CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- mayurik best salon management systemSourceCodester Best Salon Management System edit-subscription.php sql injection5.3 Medium
- mayurik best salon management systemSourceCodester Best Salon Management System add_subscribe.php sql injection5.3 Medium
- oretnom23 simple company websiteSourceCodester Simple Company Website Users.php unrestricted upload5.1 Medium
- oretnom23 simple company websiteSourceCodester Simple Company Website SystemSettings.php unrestricted upload5.1 Medium
- oretnom23 simple company websiteSourceCodester Simple Company Website Login.php sql injection6.9 Medium
- oretnom23 simple company websiteSourceCodester Simple Company Website Content.php unrestricted upload5.1 Medium
- oretnom23 simple company websiteSourceCodester Simple Company Website manage.php sql injection5.1 Medium
- ubiquiti inc unifi network applicationA misconfigured query in UniFi Network (v9.1.120 and earlier) could allow users to authenticate...6.8 Medium
- ubiquiti inc uisp applicationMultiple Authenticated SQL Injection vulnerabilities found in UISP Application (Version 2.4.206...9.9 Critical
- ubiquiti inc ucrm client signup pluginA Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS) vulnerability in the...7.5 High
- oretnom23 simple company websiteSourceCodester Simple Company Website manage.php sql injection5.1 Medium
- oretnom23 simple company websiteSourceCodester Simple Company Website manage.php sql injection5.1 Medium
- code-projects simple forumcode-projects Simple Forum forum_downloadfile.php path traversal5.3 Medium
- daicuoDaiCuo index cross-site request forgery5.3 Medium
- seacmsSeaCMS admin_type.php cross-site request forgery5.3 Medium
- phpgurukul local services search engine management systemPHPGurukul Local Services Search Engine Management System edit-category-detail.php sql injection6.9 Medium
- mayurik best salon management systemSourceCodester Best Salon Management System edit_plan.php sql injection5.3 Medium
- mayurik best salon management systemSourceCodester Best Salon Management System add_plan.php sql injection5.3 Medium
- mayurik best salon management systemSourceCodester Best Salon Management System staff_commision.php sql injection5.3 Medium
- mayurik best salon management systemSourceCodester Best Salon Management System pro_sale.php sql injection5.3 Medium
- checkpoint smartconsole, check point smartconsole +1 moreSmartConsole Sensitive Credential Exposure via Memory Dump6.1 Medium
- esapi esapi-java-legacyESAPI esapi-java-legacy SQL Injection Defense Encoder.encodeForSQL special element6.9 Medium
- hdfgroup hdf5HDF5 H5Centry.c H5C__flush_single_entry null pointer dereference4.8 Medium
- hdfgroup hdf5HDF5 H5Gnode.c H5G__node_cmp3 stack-based overflow4.8 Medium
- hdfgroup hdf5HDF5 H5FL.c H5FL__reg_gc_list use after free4.8 Medium
- ruby net-imap, red hat 3scale api management platform 2, enterprise linux 10 +17 more +19 morenet-imap vulnerable to STARTTLS stripping via invalid response timing7.6 High
- chatchat-space langchain-chatchatchatchat-space Langchain-Chatchat file path traversal5.1 Medium
- chatchat-space langchain-chatchatchatchat-space Langchain-Chatchat files path traversal5.3 Medium
- chatchat-space langchain-chatchatchatchat-space Langchain-Chatchat Backend upload_temp_docs path traversal5.3 Medium
- code-projects simple forumcode-projects Simple Forum forum1.php sql injection5.3 Medium
- code-projects simple forumcode-projects Simple Forum forum_edit1.php cross site scripting5.1 Medium
- code-projects simple forumcode-projects Simple Forum forum1.php unrestricted upload5.3 Medium
- code-projects simple forumcode-projects Simple Forum forum_edit.php sql injection5.3 Medium
- code-projects simple forumcode-projects Simple Forum forum_viewfile.php sql injection6.9 Medium
- code-projects simple forumcode-projects Simple Forum register1.php sql injection6.9 Medium
- ieonly ez sql reports shortcode widget and db backupEZ SQL Reports Shortcode Widget and DB Backup <= 5.25.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via SQLREPORT Shortcode6.4 Medium
- code-projects simple forumcode-projects Simple Forum signin.php sql injection6.9 Medium
- code-projects simple photo gallerycode-projects Simple Photo Gallery upload-photo.php unrestricted upload6.9 Medium
- code-projects product inventory systemcode-projects Product Inventory System edit_user.php sql injection5.1 Medium
- code-projects product inventory systemcode-projects Product Inventory System edit_product.php sql injection5.1 Medium
- code-projects product inventory systemcode-projects Product Inventory System Login index.php sql injection6.9 Medium
- conjure position department service quality evaluation systemConjure Position Department Service Quality Evaluation System head.php eval backdoor5.3 Medium
- code-projects library systemcode-projects Library System profile.php unrestricted upload5.3 Medium
- code-projects library systemcode-projects Library System profile.php sql injection6.9 Medium
pyvexPyPIUNKNOWN READ in getUShortNo score- code-projects library systemcode-projects Library System student-issue-book.php sql injection6.9 Medium
- ethereum rlpxRLPx 5 has two CTR streams based on the same key, IV, and nonce. This can facilitate decryption...3.4 Low
- code-projects inventory management systemcode-projects Inventory Management System editPayment.php sql injection6.9 Medium
- aaluoxiang oa systemaaluoxiang oa_system External Address Book outAddress sql injection5.3 Medium
- code-projects inventory management systemcode-projects Inventory Management System orders.php sql injection6.9 Medium
- Show moreLoading…