Skip to content
OpenAdvisories

Archive

7 June 2025

Vulnerabilities first published on this day (UTC), newest first.

← May 2025 2025 / June /7 July 2025 →
  1. 119
  2. 2121
  3. 3116
  4. 4134
  5. 597
  6. 6344
  7. 715
  8. 833
  9. 9181
  10. 10490
  11. 1159
  12. 1280
  13. 1388
  14. 1421
  15. 1515
  16. 1695
  17. 17174
  18. 18414
  19. 1955
  20. 20222
  21. 2157
  22. 2238
  23. 2374
  24. 24120
  25. 25120
  26. 26116
  27. 27225
  28. 2846
  29. 2948
  30. 3089
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.3
    CVE-2025-5840 Public exploit

    SourceCodester Client Database Management System user_update_customer_order.php unrestricted upload

    A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file /user_update_customer_order.php. The manipulation of the argument uploaded_file leads to unrestricte…

    SourceCodester Client Database Management System
  • High 8.8
    CVE-2025-5839

    Tenda AC9 POST Request AdvSetLanip fromadvsetlanip buffer overflow

    A vulnerability, which was classified as critical, has been found in Tenda AC9 15.03.02.13. Affected by this issue is the function fromadvsetlanip of the file /goform/AdvSetLanip of the component POST Request Handler. The manipulation of the argument lanMask …

    Tenda AC9
  • High 7.2
    CVE-2025-5303

    LTL Freight Quotes – Freightview Edition <= 1.0.11, LTL Freight Quotes – Daylight Edition <=2.2.6 and LTL Freight Quotes – Day & Ross Edition <= 2.1.10 - Unauthenticated Stored Cross-Site Scripting via `expiry_date` Parameter

    The LTL Freight Quotes – Freightview Edition, LTL Freight Quotes – Daylight Edition and LTL Freight Quotes – Day & Ross Edition plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the expiry_date parameter in all versions up to, and includ…

    Eniture technology LTL Freight Quotes – Daylight Edition LTL Freight Quotes – Day & Ross Edition LTL Freight Quotes – Freightview Edition
  • High 7.5
    CVE-2025-5399

    WebSocket endless loop

    Due to a mistake in libcurl's WebSocket code, a malicious server can send a particularly crafted packet which makes libcurl get trapped in an endless busy-loop. There is no other way for the application to escape or exit this loop other than killing the threa…

    curl curl curl curl Debian Alpine
  • High 8.8
    CVE-2025-47601

    WordPress MaxiBlocks plugin <= 2.1.0 - Arbitrary Option Update to Privilege Escalation vulnerability

    Missing Authorization vulnerability in Christiaan Pieterse MaxiBlocks maxi-blocks allows Privilege Escalation.This issue affects MaxiBlocks: from n/a through <= 2.1.0.

    Christiaan Pieterse MaxiBlocks
  • High 8.5
    CVE-2025-49619 Public exploit EPSS 22%

    Skyvern has a Jinja runtime leak

    Skyvern through 0.1.85 is vulnerable to server-side template injection (SSTI) in the Prompt field of workflow blocks such as the Navigation v2 Block. Improper sanitization of Jinja2 template input allows authenticated users to inject crafted expressions that …

    Skyvern Skyvern skyvern PyPI