CVEs published June 1, 2025
19 CVEs were published on June 1, 2025: 2 critical, 0 high.
- Published
- 19
- Critical
- 2
- High
- 0
- Medium
- 17
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 10
Most affected products
- chaitak-gorai Blogbook
- 8
- IBM Planning Analytics Local
- 4
- Mist Community Edition
- 4
- IBM InfoSphere Information Server
- 1
- TINITA YAML::LibYAML
- 1
- WAVLINK QUANTUM D2G · WAVLINK QUANTUM D3G +4
- 1
Critical 2
Medium, low and unrated 17
- CVE-2025-5412Mist Community Edition Authentication Endpoint views.py login cross site scriptingMist Community Edition
- CVE-2025-5411Mist Community Edition views.py tag_resources cross site scriptingMist Community Edition
- CVE-2025-5410Mist Community Edition middleware.py session_start_response cross-site request forgeryMist Community Edition
- CVE-2025-5409Mist Community Edition API Token views.py create_token access controlMist Community Edition
- CVE-2025-5407chaitak-gorai Blogbook register_script.php cross site scriptingchaitak-gorai Blogbook
- CVE-2025-5406chaitak-gorai Blogbook posts.php unrestricted uploadchaitak-gorai Blogbook
- CVE-2025-5405chaitak-gorai Blogbook post.php cross site scriptingchaitak-gorai Blogbook
- CVE-2025-5404chaitak-gorai Blogbook GET Parameter search.php denial of servicechaitak-gorai Blogbook
- CVE-2025-5403chaitak-gorai Blogbook GET Parameter view_all_posts.php sql injectionchaitak-gorai Blogbook
- CVE-2025-5402chaitak-gorai Blogbook GET Parameter edit_post.php sql injectionchaitak-gorai Blogbook
- CVE-2025-5401chaitak-gorai Blogbook GET Parameter post.php sql injectionchaitak-gorai Blogbook
- CVE-2025-33005IBM Planning Analytics Local session fixationIBM Planning Analytics Local
- CVE-2025-33004IBM Planning Analytics Local path traversalIBM Planning Analytics Local
- CVE-2025-2896IBM Planning Analytics Local cross-site scriptingIBM Planning Analytics Local
- CVE-2025-25044IBM Planning Analytics Local cross-site scriptingIBM Planning Analytics Local
- CVE-2025-1499IBM InfoSphere Information Server information disclosureIBM InfoSphere Information Server
- CVE-2025-5400chaitak-gorai Blogbook GET Parameter user.php sql injectionchaitak-gorai Blogbook