CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- bharti airtel thanks appBharti Airtel Thanks App files cleartext storage in a file or on disk2.4 Low
sudoersOSS-FuzzHeap-buffer-overflow in libssl.soNUMBERNo score- huija bicyclesharingserverhuija bicycleSharingServer UserServiceImpl.java userDao.selectUserByUserNameLike sql injection5.3 Medium
- nixos nixA race condition in the Nix, Lix, and Guix package managers enables changing the ownership of...5.6 Medium
- nixos nixThe Nix, Lix, and Guix package managers fail to properly set permissions when a derivation build...3.2 Low
- nixos nixThe Nix, Lix, and Guix package managers default to using temporary build directories in a world...3.2 Low
- miko mikopbxPBXCoreREST/Controllers/Files/PostController.php in MikoPBX through 2024.1.114 allows uploading a...9.9 Critical
- tenda ac6 firmwareA buffer overflow vulnerability exists in the fromNatStaticSetting function of Tenda AC6 <=V15.03...7.3 High
- anujk305 medical card generation systemA Cross-Site Request Forgery (CSRF) vulnerability exists in the Inquiry Management functionality ...6.5 Medium
- anujk305 medical card generation systemA Cross-Site Request Forgery (CSRF) vulnerability exists in the Manage Card functionality (/mcgs...6.5 Medium
- anujk305 medical card generation systemA stored blind XSS vulnerability exists in the Contact Page of the Phpgurukul Medical Card...6.1 Medium
- flock safety license plate reader, flocksafety license plate reader firmware +1 moreFlock Safety LPR (License Plate Reader) devices with firmware through 2.2 have cleartext storage...2.0 Low
- flock safety license plate reader, flocksafety license plate reader firmware +1 moreFlock Safety LPR (License Plate Reader) devices with firmware through 2.2 have a hardcoded...2.2 Low
- flock safety license plate reader, flocksafety license plate reader firmware +1 moreFlock Safety LPR (License Plate Reader) devices with firmware through 2.2 have an on-chip debug...6.4 Medium
- flock safety gunshot detection devices, flocksafety gunshot detection firmware +1 moreFlock Safety Gunshot Detection devices before 1.3 have a hardcoded password for a system.2.2 Low
- flock safety gunshot detection devices, flocksafety gunshot detection firmware +1 moreFlock Safety Gunshot Detection devices before 1.3 have cleartext storage of code.2.0 Low
- flock safety gunshot detection devices, flocksafety gunshot detection firmware +1 moreFlock Safety Gunshot Detection devices before 1.3 have an on-chip debug interface with improper...6.4 Medium
- flock safety gunshot detection devices, flocksafety gunshot detection firmware +1 moreFlock Safety Gunshot Detection devices before 1.3 have a hard-coded password for a connection.2.2 Low
- nixos nixThe Nix, Lix, and Guix package managers allow a bypass of build isolation in which a user can...2.9 Low
- nixos nixA race condition in the Nix, Lix, and Guix package managers allows the removal of content from...3.2 Low
- No product listedAn issue in Hikvision DS-2CD1321-I V5.7.21 build 230819 allows attackers to cause a Denial of...7.5 High
- netease neacsafe64An issue in NetEase (Hangzhou) Network Co., Ltd NeacSafe64 Driver before v1.0.0.8 allows...6.5 Medium
- dlink dir-823 pro firmwareD-Link DIR-823-Pro 1.02 has improper permission control, allowing unauthorized users to turn on...6.3 Medium
- No product listedAn issue in the Bluetooth Low Energy (BLE) stack of Realtek RTL8762E BLE SDK v1.4.0 allows...6.5 Medium
- No product listedA state machine transition flaw in the Bluetooth Low Energy (BLE) stack of Cypress PSoC4 v3.66...8.1 High
- raspap raspap-webguiraspap-webgui has a Directory Traversal vulnerability6.3 Medium
- juzaweb cmsjuzaweb CMS Add New Themes Page install improper authorization5.3 Medium
- juzaweb cmsjuzaweb CMS Import Page imports improper authorization5.3 Medium
- utt hiper 840g, 840g firmware +1 moreUTT HiPER 840G API formP2PLimitConfig sub_484E40 buffer overflow8.7 High
- mitsubishi electric corporation ae-200a, ae-200e, ae-200j +24 more +26 moreMissing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation G...9.8 Critical
- utt hiper 840g, 840g firmware +1 moreUTT HiPER 840G API formConfigDnsFilterGlobal sub_416928 buffer overflow8.7 High
- utt hiper 840g, 840g firmware +1 moreUTT HiPER 840G API setSysAdm strcpy buffer overflow8.7 High
- yzcheng90 x-springbootyzcheng90 X-SpringBoot APK File apk uploadApk path traversal5.3 Medium
- infinispan, red hat data grid 8.5.4, jboss enterprise application platform 7 +4 more +6 moreInfinispan: credential leakage in infinispan cli5.5 Medium
- debian pycode-browserpycode-browser before version 1.0 is prone to a predictable temporary file vulnerability.3.9 Low
- debian yubiserveryubiserver before 0.6 is to buffer overflows due to misuse of sprintf.9.8 Critical
- debian yubiserveryubiserver before 0.6 is prone to SQL injection issues, potentially leading to an authentication...9.8 Critical
- git-annexS3 and Glacier remotes creds embedded in the git repo were not encrypted7.5 High
- fusionforgeVulnerability in fusionforge in the shipped Apache configuration, where the web server may...9.8 Critical
- cephCephFS Permission Escalation Vulnerability in Ceph Fuse mounted FS6.5 Medium
- debian matplotlibBuffer overflow vulnerability in matplotlib.This issue affects matplotlib: before upstream commit...5.6 Medium
- openstack horizon, the opennms group meridian +1 moreSQLi in OpenNMS Horizon and Meridian6.9 Medium
- n8nn8n Login Flow has Open Redirect Vulnerability4.6 Medium
- canon usa inc. eos webcam utility proCanon EOS Webcam Utility Pro for MAC OS contains an insecure permission issue potentially leading to code execution and privilege escalation4.6 Medium
- openstack horizon, the opennms group meridian +1 moreStored XSS in multiple 33.0.8files in opennms/opennms6.9 Medium
- filebrowserFile Browser: Command Execution not Limited to Scope8.0 High
- filebrowserFile Browser Allows Execution of Shell Commands That Can Spawn Other Commands8.0 High
- himmelblau-idm himmelblauHimmelblau offline auth permits authentication with invalid Hello PIN5.2 Medium
- octo-sts appOcto-STS Vulnerable to Unauthenticated SSRF with HTTP Response Reflection in OIDC Flow8.6 High
- beijing netguard nebula information technology co., ltd. leadsec ssl vpnLeadsec VPN Path Traversal Arbitrary File Read8.7 High
- Show moreLoading…