CVEs published June 22, 2025
38 CVEs were published on June 22, 2025: 0 critical, 2 high.
- Published
- 38
- Critical
- 0
- High
- 2
- Medium
- 36
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- code-projects Online Bidding System
- 6
- code-projects Simple Pizza Ordering System
- 5
- code-projects Online Hotel Reservation System
- 4
- code-projects Simple Online Hotel Reservation System
- 4
- TOTOLINK A3002R
- 3
- SourceCodester Student Result Management System
- 2
- sparklemotion nokogiri
- 2
- ageerle ruoyi-ai
- 1
- code-projects Inventory Management System
- 1
- code-projects Online Shopping Store
- 1
High 2
Medium, low and unrated 36
- CVE-2025-6494sparklemotion nokogiri hashmap.c hashmap_get_with_hash heap-based overflowsparklemotion nokogiri
- CVE-2025-6493CodeMirror Markdown Mode markdown.js redosCodeMirror
- CVE-2025-6492MarkText index.js getRecommendTitleFromMarkdownString redosMarkText
- CVE-2025-6490sparklemotion nokogiri hashmap.c hashmap_set_with_hash heap-based overflowsparklemotion nokogiri
- CVE-2025-6489itsourcecode Agri-Trading Online Shopping System transactionsave.php sql injectionitsourcecode Agri-Trading Online Shopping System
- CVE-2025-6485TOTOLINK A3002R formWlSiteSurvey os command injectionTOTOLINK A3002R
- CVE-2025-6484code-projects Online Shopping Store action.php sql injectioncode-projects Online Shopping Store
- CVE-2025-6483code-projects Simple Pizza Ordering System edituser.php sql injectioncode-projects Simple Pizza Ordering System
- CVE-2025-6482code-projects Simple Pizza Ordering System edituser-exec.php sql injectioncode-projects Simple Pizza Ordering System
- CVE-2025-6481code-projects Simple Pizza Ordering System update.php sql injectioncode-projects Simple Pizza Ordering System
- CVE-2025-6480code-projects Simple Pizza Ordering System addcatexec.php sql injectioncode-projects Simple Pizza Ordering System
- CVE-2025-6479code-projects Simple Pizza Ordering System salesreport.php sql injectioncode-projects Simple Pizza Ordering System
- CVE-2025-6478CodeAstro Expense Management System cross-site request forgeryCodeAstro Expense Management System
- CVE-2025-6477SourceCodester Student Result Management System System Settings Page system cross site scriptingSourceCodester Student Result Management System
- CVE-2025-6476SourceCodester Gym Management System cross-site request forgerySourceCodester Gym Management System
- CVE-2025-6475SourceCodester Student Result Management System Manage Students Module manage_students cross site scriptingSourceCodester Student Result Management System
- CVE-2025-6474code-projects Inventory Management System changeUsername.php sql injectioncode-projects Inventory Management System
- CVE-2025-6473code-projects School Fees Payment System fees.php cross site scriptingcode-projects School Fees Payment System
- CVE-2025-6472code-projects Online Bidding System showprod.php sql injectioncode-projects Online Bidding System
- CVE-2025-6471code-projects Online Bidding System administrator sql injectioncode-projects Online Bidding System
- CVE-2025-6470code-projects Online Bidding System bidlog.php sql injectioncode-projects Online Bidding System
- CVE-2025-6469code-projects Online Bidding System details.php sql injectioncode-projects Online Bidding System
- CVE-2025-6468code-projects Online Bidding System bidnow.php sql injectioncode-projects Online Bidding System
- CVE-2025-6467code-projects Online Bidding System login.php sql injectioncode-projects Online Bidding System
- CVE-2025-6466ageerle ruoyi-ai SseServiceImpl.java upload unrestricted uploadageerle ruoyi-ai
- CVE-2025-6458code-projects Online Hotel Reservation System execedituser.php sql injectioncode-projects Online Hotel Reservation System
- CVE-2025-6457code-projects Online Hotel Reservation System demo.php sql injectioncode-projects Online Hotel Reservation System
- CVE-2025-6456code-projects Online Hotel Reservation System order.php sql injectioncode-projects Online Hotel Reservation System
- CVE-2025-6455code-projects Online Hotel Reservation System messageexec.php sql injectioncode-projects Online Hotel Reservation System
- CVE-2025-6453diyhi bbs API ForumManageAction.java add path traversaldiyhi bbs
- CVE-2025-6452CodeAstro Patient Record Management System Generate New Report Page cross site scriptingCodeAstro Patient Record Management System
- CVE-2025-6451code-projects Simple Online Hotel Reservation System delete_pending.php sql injectioncode-projects Simple Online Hotel Reservation System
- CVE-2025-6450code-projects Simple Online Hotel Reservation System confirm_reserve.php sql injectioncode-projects Simple Online Hotel Reservation System
- CVE-2025-6449code-projects Simple Online Hotel Reservation System checkout_query.php sql injectioncode-projects Simple Online Hotel Reservation System
- CVE-2025-6448code-projects Simple Online Hotel Reservation System delete_room.php sql injectioncode-projects Simple Online Hotel Reservation System
- CVE-2025-52923Sangfor aTrust through 2.4.10 allows users to modify the ExecStartPre command.Sangfor aTrust