CVEs published June 9, 2025
180 CVEs were published on June 9, 2025: 24 critical, 93 high.
- Published
- 180
- Critical
- 24
- High
- 93
- Medium
- 57
- Low
- 6
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 47
Most affected products
- CyberData 011209 SIP Emergency Intercom
- 5
- RT-Thread
- 5
- Holest Engineering Spreadsheet Price Changer for WooCommerc…
- 4
- libarchive · Red Hat Enterprise Linux +1
- 4
- Tenda AC6
- 4
- discourse
- 3
- Lablup BackendAI · backend-ai
- 3
- ManageEngine ADAudit Plus
- 3
- TCMAN GIM
- 3
- TOTOLINK T10
- 3
Critical 24
- CVE-2025-30515CyberData 011209 SIP Emergency Intercom Path TraversalCyberData 011209 SIP Emergency Intercom
- CVE-2025-30184CyberData 011209 SIP Emergency Intercom Authentication Bypass Using an Alternate Path or ChannelCyberData 011209 SIP Emergency Intercom
- CVE-2025-49652Improper access control allows arbitrary account creationLablup BackendAI · backend-ai
- CVE-2025-49136listmonk's Sprig template Injection vulnerability leads to reading of Environment Variable for low privilege userknadh listmonk · github.com/knadh/listmonk
- CVE-2025-24767WordPress TicketBAI Facturas para WooCommerce plugin <= 3.19 - SQL Injection Vulnerabilityfacturaone TicketBAI Facturas para WooCommerce
- CVE-2025-31022WordPress PayU India plugin < 3.8.8 - Account Takeover vulnerabilityPayU India
- CVE-2025-31039WordPress Category Icon plugin <= 1.0.3 - XML External Entity (XXE) vulnerabilitypixelgrade Category Icon
- CVE-2025-31052WordPress The Fashion - Model Agency One Page Beauty Theme plugin <= 1.4.4 - Deserialization of untrusted data Vulnerabilitythemeton The Fashion - Model Agency One Page Beauty Theme
- CVE-2025-31059WordPress WBW Product Table PRO plugin <= 2.2.6 - SQL Injection vulnerabilitywoobewoo WBW Product Table PRO
- CVE-2025-31396WordPress FLAP - Business WordPress Theme <= 1.5 - PHP Object Injection Vulnerabilitythemeton FLAP - Business WordPress Theme
- CVE-2025-31398WordPress PIMP - Creative MultiPurpose <= 1.7 - Deserialization of untrusted data Vulnerabilitythemeton PIMP - Creative MultiPurpose
- CVE-2025-31424WordPress WP Lead Capturing Pages plugin < 2.6 - SQL Injection vulnerabilitykamleshyadav WP Lead Capturing Pages
- CVE-2025-31429WordPress PressGrid - Frontend Publish Reaction & Multimedia Theme <= 1.3.1 - Deserialization of untrusted data Vulnerabilitythemeton PressGrid - Frontend Publish Reaction & Multimedia…
- CVE-2025-32291WordPress SUMO Affiliates Pro plugin < 11.1.0 - Arbitrary File Upload vulnerabilityFantasticPlugins SUMO Affiliates Pro
- CVE-2025-47608WordPress Recover abandoned cart for WooCommerce plugin <= 2.5 - SQL Injection Vulnerabilitysonalsinha21 Recover abandoned cart for WooCommerce
- CVE-2025-48122WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - SQL Injection VulnerabilityHolest Engineering Spreadsheet Price Changer for WooCommerc…
- CVE-2025-48123WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - Remote Code Execution (RCE) VulnerabilityHolest Engineering Spreadsheet Price Changer for WooCommerc…
- CVE-2025-48129WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - Privilege Escalation VulnerabilityHolest Engineering Spreadsheet Price Changer for WooCommerc…
- CVE-2025-48140WordPress MetalpriceAPI plugin <= 1.1.4 - Remote Code Execution (RCE) VulnerabilityMetalpriceAPI
- CVE-2025-48141WordPress Multi CryptoCurrency Payments plugin <= 2.0.7 - SQL Injection VulnerabilityAlex Zaytseff Multi CryptoCurrency Payments
- CVE-2025-48281WordPress MyStyle Custom Product Designer plugin <= 3.21.1 - SQL Injection Vulnerabilitymystyleplatform MyStyle Custom Product Designer
- CVE-2025-49013WilderForge vulnerable to code Injection via GitHub Actions WorkflowsWilderForge
- CVE-2025-3835Remote Code ExecutionManageEngine Exchange Reporter Plus
- CVE-2025-5893Honding Technology Smart Parking Management System - Exposure of Sensitive InformationHonding Technology Smart Parking Management System
High 93
- CVE-2025-5903TOTOLINK T10 POST Request cstecgi.cgi setWiFiAclRules buffer overflowTOTOLINK T10
- CVE-2025-5902TOTOLINK T10 POST Request cstecgi.cgi setUpgradeFW buffer overflowTOTOLINK T10
- CVE-2025-5901TOTOLINK T10 POST Request cstecgi.cgi UploadCustomModule buffer overflowTOTOLINK T10
- CVE-2025-30183CyberData 011209 SIP Emergency Intercom Insufficiently Protected CredentialsCyberData 011209 SIP Emergency Intercom
- CVE-2025-26468CyberData 011209 SIP Emergency Intercom Missing Authentication for Critical FunctionCyberData 011209 SIP Emergency Intercom
- CVE-2025-49140Pion Interceptor's improper RTP padding handling allows remote crash for SFU users (DoS)pion interceptor · github.com/pion/interceptor
- CVE-2025-49141HaxCMS-PHP Command Injection Vulnerabilityhaxtheweb issues · @haxtheweb/haxcms-nodejs
- CVE-2025-49137Hax CMS Stored Cross-Site Scripting vulnerabilityhaxtheweb issues · elmsln/haxcms
- CVE-2025-49004Hijacking Caido instance during the initial setup via DNS Rebinding to achieve RCEcaido
- CVE-2025-5914Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.clibarchive · Red Hat Enterprise Linux +11
- CVE-2025-49653Exposure of sensitive Information allows account takeoverLablup BackendAI · backend-ai
- CVE-2025-49651Missing Authorization for Interactive SessionsLablup BackendAI · backend-ai
- CVE-2023-25999WordPress BodyCenter - Gym, Fitness WooCommerce WordPress Theme <= 2.4 - Local File Inclusion Vulnerabilitysnstheme BodyCenter - Gym, Fitness WooCommerce WordPress Th…
- CVE-2023-26005WordPress Fitrush <= 1.3.4 - Local File Inclusion VulnerabilityBZOTheme Fitrush
- CVE-2025-23974WordPress One-Login plugin <= 1.4 - Privilege Escalation Vulnerabilityifkooo One-Login
- CVE-2025-24768WordPress Nitan theme <= 2.9 - Local File Inclusion Vulnerabilitysnstheme Nitan
- CVE-2025-24770WordPress CraftXtore theme <= 1.7 - Local File Inclusion VulnerabilityBZOTheme CraftXtore
- CVE-2025-26592WordPress Lab Theme <= 1.0.0 - Local File Inclusion Vulnerabilityaxiomthemes Lab
- CVE-2025-27362WordPress Petito theme < 1.6.6 - Local File Inclusion vulnerabilityBZOTheme Petito
- CVE-2025-28888WordPress GiftXtore theme < 1.7.7 - Local File Inclusion vulnerabilityBZOTheme GiftXtore
- CVE-2025-28944WordPress Avaz theme <= 2.8 - Local File Inclusion Vulnerabilitysnstheme Avaz
- CVE-2025-28945WordPress Valen - Sport, Fashion WooCommerce WordPress Theme <= 2.4 - Local File Inclusion Vulnerabilitysnstheme Valen - Sport, Fashion WooCommerce WordPress Theme
- CVE-2025-28992WordPress SNS Anton theme <= 4.1 - Local File Inclusion Vulnerabilitysnstheme SNS Anton
- CVE-2025-31019WordPress Password Policy Manager plugin <= 2.0.4 - Account Takeover vulnerabilityminiOrange Password Policy Manager
- CVE-2025-31045WordPress elfsight Contact Form widget plugin <= 2.3.1 - Sensitive Data Exposure Vulnerabilityelfsight Contact Form widget
- CVE-2025-31050WordPress Apptha Slider Gallery plugin <= 2.5 - Arbitrary File Read vulnerabilityappthaplugins Apptha Slider Gallery
- CVE-2025-31057WordPress Universal Video Player plugin <= 1.4.0 - Reflected Cross Site Scripting (XSS) vulnerabilityLambertGroup Universal Video Player
- CVE-2025-31058WordPress Revolution Video Player plugin <= 2.9.2 - Reflected Cross Site Scripting (XSS) vulnerabilityLambertGroup Revolution Video Player
- CVE-2025-31061WordPress Wishlist plugin <= 2.1.0 - Reflected Cross Site Scripting (XSS) vulnerabilityredqteam Wishlist
- CVE-2025-31426WordPress Sticky Radio Player plugin <= 3.4 - Reflected Cross Site Scripting (XSS) vulnerabilityLambertGroup Sticky Radio Player
- CVE-2025-31635WordPress CLEVER plugin <= 2.6 - Arbitrary File Download VulnerabilityLambertGroup CLEVER
- CVE-2025-31638WordPress Spare <= 1.7 - Cross Site Scripting (XSS) Vulnerabilitythemeton Spare
- CVE-2025-31917WordPress Universal Video Player plugin <= 3.8.3 - Reflected Cross Site Scripting (XSS) vulnerabilityLambertGroup Universal Video Player
- CVE-2025-31920WordPress WP Guppy plugin <= 4.3.3 - SQL Injection VulnerabilityAmentoTech WP Guppy
- CVE-2025-31925WordPress SHOUT plugin <= 3.5.3 - Reflected Cross Site Scripting (XSS) vulnerabilityLambertGroup SHOUT
- CVE-2025-32305WordPress FlatNews theme <= 5.8 - Reflected Cross Site Scripting (XSS) vulnerabilitySneeit WordPress FlatNews Theme
- CVE-2025-32308WordPress Team Builder plugin <= 1.5.7 - Broken Access Control Vulnerabilitylooks_awesome Team Builder
- CVE-2025-32595WordPress Krowd theme < 1.5.0 - Local File Inclusion vulnerabilitygavias Krowd
- CVE-2025-39473WordPress Seofy Core plugin <= 1.6.8 - Local File Inclusion VulnerabilityWebGeniusLab Seofy Core
- CVE-2025-39475WordPress Arlo theme <= 6.0.3 - Local File Inclusion VulnerabilityFrenify Arlo
- CVE-2025-39476WordPress Revo theme <= 4.0.26 - Local File Inclusion Vulnerabilitymagentech Revo
- CVE-2025-39539WordPress WP Email Delivery plugin <= 1.20.11.23 - Reflected Cross Site Scripting (XSS) vulnerabilitybrewlabs WP Email Delivery
- CVE-2025-47463WordPress Stock Locations for WooCommerce plugin <= 2.8.6 - Broken Access Control VulnerabilityFahad Mahmood Stock Locations for WooCommerce
- CVE-2025-47477WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.23 - Reflected Cross Site Scripting (XSS) vulnerabilityrevmakx Backup and Staging by WP Time Capsule
- CVE-2025-47487WordPress MC Woocommerce Wishlist plugin <= 1.9.1 - Cross Site Scripting (XSS) VulnerabilityMoreconvert Team MC Woocommerce Wishlist
- CVE-2025-47527WordPress Icegram Collect – Easy Form, Lead Collection and Subscription plugin <= 1.3.18 - Broken Access Control VulnerabilityIcegram Collect
- CVE-2025-47561WordPress MapSVG plugin < 8.6.13 - Privilege Escalation VulnerabilityRomanCode MapSVG
- CVE-2025-47651WordPress Infility Global plugin <= 2.15.06 - SQL Injection vulnerabilityInfility Global
- CVE-2025-48124WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - Arbitrary File Download VulnerabilityHolest Engineering Spreadsheet Price Changer for WooCommerc…
- CVE-2025-48125WordPress WP Event Manager plugin <= 3.1.51 - Local File Inclusion VulnerabilityWP Event Manager
- CVE-2025-48126WordPress Essential Real Estate plugin <= 5.2.9 - Local File Inclusion vulnerabilityg5theme Essential Real Estate
- CVE-2025-48130WordPress Spice Blocks plugin <= 2.0.7.4 - Arbitrary File Download vulnerabilityspicethemes Spice Blocks
- CVE-2025-48143WordPress Formulario de contacto SalesUp! plugin <= 1.0.14 - Reflected Cross Site Scripting (XSS) vulnerabilitysalesup2019 Formulario de contacto SalesUp!
- CVE-2025-48261WordPress MultiVendorX plugin <= 4.2.22 - Sensitive Data Exposure VulnerabilityMultiVendorX
- CVE-2025-48267WordPress WP Pipes plugin <= 1.4.2 - Arbitrary File Deletion VulnerabilityThimPress WP Pipes
- CVE-2025-48279WordPress WC MyParcel Belgium plugin <= 4.5.5-beta - Reflected Cross Site Scripting (XSS) vulnerabilityRichard Perdaan WC MyParcel Belgium
- CVE-2025-49265WordPress Membership For WooCommerce plugin <= 2.8.1 - Broken Access Control VulnerabilityWP Swings Membership For WooCommerce
- CVE-2025-49275WordPress Blogbyte theme <= 1.1.1 - Local File Inclusion Vulnerabilityunfoldwp Blogbyte
- CVE-2025-49276WordPress Blogmine theme <= 1.1.7 - Local File Inclusion Vulnerabilityunfoldwp Blogmine
- CVE-2025-49277WordPress Blogprise theme <= 1.0.9 - Local File Inclusion Vulnerabilityunfoldwp Blogprise
- CVE-2025-49278WordPress Blogty theme <= 1.0.11 - Local File Inclusion Vulnerabilityunfoldwp Blogty
- CVE-2025-49279WordPress Blogvy theme <= 1.0.7 - Local File Inclusion Vulnerabilityunfoldwp Blogvy
- CVE-2025-49280WordPress Magty theme <= 1.0.6 - Local File Inclusion Vulnerabilityunfoldwp Magty
- CVE-2025-49281WordPress Magways theme <= 1.2.1 - Local File Inclusion Vulnerabilityunfoldwp Magways
- CVE-2025-49282WordPress Magze theme <= 1.0.9 - Local File Inclusion Vulnerabilityunfoldwp Magze
- CVE-2025-49295WordPress MediClinic theme <= 2.1 - Local File Inclusion VulnerabilityMikado-Themes MediClinic
- CVE-2025-49296WordPress GrandPrix theme <= 1.6 - Local File Inclusion VulnerabilityMikado-Themes GrandPrix
- CVE-2025-49297WordPress Grill and Chow theme <= 1.6 - Local File Inclusion VulnerabilityMikado-Themes Grill and Chow
- CVE-2025-49006Wasp has case insensitive OAuth ID vulnerabilitywasp-lang wasp
- CVE-2025-48877Discourse vulnerable to auto-executing of third-party code in embedded CodePen iframediscourse
- CVE-2025-48062Discourse vulnerable to HTML injection when inviting to topic via emaildiscourse
- CVE-2025-48053Discourse vulnerable to DoS via large URL payload in PM to a botdiscourse
- CVE-2025-40670Incorrect Authorization vulnerability in TCMAN GIMTCMAN GIM
- CVE-2025-40669Incorrect Authorization vulnerability in TCMAN GIMTCMAN GIM
- CVE-2025-40668Incorrect Authorization vulnerability in TCMAN GIMTCMAN GIM
- CVE-2025-5875TP-LINK Technologies TL-IPC544EP-W4 main sub_69064 buffer overflowTP-LINK Technologies TL-IPC544EP-W4
- CVE-2025-41444SQL InjectionManageEngine ADAudit Plus
- CVE-2025-36528SQL InjectionManageEngine ADAudit Plus
- CVE-2025-27709SQL InjectionManageEngine ADAudit Plus
- CVE-2025-5869RT-Thread lwp_syscall.c sys_recvfrom memory corruptionRT-Thread
- CVE-2025-5868RT-Thread lwp_syscall.c sys_thread_sigprocmask array indexRT-Thread
- CVE-2025-5894Honding Technology Smart Parking Management System - Missing AuthorizationHonding Technology Smart Parking Management System
- CVE-2025-5867RT-Thread lwp_syscall.c csys_sendto null pointer dereferenceRT-Thread
- CVE-2025-5866RT-Thread lwp_syscall.c sys_sigprocmask array indexRT-Thread
- CVE-2025-5865RT-Thread Parameter lwp_syscall.c sys_select memory corruptionRT-Thread
- CVE-2025-5863Tenda AC5 SetRebootTimer formSetRebootTimer stack-based overflowTenda AC5
- CVE-2025-5862Tenda AC7 setPptpUserList formSetPPTPUserList buffer overflowTenda AC7
- CVE-2025-5861Tenda AC7 AdvSetLanip fromadvsetlanip buffer overflowTenda AC7
- CVE-2025-5855Tenda AC6 SetRebootTimer formSetRebootTimer stack-based overflowTenda AC6
- CVE-2025-5854Tenda AC6 AdvSetLanip fromadvsetlanip buffer overflowTenda AC6
- CVE-2025-5853Tenda AC6 SetRemoteWebCfg formSetSafeWanWebMan stack-based overflowTenda AC6
- CVE-2025-5852Tenda AC6 setPptpUserList formSetPPTPUserList buffer overflowTenda AC6
- CVE-2025-45001react-native-keys 0.7.11 is vulnerable to sensitive information disclosure (remote) as encryption cipher and Base64 chunks are stored as plareact-native-keys
Medium, low and unrated 63
- CVE-2025-0036In AMD Versal Adaptive SoC devices, the incorrect configuration of the SSS during runtime (post-boot) cryptographic operations could cause dAMD Versal Adaptive SoC Devices · AMD Versal RF Series +6
- CVE-2025-0037In AMD Versal Adaptive SoC devices, the lack of address validation when executing PLM runtime services through the PLM firmware can allow acAMD Platform Loader and Manager
- CVE-2025-30507CyberData 011209 SIP Emergency Intercom SQL InjectionCyberData 011209 SIP Emergency Intercom
- CVE-2025-5900Tenda AC9 cross-site request forgeryTenda AC9
- CVE-2025-5899GNU PSPP pspp-convert.c parse_variables_option free of memory not on the heapGNU PSPP
- CVE-2025-5898GNU PSPP pspp-convert.c parse_variables_option out-of-bounds writeGNU PSPP
- CVE-2025-49139@haxtheweb/haxcms-nodejs Iframe Phishing vulnerabilityhaxtheweb issues · @haxtheweb/haxcms-nodejs
- CVE-2025-49138HAX CMS vulnerable to Local File Inclusion via saveOutline API Location Parameterhaxtheweb issues · elmsln/haxcms
- CVE-2025-5897vuejs vue-cli Markdown Code HtmlPwaPlugin.js HtmlPwaPlugin redosvuejs vue-cli · @vue/cli-plugin-pwa
- CVE-2025-5896tarojs taro index.js redostarojs taro · taro-css-to-react-native
- CVE-2025-5895Metabase dom.js parseDataUri redosMetabase
- CVE-2025-5918Libarchive: reading past eof may be triggered for piped file streamslibarchive · Red Hat Enterprise Linux +1
- CVE-2025-5917Libarchive: off by one error in build_ustar_entry_name() at archive_write_set_format_pax.clibarchive · Red Hat Enterprise Linux +1
- CVE-2025-5916Libarchive: integer overflow while reading warc files at archive_read_support_format_warc.clibarchive · Red Hat Enterprise Linux +1
- CVE-2025-5915Libarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.clibarchive · Red Hat Enterprise Linux +1
- CVE-2025-5892RocketChat parseMessage.js parseMessage redosRocketChat
- CVE-2025-5891Unitech pm2 Config.js redosUnitech pm2 · pm2
- CVE-2025-5890actions toolkit glob internal-pattern.ts globEscape redosactions toolkit
- CVE-2025-5889juliangruber brace-expansion index.js expand redosjuliangruber brace-expansion · brace-expansion
- CVE-2024-47081Requests vulnerable to .netrc credentials leak via malicious URLspsf requests · requests
- CVE-2025-5888jsnjfz WebStack-Guns cross-site request forgeryjsnjfz WebStack-Guns
- CVE-2025-5887jsnjfz WebStack-Guns File Upload UserMgrController.java cross site scriptingjsnjfz WebStack-Guns
- CVE-2025-5886Emlog article.php cross site scriptingEmlog
- CVE-2025-47511WordPress Welcart e-Commerce plugin <= 2.11.13 - Arbitrary File Deletion Vulnerabilityinfo@welcart Welcart e-Commerce
- CVE-2025-47598WordPress History Log by click5 plugin <= 1.0.13 - Cross Site Scripting (XSS) VulnerabilityHistory Log by click5
- CVE-2025-48139WordPress StyleAI plugin <= 1.0.4 - Broken Access Control Vulnerabilityrelentlo StyleAI
- CVE-2025-48147WordPress CryptoCloud - Crypto Payment Gateway plugin <= 2.1.2 - Broken Access Control vulnerabilityCrypto Cloud CryptoCloud - Crypto Payment Gateway
- CVE-2025-5885Konica Minolta bizhub cross-site request forgeryKonica Minolta bizhub
- CVE-2025-5884Konica Minolta bizhub Display MFP Information List cross site scriptingKonica Minolta bizhub
- CVE-2025-5881code-projects Chat System confirm_password.php sql injectioncode-projects Chat System
- CVE-2025-5880Whistle get-temp-file path traversalWhistle
- CVE-2025-5879WuKongOpenSource WukongCRM File Upload AdminSysConfigController.java cross site scriptingWuKongOpenSource WukongCRM
- CVE-2025-49130Laravel Translation Manager Vulnerable to Stored Cross-site Scriptingbarryvdh laravel-translation-manager · barryvdh/laravel-tra…
- CVE-2025-49131FastGPT Sandbox Vulnerable to Sandbox Bypasslabring FastGPT
- CVE-2025-5877Fengoffice Feng Office Document Upload ApplicationDataObject.class.php xml external entity referenceFengoffice Feng Office
- CVE-2025-5876Lucky LM-520-SC/LM-520-FSC/LM-520-FSC-SAM missing authenticationLucky LM-520-SC · Lucky LM-520-FSC +1
- CVE-2025-5874Redash getattr python.py run_query sandboxRedash
- CVE-2025-41437Reflected XSSManageEngine OpManager
- CVE-2025-5873eCharge Hardy Barth Salia PLCC Web UI firmware.php unrestricted uploadeCharge Hardy Barth Salia PLCC
- CVE-2025-5872eGauge EG3000 Energy Monitor Setting missing authenticationeGauge EG3000 Energy Monitor
- CVE-2025-40675Reflected Cross-Site Scripting (XSS) in BagistoBagisto
- CVE-2025-5871Papendorf SOL Connect Center Web Interface missing authenticationPapendorf SOL Connect Center
- CVE-2025-5870TRENDnet TV-IP121W Web Interface setup.cgi improper authenticationTRENDnet TV-IP121W
- CVE-2025-25209Rhcl: sharedsecretref can be used to leak secrets severityrhcl-operator-container · Red Hat Connectivity Link
- CVE-2025-25208Rhcl: authorino denial of service through authpolicy with sharedsecretref severityrhcl-operator-container · Red Hat Connectivity Link +1
- CVE-2025-25207Rhcl: authpolicy callbacks result in denial of service in authorino severityrhcl-operator-container · Red Hat Connectivity Link +1
- CVE-2025-47711Nbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of servicenbdkit · Red Hat Enterprise Linux
- CVE-2025-5864Tenda TDSEE App Password Reset Confirmation Code ConfirmSmsCode excessive authenticationTenda TDSEE App
- CVE-2025-4652Broadstreet < 1.51.8 - Reflected XSSBroadstreet
- CVE-2025-3582Newsletter < 8.8.5 - Admin+ Stored XSS via FormNewsletter
- CVE-2025-3581Newsletter < 8.8.5 - Admin+ Stored XSS via WidgetNewsletter
- CVE-2025-47712Nbd: nbdkit: integer overflow triggers an assertion resulting in denial of servicenbdkit · Red Hat Enterprise Linux
- CVE-2025-5860PHPGurukul Maid Hiring Management System search-booking-request.php sql injectionPHPGurukul Maid Hiring Management System
- CVE-2025-5859PHPGurukul Nipah Virus Testing Management System test-details.php sql injectionPHPGurukul Nipah Virus Testing Management System
- CVE-2025-5858PHPGurukul Nipah Virus Testing Management System patient-report.php sql injectionPHPGurukul Nipah Virus Testing Management System
- CVE-2025-5857code-projects Patient Record Management System urinalysis_record.php sql injectioncode-projects Patient Record Management System
- CVE-2025-5856PHPGurukul BP Monitoring Management System registration.php sql injectionPHPGurukul BP Monitoring Management System
- CVE-2024-46452A Host Header injection vulnerability in the password reset function of VigyBag Open Source Online Shop commit 3f0e21b allows attackers to r
- CVE-2025-29627An issue in KeeperChat IOS Application v.5.8.8 allows a physically proximate attacker to escalate privileges via the Biometric Authenticatio
- CVE-2025-45002Vigybag v1.0 and before is vulnerable to Cross Site Scripting (XSS) via the upload profile picture function under my profile.
- CVE-2025-45055Silverpeas 6.4.2 contains a stored cross-site scripting (XSS) vulnerability in the event management module.
- CVE-2025-46041A stored cross-site scripting (XSS) vulnerability in Anchor CMS v0.12.7 allows attackers to inject malicious JavaScript via the page descrip
- CVE-2025-46178Cross-Site Scripting (XSS) vulnerability exists in askquery.php via the eid parameter in the CloudClassroom PHP Project.