CVE-2025 list

CVE-2025 records published in June 2025

Page two of four: records 1,001 to 2,000 of the 3,210 published in June 2025, newest first. The first page carries the figures for June 2025.

CVE-2025 records published in June 2025, newest first: records 1,001 to 2,000 of 3,210
CVE Summary CVSS EPSS Published Signals
CVE-2025-6360code-projects Simple Pizza Ordering System portal.php SQL injection9.8v3.10.5%2025-06-20
CVE-2025-6359code-projects Simple Pizza Ordering System cashconfirm.php SQL injection9.8v3.10.5%2025-06-20
CVE-2025-6358code-projects Simple Pizza Ordering System saveorder.php SQL injection9.8v3.10.5%2025-06-20
CVE-2025-6357code-projects Simple Pizza Ordering System paymentportal.php SQL injection9.8v3.10.5%2025-06-20
CVE-2025-6356code-projects Simple Pizza Ordering System addmem.php SQL injection9.8v3.10.5%2025-06-20
CVE-2025-6355SourceCodester Online Hotel Reservation System execeditroom.php SQL injection9.8v3.10.5%2025-06-20
CVE-2025-6354code-projects Online Shoe Store customer_signup.php SQL injection9.8v3.10.5%2025-06-20
CVE-2025-6353code-projects Responsive Blog search.php cross-site scripting5.4v3.10.4%2025-06-20
CVE-2025-6352code-projects Automated Voting System Backend vote.php direct request9.1v3.10.7%2025-06-20
CVE-2025-6351itsourcecode Employee Record Management System editprofile.php SQL injection9.8v3.10.4%2025-06-20
CVE-2025-6347code-projects Responsive Blog pageViewMembers.php cross-site scripting5.4v3.10.3%2025-06-20
CVE-2025-6346SourceCodester Advance Charity Management System fundDetails.php SQL injection9.8v3.10.5%2025-06-20
CVE-2025-6345SourceCodester My Food Recipe Add Recipe page add-recipe.php addRecipeModal cross-site scripting5.4v3.10.3%2025-06-20
CVE-2025-6344code-projects Online Shoe Store contactus.php SQL injection9.8v3.10.5%2025-06-20
CVE-2025-6343code-projects Online Shoe Store admin_product.php SQL injection9.8v3.10.5%2025-06-20
CVE-2025-6342code-projects Online Shoe Store admin_football.php SQL injection9.8v3.10.5%2025-06-20
CVE-2025-6341code-projects School Fees Payment System cross-site request forgery5.3CNA v4.00.3%2025-06-20
CVE-2025-6340code-projects School Fees Payment System branch.php cross-site scripting5.4v3.10.3%2025-06-20
CVE-2025-6339ponaravindb Hospital Management System func3.php SQL injection9.8v3.10.6%2025-06-20
CVE-2025-6337TOTOLINK A3002R/A3002RU HTTP POST request formTmultiAP buffer overflow8.7CNA v4.01.0%2025-06-20
CVE-2025-6336TOTOLINK EX1200T HTTP POST request formTmultiAP buffer overflow6.5NVD v3.10.9%2025-06-20
CVE-2025-6335DedeCMS template dedetag.class.php command injection7.2NVD v3.16.5%2025-06-20
CVE-2025-6334D-Link DIR-867 Query String strncpy stack-based overflow8.7CNA v4.01.0%2025-06-20
CVE-2025-6333PHPGurukul Directory Management System admin-profile.php SQL injection8.8v3.10.4%2025-06-20
CVE-2025-6332PHPGurukul Directory Management System manage-directory.php SQL injection8.8v3.10.4%2025-06-20
CVE-2025-6331PHPGurukul Directory Management System search-directory.php SQL injection8.8v3.10.4%2025-06-20
CVE-2025-6330PHPGurukul Directory Management System searchdata.php SQL injection9.8v3.10.5%2025-06-20
CVE-2025-6329ScriptAndTools Real Estate Management System User Delete userdelete.php authorization8.1v3.10.5%2025-06-20
CVE-2025-6328D-Link DIR-815 hedwig.cgi sub_403794 stack-based overflow8.7CNA v4.01.2%2025-06-20
CVE-2025-6323PHPGurukul Pre-School Enrollment System enrollment.php SQL injection9.8v3.10.5%2025-06-20
CVE-2025-6322PHPGurukul Pre-School Enrollment System visit.php SQL injection9.8v3.10.5%2025-06-20
CVE-2025-6321PHPGurukul Pre-School Enrollment System add-subadmin.php SQL injection8.8v3.10.4%2025-06-20
CVE-2025-6320PHPGurukul Pre-School Enrollment System add-class.php SQL injection8.8v3.10.4%2025-06-20
CVE-2025-6319PHPGurukul Pre-School Enrollment System add-teacher.php SQL injection8.8v3.10.4%2025-06-20
CVE-2025-6318PHPGurukul Pre-School Enrollment System check_availability.php SQL injection9.8v3.10.5%2025-06-20
CVE-2025-6317code-projects Online Shoe Store confirm.php SQL injection9.8v3.10.5%2025-06-20
CVE-2025-6316code-projects Online Shoe Store admin_running.php SQL injection9.8v3.10.5%2025-06-20
CVE-2025-6315code-projects Online Shoe Store cart2.php SQL injection9.8v3.10.5%2025-06-20
CVE-2025-6314Campcodes Sales and Inventory System cat_update.php SQL injection9.8v3.10.5%2025-06-20
CVE-2025-6313Campcodes Sales and Inventory System cat_add.php SQL injection9.8v3.10.5%2025-06-20
CVE-2025-6312Campcodes Sales and Inventory System cash_transaction.php SQL injection9.8v3.10.5%2025-06-20
CVE-2025-6311Campcodes Sales and Inventory System account_add.php SQL injection9.8v3.10.5%2025-06-20
CVE-2025-6310PHPGurukul Emergency Ambulance Hiring Portal index.php SQL injection9.8v3.10.5%2025-06-20
CVE-2025-6309PHPGurukul Emergency Ambulance Hiring Portal add-ambulance.php SQL injection8.8v3.10.4%2025-06-20
CVE-2025-6308PHPGurukul Emergency Ambulance Hiring Portal bwdates-request-report-details.php SQL injection8.8v3.10.4%2025-06-20
CVE-2025-6307code-projects Online Shoe Store edit_customer.php SQL injection9.8v3.10.5%2025-06-20
CVE-2025-6306code-projects Online Shoe Store admin_index.php SQL injection9.8v3.10.5%2025-06-20
CVE-2025-6305code-projects Online Shoe Store admin_feature.php SQL injection9.8v3.10.5%2025-06-20
CVE-2025-6304code-projects Online Shoe Store cart.php SQL injection9.8v3.10.5%2025-06-20
CVE-2025-6303code-projects Online Shoe Store contactus1.php SQL injection9.8v3.10.5%2025-06-20
CVE-2025-6302TOTOLINK EX1200T cstecgi.cgi setStaticDhcpConfig stack-based overflow8.7CNA v4.01.0%2025-06-20
CVE-2025-6301PHPGurukul Notice Board System Add Notice manage-notices.php cross-site scripting5.4v3.10.3%2025-06-20
CVE-2025-6300PHPGurukul Employee Record Management System editempeducation.php SQL injection9.8v3.10.5%2025-06-20
CVE-2025-6299TOTOLINK N150RT formWSC os command injection5.1CNA v4.011.6%2025-06-20
CVE-2025-6296code-projects Hostel Management System empty_rooms.php SQL injection9.8v3.10.5%2025-06-20
CVE-2025-6295code-projects Hostel Management System allocated_rooms.php SQL injection9.8v3.10.5%2025-06-20
CVE-2025-6294code-projects Hostel Management System contact.php SQL injection9.8v3.10.5%2025-06-20
CVE-2025-6293code-projects Hostel Management System contact_manager.php SQL injection9.8v3.10.5%2025-06-20
CVE-2025-6292D-Link DIR-825 HTTP POST request sub_4091AC stack-based overflow8.7CNA v4.01.3%2025-06-20
CVE-2025-6291D-Link DIR-825 HTTP POST request do_file stack-based overflow8.7CNA v4.01.3%2025-06-20
CVE-2025-6288PHPGurukul Bus Pass Management System Profile page admin-profile.php cross-site scripting5.4v3.10.3%2025-06-20
CVE-2025-6287PHPGurukul COVID19 Testing Management System Take action test-details.php cross-site scripting5.4v3.10.3%2025-06-20
CVE-2025-6264Velociraptor priviledge escalation via UpdateConfig artifact5.5CNA v3.11.0%2025-06-20Fix
CVE-2025-6257Euro FxRef Currency Converter WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-06-20Fix
CVE-2025-6193Red Hat OpenShift AI trustyai-explainability: Command injection via lmevaljob cr5.9CNA v3.10.7%2025-06-20Fix
CVE-2025-5963TCC Bypass via Dylib injection in Postbox4.8CNA v4.00.2%2025-06-20
CVE-2025-5416Keycloak-core: Keycloak environment information2.7CNA v3.10.3%2025-06-20
CVE-2025-5255TCC Bypass via Dylib injection in Phoenix Code4.8CNA v4.00.3%2025-06-20Fix
CVE-2025-5125Custom Post Carousels with Owl WordPress plugin Contributor+ stored XSS4.8CISA ADP v3.10.2%2025-06-20Fix
CVE-2025-5121Missing authorization in GitLab8.5CNA v3.112.4%2025-06-20Fix
CVE-2025-4981Path traversal leading to RCE by any Authenticated Mattermost User9.9CNA v3.10.8%2025-06-20Fix
CVE-2025-4102Beaver Builder Plugin (Starter Version) WordPress plugin arbitrary file upload7.2CNA v3.10.6%2025-06-20Fix
CVE-2025-3319IBM Spectrum Protect Server authentication bypass8.1CNA v3.10.4%2025-06-20Fix
CVE-2025-3228Mattermost Unauthorized Guest user access to Playbook4.3CNA v3.10.3%2025-06-20Fix
CVE-2025-3227Mattermost unauthorized channel member management through playbook runs4.3CNA v3.10.2%2025-06-20Fix
CVE-2025-2443Improper neutralization of input during web page generation (cross-site scripting) in GitLab8.7CNA v3.10.4%2025-06-20Fix
CVE-2025-52474WeGIA SQL injection vulnerability in id parameter on control.php endpoint8.3CNA v4.00.5%2025-06-19Fix
CVE-2025-52467pgai secrets exfiltration via `pull_request_target`9.1CNA v3.10.4%2025-06-19Exploit code
CVE-2025-52464Meshtastic Repeated Public and Private Keypairs9.5CNA v4.00.6%2025-06-19Exploit codeFix
CVE-2025-50201WeGIA OS command injection in debug_info.php parameter branch9.8CNA v3.14.7%2025-06-19Fix
CVE-2025-50200RabbitMQ Node can log Basic Auth header from an HTTP request6.7CNA v4.00.2%2025-06-19Fix
CVE-2025-50183OpenList (frontend) allows XSS Attacks in the built-in Markdown Viewer6.5CNA v3.10.3%2025-06-19Fix
CVE-2025-50182urllib3 does not control redirects in browsers and Node.js5.3CNA v3.10.4%2025-06-19Fix
CVE-2025-50181urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation5.3CNA v3.10.5%2025-06-19Fix
CVE-2025-49763Apache Traffic Server: Remote DoS via memory exhaustion in ESI plugin7.5CISA ADP v3.10.7%2025-06-19Fix
CVE-2025-49014jq heap use-after-free vulnerability in f_strflocaltime5.5CNA v4.00.4%2025-06-19Fix
CVE-2025-48886Hydra hydra-node vulnerability4.8CNA v3.10.3%2025-06-19Fix
CVE-2025-47293PowSyBl Core XML Reader allows XXE and SSRF2.7CNA v4.00.4%2025-06-19Fix
CVE-2025-36050IBM QRadar SIEM information disclosure6.2CNA v3.10.2%2025-06-19Fix
CVE-2025-33121IBM QRadar SIEM XML external entity injection7.1CNA v3.10.5%2025-06-19Fix
CVE-2025-33117IBM QRadar SIEM command execution9.1CNA v3.10.6%2025-06-19Fix
CVE-2025-32896Apache SeaTunnel: Unauthenticated insecure access6.5CISA ADP v3.11.2%2025-06-19Fix
CVE-2025-31698Apache Traffic Server: Client IP address from PROXY protocol is not used for ACL7.5CISA ADP v3.10.6%2025-06-19Fix
CVE-2025-24291Versa Director argument injection6.1CNA v3.10.4%2025-06-19Fix
CVE-2025-24288Versa Director insecure default initialization9.8CNA v3.10.5%2025-06-19Fix
CVE-2025-24287Veeam Backup for Microsoft Windows code injection6.1CNA v3.10.2%2025-06-19
CVE-2025-24286Veeam Backup and Recovery improper privilege management4.9NVD v3.119.1%2025-06-19Fix
CVE-2025-23173Versa Director remote code execution7.5CNA v3.10.6%2025-06-19Fix
CVE-2025-23172Versa Director server-side request forgery7.2CNA v3.11.1%2025-06-19Fix
CVE-2025-23171Versa Director unrestricted file upload7.2CNA v3.10.6%2025-06-19Fix
CVE-2025-23170Versa Director command injection6.7CNA v3.10.6%2025-06-19Fix
CVE-2025-23169Versa Director cross-site scripting6.1v3.10.4%2025-06-19Fix
CVE-2025-23168Versa Director authentication bypass by spoofing8.8v3.10.4%2025-06-19Fix
CVE-2025-23121Veeam Backup and Recovery code injection8.8NVD v3.124.2%2025-06-19Fix
CVE-2025-6384CrafterCMS improper control of dynamically-managed code resources in Crafter Studio9.1v3.11.0%2025-06-19Exploit codeFix
CVE-2025-6286PHPGurukul COVID19 Testing Management System search-report-result.php redirect6.1v3.10.2%2025-06-19
CVE-2025-6285PHPGurukul COVID19 Testing Management System search-report-result.php cross-site scripting6.1v3.10.4%2025-06-19
CVE-2025-6284PHPGurukul Car Rental Portal cross-site request forgery5.3CNA v4.00.3%2025-06-19
CVE-2025-6283xataio Xata Agent route.ts GET path traversal7.5v3.10.7%2025-06-19Fix
CVE-2025-6282xlang-ai OpenAgents file.py create_upload_file path traversal9.8v3.10.7%2025-06-19
CVE-2025-6281OpenBMB XAgent community path traversal6.3v3.10.5%2025-06-19
CVE-2025-6280TransformerOptimus SuperAGI EmailToolKit read_email.py download_attachment path traversal9.8v3.10.7%2025-06-19
CVE-2025-6279Upsonic Pickle add_tool cloudpickle.loads deserialization8.0v3.10.6%2025-06-19Fix
CVE-2025-6278Upsonic server.py os.path.join path traversal9.8v3.10.8%2025-06-19Fix
CVE-2025-6277Brilliance Golden Link Secondary System custTakeInfoPage.htm SQL injection9.8v3.10.5%2025-06-19
CVE-2025-6276Brilliance Golden Link Secondary System rentTakeInfoPage.htm SQL injection9.8v3.10.5%2025-06-19
CVE-2025-6275WebAssembly wabt binary-reader-interp.cc GetFuncOffset use-after-free4.8CNA v4.00.2%2025-06-19
CVE-2025-6274WebAssembly wabt binary-reader-interp.cc OnDataCount resource consumption4.8CNA v4.00.2%2025-06-19
CVE-2025-6273WebAssembly wabt binary-reader-objdump.cc LogOpcode assertion4.8CNA v4.00.2%2025-06-19
CVE-2025-6272wasm3 m3_compile.c MarkSlotAllocated out-of-bounds write4.8CNA v4.00.2%2025-06-19
CVE-2025-6271Swftools wav2swf wav.c wav_convert2mono out-of-bounds4.8CNA v4.00.3%2025-06-19
CVE-2025-6270HDF5 H5FSsection.c H5FS__sect_find_node heap-based overflow4.8CNA v4.00.3%2025-06-19Fix
CVE-2025-6269HDF5 H5Cimage.c H5C__reconstruct_cache_entry heap-based overflow4.8CNA v4.00.3%2025-06-19Fix
CVE-2025-6268Luna Imaging search cross-site scripting5.3CNA v4.00.4%2025-06-19
CVE-2025-6267zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 barcodeDetail SQL injection9.8v3.10.4%2025-06-19
CVE-2025-6266Teledyne Flir AX8 upload.php unrestricted upload9.8v3.10.5%2025-06-19
CVE-2025-6201Pixel Manager for WooCommerce (PRO) WordPress plugin cross-site scripting6.4CNA v3.10.3%2025-06-19Fix
CVE-2025-6019Red Hat Enterprise Linux 10 libblockdev: Lpe from allow_active to root in libblockdev via udisks7.0CNA v3.10.5%2025-06-19Exploit codeKCVFix
CVE-2025-5524OceanWP WordPress theme authenticated (Contributor+) stored cross-site scripting via Select HTML Tag4.9CNA v3.10.2%2025-06-19Fix
CVE-2025-5490Football Pool WordPress plugin authenticated (Administrator+) stored cross-site scripting4.8v3.10.2%2025-06-19Fix
CVE-2025-5234Gutenverse News WordPress plugin stored cross-site scripting5.4v3.10.2%2025-06-19Fix
CVE-2025-5071AI Engine - Authenticated (Subscriber+) insufficient authorization to privilege escalation via MCP8.8CNA v3.10.7%2025-06-19Fix
CVE-2025-4965WPBakery Page Builder WordPress plugin stored cross-site scripting5.4v3.10.2%2025-06-19Fix
CVE-2025-4738Authenticated SQLi in Yirmibes Software's MY ERP9.8CNA v3.10.4%2025-06-19Fix
CVE-2025-4661Brocade Fabric OS path traversal4.8CNA v4.00.2%2025-06-19Fix
CVE-2025-4571StellarWP GiveWP campaign permission checks missing authorization5.4CNA v3.10.3%2025-06-19Fix
CVE-2025-4479ElementsKit Lite WordPress plugin stored cross-site scripting5.4v3.10.2%2025-06-19Fix
CVE-2025-4367Download Manager WordPress plugin stored cross-site scripting5.4v3.10.2%2025-06-19Fix
CVE-2025-51381KAON KCM3100 An authentication bypass9.3CNA v4.00.7%2025-06-18
CVE-2025-50202Lychee path traversal7.5CNA v3.10.6%2025-06-18Fix
CVE-2025-49591CryptPad two-factor authentication authentication bypass7.4CNA v4.00.5%2025-06-18Fix
CVE-2025-49590CryptPad dom-based cross-site scripting (XSS)2.9CNA v4.00.3%2025-06-18Fix
CVE-2025-49015Couchbase .NET SDK does not properly enable hostname verification for TLS certificates4.9CISA ADP v3.10.2%2025-06-18Fix
CVE-2025-46157Efrotech Timetrax unrestricted file upload9.9CISA ADP v3.10.9%2025-06-18Exploit code
CVE-2025-46109PbootCMS SQL injection8.8CISA ADP v3.10.4%2025-06-18
CVE-2025-45786Updategadh Real Estate Management cross-site scripting8.1CISA ADP v3.10.4%2025-06-18
CVE-2025-45784D-Link Dph-400s hard-coded credentials9.8CISA ADP v3.10.6%2025-06-18
CVE-2025-45661Heavenspell Minitcg cross-site scripting5.9CISA ADP v3.10.4%2025-06-18
CVE-2025-44952Open5GS buffer overflow7.8CISA ADP v3.10.2%2025-06-18
CVE-2025-44951Open5GS buffer overflow7.1CISA ADP v3.10.2%2025-06-18
CVE-2025-38082Linux kernel GPIO virtuser driver out-of-bounds write7.8CNA v3.10.2%2025-06-18Fix
CVE-2025-38081Linux kernel Rockchip SPI driver out-of-bounds read7.1v3.10.2%2025-06-18Fix
CVE-2025-38080Linux kernel AMD display core out-of-bounds write7.8CNA v3.10.2%2025-06-18Fix
CVE-2025-38079Linux kernel crypto double free7.8CNA v3.10.2%2025-06-18Fix
CVE-2025-38078Linux kernel ALSA PCM OSS layer race condition7.8CNA v3.10.2%2025-06-18Fix
CVE-2025-38077Linux kernel dell-wmi-sysman buffer overflow7.8v3.10.2%2025-06-18Fix
CVE-2025-38076Linux kernel alloc_tag module counters use-after-free7.8v3.10.2%2025-06-18Fix
CVE-2025-38075Linux kernel iSCSI target NOPIN timer null pointer dereference9.8CNA v3.10.5%2025-06-18Fix
CVE-2025-38074Linux kernel vhost-scsi logging vulnerability8.8CNA v3.10.2%2025-06-18Fix
CVE-2025-38072Linux kernel libnvdimm label initialization divide-by-zero5.5v3.10.2%2025-06-18Fix
CVE-2025-38071Linux kernel x86 memblock allocator vulnerability5.5NVD v3.10.2%2025-06-18Fix
CVE-2025-38070Linux kernel sma1307 null pointer dereference5.5v3.10.1%2025-06-18Fix
CVE-2025-38069Linux kernel pci-epf-test endpoint driver double free7.8NVD v3.10.2%2025-06-18Fix
CVE-2025-38068Linux kernel LZO compression out-of-bounds write7.8CNA v3.10.2%2025-06-18Fix
CVE-2025-38067Linux kernel rseq registration vulnerability5.5NVD v3.10.6%2025-06-18Fix
CVE-2025-38066Linux kernel device-mapper cache resume reachable assertion5.5v3.10.2%2025-06-18Fix
CVE-2025-38065Linux kernel OrangeFS file size handling vulnerability7.8CNA v3.10.2%2025-06-18Fix
CVE-2025-38064Linux kernel virtio device shutdown handling vulnerability7.8CNA v3.10.2%2025-06-18Fix
CVE-2025-38063Linux kernel dm crash5.5NVD v3.10.2%2025-06-18Fix
CVE-2025-38062Linux kernel MSI IOMMU IOVA handling vulnerability7.8CNA v3.10.2%2025-06-18Fix
CVE-2025-38061Linux kernel pktgen vulnerability5.5v3.10.2%2025-06-18Fix
CVE-2025-38060Linux kernel BPF verifier vulnerability7.8CNA v3.10.2%2025-06-18Fix
CVE-2025-38059Linux kernel btrfs scrub null pointer dereference5.5v3.10.2%2025-06-18Fix
CVE-2025-38058Linux kernel mount reference counting improper locking7.8CNA v3.10.2%2025-06-18Fix
CVE-2025-38057Linux kernel espintcp memory leak7.5CNA v3.10.5%2025-06-18Fix
CVE-2025-38056Linux kernel SOF Intel HDA driver use-after-free7.8v3.10.2%2025-06-18Fix
CVE-2025-38055Linux kernel PEBS-via-PT sampling null pointer dereference5.5v3.10.2%2025-06-18Fix
CVE-2025-38054Linux kernel PTP OCP driver vulnerability5.5v3.10.2%2025-06-18Fix
CVE-2025-38053Linux kernel idpf driver null pointer dereference5.5v3.10.2%2025-06-18Fix
CVE-2025-38052Linux kernel TIPC crypto use-after-free8.8CNA v3.10.5%2025-06-18Fix
CVE-2025-38051Linux kernel CIFS client readdir use-after-free7.8CNA v3.10.2%2025-06-18Fix
CVE-2025-38050Linux kernel hugetlb folio replacement null pointer dereference5.5v3.10.1%2025-06-18Fix
CVE-2025-38048Linux kernel virtio_ring event handling race condition4.7v3.10.1%2025-06-18Fix
CVE-2025-38047Linux kernel x86 FRED S4 resume denial of service5.5v3.10.2%2025-06-18Fix
CVE-2025-38045Linux kernel iwlwifi debug dump denial of service5.5v3.10.2%2025-06-18Fix
CVE-2025-38044Linux kernel cx231xx MPEG encoder driver vulnerability5.5v3.10.2%2025-06-18Fix
CVE-2025-38043Linux kernel arm_ffa driver vulnerability5.5v3.10.2%2025-06-18Fix
CVE-2025-38042Linux kernel k3-udma-glue RX channel vulnerability5.5NVD v3.10.2%2025-06-18Fix
CVE-2025-38041Linux kernel H616 GPU clock driver denial of service5.5NVD v3.10.2%2025-06-18Fix
CVE-2025-38040Linux kernel mctrl_gpio serial driver vulnerability5.5v3.10.2%2025-06-18Fix
CVE-2025-38039Linux kernel mlx5e MQPRIO HTB offload vulnerability5.5v3.10.2%2025-06-18Fix
CVE-2025-38038Linux kernel amd-pstate driver deadlock5.5v3.10.2%2025-06-18Fix
CVE-2025-38037Linux kernel VXLAN FDB race condition5.5v3.10.2%2025-06-18Fix
CVE-2025-38036Linux kernel Xe GPU virtual function GT initialization vulnerability5.5v3.10.1%2025-06-18Fix
CVE-2025-38035Linux kernel nvmet-tcp null pointer dereference7.5CNA v3.10.6%2025-06-18Fix
CVE-2025-38034Linux kernel btrfs backref tracing null pointer dereference5.5v3.10.2%2025-06-18Fix
CVE-2025-38033Linux kernel control-flow integrity for Rust code denial of service5.5v3.10.2%2025-06-18Fix
CVE-2025-38032Linux kernel IPv4 multicast routing table cleanup vulnerability5.5v3.10.1%2025-06-18Fix
CVE-2025-38031Linux kernel padata reorder work vulnerability5.5v3.10.2%2025-06-18Fix
CVE-2025-38029Linux kernel KASAN vmalloc shadow population denial of service5.5NVD v3.10.2%2025-06-18Fix
CVE-2025-38028Linux kernel NFS localio file handle open race condition7.8CNA v3.10.1%2025-06-18Fix
CVE-2025-38027Linux kernel max20086 regulator driver out-of-bounds read7.1v3.10.2%2025-06-18Fix
CVE-2025-38025Linux kernel ad7606 ADC driver null pointer dereference5.5v3.10.1%2025-06-18Fix
CVE-2025-38024Linux kernel RDMA rxe queue cleanup use-after-free7.8CNA v3.10.2%2025-06-18Fix
CVE-2025-38023Linux kernel NFS lock context handling null pointer dereference5.5v3.10.2%2025-06-18Fix
CVE-2025-38022Linux kernel RDMA device registration use-after-free7.8CNA v3.10.2%2025-06-18Fix
CVE-2025-38021Linux kernel amdgpu display pipe programming null pointer dereference5.5v3.10.1%2025-06-18Fix
CVE-2025-38020Linux kernel mlx5e MACsec offload null pointer dereference5.5v3.10.2%2025-06-18Fix
CVE-2025-38019Linux kernel mlxsw GRE neighbor offload use-after-free7.8v3.10.2%2025-06-18Fix
CVE-2025-38018Linux kernel TLS socket strparser null pointer dereference7.5CNA v3.10.5%2025-06-18Fix
CVE-2025-38017Linux kernel epoll timeout handling denial of service5.5v3.10.1%2025-06-18Fix
CVE-2025-38016Linux kernel HID BPF dispatch vulnerability8.8CNA v3.10.3%2025-06-18Fix
CVE-2025-38015Linux kernel idxd driver allocation memory leak5.5v3.10.2%2025-06-18Fix
CVE-2025-38014In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper The idxd_cleanup() helper cleans up perfmon, interrupts, internals and so on. Refactor remove call with the idxd_cleanup() helper to avoid code duplication. Note, th5.5v3.10.2%2025-06-18Fix
CVE-2025-38013Linux kernel mac80211 scan request allocation vulnerability7.8v3.10.2%2025-06-18Fix
CVE-2025-38012Linux kernel sched_ext BPF iterator vulnerability7.8CNA v3.10.2%2025-06-18Fix
CVE-2025-38011Linux kernel amdgpu CSA unmap memory leak5.5v3.10.2%2025-06-18Fix
CVE-2025-38010Linux kernel Tegra XUSB PHY driver vulnerability5.5v3.10.2%2025-06-18Fix
CVE-2025-38009Linux kernel mt76 Wi-Fi driver vulnerability5.5v3.10.2%2025-06-18Fix
CVE-2025-38008Linux kernel unaccepted memory handling race condition4.7v3.10.1%2025-06-18Fix
CVE-2025-38007Linux kernel uclogic HID driver null pointer dereference5.5v3.10.2%2025-06-18Fix
CVE-2025-38006Linux kernel MCTP address dump vulnerability5.5v3.10.2%2025-06-18Fix
CVE-2025-38005Linux kernel TI K3 UDMA driver vulnerability7.8CNA v3.10.2%2025-06-18Fix
CVE-2025-36049IBM webMethods Integration Sever XML external entity injection8.8CNA v3.10.6%2025-06-18Fix
CVE-2025-36048IBM webMethods Integration Sever code execution7.2CNA v3.10.5%2025-06-18Fix
CVE-2025-29646Open5GS denial of service7.1CISA ADP v3.10.3%2025-06-18
CVE-2025-26199Vishalmathur CloudClassroom-PHP-Project cleartext transmission of sensitive information9.8CISA ADP v3.10.6%2025-06-18Exploit code
CVE-2025-26198Vishalmathur CloudClassroom-PHP-Project SQL injection9.8CISA ADP v3.10.6%2025-06-18
CVE-2025-23999Breeze WordPress plugin broken access control4.3CNA v3.10.3%2025-06-18Fix
CVE-2025-23252NVIDIA NVDebug tool information disclosure4.5CNA v3.10.3%2025-06-18Fix
CVE-2025-20271Cisco Meraki MX and Z Series AnyConnect VPN with Client Certificate Authentication denial of service8.6CNA v3.10.5%2025-06-18Fix
CVE-2025-20260Cisco ClamAV PDF Scanning buffer overflow9.8CNA v3.11.6%2025-06-18Exploit codeFix
CVE-2025-20234ClamAV UDF File Parsing out-of-bounds read information disclosure5.3CNA v3.10.8%2025-06-18Fix
CVE-2025-6240Profisee path traversal5.0CNA v4.00.3%2025-06-18Fix
CVE-2025-6220Ultimate Addons for Contact Form 7 WordPress plugin arbitrary file upload7.2CNA v3.11.1%2025-06-18Exploit codeFix
CVE-2025-6192Google Chrome Metrics use-after-free8.8CISA ADP v3.10.4%2025-06-18Fix
CVE-2025-6191Google Chrome V8 integer overflow8.8CISA ADP v3.111.5%2025-06-18Fix
CVE-2025-6086CSV Me WordPress plugin authenticated (Administrator+) arbitrary file upload7.2CNA v3.10.6%2025-06-18
CVE-2025-5981Google arbitrary file write in OSV-SCALIBR5.7CNA v4.00.2%2025-06-18Fix
CVE-2025-5237Target Video Easy Publish WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-06-18Fix
CVE-2025-4955tarteaucitron.io WordPress plugin Contributor+ stored XSS4.7CISA ADP v3.10.4%2025-06-18Fix
CVE-2025-4821Cloudflare quiche incorrect congestion window growth by invalid ACK ranges7.5CNA v3.10.9%2025-06-18Fix
CVE-2025-4820Cloudflare quiche incorrect congestion window growth by optimistic ACK5.3CNA v3.10.9%2025-06-18Fix
CVE-2025-4413Pixabay Images WordPress plugin authenticated (Author+) arbitrary file upload8.8CNA v3.10.6%2025-06-18
CVE-2025-1562FunnelKit Automations plugin installer function missing authorization9.8CNA v3.13.3%2025-06-18NucleiFix
CVE-2025-1349IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting5.5CNA v3.10.2%2025-06-18Fix
CVE-2025-1348IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure4.0CNA v3.10.1%2025-06-18Fix
CVE-2025-1088Grafana very long unicode dashboard title or panel name can hang the frontend2.7CNA v3.10.5%2025-06-18Fix
CVE-2025-49882CubeWP Framework WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-17Fix
CVE-2025-49881Responsive Blocks WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-17Fix
CVE-2025-49880CubeWP Forms WordPress plugin broken access control4.3CNA v3.10.2%2025-06-17Fix
CVE-2025-49879Litho WordPress theme arbitrary file deletion8.6CNA v3.10.5%2025-06-17Fix
CVE-2025-49878WPAdverts WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-17Fix
CVE-2025-49877ProfileGrid WordPress plugin server side request forgery (SSRF)4.9CNA v3.10.2%2025-06-17Fix
CVE-2025-49875If-So Dynamic Content Personalization WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-17Fix
CVE-2025-49874Arconix FAQ WordPress plugin broken access control4.3CNA v3.10.2%2025-06-17Fix
CVE-2025-49872myCred WordPress plugin broken access control5.3CNA v3.10.2%2025-06-17Fix
CVE-2025-49871Noptin WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-06-17Fix
CVE-2025-49868FunnelKit Automations WordPress plugin Aman open redirect4.7CNA v3.10.2%2025-06-17Fix
CVE-2025-49865Advanced Settings WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-06-17Fix
CVE-2025-49864AFS Analytics WordPress plugin broken access control5.3CNA v3.10.2%2025-06-17Fix
CVE-2025-49863Advanced Sermons WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-17Fix
CVE-2025-49862Ebook Store WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-06-17Fix
CVE-2025-49861Kama Click Counter WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-17Fix
CVE-2025-49859WP Views Counter WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-17Fix
CVE-2025-49858Arconix Shortcodes WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-17Fix
CVE-2025-49857myCred WordPress plugin broken access control4.3CNA v3.10.2%2025-06-17Fix
CVE-2025-49856Responsive Plus WordPress plugin cross-site request forgery (CSRF) to settings Change4.3CNA v3.10.1%2025-06-17Fix
CVE-2025-49855Meks Flexible Shortcodes WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-06-17Fix
CVE-2025-49854Slim SEO WordPress plugin SQL injection7.6CNA v3.10.3%2025-06-17Fix
CVE-2025-49850Out-of-bounds read in Write in LS Electric GMWin 48.4CNA v4.00.2%2025-06-17
CVE-2025-49849Out-of-bounds read in Write in LS Electric GMWin 48.4CNA v4.00.2%2025-06-17
CVE-2025-49848Out-of-bounds write in LS Electric GMWin 48.4CNA v4.00.2%2025-06-17
CVE-2025-49847llama.cpp vulnerable to buffer overflow via Malicious GGUF Model8.8CNA v3.10.5%2025-06-17Fix
CVE-2025-49843conda-smithy has Incorrect Default File Permissions2.7CNA v4.00.6%2025-06-17Fix
CVE-2025-49842conda-forge-webservices privilege escalation Risk via Default Docker Root User1.0CNA v4.00.2%2025-06-17Fix
CVE-2025-49825Teleport allows remote authentication bypass9.8CNA v3.17.9%2025-06-17NucleiFix
CVE-2025-49824conda-smithy insecure encryption vulnerable to Oracle Padding Attack1.7CNA v4.00.3%2025-06-17Fix
CVE-2025-49823Conda Constructor command injection via Unsanitized User Input (Low)0.0CNA v3.10.2%2025-06-17Fix
CVE-2025-49593Portainer HTTP headers may leak to Malicious Container Registries6.8CNA v3.10.4%2025-06-17Fix
CVE-2025-49508CozyStay WordPress theme local file inclusion8.1CNA v3.10.6%2025-06-17Fix
CVE-2025-49487Trend Micro Worry-Free Business Security Services An uncontrolled search path6.8CNA v3.10.3%2025-06-17Fix
CVE-2025-49452PostaPanduri WordPress plugin SQL injection9.3CNA v3.10.3%2025-06-17Fix
CVE-2025-49451yannisraft Aeroscroll Gallery path traversal7.5CNA v3.10.5%2025-06-17
CVE-2025-49447WordPress FW Food Menu plugin arbitrary file upload10.0CNA v3.10.4%2025-06-17
CVE-2025-49444Reformer for Elementor WordPress plugin arbitrary file upload10.0CNA v3.10.4%2025-06-17
CVE-2025-49415FW Gallery WordPress plugin arbitrary file deletion8.6CNA v3.10.5%2025-06-17
CVE-2025-49385Trend Micro Internet Security (Consumer) link following7.8CNA v3.10.2%2025-06-17Fix
CVE-2025-49384Trend Micro Internet Security (Consumer) link following7.8CNA v3.10.2%2025-06-17Fix
CVE-2025-49331eCommerce Product Catalog WordPress plugin PHP object injection7.2CNA v3.10.5%2025-06-17Fix
CVE-2025-49330Integration for Contact Form 7 and Zoho CRM, Bigin WordPress plugin PHP object injection9.8CNA v3.10.6%2025-06-17Fix
CVE-2025-49316WP2LEADS WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-06-17Fix
CVE-2025-49312Echo RSS Feed Post Generator Plugin for WordPress reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-06-17Fix
CVE-2025-49266Ultimate Reviews WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-06-17Fix
CVE-2025-49261Diza WordPress theme local file inclusion8.1CNA v3.10.7%2025-06-17Fix
CVE-2025-49260Aora WordPress theme local file inclusion8.1CNA v3.10.7%2025-06-17Fix
CVE-2025-49259Hara WordPress theme local file inclusion8.1CNA v3.10.6%2025-06-17Fix
CVE-2025-49258Maia WordPress theme local file inclusion8.1CNA v3.10.7%2025-06-17Fix
CVE-2025-49257Zota WordPress theme local file inclusion8.1CNA v3.10.6%2025-06-17Fix
CVE-2025-49256Sapa WordPress theme local file inclusion8.1CNA v3.10.6%2025-06-17Fix
CVE-2025-49255Ruza WordPress theme local file inclusion8.1CNA v3.10.6%2025-06-17Fix
CVE-2025-49254Nika WordPress theme local file inclusion8.1CNA v3.10.6%2025-06-17Fix
CVE-2025-49253Lasa WordPress theme local file inclusion8.1CNA v3.10.6%2025-06-17Fix
CVE-2025-49252Besa WordPress theme local file inclusion8.1CNA v3.10.6%2025-06-17Fix
CVE-2025-49251Fana WordPress theme local file inclusion8.1CNA v3.10.6%2025-06-17Fix
CVE-2025-49234WP Dummy Content Generator WordPress plugin arbitrary user deletion vulnerability6.5CNA v3.10.4%2025-06-17Fix
CVE-2025-49220Trend Micro Apex Central An deserialization of untrusted data9.8CNA v3.12.1%2025-06-17Fix
CVE-2025-49219Trend Micro Apex Central An deserialization of untrusted data9.8CNA v3.11.4%2025-06-17Fix
CVE-2025-49218Trend Micro Endpoint Encryption Policy Server post-auth SQL injection7.7CNA v3.10.1%2025-06-17Fix
CVE-2025-49217Trend Micro Endpoint Encryption Policy Server An deserialization of untrusted data9.8CNA v3.11.1%2025-06-17Fix
CVE-2025-49216Trend Micro Endpoint Encryption Policy Server An authentication bypass9.8CNA v3.10.5%2025-06-17Fix
CVE-2025-49215Trend Micro Endpoint Encryption Policy Server post-auth SQL injection8.8CNA v3.10.3%2025-06-17Fix
CVE-2025-49214Trend Micro Endpoint Encryption Policy Server An deserialization of untrusted data8.8CNA v3.10.8%2025-06-17Fix
CVE-2025-49213Trend Micro Endpoint Encryption Policy Server An deserialization of untrusted data9.8CNA v3.113.3%2025-06-17Fix
CVE-2025-49212Trend Micro Endpoint Encryption Policy Server An deserialization of untrusted data9.8CNA v3.113.3%2025-06-17Fix
CVE-2025-49211Trend Micro Endpoint Encryption Policy Server A SQL injection7.7CNA v3.10.1%2025-06-17Fix
CVE-2025-49180X.Org Xwayland RandR extension integer overflow7.8CNA v3.10.3%2025-06-17Fix
CVE-2025-49179X.Org Xwayland X Record extension integer overflow7.3CNA v3.10.3%2025-06-17Fix
CVE-2025-49178X.Org Xwayland request handling denial of service5.5CNA v3.10.2%2025-06-17Fix
CVE-2025-49177X.Org Xwayland XFixes extension information disclosure6.1CNA v3.10.4%2025-06-17Fix
CVE-2025-49176X.Org Xwayland Big Requests extension integer overflow7.3CNA v3.10.4%2025-06-17Fix
CVE-2025-49175X.Org Xwayland X Rendering extension animated cursors out-of-bounds read6.1CNA v3.10.3%2025-06-17Fix
CVE-2025-49158Trend Micro Apex One An uncontrolled search path6.7CNA v3.10.2%2025-06-17Fix
CVE-2025-49157Trend Micro Apex One link following7.8CNA v3.10.2%2025-06-17Fix
CVE-2025-49156Trend Micro Apex One link following7.0CNA v3.10.2%2025-06-17Fix
CVE-2025-49155Trend Micro Apex One An uncontrolled search path8.8CNA v3.10.9%2025-06-17Fix
CVE-2025-49154Trend Micro Apex One improper access control8.7CNA v3.10.1%2025-06-17Fix
CVE-2025-49149LangGenius Dify cross-site scripting5.3CNA v4.00.3%2025-06-17
CVE-2025-49071WordPress Flozen theme arbitrary file upload10.0CNA v3.10.5%2025-06-17Exploit codeFix
CVE-2025-48993Intermesh groupoffice Group-Office vulnerable to reflected XSS via Look and Feel Formatting input5.3CNA v4.00.3%2025-06-17Fix
CVE-2025-48443Trend Micro Password Manager link following6.7CNA v3.10.2%2025-06-17Fix
CVE-2025-48333WordPress eForm - WordPress Form Builder plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-06-17Fix
CVE-2025-48274WP Job Portal WordPress plugin SQL injection7.5NVD v3.10.3%2025-06-17Fix
CVE-2025-48145Track, Analyze and Optimize by WP Tao WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-06-17Fix
CVE-2025-48118Woocommerce Partial Shipment WordPress plugin SQL injection8.5CNA v3.10.3%2025-06-17Fix
CVE-2025-48111YITH PayPal Express Checkout for WooCommerce WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-06-17Fix
CVE-2025-47867Trend Micro Apex Central local file inclusion7.5CNA v3.11.9%2025-06-17Fix
CVE-2025-47866Trend Micro Apex Central An arbitrary file upload4.3CNA v3.10.3%2025-06-17Fix
CVE-2025-47865Trend Micro Apex Central local file inclusion7.5CNA v3.11.8%2025-06-17Fix
CVE-2025-47573School Management System WordPress plugin SQL injection9.3CNA v3.10.5%2025-06-17
CVE-2025-47572WordPress School Management plugin local file inclusion7.5CNA v3.10.7%2025-06-17
CVE-2025-47559MapSVG WordPress plugin arbitrary file upload9.9CNA v3.10.5%2025-06-17Fix
CVE-2025-47452WP VR WordPress plugin arbitrary file upload9.9CNA v3.10.5%2025-06-17Fix
CVE-2025-45880Miliaris Amygdala data resource management function cross-site scripting6.1CISA ADP v3.10.3%2025-06-17
CVE-2025-45879Miliaris Amygdala e-mail manager function cross-site scripting6.1CISA ADP v3.10.3%2025-06-17
CVE-2025-45878Miliaris Amygdala report manager function cross-site scripting6.1CISA ADP v3.10.3%2025-06-17
CVE-2025-45526asvd microlight resource exhaustion2.9CNA v3.10.1%2025-06-17
CVE-2025-45525asvd microlight null pointer dereference2.9CNA v3.10.1%2025-06-17
CVE-2025-41413Fuji Electric Smart Editor out-of-bounds write8.4CNA v4.00.2%2025-06-17Fix
CVE-2025-41388Fuji Electric Smart Editor stack-based buffer overflow8.4CNA v4.00.2%2025-06-17Fix
CVE-2025-40674Os Commerce reflected cross-site scripting (XSS) in osCommerce5.1CNA v4.00.5%2025-06-17
CVE-2025-39508Nasa Core WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-06-17Fix
CVE-2025-39486Rankie WordPress plugin SQL injection8.5CNA v3.10.3%2025-06-17Fix
CVE-2025-39479Smart Notification WordPress plugin SQL injection9.3CNA v3.10.4%2025-06-17
CVE-2025-34511Sitecore PowerShell Extension RCE via unrestricted upload8.8CNA v3.129.8%2025-06-17MetasploitExploit codeKCVFix
CVE-2025-34510Sitecore XM, XC, and XP Post-Auth RCE via Zip Slip8.8CNA v3.124.3%2025-06-17MetasploitExploit codeKCVFix
CVE-2025-34509Sitecore XM and XP hard-coded credentials7.5v3.155.3%2025-06-17NucleiEmerging ThreatsKCVFix
CVE-2025-34508ZendTo path traversal5.3CNA v4.073.2%2025-06-17Emerging ThreatsFix
CVE-2025-33122IBM i privilege escalation7.5CNA v3.10.4%2025-06-17Fix
CVE-2025-32549WordPress WPGYM plugin local file inclusion7.5CNA v3.10.7%2025-06-17
CVE-2025-32510Ovatheme Events Manager WordPress plugin arbitrary file upload10.0CNA v3.10.5%2025-06-17Fix
CVE-2025-32412Fuji Electric Smart Editor out-of-bounds read8.4CNA v4.00.2%2025-06-17Fix
CVE-2025-31919WordPress Spare theme PHP object injection9.8CNA v3.10.5%2025-06-17
CVE-2025-30988Elite Video Player WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-06-17
CVE-2025-30680Trend Micro Apex Central server-side request forgery7.5CNA v3.10.3%2025-06-17Fix
CVE-2025-30679Trend Micro Apex Central server-side request forgery6.5CNA v3.10.4%2025-06-17Fix
CVE-2025-30678Trend Micro Apex Central server-side request forgery6.5CNA v3.10.4%2025-06-17Fix
CVE-2025-30642Trend Micro Deep Security A link following5.5CNA v3.10.2%2025-06-17Fix
CVE-2025-30641Trend Micro Deep Security anti-malware solution portion link following7.8CNA v3.10.2%2025-06-17Fix
CVE-2025-30640Trend Micro Deep Security A link following7.8CNA v3.10.2%2025-06-17Fix
CVE-2025-30618Rapyd Payment Extension for WooCommerce WordPress theme PHP object injection9.8CNA v3.10.5%2025-06-17Fix
CVE-2025-30562Navigation Tree Elementor WordPress plugin SQL injection8.5CNA v3.10.4%2025-06-17
CVE-2025-29002Simen WordPress theme local file inclusion8.1CNA v3.10.7%2025-06-17
CVE-2025-28991Evon WordPress theme local file inclusion8.1CNA v3.10.7%2025-06-17
CVE-2025-28972WP Employee Attendance System WordPress plugin SQL injection7.6CNA v3.10.4%2025-06-17
CVE-2025-24773WPCRM - CRM for Contact form CF7 and WooCommerce WordPress plugin SQL injection9.3CNA v3.10.4%2025-06-17
CVE-2025-24761DSK WordPress theme local file inclusion8.1CNA v3.10.7%2025-06-17Fix
CVE-2025-6199Gdk-Pixbuf: Uninitialized memory disclosure in gdkpixbuf gif lzw decoder3.3NVD v3.10.2%2025-06-17Fix
CVE-2025-6196Libgepub: Integer overflow in Libgepub's epub archive handling5.5CNA v3.10.2%2025-06-17Fix
CVE-2025-6173Webkul QloApps ajax_products_list.php SQL injection7.2v3.10.6%2025-06-17
CVE-2025-6167themanojdesai python-a2a api.py create_workflow path traversal9.8v3.10.9%2025-06-17Fix
CVE-2025-6166frdel Agent-Zero image_get.py image_get path traversal5.1CNA v4.00.6%2025-06-17Fix
CVE-2025-6165TOTOLINK X15 HTTP POST request formTmultiAP buffer overflow8.7CNA v4.01.0%2025-06-17
CVE-2025-6164TOTOLINK A3002R HTTP POST request formMultiAP buffer overflow8.7CNA v4.01.0%2025-06-17
CVE-2025-6163TOTOLINK A3002RU HTTP POST request formMultiAP buffer overflow8.7CNA v4.01.0%2025-06-17
CVE-2025-6162TOTOLINK EX1200T HTTP POST request formMultiAP buffer overflow8.7CNA v4.01.0%2025-06-17
CVE-2025-6161SourceCodester Simple Food Ordering System editproduct.php unrestricted upload9.8v3.10.7%2025-06-17
CVE-2025-6160SourceCodester Client Database Management System user_customer_create_order.php SQL injection9.8v3.10.6%2025-06-17
CVE-2025-6159code-projects Hostel Management System allocate_room.php SQL injection9.8v3.10.5%2025-06-17
CVE-2025-6158D-Link DIR-665 HTTP POST request sub_AC78 stack-based overflow8.7CNA v4.01.2%2025-06-17
CVE-2025-6157PHPGurukul Nipah Virus Testing Management System registered-user-testing.php SQL injection9.8v3.10.5%2025-06-17
CVE-2025-6156PHPGurukul Nipah Virus Testing Management System bwdates-report-ds.php SQL injection8.8v3.10.4%2025-06-17
CVE-2025-6155PHPGurukul Hostel Management System login-hm.inc.php SQL injection9.8v3.10.5%2025-06-17
CVE-2025-6154PHPGurukul Hostel Management System login.inc.php SQL injection9.8v3.10.5%2025-06-17
CVE-2025-6153PHPGurukul Hostel Management System students.php SQL injection9.8v3.10.5%2025-06-17
CVE-2025-6152Steel Browser files.routes.ts handleFileUpload path traversal9.8v3.10.6%2025-06-17
CVE-2025-6151TP-Link TL-WR940N, TL-WR841N WanSlaacCfgRpm.htm buffer overflow8.2CNA v4.05.0%2025-06-17
CVE-2025-6150TOTOLINK X15 HTTP POST request formMultiAP buffer overflow8.7CNA v4.01.0%2025-06-17
CVE-2025-6149TOTOLINK A3002R HTTP POST request formSysLog buffer overflow8.7CNA v4.01.0%2025-06-17
CVE-2025-6148TOTOLINK A3002RU HTTP POST request formSysLog buffer overflow8.7CNA v4.01.0%2025-06-17
CVE-2025-6147TOTOLINK A702R HTTP POST request formSysLog buffer overflow8.7CNA v4.01.0%2025-06-17
CVE-2025-6146TOTOLINK X15 HTTP POST request formSysLog buffer overflow8.7CNA v4.01.3%2025-06-17
CVE-2025-6069Python CPython HTMLParser quadratic complexity when processing malformed inputs4.3CNA v3.10.6%2025-06-17Fix
CVE-2025-6050Stored cross-site scripting (XSS) in Mezzanine CMS Admin interface4.8NVD v3.10.3%2025-06-17Fix
CVE-2025-6020Red Hat Enterprise Linux 10 linux-pam: Linux-pam directory traversal7.8CNA v3.10.5%2025-06-17Fix
CVE-2025-5777Citrix NetScaler ADC and Gateway out-of-bounds read9.3CNA v4.0100.0%2025-06-17KEVNucleiEmerging ThreatsExploit codeFix
CVE-2025-5700Simple Logo Carousel WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-06-17Fix
CVE-2025-5673Blog2Social WordPress plugin SQL injection6.5CNA v3.10.3%2025-06-17Fix
CVE-2025-5349NetScaler ADC and NetScaler Gateway improper access control on the NetScaler Management interface8.7CNA v4.06.2%2025-06-17Fix
CVE-2025-5291Master Slider WordPress plugin stored cross-site scripting5.4v3.10.2%2025-06-17Fix
CVE-2025-5209Ivory Search WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-06-17Fix
CVE-2025-5141Core Privileged Access Manager (BoKS) Leakage of Sensitive Data via the Cache5.5CNA v3.10.1%2025-06-17
CVE-2025-4879Citrix Workspace App for Windows privilege escalation7.3CNA v4.00.1%2025-06-17Fix
CVE-2025-4775WordPress Infinite Scroll Ajax Load More plugin stored cross-site scripting6.4CNA v3.10.2%2025-06-17Fix
CVE-2025-4754Missing Session Revocation on Logout in ash_authentication_phoenix2.3CNA v4.00.5%2025-06-17Fix
CVE-2025-4404Red Hat Enterprise Linux 10 freeipa: Idm: Privilege escalation from host to domain admin in freeipa9.1CNA v3.12.0%2025-06-17Exploit codeFix
CVE-2025-4365NetScaler Console and NetScaler SDX (SVM) arbitrary file read6.9CNA v4.09.7%2025-06-17Emerging ThreatsFix
CVE-2025-3880Poll, Survey and Quiz Maker Plugin by Opinion Stage WordPress plugin unauthorized access4.3CNA v3.10.3%2025-06-17Fix
CVE-2025-3774Wise Chat WordPress plugin unauthenticated stored cross-site scripting via X-Forwarded-For Header7.2CNA v3.10.3%2025-06-17Fix
CVE-2025-3515Drag and Drop Multiple File Upload for Contact Form 7 unrestricted file upload9.8v3.15.1%2025-06-17NucleiExploit codeFix
CVE-2025-0320Citrix Secure Access Client privilege escalation8.6CNA v4.00.1%2025-06-17Fix
CVE-2025-49796Red Hat Enterprise Linux 10 libxml: Type confusion leads to denial of service (DoS)9.1CNA v3.11.6%2025-06-16Fix
CVE-2025-49795GNOME libxml2 libxml: Null pointer dereference leads to denial of service (DoS)7.5CNA v3.10.6%2025-06-16Fix
CVE-2025-49794Red Hat Enterprise Linux 10 libxml: Heap use-after-free (UAF) leads to denial of service (DoS)9.1CNA v3.10.8%2025-06-16Fix
CVE-2025-49134Weblate exposes personal IP address via e-mail2.1CNA v4.00.3%2025-06-16Fix
CVE-2025-49125Apache Tomcat: Security constraint bypass for pre/post-resources7.5CISA ADP v3.13.4%2025-06-16Exploit codeFix
CVE-2025-49124Apache Tomcat: Exe side-loading via icalcs.exe in Tomcat installer for Windows8.4CISA ADP v3.10.4%2025-06-16Fix
CVE-2025-48992Intermesh groupoffice Group-Office vulnerable to blind XSS5.2CNA v4.00.3%2025-06-16Fix
CVE-2025-48988Apache Tomcat: FileUpload large number of parts with headers DoS7.5CISA ADP v3.130.5%2025-06-16Exploit codeFix
CVE-2025-48976Apache Commons FileUpload, Apache Commons FileUpload: FileUpload DoS via part headers7.5CISA ADP v3.133.0%2025-06-16Exploit codeFix
CVE-2025-47951Weblate lacks rate limiting when verifying second factor4.9CNA v3.10.3%2025-06-16Fix
CVE-2025-47869Apache NuttX RTOS: Examples/xmlrpc: Fix calls buffers size9.8CISA ADP v3.10.7%2025-06-16Fix
CVE-2025-47868Apache NuttX RTOS: Tools/bdf-converter.: Tools/bdf-converter: Fix loop termination condition9.8CISA ADP v3.10.7%2025-06-16Fix
CVE-2025-46710Imagination Technologies Graphics DDK use-after-free5.7CISA ADP v3.10.2%2025-06-16Fix
CVE-2025-43200Apple Multiple Products vulnerability4.2CISA ADP v3.11.2%2025-06-16KEVFix
CVE-2025-40916Mojolicious::Plugin::CaptchaPNG captcha generator weak random number generator9.1CISA ADP v3.10.4%2025-06-16
CVE-2025-40729Reflected cross-site scripting (XSS) vulnerability in Customer Support System6.1v3.10.4%2025-06-16
CVE-2025-40728SQL injection vulnerability in Customer Support System8.8v3.10.5%2025-06-16
CVE-2025-40727Reflected cross-site scripting (XSS) in Phoenix CMS5.1CNA v4.00.8%2025-06-16
CVE-2025-40726Cross-site scripting (XSS) reflected in Nosto5.1CNA v4.00.8%2025-06-16
CVE-2025-36632Tenable Agent local privilege escalation7.8CNA v3.10.2%2025-06-16Fix
CVE-2025-32800Anaconda conda-build pyproject.toml dependency resolution vulnerability7.2CNA v4.00.6%2025-06-16Fix
CVE-2025-32799Conda-build vulnerable to path traversal via Malicious Tar file5.6CNA v4.01.3%2025-06-16Fix
CVE-2025-32798Conda-build allows arbitrary code execution via Malicious Recipe Selectors8.2CNA v4.00.8%2025-06-16Fix
CVE-2025-32797Conda-build Insecure Build Script Permissions Enabling arbitrary code execution6.0CNA v4.00.2%2025-06-16Fix
CVE-2025-27587OpenSSL EVP_DigestSign signing on PowerPC timing side channel5.3CISA ADP v3.10.4%2025-06-16Fix
CVE-2025-25265WAGO CC100 0751-9x01 Unauthenticated File Read via Web interface4.9CNA v3.10.5%2025-06-16Fix
CVE-2025-25264Overly Permissive CORS Policy in WAGO Device Manager6.5CNA v3.10.4%2025-06-16Fix
CVE-2025-24388OTRS unsafe handling of AJAX calls3.8CNA v3.10.3%2025-06-16
CVE-2025-6179Google ChromeOS Extension Management insecure permissions9.8CISA ADP v3.10.2%2025-06-16
CVE-2025-6177Google ChromeOS MiniOS Root code execution Bypass While Dev Mode Blocked7.4CISA ADP v3.10.1%2025-06-16
CVE-2025-6172TECNO com.afmobi.boomplayer improper authentication9.8CISA ADP v3.10.5%2025-06-16
CVE-2025-6170Libxml2: Stack buffer overflow in xmllint interactive shell command handling2.5NVD v3.10.3%2025-06-16Fix
CVE-2025-6169HAMASTAR Technology WIMP website co-construction management platform SQL injection9.3CNA v4.00.5%2025-06-16Fix
CVE-2025-6145TOTOLINK EX1200T HTTP POST request formSysLog buffer overflow8.7CNA v4.01.0%2025-06-16
CVE-2025-6144TOTOLINK EX1200T HTTP POST request formSysCmd buffer overflow8.7CNA v4.01.0%2025-06-16
CVE-2025-6143TOTOLINK EX1200T HTTP POST request formNtp buffer overflow8.7CNA v4.01.0%2025-06-16
CVE-2025-6142Intera InHire server-side request forgery5.3CNA v4.00.3%2025-06-16
CVE-2025-6141GNU ncurses parse_entry.c postprocess_termcap stack-based overflow4.8CNA v4.00.2%2025-06-16Fix
CVE-2025-6140spdlog pattern_formatter-inl.h scoped_padder resource consumption4.8CNA v4.00.2%2025-06-16Fix
CVE-2025-6139TOTOLINK T10 shadow.sample hard-coded password2.0CNA v4.00.4%2025-06-16
CVE-2025-6138TOTOLINK T10 HTTP POST request cstecgi.cgi setWizardCfg buffer overflow8.7CNA v4.01.0%2025-06-16
CVE-2025-6137TOTOLINK T10 HTTP POST request cstecgi.cgi setWiFiScheduleCfg buffer overflow8.7CNA v4.01.0%2025-06-16
CVE-2025-6136Projectworlds Life Insurance Management System insertPayment.php SQL injection9.8v3.10.5%2025-06-16
CVE-2025-6135Projectworlds Life Insurance Management System insertNominee.php SQL injection9.8v3.10.5%2025-06-16
CVE-2025-6134Projectworlds Life Insurance Management System insertClient.php SQL injection9.8v3.10.5%2025-06-16
CVE-2025-6133Projectworlds Life Insurance Management System insertagent.php SQL injection9.8v3.10.5%2025-06-16
CVE-2025-6132Chanjet CRM departmentsetting.php SQL injection9.8v3.10.5%2025-06-16
CVE-2025-6131CodeAstro Food Ordering System POST request parameter edit cross-site scripting4.8v3.10.3%2025-06-16
CVE-2025-6130TOTOLINK EX1200T HTTP POST request formStats buffer overflow8.7CNA v4.01.0%2025-06-16
CVE-2025-6129TOTOLINK EX1200T HTTP POST request formSaveConfig buffer overflow8.7CNA v4.00.9%2025-06-16
CVE-2025-6128TOTOLINK EX1200T HTTP POST request formWirelessTbl buffer overflow8.7CNA v4.01.2%2025-06-16
CVE-2025-6127PHPGurukul Nipah Virus Testing Management System search-report.php cross-site scripting5.4v3.10.3%2025-06-16
CVE-2025-6126PHPGurukul Rail Pass Management System contact.php cross-site scripting5.4v3.10.4%2025-06-16
CVE-2025-6125PHPGurukul Rail Pass Management System aboutus.php cross-site scripting5.4v3.10.3%2025-06-16
CVE-2025-6124code-projects Restaurant Order System tablelow.php SQL injection9.8v3.10.5%2025-06-16
CVE-2025-6123code-projects Restaurant Order System payment.php SQL injection9.8v3.10.5%2025-06-16
CVE-2025-6122code-projects Restaurant Order System table.php SQL injection8.8v3.10.4%2025-06-16
CVE-2025-6121D-Link DIR-632 HTTP POST request get_pure_content stack-based overflow9.3CNA v4.02.8%2025-06-16
CVE-2025-6120Open Asset Import Library Assimp HL1MDLLoader.cpp read_meshes heap-based overflow4.8CNA v4.00.3%2025-06-16Fix
CVE-2025-6119Open Asset Import Library Assimp BVHLoader.cpp ReadNodeChannels use-after-free4.8CNA v4.00.2%2025-06-16Fix
CVE-2025-6118Das Parking Management System 停车场管理系统 API search SQL injection9.8v3.10.4%2025-06-16
CVE-2025-6117Das Parking Management System 停车场管理系统 API Search SQL injection9.8v3.10.4%2025-06-16
CVE-2025-6116Das Parking Management System 停车场管理系统 API Search SQL injection9.8v3.10.4%2025-06-16
CVE-2025-6115D-Link DIR-619L form_macfilter stack-based overflow8.7CNA v4.01.6%2025-06-16
CVE-2025-6114D-Link DIR-619L form_portforwarding stack-based overflow8.7CNA v4.01.6%2025-06-16
CVE-2025-6113Tenda FH1203 AdvSetLanip fromadvsetlanip buffer overflow8.7CNA v4.01.3%2025-06-16
CVE-2025-6112Tenda FH1205 AdvSetLanip fromadvsetlanip buffer overflow8.7CNA v4.01.3%2025-06-16
CVE-2025-6111Tenda FH1205 VirtualSer fromVirtualSer stack-based overflow8.7CNA v4.01.0%2025-06-16
CVE-2025-6110Tenda FH1201 SafeMacFilter stack-based overflow8.7CNA v4.05.5%2025-06-16
CVE-2025-6109javahongxi whatsmars InitializrController.java initialize path traversal5.3CNA v4.00.5%2025-06-16
CVE-2025-6108hansonwang99 Spring-Boot-In-Action file upload ImageUploadService.java watermarkTest path traversal5.3CNA v4.00.5%2025-06-16
CVE-2025-6107comfyanonymous comfyui utils.py set_attr dynamically-determined object attributes2.3CNA v4.00.4%2025-06-16
CVE-2025-6106WuKongOpenSource WukongCRM AdminRoleController.java cross-site request forgery5.3CNA v4.00.3%2025-06-16
CVE-2025-6105jflyfox jfinal_cms HOME.java cross-site request forgery8.8v3.10.3%2025-06-16
CVE-2025-6104Wifi-soft UniBox Controller pms_check.php os command injection8.7CNA v4.02.5%2025-06-16
CVE-2025-6103Wifi-soft UniBox Controller test_accesscodelogin.php os command injection8.7CNA v4.02.1%2025-06-16
CVE-2025-6102Wifi-soft UniBox Controller logout.php os command injection8.7CNA v4.02.3%2025-06-16
CVE-2025-6101letta-ai letta interface.py function_message eval injection5.1CNA v4.00.3%2025-06-16
CVE-2025-6100realguoshuai open-video-cms list SQL injection5.3CNA v4.00.3%2025-06-16
CVE-2025-6099szluyu99 gin-vue-blog PATCH request manager.go improper authorization6.9CNA v4.00.4%2025-06-16
CVE-2025-6098UTT 进取 750W API setSysAdm strcpy buffer overflow9.3CNA v4.01.5%2025-06-16
CVE-2025-6097UTT 进取 750W Administrator Password setSysAdm formDefineManagement unverified password change9.8v3.10.7%2025-06-16
CVE-2025-6096codesiddhant Jasmin Ransomware dashboard.php SQL injection8.8v3.10.5%2025-06-16
CVE-2025-6087Cloudflare Create-cloudflare SSRF vulnerability in opennextjs-cloudflare via /_next/image endpoint9.1NVD v3.11.0%2025-06-16Fix
CVE-2025-5689Canonical authd improper permission Management in SSH Session Handling8.5CNA v3.10.3%2025-06-16Fix
CVE-2025-5309Remote Support and Privileged Remote Access server side template injection8.6CNA v4.00.9%2025-06-16Fix
CVE-2025-4987Dassault Systèmes Project Portfolio Manager opportunity management stored cross-site scripting8.7CNA v3.10.4%2025-06-16
CVE-2025-4748Erlang OTP absolute path traversal in zip:unzip/1,24.8CNA v4.00.3%2025-06-16Fix
CVE-2025-4565protocolbuffers Python-Protobuf Unbounded recursion in Python Protobuf8.2CNA v4.00.3%2025-06-16Fix
CVE-2025-3602Liferay Portal does not limit the depth of a GraphQL queries8.7CNA v4.00.5%2025-06-16Fix
CVE-2025-3594Liferay Portal path traversal vulnerability with the downloading and installation of Xuggler8.6CNA v4.00.7%2025-06-16Fix
CVE-2025-3526Liferay Portal SessionClicks does not restrict the saving of request parameters in the HTTP session8.7CNA v4.00.6%2025-06-16Fix
CVE-2025-3464ASUS Armoury Crate race condition8.4CNA v4.00.6%2025-06-16Exploit codeFix
CVE-2025-2327Pure Storage FlashArray key rotation logging information disclosure5.1CNA v4.00.2%2025-06-16
CVE-2025-2091Open redirection in M-Files Mobile4.8CNA v4.00.3%2025-06-16Fix
CVE-2025-36041IBM MQ improper certificate validation4.7CNA v3.10.4%2025-06-15Exploit codeFix
CVE-2025-22854Possible thread exhaustion from processing HTTP responses in PingFederate Google Adapter6.9CNA v4.00.3%2025-06-15Fix
CVE-2025-21085PingFederate OAuth Grant attribute duplication may use excessive memory2.1CNA v4.00.3%2025-06-15Fix
CVE-2025-6095codesiddhant Jasmin Ransomware checklogin.php SQL injection9.8v3.12.7%2025-06-15Metasploit
CVE-2025-6094qianfox FoxCMS Download.php batchCope SQL injection8.8v3.10.5%2025-06-15
CVE-2025-6093uYanki board-stm32f103rc-berial heartrate1_hal.c heartrate1_i2c_hal_write stack-based overflow5.1CNA v4.00.3%2025-06-15
CVE-2025-6092comfyanonymous comfyui Incomplete Fix image cross-site scripting5.3CNA v4.00.4%2025-06-15
CVE-2025-6091H3C GR-3000AX aspForm UpdateIpv6Params buffer overflow8.7CNA v4.00.6%2025-06-15
CVE-2025-6090H3C GR-5400AX aspForm UpdateIpv6params buffer overflow8.7CNA v4.00.6%2025-06-15
CVE-2025-6089Astun Technology iShare Maps atCheckJS.aspx redirect6.1v3.10.3%2025-06-15
CVE-2025-5990Improper neutralization of input during web page generation in Crafty Controller7.6CNA v3.10.3%2025-06-15Fix
CVE-2025-5964Path traversal in M-Files API8.4CNA v4.012.7%2025-06-15Exploit codeFix
CVE-2025-1411IBM Security Verify Directory Container command execution7.8CNA v3.10.2%2025-06-15Fix
CVE-2025-33108IBM Backup Recovery and Media Services for i code execution8.5CNA v3.10.6%2025-06-14Fix
CVE-2025-6070josxha Restrict File Access output function path traversal6.5CNA v3.10.6%2025-06-14
CVE-2025-6065Image Resizer On The Fly WordPress plugin unauthenticated arbitrary file deletion9.1CNA v3.11.0%2025-06-14
CVE-2025-6064WP URL Shortener WordPress plugin cross-site request forgery to stored cross-site scripting6.1CNA v3.10.1%2025-06-14
CVE-2025-6063XiSearch bar WordPress plugin cross-site request forgery to stored cross-site scripting6.1CNA v3.10.1%2025-06-14
CVE-2025-6062Yougler Blogger Profile Page WordPress plugin cross-site request forgery to settings update4.3CNA v3.10.1%2025-06-14
CVE-2025-6061kk Youtube Video WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-06-14
CVE-2025-6059Seraphinite Accelerator WordPress plugin cross-site request forgery4.3CNA v3.10.2%2025-06-14Fix
CVE-2025-6055Zen Sticky Social WordPress plugin cross-site request forgery to stored cross-site scripting6.1CNA v3.10.1%2025-06-14
CVE-2025-6040Easy Flashcards WordPress plugin cross-site request forgery to stored cross-site scripting6.1CNA v3.10.2%2025-06-14
CVE-2025-5589StreamWeasels Kick Integration WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-06-14Fix
CVE-2025-5487AutomatorWP WordPress plugin authenticated (Administrator+) SQL injection via field_conditions7.2CNA v3.10.4%2025-06-14Fix
CVE-2025-5337Slider, Gallery, and Carousel by MetaSlider WordPress plugin stored DOM-based cross-site scripting5.4v3.10.2%2025-06-14Fix
CVE-2025-5336Click to Chat WordPress plugin stored DOM-based cross-site scripting6.4CNA v3.10.3%2025-06-14Fix
CVE-2025-5238YITH WooCommerce Wishlist WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-06-14Fix
CVE-2025-4667Appointment Booking Calendar WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-06-14Fix
CVE-2025-4592AI Image Lab Free AI Image Generator WordPress plugin cross-site request forgery to API Key update4.3CNA v3.10.1%2025-06-14
CVE-2025-4216DIOT SCADA with MQTT WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-06-14
CVE-2025-4200Zagg - Electronics and Accessories WooCommerce WordPress theme unauthenticated local file inclusion8.1CNA v3.10.8%2025-06-14
CVE-2025-4187UserPro - Community and User Profile WordPress plugin unauthenticated arbitrary file read5.9CNA v3.10.6%2025-06-14
CVE-2025-3234File Manager Pro Filester WordPress plugin authenticated (Administrator+) arbitrary file upload7.2CNA v3.10.6%2025-06-14Fix
CVE-2025-49598conda-forge-ci-setup-feedstock conda-forge-ci-setup allows arbitrary code execution4.4CNA v4.00.2%2025-06-13Fix
CVE-2025-49597handcraftedinthealps goodby-csv potential Gadget Chain allowing remote code execution3.9CNA v3.10.2%2025-06-13Fix
CVE-2025-49596MCP Inspector proxy server lacks authentication between the Inspector client and proxy9.4CNA v4.044.5%2025-06-13NucleiEmerging ThreatsExploit codeFix
CVE-2025-49587XWiki does not require right warnings for notification displayer objects6.4CNA v4.00.4%2025-06-13Fix
CVE-2025-49586XWiki allows remote code execution through preview of XClass changes in AWM editor8.7CNA v4.00.7%2025-06-13Fix
CVE-2025-49585XWiki does not require right warnings for XClass definitions8.6CNA v4.00.4%2025-06-13Fix
CVE-2025-49584XWiki makes title of inaccessible pages available through the class property values REST API8.7CNA v4.00.4%2025-06-13Fix
CVE-2025-49583XWiki notification email renderer vulnerability5.1CNA v4.00.3%2025-06-13Fix
CVE-2025-49582XWiki's required right warnings for macros are incomplete8.6CNA v4.00.9%2025-06-13Fix
CVE-2025-49581XWiki allows remote code execution through default value of wiki macro wiki-type parameters8.7CNA v4.00.6%2025-06-13Fix
CVE-2025-49580XWiki allows privilege escalation through link refactoring8.5CNA v4.00.5%2025-06-13Fix
CVE-2025-49468nobossextensions.com No Boss Calendar component for Joomla SQL injection8.6CNA v4.00.5%2025-06-13
CVE-2025-48920Etracker Moderately critical cross-site scripting SA-CONTRIB-2025-0747.3CISA ADP v3.10.3%2025-06-13Fix
CVE-2025-48919Simple Klaro Moderately critical cross-site scripting SA-CONTRIB-2025-0735.0CISA ADP v3.10.2%2025-06-13Fix
CVE-2025-48918Simple Klaro Moderately critical cross-site scripting SA-CONTRIB-2025-0718.8CISA ADP v3.10.3%2025-06-13Fix
CVE-2025-48917EU Cookie Compliance (GDPR Compliance) Moderately critical cross-site scripting SA-CONTRIB-2025-0725.0CISA ADP v3.10.2%2025-06-13Fix
CVE-2025-48916Bookable Calendar Less critical Access bypass SA-CONTRIB-2025-0706.5CISA ADP v3.10.2%2025-06-13Fix
CVE-2025-48915COOKiES Consent Management Moderately critical cross-site scripting SA-CONTRIB-2025-0768.6CISA ADP v3.10.3%2025-06-13Fix
CVE-2025-48914COOKiES Consent Management Moderately critical cross-site scripting SA-CONTRIB-2025-0758.6CISA ADP v3.10.3%2025-06-13Fix
CVE-2025-48825RICOH Streamline NX V3 PC Client use of a less trusted source2.0CNA v4.00.1%2025-06-13
CVE-2025-47959Visual Studio remote code execution7.1CNA v3.110.7%2025-06-13Fix
CVE-2025-46783RICOH Streamline NX V3 PC Client path traversal9.3CNA v4.00.9%2025-06-13
CVE-2025-46096Solon vulnerable to directory traversal6.1CISA ADP v3.10.5%2025-06-13Fix
CVE-2025-46060TOTOLINK N600R buffer overflow9.8CISA ADP v3.11.0%2025-06-13
CVE-2025-45988B-Link BL-AC2100_AZ3 command injection9.8CISA ADP v3.110.9%2025-06-13
CVE-2025-45987B-Link BL-AC2100_AZ3 command injection9.8CISA ADP v3.11.9%2025-06-13
CVE-2025-45986B-Link BL-AC2100_AZ3 command injection9.8CISA ADP v3.11.6%2025-06-13
CVE-2025-45985B-Link BL-AC2100_AZ3 command injection9.8CISA ADP v3.16.9%2025-06-13Nuclei
CVE-2025-45984B-Link BL-AC2100_AZ3 command injection9.8CISA ADP v3.11.6%2025-06-13
CVE-2025-39240Hikvision DS-3WAP622G-SI OS command injection7.2CNA v3.11.4%2025-06-13
CVE-2025-36633Tenable Agent local privilege escalation8.8CNA v3.10.2%2025-06-13Fix
CVE-2025-36631Tenable Agent local privilege escalation8.4CNA v3.10.2%2025-06-13Fix
CVE-2025-36506RICOH Streamline NX V3 PC Client external control of a file path6.9CNA v4.00.4%2025-06-13
CVE-2025-30399Microsoft .NET and Visual Studio remote code execution7.5CNA v3.11.1%2025-06-13Fix
CVE-2025-29902Telex Remote Dispatch Console Server code injection10.0CNA v3.11.1%2025-06-13Fix
CVE-2025-28389OpenC3 cosmos weak password requirements9.8CISA ADP v3.10.6%2025-06-13
CVE-2025-28388OpenC3 cosmos hard-coded credentials9.8CISA ADP v3.10.6%2025-06-13
CVE-2025-28386OpenC3 cosmos Plugin Management component remote code execution9.8CISA ADP v3.11.1%2025-06-13
CVE-2025-28384OpenC3 COSMOS vulnerable to directory traversal via /script-api/scripts/ endpoint9.1CISA ADP v3.10.9%2025-06-13
CVE-2025-28382OpenC3 COSMOS vulnerable to directory traversal via openc3-api/tables endpoint7.5CISA ADP v3.10.9%2025-06-13
CVE-2025-28381OpenC3 cosmos information disclosure7.5CISA ADP v3.10.5%2025-06-13
CVE-2025-28380OpenC3 cosmos cross-site scripting6.1CISA ADP v3.10.3%2025-06-13
CVE-2025-25215Dell ControlVault3/ControlVault3 Plus cv_close arbitrary free vulnerability8.8CNA v3.12.6%2025-06-13Fix
CVE-2025-25050Dell ControlVault3/ControlVault3 Plus cv_upgrade_sensor_firmware out-of-bounds write8.8CNA v3.12.1%2025-06-13Fix
CVE-2025-24922Dell ControlVault3/ControlVault3 Plus securebio_identify stack-based buffer overflow8.8CNA v3.13.4%2025-06-13Fix
CVE-2025-24919Dell ControlVault3/ControlVault3 Plus deserialization of untrusted input8.1CNA v3.12.6%2025-06-13Fix
CVE-2025-24311Dell ControlVault3/ControlVault3 Plus cv_send_blockdata out-of-bounds read8.4CNA v3.12.0%2025-06-13Fix
CVE-2025-22242Salt's worker process vulnerable to denial of service through file read operation5.6CNA v3.10.1%2025-06-13Fix
CVE-2025-22241Salt's file contents overwrite the VirtKey class5.6CNA v3.10.2%2025-06-13Fix
CVE-2025-22240Salt allows arbitrary directory creation or file deletion6.3CNA v3.10.2%2025-06-13Fix
CVE-2025-22239Salt vulnerable to arbitrary event injection8.1CNA v3.10.2%2025-06-13Fix
CVE-2025-22238Salt vulnerable to directory traversal attack in minion file cache creation4.2CNA v3.10.3%2025-06-13Fix
CVE-2025-22237Salt's on demand pillar functionality vulnerable to arbitrary command injections6.7CNA v3.10.2%2025-06-13Fix
CVE-2025-22236Salt has minion event bus authorization bypass8.1CNA v3.10.2%2025-06-13Fix
CVE-2025-6083ExtremeCloud Universal ZTNA improper authorization5.2CNA v4.00.2%2025-06-13Fix
CVE-2025-6052GLib: Integer overflow in g_string_maybe_expand leading to potential buffer overflow in GLib gstring7.5NVD v3.10.5%2025-06-13Fix
CVE-2025-6035Gimp: Gimp integer overflow7.8NVD v3.10.6%2025-06-13Fix
CVE-2025-6030Autoeastern Smart Keyless Entry System Replay Attack9.4CNA v4.00.2%2025-06-13Fix
CVE-2025-6029KIA-branded Aftermarket Generic Smart Keyless Entry System Replay Attack9.4CNA v4.00.7%2025-06-13
CVE-2025-6012Auto Attachments WordPress plugin authenticated (Administrator+) stored cross-site scripting5.5CNA v3.10.3%2025-06-13
CVE-2025-5950IndieBlocks WordPress plugin stored cross-site scripting5.4v3.10.2%2025-06-13Fix
CVE-2025-5939Telegram for WP WordPress plugin authenticated (Admin+) stored cross-site scripting4.4CNA v3.10.2%2025-06-13
CVE-2025-5938ThemeBon Digital Marketing and Agency Templates Addons for Elementor cross-site request forgery4.3v3.10.1%2025-06-13
CVE-2025-5930WP2HTML WordPress plugin cross-site request forgery to settings update4.3CNA v3.10.1%2025-06-13Fix
CVE-2025-5928WP Sliding Login/Dashboard Panel WordPress plugin cross-site request forgery to settings update4.3CNA v3.10.1%2025-06-13
CVE-2025-5926Link Shield WordPress plugin cross-site request forgery to stored cross-site scripting6.1CNA v3.10.1%2025-06-13
CVE-2025-5923Game Review Block WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-06-13Fix
CVE-2025-5841ACF Onyx Poll WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-06-13Fix
CVE-2025-5815Traffic Monitor WordPress plugin missing authorization to unauthenticated settings update5.3CNA v3.10.5%2025-06-13Fix
CVE-2025-5491Acer ControlCenter remote code execution8.7CNA v4.00.7%2025-06-13Fix
CVE-2025-5288REST API WordPress plugin privilege escalation9.8CNA v3.10.6%2025-06-13Exploit code
CVE-2025-5282WP Travel Engine WordPress plugin missing authorization to unauthenticated arbitrary post deletion7.5CNA v3.10.3%2025-06-13Fix
CVE-2025-5233Color Palette WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-06-13
CVE-2025-5123Contact Us Page Contact People WordPress plugin stored cross-site scripting5.4v3.10.2%2025-06-13
CVE-2025-4586IRM Newsroom WordPress plugin stored cross-site scripting5.4v3.10.2%2025-06-13Fix
CVE-2025-4585IRM Newsroom WordPress plugin stored cross-site scripting5.4v3.10.2%2025-06-13Fix
CVE-2025-4584IRM Newsroom WordPress plugin stored cross-site scripting5.4v3.10.2%2025-06-13Fix
CVE-2025-4232GlobalProtect: Authenticated code injection through Wildcard on macOS8.5CNA v4.00.4%2025-06-13Fix
CVE-2025-4231PAN-OS: Authenticated admin command injection vulnerability in the Management Web interface8.6CNA v4.01.0%2025-06-13Fix
CVE-2025-4230PAN-OS: Authenticated admin command injection vulnerability through CLI8.4CNA v4.00.6%2025-06-13Fix
CVE-2025-4229PAN-OS: Traffic information disclosure6.0CNA v4.00.5%2025-06-13Fix
CVE-2025-4228Cortex XDR Broker VM: Privilege escalation (PE)4.6CNA v4.00.2%2025-06-13Fix
CVE-2025-4227GlobalProtect App: Interception in Endpoint Traffic Policy Enforcement1.0CNA v4.00.2%2025-06-13Fix
CVE-2025-49589PCSX2 Contains a stack-based buffer overflow in IOP Console Logging6.1CNA v4.00.3%2025-06-12Fix
CVE-2025-49579Citizen allows stored XSS in menu heading message6.5CNA v3.10.4%2025-06-12Fix
CVE-2025-49578Citizen allows stored XSS in user registration date message6.5CNA v3.10.4%2025-06-12Fix
CVE-2025-49577Citizen allows stored XSS in preference menu headings6.5CNA v3.10.4%2025-06-12Fix
CVE-2025-49576Citizen allows stored XSS in search no result messages6.5CNA v3.10.4%2025-06-12Fix
CVE-2025-49575Citizen allows stored XSS in Command Palette tip messages6.5CNA v3.10.4%2025-06-12Fix
CVE-2025-49467Joomla extension jevents.net SQL injection vulnerability in JEvents component and for Joomla9.3CNA v4.00.3%2025-06-12
CVE-2025-49200SICK Field Analytics unencrypted backup contains sensitive information6.5CNA v3.10.5%2025-06-12
CVE-2025-49199SICK Field Analytics backup files can be modified and uploaded8.8CNA v3.10.3%2025-06-12
CVE-2025-49198SICK Media Server poor quality of randomness in authorization tokens3.1CNA v3.10.4%2025-06-12
CVE-2025-49197SICK Media Server deprecated TLS version supported6.5CNA v3.10.3%2025-06-12Fix
CVE-2025-49196SICK Field Analytics deprecated TLS version supported6.5CNA v3.10.3%2025-06-12
CVE-2025-49195SICK Media Server no protection against brute-force attacks5.3CNA v3.10.5%2025-06-12
CVE-2025-49194SICK Media Server unencrypted communication7.5CNA v3.10.3%2025-06-12
CVE-2025-49193SICK Field Analytics Missing HTTP Security headers4.2CNA v3.10.3%2025-06-12Fix
CVE-2025-49192SICK Field Analytics clickjacking4.3CNA v3.10.3%2025-06-12Fix
CVE-2025-49191SICK Field Analytics dashboards and iFrames can link malicious web content4.8CNA v3.10.3%2025-06-12
CVE-2025-49190SICK Field Analytics server-side request forgery4.3CNA v3.10.3%2025-06-12
CVE-2025-49189SICK Media Server cookie missing HttpOnly flag5.3CNA v3.10.3%2025-06-12Fix
CVE-2025-49188SICK Field Analytics sensitive Data in URL5.3CNA v3.10.4%2025-06-12
CVE-2025-49187SICK Field Analytics login error messages vulnerability5.3CNA v3.10.4%2025-06-12
CVE-2025-49186SICK Field Analytics no brute-force protection5.3CNA v3.10.4%2025-06-12Fix
CVE-2025-49185SICK Field Analytics dashboard widget transform function stored cross-site scripting5.5CNA v3.10.3%2025-06-12
CVE-2025-49184SICK Field Analytics information disclosure to unauthorized user7.5CNA v3.10.5%2025-06-12
CVE-2025-49183SICK Media Server unencrypted communication (HTTP)7.5CNA v3.10.3%2025-06-12
CVE-2025-49182SICK Media Server credential disclosure7.5CNA v3.10.6%2025-06-12Fix
CVE-2025-49181SICK Media Server configurations endpoint does not require authorization8.6CNA v3.10.4%2025-06-12
CVE-2025-49081Input validation vulnerability in the Secure Access prior to6.9CNA v4.00.5%2025-06-12Fix
CVE-2025-49080Memory management vulnerability in Absolute Secure Access server to8.7CNA v4.00.4%2025-06-12Fix
CVE-2025-46035Tenda AC6 buffer overflow7.5CISA ADP v3.10.6%2025-06-12Emerging Threats
CVE-2025-44091yangyouwang 杨有旺 crud 简约后台管理系统 cross-site scripting5.4CISA ADP v3.10.2%2025-06-12
CVE-2025-44019AVEVA PI Data Archive uncaught exception7.1CNA v4.00.5%2025-06-12Fix
CVE-2025-43866Vantage6 Server JWT secret not cryptographically secure1.7CNA v4.00.4%2025-06-12Fix
CVE-2025-43863vantage6 lacks brute-force protection on change password functionality1.7CNA v4.00.5%2025-06-12Fix
CVE-2025-41234VMware Spring Framework RFD Attack via Content-Disposition Header Sourced from request6.5CNA v3.10.6%2025-06-12Fix
CVE-2025-41233VMware Avi Load Balancer SQL injection6.8CNA v3.10.3%2025-06-12
CVE-2025-40592Siemens Mendix Studio Pro 10 path traversal4.6CNA v4.00.5%2025-06-12Fix
CVE-2025-36573Dell Smart Dock sensitive information in log files7.1CNA v3.10.1%2025-06-12Fix
CVE-2025-36539AVEVA PI Data Archive uncaught exception7.1CNA v4.00.4%2025-06-12Fix
CVE-2025-35978Fujitsu Client Computing UpdateNavi improper channel restriction6.9CNA v4.00.1%2025-06-12
CVE-2025-29744Pg-promise SQL injection5.4CISA ADP v3.10.2%2025-06-12Fix
CVE-2025-27689Dell iDRAC Tools improper access control7.8CNA v3.10.1%2025-06-12Fix
CVE-2025-6031Insecure device pairing in end of life Amazon Cloud Cam7.7CNA v4.00.3%2025-06-12Fix
CVE-2025-6021libxml2 xmlBuildQName function out-of-bounds write7.5CNA v3.11.4%2025-06-12Fix
CVE-2025-6009kiCode111 like-girl ipAddPost.php SQL injection7.2v3.10.4%2025-06-12
CVE-2025-6008kiCode111 like-girl ImgAddPost.php SQL injection7.2v3.10.4%2025-06-12
CVE-2025-6007kiCode111 like-girl CopyadminPost.php SQL injection7.2v3.10.4%2025-06-12
CVE-2025-6006kiCode111 like-girl ImgUpdaPost.php SQL injection7.2v3.10.4%2025-06-12
CVE-2025-6005kiCode111 like-girl aboutPost.php SQL injection7.2v3.10.4%2025-06-12
CVE-2025-6003WordPress Single Sign-On multiple Versions incorrect authorization to sensitive information exposure5.3CNA v3.10.3%2025-06-12Fix
CVE-2025-5996Allocation of resources without limits or throttling in GitLab6.5CNA v3.10.8%2025-06-12Fix
CVE-2025-5982Insufficient granularity of access control in GitLab3.7CNA v3.10.3%2025-06-12Fix
CVE-2025-5485SinoTrack GPS Receiver weak authentication8.8CNA v4.00.4%2025-06-12
CVE-2025-5484SinoTrack GPS Receiver weak authentication7.6CNA v4.00.5%2025-06-12
CVE-2025-5301Reflected cross-site scripting in ONLYOFFICE Docs (DocumentServer)6.1CISA ADP v3.162.4%2025-06-12Nuclei
CVE-2025-5195Authorization bypass through user-controlled key in GitLab4.3CNA v3.10.3%2025-06-12Fix
CVE-2025-5012Workreap WordPress plugin arbitrary file upload8.8CNA v3.10.6%2025-06-12Fix
CVE-2025-4973Workreap WordPress plugin authentication bypass via workreap_verify_user_account9.8CNA v3.10.5%2025-06-12Fix
CVE-2025-4613Client side RCE in Google Web Designer App7.1CNA v4.00.6%2025-06-12Fix
CVE-2025-4418AVEVA PI Connector for CygNet improper validation of integrity check value6.7CNA v4.00.1%2025-06-12Fix
CVE-2025-4417AVEVA PI Connector for CygNet cross-site scripting6.9CNA v4.00.1%2025-06-12Fix
CVE-2025-4278Improper neutralization of script-related HTML tags in a web page (basic XSS) in GitLab8.7CNA v3.110.6%2025-06-12Fix
CVE-2025-4233Prisma Access Browser: Inappropriate implementation in Cache5.1CNA v4.00.2%2025-06-12Fix
CVE-2025-2745AVEVA PI Web API cross-site scripting4.5CNA v4.00.2%2025-06-12Fix
CVE-2025-2254Improper neutralization of input during web page generation (cross-site scripting) in GitLab8.7CNA v3.10.3%2025-06-12Fix
CVE-2025-1516Allocation of resources without limits or throttling in GitLab6.5CNA v3.10.4%2025-06-12Fix
CVE-2025-1478Allocation of resources without limits or throttling in GitLab6.5CNA v3.10.4%2025-06-12Fix
CVE-2025-0673Loop with unreachable exit condition (infinite loop) in GitLab7.5CNA v3.10.5%2025-06-12Fix
CVE-2025-49710Mozilla Firefox integer overflow in OrderedHashTable9.8CISA ADP v3.10.7%2025-06-11Fix
CVE-2025-49709Mozilla Firefox memory corruption in canvas surfaces9.8CISA ADP v3.10.7%2025-06-11Fix
CVE-2025-49150Cursor Agent Potentially leaks information using JSON schema5.9CNA v3.10.4%2025-06-11Fix
CVE-2025-49148thevindu-w clip_share_server ClipShare Server allows local privilege escalation via DLL hijacking7.3CNA v3.10.2%2025-06-11Fix
CVE-2025-49146PostgreSQL JDBC Driver channel binding authentication authentication bypass8.2CNA v3.10.5%2025-06-11Fix
CVE-2025-49091KDE Konsole incorrect control flow8.2CNA v3.10.7%2025-06-11Exploit codeFix
CVE-2025-48448Admin Audit Trail Less critical denial of service SA-CONTRIB-2025-0686.5v3.10.3%2025-06-11Fix
CVE-2025-48447Lightgallery Moderately critical cross-site scripting SA-CONTRIB-2025-0697.1CISA ADP v3.10.3%2025-06-11Fix
CVE-2025-48446Commerce Alphabank Redirect Moderately critical Access bypass SA-CONTRIB-2025-0678.8CISA ADP v3.10.3%2025-06-11Fix
CVE-2025-48445Commerce Eurobank (Redirect) Moderately critical Access bypass SA-CONTRIB-2025-0668.8CISA ADP v3.10.3%2025-06-11Fix
CVE-2025-48444Quick Node Block Moderately critical Access bypass SA-CONTRIB-2025-0645.3CISA ADP v3.10.3%2025-06-11Fix
CVE-2025-48013Quick Node Block Moderately critical Access bypass SA-CONTRIB-2025-0655.3CISA ADP v3.10.3%2025-06-11Fix
CVE-2025-41663Weidmueller: Security routers IE-SR-2TX are affected by command injection9.8CNA v3.10.6%2025-06-11Fix
CVE-2025-41661Weidmueller: Security routers IE-SR-2TX are affected by CSRF8.8CNA v3.10.3%2025-06-11Fix
CVE-2025-40915Mojolicious::Plugin::CSRF for Perl uses a weak random number source for generating CSRF tokens7.0CISA ADP v3.10.3%2025-06-11
CVE-2025-40914Perl CryptX before contains a dependency that may be susceptible to an integer overflow9.8CISA ADP v3.10.5%2025-06-11Fix
CVE-2025-40912CryptX for Perl before contains a dependency that may be susceptible to malformed unicode9.8CISA ADP v3.10.4%2025-06-11Fix
CVE-2025-35941mySCADA PRO Manager password disclosure5.5CNA v3.10.3%2025-06-11
CVE-2025-32717Microsoft Word remote code execution8.4CNA v3.10.5%2025-06-11Fix
CVE-2025-32711M365 Copilot information disclosure9.3CNA v3.18.0%2025-06-11Exploit codeFix
CVE-2025-32466Extension rsjoomla.com SQL injection vulnerability in RSMediaGallery! component for Joomla6.7CNA v4.00.3%2025-06-11
CVE-2025-32465Extension rsjoomla.com stored XSS vulnerability in RSTickets! component for Joomla8.5CNA v4.00.3%2025-06-11
CVE-2025-30675Apache CloudStack: Unauthorised template/ISO list access to the domain/resource admins4.7CNA v3.10.7%2025-06-11Fix
CVE-2025-30085Extension rsjoomla.com remote code execution vulnerability in RSForm!pro component for Joomla9.2CNA v4.00.6%2025-06-11
CVE-2025-29756SunGrow iSolarCloud MQTT service missing authorization8.3CNA v4.00.3%2025-06-11Fix
CVE-2025-26412Undocumented Root Shell Access in SIMCom SIM7600G Modem6.8CISA ADP v3.10.3%2025-06-11
CVE-2025-26383Johnson Controls iSTAR Configuration Utility (ICU) uninitialized variable use6.3CNA v4.00.2%2025-06-11Fix
CVE-2025-25032IBM Cognos Analytics denial of service7.5CNA v3.10.4%2025-06-11Fix
CVE-2025-22874Usage of ExtKeyUsageAny disables policy validation in crypto/x5097.5CISA ADP v3.10.4%2025-06-11Fix
CVE-2025-6002VirtueMart unrestricted file upload7.2CNA v3.10.8%2025-06-11Fix
CVE-2025-6001VirtueMart cross-site request forgery (CSRF)8.3CNA v3.10.2%2025-06-11Fix
CVE-2025-5991Qt use-after-free in QHttp2ProtocolHandler2.1CNA v4.00.1%2025-06-11
CVE-2025-5986Mozilla Thunderbird Unsolicited File Download, Disk Space Exhaustion, and credential leakage6.5CISA ADP v3.10.6%2025-06-11Fix
CVE-2025-5959Google Chrome V8 type confusion8.8CISA ADP v3.113.3%2025-06-11Fix
CVE-2025-5958Google Chrome Media use-after-free8.8CISA ADP v3.10.4%2025-06-11Fix
CVE-2025-5687Local privilege escalation vulnerability in Mozilla VPN clients for macOS7.8CISA ADP v3.10.1%2025-06-11Fix
CVE-2025-5395WordPress Automatic Plugin - AI content generator and auto poster arbitrary file upload8.8CNA v3.10.7%2025-06-11Fix
CVE-2025-5144The Events Calendar WordPress plugin DOM-based stored cross-site scripting5.4v3.10.2%2025-06-11Fix
CVE-2025-4922Nomad vulnerable to Incorrect ACL Policy Lookup Attached to A Job8.1CNA v3.10.5%2025-06-11Fix
CVE-2025-4799WP-DownloadManager WordPress plugin authenticated (Administrator+) arbitrary file deletion7.2CNA v3.10.9%2025-06-11Fix
CVE-2025-4798WP-DownloadManager WordPress plugin authenticated (Administrator+) arbitrary file read4.9CNA v3.10.4%2025-06-11Fix
CVE-2025-4673Sensitive headers not cleared on cross-origin redirect in net/http6.8CISA ADP v3.10.7%2025-06-11Fix
CVE-2025-4666ZotPress WordPress plugin authenticated (Author+) stored cross-site scripting via nickname6.4CNA v3.10.3%2025-06-11Fix
CVE-2025-4605USD File Parsing Memory Allocation vulnerability6.6CNA v3.10.2%2025-06-11Fix
CVE-2025-4573LDAP injection in Mattermost Enterprise Edition when using Active Directory4.1CNA v3.10.3%2025-06-11Fix
CVE-2025-4315CubeWP All-in-One Dynamic Content Framework WordPress plugin privilege escalation8.8CNA v3.10.5%2025-06-11Fix
CVE-2025-4275Insyde Software InsydeH2O SecureFlashDxe security feature bypass7.8CNA v3.10.5%2025-06-11Exploit codeFix
CVE-2025-4128Mattermost Guest User information disclosure3.1CNA v3.10.2%2025-06-11Fix
CVE-2025-3473IBM Security Guardium privilege escalation6.7CNA v3.10.1%2025-06-11Fix
CVE-2025-3302Xagio SEO WordPress plugin unauthenticated stored cross-site scripting via HTTP_REFERER7.2CNA v3.10.4%2025-06-11Fix
CVE-2025-1699Motorola g34 incorrect default permissions2.4CNA v4.00.1%2025-06-11Fix
CVE-2025-1698Motorola Razr 40 Ultra null pointer dereference2.4CNA v4.00.1%2025-06-11Fix
CVE-2025-1055K7 Security Anti-Malware K7RKScan.sys driver missing authorization5.6CNA v3.10.2%2025-06-11Exploit codeFix
CVE-2025-0923IBM Cognos Analytics information disclosure5.3CNA v3.10.3%2025-06-11Fix
CVE-2025-0917IBM Cognos Analytics cross-site scripting5.5CNA v3.10.2%2025-06-11Fix
CVE-2025-0913Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall5.5CISA ADP v3.10.3%2025-06-11Fix
CVE-2025-0163IBM Security Verify Access information disclosure5.3CNA v3.10.3%2025-06-11Fix
CVE-2025-49511Civi Framework WordPress plugin cross-site request forgery (CSRF) to user deactivation7.1CNA v3.10.2%2025-06-10Fix
CVE-2025-49510Min Max Step Quantity Limits Manager for WooCommerce WordPress plugin cross-site request forgery4.3CNA v3.10.2%2025-06-10Fix
CVE-2025-49509Audio Editor and Recorder WordPress plugin broken access control5.3CNA v3.10.3%2025-06-10Fix
CVE-2025-49507CozyStay WordPress theme PHP object injection9.8CNA v3.10.6%2025-06-10Fix
CVE-2025-49455WordPress WordPress-WPJobBoard theme SQL injection9.3CNA v3.10.4%2025-06-10Fix
CVE-2025-49454TinySalt WordPress theme local file inclusion8.1CNA v3.10.8%2025-06-10Fix
CVE-2025-49143Nautobot may allows uploaded media files to be accessible without authentication6.3CNA v4.00.4%2025-06-10Fix
CVE-2025-49142Nautobot vulnerable to secrets exposure and data manipulation through Jinja2 templating6.0CNA v4.00.4%2025-06-10Fix
CVE-2025-49133Libtpms contains a possible out-of-bound access and abort due to HMAC signing issue5.9CNA v3.10.2%2025-06-10Fix
CVE-2025-48937matrix-rust-sdk matrix-sdk-crypto authentication bypass by spoofing4.9CNA v3.10.4%2025-06-10Fix
CVE-2025-48879OctoPrint Vulnerable to denial of service through malformed HTTP request6.5CNA v3.10.3%2025-06-10Fix
CVE-2025-48067OctoPrint vulnerable to possible file extraction via upload endpoints5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47977Microsoft Nuance Digital Engagement Platform spoofing8.2CNA v3.10.6%2025-06-10Fix
CVE-2025-47969Microsoft Windows Virtualization-Based Security (VBS) information disclosure4.4CNA v3.10.6%2025-06-10Fix
CVE-2025-47968Microsoft AutoUpdate (MAU) elevation of privilege7.8CNA v3.10.4%2025-06-10Fix
CVE-2025-47962Microsoft Windows SDK elevation of privilege7.8CNA v3.11.6%2025-06-10Exploit codeFix
CVE-2025-47957Microsoft Word remote code execution8.4CNA v3.11.3%2025-06-10Exploit codeFix
CVE-2025-47956Microsoft Windows Security App spoofing5.5CNA v3.10.7%2025-06-10Fix
CVE-2025-47955Microsoft Windows Remote Access Connection Manager elevation of privilege7.8CNA v3.10.9%2025-06-10Fix
CVE-2025-47953Microsoft Office remote code execution8.4CNA v3.10.5%2025-06-10Fix
CVE-2025-47849Apache CloudStack: Insecure access of user's API/Secret Keys in the same domain8.8CISA ADP v3.10.6%2025-06-10Fix
CVE-2025-47713Apache CloudStack: Domain Admin can reset Admin password in Root Domain8.8CISA ADP v3.10.6%2025-06-10Fix
CVE-2025-47176Microsoft Outlook remote code execution7.8CNA v3.10.7%2025-06-10Exploit codeFix
CVE-2025-47175Microsoft PowerPoint remote code execution7.8CNA v3.12.4%2025-06-10Exploit codeFix
CVE-2025-47174Microsoft Excel remote code execution7.8CNA v3.10.5%2025-06-10Fix
CVE-2025-47173Microsoft Office remote code execution7.8CNA v3.10.6%2025-06-10Fix
CVE-2025-47172Microsoft SharePoint server remote code execution8.8CNA v3.11.7%2025-06-10Fix
CVE-2025-47171Microsoft Outlook remote code execution6.7CNA v3.11.7%2025-06-10Exploit codeFix
CVE-2025-47170Microsoft Word remote code execution7.8CNA v3.10.6%2025-06-10Fix
CVE-2025-47169Microsoft Word remote code execution7.8CNA v3.10.7%2025-06-10Fix
CVE-2025-47168Microsoft Word remote code execution7.8CNA v3.10.6%2025-06-10Fix
CVE-2025-47167Microsoft Office remote code execution8.4CNA v3.10.7%2025-06-10Fix
CVE-2025-47166Microsoft SharePoint server remote code execution8.8CNA v3.121.2%2025-06-10Exploit codeFix
CVE-2025-47165Microsoft Excel remote code execution7.8CNA v3.12.2%2025-06-10Exploit codeFix
CVE-2025-47164Microsoft Office remote code execution8.4CNA v3.10.7%2025-06-10Fix
CVE-2025-47163Microsoft SharePoint server remote code execution8.8CNA v3.120.5%2025-06-10Fix
CVE-2025-47162Microsoft Office remote code execution8.4CNA v3.10.8%2025-06-10Fix
CVE-2025-47160Microsoft Windows Shortcut files security feature bypass5.4CNA v3.10.8%2025-06-10Fix
CVE-2025-47117Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47116Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47115Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-47114Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47113Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47112Adobe Acrobat Reader out-of-bounds read5.5CNA v3.10.4%2025-06-10Fix
CVE-2025-47111Adobe Acrobat Reader null pointer dereference5.5CNA v3.10.3%2025-06-10Fix
CVE-2025-47110Adobe Commerce cross-site scripting (stored XSS)8.4CNA v3.10.7%2025-06-10Fix
CVE-2025-47108Adobe Substance3D Painter out-of-bounds write7.8CNA v3.10.2%2025-06-10Fix
CVE-2025-47107Adobe InCopy heap-based buffer overflow7.8CNA v3.10.2%2025-06-10Fix
CVE-2025-47106Adobe InDesign Desktop use-after-free5.5CNA v3.10.3%2025-06-10Fix
CVE-2025-47105Adobe InDesign Desktop out-of-bounds read5.5CNA v3.10.3%2025-06-10Fix
CVE-2025-47104Adobe InDesign Desktop out-of-bounds read5.5CNA v3.10.3%2025-06-10Fix
CVE-2025-47096Adobe Experience Manager improper input validation3.5CNA v3.10.3%2025-06-10Fix
CVE-2025-47094Adobe Experience Manager cross-site scripting (reflected XSS)6.1CNA v3.10.3%2025-06-10Fix
CVE-2025-47093Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47092Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-47091Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47090Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47089Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47088Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47087Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47086Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47085Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47084Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47083Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47082Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47081Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47080Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-47079Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47078Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47077Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47076Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47075Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47074Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-47073Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47072Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47071Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.5%2025-06-10Fix
CVE-2025-47070Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-47069Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-47068Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47067Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-47066Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-47065Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-47063Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-47062Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-47060Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47057Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47056Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47055Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47052Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-47051Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47050Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47049Adobe Experience Manager cross-site scripting (DOM-based XSS)6.1CNA v3.10.3%2025-06-10Fix
CVE-2025-47048Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47047Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-47045Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47044Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47042Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47041Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-47040Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47039Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-47038Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-47037Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-47036Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-47035Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47034Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47033Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-47032Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-47031Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-47030Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-47029Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-47027Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-47026Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47025Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47022Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47021Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-47020Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-47019Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-47017Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-47016Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47015Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47014Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-47013Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-47012Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47011Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47010Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-47008Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-47007Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-47006Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-47005Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47004Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-47003Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-47002Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-47000Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-46999Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-46997Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-46995Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-46992Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-46991Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-46990Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-46989Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-46988Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-46987Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46986Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-46985Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46984Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-46983Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46982Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46981Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-46979Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46978Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-46977Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46976Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-46975Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46974Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46973Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46972Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46971Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46970Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46968Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46967Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46966Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46965Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46964Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46963Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46960Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46957Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46956Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46955Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46954Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46953Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46952Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-46951Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46950Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46949Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46948Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46947Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46946Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46945Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46944Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46943Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46942Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46941Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46940Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46939Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46935Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46934Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46933Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46931Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46930Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46929Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46927Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46926Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46924Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46923Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46922Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46920Adobe Experience Manager cross-site scripting (stored XSS)4.6CNA v3.10.3%2025-06-10Fix
CVE-2025-46919Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46918Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46917Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46916Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46915Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46914Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46913Adobe Experience Manager cross-site scripting (stored XSS)4.8CNA v3.10.3%2025-06-10Fix
CVE-2025-46912Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46911Adobe Experience Manager cross-site scripting (stored XSS)4.8CNA v3.10.4%2025-06-10Fix
CVE-2025-46910Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46909Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46908Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46907Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46906Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46905Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46904Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46903Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46902Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46901Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46900Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46899Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46898Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-46895Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46894Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46893Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46892Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46891Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46890Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-46889Adobe Experience Manager improper access control5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-46888Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46887Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46886Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46885Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46884Adobe Experience Manager cross-site scripting (stored XSS)4.8CNA v3.10.4%2025-06-10Fix
CVE-2025-46883Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46882Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46881Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46880Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46879Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46878Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46877Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2025-06-10Fix
CVE-2025-46876Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46875Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46874Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46873Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-06-10Fix
CVE-2025-46872Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.4%2025-06-10Fix