CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- nagios host, teamviewer full client, full client (win7/8) +1 more +3 moreIncorrect Permission Assignment for Critical Resource in TeamViewer Remote Management7.0 High
- libssh, red hat ai inference server 3.2, enterprise linux 10 +25 more +27 moreLibssh: out-of-bounds read in sftp_handle()5.4 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +7 more +9 morePodman: podman missing tls verification8.3 High
- oatpp oat++, oat\+\+ +1 moreoatpp Oat++ Deserializer.cpp deserializeArray stack-based overflow6.9 Medium
- netgear wnce3001Netgear WNCE3001 HTTP POST Request http_d stack-based overflow8.7 High
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox 140 and Thunderbird 1408.1 High
- mozilla firefox, thunderbird +1 moreSave as in Devtools could download files without sanitizing the extension8.1 High
- mozilla firefox, thunderbird +1 moreHTTPS-Only exception screen lacked anti-clickjacking delay4.3 Medium
- mozilla firefox, thunderbird +1 moreWebAuthn would allow a user to sign a challenge on a webpage with an invalid TLS certificate9.8 Critical
- mozilla firefox, thunderbird +1 moreDNS Requests leaked outside of a configured SOCKS proxy8.6 High
- mozilla firefoxThe prompt in Firefox for Android that asks before opening a link in an external application could be bypassed6.5 Medium
- mozilla firefoxFirefox for Android opened URLs specified in a link querystring parameter4.3 Medium
- mozilla firefox, thunderbird +1 moreContent-Disposition header ignored when a file is included in an embed or object tag6.1 Medium
- mozilla firefox, thunderbird +1 moreconnect-src Content Security Policy restriction could be bypassed9.1 Critical
- mozilla firefox, thunderbird +1 moreIncorrect parsing of URLs could have allowed embedding of youtube.com6.5 Medium
- mozilla firefox, thunderbird +1 moreNo warning when opening executable terminal files on macOS8.8 High
- mozilla firefox, thunderbird +1 moreThe WebCompat WebExtension shipped with Firefox exposed a persistent UUID4.3 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in FontFaceSet9.8 Critical
- hitachi energy microscada x sys600A vulnerability exists in the IEC 61850 in MicroSCADA X SYS600 product. The certificate...7.1 High
- hitachi energy microscada x sys600A vulnerability exists in the Web interface of the MicroSCADA X SYS600 product. The filtering...8.5 High
- hitachi energy microscada x sys600A vulnerability exists in the IEC 61850 of the MicroSCADA X SYS600 product. An IEC 61850-8...7.1 High
- hitachi energy microscada x sys600A vulnerability exists in in the Monitor Pro interface of the MicroSCADA X SYS600 product. An...8.3 High
- hitachi energy microscada x sys600A vulnerability exists in MicroSCADA X SYS600 product. If exploited this could allow a local...6.9 Medium
- hitachi energy relion 670/650 and sam600-ioA denial-of-service vulnerability due to improper prioritization of network traffic over...8.7 High
- hitachi energy relion 670/650 and sam600-ioAn authenticated user with file access privilege via FTP access can cause the Relion 670/650 and...7.1 High
- coderevolution aiomatic, aiomatic - automatic ai content writer & editor, gpt-3 & gpt-4, chatgpt chatbot & ai toolkit +1 moreAiomatic - AI Content Writer, Editor, ChatBot & AI Toolkit <= 2.5.0 - Authenticated (Subscriber+) Arbitrary File Upload7.5 High
- mb connect line mbconnect24, mymbconnect24, helmholz myrex24 +1 more +3 moreMB connect line: Observable response discrepancy in mbCONNECT24/mymbCONNECT247.5 High
- mb connect line mbconnect24, mymbconnect24, helmholz myrex24 +1 more +3 moreMB connect line: Authorization bypass in mbCONNECT24/mymbCONNECT247.5 High
- mb connect line mbconnect24, mymbconnect24, helmholz myrex24 +1 more +3 moreMB connect line: Missing Authentication in mbCONNECT24/mymbCONNECT248.2 High
- swift conference schedulerConference Scheduler <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via className Parameter6.4 Medium
- apache software foundation airflow providers snowflake, apache apache-airflow-providers-snowflake +1 moreApache Airflow Providers Snowflake: Potential SQL injection in CopyFromExternalStageToSnowflakeOperator9.8 Critical
- zephyrproject zephyrInfinite loop in dns_copy_qname8.2 High
- elecom co.,ltd. wrh-733gbk, wrh-733gwh +1 moreWRH-733GBK and WRH-733GWH contain an improper neutralization of special elements used in an OS...9.3 Critical
- elecom co.,ltd. wrh-733gbk, wrh-733gwh +1 moreWRH-733GBK and WRH-733GWH contain an improper neutralization of special elements used in an OS...9.3 Critical
- elecom co.,ltd. wrc-1167ghbk2-sWRC-1167GHBK2-S contains a stored cross-site scripting vulnerability in WebGUI. If exploited, an...4.8 Medium
- elecom co.,ltd. wrc-x3000gs, wrc-x3000gsa, wrc-x3000gsn +2 moreWRC-X3000GS, WRC-X3000GSA, and WRC-X3000GSN contain an improper neutralization of special...8.7 High
- elecom co.,ltd. wrc-1167gs2-b, wrc-1167gs2h-b, wrc-1167gst2 +4 more +6 moreUnrestricted upload of file with dangerous type issue exists in WRC-2533GST2 and WRC-1167GST2. If...5.3 Medium
- gogsGogs stored XSS in PDF renderer6.3 Medium
- gogsGogs deletion of internal files allows remote command execution10.0 Critical
- ggml llama.cppllama.cpp tokenizer signed vs. unsigned heap overflow8.6 High
- nekernel-org nekernelNeKernal Multiple Memory Corruption Vulnerabilities in mkfs.hefs8.8 High
- kanboardKanboard Password Reset Poisoning via Host Header Injection8.1 High
- bocaletto-luca elixir-system-monitorSysmonElixir path traversal in /read endpoint allows arbitrary file read7.5 High
- advantech wireless sensing and equipment (wise), wise-4010lan firmware, wise-4050lan firmware +1 more +3 moreStored Cross site Scripting (XSS)4.1 Medium
- advantech wireless sensing and equipment (wise), wise-4010lan firmware, wise-4050lan firmware +1 more +3 moreUnauthenticated Firmware Upload9.6 Critical
- advantech wireless sensing and equipment (wise), wise-4010lan firmware, wise-4050lan firmware +1 more +3 moreOpen JTAG Debug Port6.4 Medium
- advantech wireless sensing and equipment (wise), wise-4010lan firmware, wise-4050lan firmware +1 more +3 moreDenial of Service via Malformed Modbus Packets6.5 Medium
- advantech wireless sensing and equipment (wise), wise-4010lan firmware, wise-4050lan firmware +1 more +3 moreModbus Command Injection without Authentication8.1 High
- advantech wireless sensing and equipment (wise), wise-4010lan firmware, wise-4050lan firmware +1 more +3 moreUnencrypted HTTP Communication3.1 Low
- advantech wireless sensing and equipment (wise), wise-4010lan firmware, wise-4050lan firmware +1 more +3 moreLogin Session Exhaustion4.2 Medium
- Show moreLoading…