CVEs published in June 2025
3,618 vulnerabilities, 289 critical, 18 exploited.
- code-projects inventory management systemcode-projects Inventory Management System removeUser.php sql injection6.9 Medium
- ricoh company, ltd. streamline nxA reflected cross-site scripting vulnerability via a specific parameter exists in SLNX Help...5.1 Medium
- delta electronics dtn softFile Parsing Deserialization of Untrusted Data in DTN Soft7.8 High
- delta electronics dtm softFile Parsing Deserialization of Untrusted Data in DTM Soft7.8 High
- code-projects library systemcode-projects Library System add-book.php unrestricted upload5.3 Medium
- d-link di-7300g+, di-8200g, dlink di-7300g\+ firmware +1 more +3 moreD-Link DI-7300G+/DI-8200G msp_info.htm os command injection5.3 Medium
- code-projects daily expense manager, daily expense manager expense manager +1 moreReflected Cross-Site Scripting (XSS) vulnerability in Daily Expense Manager5.1 Medium
- code-projects daily expense manager, daily expense manager expense manager +1 moreReflected Cross-Site Scripting (XSS) vulnerability in Daily Expense Manager5.1 Medium
- code-projects daily expense manager, daily expense manager expense manager +1 moreUser enumeration vulnerability in Daily Expense Manager8.7 High
- code-projects daily expense manager, daily expense manager expense manager +1 moreSQL injection vulnerability in Daily Expense Manager8.7 High
sambaUbuntusamba regressionNo score- d-link di-7300g+, dlink di-7300g\+ firmware +1 moreD-Link DI-7300G+ in proxy_client.asp os command injection5.3 Medium
- d-link di-7300g+, dlink di-7300g\+ firmware +1 moreD-Link DI-7300G+ httpd_debug.asp os command injection5.1 Medium
- debian linux, linux kernel +1 moredrivers/rapidio/rio_cm.c: prevent possible heap overwrite7.8 High
- linux, linux kernel +1 moresunrpc: handle SVC_GARBAGE during svc auth processing as auth error9.8 Critical
- debian linux, linux kernel +1 morepowerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap7.1 High
- linux, linux kernel +1 morenet/sched: fix use-after-free in taprio_dev_notifier7.8 High
- d-link di-7300g+, dlink di-7300g\+ firmware +1 moreD-Link DI-7300G+ wget_test.asp os command injection5.3 Medium
- code-projects inventory management systemcode-projects Inventory Management System createUser.php sql injection6.9 Medium
- carmelo movie ticketing systemcode-projects Movie Ticketing System ticketConfirmation.php sql injection5.3 Medium
- ghozylab contact form, unknown contact form plugin +1 moreEasy Contact Form Lite < 1.1.29 - Contributor+ Stored XSS4.3 Medium
- syedbalkhi wp lightbox 2WP Lightbox 2 < 3.0.6.8 - Unauthenticated Stored XSS6.3 Medium
- carmelo movie ticketing systemcode-projects Movie Ticketing System logIn.php sql injection6.9 Medium
- phpgurukul teachers record management systemPHPGurukul Teachers Record Management System changeimage.php sql injection6.9 Medium
- tenda ac5, ac5 firmware +1 moreTenda AC5 SetSysTimeCfg stack-based overflow8.7 High
- tenda ac5, ac5 firmware +1 moreTenda AC5 openSchedWifi stack-based overflow8.7 High
- phpgurukul teachers record management systemPHPGurukul Teachers Record Management System edit-teacher-detail.php sql injection6.9 Medium
- carmelo staff audit systemcode-projects Staff Audit System search_index.php sql injection5.3 Medium
- carmelo staff audit systemcode-projects Staff Audit System update_index.php sql injection5.3 Medium
- d-link dir-513, dlink dir-513 firmware +1 moreD-Link DIR-513 formSetWanPPTP buffer overflow8.7 High
- samsung rlottieOut-of-bounds Read vulnerability in Samsung Open Source rLottie allows Overflow Buffers.This...5.1 Medium
- samsung rlottieImproper Input Validation vulnerability in Samsung Open Source rLottie allows Overread Buffers...5.1 Medium
- samsung rlottieImproper Input Validation vulnerability in Samsung Open Source rLottie allows Path Traversal.This...4.6 Medium
- samsung rlottieUse After Free vulnerability in Samsung Open Source rLottie allows Remote Code Inclusion.This...5.1 Medium
- d-link di-8100, dlink di-8100 firmware +1 moreD-Link DI-8100 jhttpd pppoe_base.asp buffer overflow8.7 High
- mayurik best salon management systemSourceCodester Best Salon Management System edit-tax.php sql injection5.3 Medium
- mayurik best salon management systemSourceCodester Best Salon Management System add-tax.php sql injection5.3 Medium
- mayurik best salon management systemSourceCodester Best Salon Management System search-appointment.php sql injection5.3 Medium
- akamai cloudtestAkamai CloudTest before 60 2025.06.09 (12989) allows SSRF.5.8 Medium
- akamai cloudtestAkamai CloudTest before 60 2025.06.02 (12988) allows file inclusion via XML External Entity (XXE)...5.8 Medium
- honor pc managerSeveral services in Honor Device Co., Ltd Honor PC Manager v16.0.0.118 was discovered to connect...8.8 High
- dlink dir-816 firmwareAn issue D-Link DIR-816-A2 DIR-816A2_FWv1.10CNB05_R1B011D88210 allows a remote attacker to...9.8 Critical
- devrafalko string-mathstring-math's string-math.js vulnerability can cause Regex Denial of Service (ReDoS)7.0 High
- sudo, canonical ubuntu linux, debian linux +5 more +7 moreSudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a...9.3 Critical
- sudo project sudo, siemens sidis secured smartplug +1 moreSudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the...2.8 Low
org.conductoross:conductor-coreMavenConductor vulnerable to OS command injection through unrestricted access to Java classes9.8 Critical- No product listedA buffer overflow in the formSetCfm() function of Tenda AC1206 1200M 11ac US_AC1206V1.0RTL_V15.03...7.5 High
- No product listedA misconfiguration in the default settings of MikroTik RouterOS 7 and fixed in v7.14 allows...6.5 Medium
- mayurik best salon management systemSourceCodester Best Salon Management System edit-category.php sql injection5.3 Medium
- mayurik best salon management systemSourceCodester Best Salon Management System add-category.php sql injection5.3 Medium
- Show moreLoading…