Skip to content
OpenAdvisories

Archive

3 June 2025

Vulnerabilities first published on this day (UTC), newest first.

← May 2025 2025 / June /3 July 2025 →
  1. 119
  2. 2121
  3. 3116
  4. 4134
  5. 597
  6. 6344
  7. 715
  8. 833
  9. 9181
  10. 10490
  11. 1159
  12. 1280
  13. 1388
  14. 1421
  15. 1515
  16. 1695
  17. 17174
  18. 18414
  19. 1955
  20. 20222
  21. 2157
  22. 2238
  23. 2374
  24. 24120
  25. 25120
  26. 26116
  27. 27225
  28. 2846
  29. 2948
  30. 3089
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.2
    CVE-2025-49002 Public exploit Scanner template EPSS 51%

    Dataease H2 Database Remote Code Execution (RCE) Bypass Vulnerability

    DataEase is an open source business intelligence and data visualization tool. Versions prior to version 2.10.10 have a flaw in the patch for CVE-2025-32966 that allow the patch to be bypassed through case insensitivity because INIT and RUNSCRIPT are prohibite…

    dataease dataease
  • High 7.5
    CVE-2025-4138 Public exploit

    Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory

    Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata. You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives u…

    Python Software Foundation CPython python3 python3.12 Debian Ubuntu Azure Linux Alpine Wolfi
  • Critical 9.4
    CVE-2025-4517 Public exploit

    Arbitrary writes via tarfile realpath overflow

    Allows arbitrary filesystem writes outside the extraction directory during extraction with filter="data". You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() usin…

    Python Software Foundation CPython python3 python3.12 Debian Ubuntu Azure Linux Alpine Wolfi
  • High 8.6
    CVE-2025-21479 Exploited Public exploit

    Incorrect Authorization in Graphics

    Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

    Qualcomm Snapdragon
    KEV Jun 3, 2025
  • Medium 5.9
    CVE-2025-31710 Public exploit

    In engineermode service, there is a possible command injection due to improper input validation. This could lead to loc…

    Unisoc (Shanghai) Technologies SC9863A/T606/T612/T616/T750/T765/T760/T770/T820/S8000/T8300/T9300
  • Critical 9.8
    CVE-2025-44148 Public exploit Scanner template EPSS 55%

    Cross Site Scripting (XSS) vulnerability in MailEnable before v10 allows a remote attacker to execute arbitrary code vi…