# CVEs published 2025-06-23

74 CVEs were published on June 23, 2025: 18 critical, 18 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2025-6531](https://cve.now/CVE-2025-6531.md): SIFUSM/MZZYG BD S1 RTSP Live Video Stream Endpoint access control (CVSS 5.3, SIFUSM BD S1 · MZZYG BD S1)
- [CVE-2025-6530](https://cve.now/CVE-2025-6530.md): 70mai M300 Telnet Service demo.sh denial of service (CVSS 5.9, 70mai M300)
- [CVE-2025-6529](https://cve.now/CVE-2025-6529.md): 70mai M300 Telnet Service default credentials (CVSS 8.7, 70mai M300)
- [CVE-2025-6528](https://cve.now/CVE-2025-6528.md): 70mai M300 RTSP Live Video Stream Endpoint 12 improper authentication (CVSS 5.3, 70mai M300)
- [CVE-2025-6527](https://cve.now/CVE-2025-6527.md): 70mai M300 Web Server access control (CVSS 2.3, 70mai M300)
- [CVE-2025-6526](https://cve.now/CVE-2025-6526.md): 70mai M300 HTTP Server insufficiently protected credentials (CVSS 2.3, 70mai M300)
- [CVE-2025-6525](https://cve.now/CVE-2025-6525.md): 70mai 1S Configuration Config.cgi improper authorization (CVSS 5.3, 70mai)
- [CVE-2025-52561](https://cve.now/CVE-2025-52561.md): HTMLSanitizer.jl Possible XSS (CVSS 6.9, JuliaComputing HTMLSanitizer.jl)
- [CVE-2025-6524](https://cve.now/CVE-2025-6524.md): 70mai 1S Video Services improper authentication (CVSS 2.3, 70mai)
- [CVE-2025-52558](https://cve.now/CVE-2025-52558.md): ChangeDetection.io XSS in watch overview (CVSS 7.0, dgtlmoon changedetection.io · changedetection-io)
- [CVE-2025-52562](https://cve.now/CVE-2025-52562.md): Convey Panel Directory Traversal in LocaleController leading to Remote Code Execution (CVSS 10.0, ConvoyPanel panel)
- [CVE-2025-2828](https://cve.now/CVE-2025-2828.md): SSRF Vulnerability in RequestsToolkit in langchain-ai/langchain (CVSS 8.4, langchain-ai/langchain · langchain-community)
- [CVE-2025-49574](https://cve.now/CVE-2025-49574.md): Quarkus potential data leak when duplicating a duplicated context (CVSS 6.4, quarkusio quarkus · io.quarkus:quarkus-vertx)
- [CVE-2025-49144](https://cve.now/CVE-2025-49144.md): Notepad++ Privilege Escalation in Installer via Uncontrolled Executable Search Path (CVSS 7.3, notepad-plus-plus)
- [CVE-2025-6547](https://cve.now/CVE-2025-6547.md): On Node.js \< 3, pbkdf2 silently disregards Uint8Array input, returning static keys (CVSS 9.1, pbkdf2)
- [CVE-2025-6518](https://cve.now/CVE-2025-6518.md): PySpur-Dev pyspur Jinja2 Template single\_llm\_call.py SingleLLMCallNode special elements used in a template engine (CVSS 5.3, PySpur-Dev pyspur · pyspur)
- [CVE-2025-6545](https://cve.now/CVE-2025-6545.md): pbkdf2 silently returns predictable uninitialized/zero-filled memory for non-normalized or unimplemented algos supported by Node.js (CVSS 9.1, pbkdf2)
- [CVE-2025-6517](https://cve.now/CVE-2025-6517.md): Dromara MaxKey Meta URL SAML20DetailsController.java add server-side request forgery (CVSS 5.3, Dromara MaxKey)
- [CVE-2025-49126](https://cve.now/CVE-2025-49126.md): Visionatrix Vulnerable to Reflected XSS Leading to Exfiltration of Secrets (CVSS 8.8, Visionatrix)
- [CVE-2025-6516](https://cve.now/CVE-2025-6516.md): HDF5 H5Fint.c H5F\_addr\_decode\_len heap-based overflow (CVSS 4.8, HDF5)
- [CVE-2025-6511](https://cve.now/CVE-2025-6511.md): Netgear EX6150 sub\_410090 stack-based overflow (CVSS 8.7, Netgear EX6150)
- [CVE-2025-6510](https://cve.now/CVE-2025-6510.md): Netgear EX6100 sub\_415EF8 stack-based overflow (CVSS 8.7, Netgear EX6100)
- [CVE-2025-4563](https://cve.now/CVE-2025-4563.md): Nodes can bypass dynamic resource allocation authorization checks (CVSS 2.7, Kubernetes · k8s.io/kubernetes)
- [CVE-2025-6509](https://cve.now/CVE-2025-6509.md): seaswalker spring-analysis SimpleController.java echo cross site scripting (CVSS 5.1, seaswalker spring-analysis)
- [CVE-2025-52879](https://cve.now/CVE-2025-52879.md): In JetBrains TeamCity before 2025.03.3 reflected XSS in the NPM Registry integration was possible (CVSS 4.8, JetBrains TeamCity)
- [CVE-2025-52878](https://cve.now/CVE-2025-52878.md): In JetBrains TeamCity before 2025.03.3 usernames were exposed to the users without proper permissions (CVSS 4.3, JetBrains TeamCity)
- [CVE-2025-52877](https://cve.now/CVE-2025-52877.md): In JetBrains TeamCity before 2025.03.3 reflected XSS on diskUsageBuildsStats page was possible (CVSS 4.8, JetBrains TeamCity)
- [CVE-2025-52876](https://cve.now/CVE-2025-52876.md): In JetBrains TeamCity before 2025.03.3 reflected XSS on the favoriteIcon page was possible (CVSS 5.4, JetBrains TeamCity)
- [CVE-2025-52875](https://cve.now/CVE-2025-52875.md): In JetBrains TeamCity before 2025.03.3 a DOM-based XSS at the Performance Monitor page was possible (CVSS 5.4, JetBrains TeamCity)
- [CVE-2025-2172](https://cve.now/CVE-2025-2172.md): Aviatrix Controller versions prior to 7.1.4208, 7.2.5090, and 8.0.0 fail to sanitize user input prior to passing the input to command line u (CVSS 6.6, Aviatrix Controller)
- [CVE-2025-2171](https://cve.now/CVE-2025-2171.md): Aviatrix Controller versions prior to 7.1.4208, 7.2.5090, and 8.0.0 do not enforce rate limiting on password reset attempts, allowing advers (CVSS 7.8, Aviatrix Controller)
- [CVE-2025-6512](https://cve.now/CVE-2025-6512.md): Scripts within reports executable on BRAIN2 Server (CVSS 10.0, Bizerba SE & Co. KG BRAIN2)
- [CVE-2025-6513](https://cve.now/CVE-2025-6513.md): BRAIN2 Configuration file for database access not sufficiently secured (CVSS 9.3, Bizerba SE & Co. KG BRAIN2)
- [CVE-2024-45347](https://cve.now/CVE-2024-45347.md): Mi Connect Service APP protocol flaws lead to unauthorized access (CVSS 9.6, Xiaomi Mi Connect Service)
- [CVE-2025-27387](https://cve.now/CVE-2025-27387.md): OPPO Clone Phone uses weak WPA passphrase as only means of security (CVSS 7.4, OPPO ColorOS)
- [CVE-2025-52935](https://cve.now/CVE-2025-52935.md): Integer Overflow or Wraparound vulnerability in dragonflydb/dragonfly (CVSS 9.4, dragonflydb dragonfly)
- [CVE-2025-52939](https://cve.now/CVE-2025-52939.md): Potential heap-buffer overflow vulnerability in NotepadNext (CVSS 9.4, dail8859 NotepadNext)
- [CVE-2025-52938](https://cve.now/CVE-2025-52938.md): Potential heap-based buffer over-read vulnerability in NotepadNext (CVSS 5.1, dail8859 NotepadNext)
- [CVE-2025-52937](https://cve.now/CVE-2025-52937.md): Vulnerability in PointCloudLibrary PCL (CVSS 2.0, PointCloudLibrary pcl)
- [CVE-2025-52936](https://cve.now/CVE-2025-52936.md): Improper Link Resolution Before File Access vulnerability in yrutschle/sslh (CVSS 9.3, yrutschle sslh)
- [CVE-2024-3511](https://cve.now/CVE-2024-3511.md): Incorrect Authorization in Multiple WSO2 Products Allows Unauthorized Access to Registry Versioned Files (CVSS 4.3, WSO2 Enterprise Integrator · WSO2 API Manager +5)
- [CVE-2025-6503](https://cve.now/CVE-2025-6503.md): code-projects Inventory Management System fetchSelectedCategories.php sql injection (CVSS 6.9, code-projects Inventory Management System)
- [CVE-2025-6502](https://cve.now/CVE-2025-6502.md): code-projects Inventory Management System changePassword.php sql injection (CVSS 6.9, code-projects Inventory Management System)
- [CVE-2025-6501](https://cve.now/CVE-2025-6501.md): code-projects Inventory Management System createCategories.php sql injection (CVSS 6.9, code-projects Inventory Management System)
- [CVE-2025-6500](https://cve.now/CVE-2025-6500.md): code-projects Inventory Management System editCategories.php sql injection (CVSS 6.9, code-projects Inventory Management System)
- [CVE-2025-6499](https://cve.now/CVE-2025-6499.md): vstakhov libucl ucl\_parser.c ucl\_parse\_multiline\_string heap-based overflow (CVSS 4.8, vstakhov libucl)
- [CVE-2025-6498](https://cve.now/CVE-2025-6498.md): HTACG tidy-html5 alloc.c defaultAlloc memory leak (CVSS 4.8, HTACG tidy-html5)
- [CVE-2025-6497](https://cve.now/CVE-2025-6497.md): HTACG tidy-html5 parser.c prvTidyParseNamespace assertion (CVSS 4.8, HTACG tidy-html5)
- [CVE-2025-6496](https://cve.now/CVE-2025-6496.md): HTACG tidy-html5 parser.c InsertNodeAsParent null pointer dereference (CVSS 4.8, HTACG tidy-html5)
- [CVE-2021-47688](https://cve.now/CVE-2021-47688.md): In WhiteBeam 0.2.0 through 0.2.1 before 0.2.2, a user with local access to a server can bypass the allow-list functionality because a file c (CVSS 5.7, WhiteBeam)
- [CVE-2023-47029](https://cve.now/CVE-2023-47029.md): An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted P (CVSS 9.8)
- [CVE-2023-47030](https://cve.now/CVE-2023-47030.md): An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via a GET reque (CVSS 9.8)
- [CVE-2023-47031](https://cve.now/CVE-2023-47031.md): An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to escalate privileges via a crafted POST request to the grantRolesToUsers (CVSS 9.8)
- [CVE-2023-47032](https://cve.now/CVE-2023-47032.md): Password Vulnerability in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code via a crafted script to the UserSe (CVSS 9.8)
- [CVE-2023-47294](https://cve.now/CVE-2023-47294.md): An issue in NCR Terminal Handler v1.5.1 allows low-level privileged authenticated attackers to arbitrarily deactivate, lock, and delete user (CVSS 8.1)
- [CVE-2023-47295](https://cve.now/CVE-2023-47295.md): A CSV injection vulnerability in NCR Terminal Handler v1.5.1 allows attackers to execute arbitrary commands via injecting a crafted payload (CVSS 9.8)
- [CVE-2023-47297](https://cve.now/CVE-2023-47297.md): A settings manipulation vulnerability in NCR Terminal Handler v1.5.1 allows attackers to execute arbitrary commands, including editing syste (CVSS 9.8)
- [CVE-2023-47298](https://cve.now/CVE-2023-47298.md): An issue in NCR Terminal Handler 1.5.1 allows a low-level privileged authenticated attacker to query the SOAP API endpoint to obtain informa (CVSS 4.3)
- [CVE-2023-48978](https://cve.now/CVE-2023-48978.md): An issue in NCR ITM Web terminal v.4.4.0 and v.4.4.4 allows a remote attacker to execute arbitrary code via a crafted script to the IP camer (CVSS 9.8)
- [CVE-2023-50450](https://cve.now/CVE-2023-50450.md): An issue was discovered in Sensopart VISOR Vision Sensors before 2.10.0.2 allows local users to perform unspecified actions with elevated pr (CVSS 8.4)
- [CVE-2025-23049](https://cve.now/CVE-2025-23049.md): Meridian Technique Materialise OrthoView through 7.5.1 allows OS Command Injection when servlet sharing is enabled. (CVSS 8.4, Materialise OrthoView)
- [CVE-2025-23092](https://cve.now/CVE-2025-23092.md): Mitel OpenScape Accounting Management through V5 R1.1.0 could allow an authenticated attacker with administrative privileges to conduct a pa (CVSS 7.2)
- [CVE-2025-44528](https://cve.now/CVE-2025-44528.md): An issue in Texas Instruments LP-CC2652RB SimpleLink CC13XX CC26XX SDK 7.41.00.17 allows attackers to cause a Denial of Service (DoS) via se (CVSS 7.5)
- [CVE-2025-46101](https://cve.now/CVE-2025-46101.md): SQL Injection vulnerability in Beakon Software Beakon Learning Management System Sharable Content Object Reference Model (SCORM) version bef (CVSS 9.8)
- [CVE-2025-48026](https://cve.now/CVE-2025-48026.md): A vulnerability in the WebApl component of Mitel OpenScape Xpressions through V7R1 FR5 HF43 P913 could allow an unauthenticated attacker to (CVSS 7.5)
- [CVE-2025-48700](https://cve.now/CVE-2025-48700.md): An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0 and 10.0 and 10.1. (CVSS 6.1, KEV)
- [CVE-2025-50348](https://cve.now/CVE-2025-50348.md): PHPGurukul Pre-School Enrollment System Project V1.0 is vulnerable to Directory Traversal in update-class-pic.php. (CVSS 7.5)
- [CVE-2025-50349](https://cve.now/CVE-2025-50349.md): PHPGurukul Pre-School Enrollment System Project V1.0 is vulnerable to Directory Traversal in update-teacher-pic.php. (CVSS 7.5)
- [CVE-2025-52920](https://cve.now/CVE-2025-52920.md): Innoshop through 0.4.1 allows Insecure Direct Object Reference (IDOR) at multiple places within the frontend shop. (CVSS 6.4, InnoShop)
- [CVE-2025-52921](https://cve.now/CVE-2025-52921.md): In Innoshop through 0.4.1, an authenticated attacker could exploit the File Manager functions in the admin panel to achieve code execution o (CVSS 9.9, InnoShop)
- [CVE-2025-52922](https://cve.now/CVE-2025-52922.md): Innoshop through 0.4.1 allows directory traversal via FileManager API endpoints. (CVSS 7.4, InnoShop)
- [CVE-2025-52926](https://cve.now/CVE-2025-52926.md): In scan.rs in spytrap-adb before 0.3.5, matches for known stalkerware are not rendered in the interactive user interface. (CVSS 2.7, spytrap-org spytrap-adb · spytrap-adb)
- [CVE-2025-52967](https://cve.now/CVE-2025-52967.md): gateway\_proxy\_handler in MLflow before 3.1.0 lacks gateway\_path validation. (CVSS 5.8, lfprojects MLflow · mlflow)
- [CVE-2025-52968](https://cve.now/CVE-2025-52968.md): xdg-open in xdg-utils through 1.2.1 can send requests containing SameSite=Strict cookies, which can facilitate CSRF. (CVSS 2.7, freedesktop xdg-utils)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-06-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.