Skip to content
OpenAdvisories

Archive

3 June 2025

Vulnerabilities first published on this day (UTC), newest first.

← May 2025 2025 / June /3 July 2025 →
  1. 119
  2. 2121
  3. 3116
  4. 4134
  5. 597
  6. 6344
  7. 715
  8. 833
  9. 9181
  10. 10490
  11. 1159
  12. 1280
  13. 1388
  14. 1421
  15. 1515
  16. 1695
  17. 17174
  18. 18414
  19. 1955
  20. 20222
  21. 2157
  22. 2238
  23. 2374
  24. 24120
  25. 25120
  26. 26116
  27. 27225
  28. 2846
  29. 2948
  30. 3089
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Critical 9.3
    CVE-2025-48951

    Auth0-PHP SDK Deserialization of Untrusted Data vulnerability

    Auth0-PHP is a PHP SDK for Auth0 Authentication and Management APIs. Versions 8.0.0-BETA3 prior to 8.3.1 contain a vulnerability due to insecure deserialization of cookie data. If exploited, since SDKs process cookie content without prior authentication, a th…

    auth0 auth0-PHP auth0/auth0-php Packagist
  • Critical 9.6
    CVE-2025-25022

    IBM QRadar Suite Software and IBM Cloud Pak for Security information disclosure

    IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow an unauthenticated user in the environment to obtain highly sensitive information in configuration files.

    IBM Cloud Pak for Security QRadar Suite Software
  • Critical 9.4
    CVE-2025-4517 Public exploit

    Arbitrary writes via tarfile realpath overflow

    Allows arbitrary filesystem writes outside the extraction directory during extraction with filter="data". You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() usin…

    Python Software Foundation CPython python3 python3.12 Debian Ubuntu Azure Linux Alpine Wolfi
  • Critical 9.8
    CVE-2025-4797

    Golo <= 1.7.0 - Authentication Bypass to Account Takeover

    The Golo - City Travel Guide WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.7.0. This is due to the plugin not properly validating a user's identity prior to setting an au…

    uxper Golo - City Travel Guide WordPress Theme Web / CMS
  • Critical 9.8
    CVE-2025-32105

    A buffer overflow in the the Sangoma IMG2020 HTTP server through 2.3.9.6 allows an unauthenticated user to achieve remo…

  • Critical 9.8
    CVE-2025-32106

    In Audiocodes Mediapack MP-11x through 6.60A.369.002, a crafted POST request request may result in an unauthenticated r…

  • Critical 10.0
    CVE-2025-45854 Scanner template

    /server/executeExec of JEHC-BPM 2.0.1 allows attackers to execute arbitrary code via execParams.

    JEHc JEHC-BPM
  • Critical 9.8
    CVE-2025-44148 Public exploit Scanner template EPSS 55%

    Cross Site Scripting (XSS) vulnerability in MailEnable before v10 allows a remote attacker to execute arbitrary code vi…

  • Critical 9.1
    CVE-2025-23097

    An issue was discovered in Samsung Mobile Processor Exynos 1380. The lack of a length check leads to out-of-bounds writ…