CVEs published June 29, 2025
47 CVEs were published on June 29, 2025: 1 critical, 1 high.
- Published
- 47
- Critical
- 1
- High
- 1
- Medium
- 44
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- code-projects Simple Forum
- 8
- SourceCodester Best Salon Management System
- 8
- SourceCodester Simple Company Website
- 7
- chatchat-space Langchain-Chatchat · langchain-chatchat
- 3
- code-projects Library System
- 3
- code-projects Product Inventory System
- 3
- HDF5
- 3
- checkpoint Check Point SmartConsole
- 1
- code-projects Simple Photo Gallery
- 1
- Conjure Position Department Service Quality Evaluation Syst…
- 1
Critical 1
High 1
Medium, low and unrated 45
- CVE-2025-6877SourceCodester Best Salon Management System edit-category.php sql injectionSourceCodester Best Salon Management System
- CVE-2025-6876SourceCodester Best Salon Management System add-category.php sql injectionSourceCodester Best Salon Management System
- CVE-2025-6875SourceCodester Best Salon Management System edit-subscription.php sql injectionSourceCodester Best Salon Management System
- CVE-2025-6874SourceCodester Best Salon Management System add_subscribe.php sql injectionSourceCodester Best Salon Management System
- CVE-2025-6873SourceCodester Simple Company Website Users.php unrestricted uploadSourceCodester Simple Company Website
- CVE-2025-6872SourceCodester Simple Company Website SystemSettings.php unrestricted uploadSourceCodester Simple Company Website
- CVE-2025-6871SourceCodester Simple Company Website Login.php sql injectionSourceCodester Simple Company Website
- CVE-2025-6870SourceCodester Simple Company Website Content.php unrestricted uploadSourceCodester Simple Company Website
- CVE-2025-6869SourceCodester Simple Company Website manage.php sql injectionSourceCodester Simple Company Website
- CVE-2025-24292A misconfigured query in UniFi Network (v9.1.120 and earlier) could allow users to authenticate to Enterprise WiFi or VPN Server (l2tp and OUbiquiti UniFi Network Application
- CVE-2025-6868SourceCodester Simple Company Website manage.php sql injectionSourceCodester Simple Company Website
- CVE-2025-6867SourceCodester Simple Company Website manage.php sql injectionSourceCodester Simple Company Website
- CVE-2025-6866code-projects Simple Forum forum_downloadfile.php path traversalcode-projects Simple Forum
- CVE-2025-6865DaiCuo index cross-site request forgeryDaiCuo
- CVE-2025-6864SeaCMS admin_type.php cross-site request forgerySeaCMS
- CVE-2025-6863PHPGurukul Local Services Search Engine Management System edit-category-detail.php sql injectionPHPGurukul Local Services Search Engine Management System
- CVE-2025-6862SourceCodester Best Salon Management System edit_plan.php sql injectionSourceCodester Best Salon Management System
- CVE-2025-6861SourceCodester Best Salon Management System add_plan.php sql injectionSourceCodester Best Salon Management System
- CVE-2025-6860SourceCodester Best Salon Management System staff_commision.php sql injectionSourceCodester Best Salon Management System
- CVE-2025-6859SourceCodester Best Salon Management System pro_sale.php sql injectionSourceCodester Best Salon Management System
- CVE-2024-24915SmartConsole Sensitive Credential Exposure via Memory Dumpcheckpoint Check Point SmartConsole
- CVE-2025-5878ESAPI esapi-java-legacy SQL Injection Defense Encoder.encodeForSQL special elementesapi-java-legacy
- CVE-2025-6858HDF5 H5Centry.c H5C__flush_single_entry null pointer dereferenceHDF5
- CVE-2025-6857HDF5 H5Gnode.c H5G__node_cmp3 stack-based overflowHDF5
- CVE-2025-6856HDF5 H5FL.c H5FL__reg_gc_list use after freeHDF5
- CVE-2025-6855chatchat-space Langchain-Chatchat file path traversalchatchat-space Langchain-Chatchat · langchain-chatchat
- CVE-2025-6854chatchat-space Langchain-Chatchat files path traversalchatchat-space Langchain-Chatchat · langchain-chatchat
- CVE-2025-6853chatchat-space Langchain-Chatchat Backend upload_temp_docs path traversalchatchat-space Langchain-Chatchat · langchain-chatchat
- CVE-2025-6850code-projects Simple Forum forum1.php sql injectioncode-projects Simple Forum
- CVE-2025-6849code-projects Simple Forum forum_edit1.php cross site scriptingcode-projects Simple Forum
- CVE-2025-6848code-projects Simple Forum forum1.php unrestricted uploadcode-projects Simple Forum
- CVE-2025-6847code-projects Simple Forum forum_edit.php sql injectioncode-projects Simple Forum
- CVE-2025-6846code-projects Simple Forum forum_viewfile.php sql injectioncode-projects Simple Forum
- CVE-2025-6845code-projects Simple Forum register1.php sql injectioncode-projects Simple Forum
- CVE-2025-6462EZ SQL Reports Shortcode Widget and DB Backup <= 5.25.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via SQLREPORT Shortcodescheeeli EZ SQL Reports Shortcode Widget and DB Backup
- CVE-2025-6844code-projects Simple Forum signin.php sql injectioncode-projects Simple Forum
- CVE-2025-6843code-projects Simple Photo Gallery upload-photo.php unrestricted uploadcode-projects Simple Photo Gallery
- CVE-2025-6842code-projects Product Inventory System edit_user.php sql injectioncode-projects Product Inventory System
- CVE-2025-6841code-projects Product Inventory System edit_product.php sql injectioncode-projects Product Inventory System
- CVE-2025-6840code-projects Product Inventory System Login index.php sql injectioncode-projects Product Inventory System
- CVE-2025-6839Conjure Position Department Service Quality Evaluation System head.php eval backdoorConjure Position Department Service Quality Evaluation Syst…
- CVE-2025-6837code-projects Library System profile.php unrestricted uploadcode-projects Library System
- CVE-2025-6836code-projects Library System profile.php sql injectioncode-projects Library System
- CVE-2025-6835code-projects Library System student-issue-book.php sql injectioncode-projects Library System
- CVE-2015-20112RLPx 5 has two CTR streams based on the same key, IV, and nonce.Ethereum RLPx