Skip to content
OpenAdvisories

Archive

5 June 2025

Vulnerabilities first published on this day (UTC), newest first.

← May 2025 2025 / June /5 July 2025 →
  1. 119
  2. 2121
  3. 3116
  4. 4134
  5. 597
  6. 6344
  7. 715
  8. 833
  9. 9181
  10. 10490
  11. 1159
  12. 1280
  13. 1388
  14. 1421
  15. 1515
  16. 1695
  17. 17174
  18. 18414
  19. 1955
  20. 20222
  21. 2157
  22. 2238
  23. 2374
  24. 24120
  25. 25120
  26. 26116
  27. 27225
  28. 2846
  29. 2948
  30. 3089
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-47966

    Power Automate Elevation of Privilege Vulnerability

    Exposure of sensitive information to an unauthorized actor in Power Automate allows an unauthorized attacker to elevate privileges over a network.

    Microsoft Power Automate for Desktop
  • Critical 9.3
    CVE-2025-4568

    SQL Injection in 2ClickPortal

    Improper neutralization of input provided by an unauthorized user into changes__reference_id parameter in URL allows for boolean-based Blind SQL Injection attacks.

    Trol InterMedia 2ClickPortal
  • Critical 9.8
    CVE-2025-1793

    SQL Injection in run-llama/llama_index

    Multiple vector store integrations in run-llama/llama_index version v0.12.21 have SQL injection vulnerabilities. These vulnerabilities allow an attacker to read and write data using SQL, potentially leading to unauthorized access to data of other users depend…

    run-llama run-llama/llama_index llama-index PyPI
  • Critical 9.8
    CVE-2025-5630

    D-Link DIR-816 form2lansetup.cgi stack-based overflow

    A vulnerability has been found in D-Link DIR-816 1.10CNB05 and classified as critical. This vulnerability affects unknown code of the file /goform/form2lansetup.cgi. The manipulation of the argument ip leads to stack-based buffer overflow. The attack can be i…

    D-Link DIR-816 Network devices
  • Critical —
    GHSA-862m-5253-832r

    Auth0 Wordpress Plugin vulnerable to Deserialization of Untrusted Data

    **Overview** The Auth0 Wordpress plugin contains a critical vulnerability due to insecure deserialization of cookie data. If exploited, since SDKs process cookie content without prior authentication, a threat actor could send a specially crafted cookie contai…

    auth0/wordpress Web / CMS Packagist
  • Critical 9.8
    CVE-2025-5624

    D-Link DIR-816 QoSPortSetup stack-based overflow

    A vulnerability was found in D-Link DIR-816 1.10CNB05. It has been declared as critical. This vulnerability affects the function QoSPortSetup of the file /goform/QoSPortSetup. The manipulation of the argument port0_group/port0_remarker/ssid0_group/ssid0_remar…

    D-Link DIR-816 Network devices
  • Critical 9.4
    CVE-2025-49008

    Atheos Improper Input Validation Vulnerability Enables RCE in Common.php

    Atheos is a self-hosted browser-based cloud integrated development environment. Prior to version 6.0.4, improper use of `escapeshellcmd()` in `/components/codegit/traits/execute.php` allows argument injection, leading to arbitrary command execution. Atheos ad…

    Atheos Atheos
  • Critical 9.8
    CVE-2025-5623 EPSS 20%

    D-Link DIR-816 qosClassifier stack-based overflow

    A vulnerability was found in D-Link DIR-816 1.10CNB05. It has been classified as critical. This affects the function qosClassifier of the file /goform/qosClassifier. The manipulation of the argument dip_address/sip_address leads to stack-based buffer overflow…

    D-Link DIR-816 Network devices
  • Critical 9.8
    CVE-2025-5622

    D-Link DIR-816 wirelessApcli_5g stack-based overflow

    A vulnerability was found in D-Link DIR-816 1.10CNB05 and classified as critical. Affected by this issue is the function wirelessApcli_5g of the file /goform/wirelessApcli_5g. The manipulation of the argument apcli_mode_5g/apcli_enc_5g/apcli_default_key_5g le…

    D-Link DIR-816 Network devices