CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- sony xav-ax8500, xav-ax8500 firmware +1 moreSony XAV-AX8500 Bluetooth ERTM Channel Authentication Bypass Vulnerability6.3 Medium
- rarlab winrarRARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability7.8 High
- nvidia driver, peak-system device driver +1 morePEAK-System Driver PCANFD_ADD_FILTERS Time-Of-Check Time-Of-Use Information Disclosure Vulnerability3.8 Low
- allegraAllegra calculateTokenExpDate Password Recovery Authentication Bypass Vulnerability9.8 Critical
- d-link dir-619l, dlink dir-619l firmware +1 moreD-Link DIR-619L formSetACLFilter stack-based overflow8.7 High
debian-security-supportDebiandebian-security-support - updateNo score- yealink rps, ymcs +1 moreIn Yealink YMCS RPS before 2025-05-26, the certificate upload function does not properly validate...4.3 Medium
- yealink rps, ymcs +1 moreYealink YMCS before 2025-05-26 does not prevent OpenAPI access by frozen enterprise accounts,...5.0 Medium
- yealink rps, ymcs +1 moreThe Yealink YMCS RPS API before 2025-05-26 lacks rate limiting, potentially enabling information...4.3 Medium
- yealink rps, ymcs +1 moreYealink YMCS RPS before 2025-06-04 lacks SN verification attempt limits, enabling brute-force...2.2 Low
- d-link dir-619l, dlink dir-619l firmware +1 moreD-Link DIR-619L formWlSiteSurvey formSetWizard1 stack-based overflow8.7 High
- d-link dir-619l, dlink dir-619l firmware +1 moreD-Link DIR-619L formSetWizard1 stack-based overflow8.7 High
- d-link dir-619l, dlink dir-619l firmware +1 moreD-Link DIR-619L formSetEnableWizard stack-based overflow8.7 High
- d-link dir-619l, dlink dir-619l firmware +1 moreD-Link DIR-619L formWlanGuestSetup stack-based overflow8.7 High
- d-link dir-619l, dlink dir-619l firmware +1 moreD-Link DIR-619L formdumpeasysetup stack-based overflow8.7 High
- d-link dir-619l, dlink dir-619l firmware +1 moreD-Link DIR-619L formSetEmail stack-based overflow8.7 High
- d-link dir-619l, dlink dir-619l firmware +1 moreD-Link DIR-619L formSetDomainFilter stack-based overflow8.7 High
- hobbesosr kittenHobbesOSR Kitten pgtable.h set_pte_at resource consumption6.9 Medium
- carmelo simple pizza ordering systemcode-projects Simple Pizza Ordering System adduser-exec.php sql injection6.9 Medium
- carmelo simple pizza ordering systemcode-projects Simple Pizza Ordering System adding-exec.php sql injection6.9 Medium
- gitlabMissing Authorization in GitLab3.1 Low
- carmelo simple pizza ordering systemcode-projects Simple Pizza Ordering System editpro.php sql injection6.9 Medium
- carmelo simple pizza ordering systemcode-projects Simple Pizza Ordering System adds.php sql injection6.9 Medium
- carmelo simple pizza ordering systemcode-projects Simple Pizza Ordering System portal.php sql injection6.9 Medium
- sar2htmlsar2html OS Command Injection10.0 Critical
- edimax ew-7438rpn mini, ew-7438rpn mini firmware +1 moreEdimax EW-7438RPn Mini OS Command Injection via syscmd.asp9.4 Critical
- edimax ew-7438rpn mini, ew-7438rpn mini firmware +1 moreEdimax EW-7438RPn Mini OS Command Injection via mp.asp9.4 Critical
- karel ip phone ip1211Karel IP Phone IP1211 Path Traversal8.5 High
- selea targa ip ocr-anpr cameraSelea Targa IP OCR-ANPR Camera Path Traversal9.3 Critical
- selea targa ip ocr-anpr cameraSelea Targa IP OCR-ANPR Camera Server-Side Request Forgery7.8 High
- minidvblinuxMiniDVBLinux Root Command Injection9.3 Critical
- aquatronica controller systemAquatronica Controller System Complete Information Disclosure9.3 Critical
- sugarcrmSugarCRM PHP Deserialization RCE9.3 Critical
- carmelo simple pizza ordering systemcode-projects Simple Pizza Ordering System cashconfirm.php sql injection6.9 Medium
- gitlabCross-Site Request Forgery (CSRF) in GitLab8.1 High
- gitlabInefficient Regular Expression Complexity in GitLab6.5 Medium
- trailofbits rfc3161-clientrfc3161-client has insufficient verification for timestamp response signatures9.3 Critical
- carmelo simple pizza ordering systemcode-projects Simple Pizza Ordering System saveorder.php sql injection6.9 Medium
- carmelo simple pizza ordering systemcode-projects Simple Pizza Ordering System paymentportal.php sql injection6.9 Medium
- carmelo simple pizza ordering systemcode-projects Simple Pizza Ordering System addmem.php sql injection6.9 Medium
- risc0RISC Zero zkVM Underconstrained Vulnerability2.7 Low
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab8.7 High
- gitlabMissing Authorization in GitLab8.5 High
- code-projects online hotel reservation systemSourceCodester Online Hotel Reservation System execeditroom.php sql injection6.9 Medium
- go-chi chigo-chi chi before v5.2.2 Open Redirect via RedirectSlashes5.1 Medium
- code-projects online shoe storecode-projects Online Shoe Store customer_signup.php sql injection6.9 Medium
- code-projects responsive blog, fabian responsive blog site +1 morecode-projects Responsive Blog search.php cross site scripting5.1 Medium
- redhat keycloak, red hat build of keycloak +1 moreKeycloak-core: keycloak environment information2.7 Low
- code-projects automated voting systemcode-projects Automated Voting System Backend vote.php direct request6.9 Medium
- itsourcecode employee record management system, clivedelacruz employee management system +1 moreitsourcecode Employee Record Management System editprofile.php sql injection5.3 Medium
- Show moreLoading…