# CVEs published 2025-06-03

116 CVEs were published on June 3, 2025: 9 critical, 40 high. 3 are now in CISA KEV. Days are UTC.

- [CVE-2025-5546](https://cve.now/CVE-2025-5546.md): PHPGurukul Daily Expense Tracker System expense-reports-detailed.php sql injection (CVSS 5.3, PHPGurukul Daily Expense Tracker System)
- [CVE-2025-5545](https://cve.now/CVE-2025-5545.md): aaluoxiang oa\_system ProcedureController.java image path traversal (CVSS 5.3, aaluoxiang oa\_system)
- [CVE-2025-5544](https://cve.now/CVE-2025-5544.md): aaluoxiang oa\_system UserpanelController.java image path traversal (CVSS 5.3, aaluoxiang oa\_system)
- [CVE-2025-24015](https://cve.now/CVE-2025-24015.md): Deno's AES GCM authentication tags are not verified (CVSS 7.7, denoland deno · deno +1)
- [CVE-2025-5543](https://cve.now/CVE-2025-5543.md): TOTOLINK X2000R Parent Controls Page cross site scripting (CVSS 4.8, TOTOLINK X2000R)
- [CVE-2025-5542](https://cve.now/CVE-2025-5542.md): TOTOLINK X2000R Virtual Server Page formPortFw cross site scripting (CVSS 4.8, TOTOLINK X2000R)
- [CVE-2025-49000](https://cve.now/CVE-2025-49000.md): InvenTree has uncontrolled memory allocation via built-in label-sheet plugin (CVSS 3.5, InvenTree)
- [CVE-2025-48951](https://cve.now/CVE-2025-48951.md): Auth0-PHP SDK Deserialization of Untrusted Data vulnerability (CVSS 9.3, auth0-PHP · auth0/auth0-php)
- [CVE-2025-49002](https://cve.now/CVE-2025-49002.md): Dataease H2 Database Remote Code Execution (RCE) Bypass Vulnerability (CVSS 8.2, dataease)
- [CVE-2025-49001](https://cve.now/CVE-2025-49001.md): Dataease Authentication Bypass Vulnerability (CVSS 7.7, dataease)
- [CVE-2025-48999](https://cve.now/CVE-2025-48999.md): Dataease Redshift Data Source JDBC Connection Parameters Not Verified Leads to RCE Vulnerability (CVSS 6.8, dataease)
- [CVE-2025-5527](https://cve.now/CVE-2025-5527.md): Tenda RX3 SetStaticRouteCfg save\_staticroute\_data stack-based overflow (CVSS 8.7, Tenda RX3)
- [CVE-2025-5525](https://cve.now/CVE-2025-5525.md): Jrohy trojan linux.go LogChan os command injection (CVSS 6.3, Jrohy trojan)
- [CVE-2025-5523](https://cve.now/CVE-2025-5523.md): enilu web-flash File Upload upload fileService.upload cross site scripting (CVSS 5.1, enilu web-flash)
- [CVE-2025-35036](https://cve.now/CVE-2025-35036.md): hibernate-validator insecure default Expression Language interpolation (CVSS 7.3, Hibernate Validator · org.hibernate.validator:hibernate-… +1)
- [CVE-2025-5522](https://cve.now/CVE-2025-5522.md): jack0240 魏 bskms 蓝天幼儿园管理系统 User Creation addUser improper authorization (CVSS 6.9, jack0240 魏 bskms 蓝天幼儿园管理系统)
- [CVE-2025-5521](https://cve.now/CVE-2025-5521.md): WuKongOpenSource WukongCRM updataPassword cross-site request forgery (CVSS 5.3, WuKongOpenSource WukongCRM)
- [CVE-2025-48998](https://cve.now/CVE-2025-48998.md): Dataease MYSQL JDBC File Reading Vulnerability (CVSS 7.3, dataease)
- [CVE-2025-48997](https://cve.now/CVE-2025-48997.md): Multer vulnerable to Denial of Service via unhandled exception (CVSS 8.7, expressjs multer · multer)
- [CVE-2025-48953](https://cve.now/CVE-2025-48953.md): Umbraco Vulnerable to By-Pass of Configured Allowed Extensions for File Uploads (CVSS 5.5, Umbraco-CMS · Umbraco.Cms)
- [CVE-2025-48950](https://cve.now/CVE-2025-48950.md): MaxKB Python Sandbox Bypass in Function Library (CVSS 5.8, 1Panel-dev MaxKB)
- [CVE-2025-5520](https://cve.now/CVE-2025-5520.md): Open5GS AMF/MME emm\_state\_authentication assertion (CVSS 6.9, Open5GS)
- [CVE-2025-5516](https://cve.now/CVE-2025-5516.md): TOTOLINK X2000R URL Filtering Page formFilter cross site scripting (CVSS 4.8, TOTOLINK X2000R)
- [CVE-2025-30360](https://cve.now/CVE-2025-30360.md): webpack-dev-server users' source code may be stolen when they access a malicious web site with non-Chromium based browser (CVSS 6.5, webpack-dev-server)
- [CVE-2025-30359](https://cve.now/CVE-2025-30359.md): webpack-dev-server users' source code may be stolen when they access a malicious web site (CVSS 5.3, webpack-dev-server)
- [CVE-2025-5515](https://cve.now/CVE-2025-5515.md): TOTOLINK X2000R formMapDel command injection (CVSS 5.3, TOTOLINK X2000R)
- [CVE-2025-5513](https://cve.now/CVE-2025-5513.md): quequnlong shiyi-blog add cross site scripting (CVSS 5.1, quequnlong shiyi-blog)
- [CVE-2025-5512](https://cve.now/CVE-2025-5512.md): quequnlong shiyi-blog Administrator Backend verifyPassword improper authentication (CVSS 6.9, quequnlong shiyi-blog)
- [CVE-2025-5511](https://cve.now/CVE-2025-5511.md): quequnlong shiyi-blog photos improper authorization (CVSS 6.9, quequnlong shiyi-blog)
- [CVE-2025-30167](https://cve.now/CVE-2025-30167.md): Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability (CVSS 7.3, jupyter\_core · jupyter-core)
- [CVE-2025-5510](https://cve.now/CVE-2025-5510.md): quequnlong shiyi-blog optimize server-side request forgery (CVSS 5.3, quequnlong shiyi-blog)
- [CVE-2025-5509](https://cve.now/CVE-2025-5509.md): quequnlong shiyi-blog upload path traversal (CVSS 5.3, quequnlong shiyi-blog)
- [CVE-2025-5508](https://cve.now/CVE-2025-5508.md): TOTOLINK A3002RU IP Port Filtering Page cross site scripting (CVSS 4.8, TOTOLINK A3002RU)
- [CVE-2025-5507](https://cve.now/CVE-2025-5507.md): TOTOLINK A3002RU MAC Filtering Page cross site scripting (CVSS 4.8, TOTOLINK A3002RU)
- [CVE-2025-25020](https://cve.now/CVE-2025-25020.md): IBM QRadar Suite Software and IBM Cloud Pak for Security improper input validation (CVSS 6.5, IBM QRadar Suite Software · IBM Cloud Pak for Security)
- [CVE-2025-1334](https://cve.now/CVE-2025-1334.md): IBM QRadar Suite Software and IBM Cloud Pak for Security information disclosure (CVSS 4.0, IBM QRadar Suite Software · IBM Cloud Pak for Security)
- [CVE-2025-25021](https://cve.now/CVE-2025-25021.md): IBM QRadar Suite Software and IBM Cloud Pak for Security code injection (CVSS 7.2, IBM QRadar Suite Software · IBM Cloud Pak for Security)
- [CVE-2025-25022](https://cve.now/CVE-2025-25022.md): IBM QRadar Suite Software and IBM Cloud Pak for Security information disclosure (CVSS 9.6, IBM QRadar Suite Software · IBM Cloud Pak for Security)
- [CVE-2025-25019](https://cve.now/CVE-2025-25019.md): IBM QRadar Suite Software and IBM Cloud Pak for Security session fixation (CVSS 4.8, IBM QRadar Suite Software · IBM Cloud Pak for Security)
- [CVE-2025-5506](https://cve.now/CVE-2025-5506.md): TOTOLINK A3002RU NAT Mapping Page cross site scripting (CVSS 4.8, TOTOLINK A3002RU)
- [CVE-2025-5505](https://cve.now/CVE-2025-5505.md): TOTOLINK A3002RU Virtual Server Page formPortFw cross site scripting (CVSS 4.8, TOTOLINK A3002RU)
- [CVE-2024-45655](https://cve.now/CVE-2024-45655.md): IBM Application Gateway incorrect permission assignment (CVSS 5.5, IBM Application Gateway)
- [CVE-2025-46548](https://cve.now/CVE-2025-46548.md): Apache Pekko Management, Apache Pekko Management, Apache Pekko Management, Akka Management, Akka Management, Akka Management: management API basic authentication is not effective (CVSS 6.5, Apache Software Foundation Apache Pekko Management · Lig… +6)
- [CVE-2025-36564](https://cve.now/CVE-2025-36564.md): Dell Encryption Admin Utilities versions prior to 11.10.2 contain an Improper Link Resolution vulnerability. (CVSS 7.8, Dell Encryption Admin Utilities)
- [CVE-2025-5504](https://cve.now/CVE-2025-5504.md): TOTOLINK X2000R formWsc command injection (CVSS 5.3, TOTOLINK X2000R)
- [CVE-2025-5503](https://cve.now/CVE-2025-5503.md): TOTOLINK X15 formMapReboot stack-based overflow (CVSS 8.7, TOTOLINK X15)
- [CVE-2025-5502](https://cve.now/CVE-2025-5502.md): TOTOLINK X15 formMapReboot command injection (CVSS 5.3, TOTOLINK X15)
- [CVE-2025-5501](https://cve.now/CVE-2025-5501.md): Open5GS NGAP PathSwitchRequest Message ngap-handler.c ngap\_handle\_path\_switch\_request\_transfer assertion (CVSS 6.9, Open5GS)
- [CVE-2025-5499](https://cve.now/CVE-2025-5499.md): slackero phpwcms image\_resized.php getimagesize deserialization (CVSS 6.9, slackero phpwcms)
- [CVE-2025-5498](https://cve.now/CVE-2025-5498.md): slackero phpwcms Custom Source Tab cnt21.readform.inc.php is\_file deserialization (CVSS 5.1, slackero phpwcms)
- [CVE-2025-5497](https://cve.now/CVE-2025-5497.md): slackero phpwcms Feedimport processing.inc.php deserialization (CVSS 5.3, slackero phpwcms)
- [CVE-2024-12718](https://cve.now/CVE-2024-12718.md): Bypass extraction filter to modify file metadata outside extraction directory (CVSS 5.3, Python Software Foundation CPython)
- [CVE-2025-4435](https://cve.now/CVE-2025-4435.md): Tarfile extracts filtered members when errorlevel=0 (CVSS 7.5, Python Software Foundation CPython)
- [CVE-2025-4138](https://cve.now/CVE-2025-4138.md): Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory (CVSS 7.5, Python Software Foundation CPython)
- [CVE-2025-4330](https://cve.now/CVE-2025-4330.md): Extraction filter bypass for linking outside extraction directory (CVSS 7.5, Python Software Foundation CPython)
- [CVE-2025-4517](https://cve.now/CVE-2025-4517.md): Arbitrary writes via tarfile realpath overflow (CVSS 9.4, Python Software Foundation CPython)
- [CVE-2025-5495](https://cve.now/CVE-2025-5495.md): Netgear WNR614 URL improper authentication (CVSS 6.9, Netgear WNR614)
- [CVE-2025-4205](https://cve.now/CVE-2025-4205.md): Popup Maker \<= 1.20.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via popupID Parameter (CVSS 6.4, danieliser Popup Maker – Boost Sales, Conversions, Optins,…)
- [CVE-2025-4671](https://cve.now/CVE-2025-4671.md): Profile Builder \<= 3.13.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via user\_meta and compare Shortcodes (CVSS 6.4, cozmoslabs User Profile Builder – Beautiful User Registrati…)
- [CVE-2025-5340](https://cve.now/CVE-2025-5340.md): Music Player for Elementor \<= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via album\_buy\_url Parameter (CVSS 6.4, smartwpress Music Player for Elementor – Audio Player & Pod…)
- [CVE-2025-5493](https://cve.now/CVE-2025-5493.md): Baison Channel Middleware Product ToJsonByControlName sql injection (CVSS 5.3, Baison Channel Middleware Product)
- [CVE-2025-5492](https://cve.now/CVE-2025-5492.md): D-Link DI-500WF-WT /usr/sbin/jhttpd msp\_info.htm sub\_456DE8 command injection (CVSS 5.3, D-Link DI-500WF-WT)
- [CVE-2024-52561](https://cve.now/CVE-2024-52561.md): A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740). (CVSS 7.8, Parallels Desktop for Mac)
- [CVE-2024-54189](https://cve.now/CVE-2024-54189.md): A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740). (CVSS 7.8, Parallels Desktop for Mac)
- [CVE-2024-36486](https://cve.now/CVE-2024-36486.md): A privilege escalation vulnerability exists in the virtual machine archive restoration functionality of Parallels Desktop for Mac version 20 (CVSS 7.8, Parallels Desktop for Mac)
- [CVE-2025-31359](https://cve.now/CVE-2025-31359.md): A directory traversal vulnerability exists in the PVMP package unpacking functionality of Parallels Desktop for Mac version 20.2.2 (55879). (CVSS 8.8, Parallels Desktop for Mac)
- [CVE-2025-4392](https://cve.now/CVE-2025-4392.md): Shared Files \<= 1.7.48 - Unauthenticated Stored Cross-Site Scripting via sanitize\_file Function (CVSS 7.2, anssilaitila Shared Files – Frontend File Upload Form & Sec…)
- [CVE-2025-5103](https://cve.now/CVE-2025-5103.md): Ultimate Gift Cards for WooCommerce \<= 3.1.4 - Authenticated (Administrator+) SQL Injection via wps\_wgm\_save\_post Function (CVSS 4.9, wpswings Ultimate Gift Cards for WooCommerce)
- [CVE-2025-5116](https://cve.now/CVE-2025-5116.md): WP Plugin Info Card \<= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via containerid Parameter (CVSS 6.4, brikou WP Plugin Info Card)
- [CVE-2025-4420](https://cve.now/CVE-2025-4420.md): Vayu Blocks \<= 1.3.1 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via containerWidth Parameter (CVSS 6.4, themehunk Vayu Blocks – Website Builder for the Block Editor)
- [CVE-2025-1725](https://cve.now/CVE-2025-1725.md): Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress \<= 6.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Uploads (CVSS 6.4, bitpressadmin File Manager)
- [CVE-2025-46355](https://cve.now/CVE-2025-46355.md): Incorrect default permissions issue in PC Time Tracer prior to 5.2. (CVSS 7.3, Keiyo System Co. PC Time Tracer)
- [CVE-2025-41428](https://cve.now/CVE-2025-41428.md): Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in TimeWorks 10.0 to 10.3. (CVSS 5.3, Keiyo System Co. TimeWorks)
- [CVE-2025-21479](https://cve.now/CVE-2025-21479.md): Incorrect Authorization in Graphics (CVSS 8.6, KEV, Qualcomm Snapdragon)
- [CVE-2025-4567](https://cve.now/CVE-2025-4567.md): Post Slider and Carousel with Widget \< 3.2.10 - Admin+ Stored XSS (CVSS 4.8, Post Slider and Post Carousel with Post Vertical Scrolling…)
- [CVE-2025-3662](https://cve.now/CVE-2025-3662.md): FancyBox for WordPress \< 3.3.6 - Unauthenticated Stored XSS (CVSS 6.1, FancyBox for WordPress)
- [CVE-2025-3584](https://cve.now/CVE-2025-3584.md): Newsletter \< 8.8.2 - Admin+ Stored XSS via Subscription (CVSS 4.8, Newsletter)
- [CVE-2025-27038](https://cve.now/CVE-2025-27038.md): Use After Free in Graphics (CVSS 7.5, KEV, Qualcomm Snapdragon)
- [CVE-2025-27031](https://cve.now/CVE-2025-27031.md): Use After Free in Bluetooth HOST (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-27029](https://cve.now/CVE-2025-27029.md): Buffer Over-read in WLAN HAL (CVSS 7.5, Qualcomm Snapdragon)
- [CVE-2025-21486](https://cve.now/CVE-2025-21486.md): Untrusted Pointer Dereference in DSP Service (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-21485](https://cve.now/CVE-2025-21485.md): Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-21480](https://cve.now/CVE-2025-21480.md): Incorrect Authorization in Graphics Windows (CVSS 8.6, KEV, Qualcomm Snapdragon)
- [CVE-2025-21463](https://cve.now/CVE-2025-21463.md): Buffer Over-read in WLAN Host Communication (CVSS 7.5, Qualcomm Snapdragon)
- [CVE-2024-53026](https://cve.now/CVE-2024-53026.md): Buffer Over-read in Data Network Stack & Connectivity (CVSS 8.2, Qualcomm Snapdragon)
- [CVE-2024-53021](https://cve.now/CVE-2024-53021.md): Buffer Over-read in Data Network Stack & Connectivity (CVSS 8.2, Qualcomm Snapdragon)
- [CVE-2024-53020](https://cve.now/CVE-2024-53020.md): Buffer Over-read in Data Network Stack & Connectivity (CVSS 8.2, Qualcomm Snapdragon)
- [CVE-2024-53019](https://cve.now/CVE-2024-53019.md): Buffer Over-read in Data Network Stack & Connectivity (CVSS 8.2, Qualcomm Snapdragon)
- [CVE-2024-53018](https://cve.now/CVE-2024-53018.md): Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver (CVSS 6.6, Qualcomm Snapdragon)
- [CVE-2024-53017](https://cve.now/CVE-2024-53017.md): Use of Out-of-range Pointer Offset in Camera Driver (CVSS 6.6, Qualcomm Snapdragon)
- [CVE-2024-53016](https://cve.now/CVE-2024-53016.md): Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver (CVSS 6.6, Qualcomm Snapdragon)
- [CVE-2024-53015](https://cve.now/CVE-2024-53015.md): Use After Free in Computer Vision (CVSS 6.6, Qualcomm Snapdragon)
- [CVE-2024-53013](https://cve.now/CVE-2024-53013.md): Buffer Copy Without Checking Size of Input in Audio (CVSS 6.6, Qualcomm Snapdragon)
- [CVE-2024-53010](https://cve.now/CVE-2024-53010.md): Improper Access Control in Core (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-31712](https://cve.now/CVE-2025-31712.md): In cplog service, there is a possible out of bounds write due to a missing bounds check. (CVSS 5.1, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2025-31711](https://cve.now/CVE-2025-31711.md): In cplog service, there is a possible system crash due to null pointer dereference. (CVSS 5.1, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2025-31710](https://cve.now/CVE-2025-31710.md): In engineermode service, there is a possible command injection due to improper input validation. (CVSS 5.9, Unisoc (Shanghai) Technologies Co. SC9863A/T606/T612/T616/T…)
- [CVE-2025-4797](https://cve.now/CVE-2025-4797.md): Golo \<= 1.7.0 - Authentication Bypass to Account Takeover (CVSS 9.8, uxper Golo - City Travel Guide WordPress Theme)
- [CVE-2025-4224](https://cve.now/CVE-2025-4224.md): wpForo + wpForo Advanced Attachments \<= 3.1.3 - Unauthenticated Stored Cross-Site Scripting (CVSS 7.2, gVectors wpForo + wpForo Advanced Attachments)
- [CVE-2025-2939](https://cve.now/CVE-2025-2939.md): Ninja Tables – Easy Data Table Builder \<= 5.0.18 - Unauthenticated PHP Object Injection to Limited Remote Code Execution (CVSS 5.6, techjewel Ninja Tables – Easy Data Table Builder)
- [CVE-2025-4047](https://cve.now/CVE-2025-4047.md): Broken Link Checker \<= 2.4.4 - Missing Autorization to Authenticated (Subscriber+) Plugin Status Dashboard View (CVSS 4.3, wpmudev Broken Link Checker)
- [CVE-2025-23097](https://cve.now/CVE-2025-23097.md): An issue was discovered in Samsung Mobile Processor Exynos 1380. (CVSS 9.1)
- [CVE-2025-23098](https://cve.now/CVE-2025-23098.md): An issue was discovered in Samsung Mobile Processor Exynos 980, 990, 1080, 2100, 1280, 2200, 1380. (CVSS 7.8)
- [CVE-2025-23100](https://cve.now/CVE-2025-23100.md): An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400. (CVSS 7.5)
- [CVE-2025-23102](https://cve.now/CVE-2025-23102.md): An issue was discovered in Samsung Mobile Processor Exynos 980, 990, 1080, 2100, 1280, 2200, 1380, 1480 and 2400. (CVSS 8.8)
- [CVE-2025-23103](https://cve.now/CVE-2025-23103.md): An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. (CVSS 8.6)
- [CVE-2025-23107](https://cve.now/CVE-2025-23107.md): An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. (CVSS 8.6)
- [CVE-2025-32105](https://cve.now/CVE-2025-32105.md): A buffer overflow in the the Sangoma IMG2020 HTTP server through 2.3.9.6 allows an unauthenticated user to achieve remote code execution. (CVSS 9.8)
- [CVE-2025-32106](https://cve.now/CVE-2025-32106.md): In Audiocodes Mediapack MP-11x through 6.60A.369.002, a crafted POST request request may result in an unauthenticated remote user's ability (CVSS 9.8)
- [CVE-2025-43923](https://cve.now/CVE-2025-43923.md): An issue was discovered in ReportController in Unicom Focal Point 7.6.1. (CVSS 6.5)
- [CVE-2025-43924](https://cve.now/CVE-2025-43924.md): Cross Site Scripting vulnerability was discovered in Unicom Focal Point 7.6.1. (CVSS 6.1)
- [CVE-2025-43925](https://cve.now/CVE-2025-43925.md): An issue was discovered in Unicom Focal Point 7.6.1. (CVSS 4.6)
- [CVE-2025-44148](https://cve.now/CVE-2025-44148.md): Cross Site Scripting (XSS) vulnerability in MailEnable before v10 allows a remote attacker to execute arbitrary code via the failure.aspx co (CVSS 9.8)
- [CVE-2025-45854](https://cve.now/CVE-2025-45854.md): /server/executeExec of JEHC-BPM 2.0.1 allows attackers to execute arbitrary code via execParams. (CVSS 10.0, JEHC-BPM)
- [CVE-2025-45855](https://cve.now/CVE-2025-45855.md): An arbitrary file upload vulnerability in the component /upload/GoodsCategory/image of erupt v1.12.19 allows attackers to execute arbitrary (CVSS 5.4, xyz.erupt:erupt)
- [CVE-2025-46154](https://cve.now/CVE-2025-46154.md): Foxcms v1.25 has a SQL time injection in the $\_POST\['dbname'\] parameter of installdb.php. (CVSS 8.4)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-06-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.