# CVEs published 2025-06-15

15 CVEs were published on June 15, 2025: 0 critical, 5 high. Days are UTC.

- [CVE-2025-6096](https://cve.now/CVE-2025-6096.md): codesiddhant Jasmin Ransomware dashboard.php sql injection (CVSS 5.3, codesiddhant Jasmin Ransomware)
- [CVE-2025-6095](https://cve.now/CVE-2025-6095.md): codesiddhant Jasmin Ransomware checklogin.php sql injection (CVSS 6.9, codesiddhant Jasmin Ransomware)
- [CVE-2025-6094](https://cve.now/CVE-2025-6094.md): qianfox FoxCMS Download.php batchCope sql injection (CVSS 5.3, qianfox FoxCMS)
- [CVE-2025-6093](https://cve.now/CVE-2025-6093.md): uYanki board-stm32f103rc-berial heartrate1\_hal.c heartrate1\_i2c\_hal\_write stack-based overflow (CVSS 5.1, uYanki board-stm32f103rc-berial)
- [CVE-2025-5964](https://cve.now/CVE-2025-5964.md): Path traversal in M-Files API (CVSS 8.4, M-Files Server)
- [CVE-2025-5990](https://cve.now/CVE-2025-5990.md): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty Controller (CVSS 7.6, Arcadia Technology Crafty Controller)
- [CVE-2025-6092](https://cve.now/CVE-2025-6092.md): comfyanonymous comfyui Incomplete Fix CVE-2024-10099 image cross site scripting (CVSS 5.3, comfyanonymous comfyui)
- [CVE-2025-6091](https://cve.now/CVE-2025-6091.md): H3C GR-3000AX aspForm UpdateIpv6Params buffer overflow (CVSS 8.7, H3C GR-3000AX)
- [CVE-2024-25573](https://cve.now/CVE-2024-25573.md): Stored Cross-Site Scripting in Administrative Console Context (CVSS 6.9, Ping Identity PingFederate)
- [CVE-2025-22854](https://cve.now/CVE-2025-22854.md): Possible thread exhaustion from processing http responses in PingFederate Google Adapter (CVSS 6.9, Ping Identity PingFederate)
- [CVE-2025-6090](https://cve.now/CVE-2025-6090.md): H3C GR-5400AX aspForm UpdateIpv6params buffer overflow (CVSS 8.7, H3C GR-5400AX)
- [CVE-2025-21085](https://cve.now/CVE-2025-21085.md): PingFederate OAuth Grant attribute duplication may use excessive memory (CVSS 2.1, Ping Identity PingFederate)
- [CVE-2025-6089](https://cve.now/CVE-2025-6089.md): Astun Technology iShare Maps atCheckJS.aspx redirect (CVSS 5.3, Astun Technology iShare Maps)
- [CVE-2025-36041](https://cve.now/CVE-2025-36041.md): IBM MQ improper certificate validation (CVSS 4.7, IBM MQ Operator)
- [CVE-2025-1411](https://cve.now/CVE-2025-1411.md): IBM Security Verify Directory Container command execution (CVSS 7.8, IBM Security Verify Directory)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-06-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.