CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- ruby webrickRuby WEBrick read_header HTTP Request Smuggling Vulnerability6.5 Medium
- lxc incusIncus vulnerable to antispoofing nftables firewall rule bypass on bridge networks with ACLs8.1 High
- lxc incusIncus vulnerable to DoS through antispoofing nftables firewall rule bypass on bridge networks with ACLs3.4 Low
- kanboardKanboard vulnerable to Username Enumeration via Login Behavior and Bruteforce Protection Bypass5.3 Medium
- juliaweb github.jlGitHub.jl lacks validation for user-provided fields6.6 Medium
- julialang registrator, juliaregistries registrator.jl +1 moreRegistrator.jl Vulnerable to Argument Injection and Command Injection8.1 High
- julialang registrator, juliaregistries registrator.jl +1 moreRegistrator.jl Argument Injection Vulnerability8.1 High
- microsens nmp web+Path Traversal in MICROSENS NMP Web+9.3 Critical
- microsens nmp web+Insufficient Session Expiration in MICROSENS NMP Web+8.7 High
- microsens nmp web+Use of Hard-coded, Security-relevant Constants in MICROSENS NMP Web+9.3 Critical
- d-link dir-619l, dlink dir-619l firmware +1 moreD-Link DIR-619L formSetWAN_Wizard51 stack-based overflow8.7 High
- cisco identity services engine software, identity services engine, identity services engine passive identity connector +2 moreCisco ISE API Unauthenticated Remote Code Execution Vulnerability10.0 Critical
- parsons aclaraone utility portal, utility enterprise data management +1 moreParsons AccuWeather Widget Cross-site Scripting8.8 High
- hashicorp vault, vault enterprise +1 moreVault Vulnerable to Recovery Key Cancellation Denial of Service3.1 Low
- cisco identity services engine software, identity services engine, identity services engine passive identity connector +2 moreCisco ISE API Unauthenticated Remote Code Execution Vulnerability10.0 Critical
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Authorization Bypass Vulnerability6.4 Medium
- juliaweb http.jlHTTP.jl vulnerable to CR/LF Injection in URIs7.7 High
- d-link dir-619l, dlink dir-619l firmware +1 moreD-Link DIR-619L formAutoDetecWAN_wizard4 stack-based overflow8.7 High
- d-link dir-619l, dlink dir-619l firmware +1 moreD-Link DIR-619L formSetWANType_Wizard5 stack-based overflow8.7 High
- enalean tuleapTuleap missing CSRF protection on tracker reports manipulation4.6 Medium
- discourseDiscourse users are able to see their own whispers even after being removed from a group that has been configured to see whispers6.3 Medium
- code-projects inventory management systemcode-projects Inventory Management System removeCategories.php sql injection6.9 Medium
- code-projects inventory management systemcode-projects Inventory Management System createBrand.php sql injection6.9 Medium
- juliaweb gitforge.jlGitForge.jl lacks validation for user provided fields6.6 Medium
- cvat-ai cvat, cvat computer vision annotation tool +1 moreCVAT missing validation for in-progress backup upload names5.3 Medium
- clivedelacruz employee management systemitsourcecode Employee Management System editempprofile.php sql injection5.1 Medium
- digitalzoomstudio zoomsoundsZoomSounds < 6.05 - Unauthenticated Arbitrary File Upload9.1 Critical
- mayurik best salon management systemSourceCodester Best Salon Management System bwdates-reports-details.php sql injection5.3 Medium
- mayurik best salon management systemSourceCodester Best Salon Management System edit-services.php sql injection5.3 Medium
- enalean tuleapTuleap missing CSRF protection on tracker canned responses administration4.6 Medium
- discourseDiscourse vulnerable to XSS via user-provided query parameter in oauth failure flow8.1 High
- mayurik best salon management systemSourceCodester Best Salon Management System stock.php sql injection5.3 Medium
- mayurik best salon management systemSourceCodester Best Salon Management System add-services.php sql injection5.3 Medium
- mayurik best salon management systemSourceCodester Best Salon Management System edit-staff.php sql injection5.3 Medium
- mayurik best salon management systemSourceCodester Best Salon Management System add-staff.php sql injection5.3 Medium
- citrix netscaler gateway, netscaler adc, gateway +2 more +4 moreMemory overflow vulnerability leading to unintended control flow and Denial of Service9.2 Critical
- elastic kibanaKibana Open Redirect4.3 Medium
- coldfunction qcudacoldfunction qCUDA qcow.c qcow_make_empty integer overflow4.8 Medium
- lenze plc designer v4Lenze: Plaintext Password Disclosure in PLC Designer V4 Interface5.5 Medium
- brother industries, ltd. multiple driver installers for windowsMultiple Brother driver installers for Windows contain a privilege escalation vulnerability. If...8.5 High
- anujk305 hospital management systemPHPGurukul Hospital Management System manage-patient.php cross site scripting5.1 Medium
- wpeverest everest forms, everest forms pro +1 moreEverest Forms (Pro) <= 1.9.4 - Unauthenticated Path Traversal to Arbitrary File Deletion7.5 High
- iterate gmbh cyberduck, mountain duck +1 moreCyberduck and Mountain Duck - Improper Certificate Store Handling8.0 High
- iterate gmbh cyberduck, mountain duck +1 moreCyberduck and Mountain Duck - Weak Hash Algorithm for Certificate Fingerprint7.4 High
- brother industries, ltd ads-1700w, ads-1800w, ads-2400n +740 more +742 moreAuthenticated disclosure of external service passwords via pass-back attack affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta…6.8 Medium
- brother industries, ltd ads-1250w, ads-1350w, ads-1700w +709 more +711 moreUnauthenticated Denial of Service (DoS) via malformed WS-Scan request affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc.7.5 High
- brother industries, ltd ads-2400n, ads-2800w, ads-3000n +219 more +221 moreUnauthenticated Denial of Service (DoS) via malformed PJL request affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, and Ricoh.7.5 High
- brother industries, ltd ads-2400n, ads-2800w, ads-3000n +698 more +700 moreUnauthenticated Server Side Request Forgery (SSRF) via WS-Eventing affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, and Toshiba Tec, and Konica Minolta, Inc…5.3 Medium
- brother industries, ltd ads-2400n, ads-2800w, ads-3000n +704 more +706 moreUnauthenticated Server Side Request Forgery (SSRF) via WS-Addressing affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc.5.3 Medium
- brother industries, ltd ads-2400n, ads-2800w, ads-3000n +633 more +635 moreAuthenticated stack based buffer overflow affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, and Konica Minolta, Inc.7.2 High
- Show moreLoading…