Skip to content
OpenAdvisories

Archive

4 June 2025

Vulnerabilities first published on this day (UTC), newest first.

← May 2025 2025 / June /4 July 2025 →
  1. 119
  2. 2121
  3. 3116
  4. 4134
  5. 597
  6. 6344
  7. 715
  8. 833
  9. 9181
  10. 10490
  11. 1159
  12. 1280
  13. 1388
  14. 1421
  15. 1515
  16. 1695
  17. 17174
  18. 18414
  19. 1955
  20. 20222
  21. 2157
  22. 2238
  23. 2374
  24. 24120
  25. 25120
  26. 26116
  27. 27225
  28. 2846
  29. 2948
  30. 3089
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.5
    CVE-2025-5688 Public exploit

    Out of Bounds Write in FreeRTOS-Plus-TCP

    We have identified a buffer overflow issue allowing out-of-bounds write when processing LLMNR or mDNS queries with very long DNS names. This issue only affects systems using Buffer Allocation Scheme 1 with LLMNR or mDNS enabled. Users should upgrade to the la…

    amazon FreeRTOS
  • Critical 9.8
    CVE-2025-4578 Public exploit

    File Provider <= 1.2.3 - Unauthenticated SQLi

    The File Provider WordPress plugin through 1.2.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection

    Web / CMS
  • Critical 9.8
    CVE-2025-49223 Public exploit

    billboard.js allows prototype pollution via the function generate

    billboard.js before 3.15.1 was discovered to contain a prototype pollution via the function generate, which could allow attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.

    NAVER billboard.js cacti billboard.js Ubuntu npm
  • High 7.3
    CVE-2025-5548 Public exploit EPSS 16%

    FreeFloat FTP Server NOOP Command buffer overflow

    A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. Affected is an unknown function of the component NOOP Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The explo…

    Freefloat FTP Server
  • High 8.2
    CVE-2025-29093 Public exploit

    File Upload vulnerability in Motivian Content Mangment System v.41.0.0 allows a remote attacker to execute arbitrary co…

  • Medium 6.1
    CVE-2025-29094 Public exploit

    Cross Site Scripting vulnerability in Motivian Content Mangment System v.41.0.0 allows a remote attacker to execute arb…

  • Medium 6.5
    CVE-2025-46204 Public exploit

    An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the /course/edit/{id} endpoint.

  • Medium 6.5
    CVE-2025-46203 Public exploit

    An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the /students/edit/{id} endpoint.