CVE-2025 records published in June 2025

This page lists the 3,210 CVE-2025 records published in June 2025, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 18 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2025 list filters these records by severity or signal.

Critical
51616.1% of these records
Listed in CISA KEV
180.6% of these records
Reported exploited
20.1% of these records
Detection signal
832.6% of these records
Exploit code
1133.5% of these records
Actionable vendor fix
1,84857.6% of these records

Figures as of 2026-10-24 13:47 UTC. Records published in June 2025 have had from about 16 months to about 17 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.

CVE-2025 records published in June 2025, newest first: records 1 to 1,000 of 3,210
CVE Summary CVSS EPSS Published Signals
CVE-2025-53416File Parsing deserialization of untrusted data in DTN Soft7.8CNA v3.10.3%2025-06-30Fix
CVE-2025-53415File Parsing deserialization of untrusted data in DTM Soft7.8CNA v3.10.2%2025-06-30Fix
CVE-2025-53076Samsung Open Source rlottie improper input validation5.1CNA v4.00.4%2025-06-30
CVE-2025-53075Samsung Open Source rlottie improper input validation4.6CNA v4.00.3%2025-06-30Fix
CVE-2025-53074Samsung Open Source rlottie out-of-bounds read5.1CNA v4.00.4%2025-06-30Fix
CVE-2025-53004Dataease Redshift Data Source JDBC Connection Parameters Bypass vulnerability8.9CNA v4.00.6%2025-06-30Fix
CVE-2025-52997filebrowser File Browser Insecurely Handles Passwords5.9CNA v3.10.5%2025-06-30Fix
CVE-2025-52996filebrowser File Browser's Password Protection of Links vulnerable to Bypass3.1CNA v3.10.4%2025-06-30
CVE-2025-52995filebrowser file Browser vulnerable to command execution allowlist bypass8.1CNA v3.10.6%2025-06-30Fix
CVE-2025-52901filebrowser file Browser allows sensitive data to be transferred in URL4.5CNA v3.10.6%2025-06-30Fix
CVE-2025-52898Frappe account takeover via password reset token leakage8.7CNA v4.00.4%2025-06-30Fix
CVE-2025-52896Frappe authenticated XSS via data import8.6CNA v4.00.3%2025-06-30Fix
CVE-2025-52895Frappe possibility of SQL injection due to improper validations8.7CNA v4.00.4%2025-06-30Fix
CVE-2025-52491Akamai CloudTest server-side request forgery5.8CNA v3.10.3%2025-06-30Fix
CVE-2025-49521Red Hat Ansible Automation Platform event-driven-ansible: Template injection8.8CNA v3.10.6%2025-06-30Fix
CVE-2025-49520Red Hat Ansible Automation Platform event-driven Ansible Git URL handling argument injection8.8CNA v3.10.6%2025-06-30Fix
CVE-2025-49493Akamai CloudTest XML external entity injection5.8CNA v3.12.1%2025-06-30NucleiExploit codeFix
CVE-2025-47871Mattermost Playbooks exposes private channel metadata to unauthorized users via run metadata API4.3CNA v3.10.2%2025-06-30Fix
CVE-2025-46702Mattermost Playbooks allows privilege escalation5.4CNA v3.10.2%2025-06-30Fix
CVE-2025-46014Honor PcManager incorrect default permissions8.8CISA ADP v3.10.4%2025-06-30
CVE-2025-45931D-Link DIR-816 command injection9.8CISA ADP v3.11.0%2025-06-30
CVE-2025-45143String-math's String-math.js vulnerability can cause Regex denial of service (ReDoS)7.0CISA ADP v3.10.4%2025-06-30
CVE-2025-41439RICOH Streamline NX cross-site scripting5.1CNA v4.00.2%2025-06-30
CVE-2025-40734Reflected cross-site scripting (XSS) vulnerability in Daily Expense Manager6.1v3.10.2%2025-06-30
CVE-2025-40733Reflected cross-site scripting (XSS) vulnerability in Daily Expense Manager6.1v3.10.2%2025-06-30
CVE-2025-40732User enumeration vulnerability in Daily Expense Manager7.5v3.10.3%2025-06-30
CVE-2025-40731SQL injection vulnerability in Daily Expense Manager9.8v3.10.3%2025-06-30
CVE-2025-40710Host header injection (HHI) in the Hotspot Shield VPN client2.3CNA v4.00.3%2025-06-30
CVE-2025-38090Linux kernel RapidIO channel manager vulnerability7.8CNA v3.10.2%2025-06-30Fix
CVE-2025-38089Linux kernel sunrpc server authentication null pointer dereference9.8CNA v3.10.5%2025-06-30Exploit codeFix
CVE-2025-38088Linux kernel PowerNV memtrace out-of-bounds read7.1v3.10.2%2025-06-30Fix
CVE-2025-38087Linux kernel net/sched use-after-free7.8CNA v3.10.2%2025-06-30Fix
CVE-2025-36593Dell OpenManage Network Integration authentication bypass by replay8.8CNA v3.10.3%2025-06-30Fix
CVE-2025-32463Sudo inclusion of functionality from untrusted control sphere7.8NVD v3.155.5%2025-06-30KEVExploit codeFix
CVE-2025-32462sudo incorrect authorization8.8NVD v3.14.5%2025-06-30Exploit codeFix
CVE-2025-26074Conductor vulnerable to OS command injection through unrestricted access to Java classes9.8CISA ADP v3.10.7%2025-06-30Fix
CVE-2025-6932D-Link DCS-7517 Qlync Password Generation httpd g_F_n_GenPassForQlync hard-coded password6.3CNA v4.01.3%2025-06-30
CVE-2025-6931D-Link DCS-6517/DCS-7517 Root Password Generation httpd generate_pass_from_mac entropy7.4v3.12.2%2025-06-30
CVE-2025-6930PHPGurukul Zoo Management System manage-foreigners-ticket.php SQL injection8.8v3.10.4%2025-06-30
CVE-2025-6929PHPGurukul Zoo Management System view-normal-ticket.php SQL injection8.8v3.10.4%2025-06-30
CVE-2025-6925Dromara RuoYi-Vue-Plus Mail MailController.java path traversal9.1v3.11.1%2025-06-30
CVE-2025-6917code-projects Online Hotel Booking registration.php SQL injection9.8v3.10.5%2025-06-30
CVE-2025-6916TOTOLINK T6 formLoginAuth.htm Form_Login missing authentication8.7CNA v4.00.9%2025-06-30Exploit code
CVE-2025-6915PHPGurukul Student Record System register.php SQL injection8.8v3.10.4%2025-06-30
CVE-2025-6914PHPGurukul Student Record System edit-student.php SQL injection8.8v3.10.4%2025-06-30
CVE-2025-6913PHPGurukul Student Record System admin-profile.php SQL injection8.8v3.10.4%2025-06-30
CVE-2025-6912PHPGurukul Student Record System manage-students.php SQL injection8.8v3.10.4%2025-06-30
CVE-2025-6911PHPGurukul Student Record System manage-subjects.php SQL injection8.8v3.10.4%2025-06-30
CVE-2025-6910PHPGurukul Student Record System session.php SQL injection8.8v3.10.4%2025-06-30
CVE-2025-6909PHPGurukul Old Age Home Management System add-scdetails.php SQL injection8.8v3.10.4%2025-06-30
CVE-2025-6908PHPGurukul Old Age Home Management System edit-services.php SQL injection8.8v3.10.4%2025-06-30
CVE-2025-6907code-projects Car Rental System book_car.php SQL injection9.8v3.10.5%2025-06-30Exploit code
CVE-2025-6906code-projects Car Rental System login.php SQL injection9.8v3.10.5%2025-06-30
CVE-2025-6905code-projects Car Rental System signup.php SQL injection9.8v3.10.5%2025-06-30
CVE-2025-6904code-projects Car Rental System add_cars.php SQL injection9.8v3.10.5%2025-06-30
CVE-2025-6903code-projects Car Rental System approve.php SQL injection9.8v3.10.5%2025-06-30
CVE-2025-6902code-projects Inventory Management System editUser.php SQL injection9.8v3.10.5%2025-06-30
CVE-2025-6901code-projects Inventory Management System removeUser.php SQL injection9.8v3.10.5%2025-06-30
CVE-2025-6900code-projects Library System add-book.php unrestricted upload9.8v3.10.4%2025-06-30
CVE-2025-6899D-Link DI-7300G+/DI-8200G msp_info.htm os command injection8.8v3.14.7%2025-06-30Emerging Threats
CVE-2025-6898D-Link DI-7300G+ in proxy_client.asp os command injection8.8v3.116.5%2025-06-30
CVE-2025-6897D-Link DI-7300G+ httpd_debug.asp os command injection9.8v3.12.6%2025-06-30
CVE-2025-6896D-Link DI-7300G+ wget_test.asp os command injection8.8v3.14.2%2025-06-30
CVE-2025-6891code-projects Inventory Management System createUser.php SQL injection9.8v3.10.5%2025-06-30
CVE-2025-6890code-projects Movie Ticketing System ticketConfirmation.php SQL injection8.8v3.10.4%2025-06-30
CVE-2025-6889code-projects Movie Ticketing System logIn.php SQL injection9.8v3.10.5%2025-06-30
CVE-2025-6888PHPGurukul Teachers Record Management System changeimage.php SQL injection9.8v3.10.5%2025-06-30
CVE-2025-6887Tenda AC5 SetSysTimeCfg stack-based overflow8.7CNA v4.01.0%2025-06-30
CVE-2025-6886Tenda AC5 openSchedWifi stack-based overflow8.7CNA v4.01.0%2025-06-30
CVE-2025-6885PHPGurukul Teachers Record Management System edit-teacher-detail.php SQL injection9.8v3.10.5%2025-06-30
CVE-2025-6884code-projects Staff Audit System search_index.php SQL injection8.8v3.10.4%2025-06-30
CVE-2025-6883code-projects Staff Audit System update_index.php SQL injection5.3CNA v4.00.3%2025-06-30
CVE-2025-6882D-Link DIR-513 formSetWanPPTP buffer overflow8.7CNA v4.00.8%2025-06-30
CVE-2025-6881D-Link DI-8100 jhttpd pppoe_base.asp buffer overflow8.7CNA v4.01.0%2025-06-30
CVE-2025-6880SourceCodester Best Salon Management System edit-tax.php SQL injection8.8v3.10.5%2025-06-30
CVE-2025-6879SourceCodester Best Salon Management System add-tax.php SQL injection8.8v3.10.5%2025-06-30
CVE-2025-6878SourceCodester Best Salon Management System search-appointment.php SQL injection8.8v3.10.4%2025-06-30
CVE-2025-6877SourceCodester Best Salon Management System edit-category.php SQL injection8.8v3.10.5%2025-06-30
CVE-2025-6554Google Chromium V8 type confusion8.1CISA ADP v3.114.1%2025-06-30KEVExploit codeFix
CVE-2025-5730Easy Contact Form Lite WordPress plugin Contributor+ stored XSS4.3CISA ADP v3.10.2%2025-06-30Fix
CVE-2025-4407ABB Lite Panel Pro application does not invalidate session after password reset6.8CNA v4.00.2%2025-06-30Fix
CVE-2025-3745WP Lightbox 2 WordPress plugin unauthenticated stored XSS6.3CISA ADP v3.10.3%2025-06-30Fix
CVE-2025-2895IBM Cloud Pak System HTML injection5.4CNA v3.10.3%2025-06-30Fix
CVE-2025-0634Samsung Open Source rlottie use-after-free5.1CNA v4.00.5%2025-06-30Fix
CVE-2025-24292Ubiquiti UniFi Network Application improper authentication6.8CNA v3.00.4%2025-06-29Fix
CVE-2025-24290Ubiquiti UISP Application SQL injection9.9CNA v3.00.3%2025-06-29Fix
CVE-2025-24289Ubiquiti UCRM Client Signup Plugin cross-site request forgery7.5CNA v3.00.2%2025-06-29Fix
CVE-2025-6876SourceCodester Best Salon Management System add-category.php SQL injection8.8v3.10.5%2025-06-29
CVE-2025-6875SourceCodester Best Salon Management System edit-subscription.php SQL injection8.8v3.10.5%2025-06-29
CVE-2025-6874SourceCodester Best Salon Management System add_subscribe.php SQL injection8.8v3.10.5%2025-06-29
CVE-2025-6873SourceCodester Simple Company Website Users.php unrestricted upload7.2v3.10.5%2025-06-29
CVE-2025-6872SourceCodester Simple Company Website SystemSettings.php unrestricted upload7.2v3.10.5%2025-06-29
CVE-2025-6871SourceCodester Simple Company Website Login.php SQL injection9.8v3.10.6%2025-06-29
CVE-2025-6870SourceCodester Simple Company Website Content.php unrestricted upload5.1CNA v4.00.4%2025-06-29
CVE-2025-6869SourceCodester Simple Company Website manage.php SQL injection7.2v3.10.5%2025-06-29
CVE-2025-6868SourceCodester Simple Company Website manage.php SQL injection7.2v3.10.4%2025-06-29
CVE-2025-6867SourceCodester Simple Company Website manage.php SQL injection7.2v3.10.4%2025-06-29
CVE-2025-6866code-projects Simple Forum forum_downloadfile.php path traversal5.3CNA v4.00.6%2025-06-29
CVE-2025-6865DaiCuo index cross-site request forgery5.3CNA v4.00.3%2025-06-29
CVE-2025-6864SeaCMS admin_type.php cross-site request forgery5.3CNA v4.00.3%2025-06-29
CVE-2025-6863PHPGurukul Local Services Search Engine Management System edit-category-detail.php SQL injection9.8v3.10.5%2025-06-29
CVE-2025-6862SourceCodester Best Salon Management System edit_plan.php SQL injection8.8v3.10.5%2025-06-29
CVE-2025-6861SourceCodester Best Salon Management System add_plan.php SQL injection8.8v3.10.5%2025-06-29
CVE-2025-6860SourceCodester Best Salon Management System staff_commision.php SQL injection8.8NVD v3.10.5%2025-06-29
CVE-2025-6859SourceCodester Best Salon Management System pro_sale.php SQL injection8.8v3.10.5%2025-06-29
CVE-2025-6858HDF5 H5Centry.c H5C__flush_single_entry null pointer dereference5.5v3.10.2%2025-06-29Fix
CVE-2025-6857HDF5 H5Gnode.c H5G__node_cmp3 stack-based overflow7.8v3.10.3%2025-06-29Fix
CVE-2025-6856HDF5 H5FL.c H5FL__reg_gc_list use-after-free7.8v3.10.2%2025-06-29Fix
CVE-2025-6855chatchat-space Langchain-Chatchat file path traversal8.8v3.10.7%2025-06-29
CVE-2025-6854chatchat-space Langchain-Chatchat files path traversal4.3v3.10.6%2025-06-29
CVE-2025-6853chatchat-space Langchain-Chatchat Backend upload_temp_docs path traversal9.8v3.10.6%2025-06-29
CVE-2025-6850code-projects Simple Forum forum1.php SQL injection8.8v3.10.4%2025-06-29
CVE-2025-6849code-projects Simple Forum forum_edit1.php cross-site scripting4.1v3.10.3%2025-06-29
CVE-2025-6848code-projects Simple Forum forum1.php unrestricted upload8.8v3.10.4%2025-06-29
CVE-2025-6847code-projects Simple Forum forum_edit.php SQL injection9.8v3.10.4%2025-06-29
CVE-2025-6846code-projects Simple Forum forum_viewfile.php SQL injection6.9CNA v4.00.4%2025-06-29
CVE-2025-6845code-projects Simple Forum register1.php SQL injection9.8v3.10.5%2025-06-29
CVE-2025-6844code-projects Simple Forum signin.php SQL injection9.8v3.10.5%2025-06-29
CVE-2025-6843code-projects Simple Photo Gallery upload-photo.php unrestricted upload9.8v3.10.6%2025-06-29
CVE-2025-6842code-projects Product Inventory System edit_user.php SQL injection7.2v3.10.4%2025-06-29
CVE-2025-6841code-projects Product Inventory System edit_product.php SQL injection7.2v3.10.4%2025-06-29
CVE-2025-6840code-projects Product Inventory System Login index.php SQL injection9.8v3.10.5%2025-06-29
CVE-2025-6839Conjure Position Department Service Quality Evaluation System head.php eval backdoor5.3CNA v4.00.3%2025-06-29
CVE-2025-6837code-projects Library System profile.php unrestricted upload9.8v3.10.4%2025-06-29
CVE-2025-6836code-projects Library System profile.php SQL injection9.8v3.10.5%2025-06-29
CVE-2025-6835code-projects Library System student-issue-book.php SQL injection9.8v3.10.5%2025-06-29
CVE-2025-6834code-projects Inventory Management System editPayment.php SQL injection9.8v3.10.5%2025-06-29
CVE-2025-6462EZ SQL Reports Shortcode Widget and DB Backup WordPress plugin stored cross-site scripting5.4v3.10.2%2025-06-29Fix
CVE-2025-5878ESAPI esapi-java-legacy SQL injection Defense Encoder.encodeForSQL special element6.9CNA v4.00.5%2025-06-29Exploit codeFix
CVE-2025-53393Akka akka-cluster-metrics uses Java serialization for cluster metrics6.0CNA v3.10.2%2025-06-28
CVE-2025-53392Netgate pfSense absolute path traversal6.5v3.11.8%2025-06-28Exploit code
CVE-2025-53391Debian zulucrypt incorrect authorization9.3CNA v3.10.2%2025-06-28Fix
CVE-2025-38086Linux kernel ch9200 uninitialized resource use5.5v3.10.2%2025-06-28Fix
CVE-2025-38085Linux kernel hugetlb page table unsharing race condition7.8CNA v3.10.1%2025-06-28Fix
CVE-2025-38084Linux kernel hugetlb page table unsharing race condition7.8CNA v3.10.2%2025-06-28Fix
CVE-2025-36027IBM Datacap clickjacking5.4CNA v3.10.2%2025-06-28Fix
CVE-2025-36026IBM Datacap information disclosure4.3CNA v3.10.2%2025-06-28Fix
CVE-2025-32897Apache Seata (incubating): Deserialization of untrusted data in Apache Seata Server9.8CISA ADP v3.11.8%2025-06-28Fix
CVE-2025-6829aaluoxiang oa_system External Address Book outAddress SQL injection8.8v3.10.4%2025-06-28
CVE-2025-6828code-projects Inventory Management System orders.php SQL injection9.8v3.10.5%2025-06-28
CVE-2025-6827code-projects Inventory Management System editOrder.php SQL injection9.8v3.10.5%2025-06-28
CVE-2025-6826code-projects Payroll Management System ajax.php SQL injection9.8v3.10.5%2025-06-28
CVE-2025-6825TOTOLINK A702R HTTP POST request formWlSiteSurvey buffer overflow8.7CNA v4.01.0%2025-06-28
CVE-2025-6824TOTOLINK X15 HTTP POST request formParentControl buffer overflow7.5v3.11.0%2025-06-28
CVE-2025-6823code-projects Inventory Management System editProduct.php SQL injection9.8v3.10.5%2025-06-28
CVE-2025-6822code-projects Inventory Management System removeProduct.php SQL injection9.8v3.10.5%2025-06-28
CVE-2025-6821code-projects Inventory Management System createOrder.php SQL injection9.8v3.10.5%2025-06-28
CVE-2025-6820code-projects Inventory Management System createProduct.php SQL injection9.8v3.10.5%2025-06-28
CVE-2025-6819code-projects Inventory Management System removeBrand.php SQL injection9.8v3.10.5%2025-06-28
CVE-2025-6818HDF5 H5Ochunk.c H5O__chunk_protect heap-based overflow7.8v3.10.3%2025-06-28Fix
CVE-2025-6817HDF5 H5Centry.c H5C__load_entry resource consumption4.8CNA v4.00.2%2025-06-28Fix
CVE-2025-6816HDF5 H5Ofsinfo.c H5O__fsinfo_encode heap-based overflow4.8CNA v4.00.3%2025-06-28Fix
CVE-2025-6755Game Users Share Buttons WordPress plugin arbitrary file deletion8.8CNA v3.10.9%2025-06-28
CVE-2025-6381BeeTeam368 Extensions WordPress plugin directory traversal to arbitrary file deletion8.8CNA v3.10.7%2025-06-28Fix
CVE-2025-6379BeeTeam368 Extensions Pro WordPress plugin directory traversal to arbitrary file deletion8.8CNA v3.10.7%2025-06-28Fix
CVE-2025-6350WP VR 360 Panorama and Free Virtual Tour Builder For WordPress plugin stored cross-site scripting5.4v3.10.2%2025-06-28Fix
CVE-2025-6252Qi Addons For Elementor WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.2%2025-06-28Fix
CVE-2025-5937MicroPayments WordPress plugin cross-site request forgery4.3CNA v3.10.2%2025-06-28Fix
CVE-2025-5304PT Project Notebooks - missing authorization to unauthenticated privilege escalation9.8CNA v3.10.7%2025-06-28Exploit codeFix
CVE-2025-1991IBM Informix Dynamic Server denial of service7.5CNA v3.10.4%2025-06-28Fix
CVE-2025-53339Devnex Addons For Elementor WordPress plugin local file inclusion7.5CNA v3.10.6%2025-06-27
CVE-2025-53338re.place WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-06-27
CVE-2025-53336My Resume Builder WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-27
CVE-2025-53332Track Everything WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-06-27
CVE-2025-53331RSS Digest WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-06-27
CVE-2025-53329Społecznościowa 6 PL 2013 WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.2%2025-06-27
CVE-2025-53327Aioseo Multibyte Descriptions WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-06-27
CVE-2025-53325Beauty Contact Popup Form WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-06-27
CVE-2025-53323Pre-Publish Post Checklist WordPress plugin broken access control4.3CNA v3.10.2%2025-06-27
CVE-2025-53322Accept Authorize.NET Payments Using Contact Form 7 WordPress plugin sensitive data exposure5.3CNA v3.10.3%2025-06-27Fix
CVE-2025-53321Raise The Money WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-27
CVE-2025-53320WP Enhanced Free Downloads EDD cross-site scripting6.5CNA v3.10.2%2025-06-27
CVE-2025-53318WP DB Booster WordPress plugin broken access control5.4CNA v3.10.3%2025-06-27
CVE-2025-53317WPShapere Lite WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-06-27
CVE-2025-53315Relocate Upload WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-06-27
CVE-2025-53314WP Optimizer WordPress plugin cross-site request forgery (CSRF)9.6CNA v3.10.2%2025-06-27
CVE-2025-53313Twitch TV Embed Suite WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-06-27
CVE-2025-53312OnionBuzz WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-06-27
CVE-2025-53311Navayan Subscribe WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-06-27
CVE-2025-53310HidePost WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-06-27
CVE-2025-53309Accept Stripe Payments Using Contact Form 7 WordPress plugin sensitive data exposure5.3CNA v3.10.3%2025-06-27Fix
CVE-2025-53308Image Slider With Description WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-06-27
CVE-2025-53306WP Forum Server WordPress plugin SQL injection7.6CNA v3.10.3%2025-06-27
CVE-2025-53305WP Forum Server WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-06-27
CVE-2025-53304Contact Form 7: Hide Success Message WordPress plugin broken access control5.3CNA v3.10.3%2025-06-27
CVE-2025-53301Theme Junkie Team Content WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-27
CVE-2025-53300Podcast Feed Player Widget and Shortcode WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-27
CVE-2025-53298Plugin Inspector WordPress plugin arbitrary file download4.9CNA v3.10.5%2025-06-27
CVE-2025-53296EC Stars Rating WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-06-27
CVE-2025-53295iCount Payment Gateway WordPress plugin broken access control5.3CNA v3.10.3%2025-06-27Fix
CVE-2025-53294Smart Agenda WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-27Fix
CVE-2025-53293Dashboard Widget Sidebar WordPress plugin broken access control4.3CNA v3.10.3%2025-06-27
CVE-2025-53292WP DataTable WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-27
CVE-2025-53290WP Visual Sitemap WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-27
CVE-2025-53288PlatiOnline Payments WordPress plugin broken access control4.3CNA v3.10.3%2025-06-27Fix
CVE-2025-53287Quick Favicon WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-06-27
CVE-2025-53285The Website Flip Add and Replace Affiliate Links for Amazon cross-site scripting5.9CNA v3.10.2%2025-06-27
CVE-2025-53284CMS Blocks WordPress plugin broken access control6.5CNA v3.10.4%2025-06-27
CVE-2025-53282Thumbnail Editor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-27
CVE-2025-53281WPB Category Slider for WooCommerce WordPress plugin local file inclusion7.5CNA v3.10.7%2025-06-27
CVE-2025-53280Football Pool WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-27Fix
CVE-2025-53279Popup addon for Ninja Forms WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-27Fix
CVE-2025-53278WP AdCenter WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-27Fix
CVE-2025-53277IS-theme-companion WordPress plugin cross-site request forgery (CSRF)8.8CNA v3.10.2%2025-06-27
CVE-2025-53276Omnipress WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-27Fix
CVE-2025-53275Leyka WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-27
CVE-2025-53274WP Permalink Translator WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-06-27
CVE-2025-53273Slickstream WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-06-27Fix
CVE-2025-53272Image Cleanup WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-06-27
CVE-2025-53271Additional Order Filters for WooCommerce WordPress plugin cross-site request forgery to stored XSS7.1CNA v3.10.1%2025-06-27Fix
CVE-2025-53270CTA WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-06-27Fix
CVE-2025-53269My Wp Brand WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-06-27Fix
CVE-2025-53268Import external attachments WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-06-27
CVE-2025-53267Hide Admin Bar From Front End WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-06-27
CVE-2025-53266Cron Logger WordPress plugin broken access control4.3CNA v3.10.3%2025-06-27Fix
CVE-2025-53265Virusdie WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.1%2025-06-27Fix
CVE-2025-53264ONet Regenerate Thumbnails WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-06-27
CVE-2025-53263Address Autocomplete via Google for Gravity Forms WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.2%2025-06-27Fix
CVE-2025-53262Writesonic WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.2%2025-06-27Fix
CVE-2025-53261WP YouTube Live WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-06-27Fix
CVE-2025-53260File Manager Plugin For Wordpress arbitrary file upload9.1CNA v3.10.4%2025-06-27
CVE-2025-53259Hotel Booking WordPress plugin local file inclusion7.5CNA v3.10.7%2025-06-27Fix
CVE-2025-53258Hover Effects WordPress plugin SQL injection7.6CNA v3.10.4%2025-06-27Fix
CVE-2025-53257Gmedia Photo Gallery WordPress plugin local file inclusion7.5CNA v3.10.7%2025-06-27Fix
CVE-2025-53256YaySMTP WordPress plugin SQL injection7.6CNA v3.10.4%2025-06-27Fix
CVE-2025-53255HurryTimer WordPress plugin broken access control5.3CNA v3.10.3%2025-06-27Fix
CVE-2025-53254Cyrlitera WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-06-27Fix
CVE-2025-53253WP Edit WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-06-27
CVE-2025-53211Audio Editor and Recorder WordPress plugin sensitive data exposure5.3CNA v3.10.4%2025-06-27Fix
CVE-2025-53206HT Mega Absolute Addons for WPBakery Page Builder WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-27Fix
CVE-2025-53203WooCommerce PDF Invoice Builder WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-06-27Fix
CVE-2025-53202Responsive Blocks WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-27Fix
CVE-2025-53200ChatBot WordPress plugin broken access control4.3CNA v3.10.3%2025-06-27Fix
CVE-2025-53199HT Slider For Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-27Fix
CVE-2025-53197Cookiebot WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-06-27Fix
CVE-2025-53193Burst Statistics WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-06-27Fix
CVE-2025-53098RooCodeInc Roo-Code roo Code vulnerable to potential remote code execution8.1CNA v3.10.7%2025-06-27Fix
CVE-2025-53097RooCodeInc Roo-Code roo Code extension vulnerable to potential information leakage via JSON Schema5.9CNA v3.10.5%2025-06-27Fix
CVE-2025-53094ESPAsyncWebServer Vulnerable to CRLF injection in AsyncWebHeader.cpp8.7CNA v4.00.4%2025-06-27
CVE-2025-53093StarCitizenTools mediawiki-extensions-TabberNeue TabberNeue vulnerable to stored XSS8.6CNA v3.10.4%2025-06-27Fix
CVE-2025-53091WeGIA has Unauthenticated Time-based blind SQL injection in almox parameter10.0CNA v4.00.5%2025-06-27
CVE-2025-53018Lychee has server-side request forgery in Photo::fromUrl API3.0CNA v3.10.2%2025-06-27Fix
CVE-2025-52993NixOS Nix A race condition5.6CNA v3.10.1%2025-06-27Fix
CVE-2025-52992NixOS Nix incorrect permission assignment3.2CNA v3.10.2%2025-06-27Fix
CVE-2025-52991NixOS Nix incorrect default permissions3.2CNA v3.10.2%2025-06-27Fix
CVE-2025-52834Homey WordPress theme SQL injection9.3CNA v3.10.3%2025-06-27
CVE-2025-52829DirectIQ Email Marketing WordPress plugin SQL injection9.3CNA v3.10.3%2025-06-27
CVE-2025-52827Nuss WordPress theme PHP object injection8.8CNA v3.10.4%2025-06-27
CVE-2025-52826Sala WordPress theme PHP object injection8.8CNA v3.10.4%2025-06-27
CVE-2025-52824Mobile DJ Manager WordPress plugin privilege escalation8.8CNA v3.10.3%2025-06-27
CVE-2025-52818Trusty Whistleblowing WordPress plugin broken access control8.2CNA v3.10.3%2025-06-27Fix
CVE-2025-52817Abandoned Contact Form 7 WordPress plugin broken access control8.2CNA v3.10.3%2025-06-27Fix
CVE-2025-52816Zita WordPress theme local file inclusion9.8v3.10.4%2025-06-27Fix
CVE-2025-52815CityGov WordPress theme local file inclusion8.1CNA v3.10.6%2025-06-27
CVE-2025-52814BRW WordPress plugin local file inclusion8.1CNA v3.10.6%2025-06-27Fix
CVE-2025-52812Domnoo WordPress theme local file inclusion8.1CNA v3.10.6%2025-06-27Fix
CVE-2025-52811Davenport - Versatile Blog and Magazine WordPress plugin local file inclusion8.1CNA v3.10.6%2025-06-27
CVE-2025-52810Katerio - Magazine WordPress theme local file inclusion8.1CNA v3.10.6%2025-06-27
CVE-2025-52809National Weather Service Alerts WordPress plugin local file inclusion8.1CNA v3.10.6%2025-06-27
CVE-2025-52808RealtyElite WordPress theme local file inclusion8.1CNA v3.10.6%2025-06-27
CVE-2025-52799LMS WordPress theme reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-06-27Fix
CVE-2025-52778xili-dictionary WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-06-27
CVE-2025-52774Infility Global WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-06-27
CVE-2025-52729Diza WordPress theme local file inclusion8.1CNA v3.10.6%2025-06-27Fix
CVE-2025-52727CSS3 Vertical Web Pricing Tables WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-06-27Fix
CVE-2025-52726CouponXxL Custom Post Types WordPress plugin privilege escalation8.6CNA v3.10.3%2025-06-27Fix
CVE-2025-52725CouponXxL WordPress theme PHP object injection9.8CNA v3.10.5%2025-06-27Fix
CVE-2025-52724Amwerk WordPress theme PHP object injection9.8CNA v3.10.4%2025-06-27Fix
CVE-2025-52723Networker WordPress theme local file inclusion8.1CNA v3.10.6%2025-06-27Fix
CVE-2025-52722Classiera WordPress theme SQL injection9.3CNA v3.10.3%2025-06-27Fix
CVE-2025-52717LifterLMS WordPress plugin SQL injection9.8v3.10.3%2025-06-27Fix
CVE-2025-52553authentik has Insufficient Session verification for Remote Access Control endpoint access5.5CNA v4.00.5%2025-06-27Fix
CVE-2025-52207MikoPBX relative path traversal9.9CNA v3.11.6%2025-06-27Nuclei
CVE-2025-50528Tenda AC6 fromNatStaticSetting function buffer overflow7.3CISA ADP v3.10.4%2025-06-27
CVE-2025-50370Anujk305 Medical Card Generation System cross-site request forgery6.5CISA ADP v3.10.2%2025-06-27
CVE-2025-50369Anujk305 Medical Card Generation System Manage Card functionality cross-site request forgery6.5CISA ADP v3.10.2%2025-06-27
CVE-2025-50367Anujk305 Medical Card Generation System Contact page of the Phpgurukul cross-site scripting6.1CISA ADP v3.10.2%2025-06-27
CVE-2025-50052Flexo Counter WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-06-27
CVE-2025-49886Zikzag Core WordPress plugin local file inclusion8.1CNA v3.10.6%2025-06-27Fix
CVE-2025-49885Drag and Drop Multiple File Upload (Pro) - WooCommerce WordPress plugin arbitrary file upload10.0CNA v3.10.4%2025-06-27Fix
CVE-2025-49883Greenmart WordPress theme local file inclusion8.1CNA v3.10.7%2025-06-27Fix
CVE-2025-49448FW Food Menu WordPress plugin arbitrary file deletion8.6CNA v3.10.5%2025-06-27
CVE-2025-49423Bulk YouTube Post Creator WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-06-27
CVE-2025-49416FW Gallery WordPress plugin local file inclusion8.1CNA v3.10.7%2025-06-27
CVE-2025-49321Eventin WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.3%2025-06-27Fix
CVE-2025-49290Off-Canvas Sidebars and Menus (Slidebars) WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-06-27Fix
CVE-2025-47824Flock Safety License Plate Reader cleartext storage of sensitive information2.4v3.10.1%2025-06-27Fix
CVE-2025-47823Flock Safety License Plate Reader hard-coded password4.6v3.10.2%2025-06-27Fix
CVE-2025-47822Flock Safety License Plate Reader improper access control6.8v3.10.2%2025-06-27Fix
CVE-2025-47821Flock Safety Gunshot Detection devices hard-coded password4.6v3.10.2%2025-06-27Fix
CVE-2025-47820Flock Safety Gunshot Detection devices cleartext storage of sensitive information2.4v3.10.1%2025-06-27Fix
CVE-2025-47819Flock Safety Gunshot Detection devices improper access control6.8v3.10.2%2025-06-27Fix
CVE-2025-47818Flock Safety Gunshot Detection devices hard-coded password4.6v3.10.2%2025-06-27Fix
CVE-2025-47654FormLift for Infusionsoft Web Forms WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-06-27Fix
CVE-2025-47574School Management System WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-06-27
CVE-2025-46708GPU Ddk Guest VM can delay the FW and GPU from processing workloads from other VMs4.3CISA ADP v3.10.2%2025-06-27Fix
CVE-2025-46707GPU Ddk Guest VM can override its own FW VZ connection state after the FW has close it5.2CISA ADP v3.10.1%2025-06-27Fix
CVE-2025-46416NixOS Nix build sandbox isolation privilege escalation2.9CNA v3.10.2%2025-06-27Fix
CVE-2025-46415NixOS Nix A race condition3.2CNA v3.10.1%2025-06-27Fix
CVE-2025-45851Hikvision DS-2CD1321-I ISAPI Security challenge endpoint denial of service7.5CISA ADP v3.10.6%2025-06-27
CVE-2025-45737NetEase Neacsafe64 improper privilege management6.5CISA ADP v3.10.3%2025-06-27Exploit code
CVE-2025-45729D-Link Dir-823 Pro improper permissions6.3CISA ADP v3.10.4%2025-06-27
CVE-2025-44559Realtek RTL8762E BLE SDK Bluetooth Low Energy stack resource exhaustion6.5CISA ADP v3.10.2%2025-06-27
CVE-2025-44557Cypress PSoC4 Bluetooth Low Energy stack authentication bypass8.1CISA ADP v3.10.3%2025-06-27
CVE-2025-44163raspap-webgui has a directory traversal6.3CISA ADP v3.10.6%2025-06-27Fix
CVE-2025-41418TB-eye XRN-410SN/TE multiple versions buffer overflow6.9CNA v4.00.4%2025-06-27
CVE-2025-40910Net::IP::LPM improper input validation6.5CISA ADP v3.10.3%2025-06-27Fix
CVE-2025-39488MagOne WordPress theme reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-06-27Fix
CVE-2025-39478Smart Notification WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-06-27
CVE-2025-39474Amely WordPress theme SQL injection9.8v3.10.4%2025-06-27Fix
CVE-2025-36595Dell Unisphere for PowerMax vApp static code injection7.2CNA v3.10.7%2025-06-27Fix
CVE-2025-36529TB-eye XRN-410SN/TE multiple versions OS command injection8.6CNA v4.01.2%2025-06-27
CVE-2025-32298CTUsers WordPress plugin local file inclusion7.5CNA v3.10.6%2025-06-27
CVE-2025-32281DarkMySite WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-06-27Fix
CVE-2025-31428HYDRO WordPress theme reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-06-27
CVE-2025-31067Seven Stars WordPress theme cross-site scripting (XSS)7.1CNA v3.10.3%2025-06-27
CVE-2025-30992Puca WordPress theme local file inclusion8.1CNA v3.10.7%2025-06-27Fix
CVE-2025-30972Woocommerce Line Notify WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-06-27
CVE-2025-28998SERPed.net WordPress plugin local file inclusion8.1CNA v3.10.7%2025-06-27Fix
CVE-2025-28993Content No Cache WordPress plugin arbitrary function Call vulnerability8.6CNA v3.10.4%2025-06-27Fix
CVE-2025-28990SNS Vicky WordPress theme local file inclusion8.1CNA v3.10.7%2025-06-27
CVE-2025-28988WP Front User Submit / Front Editor WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-06-27Fix
CVE-2025-28970WP Optimize By xTraffic WordPress plugin PHP object injection9.8CNA v3.10.5%2025-06-27
CVE-2025-28960Evangelische Termine WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-06-27
CVE-2025-28956Backwp WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-06-27
CVE-2025-28947MBStore - Digital WooCommerce WordPress theme local file inclusion8.1CNA v3.10.7%2025-06-27
CVE-2025-28946PrintXtore WordPress theme local file inclusion8.1CNA v3.10.7%2025-06-27Fix
CVE-2025-27361Photo Express for Google WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-06-27
CVE-2025-25173FastBook WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-06-27
CVE-2025-25171WP SmartPay WordPress plugin account takeover8.8CNA v3.10.5%2025-06-27Fix
CVE-2025-24774WPCRM - CRM for Contact form CF7 and WooCommerce WordPress plugin reflected cross-site scripting7.1CNA v3.10.3%2025-06-27
CVE-2025-24769Zenny WordPress theme local file inclusion8.1CNA v3.10.7%2025-06-27
CVE-2025-24765Image Shadow WordPress plugin arbitrary file deletion7.7CNA v3.10.5%2025-06-27
CVE-2025-24760Sofass WordPress theme local file inclusion8.1CNA v3.10.7%2025-06-27
CVE-2025-23973SpecFit-Virtual Try On Woocommerce WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-06-27Fix
CVE-2025-23967GG Bought Together for WooCommerce WordPress plugin SQL injection9.3CNA v3.10.4%2025-06-27
CVE-2025-6778code-projects Food Distributor Site save_settings.php cross-site scripting4.8v3.10.4%2025-06-27
CVE-2025-6777code-projects Food Distributor Site process_login.php SQL injection9.8v3.10.6%2025-06-27
CVE-2025-6776xiaoyunjie openvpn-cms-flask file upload controller.py upload path traversal9.8v3.10.7%2025-06-27Fix
CVE-2025-6775xiaoyunjie openvpn-cms-flask User Creation endpoint openvpn.py create_user command injection9.8v3.13.1%2025-06-27Fix
CVE-2025-6774gooaclok819 sublinkX template.go AddTemp path traversal5.3CNA v4.00.4%2025-06-27Fix
CVE-2025-6773HKUDS LightRAG file upload document_routes.py upload_to_input_dir path traversal4.8CNA v4.00.2%2025-06-27Fix
CVE-2025-6772eosphoros-ai db-gpt import import_flow path traversal7.5v3.10.6%2025-06-27
CVE-2025-6768sfturing hosp_order HospitalServiceImpl.java findAllHosByCondition SQL injection5.3CNA v4.00.3%2025-06-27
CVE-2025-6767sfturing hosp_order DoctorServiceImpl.java findDoctorByCondition SQL injection5.3CNA v4.00.3%2025-06-27
CVE-2025-6766sfturing hosp_order OfficeServiceImpl.java getOfficeName SQL injection8.8v3.10.4%2025-06-27
CVE-2025-6765Intelbras InControl HTTP PUT request operador permission8.8v3.10.4%2025-06-27
CVE-2025-6763Comet System H3531 Web-based Management setupA.cfg missing authentication9.2CNA v4.01.4%2025-06-27
CVE-2025-6762diyhi bbs HTTP header login getUrl server-side request forgery7.2v3.10.4%2025-06-27
CVE-2025-6761Kingdee Cloud-Starry-Sky Enterprise Edition Freemarker engine server-side template injection6.9CNA v4.00.4%2025-06-27Fix
CVE-2025-6753huija bicycleSharingServer AdminController.java selectAdminByNameLike SQL injection5.3CNA v4.00.3%2025-06-27
CVE-2025-6752Linksys WRT1900ACS stack-based buffer overflow8.7CNA v4.01.2%2025-06-27
CVE-2025-6751Linksys E8450 HTTP POST request portal.cgi set_device_language buffer overflow8.7CNA v4.00.8%2025-06-27
CVE-2025-6750HDF5 H5Omtime.c H5O__mtime_new_encode heap-based overflow4.8CNA v4.00.2%2025-06-27Fix
CVE-2025-6749huija bicycleSharingServer AdminController.java searchAdminMessageShow SQL injection5.3CNA v4.00.3%2025-06-27
CVE-2025-6748Bharti Airtel Thanks App files cleartext storage in a file or on disk2.4CNA v4.00.1%2025-06-27
CVE-2025-6738huija bicycleSharingServer UserServiceImpl.java userDao.selectUserByUserNameLike SQL injection5.3CNA v4.00.3%2025-06-27
CVE-2025-6736juzaweb CMS Add New Themes page install improper authorization8.8v3.10.5%2025-06-27
CVE-2025-6735juzaweb CMS Import page imports improper authorization8.8v3.10.5%2025-06-27
CVE-2025-6705Eclipse Open VSX Registry improper isolation7.6CNA v4.00.3%2025-06-27Fix
CVE-2025-6689FL3R Accessibility Suite WordPress plugin stored cross-site scripting5.4v3.10.2%2025-06-27
CVE-2025-6688Simple Payment - authentication bypass to Admin9.8CNA v3.10.5%2025-06-27Fix
CVE-2025-6550The Pack Elementor addon WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.3%2025-06-27Fix
CVE-2025-6522TrendMakers Sight Bulb Pro command injection5.2CNA v4.00.2%2025-06-27
CVE-2025-6521TrendMakers Sight Bulb Pro use of a broken or risky cryptographic algorithm6.8CNA v4.00.1%2025-06-27
CVE-2025-6488isMobile WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-06-27Fix
CVE-2025-5940Osom Blocks WordPress plugin stored cross-site scripting5.4v3.10.2%2025-06-27Fix
CVE-2025-5936VR Calendar WordPress plugin cross-site request forgery to Calendar Sync4.3CNA v3.10.1%2025-06-27
CVE-2025-5526BuddyPress Docs WordPress plugin Subscriber+ arbitrary Document Read/Update4.3CISA ADP v3.10.3%2025-06-27Fix
CVE-2025-5398Ninja Forms WordPress plugin authenticated (Contributor+) stored cross-site scripting via CSTI5.4v3.10.2%2025-06-27Fix
CVE-2025-5310Dover Fueling Solutions ProGauge MagLink LX Consoles missing authentication for critical function9.3CNA v4.00.8%2025-06-27Fix
CVE-2025-5306Pandora FMS command injection in Netflow path7.0CNA v4.035.7%2025-06-27MetasploitExploit codeFix
CVE-2025-5194WP Map Block by aBlocks WordPress plugin Contributor+ stored XSS via Marker4.8CISA ADP v3.10.2%2025-06-27Fix
CVE-2025-5093Responsive Lightbox and Gallery WordPress plugin Contributor+ stored XSS5.4CISA ADP v3.10.2%2025-06-27Fix
CVE-2025-5035Firelight Lightbox WordPress plugin Contributor+ stored XSS5.4CISA ADP v3.10.2%2025-06-27Fix
CVE-2025-4587A/B Testing for WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-06-27
CVE-2025-2940Ninja Tables Easy Data Table Builder WordPress plugin unauthenticated server-side request forgery7.2CNA v3.10.3%2025-06-27Fix
CVE-2025-53122SQLi in OpenNMS Horizon and Meridian6.9CNA v4.00.2%2025-06-26
CVE-2025-53121Stored XSS in multiple.8files in opennms/opennms6.9CNA v4.00.2%2025-06-26Fix
CVE-2025-53013Himmelblau offline auth permits authentication with invalid Hello PIN5.2CNA v3.10.2%2025-06-26Fix
CVE-2025-53007arduino-esp32 vulnerable to CRLF injection in WebServer.cpp8.9CNA v4.00.5%2025-06-26Fix
CVE-2025-53002LLaMA-Factory remote code execution (RCE)8.3CNA v3.11.2%2025-06-26Fix
CVE-2025-52904filebrowser File Browser: Command execution not Limited to Scope8.0CNA v3.11.1%2025-06-26Fix
CVE-2025-52903filebrowser File Browser allows Execution of Shell commands that can Spawn other commands8.0CNA v3.11.2%2025-06-26Fix
CVE-2025-52902filebrowser file Browser has stored cross-site scripting7.6CNA v3.10.3%2025-06-26Fix
CVE-2025-52900filebrowser file Browser has insecure file permissions5.5CNA v3.10.2%2025-06-26Fix
CVE-2025-52887cpp-httplib has unlimited number of HTTP header fields, which causes memory leak7.5CNA v3.10.5%2025-06-26
CVE-2025-52573Command injection in MCP Server ios-simulator-mcp6.0CNA v3.10.6%2025-06-26Fix
CVE-2025-52555CephFS permission escalation vulnerability in Ceph Fuse mounted FS6.5CNA v3.10.2%2025-06-26Fix
CVE-2025-52477Octo-STS vulnerable to unauthenticated SSRF with HTTP Response Reflection in OIDC Flow8.6CNA v3.10.5%2025-06-26Fix
CVE-2025-51672PHPGurukul Dairy Farm Shop Management System SQL injection8.0CISA ADP v3.10.4%2025-06-26
CVE-2025-51671PHPGurukul Dairy Farm Shop Management System SQL injection5.4CISA ADP v3.10.3%2025-06-26
CVE-2025-50350PHPGurukul Pre-School Enrollment System path traversal5.4CISA ADP v3.10.5%2025-06-26
CVE-2025-49603Northern.tech Mender Server improper access control9.1CISA ADP v3.10.4%2025-06-26
CVE-2025-49592n8n Login Flow has open redirect4.6CNA v3.10.2%2025-06-26Fix
CVE-2025-49003Dataease H2 JDBC Connection remote code execution8.9CNA v4.00.9%2025-06-26Fix
CVE-2025-48923Toc.js Moderately critical cross-site scripting SA-CONTRIB-2025-0776.1CISA ADP v3.10.2%2025-06-26Fix
CVE-2025-48922GLightbox Moderately critical cross-site scripting SA-CONTRIB-2025-0786.1CISA ADP v3.10.2%2025-06-26Fix
CVE-2025-48921Open Social Moderately critical cross-site request forgery SA-CONTRIB-2025-0798.8CISA ADP v3.10.2%2025-06-26Fix
CVE-2025-48497iroha Soft iroha Board cross-site request forgery5.1CNA v4.00.1%2025-06-26Fix
CVE-2025-44141Backdrop Cms node creation form cross-site scripting6.1CISA ADP v3.10.2%2025-06-26
CVE-2025-41404iroha Soft iroha Board forced browsing5.3CNA v4.00.2%2025-06-26Fix
CVE-2025-37101HPE OneView for VMware vCenter (OV4VC), local elevation of privilege8.7CNA v3.10.3%2025-06-26Fix
CVE-2025-36034IBM InfoSphere DataStage Flow Designer information disclosure5.3CNA v3.10.2%2025-06-26Fix
CVE-2025-34049OptiLink ONT1GEW GPON remote code execution9.4CNA v4.02.4%2025-06-26Emerging ThreatsExploit code
CVE-2025-34048D-Link DSL-2730U/2750U/2750E path traversal arbitrary file read8.7CNA v4.00.7%2025-06-26Exploit code
CVE-2025-34047Leadsec VPN path traversal arbitrary file read8.7CNA v4.00.5%2025-06-26
CVE-2025-34046Fanwei E-Office Unauthenticated file upload10.0CNA v4.00.9%2025-06-26
CVE-2025-34045WeiPHP path traversal arbitrary file read7.5v3.14.2%2025-06-26Nuclei
CVE-2025-34044WIFISKY 7-Layer Flow Control Router remote command execution9.4CNA v4.03.9%2025-06-26
CVE-2025-34043Vacron NVR remote command execution10.0CNA v4.07.5%2025-06-26
CVE-2025-34042Beward N100 IP Camera remote command execution9.4CNA v4.01.7%2025-06-26
CVE-2025-30131Iroadau FX2 unrestricted file upload9.8CISA ADP v3.10.7%2025-06-26
CVE-2025-29331MHSanaei 3x-ui improper certificate validation9.8CISA ADP v3.10.5%2025-06-26
CVE-2025-6734UTT HiPER 840G API formP2PLimitConfig sub_484E40 buffer overflow8.7CNA v4.01.0%2025-06-26
CVE-2025-6733UTT HiPER 840G API formConfigDnsFilterGlobal sub_416928 buffer overflow8.7CNA v4.01.0%2025-06-26
CVE-2025-6732UTT HiPER 840G API setSysAdm strcpy buffer overflow8.7CNA v4.01.0%2025-06-26
CVE-2025-6731yzcheng90 X-SpringBoot APK file apk uploadApk path traversal5.3CNA v4.00.4%2025-06-26
CVE-2025-6710MongoDB Server JSON parser denial of service7.5CNA v3.10.4%2025-06-26Fix
CVE-2025-6709Pre-authentication denial of service vulnerability in MongoDB Server's OIDC Authentication7.5CNA v3.10.5%2025-06-26Fix
CVE-2025-6707MongoDB Server race condition in privilege cache invalidation cycle4.2CNA v3.10.2%2025-06-26Fix
CVE-2025-6706MongoDB Server aggregation framework SBE engine use-after-free5.0CNA v3.10.3%2025-06-26Fix
CVE-2025-6703Mozilla neqo transport/fc.rs: Panic attempting to send MAX_DATA with value larger max varint2.3CNA v4.00.2%2025-06-26Fix
CVE-2025-6702linlinjava litemall post improper authorization5.3v3.10.4%2025-06-26
CVE-2025-6701Xuxueli xxl-sso XXL SSO is vulnerable to an open redirect6.1v3.10.3%2025-06-26
CVE-2025-6700Xuxueli xxl-sso login cross-site scripting6.1v3.10.5%2025-06-26
CVE-2025-6699LabRedesCefetRJ WeGIA Cadastro de Funcionário cadastro_funcionario.php cross-site scripting4.1v3.10.4%2025-06-26
CVE-2025-6698LabRedesCefetRJ WeGIA Adicionar tipo adicionar_tipoSaida.php cross-site scripting4.1v3.10.4%2025-06-26
CVE-2025-6697LabRedesCefetRJ WeGIA Adicionar tipo adicionar_tipoEntrada.php cross-site scripting4.1v3.10.4%2025-06-26
CVE-2025-6696LabRedesCefetRJ WeGIA Cadastro de Atendio Cadastro_Atendido.php cross-site scripting4.1v3.10.4%2025-06-26
CVE-2025-6695LabRedesCefetRJ WeGIA Additional Categoria adicionar_categoria.php cross-site scripting4.1v3.10.4%2025-06-26
CVE-2025-6694LabRedesCefetRJ WeGIA Adicionar Unidade adicionar_unidade.php cross-site scripting4.1v3.10.4%2025-06-26
CVE-2025-6693RT-Thread device.c sys_device_write memory corruption8.5CNA v4.00.3%2025-06-26
CVE-2025-6677Paragraphs table Moderately critical cross-site scripting SA-CONTRIB-2025-0845.4CISA ADP v3.10.2%2025-06-26Fix
CVE-2025-6676Simple XML sitemap Moderately critical cross-site scripting SA-CONTRIB-2025-0835.4CISA ADP v3.10.2%2025-06-26Fix
CVE-2025-6675Enterprise MFA TFA for Drupal Critical Access bypass SA-CONTRIB-2025-0824.8CISA ADP v3.10.2%2025-06-26Fix
CVE-2025-6674CKEditor5 Youtube Moderately critical cross-site scripting SA-CONTRIB-2025-0816.1CISA ADP v3.10.2%2025-06-26Fix
CVE-2025-6624Snyk CLI insertion of sensitive information into log file allowed in DEBUG or DEBUG/TRACE mode2.4CNA v4.00.2%2025-06-26Fix
CVE-2025-6562Hunt Electronic Hybrid DVR OS command injection8.7CNA v4.00.9%2025-06-26Fix
CVE-2025-6561Hunt Electronic Hybrid DVR Exposure of Sensitive System Information9.8CNA v3.10.5%2025-06-26Fix
CVE-2025-6546Drive Folder Embedder WordPress plugin stored cross-site scripting5.4v3.10.2%2025-06-26Fix
CVE-2025-6540web-cam WordPress plugin authenticated (Contributor+) stored cross-site scripting via slug parameter6.4CNA v3.10.3%2025-06-26Fix
CVE-2025-6538Post Rating and Review WordPress plugin stored cross-site scripting5.4v3.10.2%2025-06-26Fix
CVE-2025-6537Namasha By Mdesign WordPress plugin stored cross-site scripting5.4v3.10.2%2025-06-26Fix
CVE-2025-6383WP-PhotoNav WordPress plugin stored cross-site scripting5.4v3.10.2%2025-06-26Fix
CVE-2025-6378Responsive Food and Drink Menu WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-06-26Fix
CVE-2025-6290Tournament Bracket Generator WordPress plugin stored cross-site scripting5.4v3.10.2%2025-06-26Fix
CVE-2025-6258WP SoundSystem WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-06-26
CVE-2025-6212Ultra Addons for Contact Form 7 - unauthenticated stored cross-site scripting via Database module6.1NVD v3.10.3%2025-06-26Fix
CVE-2025-5995Canon EOS Webcam Utility Pro privilege escalation4.6CNA v4.00.2%2025-06-26Fix
CVE-2025-5966ManageEngine Exchange Reporter Plus stored XSS8.1CNA v3.11.3%2025-06-26Fix
CVE-2025-5932Homerunner WordPress plugin cross-site request forgery to settings update4.3CNA v3.10.2%2025-06-26Fix
CVE-2025-5929The Countdown WordPress plugin stored cross-site scripting5.4v3.10.2%2025-06-26Fix
CVE-2025-5846Missing authorization in GitLab2.7CNA v3.10.3%2025-06-26Fix
CVE-2025-5842Modern Design Library WordPress plugin stored cross-site scripting5.4v3.10.3%2025-06-26Fix
CVE-2025-5813Amazon Products to WooCommerce WordPress plugin unauthorized access5.3CNA v3.10.3%2025-06-26
CVE-2025-5812VG WORT METIS WordPress plugin missing authorization authenticated limited settings update4.3CNA v3.10.3%2025-06-26Fix
CVE-2025-5731Infinispan: Credential leakage in Infinispan cli5.5CNA v3.10.2%2025-06-26Fix
CVE-2025-5682Klaro Cookie and Consent Management Moderately critical cross-site scripting SA-CONTRIB-2025-0804.3CISA ADP v3.10.3%2025-06-26Fix
CVE-2025-5590Owl carousel responsive WordPress plugin authenticated (Contributor+) SQL injection via id parameter8.8CNA v3.10.4%2025-06-26
CVE-2025-5588Image Editor by Pixo WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-06-26Fix
CVE-2025-5564GC Social wall WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-06-26
CVE-2025-5559TimeZoneCalculator WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.2%2025-06-26
CVE-2025-5540Event RSVP and Simple Event Management WordPress plugin stored cross-site scripting5.4v3.10.2%2025-06-26Fix
CVE-2025-5535e.nigma buttons WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-06-26
CVE-2025-5488WP Masonry and Infinite Scroll WordPress plugin stored cross-site scripting5.4v3.10.2%2025-06-26Fix
CVE-2025-5459Perforce Puppet Enterprise OS command injection8.6CNA v4.01.1%2025-06-26
CVE-2025-5366ManageEngine Exchange Reporter Plus stored XSS8.1CNA v3.11.3%2025-06-26Fix
CVE-2025-5338Royal Elementor Addons WordPress plugin stored DOM-based cross-site scripting5.4v3.10.2%2025-06-26Fix
CVE-2025-5315Missing authorization in GitLab4.3CNA v3.10.3%2025-06-26Fix
CVE-2025-5275Charitable WordPress plugin stored cross-site scripting4.0v3.10.2%2025-06-26Fix
CVE-2025-4334Simple User Registration WordPress plugin unauthenticated privilege escalation9.8CNA v3.12.6%2025-06-26NucleiExploit codeFix
CVE-2025-3863Post Carousel Slider for Elementor WordPress plugin missing authorization4.3CNA v3.10.3%2025-06-26Fix
CVE-2025-3773Trellix System Information Reporter information disclosure0.0CNA v4.00.1%2025-06-26
CVE-2025-3771Trellix System Information Reporter link following7.2CNA v4.00.2%2025-06-26
CVE-2025-3722Trellix System Information Reporter path traversal0.0CNA v4.00.2%2025-06-26
CVE-2025-3699Mitsubishi Electric G-50 missing authentication9.8CNA v3.11.1%2025-06-26Fix
CVE-2025-3279Allocation of resources without limits or throttling in GitLab6.5CNA v3.10.4%2025-06-26Fix
CVE-2025-2938Business Logic Errors in GitLab3.1CNA v3.10.3%2025-06-26Fix
CVE-2025-1754Missing authentication for critical function in GitLab5.3CNA v3.10.3%2025-06-26Fix
CVE-2025-52999jackson-core can throw a StackoverflowError when processing deeply nested data8.7CNA v4.00.8%2025-06-25Fix
CVE-2025-52894OpenBao vulnerable to Unauthenticated Rekey Operation Cancellation6.9CNA v4.00.4%2025-06-25Fix
CVE-2025-52893OpenBao may leak sensitive information in Logs when Processing Malformed Data4.5CNA v3.10.3%2025-06-25Fix
CVE-2025-52890Incus vulnerable to antispoofing nftables firewall rule bypass on bridge networks with ACLs8.1CNA v3.10.2%2025-06-25Fix
CVE-2025-52889Incus vulnerable to DoS3.4CNA v3.10.3%2025-06-25Fix
CVE-2025-52576Kanboard vulnerable to Username Enumeration via Login Behavior and Bruteforce Protection Bypass5.3CNA v3.10.4%2025-06-25Fix
CVE-2025-52569GitHub.jl lacks validation for user-provided fields6.6CNA v4.00.5%2025-06-25Fix
CVE-2025-52483Registrator.jl vulnerable to argument injection and command injection8.1CNA v4.00.4%2025-06-25Fix
CVE-2025-52480Registrator.jl argument injection8.1CNA v4.00.7%2025-06-25Fix
CVE-2025-52479HTTP.jl vulnerable to CR/LF injection in URIs7.7CNA v4.00.4%2025-06-25Fix
CVE-2025-50179Tuleap missing CSRF protection on tracker reports manipulation4.6CNA v3.10.2%2025-06-25Fix
CVE-2025-50178GitForge.jl lacks validation for user provided fields6.6CNA v4.00.5%2025-06-25Fix
CVE-2025-49845Discourse whisper post visibility information disclosure6.3CNA v4.00.4%2025-06-25Fix
CVE-2025-49797Brother Industries Multiple driver installers files accessible to external parties8.5CNA v4.00.2%2025-06-25
CVE-2025-49550Adobe Commerce incorrect authorization4.3CNA v3.10.4%2025-06-25Fix
CVE-2025-49549Adobe Commerce incorrect authorization2.7CNA v3.10.4%2025-06-25Fix
CVE-2025-49153Path traversal in Microsens NMP Web+9.3CNA v4.00.7%2025-06-25Fix
CVE-2025-49152Insufficient session expiration in Microsens NMP Web+8.7CNA v4.00.5%2025-06-25Fix
CVE-2025-49151Microsens NMP Web+ JWT authentication vulnerability9.3CNA v4.00.6%2025-06-25Fix
CVE-2025-49135Cvat missing validation for in-progress backup upload names5.3CNA v4.00.3%2025-06-25Fix
CVE-2025-48991Tuleap missing CSRF protection on tracker canned responses administration4.6CNA v3.10.2%2025-06-25Fix
CVE-2025-48954Discourse vulnerable to XSS via user-provided query parameter in oauth failure flow8.1CNA v3.10.7%2025-06-25NucleiFix
CVE-2025-45333Berkeley-abc Abc null pointer dereference7.5CISA ADP v3.10.4%2025-06-25
CVE-2025-45332Vkoskiv C-ray null pointer dereference7.5v3.10.3%2025-06-25
CVE-2025-44206Hexagon HxGN OnCall Dispatch Advantage Broadcast functionality cross-site scripting4.6CNA v3.10.3%2025-06-25
CVE-2025-43880GROWI regular expression denial of service5.3CNA v4.00.3%2025-06-25
CVE-2025-41647Lenze: Plaintext password Disclosure in PLC Designer V4 interface5.5CNA v3.10.1%2025-06-25Fix
CVE-2025-41256Cyberduck and Mountain Duck weak hash Algorithm for Certificate Fingerprint7.4CNA v3.10.1%2025-06-25
CVE-2025-41255Cyberduck and Mountain Duck Improper Certificate Store Handling8.0CNA v3.10.2%2025-06-25
CVE-2025-36038IBM WebSphere Application Server code execution9.0CNA v3.113.3%2025-06-25Fix
CVE-2025-36004IBM i privilege escalation8.8CNA v3.10.5%2025-06-25Fix
CVE-2025-259054pace Cadclick cross-site scripting7.1CISA ADP v3.10.5%2025-06-25
CVE-2025-25012Kibana open redirect4.3CNA v3.10.4%2025-06-25Fix
CVE-2025-20282Cisco ISE API unauthenticated remote code execution10.0CNA v3.138.7%2025-06-25NucleiExploit codeFix
CVE-2025-20281Cisco Identity Services Engine injection10.0CNA v3.197.6%2025-06-25KEVNucleiEmerging ThreatsExploit codeFix
CVE-2025-20264Cisco Identity Services Engine authorization bypass6.4CNA v3.10.4%2025-06-25Fix
CVE-2025-6678Autel MaxiCharger AC Wallbox Commercial PIN missing authentication information disclosure7.5CNA v3.00.5%2025-06-25
CVE-2025-6669gooaclok819 sublinkX jwt.go hard-coded key6.3CNA v4.00.4%2025-06-25Fix
CVE-2025-6668code-projects Inventory Management System fetchSelectedBrand.php SQL injection9.8v3.10.5%2025-06-25
CVE-2025-6667code-projects Car Rental System add_cars.php unrestricted upload8.8v3.10.4%2025-06-25
CVE-2025-6665code-projects Inventory Management System editBrand.php SQL injection9.8v3.10.5%2025-06-25
CVE-2025-6664CodeAstro Patient Record Management System cross-site request forgery5.3CNA v4.00.3%2025-06-25
CVE-2025-6662PDF-XChange Editor PRC File Parsing out-of-bounds read information disclosure3.3CNA v3.00.2%2025-06-25Fix
CVE-2025-6661PDF-XChange Editor App object use-after-free remote code execution7.8CNA v3.00.3%2025-06-25Fix
CVE-2025-6660PDF-XChange Editor GIF File Parsing heap-based buffer overflow remote code execution7.8CNA v3.00.3%2025-06-25Fix
CVE-2025-6659PDF-XChange Editor PRC File Parsing out-of-bounds write remote code execution7.8CNA v3.00.3%2025-06-25Fix
CVE-2025-6658PDF-XChange Editor PRC File Parsing out-of-bounds read information disclosure3.3CNA v3.00.2%2025-06-25Fix
CVE-2025-6657PDF-XChange Editor PRC File Parsing out-of-bounds read information disclosure3.3CNA v3.00.2%2025-06-25Fix
CVE-2025-6656PDF-XChange Editor PRC File Parsing out-of-bounds read information disclosure3.3CNA v3.00.2%2025-06-25Fix
CVE-2025-6655PDF-XChange Editor PRC File Parsing out-of-bounds read information disclosure3.3CNA v3.00.2%2025-06-25Fix
CVE-2025-6654PDF-XChange Editor PRC File Parsing out-of-bounds write remote code execution7.8CNA v3.00.3%2025-06-25Fix
CVE-2025-6653PDF-XChange Editor PRC File Parsing out-of-bounds read information disclosure3.3CNA v3.00.2%2025-06-25Fix
CVE-2025-6652PDF-XChange Editor PRC File Parsing out-of-bounds read information disclosure3.3CNA v3.00.2%2025-06-25Fix
CVE-2025-6651PDF-XChange Editor JP2 File Parsing out-of-bounds write remote code execution7.8CNA v3.00.3%2025-06-25Fix
CVE-2025-6650PDF-XChange Editor U3D File Parsing out-of-bounds read information disclosure3.3CNA v3.00.2%2025-06-25Fix
CVE-2025-6649PDF-XChange Editor U3D File Parsing out-of-bounds read information disclosure3.3CNA v3.00.2%2025-06-25Fix
CVE-2025-6648PDF-XChange Editor U3D File Parsing out-of-bounds read information disclosure3.3CNA v3.00.2%2025-06-25Fix
CVE-2025-6647PDF-XChange Editor U3D File Parsing out-of-bounds write remote code execution7.8CNA v3.00.3%2025-06-25Fix
CVE-2025-6646PDF-XChange Editor U3D File Parsing use-after-free information disclosure3.3CNA v3.00.3%2025-06-25Fix
CVE-2025-6645PDF-XChange Editor U3D File Parsing use-after-free remote code execution7.8CNA v3.00.3%2025-06-25Fix
CVE-2025-6644PDF-XChange Editor U3D File Parsing use-after-free remote code execution7.8CNA v3.00.3%2025-06-25Fix
CVE-2025-6643PDF-XChange Editor U3D File Parsing out-of-bounds read information disclosure3.3CNA v3.00.2%2025-06-25Fix
CVE-2025-6642PDF-XChange Editor U3D File Parsing out-of-bounds read remote code execution7.8CNA v3.00.3%2025-06-25Fix
CVE-2025-6641PDF-XChange Editor U3D File Parsing out-of-bounds read information disclosure3.3CNA v3.00.2%2025-06-25Fix
CVE-2025-6640PDF-XChange Editor U3D File Parsing use-after-free remote code execution7.8CNA v3.00.3%2025-06-25Fix
CVE-2025-6627TOTOLINK A702R HTTP POST request formIpv6Setup buffer overflow8.7CNA v4.05.7%2025-06-25Emerging Threats
CVE-2025-6621TOTOLINK CA300-PoE ap.so QuickSetting os command injection9.8v3.12.5%2025-06-25
CVE-2025-6620TOTOLINK CA300-PoE upgrade.so setUpgradeUboot os command injection9.8v3.12.5%2025-06-25
CVE-2025-6619TOTOLINK CA300-PoE upgrade.so setUpgradeFW os command injection9.8v3.12.4%2025-06-25
CVE-2025-6618TOTOLINK CA300-PoE wps.so SetWLanApcliSettings os command injection9.8v3.12.4%2025-06-25
CVE-2025-6617D-Link DIR-619L formAdvanceSetup stack-based overflow8.7CNA v4.01.2%2025-06-25
CVE-2025-6616D-Link DIR-619L formSetWAN_Wizard51 stack-based overflow8.7CNA v4.01.3%2025-06-25
CVE-2025-6615D-Link DIR-619L formAutoDetecWAN_wizard4 stack-based overflow8.7CNA v4.01.2%2025-06-25
CVE-2025-6614D-Link DIR-619L formSetWANType_Wizard5 stack-based overflow8.7CNA v4.01.2%2025-06-25
CVE-2025-6613PHPGurukul Hospital Management System manage-patient.php cross-site scripting5.4v3.10.3%2025-06-25
CVE-2025-6612code-projects Inventory Management System removeCategories.php SQL injection9.8v3.10.5%2025-06-25
CVE-2025-6611code-projects Inventory Management System createBrand.php SQL injection9.8v3.10.5%2025-06-25
CVE-2025-6610itsourcecode Employee Management System editempprofile.php SQL injection7.2v3.10.4%2025-06-25
CVE-2025-6609SourceCodester Best Salon Management System bwdates-reports-details.php SQL injection8.8v3.10.5%2025-06-25
CVE-2025-6608SourceCodester Best Salon Management System edit-services.php SQL injection8.8v3.10.5%2025-06-25
CVE-2025-6607SourceCodester Best Salon Management System stock.php SQL injection8.8v3.10.5%2025-06-25
CVE-2025-6606SourceCodester Best Salon Management System add-services.php SQL injection8.8v3.10.5%2025-06-25
CVE-2025-6605SourceCodester Best Salon Management System edit-staff.php SQL injection8.8v3.10.5%2025-06-25
CVE-2025-6604SourceCodester Best Salon Management System add-staff.php SQL injection8.8v3.10.5%2025-06-25
CVE-2025-6603coldfunction qCUDA qcow.c qcow_make_empty integer overflow4.8CNA v4.00.2%2025-06-25
CVE-2025-6583SourceCodester Best Salon Management System view-appointment.php SQL injection8.8v3.10.5%2025-06-25
CVE-2025-6582SourceCodester Best Salon Management System edit-customer-detailed.php SQL injection8.8v3.10.5%2025-06-25
CVE-2025-6543Citrix NetScaler ADC and Gateway buffer overflow9.2CNA v4.010.6%2025-06-25KEVExploit codeFix
CVE-2025-6445ServiceStack FindType directory traversal remote code execution8.1v3.11.1%2025-06-25Fix
CVE-2025-6444ServiceStack GetErrorResponse improper input validation NTLM Relay5.9v3.10.4%2025-06-25
CVE-2025-6443MikroTik RouterOS VXLAN Source IP improper access control7.2CNA v3.00.6%2025-06-25
CVE-2025-6442Ruby WEBrick read_header HTTP request smuggling5.9v3.10.4%2025-06-25Fix
CVE-2025-5927Everest Forms (Pro) WordPress plugin unauthenticated path traversal to arbitrary file deletion7.5CNA v3.10.7%2025-06-25Fix
CVE-2025-5834Pioneer DMH-WT7600NEX Missing Immutable Root of Trust in Hardware local privilege escalation7.8v3.10.2%2025-06-25
CVE-2025-5833Pioneer DMH-WT7600NEX Root Filesystem insufficient verification of data authenticity6.8v3.10.2%2025-06-25
CVE-2025-5832Pioneer DMH-WT7600NEX Software Update Signing insufficient verification of data authenticity6.8CNA v3.00.2%2025-06-25
CVE-2025-5830Autel MaxiCharger AC Wallbox Commercial DLB SlaveRegister message handling buffer overflow8.8CNA v3.00.4%2025-06-25
CVE-2025-5829Autel MaxiCharger AC Wallbox Commercial autocharge stack-based buffer overflow remote code execution6.8CNA v3.00.3%2025-06-25
CVE-2025-5828Autel MaxiCharger AC Wallbox Commercial wLength buffer overflow remote code execution6.8CNA v3.00.3%2025-06-25
CVE-2025-5827Autel MaxiCharger AC Wallbox Commercial stack-based buffer overflow8.8CNA v3.00.4%2025-06-25
CVE-2025-5826Autel MaxiCharger AC Wallbox Commercial ble_process_esp32_msg Misinterpretation of Input Vulnerability. This vulnerability allows network-adjacent attackers to inject arbitrary AT commands on affected installations of Autel MaxiCharger AC Wallbox Commercial charging stations. Authentication is not r6.3CNA v3.00.3%2025-06-25
CVE-2025-5825Autel MaxiCharger AC Wallbox Commercial Firmware Downgrade remote code execution7.5CNA v3.00.3%2025-06-25
CVE-2025-5824Autel MaxiCharger AC Wallbox Commercial origin validation error authentication bypass7.5v3.10.1%2025-06-25
CVE-2025-5823Autel MaxiCharger AC Wallbox Commercial Technician API information disclosure6.5v3.10.5%2025-06-25
CVE-2025-5822Autel MaxiCharger AC Wallbox Commercial Technician API incorrect authorization privilege escalation8.8v3.10.3%2025-06-25
CVE-2025-5585SiteOrigin Widgets Bundle WordPress plugin stored cross-site scripting5.4v3.10.2%2025-06-25Fix
CVE-2025-5015Parsons AccuWeather widget cross-site scripting8.8CNA v3.10.4%2025-06-25Fix
CVE-2025-4656Vault vulnerable to Recovery Key Cancellation denial of service3.1CNA v3.10.3%2025-06-25Fix
CVE-2025-0966IBM InfoSphere Information Server SQL injection7.6CNA v3.10.3%2025-06-25Fix
CVE-2025-53073Sentry forced browsing4.2CNA v3.10.2%2025-06-24
CVE-2025-53021Moodle session fixation allows unauthenticated users to hijack sessions via sesskey parameter4.2CNA v3.10.3%2025-06-24Fix
CVE-2025-52888allure-framework allure2 allure 2's xunit-xml-plugin vulnerable to improper XXE Restriction7.5CNA v3.10.4%2025-06-24Fix
CVE-2025-52884risc0-ethereum Steel commitment validation vulnerability1.7CNA v4.00.4%2025-06-24Fix
CVE-2025-52883Meshtastic-Android vulnerable to forged DMs with no PKC showing up as encrypted5.3CNA v3.10.3%2025-06-24Fix
CVE-2025-52882anthropics claude-code claude Code IDE extensions allow websocket connections from arbitrary origins8.8CNA v4.00.4%2025-06-24Fix
CVE-2025-52880Komga vulnerable to arbitrary code execution via Crafted EPUB file4.2CNA v3.10.3%2025-06-24Fix
CVE-2025-52574bocaletto-luca SysmonElixir /read endpoint path traversal7.5CNA v3.10.5%2025-06-24Fix
CVE-2025-52572Hikka vulnerable to RCE through dangling web interface10.0CNA v3.10.7%2025-06-24
CVE-2025-52571Hikka vulnerable to RCE through edits in a channel9.7CNA v3.10.3%2025-06-24Fix
CVE-2025-52570Letmein connection limiter allows an arbitrary amount of simultaneous connections1.7CNA v4.00.4%2025-06-24Fix
CVE-2025-52568nekernel NeKernal multiple memory corruption vulnerabilities in mkfs.hefs8.8CNA v4.00.5%2025-06-24Fix
CVE-2025-52566llama.cpp tokenizer signed vs. unsigned heap overflow8.6CNA v3.10.4%2025-06-24Fix
CVE-2025-52560Kanboard Password Reset Poisoning via host header injection8.1CNA v3.10.5%2025-06-24Fix
CVE-2025-52471espressif esp-idf ESP-NOW integer underflow vulnerability Advisory7.2CNA v4.00.9%2025-06-24Fix
CVE-2025-50699PHPGurukul Online DJ Booking Management System cross-site scripting6.1CISA ADP v3.10.3%2025-06-24
CVE-2025-50695PHPGurukul Online DJ Booking Management System cross-site scripting6.1CISA ADP v3.10.3%2025-06-24
CVE-2025-50693PHPGurukul Online DJ Booking Management System insecure direct object reference6.5CISA ADP v3.10.3%2025-06-24
CVE-2025-50213Apache Airflow Providers Snowflake package allows for special element injection9.8CISA ADP v3.10.7%2025-06-24Fix
CVE-2025-49853Improper neutralization of special elements used in an SQL command in ControlID iDSecure On-premises9.3CNA v4.00.5%2025-06-24Fix
CVE-2025-49852Server-side request forgery (SSRF) in ControlID iDSecure On-premises8.7CNA v4.00.4%2025-06-24Fix
CVE-2025-49851Improper authentication in ControlID iDSecure On-premises9.8v3.10.6%2025-06-24Fix
CVE-2025-49147Umbraco-CMS Umbraco.Cms vulnerable to Disclosure of Configured Password Requirements5.3CNA v3.10.3%2025-06-24Fix
CVE-2025-48890ELECOM WRH-733GBK OS command injection9.3CNA v4.02.2%2025-06-24
CVE-2025-48470Advantech Wireless Sensing and Equipment (WISE) stored cross-site scripting (XSS)4.1CNA v3.10.2%2025-06-24Fix
CVE-2025-48469Advantech WISE firmware update page missing authentication9.6CNA v3.10.5%2025-06-24Fix
CVE-2025-48468Advantech Wireless Sensing and Equipment (WISE) Open JTAG Debug Port6.4CNA v3.10.2%2025-06-24Fix
CVE-2025-48467Advantech Wireless Sensing and Equipment (WISE) denial of service via Malformed Modbus Packets6.5CNA v3.10.2%2025-06-24Fix
CVE-2025-48466Advantech Wireless Sensing and Equipment (WISE) modbus command injection without Authentication8.1CNA v3.10.6%2025-06-24Exploit codeFix
CVE-2025-48463Advantech Wireless Sensing and Equipment (WISE) unencrypted HTTP Communication3.1CNA v3.10.1%2025-06-24Fix
CVE-2025-48462Advantech Wireless Sensing and Equipment (WISE) Login Session Exhaustion4.2CNA v3.10.2%2025-06-24Fix
CVE-2025-48461Advantech Wireless Sensing and Equipment (WISE) Weak Session Cookie Entropy5.0CNA v3.10.5%2025-06-24Fix
CVE-2025-47943Gogs stored XSS in PDF renderer6.3CNA v3.10.4%2025-06-24Fix
CVE-2025-44531Realtek Rtl8762ekf-evb denial of service7.5CISA ADP v3.10.5%2025-06-24
CVE-2025-43879ELECOM WRH-733GBK OS command injection9.3CNA v4.02.2%2025-06-24
CVE-2025-43877ELECOM WRC-1167GHBK2-S cross-site scripting4.8CNA v4.00.2%2025-06-24
CVE-2025-41427ELECOM WRC-X3000GS OS command injection8.7CNA v4.01.0%2025-06-24
CVE-2025-39205Hitachi Energy MicroSCADA X SYS600 improper certificate validation7.1CNA v4.00.2%2025-06-24Fix
CVE-2025-39204Hitachi Energy MicroSCADA X SYS600 information disclosure8.5CNA v4.00.4%2025-06-24Fix
CVE-2025-39203Hitachi Energy MicroSCADA X SYS600 improper integrity check validation7.1CNA v4.00.2%2025-06-24Fix
CVE-2025-39202Hitachi Energy MicroSCADA X SYS600 improper privilege management8.3CNA v4.00.2%2025-06-24Fix
CVE-2025-39201Hitachi Energy MicroSCADA X SYS600 incorrect default permissions6.9CNA v4.00.1%2025-06-24Fix
CVE-2025-36537Incorrect permission assignment for critical resource in TeamViewer Remote Management7.0CNA v3.10.2%2025-06-24Fix
CVE-2025-36519ELECOM WRC-2533GST2 unrestricted file upload5.3CNA v4.00.3%2025-06-24
CVE-2025-34041Sangfor Endpoint Detection and Response OS command injection10.0CNA v4.07.1%2025-06-24Fix
CVE-2025-34040Seeyon Zhiyuan OA System path traversal file upload10.0CNA v4.015.4%2025-06-24NucleiExploit codeFix
CVE-2025-34039Yonyou NC BeanShell command injection10.0CNA v4.00.6%2025-06-24
CVE-2025-34038Weaver E-cology SQL injection7.5v3.12.1%2025-06-24Nuclei
CVE-2025-34037Linksys Routers E/WAG/WAP/WES/WET/WRT-Series10.0CNA v4.092.8%2025-06-24Reported exploitedMetasploitEmerging ThreatsExploit codeFix
CVE-2025-34036Shenzhen TVT CCTV-DVR command injection9.8v3.130.9%2025-06-24Emerging ThreatsExploit code
CVE-2025-34035EnGenius EnShare IoT Gigabit Cloud Service command injection9.8v3.122.8%2025-06-24NucleiEmerging ThreatsExploit code
CVE-2025-340345VTechnologies Blue Angel Software Suite hard-coded credentials8.8NVD v3.10.7%2025-06-24Exploit code
CVE-2025-340335VTechnologies Blue Angel Software Suite OS command injection8.8v3.111.2%2025-06-24NucleiExploit code
CVE-2025-34032Moodle LMS Jmol Plugin cross-site scripting (XSS)6.1v3.10.8%2025-06-24NucleiExploit code
CVE-2025-34031Moodle LMS Jmol Plugin path traversal7.5v3.13.1%2025-06-24NucleiExploit code
CVE-2025-32978Quest KACE Systems Management Appliance license renewal interface missing authentication7.5CISA ADP v3.10.9%2025-06-24
CVE-2025-32977Quest KACE Systems Management Appliance backup file upload improper signature verification9.6CISA ADP v3.10.4%2025-06-24
CVE-2025-32976Quest KACE Systems Management Appliance two-factor authentication authentication bypass8.8CISA ADP v3.10.8%2025-06-24
CVE-2025-32975Quest KACE Systems Management Appliance (SMA) improper authentication10.0CISA ADP v3.12.5%2025-06-24KEVFix
CVE-2025-27828Mitel MiContact Center Business legacy chat reflected cross-site scripting7.1CISA ADP v3.10.4%2025-06-24Fix
CVE-2025-27827Mitel MiContact Center Business legacy chat information disclosure7.1CISA ADP v3.10.4%2025-06-24Fix
CVE-2025-23265NVIDIA Megatron-LM code injection7.8CNA v3.10.3%2025-06-24Fix
CVE-2025-23264NVIDIA Megatron-LM code injection7.8CNA v3.10.3%2025-06-24Fix
CVE-2025-23260NVIDIA AIS Operator incorrect privilege assignment5.0CNA v3.10.2%2025-06-24Fix
CVE-2025-6581SourceCodester Best Salon Management System add-customer.php SQL injection8.8v3.10.5%2025-06-24
CVE-2025-6580SourceCodester Best Salon Management System Login SQL injection9.8v3.10.5%2025-06-24
CVE-2025-6579code-projects Car Rental System message_admin.php SQL injection9.8v3.10.5%2025-06-24
CVE-2025-6578code-projects Simple Online Hotel Reservation System delete_account.php SQL injection9.8v3.10.5%2025-06-24
CVE-2025-6570PHPGurukul Hospital Management System search.php SQL injection8.8v3.10.5%2025-06-24
CVE-2025-6569code-projects School Fees Payment System student.php cross-site scripting6.1v3.10.4%2025-06-24
CVE-2025-6568TOTOLINK EX1200T HTTP POST request formIpv6Setup buffer overflow8.7CNA v4.01.0%2025-06-24
CVE-2025-6567Campcodes Online Recruitment Management System view_application.php SQL injection9.8v3.10.5%2025-06-24
CVE-2025-6566oatpp Oat++ Deserializer.cpp deserializeArray stack-based overflow7.5v3.10.8%2025-06-24
CVE-2025-6565Netgear WNCE3001 HTTP POST request http_d stack-based overflow8.7CNA v4.00.9%2025-06-24
CVE-2025-6560Sapido Wireless Router exposure of sensitive information9.3CNA v4.00.6%2025-06-24
CVE-2025-6559Sapido Wireless Router OS command injection9.3CNA v4.01.7%2025-06-24
CVE-2025-6557Google Chrome DevTools improper input validation5.4CISA ADP v3.10.2%2025-06-24Fix
CVE-2025-6556Google Chrome Loader insufficient policy enforcement5.4CISA ADP v3.10.2%2025-06-24Fix
CVE-2025-6555Google Chrome Animation use-after-free5.4CISA ADP v3.10.2%2025-06-24Fix
CVE-2025-6552java-aodeng Hope-Boot Login WebController.java doLogin redirect5.3CNA v4.00.4%2025-06-24
CVE-2025-6551java-aodeng Hope-Boot WebController.java login cross-site scripting5.4v3.10.5%2025-06-24
CVE-2025-6536Tarantool datetime.c tm_to_datetime assertion4.8CNA v4.00.2%2025-06-24
CVE-2025-6535Xxyopen/201206030 Novel-Plus User Management Module UserMapper.xml list SQL injection8.8v3.10.5%2025-06-24
CVE-2025-6534Xxyopen/201206030 Novel-Plus File FileController.java remove resource injection6.8v3.10.5%2025-06-24
CVE-2025-6533Xxyopen/201206030 Novel-Plus CATCHA LoginController.java ajaxLogin authentication replay5.9v3.10.6%2025-06-24
CVE-2025-6532NOYAFA/Xiami LF9 Pro RTSP Live Video Stream endpoint access control5.3CNA v4.00.5%2025-06-24
CVE-2025-6531SIFUSM/MZZYG BD S1 RTSP Live Video Stream endpoint access control5.3CNA v4.00.3%2025-06-24
CVE-2025-6436Mozilla memory safety bugs fixed in Firefox 140 and Thunderbird 1408.1CISA ADP v3.14.3%2025-06-24Fix
CVE-2025-6435Mozilla Firefox save as in Devtools could download files without sanitizing the extension8.1CISA ADP v3.10.5%2025-06-24Fix
CVE-2025-6434Mozilla Firefox HTTPS-Only exception screen lacked anti-clickjacking delay4.3CISA ADP v3.10.3%2025-06-24Fix
CVE-2025-6433Mozilla Firefox and Thunderbird WebAuthn improper certificate validation9.8CISA ADP v3.10.3%2025-06-24Fix
CVE-2025-6432Mozilla Firefox DNS requests leaked outside of a configured SOCKS proxy8.6CISA ADP v3.10.4%2025-06-24Fix
CVE-2025-6431Mozilla Firefox improper authorization6.5CISA ADP v3.10.3%2025-06-24Fix
CVE-2025-6430Mozilla Firefox Content-Disposition header ignored when a file is included in an embed or object tag6.1CISA ADP v3.10.3%2025-06-24Fix
CVE-2025-6429Mozilla Firefox incorrect parsing of URLs could have allowed embedding of youtube.com6.5CISA ADP v3.10.4%2025-06-24Fix
CVE-2025-6428Mozilla Firefox for Android opened URLs specified in a link querystring parameter4.3CISA ADP v3.10.2%2025-06-24Fix
CVE-2025-6427Mozilla Firefox connect-src Content Security Policy restriction could be bypassed9.1CISA ADP v3.10.4%2025-06-24Fix
CVE-2025-6426Mozilla Firefox no warning when opening executable terminal files on macOS8.8CISA ADP v3.10.2%2025-06-24Fix
CVE-2025-6425Mozilla The WebCompat WebExtension shipped with Firefox exposed a persistent UUID4.3CISA ADP v3.10.3%2025-06-24Fix
CVE-2025-6424Mozilla Firefox use-after-free in FontFaceSet9.8CISA ADP v3.14.4%2025-06-24Fix
CVE-2025-6206Aiomatic - AI Content Writer, Editor, ChatBot and AI Toolkit WordPress plugin arbitrary file upload7.5CNA v3.10.5%2025-06-24Fix
CVE-2025-6032Red Hat Enterprise Linux 10 podman: Podman missing TLS verification8.3CNA v3.10.5%2025-06-24Fix
CVE-2025-5318Libssh: Out-of-bounds read in sftp_handle8.1NVD v3.11.8%2025-06-24Fix
CVE-2025-5258Conference Scheduler WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-06-24Fix
CVE-2025-5087Cleartext transmission of sensitive information in Kaleris Navis N46.0CNA v4.00.3%2025-06-24Fix
CVE-2025-4383Authentication bypass in Art-In Systems' Wi-Fi Cloud Hotspot9.3CNA v3.10.4%2025-06-24Fix
CVE-2025-4378Hard-coded credentials in Ataturk University's ATA-AOF Mobile Application10.0CNA v3.10.3%2025-06-24Fix
CVE-2025-3092MB connect line: Observable response discrepancy in mbCONNECT24/mymbCONNECT247.5CNA v3.10.5%2025-06-24Fix
CVE-2025-3091MB connect line: Authorization bypass in mbCONNECT24/mymbCONNECT247.5CNA v3.10.4%2025-06-24Fix
CVE-2025-3090MB connect line: Missing authentication in mbCONNECT24/mymbCONNECT248.2CNA v3.10.5%2025-06-24Fix
CVE-2025-2962zephyrproject-rtos Zephyr infinite loop in dns_copy_qname8.2CNA v3.10.6%2025-06-24
CVE-2025-2566Deserialization of untrusted data in Kaleris Navis N49.3CNA v4.00.6%2025-06-24Fix
CVE-2025-2403Hitachi Energy Relion 670/650 and SAM600-IO resource exhaustion8.7CNA v4.00.4%2025-06-24Fix
CVE-2025-1718Hitachi Energy Relion 670/650 and SAM600-IO improper check for exceptional conditions7.1CNA v4.00.4%2025-06-24Fix
CVE-2025-52968Freedesktop xdg-utils unprotected alternate channel2.7CNA v3.10.2%2025-06-23
CVE-2025-52967MLFlow SSRF via gateway_proxy_handler5.8CNA v3.10.4%2025-06-23Fix
CVE-2025-52939Potential heap-buffer overflow vulnerability in NotepadNext9.4CNA v4.00.2%2025-06-23Fix
CVE-2025-52938Potential heap-based buffer over-read vulnerability in NotepadNext5.1CNA v4.00.2%2025-06-23
CVE-2025-52937Point Cloud Library openNURBS module vulnerability2.0CNA v4.00.1%2025-06-23
CVE-2025-52936Improper link resolution before file access vulnerability in yrutschle/sslh9.3CNA v4.00.2%2025-06-23Fix
CVE-2025-52935Integer overflow or wraparound vulnerability in dragonflydb/dragonfly9.4CNA v4.00.4%2025-06-23
CVE-2025-52926spytrap-adb Omission of Security-relevant Information2.7CNA v3.10.2%2025-06-23Fix
CVE-2025-52922InnoShop relative path traversal7.4CNA v3.10.5%2025-06-23
CVE-2025-52921InnoShop unprotected alternate channel9.9CNA v3.10.5%2025-06-23
CVE-2025-52920InnoShop forced browsing6.4CNA v3.10.3%2025-06-23
CVE-2025-52879JetBrains TeamCity cross-site scripting4.8CNA v3.11.2%2025-06-23Fix
CVE-2025-52878JetBrains TeamCity missing authorization4.3CNA v3.10.4%2025-06-23Fix
CVE-2025-52877JetBrains TeamCity cross-site scripting4.8CNA v3.136.7%2025-06-23Fix
CVE-2025-52876JetBrains TeamCity cross-site scripting5.4CNA v3.137.6%2025-06-23Fix
CVE-2025-52875JetBrains TeamCity cross-site scripting5.4CNA v3.11.0%2025-06-23Fix
CVE-2025-52562Convey Panel directory traversal in LocaleController leading to remote code execution10.0CNA v3.11.8%2025-06-23Fix
CVE-2025-52561HTMLSanitizer.jl Possible XSS6.9CNA v4.00.9%2025-06-23Fix
CVE-2025-52558ChangeDetection.io XSS in watch overview7.0CNA v4.00.6%2025-06-23Fix
CVE-2025-50349PHPGurukul Pre-School Enrollment System path traversal7.5CISA ADP v3.10.8%2025-06-23
CVE-2025-50348PHPGurukul Pre-School Enrollment System path traversal7.5CISA ADP v3.10.8%2025-06-23
CVE-2025-49574Quarkus potential data leak when duplicating a duplicated context6.4CNA v3.10.3%2025-06-23Fix
CVE-2025-49144notepad-plus-plus Notepad++ privilege escalation in Installer7.3CNA v3.10.7%2025-06-23Exploit codeFix
CVE-2025-49126Visionatrix vulnerable to reflected XSS leading to Exfiltration of Secrets8.8CNA v3.10.3%2025-06-23Fix
CVE-2025-48700Synacor Zimbra Collaboration Suite (ZCS) cross-site scripting6.1CISA ADP v3.11.7%2025-06-23KEVFix
CVE-2025-48026Mitel OpenScape Xpressions WebApl path traversal7.5CISA ADP v3.10.6%2025-06-23Fix
CVE-2025-46101Beakon Learning Management System Sharable Content Object Reference Model SQL injection9.8CISA ADP v3.10.7%2025-06-23
CVE-2025-44528An issue in Texas Instruments LP-CC2652RB SimpleLink CC13XX CC26XX SDK 7.41.00.17 allows attackers to cause a Denial of Service (DoS) via sending a crafted LL_Pause_Enc_Req packet during the authentication and connection phase, causing a Denial of Service (DoS).7.5CISA ADP v3.10.4%2025-06-23
CVE-2025-27387OPPO Clone Phone uses weak WPA passphrase as only means of security7.4CNA v3.10.3%2025-06-23
CVE-2025-23092Mitel OpenScape Accounting Management path traversal7.2CISA ADP v3.10.9%2025-06-23Fix
CVE-2025-23049Materialise OrthoView OS command injection8.4CNA v4.01.9%2025-06-23
CVE-2025-6547On Node.js, pbkdf2 silently disregards Uint8Array input, returning static keys9.1CNA v4.00.5%2025-06-23Fix
CVE-2025-6545pbkdf2 improper input validation9.1CNA v4.00.4%2025-06-23Fix
CVE-2025-653070mai M300 Telnet service demo.sh denial of service4.8v3.10.7%2025-06-23
CVE-2025-652970mai M300 Telnet service default credentials8.8v3.10.9%2025-06-23
CVE-2025-652870mai M300 RTSP Live Video Stream endpoint 12 improper authentication4.3v3.10.7%2025-06-23
CVE-2025-652770mai M300 Web Server access control3.1v3.10.6%2025-06-23
CVE-2025-652670mai M300 HTTP server insufficiently protected credentials5.3v3.10.6%2025-06-23
CVE-2025-652570mai 1S Configuration Config.cgi improper authorization5.3CNA v4.00.3%2025-06-23
CVE-2025-652470mai 1S Video services improper authentication2.3CNA v4.00.4%2025-06-23
CVE-2025-6518pyspur incomplete filtering of special elements allowed by SingleLLMCallNode function5.3CNA v4.00.4%2025-06-23
CVE-2025-6517Dromara MaxKey Meta URL SAML20DetailsController.java add server-side request forgery9.8v3.10.5%2025-06-23
CVE-2025-6516HDF5 H5Fint.c H5F_addr_decode_len heap-based overflow7.8v3.10.4%2025-06-23Fix
CVE-2025-6513BRAIN2 Configuration file for database access not sufficiently secured9.3CNA v3.10.2%2025-06-23Fix
CVE-2025-6512Scripts within reports executable on BRAIN2 Server10.0CNA v3.10.5%2025-06-23Fix
CVE-2025-6511Netgear EX6150 sub_410090 stack-based overflow8.7CNA v4.01.2%2025-06-23
CVE-2025-6510Netgear EX6100 sub_415EF8 stack-based overflow8.7CNA v4.01.0%2025-06-23
CVE-2025-6509seaswalker spring-analysis SimpleController.java echo cross-site scripting5.1CNA v4.00.3%2025-06-23
CVE-2025-6503code-projects Inventory Management System fetchSelectedCategories.php SQL injection9.8v3.10.5%2025-06-23
CVE-2025-6502code-projects Inventory Management System changePassword.php SQL injection9.8v3.10.5%2025-06-23
CVE-2025-6501code-projects Inventory Management System createCategories.php SQL injection9.8v3.10.5%2025-06-23
CVE-2025-6500code-projects Inventory Management System editCategories.php SQL injection9.8v3.10.5%2025-06-23
CVE-2025-6499vstakhov libucl ucl_parser.c ucl_parse_multiline_string heap-based overflow5.5v3.10.3%2025-06-23
CVE-2025-6498HTACG tidy-html5 alloc.c defaultAlloc memory leak5.5v3.10.2%2025-06-23
CVE-2025-6497HTACG tidy-html5 parser.c prvTidyParseNamespace assertion4.8CNA v4.00.2%2025-06-23
CVE-2025-6496HTACG tidy-html5 parser.c InsertNodeAsParent null pointer dereference4.8CNA v4.00.2%2025-06-23
CVE-2025-4563Kubernetes nodes can bypass dynamic resource allocation authorization checks2.7CNA v3.10.7%2025-06-23Fix
CVE-2025-2828SSRF vulnerability in RequestsToolkit in langchain-ai/langchain10.0v3.121.0%2025-06-23Fix
CVE-2025-2172Aviatrix Controller OS command injection6.6CNA v4.012.2%2025-06-23
CVE-2025-2171Aviatrix Controller missing brute-force protection7.8CNA v4.00.5%2025-06-23
CVE-2025-52923Sangfor aTrust incorrect permission assignment4.3CNA v3.10.2%2025-06-22
CVE-2025-6494sparklemotion nokogiri hashmap.c hashmap_get_with_hash heap-based overflow4.8CNA v4.00.2%2025-06-22
CVE-2025-6493CodeMirror Markdown Mode markdown.js redos6.9CNA v4.00.5%2025-06-22
CVE-2025-6492MarkText index.js getRecommendTitleFromMarkdownString redos6.9CNA v4.00.5%2025-06-22
CVE-2025-6490sparklemotion nokogiri hashmap.c hashmap_set_with_hash heap-based overflow4.8CNA v4.00.2%2025-06-22
CVE-2025-6489itsourcecode Agri-Trading Online Shopping System transactionsave.php SQL injection9.8v3.10.5%2025-06-22
CVE-2025-6487TOTOLINK A3002R formRoute stack-based overflow8.7CNA v4.01.0%2025-06-22
CVE-2025-6486TOTOLINK A3002R formWlanMultipleAP stack-based overflow8.7CNA v4.01.0%2025-06-22
CVE-2025-6485TOTOLINK A3002R formWlSiteSurvey os command injection5.3CNA v4.09.1%2025-06-22
CVE-2025-6484code-projects Online Shopping Store action.php SQL injection7.2v3.10.5%2025-06-22
CVE-2025-6483code-projects Simple Pizza Ordering System edituser.php SQL injection9.8v3.10.5%2025-06-22
CVE-2025-6482code-projects Simple Pizza Ordering System edituser-exec.php SQL injection9.8v3.10.5%2025-06-22
CVE-2025-6481code-projects Simple Pizza Ordering System update.php SQL injection9.8v3.10.5%2025-06-22
CVE-2025-6480code-projects Simple Pizza Ordering System addcatexec.php SQL injection9.8v3.10.5%2025-06-22
CVE-2025-6479code-projects Simple Pizza Ordering System salesreport.php SQL injection9.8v3.10.5%2025-06-22
CVE-2025-6478CodeAstro Expense Management System cross-site request forgery5.3CNA v4.00.2%2025-06-22
CVE-2025-6477SourceCodester Student Result Management System System settings page system cross-site scripting4.8v3.10.3%2025-06-22
CVE-2025-6476SourceCodester Gym Management System cross-site request forgery5.3CNA v4.00.3%2025-06-22
CVE-2025-6475SourceCodester Student Result Management System manage_students module cross-site scripting4.8v3.10.3%2025-06-22
CVE-2025-6474code-projects Inventory Management System changeUsername.php SQL injection9.8v3.10.5%2025-06-22
CVE-2025-6473code-projects School Fees Payment System fees.php cross-site scripting6.1v3.10.4%2025-06-22
CVE-2025-6472code-projects Online Bidding System showprod.php SQL injection9.8v3.10.5%2025-06-22
CVE-2025-6471code-projects Online Bidding System administrator SQL injection9.8v3.10.5%2025-06-22
CVE-2025-6470code-projects Online Bidding System bidlog.php SQL injection9.8v3.10.5%2025-06-22
CVE-2025-6469code-projects Online Bidding System details.php SQL injection9.8v3.10.5%2025-06-22
CVE-2025-6468code-projects Online Bidding System bidnow.php SQL injection9.8v3.10.5%2025-06-22
CVE-2025-6467code-projects Online Bidding System login.php SQL injection9.8v3.10.5%2025-06-22
CVE-2025-6466ageerle ruoyi-ai SseServiceImpl.java upload unrestricted upload9.8v3.10.4%2025-06-22Fix
CVE-2025-6458code-projects Online Hotel Reservation System execedituser.php SQL injection9.8v3.10.5%2025-06-22
CVE-2025-6457code-projects Online Hotel Reservation System demo.php SQL injection9.8v3.10.5%2025-06-22
CVE-2025-6456code-projects Online Hotel Reservation System order.php SQL injection9.8v3.10.5%2025-06-22
CVE-2025-6455code-projects Online Hotel Reservation System messageexec.php SQL injection9.8v3.10.5%2025-06-22
CVE-2025-6453diyhi bbs API ForumManageAction.java add path traversal4.3v3.10.4%2025-06-22
CVE-2025-6452CodeAstro Patient Record Management System Generate New Report page cross-site scripting4.8v3.10.4%2025-06-22
CVE-2025-6451code-projects Simple Online Hotel Reservation System delete_pending.php SQL injection9.8v3.10.5%2025-06-22
CVE-2025-6450code-projects Simple Online Hotel Reservation System confirm_reserve.php SQL injection9.8v3.10.5%2025-06-22
CVE-2025-6449code-projects Simple Online Hotel Reservation System checkout_query.php SQL injection9.8v3.10.5%2025-06-22
CVE-2025-6448code-projects Simple Online Hotel Reservation System delete_room.php SQL injection9.8v3.10.5%2025-06-22
CVE-2025-6447code-projects Simple Online Hotel Reservation System index.php SQL injection9.8v3.10.5%2025-06-22
CVE-2025-52919Yealink RPS improper certificate validation4.3CNA v3.10.2%2025-06-21Fix
CVE-2025-52918Yealink RPS incorrect authorization5.0CNA v3.10.3%2025-06-21Fix
CVE-2025-52917Yealink RPS resource exhaustion4.3CNA v3.10.3%2025-06-21Fix
CVE-2025-52916Yealink RPS missing brute-force protection2.2CNA v3.10.3%2025-06-21Fix
CVE-2025-52557Mail-0 Zero session hijacking via Email8.6CNA v4.00.4%2025-06-21
CVE-2025-52556rfc3161-client has insufficient verification for timestamp response signatures9.3CNA v4.00.2%2025-06-21Fix
CVE-2025-52552FastGPT LastRoute parameter on Login page vulnerable to open redirect and DOM-based XSS5.5CNA v4.00.3%2025-06-21Fix
CVE-2025-52488Dnn.Platform leaks NTLM hash via SMB Share Interaction with malicious user input8.6CNA v3.135.8%2025-06-21NucleiExploit codeFix
CVE-2025-52487Dnn.Platform possibly allows bypass of IP Filters8.8CNA v4.00.3%2025-06-21Fix
CVE-2025-52486Dnn.Platform Allows reflected cross-site scripting in some TokenReplace situations with SkinObjects6.1CNA v4.00.2%2025-06-21Fix
CVE-2025-52485Dnn.Platform allows stored cross-site scripting (XSS) in Activity Feed5.1CNA v4.00.2%2025-06-21Fix
CVE-2025-36016IBM Process Mining HTTP open redirect6.8CNA v3.10.2%2025-06-21Fix
CVE-2025-6446code-projects Client Details System index.php SQL injection9.8v3.10.5%2025-06-21
CVE-2025-6422Campcodes Online Recruitment Management System About Content page ajax.php unrestricted upload8.8v3.10.4%2025-06-21
CVE-2025-6421code-projects Simple Online Hotel Reservation System add_account.php SQL injection9.8v3.10.5%2025-06-21
CVE-2025-6420code-projects Simple Online Hotel Reservation System add_room.php SQL injection9.8v3.10.5%2025-06-21
CVE-2025-6419code-projects Simple Online Hotel Reservation System edit_room.php SQL injection9.8v3.10.5%2025-06-21
CVE-2025-6418code-projects Simple Online Hotel Reservation System edit_query_account.php SQL injection9.8v3.10.5%2025-06-21
CVE-2025-6417PHPGurukul Art Gallery Management System add-artist.php SQL injection8.8v3.10.5%2025-06-21
CVE-2025-6416PHPGurukul Art Gallery Management System changeimage4.php SQL injection8.8v3.10.5%2025-06-21
CVE-2025-6415PHPGurukul Art Gallery Management System changeimage3.php SQL injection8.8v3.10.5%2025-06-21
CVE-2025-6414PHPGurukul Art Gallery Management System changeimage2.php SQL injection8.8v3.10.5%2025-06-21
CVE-2025-6413PHPGurukul Art Gallery Management System changeimage1.php SQL injection8.8v3.10.5%2025-06-21
CVE-2025-6412PHPGurukul Art Gallery Management System changeimage.php SQL injection8.8v3.10.5%2025-06-21
CVE-2025-6411PHPGurukul Art Gallery Management System changepropic.php SQL injection8.8v3.10.5%2025-06-21
CVE-2025-6410PHPGurukul Art Gallery Management System edit-art-medium-detail.php SQL injection8.8v3.10.5%2025-06-21
CVE-2025-6409PHPGurukul Art Gallery Management System forgot-password.php SQL injection9.8v3.10.5%2025-06-21
CVE-2025-6408Campcodes Online Hospital Management System search.php SQL injection9.8v3.10.5%2025-06-21
CVE-2025-6407Campcodes Online Hospital Management System user-login.php SQL injection9.8v3.10.5%2025-06-21
CVE-2025-6406Campcodes Online Hospital Management System forgot-password.php SQL injection9.8v3.10.5%2025-06-21
CVE-2025-6405Campcodes Online Teacher Record Management System edit-teacher-detail.php SQL injection9.8v3.10.5%2025-06-21
CVE-2025-6404Campcodes Online Teacher Record Management System search.php SQL injection9.8v3.10.5%2025-06-21
CVE-2025-6403code-projects School Fees Payment System student.php SQL injection9.8v3.12.0%2025-06-21Nuclei
CVE-2025-6402TOTOLINK X15 HTTP POST request formIpv6Setup buffer overflow8.7CNA v4.01.0%2025-06-21
CVE-2025-6401TOTOLINK N300RH HTTP POST message formFilter denial of service5.1CNA v4.00.5%2025-06-21
CVE-2025-6400TOTOLINK N300RH HTTP POST message formPortFw buffer overflow8.7CNA v4.01.0%2025-06-21
CVE-2025-6399TOTOLINK X15 HTTP POST request formIPv6Addr buffer overflow8.7CNA v4.01.0%2025-06-21
CVE-2025-6394code-projects Simple Online Hotel Reservation System add_reserve.php SQL injection9.8v3.10.5%2025-06-21
CVE-2025-6393TOTOLINK A702R/A3002R/A3002RU/EX1200T HTTP POST request formIPv6Addr buffer overflow7.5v3.11.0%2025-06-21
CVE-2025-6375poco MultipartReader.cpp MultipartInputStream null pointer dereference5.5v3.10.3%2025-06-21Fix
CVE-2025-6374D-Link DIR-619L formSetACLFilter stack-based overflow8.7CNA v4.01.2%2025-06-21
CVE-2025-6373D-Link DIR-619L formWlSiteSurvey formSetWizard1 stack-based overflow8.7CNA v4.00.9%2025-06-21
CVE-2025-6218RARLAB WinRAR path traversal7.8CNA v3.090.5%2025-06-21KEVEmerging ThreatsExploit codeKCVFix
CVE-2025-6217PEAK-System Driver PCANFD_ADD_FILTERS time-of-check time-of-use information disclosure2.5v3.10.1%2025-06-21
CVE-2025-6216Allegra calculateTokenExpDate Password Recovery authentication bypass9.8CNA v3.047.8%2025-06-21NucleiFix
CVE-2025-5820Sony XAV-AX8500 Bluetooth ERTM Channel authentication bypass8.8v3.10.3%2025-06-21Fix
CVE-2025-5479Sony XAV-AX8500 Bluetooth AVCTP protocol heap-based buffer overflow remote code execution7.5CNA v3.00.4%2025-06-21Fix
CVE-2025-5478Sony XAV-AX8500 Bluetooth SDP protocol integer overflow remote code execution8.8CNA v3.00.4%2025-06-21Fix
CVE-2025-5477Sony XAV-AX8500 Bluetooth L2CAP protocol heap-based buffer overflow remote code execution7.5v3.10.3%2025-06-21Fix
CVE-2025-5476Sony XAV-AX8500 Bluetooth improper isolation authentication bypass8.8v3.10.3%2025-06-21Fix
CVE-2025-5475Sony XAV-AX8500 Bluetooth Packet Handling integer overflow remote code execution7.5v3.10.3%2025-06-21Fix
CVE-2025-52893D FlipBook - Lite Edition WordPress plugin stored cross-site scripting5.4v3.10.2%2025-06-21Fix
CVE-2025-5143TableOn WordPress Posts Table Filterable plugin stored cross-site scripting5.4v3.10.2%2025-06-21Fix
CVE-2025-5034WP File Download WordPress plugin reflected XSS7.1CISA ADP v3.10.3%2025-06-21Fix
CVE-2025-3629IBM InfoSphere Information Server file manipulation4.3CNA v3.10.2%2025-06-21Fix
CVE-2025-3221IBM InfoSphere Information Server denial of service7.5CNA v3.10.4%2025-06-21Fix
CVE-2025-1987Stored XSS in Psono-client via Malicious Vault Entry URLs6.1NVD v3.10.6%2025-06-21Fix
CVE-2025-52825Real Estate Manager WordPress plugin cross-site request forgery (CSRF)8.8CNA v3.10.2%2025-06-20
CVE-2025-52822WP Roadmap WordPress plugin SQL injection8.5CNA v3.10.3%2025-06-20Fix
CVE-2025-52821Video List Manager WordPress plugin SQL injection8.5CNA v3.10.3%2025-06-20
CVE-2025-52802Import YouTube videos as WP Posts WordPress plugin broken access control7.5CNA v3.10.3%2025-06-20
CVE-2025-52795WP Front User Submit / Front Editor WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.2%2025-06-20
CVE-2025-52794Creative Contact Form WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-06-20
CVE-2025-52793Esselink.nu Settings WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-06-20Fix
CVE-2025-52792WP User Stylesheet Switcher WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-06-20
CVE-2025-52791Knowledge Base Knowledge Base Maker WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-06-20
CVE-2025-52790WP-DownloadCounter WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-06-20
CVE-2025-52789Lewe ChordPress WordPress plugin cross-site request forgery (CSRF) to stored XSS7.1CNA v3.10.1%2025-06-20
CVE-2025-52784Bluff Post WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-06-20
CVE-2025-52783Change Cart button Colors WooCommerce WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-06-20
CVE-2025-52782Scroll UP WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-06-20
CVE-2025-52781TinyNav WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-06-20
CVE-2025-52780Logo Manager For Samandehi WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-06-20
CVE-2025-52772Virtual Moderator WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-06-20
CVE-2025-52733ANON::form embedded secure form WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-20Fix
CVE-2025-52719ProfileGrid WordPress plugin full path disclosure (FPD)4.3CNA v3.10.3%2025-06-20Fix
CVE-2025-52715Classified Listing WordPress plugin local file inclusion7.5CNA v3.10.6%2025-06-20Fix
CVE-2025-52713Post and Page Builder by BoldGrid WordPress plugin server-side request forgery6.4CNA v3.10.2%2025-06-20Fix
CVE-2025-52711Post and Page Builder by BoldGrid WordPress plugin cross-site request forgery4.3CNA v3.10.1%2025-06-20Fix
CVE-2025-52710File Manager Pro WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-06-20Fix
CVE-2025-52708HUSKY WordPress plugin local file inclusion7.5CNA v3.10.7%2025-06-20Fix
CVE-2025-52707Firelight Lightbox WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-20Fix
CVE-2025-52484risc0 RISC Zero zkVM Underconstrained vulnerability2.7CNA v4.00.3%2025-06-20Fix
CVE-2025-50054OpenVPN ovpn-dco-win buffer overflow5.5CISA ADP v3.10.2%2025-06-20Fix
CVE-2025-50051WP-Members WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-20Fix
CVE-2025-50050Jobs for WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-20Fix
CVE-2025-50049Modern Footnotes WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-20Fix
CVE-2025-50048Automatically Hierarchic Categories in Menu WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-20Fix
CVE-2025-50047Sitekit WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-20Fix
CVE-2025-50046WPComplete WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-20Fix
CVE-2025-50045Related Products Manager for WooCommerce WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-20Fix
CVE-2025-50044Real Estate Manager WordPress plugin cross-site request forgery (CSRF)6.5CNA v3.10.2%2025-06-20
CVE-2025-50043Code Engine WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-20Fix
CVE-2025-50042WP Register Profile With Shortcode WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-20
CVE-2025-50041Gutenberg Blocks ACF Blocks Suite WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-20
CVE-2025-50038Anant Addons for Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-20
CVE-2025-50037Buying Buddy IDX CRM WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-20Fix
CVE-2025-50036Mailing Group Listserv WordPress plugin cross-site request forgery (CSRF)6.5CNA v3.10.2%2025-06-20
CVE-2025-50035Fyrebox Quizzes WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-20
CVE-2025-50034Enhanced Blocks Page Builder Blocks for Gutenberg WordPress plugin broken access control6.5CNA v3.10.3%2025-06-20
CVE-2025-50033Fitness Park WordPress theme cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-20
CVE-2025-50030Spark Multipurpose WordPress theme cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-20
CVE-2025-50027Login/Signup Popup WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-06-20Fix
CVE-2025-50026Spoki WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-06-20
CVE-2025-50025CP Polls WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-06-20Fix
CVE-2025-50024ATP Call Now WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-06-20
CVE-2025-50023CodePen Embed Block WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-06-20Fix
CVE-2025-50022WP-FB-AutoConnect WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-06-20
CVE-2025-50021Better Random Redirect WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-06-20
CVE-2025-50020RDFa Breadcrumb WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-06-20
CVE-2025-50019Simple Sticky Footer WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-06-20
CVE-2025-50018Tealium WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-06-20Fix
CVE-2025-50017WP Voting Contest WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-06-20
CVE-2025-50016IP Based Login WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-06-20Fix
CVE-2025-50015Hand Talk WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-06-20Fix
CVE-2025-50014PDPA Consent for Thailand WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-06-20
CVE-2025-50013CSV Importer Improved WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-06-20
CVE-2025-50012Inventory Presser WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-06-20Fix
CVE-2025-50011WordPress plugin Recipes manager - WPH cross-site scripting (XSS)5.9CNA v3.10.3%2025-06-20
CVE-2025-50010Zapier for WordPress plugin broken access control5.4CNA v3.10.3%2025-06-20Fix
CVE-2025-50009Kata Plus WordPress plugin broken access control5.4CNA v3.10.3%2025-06-20Fix
CVE-2025-50008WooCommerce Manager WordPress plugin cscode missing authorization5.4CNA v3.10.3%2025-06-20
CVE-2025-49998WooCommerce Fortnox Integration WordPress plugin broken access control5.4CNA v3.10.3%2025-06-20Fix
CVE-2025-49997Giveaways and Contests by RafflePress WordPress plugin broken access control + CSRF5.3CNA v3.10.3%2025-06-20Fix
CVE-2025-49996WP Visitor Statistics (Real Time Traffic) WordPress plugin broken access control5.3CNA v3.10.4%2025-06-20Fix
CVE-2025-49995Download Attachments WordPress plugin insecure direct object references (IDOR)5.3CNA v3.10.4%2025-06-20Fix
CVE-2025-49993Cookie-Script.com WordPress plugin broken access control5.3CNA v3.10.3%2025-06-20Fix
CVE-2025-49991WP-Recall WordPress plugin broken access control5.3CNA v3.10.4%2025-06-20
CVE-2025-49990ContentStudio WordPress plugin broken access control5.3CNA v3.10.3%2025-06-20Fix
CVE-2025-49989App Builder WordPress plugin broken access control5.3CNA v3.10.3%2025-06-20Fix
CVE-2025-49988Contact Form 7 AWeber Extension WordPress plugin broken access control5.3CNA v3.10.4%2025-06-20Fix
CVE-2025-49987CRM ERP Business Solution WordPress plugin broken access control5.3CNA v3.10.3%2025-06-20
CVE-2025-49986Video List Manager WordPress plugin broken access control5.3CNA v3.10.3%2025-06-20
CVE-2025-49985Auto Upload Images WordPress plugin server side request forgery (SSRF)4.9CNA v3.10.2%2025-06-20Fix
CVE-2025-49984PowerPress Podcasting WordPress plugin server side request forgery (SSRF)4.9CNA v3.10.2%2025-06-20Fix
CVE-2025-49983WPThumb WordPress plugin server side request forgery (SSRF)4.9CNA v3.10.2%2025-06-20
CVE-2025-49982WP Customer Area WordPress plugin broken access control4.3CNA v3.10.3%2025-06-20Fix
CVE-2025-49981User Roles and Capabilities WordPress plugin broken access control4.3CNA v3.10.3%2025-06-20
CVE-2025-49980WP User Profile Avatar WordPress plugin broken access control4.3CNA v3.10.3%2025-06-20
CVE-2025-49979Media Hygiene WordPress plugin broken access control4.3CNA v3.10.3%2025-06-20Fix
CVE-2025-49978JobSearch WordPress plugin insecure direct object references (IDOR)4.3CNA v3.10.4%2025-06-20Fix
CVE-2025-49977WP Inventory Manager WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-06-20Fix
CVE-2025-49976WANotifier WordPress plugin broken access control4.3CNA v3.10.3%2025-06-20Fix
CVE-2025-49975JobWP WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-06-20Fix
CVE-2025-49974UpStream: a Project Management Plugin for WordPress broken access control4.3CNA v3.10.3%2025-06-20
CVE-2025-49973Image Sizes Controller WordPress plugin GrandPlugins missing authorization4.3CNA v3.10.3%2025-06-20
CVE-2025-49972TM Replace Howdy WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-06-20
CVE-2025-49971eDS Responsive Menu WordPress plugin broken access control4.3CNA v3.10.3%2025-06-20
CVE-2025-49970Hello FSE Blog WordPress theme broken access control4.3CNA v3.10.3%2025-06-20
CVE-2025-49969Zara 4 Image Compression WordPress plugin broken access control4.3CNA v3.10.3%2025-06-20
CVE-2025-49968XML Travel Portal Widget WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-06-20
CVE-2025-49967Live Sports Streamthunder WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-06-20
CVE-2025-49966Oganro Travel Portal Search Widget for HotelBeds APITUDE API cross-site request forgery4.3CNA v3.10.1%2025-06-20
CVE-2025-49965PixelBeds Channel Manager and Hotel Booking Engine WordPress plugin cross-site request forgery4.3CNA v3.10.1%2025-06-20
CVE-2025-49964ClipLink WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-06-20
CVE-2025-49873Elessi WordPress theme cross-site scripting (XSS)7.1CNA v3.10.3%2025-06-20Fix
CVE-2025-49715Microsoft Dynamics 365 FastTrack Implementation Assets information disclosure7.5CNA v3.10.8%2025-06-20Fix
CVE-2025-49132Pterodactyl Panel allows Unauthenticated arbitrary remote code execution10.0CNA v3.154.5%2025-06-20NucleiMetasploitExploit codeFix
CVE-2025-48945aio-libs aiodns pycares has a use-after-free8.2CNA v4.00.5%2025-06-20Fix
CVE-2025-48706Yftech Coros Pace 3 out-of-bounds read9.1CISA ADP v3.10.6%2025-06-20
CVE-2025-48705Yftech Coros Pace 3 null pointer dereference7.5CISA ADP v3.10.5%2025-06-20
CVE-2025-48059PowSyBl Core Contains a Polynomial ReDoS in RegexCriterion2.7CNA v4.00.6%2025-06-20Fix
CVE-2025-48058PowSyBl Core contains Polynomial REDoS’es6.3CNA v4.00.4%2025-06-20Fix
CVE-2025-47771PowSyBl Core allows deserialization of untrusted SparseMatrix data8.1CNA v4.00.5%2025-06-20Fix
CVE-2025-46179Vishalmathur CloudClassroom-PHP-Project SQL injection9.8CISA ADP v3.10.6%2025-06-20
CVE-2025-46158Redox-os Redox divide by zero6.2CISA ADP v3.10.2%2025-06-20
CVE-2025-45890xxyopen Novel-Plus path traversal9.8CISA ADP v3.11.6%2025-06-20
CVE-2025-45331Ricko Brplot null pointer dereference7.5CISA ADP v3.10.5%2025-06-20
CVE-2025-44635There are multiple unauthorized remote command execution vulnerabilities in the H3C ER2200G2, ERG2-450W, ERG2-1200W, ERG2-1350W, NR1200W series routers before ERG2AW-MNW100-R1117; H3C ER3100G2, ER3200G2, ER3260G2, ER5100G2, ER5200G2, ER6300G2, ER8300G2, ER8300G2-X series routers before ERHMG2-MNW1009.8CISA ADP v3.11.1%2025-06-20
CVE-2025-44203digitaldruid HotelDruid information disclosure through error messages7.5CISA ADP v3.10.6%2025-06-20Exploit codeFix
CVE-2025-38083Linux kernel prio race condition7.8CNA v3.10.2%2025-06-20Fix
CVE-2025-34030sar2html OS command injection10.0CNA v4.052.5%2025-06-20NucleiExploit code
CVE-2025-34029Edimax EW-7438RPn Mini OS command injection via syscmd.asp8.8NVD v3.13.4%2025-06-20Exploit code
CVE-2025-34024Edimax EW-7438RPn Mini OS command injection via mp.asp8.8NVD v3.13.8%2025-06-20Exploit code
CVE-2025-34023Karel IP Phone IP1211 path traversal8.5CNA v4.01.6%2025-06-20NucleiExploit code
CVE-2025-34022Selea Targa IP OCR-ANPR Camera path traversal9.3CNA v4.00.8%2025-06-20Exploit code
CVE-2025-34021Selea Targa IP OCR-ANPR Camera server-side request forgery7.8CNA v4.00.6%2025-06-20Exploit code
CVE-2025-32880Yftech Coros Pace 3 cleartext transmission of sensitive information9.8CISA ADP v3.10.5%2025-06-20Fix
CVE-2025-32879Yftech Coros Pace 3 improper authentication8.8CISA ADP v3.10.5%2025-06-20Fix
CVE-2025-32878Yftech Coros Pace 3 improper certificate validation9.8CISA ADP v3.10.4%2025-06-20Fix
CVE-2025-32877Yftech Coros Pace 3 improper authentication9.8CISA ADP v3.10.7%2025-06-20Fix
CVE-2025-32876Yftech Coros Pace 3 missing authentication6.8CISA ADP v3.10.4%2025-06-20Fix
CVE-2025-32875COROS application Bluetooth pairing missing encryption5.7CISA ADP v3.10.2%2025-06-20
CVE-2025-32753Dell PowerScale OneFS SQL injection5.3CNA v3.10.2%2025-06-20Fix
CVE-2025-25038MiniDVBLinux Root command injection9.8v3.15.6%2025-06-20Exploit code
CVE-2025-25037Aquatronica Controller System Complete information disclosure9.3CNA v4.01.6%2025-06-20NucleiExploit code
CVE-2025-25034SugarCRM PHP deserialization RCE9.3CNA v4.05.0%2025-06-20NucleiExploit codeFix
CVE-2025-6372D-Link DIR-619L formSetWizard1 stack-based overflow8.7CNA v4.01.2%2025-06-20
CVE-2025-6371D-Link DIR-619L formSetEnableWizard stack-based overflow8.7CNA v4.01.2%2025-06-20
CVE-2025-6370D-Link DIR-619L formWlanGuestSetup stack-based overflow8.7CNA v4.01.2%2025-06-20
CVE-2025-6369D-Link DIR-619L formdumpeasysetup stack-based overflow8.7CNA v4.01.2%2025-06-20
CVE-2025-6368D-Link DIR-619L formSetEmail stack-based overflow8.7CNA v4.01.2%2025-06-20
CVE-2025-6367D-Link DIR-619L formSetDomainFilter stack-based overflow8.7CNA v4.01.2%2025-06-20
CVE-2025-6365HobbesOSR Kitten pgtable.h set_pte_at resource consumption7.5v3.10.8%2025-06-20
CVE-2025-6364code-projects Simple Pizza Ordering System adduser-exec.php SQL injection9.8v3.10.5%2025-06-20
CVE-2025-6363code-projects Simple Pizza Ordering System adding-exec.php SQL injection9.8v3.10.5%2025-06-20
CVE-2025-6362code-projects Simple Pizza Ordering System editpro.php SQL injection9.8v3.10.5%2025-06-20
CVE-2025-6361code-projects Simple Pizza Ordering System adds.php SQL injection9.8v3.10.5%2025-06-20