sentry-android-replayRoot,io.sentry:sentry-androidMaven +1 more +3 moresentry-android unmasked sensitive data in Android Session Replays for users of Jetpack Compose 1.8+8.2 High- gstreamer, siemens simatic cn 4100 +1 moreIn GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the...8.1 High
- gstreamerIn GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_tree function may read past the...6.6 Medium
- code-projects online shoe storecode-projects Online Shoe Store admin_football.php sql injection6.9 Medium
- code-projects school fees payment systemcode-projects School Fees Payment System cross-site request forgery5.3 Medium
- code-projects school fees payment systemcode-projects School Fees Payment System branch.php cross site scripting5.1 Medium
- ponaravindb hospital management systemponaravindb Hospital Management System func3.php sql injection6.9 Medium
- totolink a3002r, a3002ru, a3002r firmware +1 more +3 moreTOTOLINK A3002R/A3002RU HTTP POST Request formTmultiAP buffer overflow8.7 High
- totolink ex1200t, ex1200t firmware +1 moreTOTOLINK EX1200T HTTP POST Request formTmultiAP buffer overflow8.7 High
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morenet_sched: prio: fix a race in prio_tune()7.8 High
- fastlinemedia beaver builder, the beaver builder team beaver builder plugin (starter version) +1 moreBeaver Builder Plugin (Starter Version) <= 2.9.1 - Authenticated (Administrator+) Arbitrary File Upload7.2 High
- dedecmsDedeCMS Template dedetag.class.php command injection5.1 Medium
- d-link dir-867, dlink dir-867 firmware +1 moreD-Link DIR-867 Query String strncpy stack-based overflow8.7 High
- itsourcecode directory management systemPHPGurukul Directory Management System admin-profile.php sql injection5.3 Medium
- itsourcecode directory management systemPHPGurukul Directory Management System manage-directory.php sql injection5.3 Medium
- mattermost, mattermost server +1 morePath Traversal Leading to RCE by Any Authenticated Mattermost User9.9 Critical
- postboxTCC Bypass via Dylib Injection in Postbox4.8 Medium
- core.ai phoenix codeTCC Bypass via Dylib Injection in Phoenix Code4.8 Medium
- itsourcecode directory management systemPHPGurukul Directory Management System search-directory.php sql injection5.3 Medium
- itsourcecode directory management systemPHPGurukul Directory Management System searchdata.php sql injection6.9 Medium
- codeastro real estate management systemScriptAndTools Real Estate Management System User Delete userdelete.php authorization5.3 Medium
- d-link dir-815, dlink dir-815 firmware +1 moreD-Link DIR-815 hedwig.cgi sub_403794 stack-based overflow8.7 High
- phpgurukul pre-school enrollment systemPHPGurukul Pre-School Enrollment System enrollment.php sql injection6.9 Medium
- phpgurukul pre-school enrollment systemPHPGurukul Pre-School Enrollment System visit.php sql injection6.9 Medium
- phpgurukul pre-school enrollment systemPHPGurukul Pre-School Enrollment System add-subadmin.php sql injection5.3 Medium
- phpgurukul pre-school enrollment systemPHPGurukul Pre-School Enrollment System add-class.php sql injection5.3 Medium
- joostdekeijzer euro fxref currency converter (by dkzr)Euro FxRef Currency Converter <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via currency Shortcode6.4 Medium
- phpgurukul pre-school enrollment systemPHPGurukul Pre-School Enrollment System add-teacher.php sql injection5.3 Medium
- phpgurukul pre-school enrollment systemPHPGurukul Pre-School Enrollment System check_availability.php sql injection6.9 Medium
- code-projects online shoe storecode-projects Online Shoe Store confirm.php sql injection6.9 Medium
- code-projects online shoe storecode-projects Online Shoe Store admin_running.php sql injection6.9 Medium
- code-projects online shoe storecode-projects Online Shoe Store cart2.php sql injection6.9 Medium
- campcodes sales and inventory systemCampcodes Sales and Inventory System cat_update.php sql injection6.9 Medium
- campcodes sales and inventory systemCampcodes Sales and Inventory System cat_add.php sql injection6.9 Medium
- openvpn ovpn-dco-winBuffer overflow in OpenVPN ovpn-dco-win version 1.3.0 and earlier and version 2.5.8 and earlier...5.5 Medium
- campcodes sales and inventory systemCampcodes Sales and Inventory System cash_transaction.php sql injection6.9 Medium
- Show moreLoading…