CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- code-projects inventory management systemcode-projects Inventory Management System editOrder.php sql injection6.9 Medium
- campcodes payroll management systemcode-projects Payroll Management System ajax.php sql injection6.9 Medium
- totolink a702r, a702r firmware +1 moreTOTOLINK A702R HTTP POST Request formWlSiteSurvey buffer overflow8.7 High
- totolink x15, x15 firmware +1 moreTOTOLINK X15 HTTP POST Request formParentControl buffer overflow8.7 High
- code-projects inventory management systemcode-projects Inventory Management System editProduct.php sql injection6.9 Medium
- code-projects inventory management systemcode-projects Inventory Management System removeProduct.php sql injection6.9 Medium
- apache seata, apache software foundation seata (incubating) +1 moreApache Seata (incubating): Deserialization of untrusted Data in Apache Seata Server9.8 Critical
- code-projects inventory management systemcode-projects Inventory Management System createOrder.php sql injection6.9 Medium
- code-projects inventory management systemcode-projects Inventory Management System createProduct.php sql injection6.9 Medium
- code-projects inventory management systemcode-projects Inventory Management System removeBrand.php sql injection6.9 Medium
- preh car connect gmbh (joynext gmbh) volkswagen mib3 infotainment system mib3 oi mqbDenial of Service via integer underflow in picserver3.3 Low
- preh car connect gmbh (joynext gmbh) volkswagen mib3 infotainment system mib3 oi mqbAn integer overflow in the image processing binary of the MIB3 infotainment unit allows an...3.3 Low
- preh car connect gmbh (joynext gmbh) volkswagen mib3 infotainment system mib3 oi mqbBypass of secure boot process5.2 Medium
- preh car connect gmbh (joynext gmbh) volkswagen mib3 infotainment system mib3 oi mqbHeap buffer overflow in picserver8.0 High
- preh car connect gmbh (joynext gmbh) volkswagen mib3 infotainment system mib3 oi mqbCommand injection in networking service7.8 High
- preh car connect gmbh (joynext gmbh) volkswagen mib3 infotainment system mib3 oi mqbA lack of access restrictions on internal memory regions6.7 Medium
- preh car connect gmbh (joynext gmbh) volkswagen mib3 infotainment system mib3 oi mqbInteger Overflow in Non-Fragmented Data Reception5.4 Medium
- preh car connect gmbh (joynext gmbh) volkswagen mib3 infotainment system mib3 oi mqbInteger Overflow Leading to MTU Bypass8.0 High
- preh car connect gmbh (joynext gmbh) volkswagen mib3 infotainment system mib3 oi mqbDisabled Abortion Flag8.0 High
- preh car connect gmbh (joynext gmbh) volkswagen mib3 infotainment system mib3 oi mqbArbitrary Channel Disconnection Resulting in Denial of Service6.5 Medium
- preh car connect gmbh (joynext gmbh) volkswagen mib3 infotainment system mib3 oi mqbCleartext Phonebook Information5.7 Medium
- preh car connect gmbh (joynext gmbh) volkswagen mib3 infotainment system mib3 oi mqbA lack of access control in custom IPC mechanism6.3 Medium
- hdfgroup hdf5HDF5 H5Ochunk.c H5O__chunk_protect heap-based overflow4.8 Medium
- ibm informix dynamic serverIBM Informix Dynamic Server denial of service7.5 High
- hdfgroup hdf5HDF5 H5Centry.c H5C__load_entry resource consumption4.8 Medium
- hdfgroup hdf5HDF5 H5Ofsinfo.c H5O__fsinfo_encode heap-based overflow4.8 Medium
- debian linux, linux kernel +1 morenet: ch9200: fix uninitialised access during mii_nway_restart5.5 Medium
- debian linux, linux kernel +1 moremm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race7.8 High
- debian linux, linux kernel +1 moremm/hugetlb: unshare page tables during VMA split, not before7.8 High
- videowhisper micropayments, micropayments – fans paysite: paid creator subscriptions, digital assets, wallet +1 moreMicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet <= 3.2.0 - Cross-Site Request Forgery to Settings Reset4.3 Medium
- gameusers game users share buttons, game users share button +1 moreGame Users Share Buttons <= 1.3.0 - Authenticated (Subscriber+) Arbitrary File Deletion via themeNameId Parameter8.8 High
- ptoffice pt project notebooks, blafoley pt project notebooks – take meeting minutes, create budgets, track task management, and more +1 morePT Project Notebooks 1.0.0 - 1.1.3 - Missing Authorization to Unauthenticated Privilege Escalation via wpnb_pto_new_users_add Function9.8 Critical
- qodeinteractive qi addons for elementorQi Addons For Elementor <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- beeteam368 extensions, vidmov +1 moreBeeTeam368 Extensions <= 2.3.4 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Deletion8.8 High
- rextheme wp vr – 360 panorama and free virtual tour builder for wordpress, wp vr +1 moreWP VR – 360 Panorama and Free Virtual Tour Builder For WordPress <= 8.5.32 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- beeteam368 extensions pro, vidmov +1 moreBeeTeam368 Extensions Pro <= 2.3.4 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Deletion8.8 High
- ibm cognos analyticsIBM Cognos Analytics cross-site scripting6.4 Medium
- ibm datacap, datacap navigator +1 moreIBM Datacap clickjacking5.4 Medium
- ibm datacap, datacap navigator +1 moreIBM Datacap information disclosure4.3 Medium
- ibm datacap, datacap navigator +1 moreIBM Datacap clickjacking5.4 Medium
- akkaakka-cluster-metrics uses Java serialization for cluster metrics6.0 Medium
- netgate pfsenseIn Netgate pfSense CE 2.8.0, the "WebCfg - Diagnostics: Command" privilege allows reading...5.0 Medium
- debian zulucryptThe Debian zuluPolkit/CMakeLists.txt file for zuluCrypt through the zulucrypt_6.2.0-1 package has...9.3 Critical
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 4004 series +43 more +45 moreImproper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with...6.4 Medium
taylorednpmTaylor has race condition in /get-patch that allows purchase token replayNo score- roocode roo code, roocodeinc roo-code +1 moreRoo Code Vulnerable to Potential Remote Code Execution via Model Context Protocol8.1 High
- roocode roo code, roocodeinc roo-code +1 moreRoo Code extension vulnerable to Potential Information Leakage via JSON Schema5.9 Medium
- code-projects food distributor sitecode-projects Food Distributor Site save_settings.php cross site scripting4.8 Medium
- code-projects food distributor sitecode-projects Food Distributor Site process_login.php sql injection6.9 Medium
- xiaoyunjie openvpn-cms-flaskxiaoyunjie openvpn-cms-flask File Upload controller.py upload path traversal6.9 Medium
- Show moreLoading…