CVE-2025 records published in June 2025

Page three of four: records 2,001 to 3,000 of the 3,210 published in June 2025, newest first. The first page carries the figures for June 2025.

CVE-2025 records published in June 2025, newest first: records 2,001 to 3,000 of 3,210
CVE	Summary	CVSS	EPSS	Published	Signals
CVE-2025-46871	Adobe Experience Manager cross-site scripting (stored XSS)	5.4CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-46870	Adobe Experience Manager cross-site scripting (DOM-based XSS)	5.4CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-46866	Adobe Experience Manager cross-site scripting (DOM-based XSS)	5.4CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-46865	Adobe Experience Manager cross-site scripting (DOM-based XSS)	5.4CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-46864	Adobe Experience Manager cross-site scripting (stored XSS)	5.4CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-46863	Adobe Experience Manager cross-site scripting (stored XSS)	5.4CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-46862	Adobe Experience Manager cross-site scripting (stored XSS)	5.4CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-46861	Adobe Experience Manager cross-site scripting (stored XSS)	5.4CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-46860	Adobe Experience Manager cross-site scripting (stored XSS)	5.4CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-46859	Adobe Experience Manager cross-site scripting (stored XSS)	5.4CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-46858	Adobe Experience Manager cross-site scripting (stored XSS)	5.4CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-46857	Adobe Experience Manager cross-site scripting (reflected XSS)	5.4CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-46855	Adobe Experience Manager cross-site scripting (stored XSS)	5.4CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-46854	Adobe Experience Manager cross-site scripting (DOM-based XSS)	5.4CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-46853	Adobe Experience Manager cross-site scripting (stored XSS)	5.4CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-46851	Adobe Experience Manager cross-site scripting (stored XSS)	5.4CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-46850	Adobe Experience Manager cross-site scripting (stored XSS)	5.4CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-46848	Adobe Experience Manager cross-site scripting (DOM-based XSS)	5.4CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-46847	Adobe Experience Manager cross-site scripting (stored XSS)	5.4CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-46846	Adobe Experience Manager cross-site scripting (stored XSS)	5.4CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-46845	Adobe Experience Manager cross-site scripting (stored XSS)	5.4CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-46844	Adobe Experience Manager cross-site scripting (stored XSS)	5.4CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-46843	Adobe Experience Manager cross-site scripting (stored XSS)	5.4CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-46842	Adobe Experience Manager cross-site scripting (stored XSS)	5.4CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-46841	Adobe Experience Manager cross-site scripting (stored XSS)	5.4CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-46840	Adobe Experience Manager improper authorization	8.7CNA v3.1	0.4%	2025-06-10	Fix
CVE-2025-46838	Adobe Experience Manager cross-site scripting (DOM-based XSS)	5.4CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-46837	Adobe Experience Manager cross-site scripting (stored XSS)	8.7CNA v3.1	0.4%	2025-06-10	Fix
CVE-2025-46612	Airleader Easy unrestricted file upload	7.2CISA ADP v3.1	0.7%	2025-06-10
CVE-2025-44044	Keyoti SearchUnit XML external entity injection	7.5CISA ADP v3.1	0.4%	2025-06-10
CVE-2025-44043	Keyoti SearchUnit prior to 9.0.0. is vulnerable to Server-Side Request Forgery (SSRF) in /Keyoti_SearchEngine_Web_Common/SearchService.svc/GetResults and /Keyoti_SearchEngine_Web_Common/SearchService.svc/GetLocationAndContentCategories. An attacker can specify their own SMB server as the indexDirect	5.4CISA ADP v3.1	0.2%	2025-06-10
CVE-2025-43701	Salesforce OmniStudio improper preservation of permissions	7.5CISA ADP v3.1	0.4%	2025-06-10	Fix
CVE-2025-43700	Salesforce OmniStudio improper preservation of permissions	7.5CISA ADP v3.1	0.4%	2025-06-10
CVE-2025-43699	Salesforce OmniStudio client-side enforcement of server-side security	5.3CISA ADP v3.1	0.4%	2025-06-10	Fix
CVE-2025-43698	Salesforce OmniStudio improper preservation of permissions	9.1CISA ADP v3.1	0.5%	2025-06-10	Fix
CVE-2025-43697	Salesforce OmniStudio improper preservation of permissions	7.5CISA ADP v3.1	0.4%	2025-06-10	Fix
CVE-2025-43593	Adobe InDesign Desktop out-of-bounds write	7.8CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-43590	Adobe InDesign Desktop out-of-bounds write	7.8CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-43589	Adobe InDesign Desktop use-after-free	7.8CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-43588	Adobe Substance3D Sampler out-of-bounds write	7.8CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-43586	Adobe Commerce improper access control	8.1CNA v3.1	0.6%	2025-06-10	Fix
CVE-2025-43585	Adobe Commerce improper authorization	8.2CNA v3.1	0.5%	2025-06-10	Fix
CVE-2025-43581	Adobe Substance3D Sampler out-of-bounds write	7.8CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-43579	Adobe Acrobat Reader information exposure	5.5CNA v3.1	0.2%	2025-06-10	Fix
CVE-2025-43578	Adobe Acrobat Reader out-of-bounds read	5.5CNA v3.1	0.5%	2025-06-10	Fix
CVE-2025-43577	Adobe Acrobat Reader use-after-free	7.8CNA v3.1	0.5%	2025-06-10	Fix
CVE-2025-43576	Adobe Acrobat Reader use-after-free	7.8CNA v3.1	0.5%	2025-06-10	Fix
CVE-2025-43575	Adobe Acrobat Reader out-of-bounds write	7.8CNA v3.1	0.4%	2025-06-10	Fix
CVE-2025-43574	Adobe Acrobat Reader use-after-free	7.8CNA v3.1	0.4%	2025-06-10	Fix
CVE-2025-43573	Adobe Acrobat Reader use-after-free	7.8CNA v3.1	0.4%	2025-06-10	Fix
CVE-2025-43558	Adobe InDesign Desktop out-of-bounds write	7.8CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-43550	Adobe Acrobat Reader use-after-free	7.8CNA v3.1	0.5%	2025-06-10	Fix
CVE-2025-42998	SAP Business One Integration Framework origin validation error	5.3CNA v3.1	0.2%	2025-06-10	Fix
CVE-2025-42996	SAP MDM Server allows an attacker to gain control of existing client sessions and execute certain functions without having to re-authenticate giving the ability to access or modify non-sensitive information or consume sufficient resources which could degrade the performance of the server causing low	5.6CNA v3.1	0.2%	2025-06-10	Fix
CVE-2025-42995	SAP MDM Server Read function vulnerability	7.5CNA v3.1	0.4%	2025-06-10	Fix
CVE-2025-42994	SAP MDM Server ReadString function vulnerability	7.5CNA v3.1	0.4%	2025-06-10	Fix
CVE-2025-42993	Missing authorization Check in SAP S/4HANA (Enterprise Event Enablement)	6.7CNA v3.1	0.4%	2025-06-10	Fix
CVE-2025-42991	Missing authorization check in SAP S/4HANA (Bank Account application)	4.3CNA v3.1	0.2%	2025-06-10	Fix
CVE-2025-42990	HTML injection in Unprotected SAPUI5 applications	3.0CNA v3.1	0.2%	2025-06-10	Fix
CVE-2025-42989	Missing authorization check in SAP NetWeaver Application Server for ABAP	9.6CNA v3.1	0.4%	2025-06-10	Fix
CVE-2025-42988	Server-side request forgery in SAP Business Objects Business Intelligence Platform	3.7CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-42987	Missing authorization Check in SAP S/4HANA (Manage Processing Rules for Bank Statement)	4.3CNA v3.1	0.2%	2025-06-10	Fix
CVE-2025-42984	Missing authorization check in SAP S/4HANA (Manage Central Purchase Contract application)	5.4CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-42983	Missing authorization check in SAP Business Warehouse and SAP Plug-In Basis	8.5CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-42982	Information disclosure in SAP GRC (AC plugin)	8.8CNA v3.1	0.4%	2025-06-10	Fix
CVE-2025-42977	Directory traversal vulnerability in SAP NetWeaver Visual Composer	7.6CNA v3.1	0.6%	2025-06-10	Fix
CVE-2025-41657	Auma: Incorrect delivery status of the Bluetooth configuration	4.3CNA v3.1	0.2%	2025-06-10	Fix
CVE-2025-40662	Absolute path disclosure vulnerability in DM Corporative CMS	7.5v3.1	0.4%	2025-06-10	Fix
CVE-2025-40661	Insecure direct object reference (IDOR) vulnerability in DM Corporative CMS	7.5v3.1	0.3%	2025-06-10	Fix
CVE-2025-40660	Insecure direct object reference (IDOR) vulnerability in DM Corporative CMS	7.5v3.1	0.3%	2025-06-10	Fix
CVE-2025-40659	Insecure direct object reference (IDOR) vulnerability in DM Corporative CMS	7.5v3.1	0.3%	2025-06-10	Fix
CVE-2025-40658	Insecure direct object reference (IDOR) vulnerability in DM Corporative CMS	7.5v3.1	0.3%	2025-06-10	Fix
CVE-2025-40657	SQL injection vulnerability in DM Corporative CMS	9.8v3.1	0.4%	2025-06-10	Fix
CVE-2025-40656	SQL injection vulnerability in DM Corporative CMS	9.8v3.1	0.4%	2025-06-10	Fix
CVE-2025-40655	SQL injection vulnerability in DM Corporative CMS	9.8v3.1	0.4%	2025-06-10	Fix
CVE-2025-40654	SQL injection vulnerability in DM Corporative CMS	9.8v3.1	0.4%	2025-06-10	Fix
CVE-2025-40591	Siemens RUGGEDCOM ROX MX5000 client-side enforcement of server-side security	8.3CNA v4.0	0.7%	2025-06-10	Fix
CVE-2025-40585	Siemens Energy Services incorrect default permissions	9.5CNA v4.0	0.4%	2025-06-10	Fix
CVE-2025-40569	Siemens RUGGEDCOM RST2428P race condition	5.9CNA v4.0	0.3%	2025-06-10	Fix
CVE-2025-40568	Siemens RUGGEDCOM RST2428P incorrect authorization	5.3CNA v4.0	0.5%	2025-06-10	Fix
CVE-2025-40567	Siemens RUGGEDCOM RST2428P incorrect authorization	7.1CNA v4.0	0.4%	2025-06-10	Fix
CVE-2025-37100	Exposure of sensitive information to an Unauthorized User in HPE Aruba Networking Private 5G Core	7.7CNA v3.1	0.5%	2025-06-10
CVE-2025-36852	Build cache poisoning via Untrusted Pull requests	9.4CNA v4.0	0.2%	2025-06-10
CVE-2025-36580	Dell Wyse Management Suite cross-site scripting	6.1CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-36578	Dell Wyse Management Suite incorrect authorization	6.8CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-36577	Dell Wyse Management Suite cross-site scripting	6.1CNA v3.1	0.4%	2025-06-10	Fix
CVE-2025-36576	Dell Wyse Management Suite cross-site request forgery	2.7CNA v3.1	0.2%	2025-06-10	Fix
CVE-2025-36575	Dell Wyse Management Suite information disclosure through data queries	7.5CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-36574	Dell Wyse Management Suite absolute path traversal	8.2CNA v3.1	0.5%	2025-06-10	Fix
CVE-2025-35940	GFI Archiver Hard-coded ArchiverSpaApi JWT Signing Key	8.1CNA v3.1	0.4%	2025-06-10
CVE-2025-33112	IBM AIX command execution	8.4CNA v3.1	0.2%	2025-06-10	Fix
CVE-2025-33075	Microsoft Windows Installer elevation of privilege	7.8CNA v3.1	0.6%	2025-06-10	Fix
CVE-2025-33073	Microsoft Windows SMB client improper access control	8.8CNA v3.1	82.7%	2025-06-10	KEVExploit codeFix
CVE-2025-33071	Microsoft Windows KDC Proxy Service (KPSSVC) remote code execution	8.1CNA v3.1	23.2%	2025-06-10	Fix
CVE-2025-33070	Microsoft Windows Netlogon elevation of privilege	8.1CNA v3.1	9.9%	2025-06-10	Fix
CVE-2025-33069	Microsoft Windows App Control for Business security feature bypass	5.1CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-33068	Microsoft Windows Standards-Based Storage Management service denial of service	7.5CNA v3.1	1.8%	2025-06-10	Fix
CVE-2025-33067	Microsoft Windows Task Scheduler elevation of privilege	8.4CNA v3.1	0.5%	2025-06-10	Fix
CVE-2025-33066	Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution	8.8CNA v3.1	1.1%	2025-06-10	Fix
CVE-2025-33065	Microsoft Windows Storage Management Provider information disclosure	5.5CNA v3.1	0.6%	2025-06-10	Fix
CVE-2025-33064	Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution	8.8CNA v3.1	1.3%	2025-06-10	Fix
CVE-2025-33063	Microsoft Windows Storage Management Provider information disclosure	5.5CNA v3.1	0.6%	2025-06-10	Fix
CVE-2025-33062	Microsoft Windows Storage Management Provider information disclosure	5.5CNA v3.1	0.6%	2025-06-10	Fix
CVE-2025-33061	Microsoft Windows Storage Management Provider information disclosure	5.5CNA v3.1	0.6%	2025-06-10	Fix
CVE-2025-33060	Microsoft Windows Storage Management Provider information disclosure	5.5CNA v3.1	0.6%	2025-06-10	Fix
CVE-2025-33059	Microsoft Windows Storage Management Provider information disclosure	5.5CNA v3.1	0.6%	2025-06-10	Fix
CVE-2025-33058	Microsoft Windows Storage Management Provider information disclosure	5.5CNA v3.1	0.6%	2025-06-10	Fix
CVE-2025-33057	Microsoft Windows Local Security Authority (LSA) denial of service	6.5CNA v3.1	1.7%	2025-06-10	Fix
CVE-2025-33056	Microsoft Windows Local Security Authority (LSA) denial of service	7.5CNA v3.1	1.7%	2025-06-10	Fix
CVE-2025-33055	Microsoft Windows Storage Management Provider information disclosure	5.5CNA v3.1	0.6%	2025-06-10	Fix
CVE-2025-33053	Microsoft Windows external control of file name or path	8.8CNA v3.1	87.0%	2025-06-10	KEVExploit codeFix
CVE-2025-33052	Microsoft Windows DWM Core library information disclosure	5.5CNA v3.1	0.6%	2025-06-10	Fix
CVE-2025-33050	Microsoft Windows DHCP server service denial of service	7.5CNA v3.1	1.8%	2025-06-10	Fix
CVE-2025-32725	Microsoft Windows DHCP server service denial of service	7.5CNA v3.1	1.8%	2025-06-10	Fix
CVE-2025-32724	Microsoft Windows Local Security Authority subsystem Service (LSASS) denial of service	7.5CNA v3.1	1.8%	2025-06-10	Fix
CVE-2025-32722	Microsoft Windows Storage Port driver information disclosure	5.5CNA v3.1	1.1%	2025-06-10	Fix
CVE-2025-32721	Microsoft Windows Recovery driver elevation of privilege	7.3CNA v3.1	0.6%	2025-06-10	Fix
CVE-2025-32720	Microsoft Windows Storage Management Provider information disclosure	5.5CNA v3.1	0.6%	2025-06-10	Fix
CVE-2025-32719	Microsoft Windows Storage Management Provider information disclosure	5.5CNA v3.1	0.5%	2025-06-10	Fix
CVE-2025-32718	Microsoft Windows SMB client elevation of privilege	7.8CNA v3.1	0.5%	2025-06-10	Fix
CVE-2025-32716	Microsoft Windows Media elevation of privilege	7.8CNA v3.1	0.5%	2025-06-10	Fix
CVE-2025-32715	Microsoft Remote Desktop protocol Client information disclosure	6.5CNA v3.1	1.4%	2025-06-10	Fix
CVE-2025-32714	Microsoft Windows Installer elevation of privilege	7.8CNA v3.1	1.3%	2025-06-10	Fix
CVE-2025-32713	Microsoft Windows Common Log File System driver elevation of privilege	7.8CNA v3.1	0.7%	2025-06-10	Fix
CVE-2025-32712	Microsoft Windows win32k elevation of privilege	7.8CNA v3.1	0.5%	2025-06-10	Fix
CVE-2025-32710	Microsoft Windows Remote Desktop services remote code execution	8.1CNA v3.1	1.1%	2025-06-10	Exploit codeFix
CVE-2025-31325	Cross-site scripting (XSS) vulnerability in SAP NetWeaver (ABAP Keyword Documentation)	5.8CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-31104	Fortinet FortiADC OS command injection	7.0CNA v3.1	1.1%	2025-06-10	Fix
CVE-2025-30327	Adobe InCopy integer overflow or wraparound	7.8CNA v3.1	0.2%	2025-06-10	Fix
CVE-2025-30321	Adobe InDesign Desktop null pointer dereference	5.5CNA v3.1	0.2%	2025-06-10	Fix
CVE-2025-30317	Adobe InDesign Desktop heap-based buffer overflow	7.8CNA v3.1	0.3%	2025-06-10	Fix
CVE-2025-30220	XML external entity (XXE) Processing vulnerability in GeoServer WFS service	9.9CNA v3.1	42.3%	2025-06-10	NucleiFix
CVE-2025-30145	GeoServer has an infinite loop vulnerability in Jiffle process	7.5CNA v3.1	0.5%	2025-06-10	Fix
CVE-2025-29828	Microsoft Windows Schannel remote code execution	8.1CNA v3.1	1.3%	2025-06-10	Fix
CVE-2025-27819	Apache Kafka: Possible RCE/denial of service attack via SASL JAAS JndiLoginModule configuration	7.5CISA ADP v3.1	1.0%	2025-06-10	Fix
CVE-2025-27818	Apache Kafka: Possible RCE attack via SASL JAAS LdapLoginModule configuration	8.8CISA ADP v3.1	1.0%	2025-06-10	Fix
CVE-2025-27817	Apache Kafka Client: Arbitrary file read and SSRF	7.5CISA ADP v3.1	68.8%	2025-06-10	Reported exploitedNucleiExploit codeFix
CVE-2025-27505	GeoServer missing authorization on REST API Index	5.3CNA v3.1	1.2%	2025-06-10	NucleiFix
CVE-2025-27207	Adobe Commerce improper access control	6.5CNA v3.1	0.5%	2025-06-10	Fix
CVE-2025-27206	Adobe Commerce improper access control	5.3CNA v3.1	0.5%	2025-06-10	Fix
CVE-2025-26521	Apache CloudStack: CKS cluster in project exposes user API keys	8.1CISA ADP v3.1	0.6%	2025-06-10	Fix
CVE-2025-26395	SolarWinds SWOSH DOM-based reflective XSS	7.1CNA v3.1	0.2%	2025-06-10	Fix
CVE-2025-26394	SolarWinds SWOSH open redirection	4.8CNA v3.1	0.2%	2025-06-10	Fix
CVE-2025-25250	Fortinet FortiOS information disclosure	3.9CNA v3.1	0.5%	2025-06-10	Fix
CVE-2025-24471	Fortinet FortiOS improper certificate validation	6.0CNA v3.1	0.4%	2025-06-10	Fix
CVE-2025-24069	Microsoft Windows Storage Management Provider information disclosure	5.5CNA v3.1	0.6%	2025-06-10	Fix
CVE-2025-24068	Microsoft Windows Storage Management Provider information disclosure	5.5CNA v3.1	0.5%	2025-06-10	Fix
CVE-2025-24065	Microsoft Windows Storage Management Provider information disclosure	5.5CNA v3.1	0.6%	2025-06-10	Fix
CVE-2025-23192	Cross-site scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence (BI Workspace)	8.2CNA v3.1	0.4%	2025-06-10	Fix
CVE-2025-22829	Apache CloudStack: Unauthorised access to dedicated resources in Quota plugin	2.3CNA v4.0	0.8%	2025-06-10	Fix
CVE-2025-22463	Ivanti Workspace Control hard-coded cryptographic key	7.3CNA v3.1	0.4%	2025-06-10	Fix
CVE-2025-22455	Ivanti Workspace Control hard-coded cryptographic key	8.8CNA v3.1	0.4%	2025-06-10	Fix
CVE-2025-22256	Fortinet FortiPAM improper handling of insufficient permissions	6.0CNA v3.1	0.4%	2025-06-10	Fix
CVE-2025-22254	Fortinet FortiOS improper privilege management	6.5CNA v3.1	0.8%	2025-06-10	Fix
CVE-2025-22251	Fortinet FortiOS improper channel restriction	3.0CNA v3.1	0.4%	2025-06-10	Fix
CVE-2025-5985	code-projects School Fees Payment System improper authentication	6.9CNA v4.0	0.6%	2025-06-10
CVE-2025-5984	SourceCodester Online Student Clearance System add-fee.php cross-site scripting	5.4v3.1	0.3%	2025-06-10
CVE-2025-5980	code-projects Restaurant Order System order.php SQL injection	9.8v3.1	0.5%	2025-06-10
CVE-2025-5979	code-projects School Fees Payment System branch.php SQL injection	9.8v3.1	0.5%	2025-06-10
CVE-2025-5978	Tenda FH1202 VirtualSer fromVirtualSer stack-based overflow	8.7CNA v4.0	1.0%	2025-06-10
CVE-2025-5977	code-projects School Fees Payment System datatable.php SQL injection	9.8v3.1	0.5%	2025-06-10
CVE-2025-5976	PHPGurukul Rail Pass Management System add-pass.php cross-site scripting	5.4v3.1	0.3%	2025-06-10
CVE-2025-5975	PHPGurukul Rail Pass Management System download-pass.php cross-site scripting	6.1v3.1	0.4%	2025-06-10
CVE-2025-5974	PHPGurukul Restaurant Table Booking System check-status.php cross-site scripting	5.4v3.1	0.3%	2025-06-10
CVE-2025-5973	PHPGurukul Restaurant Table Booking System add-table.php cross-site scripting	5.4v3.1	0.3%	2025-06-10
CVE-2025-5972	PHPGurukul Restaurant Table Booking System manage-subadmins.php cross-site scripting	5.4v3.1	0.3%	2025-06-10
CVE-2025-5971	code-projects School Fees Payment System ajx.php SQL injection	8.8v3.1	0.6%	2025-06-10
CVE-2025-5970	PHPGurukul Restaurant Table Booking System add-subadmin.php cross-site scripting	5.4v3.1	0.3%	2025-06-10
CVE-2025-5969	D-Link DIR-632 HTTP POST request biurl_grou FUN_00425fd8 stack-based overflow	8.7CNA v4.0	1.3%	2025-06-10
CVE-2025-5952	Zend.To NSSDropoff.php exec os command injection	6.9CNA v4.0	1.7%	2025-06-10
CVE-2025-5943	MicroDicom DICOM Viewer out-of-bounds write	8.6CNA v4.0	0.7%	2025-06-10	Fix
CVE-2025-5935	Open5GS AMF/MME emm-sm.c common_register_state denial of service	7.5v3.1	0.9%	2025-06-10
CVE-2025-5934	Netgear EX3700 mtd sub_41619C stack-based overflow	8.7CNA v4.0	1.0%	2025-06-10
CVE-2025-5925	Bunny’s Print CSS WordPress plugin cross-site request forgery to settings update	4.3CNA v3.1	0.1%	2025-06-10
CVE-2025-5913	PHPGurukul Vehicle Record Management System search-vehicle.php SQL injection	9.8v3.1	0.5%	2025-06-10
CVE-2025-5912	D-Link DIR-632 HTTP POST request do_file stack-based overflow	8.7CNA v4.0	1.4%	2025-06-10
CVE-2025-5911	TOTOLINK EX1200T HTTP POST request formDMZ buffer overflow	8.8v3.1	1.1%	2025-06-10
CVE-2025-5910	TOTOLINK EX1200T HTTP POST request formWsc buffer overflow	8.7CNA v4.0	1.1%	2025-06-10
CVE-2025-5909	TOTOLINK EX1200T HTTP POST request formReflashClientTbl buffer overflow	8.7CNA v4.0	1.4%	2025-06-10
CVE-2025-5908	TOTOLINK EX1200T HTTP POST request formIpQoS buffer overflow	8.7CNA v4.0	1.0%	2025-06-10
CVE-2025-5907	TOTOLINK EX1200T HTTP POST request formFilter buffer overflow	8.7CNA v4.0	6.4%	2025-06-10	Emerging Threats
CVE-2025-5906	code-projects Laundry System data missing authentication	9.8v3.1	0.6%	2025-06-10
CVE-2025-5905	TOTOLINK T10 POST request cstecgi.cgi setWiFiRepeaterCfg buffer overflow	8.7CNA v4.0	11.3%	2025-06-10	Emerging Threats
CVE-2025-5904	TOTOLINK T10 POST request cstecgi.cgi setWiFiMeshName buffer overflow	8.7CNA v4.0	11.0%	2025-06-10	Emerging Threats
CVE-2025-5903	TOTOLINK T10 POST request cstecgi.cgi setWiFiAclRules buffer overflow	8.7CNA v4.0	11.0%	2025-06-10	Emerging Threats
CVE-2025-5743	Schneider Electric EVLink WallBox OS command injection	7.0CNA v4.0	0.9%	2025-06-10	Fix
CVE-2025-5742	Schneider Electric EVLink WallBox cross-site scripting	5.1CNA v4.0	0.3%	2025-06-10	Fix
CVE-2025-5741	Schneider Electric EVLink WallBox path traversal	6.9CNA v4.0	0.6%	2025-06-10	Fix
CVE-2025-5740	Schneider Electric EVLink WallBox path traversal	8.6CNA v4.0	0.8%	2025-06-10	Fix
CVE-2025-5353	Ivanti Workspace Control hard-coded cryptographic key	8.8CNA v3.1	0.4%	2025-06-10	Fix
CVE-2025-5335	Autodesk Installer privilege Ecalation due to untrusted search path	7.8CNA v3.1	0.2%	2025-06-10	Fix
CVE-2025-4954	Axle Demo Importer WordPress plugin Author+ arbitrary file upload	8.8CISA ADP v3.1	0.6%	2025-06-10
CVE-2025-4840	Likes and Dislikes WordPress plugin unauthenticated SQL injection	7.5CISA ADP v3.1	0.6%	2025-06-10	Exploit code
CVE-2025-4774	Premium Addons for Elementor WordPress plugin stored cross-site scripting	5.4v3.1	0.2%	2025-06-10	Fix
CVE-2025-4681	upKeeper Solutions upKeeper Instant Privilege Access improper privilege management	8.6CNA v4.0	0.2%	2025-06-10	Fix
CVE-2025-4680	upKeeper Solutions upKeeper Instant Privilege Access improper input validation	8.6CNA v4.0	0.2%	2025-06-10	Fix
CVE-2025-4678	Pandora FMS Pandora ITSM remote code execution leads to command injection	7.0CNA v4.0	1.5%	2025-06-10	Fix
CVE-2025-4653	Pandora FMS Pandora ITSM remote code execution leads to command injection	7.0CNA v4.0	3.3%	2025-06-10	MetasploitExploit codeFix
CVE-2025-4601	RH - Real Estate WordPress theme authenticated (Subscriber+) privilege escalation	8.8CNA v3.1	7.0%	2025-06-10	Exploit codeFix
CVE-2025-4577	Smash Balloon Custom Facebook Feed WordPress plugin stored cross-site scripting	5.4v3.1	0.3%	2025-06-10	Fix
CVE-2025-4387	Abandoned Cart Pro for WooCommerce WordPress plugin arbitrary file upload	8.8CNA v3.1	0.5%	2025-06-10	Fix
CVE-2025-3905	Schneider Electric Modicon Controllers M241/M251 cross-site scripting	5.1CNA v4.0	0.3%	2025-06-10	Fix
CVE-2025-3899	Schneider Electric Modicon Controllers M241/M251 cross-site scripting	5.1CNA v4.0	0.2%	2025-06-10	Fix
CVE-2025-3898	Schneider Electric Modicon Controllers M241/M251 improper input validation	7.1CNA v4.0	0.5%	2025-06-10	Fix
CVE-2025-3117	Schneider Electric Modicon Controllers M241/M251 cross-site scripting	5.1CNA v4.0	0.2%	2025-06-10	Fix
CVE-2025-3116	Schneider Electric Modicon Controllers M241/M251 improper input validation	7.1CNA v4.0	0.5%	2025-06-10	Fix
CVE-2025-3112	Schneider Electric Modicon Controllers M241/M251 resource exhaustion	7.1CNA v4.0	0.6%	2025-06-10	Fix
CVE-2025-3076	Elementor Pro WordPress plugin authenticated (Contributor+) stored cross-site scripting	5.4v3.1	0.2%	2025-06-10	Fix
CVE-2025-3052	An arbitrary write vulnerability in Microsoft signed UEFI firmware from DT Research Inc	8.2CISA ADP v3.1	0.4%	2025-06-10	Exploit codeFix
CVE-2025-2918	Ultimate Blocks WordPress Blocks plugin stored cross-site scripting	5.4v3.1	0.2%	2025-06-10	Fix
CVE-2025-2884	Out-of-bounds read vulnerability in TCG TPM2.0 reference implementation	6.6CISA ADP v3.1	0.3%	2025-06-10	Fix
CVE-2025-2474	Vulnerability in PCX Image Codec Impacts QNX Software Development Platform	9.8CNA v3.1	0.7%	2025-06-10	Fix
CVE-2025-1041	Avaya Call Management System RCE	9.9CNA v3.1	0.4%	2025-06-10	Fix
CVE-2025-0052	Pure Storage FlashBlade authentication denial of service	8.3CNA v4.0	0.3%	2025-06-10	Fix
CVE-2025-0051	Pure Storage FlashArray authentication denial of service	8.7CNA v4.0	0.4%	2025-06-10	Fix
CVE-2025-0037	AMD Platform Loader and Manager (PLM) improper input validation	6.6CNA v3.1	0.2%	2025-06-10
CVE-2025-0036	AMD Versal Adaptive SoC Devices system information disclosure	3.2CNA v3.1	0.1%	2025-06-10
CVE-2025-49653	Lablup BackendAI exposure of sensitive information allows account takeover	8.0CNA v3.1	0.3%	2025-06-09
CVE-2025-49652	Lablup BackendAI improper access control allows arbitrary account creation	9.8CNA v3.1	0.4%	2025-06-09	Fix
CVE-2025-49651	Lablup BackendAI missing authorization for Interactive Sessions	8.1CNA v3.1	0.3%	2025-06-09
CVE-2025-49297	Grill and Chow WordPress theme local file inclusion	9.8v3.1	0.6%	2025-06-09	Fix
CVE-2025-49296	GrandPrix WordPress theme local file inclusion	9.8v3.1	0.6%	2025-06-09	Fix
CVE-2025-49295	MediClinic WordPress theme local file inclusion	9.8v3.1	0.6%	2025-06-09	Fix
CVE-2025-49282	Magze WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2025-06-09	Fix
CVE-2025-49281	Magways WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2025-06-09	Fix
CVE-2025-49280	Magty WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2025-06-09	Fix
CVE-2025-49279	Blogvy WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2025-06-09	Fix
CVE-2025-49278	Blogty WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2025-06-09	Fix
CVE-2025-49277	Blogprise WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2025-06-09	Fix
CVE-2025-49276	Blogmine WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2025-06-09	Fix
CVE-2025-49275	Blogbyte WordPress theme local file inclusion	8.1CNA v3.1	0.6%	2025-06-09	Fix
CVE-2025-49265	Membership For WooCommerce WordPress plugin broken access control	7.5CNA v3.1	0.3%	2025-06-09	Fix
CVE-2025-49141	HaxCMS-PHP command injection	8.6CNA v3.1	1.5%	2025-06-09	Fix
CVE-2025-49140	Pion Interceptor's improper RTP padding handling allows remote crash for SFU users (DoS)	7.5CNA v3.1	0.5%	2025-06-09	Fix
CVE-2025-49139	haxtheweb issues clickjacking	5.3CNA v3.1	0.4%	2025-06-09	Fix
CVE-2025-49138	haxtheweb issues HAX CMS vulnerable to local file inclusion via saveOutline API Location parameter	6.5CNA v3.1	0.5%	2025-06-09	Fix
CVE-2025-49137	haxtheweb issues hax CMS stored cross-site scripting	8.5CNA v3.1	0.3%	2025-06-09	Fix
CVE-2025-49136	listmonk Sprig templates server-side template injection	9.1CNA v3.1	1.5%	2025-06-09	MetasploitFix
CVE-2025-49131	FastGPT Sandbox vulnerable to sandbox bypass	6.3CNA v3.1	0.5%	2025-06-09	Fix
CVE-2025-49130	Laravel Translation Manager stored cross-site scripting	6.0CNA v4.0	0.4%	2025-06-09	Fix
CVE-2025-49013	WilderForge vulnerable to code injection via GitHub Actions Workflows	10.0CNA v3.1	0.8%	2025-06-09	Fix
CVE-2025-49006	Wasp has case insensitive OAuth ID vulnerability	8.2CNA v4.0	0.4%	2025-06-09	Fix
CVE-2025-49004	Hijacking Caido instance during the initial setup via DNS Rebinding to achieve RCE	7.5CNA v3.1	0.6%	2025-06-09	Fix
CVE-2025-48877	Discourse vulnerable to auto-executing of third-party code in embedded CodePen iframe	8.1CNA v4.0	0.4%	2025-06-09	Fix
CVE-2025-48281	MyStyle Custom Product Designer WordPress plugin SQL injection	9.3CNA v3.1	1.4%	2025-06-09	NucleiFix
CVE-2025-48279	WC MyParcel Belgium WordPress plugin reflected cross-site scripting (XSS)	7.1CNA v3.1	0.2%	2025-06-09	Fix
CVE-2025-48267	WP Pipes WordPress plugin arbitrary file deletion	9.1v3.1	0.4%	2025-06-09	Fix
CVE-2025-48261	MultiVendorX WordPress plugin sensitive data exposure	7.5CNA v3.1	0.3%	2025-06-09	Fix
CVE-2025-48147	CryptoCloud - Crypto Payment Gateway WordPress plugin broken access control	6.5CNA v3.1	0.3%	2025-06-09	Fix
CVE-2025-48143	Formulario de contacto SalesUp! WordPress plugin reflected cross-site scripting (XSS)	7.1CNA v3.1	0.2%	2025-06-09
CVE-2025-48141	Multi CryptoCurrency Payments WordPress plugin SQL injection	9.3CNA v3.1	0.3%	2025-06-09	Fix
CVE-2025-48140	MetalpriceAPI WordPress plugin remote code execution (RCE)	9.9CNA v3.1	0.4%	2025-06-09	Fix
CVE-2025-48139	StyleAI WordPress plugin broken access control	6.5CNA v3.1	0.2%	2025-06-09
CVE-2025-48130	Spice Blocks WordPress plugin arbitrary file download	7.5CNA v3.1	0.5%	2025-06-09	Fix
CVE-2025-48129	Incorrect Privilege Assignment vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light allows Privilege Escalation.This issue affects Spreadsheet Price Changer for WooCommerce and WP E-com	9.8CNA v3.1	0.6%	2025-06-09	Exploit code
CVE-2025-48126	Essential Real Estate WordPress plugin local file inclusion	9.8v3.1	0.5%	2025-06-09
CVE-2025-48125	WP Event Manager WordPress plugin local file inclusion	8.1CNA v3.1	0.6%	2025-06-09	Fix
CVE-2025-48124	Spreadsheet Price Changer for WooCommerce and WP E-commerce WordPress plugin path traversal	7.5CNA v3.1	0.5%	2025-06-09
CVE-2025-48123	Spreadsheet Price Changer for WooCommerce and WP E-commerce WordPress plugin code injection	10.0CNA v3.1	0.5%	2025-06-09
CVE-2025-48122	Spreadsheet Price Changer for WooCommerce and WP E-commerce Light WordPress plugin SQL injection	9.3CNA v3.1	0.4%	2025-06-09
CVE-2025-48062	Discourse vulnerable to HTML injection when inviting to topic via email	7.1CNA v3.1	0.3%	2025-06-09	Fix
CVE-2025-48053	Discourse vulnerable to DoS via large URL payload in PM to a bot	8.7CNA v4.0	0.4%	2025-06-09	Fix
CVE-2025-47712	Nbd: Nbdkit: Integer overflow triggers an assertion resulting in denial of service	6.5CNA v3.1	0.5%	2025-06-09	Fix
CVE-2025-47711	Nbdkit: Nbdkit-server: Off-by-one error when processing block status may lead to a denial of service	6.5CNA v3.1	0.5%	2025-06-09	Fix
CVE-2025-47651	Infility Global WordPress plugin SQL injection	8.5CNA v3.1	0.3%	2025-06-09
CVE-2025-47608	Recover abandoned cart for WooCommerce WordPress plugin SQL injection	9.3CNA v3.1	1.1%	2025-06-09
CVE-2025-47598	History Log by click5 WordPress plugin cross-site scripting (XSS)	6.5CNA v3.1	0.2%	2025-06-09
CVE-2025-47561	MapSVG WordPress plugin privilege escalation	8.8CNA v3.1	0.3%	2025-06-09	Fix
CVE-2025-47527	Icegram Collect Easy Form, Lead Collection and Subscription WordPress plugin broken access control	7.1CNA v3.1	0.3%	2025-06-09	Fix
CVE-2025-47511	Welcart e-Commerce WordPress plugin arbitrary file deletion	6.5v3.1	0.5%	2025-06-09	Fix
CVE-2025-47487	MC Woocommerce Wishlist WordPress plugin cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2025-06-09	Fix
CVE-2025-47477	Backup and Staging by WP Time Capsule WordPress plugin reflected cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2025-06-09	Fix
CVE-2025-47463	Stock Locations for WooCommerce WordPress plugin broken access control	7.1CNA v3.1	0.4%	2025-06-09	Fix
CVE-2025-46178	Vishalmathur CloudClassroom-PHP-Project askquery.php cross-site scripting	6.1CISA ADP v3.1	0.4%	2025-06-09	Exploit code
CVE-2025-46041	Anchor CMS stored cross-site scripting	5.4CISA ADP v3.1	0.6%	2025-06-09	Exploit code
CVE-2025-45055	Silverpeas cross-site scripting	5.4CISA ADP v3.1	0.3%	2025-06-09
CVE-2025-45002	Codervivek Vigybag cross-site scripting	5.4CISA ADP v3.1	0.2%	2025-06-09
CVE-2025-45001	React-native-keys insecurely stores encryption cipher and Base64 chunks	7.5CISA ADP v3.1	0.2%	2025-06-09
CVE-2025-41444	ManageEngine ADAudit Plus SQL injection	8.3CNA v3.1	1.6%	2025-06-09	Fix
CVE-2025-41437	ManageEngine OpManager reflected XSS	4.3CNA v3.1	0.3%	2025-06-09	Fix
CVE-2025-40675	Reflected cross-site scripting (XSS) in Bagisto	6.1v3.1	0.2%	2025-06-09	Fix
CVE-2025-40670	Incorrect authorization vulnerability in TCMAN GIM	8.8v3.1	0.3%	2025-06-09	Fix
CVE-2025-40669	Incorrect authorization vulnerability in TCMAN GIM	6.5NVD v3.1	0.3%	2025-06-09	Fix
CVE-2025-40668	Incorrect authorization vulnerability in TCMAN GIM	6.5NVD v3.1	0.3%	2025-06-09	Fix
CVE-2025-39539	WP Email Delivery WordPress theme reflected cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2025-06-09
CVE-2025-39476	Revo WordPress theme local file inclusion	7.5CNA v3.1	0.7%	2025-06-09
CVE-2025-39475	Arlo WordPress theme local file inclusion	8.1CNA v3.1	0.7%	2025-06-09
CVE-2025-39473	Seofy Core WordPress plugin local file inclusion	8.1CNA v3.1	0.7%	2025-06-09	Fix
CVE-2025-36528	ManageEngine ADAudit Plus SQL injection	8.3CNA v3.1	1.6%	2025-06-09	Fix
CVE-2025-32595	Krowd WordPress theme local file inclusion	8.1CNA v3.1	0.8%	2025-06-09	Fix
CVE-2025-32308	Team Builder WordPress plugin broken access control	7.6CNA v3.1	0.3%	2025-06-09
CVE-2025-32305	FlatNews WordPress theme reflected cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2025-06-09	Fix
CVE-2025-32291	SUMO Affiliates Pro WordPress plugin arbitrary file upload	10.0CNA v3.1	0.5%	2025-06-09	Fix
CVE-2025-31925	SHOUT WordPress plugin reflected cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2025-06-09
CVE-2025-31920	WPGuppy WordPress plugin SQL command improper neutralization	8.5CNA v3.1	0.4%	2025-06-09
CVE-2025-31917	Universal Video Player WordPress plugin reflected cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2025-06-09
CVE-2025-31638	WordPress Spare theme cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2025-06-09
CVE-2025-31635	CLEVER WordPress plugin arbitrary file download	7.5CNA v3.1	0.5%	2025-06-09
CVE-2025-31429	PressGrid WordPress theme themeton deserialization of untrusted data	9.8CNA v3.1	0.6%	2025-06-09
CVE-2025-31426	Sticky Radio Player WordPress plugin reflected cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2025-06-09
CVE-2025-31424	WP Lead Capturing Pages WordPress plugin SQL injection	9.3CNA v3.1	0.4%	2025-06-09	Fix
CVE-2025-31398	WordPress PIMP - Creative MultiPurpose theme deserialization of untrusted data	9.8CNA v3.1	0.6%	2025-06-09
CVE-2025-31396	FLAP - Business WordPress theme PHP object injection	9.8CNA v3.1	0.6%	2025-06-09
CVE-2025-31061	Wishlist WordPress plugin reflected cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2025-06-09
CVE-2025-31059	WBW Product Table PRO WordPress plugin SQL injection	9.3CNA v3.1	0.4%	2025-06-09	Fix
CVE-2025-31058	Revolution Video Player WordPress plugin reflected cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2025-06-09
CVE-2025-31057	Universal Video Player WordPress plugin reflected cross-site scripting (XSS)	7.1CNA v3.1	0.3%	2025-06-09
CVE-2025-31052	The Fashion - Model Agency One Page Beauty WordPress theme deserialization of untrusted data	9.8CNA v3.1	0.6%	2025-06-09
CVE-2025-31050	Apptha Slider Gallery WordPress plugin arbitrary file read	7.5CNA v3.1	0.5%	2025-06-09
CVE-2025-31045	elfsight Contact Form widget WordPress plugin sensitive data exposure	7.5CNA v3.1	0.5%	2025-06-09
CVE-2025-31039	Category Icon WordPress plugin XML external entity (XXE)	9.1CNA v3.1	0.5%	2025-06-09	Fix
CVE-2025-31022	PayU India WordPress plugin account takeover	9.8CNA v3.1	0.8%	2025-06-09	Fix
CVE-2025-31019	Password Policy Manager WordPress plugin account takeover	8.8CNA v3.1	0.6%	2025-06-09	Fix
CVE-2025-30515	CyberData 011209 SIP Emergency Intercom path traversal	8.8NVD v3.1	0.6%	2025-06-09	Fix
CVE-2025-30507	CyberData 011209 SIP Emergency Intercom SQL injection	7.5v3.1	0.4%	2025-06-09	Fix
CVE-2025-30184	CyberData 011209 SIP Emergency Intercom authentication bypass using an alternate path or channel	9.3CNA v4.0	0.5%	2025-06-09	Fix
CVE-2025-30183	CyberData 011209 SIP Emergency Intercom insufficiently protected credentials	8.7CNA v4.0	0.4%	2025-06-09	Fix
CVE-2025-29627	Keepersecurity Keeperchat improper authentication	6.8CISA ADP v3.1	0.3%	2025-06-09
CVE-2025-28992	SNS Anton WordPress theme local file inclusion	8.1CNA v3.1	0.8%	2025-06-09
CVE-2025-28945	Valen - Sport, Fashion WooCommerce WordPress theme local file inclusion	8.1CNA v3.1	0.8%	2025-06-09
CVE-2025-28944	Avaz WordPress theme local file inclusion	8.1CNA v3.1	0.8%	2025-06-09
CVE-2025-28888	GiftXtore WordPress theme local file inclusion	8.1CNA v3.1	0.8%	2025-06-09	Fix
CVE-2025-27709	ManageEngine ADAudit Plus SQL injection	8.3CNA v3.1	1.6%	2025-06-09	Fix
CVE-2025-27362	Petito WordPress theme local file inclusion	8.1CNA v3.1	0.8%	2025-06-09	Fix
CVE-2025-26592	Lab WordPress theme local file inclusion	8.1CNA v3.1	0.8%	2025-06-09	Fix
CVE-2025-26468	CyberData 011209 SIP Emergency Intercom missing authentication for critical function	8.7CNA v4.0	0.4%	2025-06-09	Fix
CVE-2025-25209	Red Hat Connectivity Link AuthPolicy secret reference information disclosure	5.7CNA v3.1	0.2%	2025-06-09
CVE-2025-25208	Red Hat Connectivity Link 1 rhcl: Authorino denial of service	5.7CNA v3.1	0.3%	2025-06-09
CVE-2025-25207	Red Hat Connectivity Link 1 authorino uncontrolled resource consumption	5.7CNA v3.1	0.3%	2025-06-09
CVE-2025-24770	CraftXtore WordPress theme local file inclusion	8.1CNA v3.1	0.8%	2025-06-09
CVE-2025-24768	Nitan WordPress theme local file inclusion	8.1CNA v3.1	0.8%	2025-06-09
CVE-2025-24767	TicketBAI Facturas para WooCommerce WordPress plugin SQL injection	9.3CNA v3.1	0.4%	2025-06-09	Fix
CVE-2025-23974	One-Login WordPress plugin privilege escalation	8.1CNA v3.1	0.4%	2025-06-09
CVE-2025-5918	Libarchive: Reading past eof may be triggered for piped file streams	6.6NVD v3.1	0.4%	2025-06-09	Fix
CVE-2025-5917	Libarchive: Off by one error in build_ustar_entry_name at archive_write_set_format_pax.c	5.0NVD v3.1	0.2%	2025-06-09	Fix
CVE-2025-5916	Libarchive: Integer overflow while reading warc files at archive_read_support_format_warc.c	5.6NVD v3.1	0.2%	2025-06-09	Fix
CVE-2025-5915	Libarchive: Heap buffer over read in copy_from_lzss_window at archive_read_support_format_rar.c	6.6NVD v3.1	0.2%	2025-06-09	Fix
CVE-2025-5914	Libarchive: Double free at archive_read_format_rar_seek_data in archive_read_support_format_rar.c	7.8NVD v3.1	0.4%	2025-06-09	Fix
CVE-2025-5902	TOTOLINK T10 POST request cstecgi.cgi setUpgradeFW buffer overflow	8.7CNA v4.0	6.1%	2025-06-09	Emerging Threats
CVE-2025-5901	TOTOLINK T10 POST request cstecgi.cgi UploadCustomModule buffer overflow	8.7CNA v4.0	6.4%	2025-06-09	Emerging Threats
CVE-2025-5900	Tenda AC9 cross-site request forgery	7.1v3.1	0.3%	2025-06-09
CVE-2025-5899	GNU PSPP pspp-convert.c parse_variables_option free of memory not on the heap	4.8CNA v4.0	0.2%	2025-06-09
CVE-2025-5898	GNU PSPP pspp-convert.c parse_variables_option out-of-bounds write	4.8CNA v4.0	0.2%	2025-06-09
CVE-2025-5897	Vuejs vue-cli Markdown Code HtmlPwaPlugin.js HtmlPwaPlugin redos	7.5v3.1	0.6%	2025-06-09
CVE-2025-5896	tarojs Taro index.js redos	7.5v3.1	0.6%	2025-06-09	Fix
CVE-2025-5895	Metabase dom.js parseDataUri redos	7.5v3.1	0.6%	2025-06-09
CVE-2025-5894	Honding Technology Smart Parking Management System missing authorization	8.7CNA v4.0	0.6%	2025-06-09	Fix
CVE-2025-5893	Honding Technology Smart Parking Management System exposure of sensitive information	9.3CNA v4.0	0.5%	2025-06-09	Fix
CVE-2025-5892	RocketChat parseMessage.js parseMessage redos	7.5v3.1	0.6%	2025-06-09
CVE-2025-5891	Unitech pm2 Config.js redos	5.3v3.1	0.6%	2025-06-09	Fix
CVE-2025-5890	actions toolkit glob internal-pattern.ts globEscape redos	5.3CNA v4.0	0.4%	2025-06-09
CVE-2025-5889	juliangruber brace-expansion index.js expand redos	2.3CNA v4.0	0.6%	2025-06-09	Fix
CVE-2025-5888	jsnjfz WebStack-Guns cross-site request forgery	6.5v3.1	1.0%	2025-06-09
CVE-2025-5887	jsnjfz WebStack-Guns file upload UserMgrController.java cross-site scripting	5.4v3.1	0.3%	2025-06-09
CVE-2025-5886	Emlog article.php cross-site scripting	4.1v3.1	0.4%	2025-06-09
CVE-2025-5885	Konica Minolta bizhub cross-site request forgery	5.3CNA v4.0	0.3%	2025-06-09
CVE-2025-5884	Konica Minolta bizhub Display MFP Information List cross-site scripting	5.4v3.1	0.3%	2025-06-09
CVE-2025-5881	code-projects Chat System confirm_password.php SQL injection	9.8v3.1	0.5%	2025-06-09
CVE-2025-5880	Whistle get-temp-file path traversal	5.3CNA v4.0	0.5%	2025-06-09	Exploit code
CVE-2025-5879	WuKongOpenSource WukongCRM file upload AdminSysConfigController.java cross-site scripting	5.4v3.1	0.3%	2025-06-09
CVE-2025-5877	Fengoffice Feng Office Document Upload ApplicationDataObject.class.php XML external entity reference	8.1v3.1	0.4%	2025-06-09
CVE-2025-5876	Lucky LM-520-SC/LM-520-FSC/LM-520-FSC-SAM missing authentication	6.9CNA v4.0	0.5%	2025-06-09
CVE-2025-5875	TP-Link Technologies TL-IPC544EP-W4 main sub_69064 buffer overflow	8.7CNA v4.0	1.0%	2025-06-09
CVE-2025-5874	Redash getattr python.py run_query sandbox	2.1CNA v4.0	0.3%	2025-06-09
CVE-2025-5873	eCharge Hardy Barth Salia PLCC Web UI firmware.php unrestricted upload	5.3CNA v4.0	0.3%	2025-06-09	Fix
CVE-2025-5872	eGauge EG3000 Energy Monitor setting missing authentication	6.9CNA v4.0	0.5%	2025-06-09
CVE-2025-5871	Papendorf SOL Connect Center Web interface missing authentication	6.9CNA v4.0	0.5%	2025-06-09
CVE-2025-5870	TRENDnet TV-IP121W Web interface setup.cgi improper authentication	6.9CNA v4.0	0.5%	2025-06-09
CVE-2025-5869	RT-Thread lwp_syscall.c sys_recvfrom memory corruption	9.8v3.1	0.9%	2025-06-09
CVE-2025-5868	RT-Thread lwp_syscall.c sys_thread_sigprocmask array index	9.8v3.1	1.2%	2025-06-09
CVE-2025-5867	RT-Thread lwp_syscall.c csys_sendto null pointer dereference	9.8v3.1	1.2%	2025-06-09
CVE-2025-5866	RT-Thread lwp_syscall.c sys_sigprocmask array index	9.8v3.1	0.9%	2025-06-09
CVE-2025-5865	RT-Thread parameter lwp_syscall.c sys_select memory corruption	9.8v3.1	1.0%	2025-06-09
CVE-2025-5864	Tenda TDSEE App Password Reset Confirmation Code ConfirmSmsCode excessive authentication	6.3CNA v4.0	0.5%	2025-06-09
CVE-2025-5863	Tenda AC5 SetRebootTimer formSetRebootTimer stack-based overflow	9.8v3.1	1.0%	2025-06-09
CVE-2025-5862	Tenda AC7 setPptpUserList formSetPPTPUserList buffer overflow	9.8v3.1	1.0%	2025-06-09
CVE-2025-5861	Tenda AC7 AdvSetLanip fromadvsetlanip buffer overflow	9.8v3.1	6.8%	2025-06-09	Emerging Threats
CVE-2025-5860	PHPGurukul Maid Hiring Management System search-booking-request.php SQL injection	9.8v3.1	0.5%	2025-06-09
CVE-2025-5859	PHPGurukul Nipah Virus Testing Management System test-details.php SQL injection	8.8v3.1	0.4%	2025-06-09
CVE-2025-5858	PHPGurukul Nipah Virus Testing Management System patient-report.php SQL injection	8.8v3.1	0.4%	2025-06-09
CVE-2025-5857	code-projects Patient Record Management System urinalysis_record.php SQL injection	8.8v3.1	0.5%	2025-06-09
CVE-2025-5856	PHPGurukul BP Monitoring Management System registration.php SQL injection	9.8v3.1	0.5%	2025-06-09
CVE-2025-5855	Tenda AC6 SetRebootTimer formSetRebootTimer stack-based overflow	9.8v3.1	1.0%	2025-06-09
CVE-2025-5854	Tenda AC6 AdvSetLanip fromadvsetlanip buffer overflow	8.7CNA v4.0	1.0%	2025-06-09
CVE-2025-5853	Tenda AC6 SetRemoteWebCfg formSetSafeWanWebMan stack-based overflow	8.7CNA v4.0	7.1%	2025-06-09	Emerging Threats
CVE-2025-5852	Tenda AC6 setPptpUserList formSetPPTPUserList buffer overflow	8.7CNA v4.0	1.0%	2025-06-09
CVE-2025-5851	Tenda AC15 HTTP POST Request AdvSetLanip fromadvsetlanip buffer overflow	8.7CNA v4.0	1.0%	2025-06-09
CVE-2025-4652	Broadstreet WordPress plugin reflected XSS	6.1CISA ADP v3.1	0.5%	2025-06-09	NucleiFix
CVE-2025-3835	ManageEngine Exchange Reporter Plus remote code execution	9.6CNA v3.1	2.2%	2025-06-09	Fix
CVE-2025-3582	Newsletter WordPress plugin Admin+ stored XSS via form	4.8CISA ADP v3.1	0.3%	2025-06-09	Fix
CVE-2025-3581	Newsletter WordPress plugin Admin+ stored XSS via widget	4.8CISA ADP v3.1	0.3%	2025-06-09	Fix
CVE-2025-38004	Linux kernel CAN broadcast manager out-of-bounds read	7.3CNA v3.1	0.3%	2025-06-08	Fix
CVE-2025-38003	Linux kernel CAN broadcast manager procfs interface use-after-free	7.8CNA v3.1	0.2%	2025-06-08	Fix
CVE-2025-35010	Microhard Bullet-LTE and IPn4Gii AT+MNPINGTM argument injection	7.1CNA v3.1	1.0%	2025-06-08
CVE-2025-35009	Microhard Bullet-LTE and IPn4Gii AT+MNNETSP argument injection	7.1CNA v3.1	1.0%	2025-06-08
CVE-2025-35008	Microhard Bullet-LTE and IPn4Gii AT+MMNAME argument injection	7.1CNA v3.1	1.0%	2025-06-08
CVE-2025-35007	Microhard Bullet-LTE and IPn4Gii AT+MFRULE argument injection	7.1CNA v3.1	1.0%	2025-06-08
CVE-2025-35006	Microhard Bullet-LTE and IPn4Gii AT+MFPORTFWD argument injection	7.1CNA v3.1	1.0%	2025-06-08
CVE-2025-35005	Microhard Bullet-LTE and IPn4Gii AT+MFMAC argument injection	7.1CNA v3.1	1.0%	2025-06-08
CVE-2025-35004	Microhard Bullet-LTE and IPn4Gii AT+MFIP argument injection	7.1CNA v3.1	1.0%	2025-06-08
CVE-2025-32459	ON Semiconductor Quantenna router_command.sh (in the sync_time argument) argument injection	7.8v3.1	0.6%	2025-06-08	Fix
CVE-2025-32458	ON Semiconductor Quantenna router_command.sh argument injection	7.8v3.1	0.6%	2025-06-08	Fix
CVE-2025-32457	ON Semiconductor Quantenna router_command.sh (in the get_file_from_qtn argument) argument injection	7.8v3.1	0.6%	2025-06-08	Fix
CVE-2025-32456	ON Semiconductor Quantenna router_command.sh (in the put_file_to_qtn argument) argument injection	7.8v3.1	0.6%	2025-06-08	Fix
CVE-2025-32455	ON Semiconductor Quantenna router_command.sh (in the run_cmd argument) argument injection	7.8v3.1	0.6%	2025-06-08	Fix
CVE-2025-27563	OpenHarmony security_access_token has an improper preservation of permissions	3.3CNA v3.1	0.1%	2025-06-08	Fix
CVE-2025-27247	OpenHarmony pasteboard has an improper preservation of permissions	5.5CNA v3.1	0.1%	2025-06-08	Fix
CVE-2025-27242	OpenHarmony ssecurity_component_manager has an improper input vulnerability	3.3CNA v3.1	0.1%	2025-06-08	Fix
CVE-2025-27131	OpenHarmony kernel_liteos_m has an improper input vulnerability	6.1CNA v3.1	0.1%	2025-06-08	Fix
CVE-2025-26693	OpenHarmony security_access_token has an improper preservation of permissions	3.3CNA v3.1	0.1%	2025-06-08	Fix
CVE-2025-26691	OpenHarmony telephony_call_manager has an improper preservation of permissions	5.5CNA v3.1	0.1%	2025-06-08	Fix
CVE-2025-25217	OpenHarmony arkui_ace_enginehas a null pointer dereference	3.3CNA v3.1	0.1%	2025-06-08	Fix
CVE-2025-24493	OpenHarmony kernel_liteos_a has a race condition	5.5CNA v3.1	0.1%	2025-06-08	Fix
CVE-2025-23235	OpenHarmony arkcompiler_ets_runtime has an out-of-bounds write	3.3CNA v3.1	0.1%	2025-06-08	Fix
CVE-2025-21082	OpenHarmony arkui_ace_engine has a type confusion	3.3CNA v3.1	0.1%	2025-06-08	Exploit codeFix
CVE-2025-20063	OpenHarmony arkui_ace_engine has a type confusion	3.3CNA v3.1	0.1%	2025-06-08	Fix
CVE-2025-5850	Tenda AC15 HTTP POST Request SetLEDCf formsetschedled buffer overflow	8.7CNA v4.0	6.4%	2025-06-08	Emerging Threats
CVE-2025-5849	Tenda AC15 HTTP POST Request SetRemoteWebCfg formSetSafeWanWebMan stack-based overflow	8.7CNA v4.0	1.0%	2025-06-08
CVE-2025-5848	Tenda AC15 HTTP POST request setPptpUserList formSetPPTPUserList buffer overflow	8.7CNA v4.0	1.0%	2025-06-08	Emerging Threats
CVE-2025-5847	Tenda AC9 HTTP POST Request SetRemoteWebCfg formSetSafeWanWebMan stack-based overflow	8.7CNA v4.0	1.0%	2025-06-08
CVE-2025-3461	ON Semiconductor Quantenna Telnet missing authentication	9.8v3.1	0.5%	2025-06-08	Fix
CVE-2025-3460	ON Semiconductor Quantenna set_tx_pow argument injection	7.8v3.1	1.0%	2025-06-08	Fix
CVE-2025-3459	ON Semiconductor Quantenna transmit_file argument injection	7.8v3.1	0.6%	2025-06-08	Fix
CVE-2025-49619	Skyvern server-side template injection	8.5CNA v3.1	20.0%	2025-06-07	MetasploitEmerging ThreatsExploit code
CVE-2025-47601	MaxiBlocks WordPress plugin arbitrary option update to privilege escalation	8.8CNA v3.1	0.3%	2025-06-07	Fix
CVE-2025-5840	SourceCodester Client Database Management System user_update_customer_order.php unrestricted upload	6.9CNA v4.0	0.5%	2025-06-07	Exploit code
CVE-2025-5839	Tenda AC9 POST Request AdvSetLanip fromadvsetlanip buffer overflow	8.7CNA v4.0	1.0%	2025-06-07
CVE-2025-5838	PHPGurukul Employee Record Management System adminprofile.php SQL injection	8.8v3.1	0.4%	2025-06-07
CVE-2025-5837	PHPGurukul Employee Record Management System allemployees.php SQL injection	8.8v3.1	0.4%	2025-06-07
CVE-2025-5836	Tenda AC9 POST Request SetIPTVCfg formSetIptv command injection	5.3CNA v4.0	2.7%	2025-06-07
CVE-2025-5814	Profiler WordPress plugin unauthorized access	5.3CNA v3.1	0.3%	2025-06-07
CVE-2025-5568	WpEvently WordPress plugin stored cross-site scripting	5.4v3.1	0.2%	2025-06-07	Fix
CVE-2025-5528	Social Sharing Plugin Sassy Social Share WordPress plugin reflected cross-site scripting	6.1CNA v3.1	0.2%	2025-06-07	Fix
CVE-2025-5399	curl WebSocket endless loop	7.5CISA ADP v3.1	1.4%	2025-06-07	Fix
CVE-2025-5303	LTL Freight Quotes WordPress plugin stored cross-site scripting	7.2CNA v3.1	0.4%	2025-06-07	Fix
CVE-2025-49599	Huawei EG8141A5 incorrect authorization	4.1CNA v3.1	0.1%	2025-06-06
CVE-2025-49453	BP Profile as Homepage WordPress plugin cross-site request forgery (CSRF) to stored XSS	7.1CNA v3.1	0.1%	2025-06-06
CVE-2025-49450	SEPA Girocode WordPress plugin cross-site scripting (XSS)	6.5CNA v3.1	0.2%	2025-06-06
CVE-2025-49449	Interactive Regional Map of Africa WordPress plugin cross-site request forgery (CSRF)	4.3CNA v3.1	0.1%	2025-06-06
CVE-2025-49446	Admin Notes WordPress plugin cross-site request forgery (CSRF)	4.3CNA v3.1	0.2%	2025-06-06
CVE-2025-49445	Interactive UK Regional Map WordPress plugin cross-site request forgery (CSRF) to settings Change	4.3CNA v3.1	0.1%	2025-06-06
CVE-2025-49443	Bacon Ipsum WordPress plugin cross-site scripting (XSS)	6.5CNA v3.1	0.2%	2025-06-06
CVE-2025-49442	Simple Nested Menu WordPress plugin cross-site scripting (XSS)	6.5CNA v3.1	0.2%	2025-06-06
CVE-2025-49441	Interactive Regional Map of Florida WordPress plugin broken access control	5.3CNA v3.1	0.3%	2025-06-06
CVE-2025-49440	WP Security Master WordPress plugin cross-site request forgery (CSRF)	4.3CNA v3.1	0.2%	2025-06-06
CVE-2025-49439	Atelier Create CV WordPress plugin cross-site request forgery (CSRF) to settings Change	4.3CNA v3.1	0.1%	2025-06-06
CVE-2025-49435	Wp Easy Allopass WordPress plugin cross-site request forgery (CSRF)	4.3CNA v3.1	0.2%	2025-06-06
CVE-2025-49429	Video Embeds WordPress plugin cross-site scripting (XSS)	6.5CNA v3.1	0.2%	2025-06-06
CVE-2025-49427	Abbie Expander WordPress plugin cross-site scripting (XSS)	6.5CNA v3.1	0.2%	2025-06-06
CVE-2025-49425	Konami Easter Egg WordPress plugin cross-site request forgery (CSRF)	7.1CNA v3.1	0.1%	2025-06-06
CVE-2025-49421	WP Text Expander WordPress plugin SQL injection	7.6CNA v3.1	0.3%	2025-06-06
CVE-2025-49419	Foxit eSign for WordPress plugin Other vulnerability type vulnerability	5.5CNA v3.1	0.3%	2025-06-06
CVE-2025-49333	Simple Membership WordPress plugin cross-site scripting (XSS)	5.9CNA v3.1	0.2%	2025-06-06	Fix
CVE-2025-49332	WP Time Slots Booking Form WordPress plugin cross-site request forgery (CSRF)	4.3CNA v3.1	0.1%	2025-06-06	Fix
CVE-2025-49329	Store Locator WordPress plugin arbitrary file upload	6.6CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-49328	Store Locator WordPress plugin SQL injection	7.6CNA v3.1	0.4%	2025-06-06	Fix
CVE-2025-49327	ShortLinks Pro WordPress plugin SQL injection	7.6CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-49326	GamiPress WordPress plugin SQL injection	7.6CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-49325	Newspack Newsletters WordPress plugin open redirection	4.7CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-49324	Job Board Manager WordPress plugin broken access control	5.3CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-49323	Hydra Booking WordPress plugin SQL injection	8.5CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-49322	WordPress 404 Page by SeedProd plugin cross-site scripting (XSS)	5.9CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-49320	FraudLabs Pro for WooCommerce WordPress plugin broken access control	5.3CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-49318	WPtouch WordPress plugin cross-site scripting (XSS)	5.9CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-49317	WP Page Loading WordPress plugin cross-site request forgery (CSRF)	4.3CNA v3.1	0.2%	2025-06-06	Fix
CVE-2025-49315	Persian Woocommerce SMS WordPress plugin SQL injection	7.6CNA v3.1	0.4%	2025-06-06	Fix
CVE-2025-49314	BRW WordPress plugin cross-site scripting (XSS)	6.5CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-49313	BRW WordPress plugin local file inclusion	7.5CNA v3.1	0.7%	2025-06-06	Fix
CVE-2025-49311	The Events Calendar Countdown Addon WordPress plugin cross-site scripting (XSS)	6.5CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-49310	Frontend Dashboard WordPress plugin cross-site scripting (XSS)	6.5CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-49309	HT Team Member WordPress plugin cross-site scripting (XSS)	6.5CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-49308	WP Travel Engine WordPress plugin local file inclusion	7.5CNA v3.1	0.7%	2025-06-06	Fix
CVE-2025-49307	WP Multilang WordPress plugin local file inclusion	7.5CNA v3.1	0.7%	2025-06-06	Fix
CVE-2025-49306	WP Social Widget WordPress plugin cross-site scripting (XSS)	5.4v3.1	0.2%	2025-06-06	Fix
CVE-2025-49305	Product Catalog Simple WordPress plugin cross-site scripting (XSS)	6.5CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-49304	Search with Typesense WordPress plugin cross-site scripting (XSS)	6.5CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-49301	Greenshift WordPress plugin cross-site scripting (XSS)	6.5CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-49299	WebHotelier WordPress plugin cross-site scripting (XSS)	6.5CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-49298	Event post WordPress plugin cross-site scripting (XSS)	6.5CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-49294	Crawlomatic Multisite Scraper Post Generator WordPress plugin sensitive data exposure	5.3CNA v3.1	0.4%	2025-06-06	Fix
CVE-2025-49293	Crawlomatic Multisite Scraper Post Generator WordPress plugin broken access control	4.3CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-49292	Profile Builder WordPress plugin content spoofing	4.3CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-49291	Calculated Fields Form WordPress plugin cross-site request forgery (CSRF)	8.8v3.1	0.2%	2025-06-06	Fix
CVE-2025-49289	PDF for WPForms WordPress plugin broken access control	5.0CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-49288	Ultimate WP Mail WordPress plugin account takeover via email Log leak	8.8CNA v3.1	0.5%	2025-06-06	Fix
CVE-2025-49287	Product Feed for WooCommerce WordPress plugin broken access control	4.3CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-49286	WP Table Builder WordPress plugin cross-site request forgery (CSRF)	4.3CNA v3.1	0.2%	2025-06-06	Fix
CVE-2025-49285	WP Cookie Notice for GDPR, CCPA and ePrivacy Consent WordPress plugin cross-site request forgery	4.3CNA v3.1	0.2%	2025-06-06	Fix
CVE-2025-49284	WP Maintenance Mode and Site Under Construction WordPress plugin cross-site request forgery (CSRF)	4.3CNA v3.1	0.2%	2025-06-06	Fix
CVE-2025-49283	Anti-spam WordPress plugin Matthias Nordwig cross-site request forgery	4.3CNA v3.1	0.2%	2025-06-06	Fix
CVE-2025-49273	WP Tools WordPress plugin cross-site request forgery (CSRF)	4.3CNA v3.1	0.2%	2025-06-06	Fix
CVE-2025-49272	Trinity Audio WordPress plugin broken access control	4.3CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-49270	WP-CRM System WordPress plugin broken access control	5.3CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-49269	Market Exporter WordPress plugin cross-site request forgery (CSRF)	4.3CNA v3.1	0.2%	2025-06-06	Fix
CVE-2025-49268	Verge3D WordPress plugin broken access control	5.3CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-49263	WC Vendors Marketplace WordPress plugin SQL injection	7.6CNA v3.1	0.4%	2025-06-06	Fix
CVE-2025-49262	Sina Extension for Elementor WordPress plugin cross-site scripting (XSS)	5.4NVD v3.1	0.3%	2025-06-06	Fix
CVE-2025-49250	Team Showcase WordPress plugin arbitrary shortcode execution vulnerability	4.3CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-49248	Team Showcase WordPress plugin broken access control	4.3CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-49246	Testimonials Showcase WordPress plugin broken access control	4.3CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-49244	Shortcodes Ultimate WordPress plugin cross-site scripting (XSS)	6.5CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-49243	ShiftNav Responsive Mobile Menu WordPress plugin cross-site scripting (XSS)	6.5CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-49242	Bellows Accordion Menu WordPress plugin cross-site scripting (XSS)	6.5CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-49241	oik WordPress plugin broken access control	5.3CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-49240	DocsPress WordPress plugin broken access control	4.3CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-49239	Print Invoice and Delivery Notes for WooCommerce WordPress plugin cross-site request forgery (CSRF)	5.4CNA v3.1	0.2%	2025-06-06	Fix
CVE-2025-49238	Everest Backup WordPress plugin cross-site request forgery (CSRF)	4.3CNA v3.1	0.2%	2025-06-06	Fix
CVE-2025-49237	POEditor WordPress plugin CSRF to arbitrary file deletion	7.4CNA v3.1	0.2%	2025-06-06	Fix
CVE-2025-49236	Raychat WordPress plugin broken access control	5.3CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-49235	RTMKit Addons for Elementor WordPress plugin cross-site scripting (XSS)	6.5CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-49128	Jackson-core vulnerable to Memory Disclosure via Source Snippet in JsonLocation	4.0CNA v3.1	0.4%	2025-06-06	Fix
CVE-2025-49127	Kafbat UI vulnerable to remote code execution by JMX in Metrices Configuration	8.9CNA v4.0	0.6%	2025-06-06
CVE-2025-49077	Dynamic Pricing and Discount Rules WordPress plugin cross-site request forgery (CSRF)	4.3CNA v3.1	0.1%	2025-06-06	Fix
CVE-2025-49076	The Plus Addons for Elementor Page Builder Lite WordPress plugin cross-site scripting (XSS)	6.5CNA v3.1	0.2%	2025-06-06	Fix
CVE-2025-49075	Wishlist WordPress plugin cross-site scripting (XSS)	6.5CNA v3.1	0.2%	2025-06-06	Fix
CVE-2025-49074	WidgetKit WordPress plugin cross-site scripting (XSS)	6.5CNA v3.1	0.2%	2025-06-06	Fix
CVE-2025-49073	WordPress Sweet Dessert theme PHP object injection	9.8CNA v3.1	0.5%	2025-06-06	Fix
CVE-2025-49072	WordPress Mr. Murphy theme PHP object injection	9.8CNA v3.1	0.5%	2025-06-06	Fix
CVE-2025-49068	Ocean Extra WordPress plugin cross-site scripting (XSS)	6.5CNA v3.1	0.2%	2025-06-06	Fix
CVE-2025-49067	Nasa Core WordPress plugin cross-site scripting (XSS)	6.5CNA v3.1	0.2%	2025-06-06	Fix
CVE-2025-49011	authzed spicedb improperly implemented security check	3.7CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-48911	Huawei HarmonyOS vulnerability of improper permission assignment in the note sharing module	8.2CNA v3.1	0.1%	2025-06-06	Fix
CVE-2025-48910	Huawei HarmonyOS buffer overflow vulnerability in the DFile module	5.5CNA v3.1	0.2%	2025-06-06	Fix
CVE-2025-48909	Huawei HarmonyOS bypass vulnerability in the device management channel	7.1CNA v3.1	0.2%	2025-06-06	Fix
CVE-2025-48908	Huawei HarmonyOS denial of service	6.7CNA v3.1	0.1%	2025-06-06	Fix
CVE-2025-48907	Huawei HarmonyOS deserialization vulnerability in the IPC module	6.2CNA v3.1	0.1%	2025-06-06	Exploit codeFix
CVE-2025-48906	Huawei HarmonyOS authentication bypass vulnerability in the DSoftBus module	8.8CNA v3.1	0.2%	2025-06-06	Fix
CVE-2025-48905	Huawei HarmonyOS wasm exception capture vulnerability in the arkweb v8 module	8.1CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-48904	Huawei HarmonyOS vulnerability that cards can call unauthorized APIs in the FRS process	4.4CNA v3.1	0.1%	2025-06-06	Fix
CVE-2025-48903	Huawei HarmonyOS permission bypass vulnerability in the media library module	7.8CNA v3.1	0.1%	2025-06-06	Fix
CVE-2025-48902	Huawei HarmonyOS vulnerability of uncontrolled system resource applications in the setting module	6.6CNA v3.1	0.1%	2025-06-06	Fix
CVE-2025-48784	Soar Cloud HRD Human Resource Management System missing authorization	7.5v3.1	0.4%	2025-06-06
CVE-2025-48783	Soar Cloud HRD Human Resource Management System external control of file name or path	7.5v3.1	0.4%	2025-06-06
CVE-2025-48782	Soar Cloud HRD Human Resource Management System unrestricted upload of file with dangerous type	9.8v3.1	0.5%	2025-06-06
CVE-2025-48781	Soar Cloud HRD Human Resource Management System external control of file name or path	7.5v3.1	0.4%	2025-06-06
CVE-2025-48780	Soar Cloud HRD Human Resource Management System deserialization of untrusted data	9.8v3.1	0.5%	2025-06-06
CVE-2025-48337	QuickCab WordPress plugin broken access control	5.3CNA v3.1	0.3%	2025-06-06
CVE-2025-48335	Responsive Plus WordPress plugin broken access control	5.4CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-48329	Real Time Validation for Gravity Forms WordPress plugin reflected cross-site scripting (XSS)	7.1CNA v3.1	0.2%	2025-06-06
CVE-2025-48328	Real Time Validation for Gravity Forms WordPress plugin Daman Jeet cross-site request forgery	4.3CNA v3.1	0.1%	2025-06-06
CVE-2025-47950	CoreDNS vulnerable to DoQ memory exhaustion via Stream Amplification	7.5CNA v3.1	1.2%	2025-06-06	Fix
CVE-2025-47586	Motors - Events WordPress plugin unauthenticated local file inclusion	9.0CNA v3.1	0.7%	2025-06-06
CVE-2025-47584	Photography WordPress theme PHP object injection	7.5v3.1	0.3%	2025-06-06
CVE-2025-41646	RevPi Webstatus application is vulnerable to an authentication bypass	9.8CNA v3.1	51.3%	2025-06-06	NucleiExploit codeFix
CVE-2025-41367	Stored cross-site scripting (XSS) vulnerability in IDF and ZLF	4.8CNA v4.0	0.4%	2025-06-06	Fix
CVE-2025-41366	ZIV IDF and ZLF permissive cross-domain policy	5.1CNA v4.0	0.4%	2025-06-06	Fix
CVE-2025-41365	Code injection vulnerability in IDF and ZLF	5.1CNA v4.0	0.4%	2025-06-06	Fix
CVE-2025-41364	Stored cross-site scripting (XSS) vulnerability in IDF and ZLF	5.1CNA v4.0	0.4%	2025-06-06	Fix
CVE-2025-41363	ZIV IDF and ZLF permissive cross-domain policy	5.3CNA v4.0	0.3%	2025-06-06	Fix
CVE-2025-41362	Code injection vulnerability in IDF and ZLF	5.3CNA v4.0	0.4%	2025-06-06	Fix
CVE-2025-41361	Uncontrolled resource consumption vulnerability in IDF and ZLF	8.3CNA v4.0	0.3%	2025-06-06	Fix
CVE-2025-41360	Uncontrolled resource consumption vulnerability in IDF and ZLF	8.7CNA v4.0	0.4%	2025-06-06	Fix
CVE-2025-39358	WordPress WP Posts Carousel plugin PHP object injection	8.8CNA v3.1	0.4%	2025-06-06	Fix
CVE-2025-38002	Linux kernel io_uring fdinfo interface vulnerability	7.8CNA v3.1	0.2%	2025-06-06	Fix
CVE-2025-38001	Linux kernel HFSC packet scheduler infinite loop	7.8CNA v3.1	0.5%	2025-06-06	Exploit codeFix
CVE-2025-38000	Linux kernel HFSC packet scheduler use-after-free	7.8CNA v3.1	0.2%	2025-06-06	Fix
CVE-2025-36513	i-PRO Surveillance cameras provided by i-PRO Co., Ltd cross-site request forgery	5.1CNA v4.0	0.1%	2025-06-06
CVE-2025-33035	QNAP File Station 5 path traversal	7.2CNA v4.0	0.5%	2025-06-06	Fix
CVE-2025-33031	QNAP File Station improper certificate validation	8.3CNA v4.0	0.3%	2025-06-06	Fix
CVE-2025-31025	Image Hover Effects Block WordPress plugin cross-site scripting (XSS)	6.5CNA v3.1	0.3%	2025-06-06
CVE-2025-31000	Payment QR WooCommerce WordPress plugin broken access control	5.3CNA v3.1	0.3%	2025-06-06
CVE-2025-30999	External Store for Shopify WordPress plugin local file inclusion	7.5CNA v3.1	0.7%	2025-06-06	Fix
CVE-2025-30997	Car Repair Services WordPress theme server side request forgery (SSRF)	5.4CNA v3.1	0.3%	2025-06-06
CVE-2025-30995	Widgetize Pages Light WordPress plugin cross-site request forgery (CSRF) to stored XSS	7.1CNA v3.1	0.1%	2025-06-06
CVE-2025-30994	CubeWP WordPress plugin cross-site request forgery (CSRF)	4.3CNA v3.1	0.2%	2025-06-06
CVE-2025-30991	WPDM WordPress plugin cross-site scripting	6.5CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-30990	ThemeHunk WordPress plugin broken access control	5.4v3.1	0.2%	2025-06-06	Fix
CVE-2025-30989	Libro de Reclamaciones y Quejas WordPress plugin SQL injection	7.6CNA v3.1	0.4%	2025-06-06	Fix
CVE-2025-30986	Elite Video Player WordPress plugin cross-site request forgery (CSRF)	5.4CNA v3.1	0.2%	2025-06-06
CVE-2025-30981	WP-Recall WordPress plugin CSRF to privilege escalation	6.3CNA v3.1	0.2%	2025-06-06
CVE-2025-30980	Simple Keyword to Link WordPress plugin cross-site request forgery (CSRF)	4.3CNA v3.1	0.2%	2025-06-06
CVE-2025-30978	Slack Notifications by dorzki WordPress plugin broken access control	4.3CNA v3.1	0.4%	2025-06-06
CVE-2025-30977	WordPress Chaport plugin cross-site scripting (XSS)	5.9CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-30976	Nexa Blocks WordPress plugin server side request forgery (SSRF)	4.9CNA v3.1	0.2%	2025-06-06
CVE-2025-30974	Post Grid Master WordPress plugin broken access control	8.8v3.1	0.3%	2025-06-06
CVE-2025-30968	Advanced Post List WordPress plugin cross-site request forgery (CSRF)	5.4CNA v3.1	0.2%	2025-06-06
CVE-2025-30958	onOffice for WP-Websites WordPress plugin broken access control	5.4CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-30957	Activity Plus Reloaded for BuddyPress WordPress plugin broken access control	5.4CNA v3.1	0.3%	2025-06-06
CVE-2025-30956	Booqable Rental WordPress plugin cross-site request forgery (CSRF)	4.3CNA v3.1	0.2%	2025-06-06	Fix
CVE-2025-30954	WP Gravity Forms Constant Contact WordPress plugin open redirection	4.7CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-30953	WP Gravity Forms Salesforce WordPress plugin open redirection	4.7CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-30952	Nexa Blocks WordPress plugin cross-site scripting (XSS)	6.5CNA v3.1	0.3%	2025-06-06
CVE-2025-30951	BlockStrap Page Builder - Bootstrap Blocks WordPress plugin cross-site scripting (XSS)	6.5CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-30950	All Currencies for WooCommerce WordPress plugin cross-site scripting (XSS)	6.5CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-30948	Layouts for Elementor WordPress plugin cross-site request forgery (CSRF)	4.3CNA v3.1	0.2%	2025-06-06	Fix
CVE-2025-30946	Custom Bulk/Quick Edit WordPress plugin cross-site request forgery (CSRF)	4.3CNA v3.1	0.2%	2025-06-06
CVE-2025-30945	Taskbuilder WordPress plugin broken access control	5.3CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-30942	Post Custom Templates Lite WordPress plugin cross-site scripting (XSS)	5.9CNA v3.1	0.3%	2025-06-06
CVE-2025-30941	Pinterest Verify Meta Tag WordPress plugin cross-site scripting (XSS)	5.9CNA v3.1	0.3%	2025-06-06
CVE-2025-30940	Melipayamak WordPress plugin cross-site scripting (XSS)	5.9CNA v3.1	0.2%	2025-06-06
CVE-2025-30939	IFrame Widget WordPress plugin cross-site scripting (XSS)	5.9CNA v3.1	0.2%	2025-06-06
CVE-2025-30938	Broadly for WordPress plugin cross-site scripting (XSS)	5.9CNA v3.1	0.3%	2025-06-06
CVE-2025-30937	Responsify WP WordPress plugin cross-site scripting (XSS)	5.9CNA v3.1	0.3%	2025-06-06
CVE-2025-30935	Contact Form WordPress plugin cross-site scripting (XSS)	6.5CNA v3.1	0.2%	2025-06-06
CVE-2025-30934	診断ジェネレータ作成プラグイン WordPress plugin broken access control	5.3CNA v3.1	0.3%	2025-06-06
CVE-2025-30932	WP Compress for MainWP WordPress plugin broken access control	5.4CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-30931	Подсказки от DaData.ru WordPress plugin cross-site scripting (XSS)	5.9CNA v3.1	0.3%	2025-06-06
CVE-2025-30930	ACF: Yandex Maps Field WordPress plugin cross-site scripting (XSS)	5.9CNA v3.1	0.2%	2025-06-06
CVE-2025-30928	WP Biographia WordPress plugin cross-site scripting (XSS)	5.9CNA v3.1	0.2%	2025-06-06
CVE-2025-30927	Wordapp WordPress plugin broken access control	4.3CNA v3.1	0.3%	2025-06-06
CVE-2025-30638	Powie's Uptime Robot WordPress plugin cross-site scripting (XSS)	5.9CNA v3.1	0.2%	2025-06-06
CVE-2025-30637	Booking Ultra Pro WordPress plugin cross-site scripting (XSS)	5.9CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-30636	Accessibility Suite WordPress plugin broken access control	5.4CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-30634	WP Featured Content Slider WordPress plugin cross-site scripting (XSS)	5.9CNA v3.1	0.3%	2025-06-06
CVE-2025-30632	Global Translator WordPress plugin cross-site request forgery (CSRF)	5.4CNA v3.1	0.2%	2025-06-06
CVE-2025-30630	Global Translator WordPress plugin cross-site scripting (XSS)	5.9CNA v3.1	0.3%	2025-06-06
CVE-2025-30629	Bitly URL Shortener WordPress plugin cross-site request forgery (CSRF)	4.3CNA v3.1	0.2%	2025-06-06	Fix
CVE-2025-30627	Elegant Visitor Counter WordPress plugin cross-site scripting (XSS)	5.9CNA v3.1	0.3%	2025-06-06
CVE-2025-30625	AppBanners WordPress plugin cross-site scripting (XSS)	5.9CNA v3.1	0.3%	2025-06-06
CVE-2025-30624	WordLift WordPress plugin broken access control	4.3CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-30279	QNAP File Station 5 improper certificate validation	8.3CNA v4.0	0.3%	2025-06-06	Fix
CVE-2025-29892	QNAP Qsync Central SQL injection	8.7CNA v4.0	0.5%	2025-06-06	Fix
CVE-2025-29885	QNAP File Station 5 improper certificate validation	8.3CNA v4.0	0.3%	2025-06-06	Fix
CVE-2025-29884	QNAP File Station 5 improper certificate validation	8.3CNA v4.0	0.3%	2025-06-06	Fix
CVE-2025-29883	QNAP File Station 5 improper certificate validation	8.3CNA v4.0	0.3%	2025-06-06	Fix
CVE-2025-29877	QNAP File Station 5 null pointer dereference	5.3CNA v4.0	0.4%	2025-06-06	Fix
CVE-2025-29876	QNAP File Station 5 null pointer dereference	5.3CNA v4.0	0.4%	2025-06-06	Fix
CVE-2025-29873	QNAP File Station 5 null pointer dereference	5.3CNA v4.0	0.4%	2025-06-06	Fix
CVE-2025-29872	QNAP File Station 5 resource exhaustion	7.1CNA v4.0	0.4%	2025-06-06	Fix
CVE-2025-29871	QNAP File Station 5 out-of-bounds read	2.4CNA v4.0	0.1%	2025-06-06	Fix
CVE-2025-29013	Custom Category/Post Type Post order WordPress plugin broken access control	5.4CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-29011	YouTube Simple Gallery WordPress plugin cross-site scripting (XSS)	6.5CNA v3.1	0.3%	2025-06-06
CVE-2025-29010	Behance Portfolio Manager WordPress plugin broken access control	4.3CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-29008	SocialMark WordPress plugin server side request forgery (SSRF)	4.9CNA v3.1	0.2%	2025-06-06
CVE-2025-29006	Direct Checkout for WooCommerce Lite WordPress plugin broken access control	5.3CNA v3.1	0.3%	2025-06-06
CVE-2025-29005	HR Management Lite WordPress plugin cross-site request forgery (CSRF)	4.3CNA v3.1	0.2%	2025-06-06	Fix
CVE-2025-29003	The Holiday Calendar WordPress plugin cross-site scripting (XSS)	6.5CNA v3.1	0.3%	2025-06-06
CVE-2025-28997	WP AutoKeyword WordPress plugin broken access control	5.3CNA v3.1	0.3%	2025-06-06
CVE-2025-28996	GPP Slideshow WordPress plugin broken access control	4.3CNA v3.1	0.3%	2025-06-06
CVE-2025-28995	Viral Loops WP Integration WordPress plugin broken access control	5.3CNA v3.1	0.3%	2025-06-06
CVE-2025-28994	Viral Loops WP Integration WordPress plugin broken access control	4.3CNA v3.1	0.3%	2025-06-06
CVE-2025-28989	Read More Login WordPress plugin cross-site scripting (XSS)	5.9CNA v3.1	0.3%	2025-06-06
CVE-2025-28986	Epicwin WordPress plugin CSRF to SQL injection	8.2CNA v3.1	0.2%	2025-06-06
CVE-2025-28985	Elastic Email Subscribe Form WordPress plugin broken access control	5.4CNA v3.1	0.3%	2025-06-06
CVE-2025-28984	Subscription Renewal Reminders for WooCommerce WordPress plugin cross-site request forgery (CSRF)	4.3CNA v3.1	0.2%	2025-06-06	Fix
CVE-2025-28981	WP Mail Options WordPress plugin cross-site request forgery (CSRF) to stored XSS	7.1CNA v3.1	0.1%	2025-06-06
CVE-2025-28974	mail250 Free WP Mail SMTP stored cross-site scripting	7.1CNA v3.1	0.2%	2025-06-06
CVE-2025-28966	Recent Posts Slider Responsive WordPress plugin cross-site request forgery (CSRF)	7.1CNA v3.1	0.1%	2025-06-06
CVE-2025-28964	Personal Favicon WordPress plugin CSRF to stored XSS	7.1CNA v3.1	0.2%	2025-06-06
CVE-2025-28958	Bg Orthodox Calendar WordPress plugin CSRF to stored XSS	7.1CNA v3.1	0.1%	2025-06-06
CVE-2025-28954	Backwp WordPress plugin CSRF to arbitrary file deletion	7.4CNA v3.1	0.2%	2025-06-06
CVE-2025-28952	CubePoints WordPress plugin cross-site request forgery (CSRF)	4.3CNA v3.1	0.2%	2025-06-06
CVE-2025-28950	Post Author WordPress plugin cross-site request forgery (CSRF)	7.1CNA v3.1	0.2%	2025-06-06
CVE-2025-28948	Mediabay - WordPress Media Library Folders plugin CSRF to reflected XSS	7.1CNA v3.1	0.1%	2025-06-06
CVE-2025-27531	Apache InLong: An arbitrary file read vulnerability for JDBC	9.8CISA ADP v3.1	0.7%	2025-06-06	Fix
CVE-2025-27360	Quick Event Calendar WordPress plugin cross-site request forgery (CSRF)	4.3CNA v3.1	0.2%	2025-06-06
CVE-2025-27359	WP Media File Type Manager WordPress plugin cross-site request forgery (CSRF)	4.3CNA v3.1	0.2%	2025-06-06
CVE-2025-27334	Simple Google Static Map WordPress plugin cross-site scripting (XSS)	6.5CNA v3.1	0.3%	2025-06-06
CVE-2025-26593	FastBook WordPress plugin cross-site request forgery (CSRF)	4.3CNA v3.1	0.2%	2025-06-06
CVE-2025-26590	Complete Google Seo Scan WordPress plugin SQL injection	7.6CNA v3.1	0.4%	2025-06-06
CVE-2025-24778	No Spam At All WordPress plugin broken access control	5.4CNA v3.1	0.3%	2025-06-06
CVE-2025-24776	Responsive Flipbooks WordPress plugin broken access control	5.4CNA v3.1	0.3%	2025-06-06
CVE-2025-24772	Pay with Contact Form 7 WordPress plugin cross-site request forgery (CSRF)	5.4CNA v3.1	0.2%	2025-06-06
CVE-2025-24763	bbPress API WordPress plugin broken access control	5.3CNA v3.1	0.3%	2025-06-06
CVE-2025-24762	TicketBAI Facturas para WooCommerce WordPress plugin broken access control	5.4CNA v3.1	0.3%	2025-06-06
CVE-2025-23971	KI Live Video Conferences WordPress plugin broken access control	5.3CNA v3.1	0.3%	2025-06-06
CVE-2025-23969	KI Live Video Conferences WordPress plugin sensitive data exposure	5.3CNA v3.1	0.4%	2025-06-06
CVE-2025-22490	QNAP File Station 5 null pointer dereference	5.3CNA v4.0	0.4%	2025-06-06	Fix
CVE-2025-22486	QNAP File Station 5 improper certificate validation	7.1CNA v4.0	0.3%	2025-06-06	Fix
CVE-2025-22484	QNAP File Station 5 resource exhaustion	7.1CNA v4.0	0.4%	2025-06-06	Fix
CVE-2025-22482	QNAP Qsync Central format string	2.3CNA v4.0	0.4%	2025-06-06	Fix
CVE-2025-22481	QNAP QTS and QuTS hero command injection	8.7CNA v4.0	0.9%	2025-06-06	Fix
CVE-2025-5806	Jenkins Gatling Plugin vulnerable to cross-site scripting (XSS)	8.0CISA ADP v3.1	0.5%	2025-06-06	Fix
CVE-2025-5799	Tenda AC8 WifiExtraSet fromSetWirelessRepeat stack-based overflow	8.7CNA v4.0	1.2%	2025-06-06	Emerging Threats
CVE-2025-5798	Tenda AC8 SetSysTimeCfg fromSetSysTime stack-based overflow	8.7CNA v4.0	1.2%	2025-06-06
CVE-2025-5797	code-projects Laundry System insert_type.php cross-site scripting	5.4v3.1	0.3%	2025-06-06
CVE-2025-5796	code-projects Laundry System edit_type.php cross-site scripting	5.4v3.1	0.3%	2025-06-06
CVE-2025-5795	Tenda AC5 AdvSetLanip fromadvsetlanip buffer overflow	8.7CNA v4.0	1.0%	2025-06-06
CVE-2025-5794	Tenda AC5 setPptpUserList formSetPPTPUserList buffer overflow	8.7CNA v4.0	1.0%	2025-06-06
CVE-2025-5793	TOTOLINK EX1200T HTTP POST request formPortFw buffer overflow	6.5NVD v3.1	0.9%	2025-06-06	Emerging Threats
CVE-2025-5792	TOTOLINK EX1200T HTTP POST request formWlanRedirect buffer overflow	6.5NVD v3.1	5.8%	2025-06-06	Emerging Threats
CVE-2025-5791	Red Hat OpenShift sandboxed containers users: `root` appended to group listings	7.1CNA v3.1	0.2%	2025-06-06	Fix
CVE-2025-5790	TOTOLINK X15 HTTP POST request formIpQoS buffer overflow	6.5NVD v3.1	6.2%	2025-06-06	Emerging Threats
CVE-2025-5789	TOTOLINK X15 HTTP POST request formPortFw buffer overflow	6.5NVD v3.1	0.7%	2025-06-06
CVE-2025-5788	TOTOLINK X15 HTTP POST request formReflashClientTbl buffer overflow	6.5NVD v3.1	6.2%	2025-06-06	Emerging Threats
CVE-2025-5787	TOTOLINK X15 HTTP POST request formWsc buffer overflow	6.5NVD v3.1	6.2%	2025-06-06	Emerging Threats
CVE-2025-5786	TOTOLINK X15 HTTP POST request formDMZ buffer overflow	6.5NVD v3.1	6.2%	2025-06-06	Emerging Threats
CVE-2025-5785	TOTOLINK X15 HTTP POST request formWirelessTbl buffer overflow	6.5NVD v3.1	6.2%	2025-06-06	Emerging Threats
CVE-2025-5784	PHPGurukul Employee Record Management System myexp.php SQL injection	8.8v3.1	0.4%	2025-06-06
CVE-2025-5783	PHPGurukul Employee Record Management System editmyexp.php SQL injection	5.3CNA v4.0	0.4%	2025-06-06
CVE-2025-5782	PHPGurukul Employee Record Management System resetpassword.php SQL injection	5.3CNA v4.0	0.3%	2025-06-06
CVE-2025-5780	code-projects Patient Record Management System view_dental.php SQL injection	7.5v3.1	0.4%	2025-06-06
CVE-2025-5779	code-projects Patient Record Management System birthing.php SQL injection	7.5v3.1	0.4%	2025-06-06
CVE-2025-5778	1000 Projects ABC Courier Management System admin SQL injection	9.8v3.1	0.5%	2025-06-06
CVE-2025-5766	code-projects Laundry System cross-site request forgery	5.3CNA v4.0	0.3%	2025-06-06
CVE-2025-5765	code-projects Laundry System edit_laundry.php cross-site scripting	5.4v3.1	0.3%	2025-06-06
CVE-2025-5764	code-projects Laundry System insert_laundry.php cross-site scripting	5.4v3.1	0.3%	2025-06-06
CVE-2025-5763	Tenda CP3 apollo sub_F3C8C command injection	8.8v3.1	4.7%	2025-06-06
CVE-2025-5762	code-projects Patient Record Management System view_hematology.php SQL injection	7.5v3.1	0.4%	2025-06-06
CVE-2025-5761	PHPGurukul BP Monitoring Management System edit-family-member.php SQL injection	8.8v3.1	0.4%	2025-06-06
CVE-2025-5760	Simple History WordPress plugin sensitive information exposure	4.9CNA v3.1	0.4%	2025-06-06	Fix
CVE-2025-5759	PHPGurukul Local Services Search Engine Management System edit-person-detail.php SQL injection	9.8v3.1	0.5%	2025-06-06
CVE-2025-5758	SourceCodester Open Source Clinic Management System doctor.php SQL injection	6.9CNA v4.0	0.4%	2025-06-06
CVE-2025-5757	code-projects Traffic Offense Reporting System save-reported.php cross-site scripting	5.4v3.1	0.3%	2025-06-06
CVE-2025-5756	code-projects Real Estate Property Management System EditCity.php SQL injection	9.8v3.1	0.6%	2025-06-06
CVE-2025-5755	SourceCodester Open Source Clinic Management System email_config.php SQL injection	6.9CNA v4.0	0.4%	2025-06-06	Exploit code
CVE-2025-5751	WOLFBOX Level 2 EV Charger Management Card hard-coded credentials authentication bypass	6.8v3.1	0.3%	2025-06-06
CVE-2025-5750	WOLFBOX Level 2 EV Charger Tuya activation parser heap-based buffer overflow	8.8CNA v3.0	0.4%	2025-06-06
CVE-2025-5749	WOLFBOX Level 2 EV Charger BLE Encryption Keys uninitialized variable authentication bypass	8.8v3.1	0.2%	2025-06-06
CVE-2025-5748	WOLFBOX Level 2 EV Charger LAN OTA exposed dangerous method remote code execution	8.0CNA v3.0	0.4%	2025-06-06
CVE-2025-5747	WOLFBOX Level 2 EV Charger MCU Command Parsing Misinterpretation of input remote code execution	8.0CNA v3.0	0.4%	2025-06-06
CVE-2025-5739	TOTOLINK X15 HTTP POST request formSaveConfig buffer overflow	8.7CNA v4.0	6.3%	2025-06-06	Emerging Threats
CVE-2025-5738	TOTOLINK X15 HTTP POST request formStats buffer overflow	8.7CNA v4.0	0.7%	2025-06-06
CVE-2025-5737	TOTOLINK X15 HTTP POST request formDosCfg buffer overflow	8.7CNA v4.0	0.7%	2025-06-06
CVE-2025-5736	TOTOLINK X15 HTTP POST request formNtp buffer overflow	8.7CNA v4.0	0.9%	2025-06-06
CVE-2025-5735	TOTOLINK X15 HTTP POST request formSetLg buffer overflow	8.7CNA v4.0	0.9%	2025-06-06
CVE-2025-5734	TOTOLINK X15 HTTP POST request formWlanRedirect buffer overflow	8.7CNA v4.0	0.9%	2025-06-06
CVE-2025-5733	Modern Events Calendar WordPress plugin information exposure	5.3CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-5732	code-projects Traffic Offense Reporting System cross-site request forgery	8.8v3.1	0.3%	2025-06-06
CVE-2025-5729	code-projects Health Center Patient Record Management System birthing_record.php SQL injection	7.5v3.1	0.4%	2025-06-06
CVE-2025-5728	SourceCodester Open Source Clinic Management System manage_website.php unrestricted upload	8.8v3.1	0.5%	2025-06-06
CVE-2025-5727	SourceCodester Student Result Management System Announcement page announcement cross-site scripting	5.4v3.1	0.3%	2025-06-06
CVE-2025-5726	SourceCodester Student Result Management System Division System Page cross-site scripting	5.4v3.1	0.3%	2025-06-06
CVE-2025-5725	SourceCodester Student Result Management System Grading System Page cross-site scripting	4.8v3.1	0.3%	2025-06-06
CVE-2025-5724	SourceCodester Student Result Management System Subjects page subjects cross-site scripting	4.8v3.1	0.3%	2025-06-06
CVE-2025-5723	SourceCodester Student Result Management System Classes page classes cross-site scripting	4.8v3.1	0.3%	2025-06-06
CVE-2025-5722	SourceCodester Student Result Management System Add Academic Term terms cross-site scripting	4.8v3.1	0.3%	2025-06-06
CVE-2025-5721	SourceCodester Student Result Management System update_profile cross-site scripting	5.4v3.1	0.3%	2025-06-06
CVE-2025-5719	vivo Wallet missing authentication	5.1CNA v4.0	0.2%	2025-06-06
CVE-2025-5716	SourceCodester Open Source Clinic Management System login.php SQL injection	6.9CNA v4.0	0.4%	2025-06-06
CVE-2025-5715	Signal App Biometric Authentication missing critical step in authentication	6.4v3.1	0.3%	2025-06-06
CVE-2025-5714	SoluçõesCoop iSoluçõesWEB Profile Information Update up.upload.php path traversal	5.3CNA v4.0	0.7%	2025-06-06
CVE-2025-5713	SoluçõesCoop iSoluçõesWEB Flow fluxos-dashboard cross-site scripting	5.4v3.1	0.3%	2025-06-06
CVE-2025-5712	SourceCodester Open Source Clinic Management System appointment.php SQL injection	6.9CNA v4.0	0.4%	2025-06-06
CVE-2025-5711	code-projects Real Estate Property Management System InsertCity.php SQL injection	6.9CNA v4.0	0.5%	2025-06-06
CVE-2025-5710	code-projects Real Estate Property Management System InsertState.php SQL injection	6.9CNA v4.0	0.5%	2025-06-06
CVE-2025-5709	code-projects Real Estate Property Management System InsertCategory.php SQL injection	6.9CNA v4.0	0.5%	2025-06-06
CVE-2025-5708	code-projects Real Estate Property Management System NewsReport.php SQL injection	6.9CNA v4.0	0.5%	2025-06-06
CVE-2025-5707	PHPGurukul Human Metapneumovirus Testing Management System registered-user-testing.php SQL injection	9.8v3.1	0.5%	2025-06-06
CVE-2025-5706	PHPGurukul Human Metapneumovirus Testing Management System new-user-testing.php SQL injection	9.8v3.1	0.5%	2025-06-06
CVE-2025-5705	code-projects Real Estate Property Management System Property.php SQL injection	6.9CNA v4.0	0.5%	2025-06-06
CVE-2025-5703	StageShow WordPress plugin stored cross-site scripting	5.4v3.1	0.2%	2025-06-06
CVE-2025-5699	Developer Formatter WordPress plugin stored cross-site scripting	5.5CNA v3.1	0.3%	2025-06-06
CVE-2025-5686	Paged Gallery WordPress plugin authenticated (Contributor+) stored cross-site scripting	6.4CNA v3.1	0.2%	2025-06-06
CVE-2025-5586	WordPress Ajax Load More and Infinite Scroll plugin stored cross-site scripting	6.4CNA v3.1	0.3%	2025-06-06
CVE-2025-5565	Hide It WordPress plugin authenticated (Contributor+) stored cross-site scripting	6.4CNA v3.1	0.2%	2025-06-06
CVE-2025-5563	WP-Addpub WordPress plugin authenticated (Contributor+) SQL injection	6.5CNA v3.1	0.4%	2025-06-06
CVE-2025-5541	Runners Log WordPress plugin authenticated (Contributor+) stored cross-site scripting	6.4CNA v3.1	0.2%	2025-06-06
CVE-2025-5538	BNS Featured Category WordPress plugin authenticated (Contributor+) stored cross-site scripting	6.4CNA v3.1	0.2%	2025-06-06
CVE-2025-5536	Freemind Viewer WordPress plugin authenticated (Contributor+) stored cross-site scripting	6.4CNA v3.1	0.2%	2025-06-06
CVE-2025-5534	ESV Bible Shortcode for WordPress plugin authenticated (Contributor+) stored cross-site scripting	6.4CNA v3.1	0.2%	2025-06-06
CVE-2025-5533	Knowledge Base WordPress plugin authenticated (Contributor+) stored cross-site scripting	6.4CNA v3.1	0.2%	2025-06-06	Fix
CVE-2025-5486	WP Email Debug - missing authorization to unauthenticated privilege escalation via Password Reset	9.8CNA v3.1	0.5%	2025-06-06	Fix
CVE-2025-5481	Sante DICOM Viewer Pro DCM File Parsing out-of-bounds write remote code execution	7.8CNA v3.0	0.2%	2025-06-06
CVE-2025-5480	Action1 uncontrolled search path element local privilege escalation	7.8CNA v3.0	0.3%	2025-06-06	Fix
CVE-2025-5474	2BrightSparks SyncBackFree link following local privilege escalation	7.3CNA v3.0	0.3%	2025-06-06
CVE-2025-5473	GIMP ICO File Parsing integer overflow remote code execution	8.8v3.1	23.5%	2025-06-06	Fix
CVE-2025-5239	Domain For Sale WordPress plugin stored cross-site scripting	6.4CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-5192	Soar Cloud HRD Human Resource Management System missing authentication for critical function	7.5NVD v3.1	0.5%	2025-06-06
CVE-2025-5019	Hive Support WordPress plugin cross-site request forgery via hs_update_ai_chat_settings function	5.4CNA v3.1	0.2%	2025-06-06	Fix
CVE-2025-5018	Hive Support WordPress plugin missing authorization	7.1CNA v3.1	0.3%	2025-06-06	Fix
CVE-2025-4966	WP Online Users Stats WordPress plugin cross-site request forgery to stored cross-site scripting	6.1CNA v3.1	0.2%	2025-06-06
CVE-2025-4964	WP Online Users Stats WordPress plugin SQL injection	4.9CNA v3.1	0.4%	2025-06-06
CVE-2025-3485	Allegra extractFileFromZip directory traversal remote code execution	8.8v3.1	1.8%	2025-06-06	Fix
CVE-2025-3365	Relative path traversal in OnlineSuite	9.8CNA v3.1	0.6%	2025-06-06
CVE-2025-3322	Improper neutralization of Special Elements in OnlineSuite	10.0CNA v4.0	0.6%	2025-06-06
CVE-2025-3321	B. Braun Melsungen OnlineSuite hard-coded credentials	9.4CNA v4.0	0.2%	2025-06-06
CVE-2025-2935	Anti-Spam: Spam Protection WordPress plugin cross-site request forgery	5.4CNA v3.1	0.2%	2025-06-06	Fix
CVE-2025-2766	70mai A510 use of default password authentication bypass	8.8CNA v3.0	0.4%	2025-06-06
CVE-2025-1778	Art WordPress theme missing authorization to authenticated (Subscriber+) theme option delete	4.3CNA v3.1	0.2%	2025-06-06	Fix
CVE-2025-1777	BM Content Builder WordPress plugin missing authorization authenticated stored cross-site scripting	6.4CNA v3.1	0.2%	2025-06-06	Fix
CVE-2025-0620	Samba: Smbd doesn't pick up group membership changes when re-authenticating an expired SMB session	4.9NVD v3.1	0.7%	2025-06-06	Fix
CVE-2025-49466	rjarry aerc relative path traversal	5.8CNA v3.1	0.6%	2025-06-05	Fix
CVE-2025-49012	Himmelblau's Name-Based Group Matching in `pam_allow_groups` leads to potential Security Bypass	5.4CNA v3.1	0.3%	2025-06-05	Fix
CVE-2025-49009	Para Inserts Sensitive Information into Log file for Facebook authentication	6.2CNA v3.1	0.2%	2025-06-05	Fix
CVE-2025-49008	Atheos improper input validation vulnerability enables RCE in Common.php	9.4CNA v4.0	0.6%	2025-06-05	Fix
CVE-2025-48493	yiisoft yii2-redis yii 2 Redis may expose AUTH paramters in logs in case of connection failure	5.1CNA v4.0	0.3%	2025-06-05	Fix
CVE-2025-48432	Django improper output neutralization for logs	5.3v3.1	0.7%	2025-06-05	Fix
CVE-2025-48133	Uncanny Automator WordPress plugin broken access control	9.8v3.1	0.3%	2025-06-05	Fix
CVE-2025-47966	Microsoft Power Automate elevation of privilege	9.8CNA v3.1	1.2%	2025-06-05
CVE-2025-47827	IGEL OS use of an expired key	4.6CISA ADP v3.1	4.9%	2025-06-05	KEVFix
CVE-2025-46258	Element Pack Pro WordPress plugin broken access control	5.4CNA v3.1	0.2%	2025-06-05	Fix
CVE-2025-46257	Element Pack Pro WordPress plugin cross-site request forgery (CSRF)	4.3CNA v3.1	0.1%	2025-06-05	Fix
CVE-2025-43026	HP Support Assistant potential escalation of privilege	7.1CNA v4.0	0.1%	2025-06-05	Fix
CVE-2025-30084	Extension rsjoomla.com reflected XSS vulnerability RSMail! component for Joomla	6.1CISA ADP v3.1	0.2%	2025-06-05
CVE-2025-27754	Extension rsjoomla.com A stored XSS vulnerability RSBlog! component for Joomla	6.5CISA ADP v3.1	0.2%	2025-06-05
CVE-2025-27753	Extension rsjoomla.com A SQLi vulnerability RSMediaGallery component for Joomla	6.5CISA ADP v3.1	0.2%	2025-06-05
CVE-2025-27445	Extension rsjoomla.com A path traversal vulnerability RSFirewall component for Joomla	5.4CISA ADP v3.1	0.4%	2025-06-05
CVE-2025-5745	The GNU C Library glibc improper initialization	5.6CISA ADP v3.1	0.3%	2025-06-05	Fix
CVE-2025-5704	code-projects Real Estate Property Management System User.php SQL injection	6.9CNA v4.0	0.5%	2025-06-05
CVE-2025-5702	The GNU C Library glibc improper initialization	5.6CISA ADP v3.1	0.3%	2025-06-05	Fix
CVE-2025-5701	HyperComments WordPress plugin unauthenticated (Subscriber+) arbitrary options update	8.8CNA v3.1	2.1%	2025-06-05	NucleiExploit code
CVE-2025-5698	Brilliance Golden Link Secondary System logSelect.htm SQL injection	9.8v3.1	0.4%	2025-06-05
CVE-2025-5697	Brilliance Golden Link Secondary System tcCustDeferPosiQuery.htm SQL injection	9.8v3.1	0.4%	2025-06-05
CVE-2025-5696	Brilliance Golden Link Secondary System rentChangeCheckInfoPage.htm SQL injection	9.8v3.1	0.4%	2025-06-05
CVE-2025-5695	Teledyne Flir AX8 Backend subscriptions.php subscribe_to_alarm command injection	5.1CNA v4.0	7.3%	2025-06-05	Emerging ThreatsFix
CVE-2025-5694	PHPGurukul Human Metapneumovirus Testing Management System search-report-result.php SQL injection	8.8v3.1	0.4%	2025-06-05
CVE-2025-5693	PHPGurukul Human Metapneumovirus Testing Management System bwdates-report-result.php SQL injection	8.8v3.1	0.4%	2025-06-05
CVE-2025-5685	Tenda CH22 Natlimit formNatlimit stack-based overflow	9.8v3.1	1.0%	2025-06-05
CVE-2025-5683	Qt resource exhaustion	5.5v3.1	0.2%	2025-06-05	Fix
CVE-2025-5680	Shenzhen Dashi Tongzhou Information Technology AgileBPM deserialization of untrusted data	8.8v3.1	0.5%	2025-06-05
CVE-2025-5679	Shenzhen Dashi Tongzhou Information Technology AgileBPM deserialization of untrusted data	8.8v3.1	0.5%	2025-06-05
CVE-2025-5677	Campcodes Online Recruitment Management System ajax.php SQL injection	9.8v3.1	0.5%	2025-06-05
CVE-2025-5676	Campcodes Online Recruitment Management System ajax.php SQL injection	9.8v3.1	0.5%	2025-06-05
CVE-2025-5675	Campcodes Online Teacher Record Management System bwdates-reports-details.php SQL injection	9.8v3.1	0.5%	2025-06-05
CVE-2025-5674	code-projects Patient Record Management System urinalysis_form.php SQL injection	8.8v3.1	0.5%	2025-06-05
CVE-2025-5672	TOTOLINK N302R Plus HTTP POST request formFilter buffer overflow	8.7CNA v4.0	0.7%	2025-06-05
CVE-2025-5671	TOTOLINK N302R Plus HTTP POST request formPortFw buffer overflow	8.7CNA v4.0	0.7%	2025-06-05
CVE-2025-5670	PHPGurukul Medical Card Generation System manage-card.php SQL injection	8.8v3.1	0.5%	2025-06-05
CVE-2025-5669	PHPGurukul Medical Card Generation System unreadenq.php SQL injection	8.8v3.1	0.5%	2025-06-05
CVE-2025-5668	PHPGurukul Medical Card Generation System readenq.php SQL injection	8.8v3.1	0.5%	2025-06-05
CVE-2025-5667	FreeFloat FTP Server REIN command buffer overflow	9.8v3.1	0.7%	2025-06-05
CVE-2025-5666	FreeFloat FTP Server XMKD command buffer overflow	9.8v3.1	0.7%	2025-06-05
CVE-2025-5665	FreeFloat FTP Server XCWD command buffer overflow	9.8v3.1	0.7%	2025-06-05
CVE-2025-5664	FreeFloat FTP Server RESTART command buffer overflow	9.8v3.1	0.7%	2025-06-05
CVE-2025-5663	PHPGurukul Auto Taxi Stand Management System search-autoortaxi.php SQL injection	9.8v3.1	0.5%	2025-06-05
CVE-2025-5661	code-projects Traffic Offense Reporting System setting save-settings.php cross-site scripting	5.4v3.1	0.3%	2025-06-05
CVE-2025-5660	PHPGurukul Complaint Management System register-complaint.php SQL injection	8.8v3.1	0.5%	2025-06-05
CVE-2025-5659	PHPGurukul Complaint Management System profile.php SQL injection	8.8v3.1	0.5%	2025-06-05
CVE-2025-5658	PHPGurukul Complaint Management System updatecomplaint.php SQL injection	8.8v3.1	0.4%	2025-06-05
CVE-2025-5657	PHPGurukul Complaint Management System manage-users.php SQL injection	8.8v3.1	0.4%	2025-06-05
CVE-2025-5656	PHPGurukul Complaint Management System edit-category.php SQL injection	8.8v3.1	0.4%	2025-06-05
CVE-2025-5655	PHPGurukul Complaint Management System edit-subcategory.php SQL injection	8.8v3.1	0.4%	2025-06-05
CVE-2025-5654	PHPGurukul Complaint Management System edit-state.php SQL injection	8.8v3.1	0.4%	2025-06-05
CVE-2025-5653	PHPGurukul Complaint Management System between-date-userreport.php SQL injection	8.8v3.1	0.4%	2025-06-05
CVE-2025-5652	PHPGurukul Complaint Management System between-date-complaintreport.php SQL injection	8.8v3.1	0.5%	2025-06-05
CVE-2025-5651	code-projects Traffic Offense Reporting System saveuser.php cross-site scripting	5.4v3.1	0.3%	2025-06-05
CVE-2025-5650	1000projects Online Notice Board register.php SQL injection	9.8v3.1	0.5%	2025-06-05
CVE-2025-5649	SourceCodester Student Result Management System Register interface new_user access control	6.5v3.1	0.6%	2025-06-05
CVE-2025-5648	Radare2 radiff2 pal.c r_cons_pal_init memory corruption	2.0CNA v4.0	0.2%	2025-06-05	Fix
CVE-2025-5647	Radare2 radiff2 cons.c r_cons_context_break_pop memory corruption	2.0CNA v4.0	0.2%	2025-06-05	Fix
CVE-2025-5646	Radare2 radiff2 pal.c r_cons_rainbow_free memory corruption	2.0CNA v4.0	0.2%	2025-06-05	Fix
CVE-2025-5645	Radare2 radiff2 pal.c r_cons_pal_init memory corruption	2.0CNA v4.0	0.2%	2025-06-05	Fix
CVE-2025-5644	Radare2 radiff2 cons.c r_cons_flush use-after-free	2.0CNA v4.0	0.2%	2025-06-05	Fix
CVE-2025-5643	Radare2 radiff2 cons.c cons_stack_load memory corruption	2.0CNA v4.0	0.2%	2025-06-05	Fix
CVE-2025-5642	Radare2 radiff2 pal.c r_cons_pal_init memory corruption	2.0CNA v4.0	0.2%	2025-06-05	Fix
CVE-2025-5641	Radare2 radiff2 cons.c r_cons_is_breaked memory corruption	2.0CNA v4.0	0.2%	2025-06-05	Fix
CVE-2025-5640	PX4-Autopilot TRAJECTORY_REPRESENTATION_WAYPOINTS message mavlink_receiver.cpp stack-based overflow	4.8CNA v4.0	1.0%	2025-06-05	Exploit code
CVE-2025-5639	PHPGurukul Notice Board System forgot-password.php SQL injection	9.8v3.1	0.6%	2025-06-05
CVE-2025-5638	PHPGurukul Notice Board System admin-profile.php SQL injection	8.8v3.1	0.5%	2025-06-05
CVE-2025-5637	PCMan FTP Server SYSTEM command buffer overflow	9.8v3.1	0.7%	2025-06-05
CVE-2025-5636	PCMan FTP Server SET command buffer overflow	9.8v3.1	0.7%	2025-06-05
CVE-2025-5635	PCMan FTP Server PLS command buffer overflow	9.8v3.1	0.7%	2025-06-05
CVE-2025-5634	PCMan FTP Server NOOP command buffer overflow	9.8v3.1	0.7%	2025-06-05
CVE-2025-5633	Code-projects/anirbandutta9 Content Management System/News-Buzz users.php SQL injection	8.8v3.1	0.5%	2025-06-05
CVE-2025-5632	Code-projects/anirbandutta9 Content Management System/News-Buzz users.php SQL injection	8.8v3.1	0.5%	2025-06-05
CVE-2025-5631	Code-projects/anirbandutta9 Content Management System/News-Buzz publicposts.php SQL injection	9.8v3.1	0.6%	2025-06-05
CVE-2025-5630	D-Link DIR-816 form2lansetup.cgi stack-based overflow	9.3CNA v4.0	2.6%	2025-06-05
CVE-2025-5629	Tenda AC10 HTTP SetPptpServerCfg formSetPPTPServer buffer overflow	9.8v3.1	0.8%	2025-06-05
CVE-2025-5628	SourceCodester Food Menu Manager Add Menu index.php cross-site scripting	5.4v3.1	0.3%	2025-06-05
CVE-2025-5627	code-projects Patient Record Management System sputum_form.php SQL injection	7.5v3.1	0.4%	2025-06-05
CVE-2025-5626	Campcodes Online Teacher Record Management System edit-subjects-detail.php SQL injection	9.8v3.1	0.6%	2025-06-05
CVE-2025-5625	Campcodes Online Teacher Record Management System search-teacher.php SQL injection	9.8v3.1	0.6%	2025-06-05
CVE-2025-5624	D-Link DIR-816 QoSPortSetup stack-based overflow	9.3CNA v4.0	2.5%	2025-06-05
CVE-2025-5623	D-Link DIR-816 qosClassifier stack-based overflow	9.3CNA v4.0	18.5%	2025-06-05	Emerging Threats
CVE-2025-5622	D-Link DIR-816 wirelessApcli_5g stack-based overflow	9.3CNA v4.0	2.5%	2025-06-05
CVE-2025-5621	D-Link DIR-816 qosClassifier os command injection	9.8v3.1	7.5%	2025-06-05
CVE-2025-5620	D-Link DIR-816 setipsec_config os command injection	9.8v3.1	7.7%	2025-06-05
CVE-2025-5382	Devolutions Server users MFA feature improper access control	6.8CISA ADP v3.1	0.4%	2025-06-05	Fix
CVE-2025-5341	Forminator WordPress plugin stored DOM-based cross-site scripting	6.4CNA v3.1	0.3%	2025-06-05	Fix
CVE-2025-4568	SQL injection in 2ClickPortal	9.3CNA v4.0	0.3%	2025-06-05	Fix
CVE-2025-3768	Devolutions Server Tor network blocking feature improper access control	5.0CISA ADP v3.1	0.3%	2025-06-05	Fix
CVE-2025-3055	WP User Frontend Pro WordPress plugin authenticated (Subscriber+) arbitrary file deletion	8.1CNA v3.1	0.8%	2025-06-05	Fix
CVE-2025-3054	WP User Frontend Pro WordPress plugin authenticated (Subscriber+) arbitrary file upload	8.8CNA v3.1	0.9%	2025-06-05	Exploit codeFix
CVE-2025-1793	SQL injection in run-llama/llama_index	9.8CNA v3.0	0.7%	2025-06-05	Fix
CVE-2025-0691	Devolutions Server permissions component improper access control	5.0CISA ADP v3.1	0.3%	2025-06-05	Fix
CVE-2025-49223	billboard.js allows prototype pollution via the function generate	9.8CISA ADP v3.1	0.8%	2025-06-04	Exploit codeFix
CVE-2025-49007	ReDoS vulnerability in Rack::Multipart handle_mime_head	6.6CNA v4.0	0.6%	2025-06-04	Fix
CVE-2025-48962	Acronis Cyber Protect 16 server-side request forgery	4.3CNA v3.0	0.2%	2025-06-04	Fix
CVE-2025-48961	Acronis Cyber Protect 16 incorrect permission assignment	7.3CNA v3.0	0.1%	2025-06-04	Fix
CVE-2025-48960	Acronis Cyber Protect 16 inadequate encryption strength	5.9CNA v3.0	0.1%	2025-06-04	Fix
CVE-2025-48959	Acronis Cyber Protect Cloud Agent incorrect default permissions	6.7CNA v3.0	0.1%	2025-06-04	Fix
CVE-2025-48947	NextJS-Auth0 SDK vulnerable to CDN Caching of Session Cookies	7.7CNA v4.0	0.4%	2025-06-04	Fix
CVE-2025-48935	Deno has --allow-read / --allow-write permission bypass in `node:sqlite`	5.5CNA v4.0	0.5%	2025-06-04	Fix
CVE-2025-48934	Deno deny-env permission flag information disclosure	5.5CNA v4.0	0.4%	2025-06-04	Fix
CVE-2025-48888	Deno run with --allow-read and --deny-read flags results in allowed	5.5CNA v4.0	0.4%	2025-06-04	Fix
CVE-2025-48710	kro.run kro confused deputy	4.1CNA v3.1	0.4%	2025-06-04	Fix
CVE-2025-47728	File Parsing memory corruption in CNCSoft-G2	7.3CNA v4.0	0.4%	2025-06-04	Fix
CVE-2025-47727	Out-of-bounds write in CNCSoft	7.3CNA v4.0	0.3%	2025-06-04
CVE-2025-47726	Out-of-bounds write in CNCSoft	7.3CNA v4.0	0.3%	2025-06-04
CVE-2025-47725	Out-of-bounds write in CNCSoft	7.3CNA v4.0	0.3%	2025-06-04
CVE-2025-47724	Out-of-bounds write in CNCSoft	7.3CNA v4.0	0.2%	2025-06-04
CVE-2025-46341	FreshRSS privilege escalation via SSRF when using HTTP auth	7.1CNA v3.1	0.5%	2025-06-04	Fix
CVE-2025-46339	FreshRSS vulnerable to favicon cache poisoning via proxy	4.3CNA v3.1	0.2%	2025-06-04	Fix
CVE-2025-46204	changeweb Unifiedtransform incorrect privilege assignment	6.5CISA ADP v3.1	0.4%	2025-06-04	Exploit code
CVE-2025-46203	changeweb Unifiedtransform incorrect privilege assignment	6.5CISA ADP v3.1	0.4%	2025-06-04	Exploit code
CVE-2025-46011	Nadh listmonk SQL injection	6.5CISA ADP v3.1	0.3%	2025-06-04	Fix
CVE-2025-32015	FreshRSS iframe srcdoc sanitization cross-site scripting	6.7CNA v3.1	0.4%	2025-06-04	Fix
CVE-2025-31482	FreshRSS vulnerable to DoS by malicious feed entry loading logout URL	4.3CNA v3.1	0.2%	2025-06-04	Fix
CVE-2025-31136	FreshRSS favicon handling cross-site scripting	6.7CNA v3.1	0.4%	2025-06-04	Fix
CVE-2025-31134	FreshRSS vulnerable to directory enumeration via ext.php	5.5CNA v4.0	0.5%	2025-06-04	Fix
CVE-2025-30415	Acronis Cyber Protect Cloud Agent improper syntax validation	7.5CNA v3.0	0.4%	2025-06-04	Fix
CVE-2025-29094	Motivian Content Management System cross-site scripting	6.1CISA ADP v3.1	0.4%	2025-06-04	Exploit code
CVE-2025-29093	Motivian Content Management System file upload	8.2CISA ADP v3.1	0.6%	2025-06-04	Exploit code
CVE-2025-27811	Razer Synapse 4 local privilege escalation	7.8CISA ADP v3.1	0.1%	2025-06-04
CVE-2025-27444	Extension rsjoomla.com A reflected XSS vulnerability RSform!Pro component for Joomla	4.8CISA ADP v3.1	0.3%	2025-06-04
CVE-2025-23106	Samsung Exynos 2200 use-after-free	6.5CISA ADP v3.1	0.2%	2025-06-04	Fix
CVE-2025-23101	Samsung Exynos 1380 use-after-free	6.5CISA ADP v3.1	0.2%	2025-06-04	Fix
CVE-2025-23096	Samsung Exynos 1280 double free	6.5CISA ADP v3.1	0.2%	2025-06-04	Fix
CVE-2025-23095	Samsung Exynos 1280 double free	6.5CISA ADP v3.1	0.2%	2025-06-04	Fix
CVE-2025-22245	VMware NSX VMware NSX contains a stored cross-site scripting	5.9CNA v3.1	0.3%	2025-06-04	Fix
CVE-2025-22244	VMware NSX VMware NSX contains a stored cross-site scripting	6.9CNA v3.1	0.3%	2025-06-04	Fix
CVE-2025-22243	VMware NSX cross-site scripting	7.5CNA v3.1	0.3%	2025-06-04	Fix
CVE-2025-20996	Samsung Mobile Smart Switch improper authorization	5.0CNA v3.1	0.1%	2025-06-04	Fix
CVE-2025-20995	Samsung Mobile Samsung Internet ClientProvider improper permissions	4.9CNA v3.1	0.1%	2025-06-04	Fix
CVE-2025-20994	Samsung Mobile Samsung Internet SyncClientProvider improper permissions	4.5CNA v3.1	0.1%	2025-06-04	Fix
CVE-2025-20993	Samsung Mobile Devices libsecimaging.camera. out-of-bounds write	4.0CNA v3.1	0.1%	2025-06-04	Fix
CVE-2025-20992	Samsung Mobile Devices libsecimaging.camera. out-of-bounds read	4.0CNA v3.1	0.2%	2025-06-04	Fix
CVE-2025-20991	Samsung Mobile Devices Bluetooth improper export of Android application components	4.0CNA v3.1	0.1%	2025-06-04	Fix
CVE-2025-20989	Samsung Mobile Devices fingerprint trustlet information disclosure	5.2CNA v3.1	0.1%	2025-06-04	Fix
CVE-2025-20988	Samsung Mobile Devices fingerprint trustlet out-of-bounds read	5.5CNA v3.1	0.2%	2025-06-04	Fix
CVE-2025-20987	Samsung Mobile Devices fingerprint trustlet improper access control	5.2CNA v3.1	0.1%	2025-06-04	Fix
CVE-2025-20986	Samsung Galaxy Watch ScreenCapture improper access control	5.5CNA v3.1	0.1%	2025-06-04	Fix
CVE-2025-20985	Samsung Mobile Devices ThemeManager improper privilege management	5.5CNA v3.1	0.1%	2025-06-04	Fix
CVE-2025-20984	Samsung Mobile Devices incorrect default permissions	6.8CNA v3.1	0.1%	2025-06-04	Fix
CVE-2025-20981	Samsung Mobile Devices AudioService improper access control	6.2CNA v3.1	0.1%	2025-06-04	Fix
CVE-2025-20286	Cisco Identity Services Engine Software ISE on AWS Static Credential	9.9CNA v3.1	1.1%	2025-06-04	Fix
CVE-2025-20279	Cisco Unifed Contact Center Express stored cross-site scripting	4.8CNA v3.1	0.3%	2025-06-04	Fix
CVE-2025-20278	Cisco Unified Communications Products command injection	6.0CNA v3.1	0.2%	2025-06-04	Fix
CVE-2025-20277	Cisco Unified Contact Center Express path traversal	3.4CNA v3.1	0.2%	2025-06-04	Fix
CVE-2025-20276	Cisco Unified Contact Center Express remote code execution	3.8CNA v3.1	0.4%	2025-06-04	Fix
CVE-2025-20275	Cisco Unified Contact Center Express Editor remote code execution	5.3CNA v3.1	0.2%	2025-06-04	Fix
CVE-2025-20273	Cisco Unified Intelligent Contact Management Enterprise cross-site scripting	6.1CNA v3.1	0.3%	2025-06-04
CVE-2025-20261	Cisco Integrated Management controller privilege escalation	8.8CNA v3.1	0.5%	2025-06-04	Fix
CVE-2025-20259	Cisco ThousandEyes Endpoint Agent for Windows arbitrary file write	5.3CNA v3.1	0.2%	2025-06-04	Fix
CVE-2025-20163	Cisco Nexus Dashboard Fabric Controller SSH Host Key vulnerability	8.7CNA v3.1	0.4%	2025-06-04	Fix
CVE-2025-20130	Cisco Identity Services Engine Access Control Bypass vulnerability	4.9CNA v3.1	0.5%	2025-06-04	Fix
CVE-2025-20129	Cisco Customer Collaboration Platform web-based chat interface information disclosure	4.3CNA v3.1	0.3%	2025-06-04	Fix
CVE-2025-5690	Cursor allows PostgreSQL Anonymizer masked user to gain unauthorized access to authentic data	6.5CNA v3.1	0.3%	2025-06-04	Fix
CVE-2025-5688	Amazon FreeRTOS out-of-bounds write in FreeRTOS-Plus-TCP	7.5CNA v4.0	0.4%	2025-06-04	Fix
CVE-2025-5619	Tenda CH22 addUserName formaddUserName stack-based overflow	9.8v3.1	1.3%	2025-06-04
CVE-2025-5618	PHPGurukul Online Fire Reporting System edit-team.php SQL injection	9.8v3.1	0.5%	2025-06-04
CVE-2025-5617	PHPGurukul Online Fire Reporting System manage-teams.php SQL injection	9.8v3.1	0.5%	2025-06-04
CVE-2025-5616	PHPGurukul Online Fire Reporting System profile.php SQL injection	8.8v3.1	0.5%	2025-06-04
CVE-2025-5615	PHPGurukul Online Fire Reporting System details.php SQL injection	8.8v3.1	0.5%	2025-06-04
CVE-2025-5614	PHPGurukul Online Fire Reporting System search-report-result.php SQL injection	8.8v3.1	0.5%	2025-06-04
CVE-2025-5613	PHPGurukul Online Fire Reporting System request-details.php SQL injection	9.8v3.1	0.5%	2025-06-04
CVE-2025-5612	PHPGurukul Online Fire Reporting System reporting.php SQL injection	9.8v3.1	0.5%	2025-06-04
CVE-2025-5611	CodeAstro Real Estate Management System submitpropertyupdate.php SQL injection	8.8v3.1	0.5%	2025-06-04
CVE-2025-5610	CodeAstro Real Estate Management System submitpropertydelete.php SQL injection	8.8v3.1	0.5%	2025-06-04
CVE-2025-5609	Tenda AC18 AdvSetLanip fromadvsetlanip buffer overflow	8.7CNA v4.0	1.0%	2025-06-04
CVE-2025-5608	Tenda AC18 SetSysAutoRebbotCfg formsetreboottimer buffer overflow	8.7CNA v4.0	1.0%	2025-06-04
CVE-2025-5607	Tenda AC18 setPptpUserList formSetPPTPUserList buffer overflow	8.7CNA v4.0	1.0%	2025-06-04
CVE-2025-5606	Tenda AC18 SetIPTVCfg formSetIptv command injection	9.8v3.1	3.4%	2025-06-04
CVE-2025-5604	Campcodes Hospital Management System user-login.php SQL injection	9.8v3.1	0.5%	2025-06-04
CVE-2025-5603	Campcodes Hospital Management System registration.php SQL injection	9.8v3.1	0.5%	2025-06-04
CVE-2025-5602	Campcodes Hospital Management System registration.php SQL injection	9.8v3.1	0.5%	2025-06-04
CVE-2025-5601	Buffer copy without checking size of input (Classic buffer overflow) in Wireshark	7.8CNA v3.1	0.3%	2025-06-04	Fix
CVE-2025-5600	TOTOLINK EX1200T cstecgi.cgi setLanguageCfg stack-based overflow	9.3CNA v4.0	1.2%	2025-06-04
CVE-2025-5599	PHPGurukul Student Result Management System editmyexp.php SQL injection	9.8v3.1	0.5%	2025-06-04
CVE-2025-5598	WF Steuerungstechnik GmbH airleader MASTER path traversal	9.2CNA v4.0	0.5%	2025-06-04
CVE-2025-5597	WF Steuerungstechnik GmbH airleader MASTER authentication bypass	10.0CNA v4.0	0.4%	2025-06-04
CVE-2025-5596	FreeFloat FTP Server REGET command buffer overflow	9.8v3.1	0.7%	2025-06-04
CVE-2025-5595	FreeFloat FTP Server PROGRESS command buffer overflow	9.8v3.1	0.7%	2025-06-04
CVE-2025-5594	FreeFloat FTP Server SET command buffer overflow	9.8v3.1	0.7%	2025-06-04
CVE-2025-5593	FreeFloat FTP Server host command buffer overflow	9.8v3.1	0.7%	2025-06-04
CVE-2025-5592	FreeFloat FTP Server PASSIVE command buffer overflow	9.8v3.1	0.7%	2025-06-04
CVE-2025-5584	PHPGurukul Hospital Management System POST parameter edit-patient.php cross-site scripting	5.4v3.1	0.3%	2025-06-04
CVE-2025-5583	CodeAstro Real Estate Management System register.php SQL injection	9.8v3.1	0.6%	2025-06-04
CVE-2025-5582	CodeAstro Real Estate Management System profile.php SQL injection	9.8v3.1	0.5%	2025-06-04
CVE-2025-5581	CodeAstro Real Estate Management System index.php SQL injection	9.8v3.1	0.6%	2025-06-04
CVE-2025-5580	CodeAstro Real Estate Management System login.php SQL injection	9.8v3.1	0.6%	2025-06-04
CVE-2025-5579	PHPGurukul Dairy Farm Shop Management System search-product.php SQL injection	9.8v3.1	0.8%	2025-06-04
CVE-2025-5578	PHPGurukul Dairy Farm Shop Management System sales-report-details.php SQL injection	9.8v3.1	0.8%	2025-06-04
CVE-2025-5577	PHPGurukul Dairy Farm Shop Management System profile.php SQL injection	9.8v3.1	0.6%	2025-06-04
CVE-2025-5576	PHPGurukul Dairy Farm Shop Management System bwdate-report-details.php SQL injection	9.8v3.1	0.6%	2025-06-04
CVE-2025-5575	PHPGurukul Dairy Farm Shop Management System add-product.php SQL injection	9.8v3.1	0.7%	2025-06-04
CVE-2025-5574	PHPGurukul Dairy Farm Shop Management System add-company.php SQL injection	9.8v3.1	0.6%	2025-06-04
CVE-2025-5573	D-Link DCS-932L setSystemWizard setSystemControl os command injection	9.8v3.1	13.8%	2025-06-04
CVE-2025-5572	D-Link DCS-932L setSystemEmail stack-based overflow	7.5NVD v3.1	5.8%	2025-06-04
CVE-2025-5571	D-Link DCS-932L setSystemAdmin os command injection	8.8v3.1	13.6%	2025-06-04
CVE-2025-5569	IdeaCMS getList.html Goods SQL injection	8.8v3.1	1.5%	2025-06-04	Nuclei
CVE-2025-5566	PHPGurukul Notice Board System search-notice.php SQL injection	8.8v3.1	0.4%	2025-06-04
CVE-2025-5562	PHPGurukul Curfew e-Pass Management System edit-category-detail.php SQL injection	9.8v3.1	0.5%	2025-06-04
CVE-2025-5561	PHPGurukul Curfew e-Pass Management System view-pass-detail.php SQL injection	9.8v3.1	0.5%	2025-06-04
CVE-2025-5560	PHPGurukul Curfew e-Pass Management System index.php SQL injection	9.8v3.1	0.5%	2025-06-04
CVE-2025-5558	PHPGurukul Teacher Subject Allocation Management System changeimage.php SQL injection	8.8v3.1	0.4%	2025-06-04
CVE-2025-5557	PHPGurukul Teacher Subject Allocation Management System edit-course.php SQL injection	8.8v3.1	0.4%	2025-06-04
CVE-2025-5556	PHPGurukul Teacher Subject Allocation Management System edit-teacher-info.php SQL injection	8.8v3.1	0.4%	2025-06-04
CVE-2025-5554	PHPGurukul Rail Pass Management System pass-bwdates-reports-details.php SQL injection	8.8v3.1	0.4%	2025-06-04
CVE-2025-5553	PHPGurukul Rail Pass Management System download-pass.php SQL injection	9.8v3.1	0.5%	2025-06-04	Exploit code
CVE-2025-5552	ChestnutCMS API endpoint exec deserialization	8.8v3.1	0.5%	2025-06-04
CVE-2025-5551	FreeFloat FTP Server SYSTEM command buffer overflow	9.8v3.1	0.7%	2025-06-04
CVE-2025-5550	FreeFloat FTP Server PBSZ command buffer overflow	9.8v3.1	0.7%	2025-06-04
CVE-2025-5549	FreeFloat FTP Server PASV command buffer overflow	9.8v3.1	0.7%	2025-06-04
CVE-2025-5548	FreeFloat FTP Server NOOP command buffer overflow	9.8NVD v3.1	15.0%	2025-06-04	Exploit code
CVE-2025-5547	FreeFloat FTP Server CDUP command buffer overflow	9.8v3.1	0.7%	2025-06-04
CVE-2025-5546	PHPGurukul Daily Expense Tracker System expense-reports-detailed.php SQL injection	8.8v3.1	0.4%	2025-06-04
CVE-2025-5545	aaluoxiang oa_system ProcedureController.java image path traversal	7.5v3.1	0.7%	2025-06-04
CVE-2025-5539	Simplify Contact Management: WP Easy Contact WordPress plugin stored cross-site scripting	6.4CNA v3.1	0.2%	2025-06-04	Fix
CVE-2025-5532	Campus Directory WordPress plugin stored cross-site scripting	6.4CNA v3.1	0.2%	2025-06-04	Fix
CVE-2025-5531	Staff Directory Employee Directory for WordPress plugin stored cross-site scripting	6.4CNA v3.1	0.2%	2025-06-04	Fix
CVE-2025-5482	Sunshine Photo Cart WordPress plugin authenticated (Subscriber+) privilege escalation	8.8CNA v3.1	0.6%	2025-06-04	Fix
CVE-2025-4580	File Provider WordPress plugin Item deletion via CSRF	4.3CISA ADP v3.1	0.2%	2025-06-04
CVE-2025-4578	File Provider WordPress plugin unauthenticated SQLi	9.8CISA ADP v3.1	0.6%	2025-06-04	Exploit code
CVE-2025-2336	Google AngularJS incomplete filtering of special elements	4.8CNA v3.1	0.3%	2025-06-04	Fix
CVE-2025-1701	Local privilege escalation in MIM Admin Service	8.9CNA v4.0	0.7%	2025-06-04	Fix
CVE-2025-49164	Arris VIP1113 hard-coded cryptographic key	4.3CNA v3.1	0.1%	2025-06-03
CVE-2025-49163	Arris VIP1113 unprotected alternate path	6.7CNA v3.1	0.2%	2025-06-03
CVE-2025-49162	Arris VIP1113 unprotected alternate path	6.4CNA v3.1	0.2%	2025-06-03
CVE-2025-49002	Dataease H2 Database remote code execution (RCE) Bypass	8.2CNA v4.0	50.0%	2025-06-03	NucleiExploit codeFix
CVE-2025-49001	Dataease authentication bypass	7.7CNA v4.0	21.1%	2025-06-03	NucleiKCVFix
CVE-2025-49000	InvenTree has uncontrolled memory allocation via built-in label-sheet plugin	3.5CNA v3.1	0.3%	2025-06-03	Fix
CVE-2025-48999	Dataease Redshift Data Source JDBC Connection parameters not Verified leads to RCE	6.8CNA v4.0	10.0%	2025-06-03	Fix
CVE-2025-48998	Dataease MYSQL JDBC File Reading vulnerability	7.3CNA v4.0	0.5%	2025-06-03	Fix
CVE-2025-48997	Multer vulnerable to denial of service via unhandled exception	8.7CNA v4.0	0.4%	2025-06-03	Fix
CVE-2025-48953	Umbraco vulnerable to By-Pass of Configured Allowed extensions for File Uploads	5.5CNA v3.1	0.2%	2025-06-03	Fix
CVE-2025-48951	Auth0-PHP SDK deserialization of untrusted data	9.3CNA v4.0	0.7%	2025-06-03	Fix
CVE-2025-48950	MaxKB Python sandbox bypass in function library	5.8CNA v4.0	0.4%	2025-06-03	Fix
CVE-2025-46548	Pekko Management may not properly apply authenticator when Basic Authentication is enabled	6.5CISA ADP v3.1	0.7%	2025-06-03	Fix