Skip to content
OpenAdvisories

Archive

3 June 2025

Vulnerabilities first published on this day (UTC), newest first.

← May 2025 2025 / June /3 July 2025 →
  1. 119
  2. 2121
  3. 3116
  4. 4134
  5. 597
  6. 6344
  7. 715
  8. 833
  9. 9181
  10. 10490
  11. 1159
  12. 1280
  13. 1388
  14. 1421
  15. 1515
  16. 1695
  17. 17174
  18. 18414
  19. 1955
  20. 20222
  21. 2157
  22. 2238
  23. 2374
  24. 24120
  25. 25120
  26. 26116
  27. 27225
  28. 2846
  29. 2948
  30. 3089
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Low 2.4
    CVE-2025-5543

    TOTOLINK X2000R Parent Controls Page cross site scripting

    A vulnerability was found in TOTOLINK X2000R 1.0.0-B20230726.1108. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Parent Controls Page. The manipulation of the argument Device Name leads to cro…

    Toto Link X2000R
  • Low 2.4
    CVE-2025-5542

    TOTOLINK X2000R Virtual Server Page formPortFw cross site scripting

    A vulnerability was found in TOTOLINK X2000R 1.0.0-B20230726.1108. It has been classified as problematic. Affected is an unknown function of the file /boafrm/formPortFw of the component Virtual Server Page. The manipulation of the argument service_type leads …

    Toto Link X2000R
  • Low 3.5
    CVE-2025-49000

    InvenTree has uncontrolled memory allocation via built-in label-sheet plugin

    InvenTree is an Open Source Inventory Management System. Prior to version 0.17.13, the skip field in the built-in `label-sheet` plugin lacks an upper bound, so a large value forces the server to allocate an enormous Python list. This lets any authenticated la…

    inventree InvenTree
  • Low 3.5
    CVE-2025-5523

    enilu web-flash File Upload upload fileService.upload cross site scripting

    A vulnerability classified as problematic has been found in enilu web-flash 1.0. This affects the function fileService.upload of the file src/main/java/cn/enilu/flash/api/controller/FileController/upload of the component File Upload. The manipulation of the a…

    enilu web-flash
  • Low 2.4
    CVE-2025-5516

    TOTOLINK X2000R URL Filtering Page formFilter cross site scripting

    A vulnerability, which was classified as problematic, was found in TOTOLINK X2000R 1.0.0-B20230726.1108. This affects an unknown part of the file /boafrm/formFilter of the component URL Filtering Page. The manipulation of the argument URL Address leads to cro…

    Toto Link X2000R
  • Low 3.5
    CVE-2025-5513

    quequnlong shiyi-blog add cross site scripting

    A vulnerability has been found in quequnlong shiyi-blog up to 1.2.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /dev-api/api/comment/add. The manipulation of the argument content leads to cross site sc…

    quequnlong shiyi-blog
  • Low 2.4
    CVE-2025-5508

    TOTOLINK A3002RU IP Port Filtering Page cross site scripting

    A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011. It has been rated as problematic. Affected by this issue is some unknown functionality of the component IP Port Filtering Page. The manipulation of the argument Comment leads to cross site sc…

    Toto Link A3002RU
  • Low 2.4
    CVE-2025-5507

    TOTOLINK A3002RU MAC Filtering Page cross site scripting

    A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component MAC Filtering Page. The manipulation of the argument Comment leads to cross si…

    Toto Link A3002RU
  • Low 2.4
    CVE-2025-5506

    TOTOLINK A3002RU NAT Mapping Page cross site scripting

    A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011. It has been classified as problematic. Affected is an unknown function of the component NAT Mapping Page. The manipulation of the argument Comment leads to cross site scripting. It is possibl…

    Toto Link A3002RU
  • Low 2.4
    CVE-2025-5505

    TOTOLINK A3002RU Virtual Server Page formPortFw cross site scripting

    A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011 and classified as problematic. This issue affects some unknown processing of the file /boafrm/formPortFw of the component Virtual Server Page. The manipulation of the argument service_type lea…

    Toto Link A3002RU