CVEs published June 23, 2025
74 CVEs were published on June 23, 2025: 18 critical, 18 high. 1 is now in CISA KEV.
- Published
- 74
- Critical
- 18
- High
- 18
- Medium
- 31
- Low
- 7
- Unrated
- 0
- Now in CISA KEV
- 1
- Fix available
- 26
Most affected products
- 70mai M300
- 5
- JetBrains TeamCity
- 5
- code-projects Inventory Management System
- 4
- HTACG tidy-html5
- 3
- InnoShop
- 3
- 70mai
- 2
- Aviatrix Controller
- 2
- Bizerba SE & Co. KG BRAIN2
- 2
- dail8859 NotepadNext
- 2
- pbkdf2
- 2
Critical 18
- CVE-2025-52562Convey Panel Directory Traversal in LocaleController leading to Remote Code ExecutionConvoyPanel panel
- CVE-2025-6547On Node.js < 3, pbkdf2 silently disregards Uint8Array input, returning static keyspbkdf2
- CVE-2025-6545pbkdf2 silently returns predictable uninitialized/zero-filled memory for non-normalized or unimplemented algos supported by Node.jspbkdf2
- CVE-2025-6512Scripts within reports executable on BRAIN2 ServerBizerba SE & Co. KG BRAIN2
- CVE-2025-6513BRAIN2 Configuration file for database access not sufficiently securedBizerba SE & Co. KG BRAIN2
- CVE-2024-45347Mi Connect Service APP protocol flaws lead to unauthorized accessXiaomi Mi Connect Service
- CVE-2025-52935Integer Overflow or Wraparound vulnerability in dragonflydb/dragonflydragonflydb dragonfly
- CVE-2025-52939Potential heap-buffer overflow vulnerability in NotepadNextdail8859 NotepadNext
- CVE-2025-52936Improper Link Resolution Before File Access vulnerability in yrutschle/sslhyrutschle sslh
- CVE-2023-47029An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted P
- CVE-2023-47030An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via a GET reque
- CVE-2023-47031An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to escalate privileges via a crafted POST request to the grantRolesToUsers
- CVE-2023-47032Password Vulnerability in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code via a crafted script to the UserSe
- CVE-2023-47295A CSV injection vulnerability in NCR Terminal Handler v1.5.1 allows attackers to execute arbitrary commands via injecting a crafted payload
- CVE-2023-47297A settings manipulation vulnerability in NCR Terminal Handler v1.5.1 allows attackers to execute arbitrary commands, including editing syste
- CVE-2023-48978An issue in NCR ITM Web terminal v.4.4.0 and v.4.4.4 allows a remote attacker to execute arbitrary code via a crafted script to the IP camer
- CVE-2025-46101SQL Injection vulnerability in Beakon Software Beakon Learning Management System Sharable Content Object Reference Model (SCORM) version bef
- CVE-2025-52921In Innoshop through 0.4.1, an authenticated attacker could exploit the File Manager functions in the admin panel to achieve code execution oInnoShop
High 18
- CVE-2025-652970mai M300 Telnet Service default credentials70mai M300
- CVE-2025-52558ChangeDetection.io XSS in watch overviewdgtlmoon changedetection.io · changedetection-io
- CVE-2025-2828SSRF Vulnerability in RequestsToolkit in langchain-ai/langchainlangchain-ai/langchain · langchain-community
- CVE-2025-49144Notepad++ Privilege Escalation in Installer via Uncontrolled Executable Search Pathnotepad-plus-plus
- CVE-2025-49126Visionatrix Vulnerable to Reflected XSS Leading to Exfiltration of SecretsVisionatrix
- CVE-2025-6511Netgear EX6150 sub_410090 stack-based overflowNetgear EX6150
- CVE-2025-6510Netgear EX6100 sub_415EF8 stack-based overflowNetgear EX6100
- CVE-2025-2171Aviatrix Controller versions prior to 7.1.4208, 7.2.5090, and 8.0.0 do not enforce rate limiting on password reset attempts, allowing adversAviatrix Controller
- CVE-2025-27387OPPO Clone Phone uses weak WPA passphrase as only means of securityOPPO ColorOS
- CVE-2023-47294An issue in NCR Terminal Handler v1.5.1 allows low-level privileged authenticated attackers to arbitrarily deactivate, lock, and delete user
- CVE-2023-50450An issue was discovered in Sensopart VISOR Vision Sensors before 2.10.0.2 allows local users to perform unspecified actions with elevated pr
- CVE-2025-23049Meridian Technique Materialise OrthoView through 7.5.1 allows OS Command Injection when servlet sharing is enabled.Materialise OrthoView
- CVE-2025-23092Mitel OpenScape Accounting Management through V5 R1.1.0 could allow an authenticated attacker with administrative privileges to conduct a pa
- CVE-2025-44528An issue in Texas Instruments LP-CC2652RB SimpleLink CC13XX CC26XX SDK 7.41.00.17 allows attackers to cause a Denial of Service (DoS) via se
- CVE-2025-48026A vulnerability in the WebApl component of Mitel OpenScape Xpressions through V7R1 FR5 HF43 P913 could allow an unauthenticated attacker to
- CVE-2025-50348PHPGurukul Pre-School Enrollment System Project V1.0 is vulnerable to Directory Traversal in update-class-pic.php.
- CVE-2025-50349PHPGurukul Pre-School Enrollment System Project V1.0 is vulnerable to Directory Traversal in update-teacher-pic.php.
- CVE-2025-52922Innoshop through 0.4.1 allows directory traversal via FileManager API endpoints.InnoShop
Medium, low and unrated 38
- CVE-2025-6531SIFUSM/MZZYG BD S1 RTSP Live Video Stream Endpoint access controlSIFUSM BD S1 · MZZYG BD S1
- CVE-2025-653070mai M300 Telnet Service demo.sh denial of service70mai M300
- CVE-2025-652870mai M300 RTSP Live Video Stream Endpoint 12 improper authentication70mai M300
- CVE-2025-652770mai M300 Web Server access control70mai M300
- CVE-2025-652670mai M300 HTTP Server insufficiently protected credentials70mai M300
- CVE-2025-652570mai 1S Configuration Config.cgi improper authorization70mai
- CVE-2025-52561HTMLSanitizer.jl Possible XSSJuliaComputing HTMLSanitizer.jl
- CVE-2025-652470mai 1S Video Services improper authentication70mai
- CVE-2025-49574Quarkus potential data leak when duplicating a duplicated contextquarkusio quarkus · io.quarkus:quarkus-vertx
- CVE-2025-6518PySpur-Dev pyspur Jinja2 Template single_llm_call.py SingleLLMCallNode special elements used in a template enginePySpur-Dev pyspur · pyspur
- CVE-2025-6517Dromara MaxKey Meta URL SAML20DetailsController.java add server-side request forgeryDromara MaxKey
- CVE-2025-6516HDF5 H5Fint.c H5F_addr_decode_len heap-based overflowHDF5
- CVE-2025-4563Nodes can bypass dynamic resource allocation authorization checksKubernetes · k8s.io/kubernetes
- CVE-2025-6509seaswalker spring-analysis SimpleController.java echo cross site scriptingseaswalker spring-analysis
- CVE-2025-52879In JetBrains TeamCity before 2025.03.3 reflected XSS in the NPM Registry integration was possibleJetBrains TeamCity
- CVE-2025-52878In JetBrains TeamCity before 2025.03.3 usernames were exposed to the users without proper permissionsJetBrains TeamCity
- CVE-2025-52877In JetBrains TeamCity before 2025.03.3 reflected XSS on diskUsageBuildsStats page was possibleJetBrains TeamCity
- CVE-2025-52876In JetBrains TeamCity before 2025.03.3 reflected XSS on the favoriteIcon page was possibleJetBrains TeamCity
- CVE-2025-52875In JetBrains TeamCity before 2025.03.3 a DOM-based XSS at the Performance Monitor page was possibleJetBrains TeamCity
- CVE-2025-2172Aviatrix Controller versions prior to 7.1.4208, 7.2.5090, and 8.0.0 fail to sanitize user input prior to passing the input to command line uAviatrix Controller
- CVE-2025-52938Potential heap-based buffer over-read vulnerability in NotepadNextdail8859 NotepadNext
- CVE-2025-52937Vulnerability in PointCloudLibrary PCLPointCloudLibrary pcl
- CVE-2024-3511Incorrect Authorization in Multiple WSO2 Products Allows Unauthorized Access to Registry Versioned FilesWSO2 Enterprise Integrator · WSO2 API Manager +5
- CVE-2025-6503code-projects Inventory Management System fetchSelectedCategories.php sql injectioncode-projects Inventory Management System
- CVE-2025-6502code-projects Inventory Management System changePassword.php sql injectioncode-projects Inventory Management System
- CVE-2025-6501code-projects Inventory Management System createCategories.php sql injectioncode-projects Inventory Management System
- CVE-2025-6500code-projects Inventory Management System editCategories.php sql injectioncode-projects Inventory Management System
- CVE-2025-6499vstakhov libucl ucl_parser.c ucl_parse_multiline_string heap-based overflowvstakhov libucl
- CVE-2025-6498HTACG tidy-html5 alloc.c defaultAlloc memory leakHTACG tidy-html5
- CVE-2025-6497HTACG tidy-html5 parser.c prvTidyParseNamespace assertionHTACG tidy-html5
- CVE-2025-6496HTACG tidy-html5 parser.c InsertNodeAsParent null pointer dereferenceHTACG tidy-html5
- CVE-2021-47688In WhiteBeam 0.2.0 through 0.2.1 before 0.2.2, a user with local access to a server can bypass the allow-list functionality because a file cWhiteBeam
- CVE-2023-47298An issue in NCR Terminal Handler 1.5.1 allows a low-level privileged authenticated attacker to query the SOAP API endpoint to obtain informa
- CVE-2025-48700An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0 and 10.0 and 10.1.
- CVE-2025-52920Innoshop through 0.4.1 allows Insecure Direct Object Reference (IDOR) at multiple places within the frontend shop.InnoShop
- CVE-2025-52926In scan.rs in spytrap-adb before 0.3.5, matches for known stalkerware are not rendered in the interactive user interface.spytrap-org spytrap-adb · spytrap-adb
- CVE-2025-52967gateway_proxy_handler in MLflow before 3.1.0 lacks gateway_path validation.lfprojects MLflow · mlflow
- CVE-2025-52968xdg-open in xdg-utils through 1.2.1 can send requests containing SameSite=Strict cookies, which can facilitate CSRF.freedesktop xdg-utils