CVE List - 2025 / June
Showing 801 - 840 of 840 CVEs for June 2025 (Page 9 of 9)
| CVE ID | Date | Title |
|---|---|---|
| CVE-2025-5784 | 2025-06-06 | PHPGurukul Employee Record Management System myexp.php sql injection |
| CVE-2025-5785 | 2025-06-06 | TOTOLINK X15 HTTP POST Request formWirelessTbl buffer overflow |
| CVE-2025-5786 | 2025-06-06 | TOTOLINK X15 HTTP POST Request formDMZ buffer overflow |
| CVE-2025-5787 | 2025-06-06 | TOTOLINK X15 HTTP POST Request formWsc buffer overflow |
| CVE-2025-5788 | 2025-06-06 | TOTOLINK X15 HTTP POST Request formReflashClientTbl buffer overflow |
| CVE-2025-5789 | 2025-06-06 | TOTOLINK X15 HTTP POST Request formPortFw buffer overflow |
| CVE-2025-5790 | 2025-06-06 | TOTOLINK X15 HTTP POST Request formIpQoS buffer overflow |
| CVE-2025-47950 | 2025-06-06 | CoreDNS Vulnerable to DoQ Memory Exhaustion via Stream Amplification |
| CVE-2025-49011 | 2025-06-06 | SpiceDB checks involving relations with caveats can result in no permission when permission is expected |
| CVE-2025-5792 | 2025-06-06 | TOTOLINK EX1200T HTTP POST Request formWlanRedirect buffer overflow |
| CVE-2025-5793 | 2025-06-06 | TOTOLINK EX1200T HTTP POST Request formPortFw buffer overflow |
| CVE-2025-5794 | 2025-06-06 | Tenda AC5 setPptpUserList formSetPPTPUserList buffer overflow |
| CVE-2025-5795 | 2025-06-06 | Tenda AC5 AdvSetLanip fromadvsetlanip buffer overflow |
| CVE-2025-5473 | 2025-06-06 | GIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerability |
| CVE-2025-5474 | 2025-06-06 | 2BrightSparks SyncBackFree Link Following Local Privilege Escalation Vulnerability |
| CVE-2025-5480 | 2025-06-06 | Action1 Uncontrolled Search Path Element Local Privilege Escalation Vulnerability |
| CVE-2025-5481 | 2025-06-06 | Sante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
| CVE-2025-3485 | 2025-06-06 | Allegra extractFileFromZip Directory Traversal Remote Code Execution Vulnerability |
| CVE-2025-2766 | 2025-06-06 | 70mai A510 Use of Default Password Authentication Bypass Vulnerability |
| CVE-2025-5796 | 2025-06-06 | code-projects Laundry System edit_type.php cross site scripting |
| CVE-2025-5797 | 2025-06-06 | code-projects Laundry System insert_type.php cross site scripting |
| CVE-2025-5798 | 2025-06-06 | Tenda AC8 SetSysTimeCfg fromSetSysTime stack-based overflow |
| CVE-2025-5799 | 2025-06-06 | Tenda AC8 WifiExtraSet fromSetWirelessRepeat stack-based overflow |
| CVE-2025-49127 | 2025-06-06 | Kafbat UI vulnerable to Remote Code Execution by JMX in Metrices Configuration |
| CVE-2025-49128 | 2025-06-06 | Jackson-core Vulnerable to Memory Disclosure via Source Snippet in JsonLocation |
| CVE-2024-55585 | 2025-06-07 | In the moPS App through 1.8.618, all users can access... |
| CVE-2025-49619 | 2025-06-07 | Skyvern through 0.1.85 has a Jinja runtime leak in sdk/workflow/models/block.py. |
| CVE-2025-5814 | 2025-06-07 | Profiler – What Slowing Down Your WP <= 1.0.0 - Missing Authentication to Unauthenticated Arbitrary Plugin Reactivation via State Restoration |
| CVE-2025-47601 | 2025-06-07 | WordPress MaxiBlocks plugin <= 2.1.0 - Arbitrary Option Update to Privilege Escalation vulnerability |
| CVE-2025-5399 | 2025-06-07 | WebSocket endless loop |
| CVE-2025-5303 | 2025-06-07 | LTL Freight Quotes – Freightview Edition <= 1.0.11, LTL Freight Quotes – Daylight Edition <=2.2.6 and LTL Freight Quotes – Day & Ross Edition <= 2.1.10 - Unauthenticated Stored Cross-Site Scripting via `expiry_date` Parameter |
| CVE-2024-9994 | 2025-06-07 | Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Pricing Table Widget |
| CVE-2025-5528 | 2025-06-07 | Social Sharing Plugin – Sassy Social Share <= 3.3.75 - Reflected Cross-Site Scripting via 'heateor_mastodon_share' Parameter |
| CVE-2025-5568 | 2025-06-07 | WpEvently <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-9993 | 2025-06-07 | Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 6.1.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Event Calendar Widget |
| CVE-2025-5836 | 2025-06-07 | Tenda AC9 POST Request SetIPTVCfg formSetIptv command injection |
| CVE-2025-5837 | 2025-06-07 | PHPGurukul Employee Record Management System allemployees.php sql injection |
| CVE-2025-5838 | 2025-06-07 | PHPGurukul Employee Record Management System adminprofile.php sql injection |
| CVE-2025-5839 | 2025-06-07 | Tenda AC9 POST Request AdvSetLanip fromadvsetlanip buffer overflow |
| CVE-2025-5840 | 2025-06-07 | SourceCodester Client Database Management System user_update_customer_order.php unrestricted upload |