CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- brother industries, ltd ads-1250w, ads-1350w, ads-1700w +602 more +604 moreAuthentication bypass via default password generation affecting multiple models from Brother Industries, Ltd, Toshiba Tec, and Konica Minolta, Inc.9.8 Critical
- brother industries, ltd dcp-1610w, dcp-1610we, dcp-1610wr +448 more +450 moreUnauthenticated leak of sensitive information affecting multiple models from Brother Industries, Ltd., FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc.5.3 Medium
- growi, inc. growiInefficient regular expression complexity issue exists in GROWI prior to v7.1.6. If exploited, a...5.3 Medium
- ibm infosphere information serverIBM InfoSphere Information Server SQL injection7.6 High
- ibm iIBM i privilege escalation8.8 High
- gpriday siteorigin widgets bundle, siteorigin widgets bundle +1 moreSiteOrigin Widgets Bundle <= 1.68.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-url` DOM Element Attribute6.4 Medium
- mayurik best salon management systemSourceCodester Best Salon Management System view-appointment.php sql injection5.3 Medium
- libssh, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreLibssh: invalid return code for chacha20 poly1305 with openssl backend8.1 High
- libssh, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibssh: integer overflow in libssh sftp server packet length validation leading to denial of service6.5 Medium
- libssh, red hat enterprise linux 10, enterprise linux 6 +13 more +15 moreLibssh: incorrect return code handling in ssh_kdf() in libssh5.0 Medium
- libssh, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreLibssh: double free vulnerability in libssh key export functions6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreLibssh: use of uninitialized variable in privatekey_from_file()3.6 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreLibssh: write beyond bounds in binary to base64 conversion functions4.5 Medium
- berkeley-abc abcberkeley-abc abc 1.1 contains a Null Pointer Dereference (NPD) vulnerability in the...7.5 High
- vkoskiv c-rayvkoskiv c-ray 1.1 contains a Null Pointer Dereference (NPD) vulnerability in the parse_mtllib...7.5 High
- No product listedHexagon HxGN OnCall Dispatch Advantage (Web) v10.2309.03.00264 and Hexagon HxGN OnCall Dispatch...4.6 Medium
- 4pace cadclickCross-Site Scripting (XSS) vulnerability in CADClick v1.13.0 and before allows remote attackers...7.1 High
- No product listedAn issue in OneTrust SDK v.6.33.0 allows a local attacker to cause a denial of service via the Object.setPrototypeOf, proto, and Object.assign components. NOTE: this is disputed by the Supplier who do…5.7 Medium
- phpgurukul student record systemSQL Injection vulnerability in Student Record system Using PHP and MySQL v.3.20 allows a remote...7.1 High
- No product listedA cross-site scripting (XSS) vulnerability in the component /Login.php of c3crm up to v3.0.4...7.1 High
- mayurik best salon management systemSourceCodester Best Salon Management System edit-customer-detailed.php sql injection5.3 Medium
- mayurik best salon management systemSourceCodester Best Salon Management System add-customer.php sql injection5.3 Medium
- mayurik best salon management systemSourceCodester Best Salon Management System Login sql injection6.9 Medium
- risc0 risc0-ethereumrisc0-ethereum-contracts allows invalid commitment with digest value of zero to be accepted by Steel.validateCommitment1.7 Low
- meshtastic meshtastic-androidMeshtastic-Android vulnerable to forged DMs with no PKC showing up as encrypted5.3 Medium
- hikariatama hikkaHikka vulnerable to RCE through dangling web interface10.0 Critical
- hikariatama hikkaHikka vulnerable to RCE through edits in a channel9.7 Critical
- google chromeInsufficient data validation in DevTools in Google Chrome on Windows prior to 138.0.7204.49...5.4 Medium
- google chromeInsufficient policy enforcement in Loader in Google Chrome prior to 138.0.7204.49 allowed a...5.4 Medium
- google chromeUse after free in Animation in Google Chrome prior to 138.0.7204.49 allowed a remote attacker to...5.4 Medium
- anisha car rental systemcode-projects Car Rental System message_admin.php sql injection6.9 Medium
- code-projects simple online hotel reservation systemcode-projects Simple Online Hotel Reservation System delete_account.php sql injection6.9 Medium
- gotson komgaKomga Vulnerable to Arbitrary Code Execution via Crafted EPUB File4.2 Medium
- espressif esp-idfESP-NOW Integer Underflow Vulnerability Advisory7.2 High
- allure-framework allure2Allure 2's xunit-xml-plugin Vulnerable to Improper XXE Restriction7.5 High
- controlid idsecure on-premises, assaabloy control id idsecure +1 moreImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in ControlID iDSecure On-premises9.3 Critical
- controlid idsecure on-premises, assaabloy control id idsecure +1 moreServer-Side Request Forgery (SSRF) in ControlID iDSecure On-premises8.7 High
- controlid idsecure on-premises, assaabloy control id idsecure +1 moreImproper Authentication in ControlID iDSecure On-premises8.7 High
- kaleris navis n4Cleartext Transmission of Sensitive Information in Kaleris Navis N46.0 Medium
- kaleris navis n4Deserialization of Untrusted Data in Kaleris Navis N49.3 Critical
- umbraco cms, umbraco-cms +1 moreUmbraco.Cms Vulnerable to Disclosure of Configured Password Requirements5.3 Medium
- nvidia ais operator, aistore +1 moreNVIDIA AIStore contains a vulnerability in the AIS Operator where a user may gain elevated k8s...5.0 Medium
- ataturk university ata-aof mobile applicationHardcoded Credentials in Ataturk University's ATA-AOF Mobile Application10.0 Critical
- anujk305 hospital management systemPHPGurukul Hospital Management System search.php sql injection5.3 Medium
- nvidia megatron-lm, megatron lm +1 moreNVIDIA Megatron-LM for all platforms contains a vulnerability in a python component where an...7.8 High
- nvidia megatron-lm, megatron lm +1 moreNVIDIA Megatron-LM for all platforms contains a vulnerability in a python component where an...7.8 High
- art-in bilişim teknolojileri ve yazılım hizm. tic. ltd. şti. wi-fi cloud hotspotAuthentication Bypass in Art-In Systems' Wi-Fi Cloud Hotspot9.3 Critical
- code-projects school fees payment systemcode-projects School Fees Payment System student.php cross site scripting5.3 Medium
- totolink ex1200t, ex1200t firmware +1 moreTOTOLINK EX1200T HTTP POST Request formIpv6Setup buffer overflow8.7 High
- campcodes online recruitment management systemCampcodes Online Recruitment Management System view_application.php sql injection6.9 Medium
- Show moreLoading…