CVEs published June 2, 2025
120 CVEs were published on June 2, 2025: 8 critical, 36 high. 3 are now in CISA KEV.
- Published
- 120
- Critical
- 8
- High
- 36
- Medium
- 75
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 3
- Fix available
- 49
Most affected products
- Linksys RE6500 · Linksys RE6250 +4
- 10
- juzaweb CMS
- 9
- Hewlett Packard Enterprise (HPE) HPE StoreOnce Software
- 8
- MediaTek MT7902, MT7921, MT7922, MT7925, MT7927
- 5
- Arris VIP1113
- 3
- AssamLook CMS
- 3
- Axis Communications AB AXIS OS
- 3
- catdoc
- 2
- CE-PhoenixCart PhoenixCart
- 2
- Forceu Gokapi · github.com/forceu/gokapi
- 2
Critical 8
- CVE-2025-5086Deserialization of Untrusted Data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025Dassault Systèmes DELMIA Apriso
- CVE-2025-37093An authentication bypass vulnerability exists in HPE StoreOnce Software.Hewlett Packard Enterprise (HPE) HPE StoreOnce Software
- CVE-2025-1750SQL Injection in run-llama/llama_indexrun-llama/llama_index · llama-index +1
- CVE-2025-0324The VAPIX Device Configuration framework allowed a privilege escalation, enabling a lower-privileged user to gain administrator privileges.Axis Communications AB AXIS OS
- CVE-2025-20674In wlan AP driver, there is a possible way to inject arbitrary packet due to a missing permission check.MediaTek MT6890, MT6990, MT7915, MT7916, MT7981, MT7986, MT…
- CVE-2025-20672In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT7902, MT7921, MT7922, MT7925, MT7927
- CVE-2025-23099An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400.
- CVE-2025-49113Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execution by authenticated users because the _from parameter in aRoundcube Webmail · roundcube/roundcubemail
High 36
- CVE-2025-5068Use after free in Blink in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a craftGoogle Chrome
- CVE-2025-5419Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption Google Chrome
- CVE-2025-48387tar-fs has issue where extract can write outside the specified dir with a specific tarballmafintosh tar-fs · tar-fs
- CVE-2025-1051Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution VulnerabilitySonos Era
- CVE-2025-20298Incorrect permission assignment on Universal Forwarder for Windows during new installation or upgradeSplunk/UniversalForwarder for Windows
- CVE-2025-5036RFA File Parsing Use-After-Free VulnerabilityAutodesk Revit
- CVE-2025-48940MyBB's upgrade component vulnerable to local file inclusionmybb
- CVE-2025-48866ModSecurity has possible DoS vulnerability in sanitiseArg actionowasp-modsecurity ModSecurity
- CVE-2024-48877A memory corruption vulnerability exists in the Shared String Table Record Parser implementation in xls2csv utility version 0.95.xls2csv
- CVE-2024-52035An integer overflow vulnerability exists in the OLE Document File Allocation Table Parser functionality of catdoc 0.95.catdoc
- CVE-2024-54028An integer underflow vulnerability exists in the OLE Document DIFAT Parser functionality of catdoc 0.95.catdoc
- CVE-2025-37096A command injection remote code execution vulnerability exists in HPE StoreOnce Software.Hewlett Packard Enterprise (HPE) HPE StoreOnce Software
- CVE-2025-37092A command injection remote code execution vulnerability exists in HPE StoreOnce Software.Hewlett Packard Enterprise (HPE) HPE StoreOnce Software
- CVE-2025-37091A command injection remote code execution vulnerability exists in HPE StoreOnce Software.Hewlett Packard Enterprise (HPE) HPE StoreOnce Software
- CVE-2025-37089A command injection remote code execution vulnerability exists in HPE StoreOnce Software.Hewlett Packard Enterprise (HPE) HPE StoreOnce Software
- CVE-2025-26396SolarWinds Dameware Mini Remote Control Service Incorrect Permissions Local Privilege Escalation VulnerabilitySolarWinds Dameware Mini Remote Control Service
- CVE-2024-12168DLL Hijacking in Yandex TelemostYandex Telemost
- CVE-2025-46807File Descriptor Exhaustion in sslh-select and sslh-ev triggers SEGFAULThttps://github.com/yrutschle/sslh/releases/tag/v2.2.4 sslh
- CVE-2025-48990NeKernel has Heap Overflow in `rt_copy_memory`nekernel-org nekernel
- CVE-2025-48957AstrBot Has Path Traversal Vulnerability in /api/chat/get_fileAstrBotDevs AstrBot · astrbot
- CVE-2025-1246Mali GPU Userspace Driver allows an Out-of-Bounds accessArm Bifrost GPU Userspace Driver · Arm Valhall GPU Users… +1
- CVE-2025-0819Mali GPU Kernel Driver allows access to already freed memoryArm Bifrost GPU Kernel Driver · Arm Valhall GPU Kernel D… +1
- CVE-2025-0073Mali GPU Kernel Driver allows improper GPU memory processing operationsArm Valhall GPU Kernel Driver · Arm 5th Gen GPU Architectur…
- CVE-2025-29785quic-go Has Panic in Path Probe Loss Recovery Handlingquic-go · github.com/quic-go/quic-go
- CVE-2025-3260A security vulnerability in the /apis/dashboard.grafana.app/* endpoints allows authenticated users to bypass dashboard and folder permissionGrafana · github.com/grafana/grafana
- CVE-2025-5455Possible denial of service when passing malformed data in a URL to qDecodeDataUrlQt
- CVE-2025-0358During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the VAPIX Device Configuration fraAxis Communications AB AXIS OS
- CVE-2025-5113Authenticated Remote Command Injection in Diviotec NBR IP CamerasDiviotec nbr222p · Diviotec nbr222pv +7
- CVE-2025-4010Arbitrary Command Injection in Netcom NTC-6200 & NWL-222Netcomm NTC · Netcomm NWL-222
- CVE-2025-25179GPU DDK - Freelist GPU VA can be remapped to another reservation/PMR to trigger GPU arbitrary write to physical memoryImagination Technologies Graphics DDK
- CVE-2024-11857Realtek Bluetooth HCI Adaptor - Privilege EscalationRealtek Bluetooth HCI Adaptor
- CVE-2024-57459A time-based SQL injection vulnerability exists in mydetailsstudent.php in the CloudClassroom PHP Project 1.0.
- CVE-2024-57783The desktop application in Dot through 0.9.3 allows XSS and resultant command execution because user input and LLM output are appended to thalexpinel Dot
- CVE-2025-23105An issue was discovered in Samsung Mobile Processor Exynos 2200, 1480, and 2400.
- CVE-2025-27956Directory Traversal vulnerability in WebLaudos 24.2 (04) allows a remote attacker to obtain sensitive information via the id parameter.
- CVE-2025-45542SQL injection vulnerability in the registrationform endpoint of CloudClassroom-PHP-Project v1.0.
Medium, low and unrated 76
- CVE-2025-3919WordPress Comments Import & Export <= 2.4.3 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scriptingwebtoffee Comments Import & Export
- CVE-2025-47585WordPress Booking and Rental Manager plugin <= 2.3.8 - Broken Access Control vulnerabilitymagepeopleteam Booking and Rental Manager
- CVE-2025-48996Unauthenticated Disclosure of PSU HAX CMS Site Listings via haxPsuUsage API Endpointhaxtheweb issues · @haxtheweb/open-apis
- CVE-2025-49069WordPress Contact Forms by Cimatti plugin <= 1.9.8 - Cross Site Request Forgery (CSRF) vulnerabilityContact Forms by Cimatti
- CVE-2025-20297Reflected Cross-Site Scripting (XSS) on Splunk Enterprise through dashboard PDF generation componentSplunk Enterprise · Splunk Cloud Platform
- CVE-2024-1440Open Redirection in Multiple WSO2 Products via Multi-Option Authentication EndpointWSO2 Identity Server · WSO2 API Manager +4
- CVE-2024-8008Reflected Cross-Site Scripting (XSS) in Multiple WSO2 Products via JDBC User Store Connection ValidationWSO2 Enterprise Integrator · WSO2 API Manager +9
- CVE-2024-3509Stored Cross-Site Scripting (XSS) in Management Console of Multiple WSO2 Products via Rich Text EditorWSO2 Enterprise Integrator · WSO2 API Manager +5
- CVE-2024-7074Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Service Leading to Remote Code ExecutionWSO2 Enterprise Integrator · WSO2 API Manager +5
- CVE-2024-7073Unauthenticated Server-Side Request Forgery (SSRF) in Multiple WSO2 Products via SOAP Admin ServicesWSO2 Identity Server as Key Manager · WSO2 Identity Serv… +3
- CVE-2025-48995SignXML's signature verification with HMAC is vulnerable to a timing attackXML-Security signxml · signxml
- CVE-2025-48994SignXML's signature verification with HMAC is vulnerable to an algorithm confusion attackXML-Security signxml · signxml
- CVE-2025-48941MyBB may disclosure unviewable threads' titles in searchesmybb
- CVE-2025-20001An out-of-bounds read vulnerability exists in High-Logic FontCreator 15.0.0.3015.High-Logic FontCreator
- CVE-2025-37095A directory traversal information disclosure vulnerability exists in HPE StoreOnce Software.Hewlett Packard Enterprise (HPE) HPE StoreOnce Software
- CVE-2025-37094A directory traversal arbitrary file deletion vulnerability exists in HPE StoreOnce Software.Hewlett Packard Enterprise (HPE) HPE StoreOnce Software
- CVE-2025-5447Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 ssid1MACFilter os command injectionLinksys RE6500 · Linksys RE6250 +4
- CVE-2025-37090A server-side request forgery vulnerability exists in HPE StoreOnce Software.Hewlett Packard Enterprise (HPE) HPE StoreOnce Software
- CVE-2025-5446Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 RP_checkCredentialsByBBS os command injectionLinksys RE6500 · Linksys RE6250 +4
- CVE-2025-5445Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 RP_checkFWByBBS os command injectionLinksys RE6500 · Linksys RE6250 +4
- CVE-2025-46806Misaligned Memory Accesses in `is_openvpn_protocol()`https://github.com/yrutschle/sslh/releases/tag/v2.2.4 sslh
- CVE-2025-5444Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 RP_UpgradeFWByBBS os command injectionLinksys RE6500 · Linksys RE6250 +4
- CVE-2025-5443Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 wirelessAdvancedHidden os command injectionLinksys RE6500 · Linksys RE6250 +4
- CVE-2025-48958Froxlor has an HTML Injection VulnerabilityFroxlor · froxlor/froxlor
- CVE-2025-48955Para Server Logs Sensitive InformationErudika para · com.erudika:para-server
- CVE-2025-48495Gokapi has stored XSS vulnerability in friendly name for API keysForceu Gokapi · github.com/forceu/gokapi
- CVE-2025-48494Gokapi vulnerable to stored XSS via uploading file with malicious file nameForceu Gokapi · github.com/forceu/gokapi
- CVE-2025-47289Stored XSS in CE Phoenix Cart Testimonials Allows Account Takeover if Missing HttpOnly FlagCE-PhoenixCart PhoenixCart
- CVE-2025-5442Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 RP_pingGatewayByBBS os command injectionLinksys RE6500 · Linksys RE6250 +4
- CVE-2025-47272PhoenixCart Vulnerable to Account Deletion Without Password ConfirmationCE-PhoenixCart PhoenixCart
- CVE-2025-3454This vulnerability in Grafana's datasource proxy API allows authorization checks to be bypassed by adding an extra slash character in the URGrafana · github.com/grafana/grafana
- CVE-2025-5441Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 setDeviceURL os command injectionLinksys RE6500 · Linksys RE6250 +4
- CVE-2025-5440Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 NTP os command injectionLinksys RE6500 · Linksys RE6250 +4
- CVE-2025-5439Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 verifyFacebookLike os command injectionLinksys RE6500 · Linksys RE6250 +4
- CVE-2025-5438Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 WPS command injectionLinksys RE6500 · Linksys RE6250 +4
- CVE-2025-5437Multilaser Sirius RE016 Password Change cstecgi.cgi improper authenticationMultilaser Sirius RE016
- CVE-2025-5436Multilaser Sirius RE016 cstecgi.cgi information disclosureMultilaser Sirius RE016
- CVE-2025-0325A Guard Tour VAPIX API parameter allowed the use of arbitrary values and can be incorrectly called, allowing an attacker to block access to Axis Communications AB AXIS OS
- CVE-2025-5435Marwal Infotech CMS page.php sql injectionMarwal Infotech CMS
- CVE-2025-5434Aem Solutions CMS page.php sql injectionAem Solutions CMS
- CVE-2025-5433Fengoffice Feng Office index.php sql injectionFengoffice Feng Office
- CVE-2025-1235WAGO: Switches affected by year 2k38 problemWAGO Fully Managed Switches 0852-0303 · WAGO Fully Mana… +11
- CVE-2025-5432AssamLook CMS view_tender.php sql injectionAssamLook CMS
- CVE-2025-3951WP-Optimize < 4.2.0 - Admin+ SQLiWP-Optimize
- CVE-2025-1485Real Cookie Banner < 5.1.6 - Admin+ Stored XSSReal Cookie Banner: GDPR & ePrivacy Cookie Consent · real-c…
- CVE-2025-5431AssamLook CMS department-profile.php sql injectionAssamLook CMS
- CVE-2025-5430AssamLook CMS product.php sql injectionAssamLook CMS
- CVE-2025-5429juzaweb CMS Plugins Page install access controljuzaweb CMS
- CVE-2025-5428juzaweb CMS Error Logs Page log-viewer access controljuzaweb CMS
- CVE-2025-5427juzaweb CMS Permalinks Page permalinks access controljuzaweb CMS
- CVE-2025-5426juzaweb CMS Menu Page menus access controljuzaweb CMS
- CVE-2025-5425juzaweb CMS Theme Editor Page default access controljuzaweb CMS
- CVE-2025-20678In ims service, there is a possible system crash due to incorrect error handling.MediaTek MT6739, MT6761, MT6762, MT6762D, MT6762M, MT6763,…
- CVE-2025-20677In Bluetooth driver, there is a possible system crash due to an uncaught exception.MediaTek MT7902, MT7921, MT7922, MT7925, MT7927
- CVE-2025-20676In wlan STA driver, there is a possible system crash due to an uncaught exception.MediaTek MT7902, MT7921, MT7922, MT7925, MT7927
- CVE-2025-20675In wlan STA driver, there is a possible system crash due to an uncaught exception.MediaTek MT7902, MT7921, MT7922, MT7925, MT7927
- CVE-2025-20673In wlan STA driver, there is a possible system crash due to an uncaught exception.MediaTek MT7902, MT7921, MT7922, MT7925, MT7927
- CVE-2025-5424juzaweb CMS Media Page media access controljuzaweb CMS
- CVE-2025-5423juzaweb CMS General Setting Page general access controljuzaweb CMS
- CVE-2025-5422juzaweb CMS Email Logs Page email access controljuzaweb CMS
- CVE-2025-5421juzaweb CMS Plugin Editor Page editor access controljuzaweb CMS
- CVE-2025-5420juzaweb CMS Profile Page upload cross site scriptingjuzaweb CMS · juzaweb/cms
- CVE-2024-40112A Local File Inclusion (LFI) vulnerability exists in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and before, which allows an attack
- CVE-2024-40113Sitecom WLX-2006 Wall Mount Range Extender N300 v.1.5 and before is vulnerable to Use of Default Credentials.
- CVE-2024-40114A Cross Site Scripting (XSS) vulnerability in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and before allows an attacker to manipula
- CVE-2025-23104An issue was discovered in Samsung Mobile Processor Exynos 2200.
- CVE-2025-27953An issue in Clinical Collaboration Platform 12.2.1.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via
- CVE-2025-27954An issue in Clinical Collaboration Platform 12.2.1.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via
- CVE-2025-27955Clinical Collaboration Platform 12.2.1.5 has a weak logout system where the session token remains valid after logout and allows a remote att
- CVE-2025-44115A vulnerability has been found in Cotonti Siena v0.9.25.
- CVE-2025-44172Tenda AC6 V15.03.05.16 was discovered to contain a stack overflow via the time parameter in the setSmartPowerManagement function.
- CVE-2025-45387osTicket prior to v1.17.6 and v1.18.2 are vulnerable to Broken Access Control Vulnerability in /scp/ajax.php.
- CVE-2025-49112setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev->size - prev->used.Valkey
- CVE-2025-49162Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow file overwrite via TFTP because a remote filename with a space character alloArris VIP1113
- CVE-2025-49163Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow booting an arbitrary image via a crafted /usr/bin/gunzip file.Arris VIP1113
- CVE-2025-49164Arris VIP1113 devices through 2025-05-30 with KreaTV SDK have a firmware decryption key of cd1c2d78f2cba1f73ca7e697b4a485f49a8a7d0c8b0fdc9f5Arris VIP1113