# CVEs published 2025-06-02

120 CVEs were published on June 2, 2025: 8 critical, 36 high. 3 are now in CISA KEV. Days are UTC.

- [CVE-2025-5068](https://cve.now/CVE-2025-5068.md): Use after free in Blink in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a craft (CVSS 8.8, Google Chrome)
- [CVE-2025-5419](https://cve.now/CVE-2025-5419.md): Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption (CVSS 8.8, KEV, Google Chrome)
- [CVE-2025-3919](https://cve.now/CVE-2025-3919.md): WordPress Comments Import & Export \<= 2.4.3 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting (CVSS 6.4, webtoffee Comments Import & Export)
- [CVE-2025-47585](https://cve.now/CVE-2025-47585.md): WordPress Booking and Rental Manager plugin \<= 2.3.8 - Broken Access Control vulnerability (CVSS 6.5, magepeopleteam Booking and Rental Manager)
- [CVE-2025-48996](https://cve.now/CVE-2025-48996.md): Unauthenticated Disclosure of PSU HAX CMS Site Listings via haxPsuUsage API Endpoint (CVSS 5.3, haxtheweb issues · @haxtheweb/open-apis)
- [CVE-2025-48387](https://cve.now/CVE-2025-48387.md): tar-fs has issue where extract can write outside the specified dir with a specific tarball (CVSS 8.7, mafintosh tar-fs · tar-fs)
- [CVE-2025-1051](https://cve.now/CVE-2025-1051.md): Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8, Sonos Era)
- [CVE-2025-49069](https://cve.now/CVE-2025-49069.md): WordPress Contact Forms by Cimatti plugin \<= 1.9.8 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, Contact Forms by Cimatti)
- [CVE-2025-5086](https://cve.now/CVE-2025-5086.md): Deserialization of Untrusted Data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 (CVSS 9.0, KEV, Dassault Systèmes DELMIA Apriso)
- [CVE-2025-20298](https://cve.now/CVE-2025-20298.md): Incorrect permission assignment on Universal Forwarder for Windows during new installation or upgrade (CVSS 8.0, Splunk/UniversalForwarder for Windows)
- [CVE-2025-20297](https://cve.now/CVE-2025-20297.md): Reflected Cross-Site Scripting (XSS) on Splunk Enterprise through dashboard PDF generation component (CVSS 4.3, Splunk Enterprise · Splunk Cloud Platform)
- [CVE-2025-5036](https://cve.now/CVE-2025-5036.md): RFA File Parsing Use-After-Free Vulnerability (CVSS 7.8, Autodesk Revit)
- [CVE-2024-1440](https://cve.now/CVE-2024-1440.md): Open Redirection in Multiple WSO2 Products via Multi-Option Authentication Endpoint (CVSS 5.4, WSO2 Identity Server · WSO2 API Manager +4)
- [CVE-2024-8008](https://cve.now/CVE-2024-8008.md): Reflected Cross-Site Scripting (XSS) in Multiple WSO2 Products via JDBC User Store Connection Validation (CVSS 5.2, WSO2 Enterprise Integrator · WSO2 API Manager +9)
- [CVE-2024-3509](https://cve.now/CVE-2024-3509.md): Stored Cross-Site Scripting (XSS) in Management Console of Multiple WSO2 Products via Rich Text Editor (CVSS 4.3, WSO2 Enterprise Integrator · WSO2 API Manager +5)
- [CVE-2024-7074](https://cve.now/CVE-2024-7074.md): Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Service Leading to Remote Code Execution (CVSS 6.8, WSO2 Enterprise Integrator · WSO2 API Manager +5)
- [CVE-2024-7073](https://cve.now/CVE-2024-7073.md): Unauthenticated Server-Side Request Forgery (SSRF) in Multiple WSO2 Products via SOAP Admin Services (CVSS 6.5, WSO2 Identity Server as Key Manager · WSO2 Identity Serv… +3)
- [CVE-2025-48995](https://cve.now/CVE-2025-48995.md): SignXML's signature verification with HMAC is vulnerable to a timing attack (CVSS 6.9, XML-Security signxml · signxml)
- [CVE-2025-48994](https://cve.now/CVE-2025-48994.md): SignXML's signature verification with HMAC is vulnerable to an algorithm confusion attack (CVSS 6.9, XML-Security signxml · signxml)
- [CVE-2025-48941](https://cve.now/CVE-2025-48941.md): MyBB may disclosure unviewable threads' titles in searches (CVSS 5.3, mybb)
- [CVE-2025-48940](https://cve.now/CVE-2025-48940.md): MyBB's upgrade component vulnerable to local file inclusion (CVSS 7.2, mybb)
- [CVE-2025-48866](https://cve.now/CVE-2025-48866.md): ModSecurity has possible DoS vulnerability in sanitiseArg action (CVSS 7.5, owasp-modsecurity ModSecurity)
- [CVE-2024-48877](https://cve.now/CVE-2024-48877.md): A memory corruption vulnerability exists in the Shared String Table Record Parser implementation in xls2csv utility version 0.95. (CVSS 8.4, xls2csv)
- [CVE-2024-52035](https://cve.now/CVE-2024-52035.md): An integer overflow vulnerability exists in the OLE Document File Allocation Table Parser functionality of catdoc 0.95. (CVSS 8.4, catdoc)
- [CVE-2024-54028](https://cve.now/CVE-2024-54028.md): An integer underflow vulnerability exists in the OLE Document DIFAT Parser functionality of catdoc 0.95. (CVSS 8.4, catdoc)
- [CVE-2025-20001](https://cve.now/CVE-2025-20001.md): An out-of-bounds read vulnerability exists in High-Logic FontCreator 15.0.0.3015. (CVSS 6.5, High-Logic FontCreator)
- [CVE-2025-37096](https://cve.now/CVE-2025-37096.md): A command injection remote code execution vulnerability exists in HPE StoreOnce Software. (CVSS 7.5, Hewlett Packard Enterprise (HPE) HPE StoreOnce Software)
- [CVE-2025-37095](https://cve.now/CVE-2025-37095.md): A directory traversal information disclosure vulnerability exists in HPE StoreOnce Software. (CVSS 5.9, Hewlett Packard Enterprise (HPE) HPE StoreOnce Software)
- [CVE-2025-37094](https://cve.now/CVE-2025-37094.md): A directory traversal arbitrary file deletion vulnerability exists in HPE StoreOnce Software. (CVSS 5.5, Hewlett Packard Enterprise (HPE) HPE StoreOnce Software)
- [CVE-2025-37093](https://cve.now/CVE-2025-37093.md): An authentication bypass vulnerability exists in HPE StoreOnce Software. (CVSS 9.8, Hewlett Packard Enterprise (HPE) HPE StoreOnce Software)
- [CVE-2025-37092](https://cve.now/CVE-2025-37092.md): A command injection remote code execution vulnerability exists in HPE StoreOnce Software. (CVSS 7.5, Hewlett Packard Enterprise (HPE) HPE StoreOnce Software)
- [CVE-2025-37091](https://cve.now/CVE-2025-37091.md): A command injection remote code execution vulnerability exists in HPE StoreOnce Software. (CVSS 7.2, Hewlett Packard Enterprise (HPE) HPE StoreOnce Software)
- [CVE-2025-5447](https://cve.now/CVE-2025-5447.md): Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 ssid1MACFilter os command injection (CVSS 5.3, Linksys RE6500 · Linksys RE6250 +4)
- [CVE-2025-37090](https://cve.now/CVE-2025-37090.md): A server-side request forgery vulnerability exists in HPE StoreOnce Software. (CVSS 6.9, Hewlett Packard Enterprise (HPE) HPE StoreOnce Software)
- [CVE-2025-37089](https://cve.now/CVE-2025-37089.md): A command injection remote code execution vulnerability exists in HPE StoreOnce Software. (CVSS 7.5, Hewlett Packard Enterprise (HPE) HPE StoreOnce Software)
- [CVE-2025-26396](https://cve.now/CVE-2025-26396.md): SolarWinds Dameware Mini Remote Control Service Incorrect Permissions Local Privilege Escalation Vulnerability (CVSS 7.8, SolarWinds Dameware Mini Remote Control Service)
- [CVE-2025-5446](https://cve.now/CVE-2025-5446.md): Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 RP\_checkCredentialsByBBS os command injection (CVSS 5.3, Linksys RE6500 · Linksys RE6250 +4)
- [CVE-2024-12168](https://cve.now/CVE-2024-12168.md): DLL Hijacking in Yandex Telemost (CVSS 8.4, Yandex Telemost)
- [CVE-2025-5445](https://cve.now/CVE-2025-5445.md): Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 RP\_checkFWByBBS os command injection (CVSS 5.3, Linksys RE6500 · Linksys RE6250 +4)
- [CVE-2025-46806](https://cve.now/CVE-2025-46806.md): Misaligned Memory Accesses in \`is\_openvpn\_protocol()\` (CVSS 6.9, https://github.com/yrutschle/sslh/releases/tag/v2.2.4 sslh)
- [CVE-2025-5444](https://cve.now/CVE-2025-5444.md): Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 RP\_UpgradeFWByBBS os command injection (CVSS 5.3, Linksys RE6500 · Linksys RE6250 +4)
- [CVE-2025-5443](https://cve.now/CVE-2025-5443.md): Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 wirelessAdvancedHidden os command injection (CVSS 5.3, Linksys RE6500 · Linksys RE6250 +4)
- [CVE-2025-46807](https://cve.now/CVE-2025-46807.md): File Descriptor Exhaustion in sslh-select and sslh-ev triggers SEGFAULT (CVSS 8.7, https://github.com/yrutschle/sslh/releases/tag/v2.2.4 sslh)
- [CVE-2025-48990](https://cve.now/CVE-2025-48990.md): NeKernel has Heap Overflow in \`rt\_copy\_memory\` (CVSS 8.6, nekernel-org nekernel)
- [CVE-2025-48958](https://cve.now/CVE-2025-48958.md): Froxlor has an HTML Injection Vulnerability (CVSS 5.5, Froxlor · froxlor/froxlor)
- [CVE-2025-48957](https://cve.now/CVE-2025-48957.md): AstrBot Has Path Traversal Vulnerability in /api/chat/get\_file (CVSS 7.5, AstrBotDevs AstrBot · astrbot)
- [CVE-2025-48955](https://cve.now/CVE-2025-48955.md): Para Server Logs Sensitive Information (CVSS 6.2, Erudika para · com.erudika:para-server)
- [CVE-2025-48495](https://cve.now/CVE-2025-48495.md): Gokapi has stored XSS vulnerability in friendly name for API keys (CVSS 4.8, Forceu Gokapi · github.com/forceu/gokapi)
- [CVE-2025-1246](https://cve.now/CVE-2025-1246.md): Mali GPU Userspace Driver allows an Out-of-Bounds access (CVSS 7.8, Arm Bifrost GPU Userspace Driver · Arm Valhall GPU Users… +1)
- [CVE-2025-0819](https://cve.now/CVE-2025-0819.md): Mali GPU Kernel Driver allows access to already freed memory (CVSS 7.8, Arm Bifrost GPU Kernel Driver · Arm Valhall GPU Kernel D… +1)
- [CVE-2025-0073](https://cve.now/CVE-2025-0073.md): Mali GPU Kernel Driver allows improper GPU memory processing operations (CVSS 7.8, Arm Valhall GPU Kernel Driver · Arm 5th Gen GPU Architectur…)
- [CVE-2025-48494](https://cve.now/CVE-2025-48494.md): Gokapi vulnerable to stored XSS via uploading file with malicious file name (CVSS 4.8, Forceu Gokapi · github.com/forceu/gokapi)
- [CVE-2025-47289](https://cve.now/CVE-2025-47289.md): Stored XSS in CE Phoenix Cart Testimonials Allows Account Takeover if Missing HttpOnly Flag (CVSS 6.3, CE-PhoenixCart PhoenixCart)
- [CVE-2025-5442](https://cve.now/CVE-2025-5442.md): Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 RP\_pingGatewayByBBS os command injection (CVSS 5.3, Linksys RE6500 · Linksys RE6250 +4)
- [CVE-2025-47272](https://cve.now/CVE-2025-47272.md): PhoenixCart Vulnerable to Account Deletion Without Password Confirmation (CVSS 5.5, CE-PhoenixCart PhoenixCart)
- [CVE-2025-29785](https://cve.now/CVE-2025-29785.md): quic-go Has Panic in Path Probe Loss Recovery Handling (CVSS 7.5, quic-go · github.com/quic-go/quic-go)
- [CVE-2025-3454](https://cve.now/CVE-2025-3454.md): This vulnerability in Grafana's datasource proxy API allows authorization checks to be bypassed by adding an extra slash character in the UR (CVSS 5.0, Grafana · github.com/grafana/grafana)
- [CVE-2025-5441](https://cve.now/CVE-2025-5441.md): Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 setDeviceURL os command injection (CVSS 5.3, Linksys RE6500 · Linksys RE6250 +4)
- [CVE-2025-3260](https://cve.now/CVE-2025-3260.md): A security vulnerability in the /apis/dashboard.grafana.app/\* endpoints allows authenticated users to bypass dashboard and folder permission (CVSS 8.3, Grafana · github.com/grafana/grafana)
- [CVE-2025-1750](https://cve.now/CVE-2025-1750.md): SQL Injection in run-llama/llama\_index (CVSS 9.8, run-llama/llama\_index · llama-index +1)
- [CVE-2025-5440](https://cve.now/CVE-2025-5440.md): Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 NTP os command injection (CVSS 5.3, Linksys RE6500 · Linksys RE6250 +4)
- [CVE-2025-5439](https://cve.now/CVE-2025-5439.md): Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 verifyFacebookLike os command injection (CVSS 5.3, Linksys RE6500 · Linksys RE6250 +4)
- [CVE-2025-5438](https://cve.now/CVE-2025-5438.md): Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 WPS command injection (CVSS 5.3, Linksys RE6500 · Linksys RE6250 +4)
- [CVE-2025-5455](https://cve.now/CVE-2025-5455.md): Possible denial of service when passing malformed data in a URL to qDecodeDataUrl (CVSS 8.4, Qt)
- [CVE-2025-5437](https://cve.now/CVE-2025-5437.md): Multilaser Sirius RE016 Password Change cstecgi.cgi improper authentication (CVSS 6.9, Multilaser Sirius RE016)
- [CVE-2025-5436](https://cve.now/CVE-2025-5436.md): Multilaser Sirius RE016 cstecgi.cgi information disclosure (CVSS 6.9, Multilaser Sirius RE016)
- [CVE-2025-0358](https://cve.now/CVE-2025-0358.md): During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the VAPIX Device Configuration fra (CVSS 8.8, Axis Communications AB AXIS OS)
- [CVE-2025-0325](https://cve.now/CVE-2025-0325.md): A Guard Tour VAPIX API parameter allowed the use of arbitrary values and can be incorrectly called, allowing an attacker to block access to (CVSS 4.3, Axis Communications AB AXIS OS)
- [CVE-2025-0324](https://cve.now/CVE-2025-0324.md): The VAPIX Device Configuration framework allowed a privilege escalation, enabling a lower-privileged user to gain administrator privileges. (CVSS 9.4, Axis Communications AB AXIS OS)
- [CVE-2025-5435](https://cve.now/CVE-2025-5435.md): Marwal Infotech CMS page.php sql injection (CVSS 6.9, Marwal Infotech CMS)
- [CVE-2025-5113](https://cve.now/CVE-2025-5113.md): Authenticated Remote Command Injection in Diviotec NBR IP Cameras (CVSS 8.6, Diviotec nbr222p · Diviotec nbr222pv +7)
- [CVE-2025-4010](https://cve.now/CVE-2025-4010.md): Arbitrary Command Injection in Netcom NTC-6200 & NWL-222 (CVSS 8.6, Netcomm NTC · Netcomm NWL-222)
- [CVE-2025-5434](https://cve.now/CVE-2025-5434.md): Aem Solutions CMS page.php sql injection (CVSS 6.9, Aem Solutions CMS)
- [CVE-2025-5433](https://cve.now/CVE-2025-5433.md): Fengoffice Feng Office index.php sql injection (CVSS 5.3, Fengoffice Feng Office)
- [CVE-2025-1235](https://cve.now/CVE-2025-1235.md): WAGO: Switches affected by year 2k38 problem (CVSS 4.3, WAGO Fully Managed Switches 0852-0303 · WAGO Fully Mana… +11)
- [CVE-2025-5432](https://cve.now/CVE-2025-5432.md): AssamLook CMS view\_tender.php sql injection (CVSS 5.3, AssamLook CMS)
- [CVE-2025-3951](https://cve.now/CVE-2025-3951.md): WP-Optimize \< 4.2.0 - Admin+ SQLi (CVSS 4.1, WP-Optimize)
- [CVE-2025-1485](https://cve.now/CVE-2025-1485.md): Real Cookie Banner \< 5.1.6 - Admin+ Stored XSS (CVSS 4.8, Real Cookie Banner: GDPR & ePrivacy Cookie Consent · real-c…)
- [CVE-2025-5431](https://cve.now/CVE-2025-5431.md): AssamLook CMS department-profile.php sql injection (CVSS 5.3, AssamLook CMS)
- [CVE-2025-5430](https://cve.now/CVE-2025-5430.md): AssamLook CMS product.php sql injection (CVSS 5.3, AssamLook CMS)
- [CVE-2025-5429](https://cve.now/CVE-2025-5429.md): juzaweb CMS Plugins Page install access control (CVSS 5.3, juzaweb CMS)
- [CVE-2025-25179](https://cve.now/CVE-2025-25179.md): GPU DDK - Freelist GPU VA can be remapped to another reservation/PMR to trigger GPU arbitrary write to physical memory (CVSS 7.8, Imagination Technologies Graphics DDK)
- [CVE-2025-5428](https://cve.now/CVE-2025-5428.md): juzaweb CMS Error Logs Page log-viewer access control (CVSS 5.3, juzaweb CMS)
- [CVE-2025-5427](https://cve.now/CVE-2025-5427.md): juzaweb CMS Permalinks Page permalinks access control (CVSS 5.3, juzaweb CMS)
- [CVE-2024-11857](https://cve.now/CVE-2024-11857.md): Realtek Bluetooth HCI Adaptor - Privilege Escalation (CVSS 7.8, Realtek Bluetooth HCI Adaptor)
- [CVE-2025-5426](https://cve.now/CVE-2025-5426.md): juzaweb CMS Menu Page menus access control (CVSS 5.3, juzaweb CMS)
- [CVE-2025-5425](https://cve.now/CVE-2025-5425.md): juzaweb CMS Theme Editor Page default access control (CVSS 5.3, juzaweb CMS)
- [CVE-2025-20678](https://cve.now/CVE-2025-20678.md): In ims service, there is a possible system crash due to incorrect error handling. (CVSS 6.5, MediaTek MT6739, MT6761, MT6762, MT6762D, MT6762M, MT6763,…)
- [CVE-2025-20677](https://cve.now/CVE-2025-20677.md): In Bluetooth driver, there is a possible system crash due to an uncaught exception. (CVSS 5.5, MediaTek MT7902, MT7921, MT7922, MT7925, MT7927)
- [CVE-2025-20676](https://cve.now/CVE-2025-20676.md): In wlan STA driver, there is a possible system crash due to an uncaught exception. (CVSS 5.5, MediaTek MT7902, MT7921, MT7922, MT7925, MT7927)
- [CVE-2025-20675](https://cve.now/CVE-2025-20675.md): In wlan STA driver, there is a possible system crash due to an uncaught exception. (CVSS 5.5, MediaTek MT7902, MT7921, MT7922, MT7925, MT7927)
- [CVE-2025-20674](https://cve.now/CVE-2025-20674.md): In wlan AP driver, there is a possible way to inject arbitrary packet due to a missing permission check. (CVSS 9.8, MediaTek MT6890, MT6990, MT7915, MT7916, MT7981, MT7986, MT…)
- [CVE-2025-20673](https://cve.now/CVE-2025-20673.md): In wlan STA driver, there is a possible system crash due to an uncaught exception. (CVSS 5.5, MediaTek MT7902, MT7921, MT7922, MT7925, MT7927)
- [CVE-2025-20672](https://cve.now/CVE-2025-20672.md): In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 9.8, MediaTek MT7902, MT7921, MT7922, MT7925, MT7927)
- [CVE-2025-5424](https://cve.now/CVE-2025-5424.md): juzaweb CMS Media Page media access control (CVSS 5.3, juzaweb CMS)
- [CVE-2025-5423](https://cve.now/CVE-2025-5423.md): juzaweb CMS General Setting Page general access control (CVSS 5.3, juzaweb CMS)
- [CVE-2025-5422](https://cve.now/CVE-2025-5422.md): juzaweb CMS Email Logs Page email access control (CVSS 5.3, juzaweb CMS)
- [CVE-2025-5421](https://cve.now/CVE-2025-5421.md): juzaweb CMS Plugin Editor Page editor access control (CVSS 5.3, juzaweb CMS)
- [CVE-2025-5420](https://cve.now/CVE-2025-5420.md): juzaweb CMS Profile Page upload cross site scripting (CVSS 5.1, juzaweb CMS · juzaweb/cms)
- [CVE-2024-40112](https://cve.now/CVE-2024-40112.md): A Local File Inclusion (LFI) vulnerability exists in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and before, which allows an attack (CVSS 5.9)
- [CVE-2024-40113](https://cve.now/CVE-2024-40113.md): Sitecom WLX-2006 Wall Mount Range Extender N300 v.1.5 and before is vulnerable to Use of Default Credentials. (CVSS 6.5)
- [CVE-2024-40114](https://cve.now/CVE-2024-40114.md): A Cross Site Scripting (XSS) vulnerability in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and before allows an attacker to manipula (CVSS 6.1)
- [CVE-2024-57459](https://cve.now/CVE-2024-57459.md): A time-based SQL injection vulnerability exists in mydetailsstudent.php in the CloudClassroom PHP Project 1.0. (CVSS 7.3)
- [CVE-2024-57783](https://cve.now/CVE-2024-57783.md): The desktop application in Dot through 0.9.3 allows XSS and resultant command execution because user input and LLM output are appended to th (CVSS 8.1, alexpinel Dot)
- [CVE-2025-23099](https://cve.now/CVE-2025-23099.md): An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. (CVSS 9.1)
- [CVE-2025-23104](https://cve.now/CVE-2025-23104.md): An issue was discovered in Samsung Mobile Processor Exynos 2200. (CVSS 6.5)
- [CVE-2025-23105](https://cve.now/CVE-2025-23105.md): An issue was discovered in Samsung Mobile Processor Exynos 2200, 1480, and 2400. (CVSS 7.8)
- [CVE-2025-27953](https://cve.now/CVE-2025-27953.md): An issue in Clinical Collaboration Platform 12.2.1.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via (CVSS 6.5)
- [CVE-2025-27954](https://cve.now/CVE-2025-27954.md): An issue in Clinical Collaboration Platform 12.2.1.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via (CVSS 6.5)
- [CVE-2025-27955](https://cve.now/CVE-2025-27955.md): Clinical Collaboration Platform 12.2.1.5 has a weak logout system where the session token remains valid after logout and allows a remote att (CVSS 6.5)
- [CVE-2025-27956](https://cve.now/CVE-2025-27956.md): Directory Traversal vulnerability in WebLaudos 24.2 (04) allows a remote attacker to obtain sensitive information via the id parameter. (CVSS 7.5)
- [CVE-2025-44115](https://cve.now/CVE-2025-44115.md): A vulnerability has been found in Cotonti Siena v0.9.25. (CVSS 5.4)
- [CVE-2025-44172](https://cve.now/CVE-2025-44172.md): Tenda AC6 V15.03.05.16 was discovered to contain a stack overflow via the time parameter in the setSmartPowerManagement function. (CVSS 6.5)
- [CVE-2025-45387](https://cve.now/CVE-2025-45387.md): osTicket prior to v1.17.6 and v1.18.2 are vulnerable to Broken Access Control Vulnerability in /scp/ajax.php. (CVSS 5.4)
- [CVE-2025-45542](https://cve.now/CVE-2025-45542.md): SQL injection vulnerability in the registrationform endpoint of CloudClassroom-PHP-Project v1.0. (CVSS 7.3)
- [CVE-2025-49112](https://cve.now/CVE-2025-49112.md): setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev-\>size - prev-\>used. (CVSS 3.1, Valkey)
- [CVE-2025-49113](https://cve.now/CVE-2025-49113.md): Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execution by authenticated users because the \_from parameter in a (CVSS 9.9, KEV, Roundcube Webmail · roundcube/roundcubemail)
- [CVE-2025-49162](https://cve.now/CVE-2025-49162.md): Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow file overwrite via TFTP because a remote filename with a space character allo (CVSS 6.4, Arris VIP1113)
- [CVE-2025-49163](https://cve.now/CVE-2025-49163.md): Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow booting an arbitrary image via a crafted /usr/bin/gunzip file. (CVSS 6.7, Arris VIP1113)
- [CVE-2025-49164](https://cve.now/CVE-2025-49164.md): Arris VIP1113 devices through 2025-05-30 with KreaTV SDK have a firmware decryption key of cd1c2d78f2cba1f73ca7e697b4a485f49a8a7d0c8b0fdc9f5 (CVSS 4.3, Arris VIP1113)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-06-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.