CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- advantech wireless sensing and equipment (wise), wise-4010lan firmware, wise-4050lan firmware +1 more +3 moreWeak Session Cookie Entropy5.0 Medium
- sapido br071n, br261c, br270n +9 more +11 moreSapido Wireless Router - Exposure of Sensitive Information9.3 Critical
- java-aodeng hope-bootjava-aodeng Hope-Boot Login WebController.java doLogin redirect5.3 Medium
- sapido br071n, br261c, br270n +9 more +11 moreSapido Wireless Router - OS Command Injection9.3 Critical
- sangfor technologies co., ltd. endpoint detection and response platformSangfor Endpoint Detection and Response OS Command Injection10.0 Critical
- java-aodeng hope-bootjava-aodeng Hope-Boot WebController.java login cross site scripting5.1 Medium
tarantoolDebianTarantool datetime.c tm_to_datetime assertion4.8 Medium- seeyon zhiyuan oa web application systemSeeyon Zhiyuan OA System Path Traversal File Upload10.0 Critical
- yonyou co., ltd. ufida ncYonyou NC BeanShell Command Injection10.0 Critical
- weaver e-cologyWeaver E-cology SQL Injection8.7 High
- linksys e1000 v1, e1200 v1, e1500 v1 +8 more +10 moreLinksys Routers E/WAG/WAP/WES/WET/WRT-Series10.0 Critical
- shenzhen tvt cctv-dvr, tvt td-2004ts-cl-c firmware, td-2004ts-cl firmware +28 more +30 moreShenzhen TVT CCTV-DVR Command Injection10.0 Critical
- engenius enshare iot gigabit cloud service, engeniustech epg5000 firmware, esr1200 firmware +5 more +7 moreEnGenius EnShare IoT Gigabit Cloud Service Command Injection10.0 Critical
- 201206030 novel-plusxxyopen/201206030 novel-plus User Management Module UserMapper.xml list sql injection5.3 Medium
- 5vtechnologies blue angel software suite5VTechnologies Blue Angel Software Suite Hardcoded Credentials9.3 Critical
- 5vtechnologies blue angel software suite5VTechnologies Blue Angel Software Suite OS Command Injection7.7 High
- geoffrowland jmol, moodle jmol plugin +1 moreMoodle LMS Jmol Plugin Cross-site Scripting (XSS)5.1 Medium
- geoffrowland jmol, moodle jmol plugin +1 moreMoodle LMS Jmol Plugin Path Traversal8.7 High
- 201206030 novel-plusxxyopen/201206030 novel-plus File FileController.java remove resource injection2.3 Low
opencvOSS-FuzzBad-cast to cv::PngDecoder from invalid vptrNo scorepcapplusplusOSS-FuzzUse-of-uninitialized-value in pcpp::IDnsResource::decodeNameNo score- 201206030 novel-plusxxyopen/201206030 novel-plus CATCHA LoginController.java ajaxLogin authentication replay6.3 Medium
- noyafa lf9 pro, lf9 pro firmware +1 moreNOYAFA/Xiami LF9 Pro RTSP Live Video Stream Endpoint access control5.3 Medium
- sentryIn Sentry 25.1.0 through 25.5.1, an authenticated attacker can access a project's issue endpoint...4.2 Medium
- moodleMoodle Session Fixation allows unauthenticated users to hijack sessions via sesskey parameter4.2 Medium
- phpgurukul online dj booking management systemPHPGurukul Online DJ Booking Management System 2.0 is vulnerable to Cross Site Scripting (XSS) in...6.1 Medium
- phpgurukul online dj booking management systemPHPGurukul Online DJ Booking Management System 2.0 is vulnerable to Cross Site Scripting (XSS) in...6.1 Medium
- phpgurukul online dj booking management systemPHPGurukul Online DJ Booking Management System 2.0 is vulnerable to Insecure Direct Object...6.5 Medium
- realtek rtl8762e software development kitAn issue in Realtek RTL8762EKF-EVB RTL8762E SDK v1.4.0 allows attackers to cause a Denial of...7.5 High
- No product listedQuest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2...7.5 High
- No product listedQuest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2...9.6 Critical
- No product listedQuest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2...8.8 High
- quest kace systems management appliance (sma), kace systems management appliance +1 moreQuest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2...10.0 Critical
- No product listedA vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4,...7.1 High
- No product listedA vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.2.0.3...7.1 High
- netboxIn Netbox Community 4.1.7, the login page is vulnerable to cross-site scripting (XSS), which...6.1 Medium
- netboxNetbox Community 4.1.7 is vulnerable to Cross Site Scripting (XSS) via the maintenance banner` in...7.1 High
- netboxIn Netbox Community 4.1.7, once authenticated, Configuration History > Add`is vulnerable to cross...6.1 Medium
- mmz-001 knowledgegptAn issue in mmzdev KnowledgeGPT V.0.0.5 allows a remote attacker to execute arbitrary code via...9.8 Critical
- os4ed opensisA SQL injection vulnerability exists in OS4Ed Open Source Information System Community v8.0 via...9.8 Critical
- mzzyg bd s1SIFUSM/MZZYG BD S1 RTSP Live Video Stream Endpoint access control5.3 Medium
- 70mai m300, m300 firmware +1 more70mai M300 Telnet Service demo.sh denial of service5.9 Medium
- 70mai m300, m300 firmware +1 more70mai M300 Telnet Service default credentials8.7 High
- 70mai m300, m300 firmware +1 more70mai M300 RTSP Live Video Stream Endpoint 12 improper authentication5.3 Medium
- 70mai m300, m300 firmware +1 more70mai M300 Web Server access control2.3 Low
- 70mai m300, m300 firmware +1 more70mai M300 HTTP Server insufficiently protected credentials2.3 Low
- 70mai 1s70mai 1S Configuration Config.cgi improper authorization5.3 Medium
- mbuesch letmeinLetmein connection limiter allows an arbitrary amount of simultaneous connections1.7 Low
- anthropics claude-codeClaude Code IDE extensions allow websocket connections from arbitrary origins8.8 High
- juliacomputing htmlsanitizer.jlHTMLSanitizer.jl Possible XSS6.9 Medium
- Show moreLoading…