CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor PRC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- pdf-xchange editor, pro, pdf-tools +2 morePDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- pdf-xchange editor, pro, pdf-tools +2 morePDF-XChange Editor PRC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- pdf-xchange editor, pro, pdf-tools +2 morePDF-XChange Editor GIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor App Object Use-After-Free Remote Code Execution Vulnerability7.8 High
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- mikrotik routerosMikrotik RouterOS VXLAN Source IP Improper Access Control Vulnerability7.2 High
- ibm websphere application serverIBM WebSphere Application Server code execution9.0 Critical
- code-projects inventory management systemcode-projects Inventory Management System editBrand.php sql injection6.9 Medium
- code-projects patient record management systemCodeAstro Patient Record Management System cross-site request forgery5.3 Medium
tzdataTuxCare,tzdata-javaTuxCare +1 moreUpdate of tzdataNo score- drupal paragraphs table, paragraphs table project table +1 moreParagraphs table - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-0845.4 Medium
- drupal simple xml sitemapSimple XML sitemap - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-0835.4 Medium
- drupal enterprise mfa - tfa for drupal, miniorange 2fa +1 moreEnterprise MFA - TFA for Drupal - Critical - Access bypass - SA-CONTRIB-2025-0824.8 Medium
- drupal ckeditor5 youtubeCKEditor5 Youtube - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-0816.1 Medium
- drupal klaro cookie & consent management, klaro cookie \& consent management project cookie \& consent management +1 moreKlaro Cookie & Consent Management - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-0804.3 Medium
- drupal open socialOpen Social - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-0798.8 High
- drupal glightboxGLightbox - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-0786.1 Medium
- drupal toc.jsToc.js - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-0776.1 Medium
- totolink a702r, a702r firmware +1 moreTOTOLINK A702R HTTP POST Request formIpv6Setup buffer overflow8.7 High
- autel maxicharger ac wallbox commercial, maxicharger ac elite business c50 firmware, maxicharger ac pro firmware +7 more +9 moreAutel MaxiCharger AC Wallbox Commercial Firmware Downgrade Remote Code Execution Vulnerability7.5 High
- autel maxicharger ac wallbox commercial, maxicharger ac elite business c50 firmware, maxicharger ac pro firmware +7 more +9 moreAutel MaxiCharger AC Wallbox Commercial PIN Missing Authentication Information Disclosure Vulnerability7.5 High
- autel maxicharger ac wallbox commercial, maxicharger ac elite business c50 firmware, maxicharger ac pro firmware +7 more +9 moreAutel MaxiCharger AC Wallbox Commercial DLB_SlaveRegister Heap-based Buffer Overflow Remote Code Execution Vulnerability8.8 High
- autel maxicharger ac wallbox commercial, maxicharger ac elite business c50 firmware, maxicharger ac pro firmware +7 more +9 moreAutel MaxiCharger AC Wallbox Commercial autocharge Stack-based Buffer Overflow Remote Code Execution Vulnerability6.8 Medium
- autel maxicharger ac wallbox commercial, maxicharger ac elite business c50 firmware, maxicharger ac pro firmware +7 more +9 moreAutel MaxiCharger AC Wallbox Commercial Serial Number Exposed Dangerous Method Information Disclosure Vulnerability4.9 Medium
- autel maxicharger ac wallbox commercial, maxicharger ac elite business c50 firmware, maxicharger ac pro firmware +7 more +9 moreAutel MaxiCharger AC Wallbox Commercial ble_process_esp32_msg Stack-based Buffer Overflow Remote Code Execution Vulnerability8.8 High
- autel maxicharger ac wallbox commercial, maxicharger ac elite business c50 firmware, maxicharger ac pro firmware +7 more +9 moreAutel MaxiCharger AC Wallbox Commercial Technician API Incorrect Authorization Privilege Escalation Vulnerability7.1 High
- autel maxicharger ac wallbox commercial, maxicharger ac elite business c50 firmware, maxicharger ac pro firmware +7 more +9 moreAutel MaxiCharger AC Wallbox Commercial wLength Buffer Overflow Remote Code Execution Vulnerability6.8 Medium
- autel maxicharger ac wallbox commercial, maxicharger ac elite business c50 firmware, maxicharger ac pro firmware +7 more +9 moreAutel MaxiCharger AC Wallbox Commercial ble_process_esp32_msg Misinterpretation of Input Vulnerability6.3 Medium
- totolink ca300-poe, ca300-poe firmware +1 moreTOTOLINK CA300-PoE ap.so QuickSetting os command injection5.3 Medium
- totolink ca300-poe, ca300-poe firmware +1 moreTOTOLINK CA300-PoE upgrade.so setUpgradeUboot os command injection5.3 Medium
- autel maxicharger ac wallbox commercial, maxicharger ac elite business c50 firmware, maxicharger ac pro firmware +7 more +9 moreAutel MaxiCharger AC Wallbox Commercial Origin Validation Error Authentication Bypass Vulnerability5.0 Medium
- pioneer dmh-wt7600nex, dmh-wt7600nex firmware +1 morePioneer DMH-WT7600NEX Root Filesystem Insufficient Verification of Data Authenticity Vulnerability4.6 Medium
- pioneer dmh-wt7600nex, dmh-wt7600nex firmware +1 morePioneer DMH-WT7600NEX Missing Immutable Root of Trust in Hardware Local Privilege Escalation Vulnerability4.4 Medium
- pioneer dmh-wt7600nex, dmh-wt7600nex firmware +1 morePioneer DMH-WT7600NEX Software Update Signing Insufficient Verification of Data Authenticity Vulnerability6.8 Medium
- servicestackServiceStack FindType Directory Traversal Remote Code Execution Vulnerability8.1 High
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Incorrect Authorization (CWE-863)4.3 Medium
- servicestackServiceStack GetErrorResponse Improper Input Validation NTLM Relay Vulnerability5.9 Medium
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Incorrect Authorization (CWE-863)2.7 Low
- totolink ca300-poe, ca300-poe firmware +1 moreTOTOLINK CA300-PoE upgrade.so setUpgradeFW os command injection5.3 Medium
- totolink ca300-poe, ca300-poe firmware +1 moreTOTOLINK CA300-PoE wps.so SetWLanApcliSettings os command injection5.3 Medium
- fasterxml jackson-corejackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data8.7 High
- d-link dir-619l, dlink dir-619l firmware +1 moreD-Link DIR-619L formAdvanceSetup stack-based overflow8.7 High
- openbaoOpenBao Vulnerable to Unauthenticated Rekey Operation Cancellation6.9 Medium
- openbaoOpenBao May Leak Sensitive Information in Logs When Processing Malformed Data4.5 Medium
- Show moreLoading…