CVEs published June 15, 2025
15 CVEs were published on June 15, 2025: 0 critical, 5 high.
- Published
- 15
- Critical
- 0
- High
- 5
- Medium
- 9
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 7
Most affected products
- Ping Identity PingFederate
- 3
- codesiddhant Jasmin Ransomware
- 2
- Arcadia Technology Crafty Controller
- 1
- Astun Technology iShare Maps
- 1
- comfyanonymous comfyui
- 1
- H3C GR-3000AX
- 1
- H3C GR-5400AX
- 1
- IBM MQ Operator
- 1
- IBM Security Verify Directory
- 1
- M-Files Server
- 1
High 5
- CVE-2025-5964Path traversal in M-Files APIM-Files Server
- CVE-2025-5990Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty ControllerArcadia Technology Crafty Controller
- CVE-2025-6091H3C GR-3000AX aspForm UpdateIpv6Params buffer overflowH3C GR-3000AX
- CVE-2025-6090H3C GR-5400AX aspForm UpdateIpv6params buffer overflowH3C GR-5400AX
- CVE-2025-1411IBM Security Verify Directory Container command executionIBM Security Verify Directory
Medium, low and unrated 10
- CVE-2025-6096codesiddhant Jasmin Ransomware dashboard.php sql injectioncodesiddhant Jasmin Ransomware
- CVE-2025-6095codesiddhant Jasmin Ransomware checklogin.php sql injectioncodesiddhant Jasmin Ransomware
- CVE-2025-6094qianfox FoxCMS Download.php batchCope sql injectionqianfox FoxCMS
- CVE-2025-6093uYanki board-stm32f103rc-berial heartrate1_hal.c heartrate1_i2c_hal_write stack-based overflowuYanki board-stm32f103rc-berial
- CVE-2025-6092comfyanonymous comfyui Incomplete Fix CVE-2024-10099 image cross site scriptingcomfyanonymous comfyui
- CVE-2024-25573Stored Cross-Site Scripting in Administrative Console ContextPing Identity PingFederate
- CVE-2025-22854Possible thread exhaustion from processing http responses in PingFederate Google AdapterPing Identity PingFederate
- CVE-2025-21085PingFederate OAuth Grant attribute duplication may use excessive memoryPing Identity PingFederate
- CVE-2025-6089Astun Technology iShare Maps atCheckJS.aspx redirectAstun Technology iShare Maps
- CVE-2025-36041IBM MQ improper certificate validationIBM MQ Operator