Skip to content
OpenAdvisories

Archive

9 June 2025

Vulnerabilities first published on this day (UTC), newest first.

← May 2025 2025 / June /9 July 2025 →
  1. 119
  2. 2121
  3. 3116
  4. 4134
  5. 597
  6. 6344
  7. 715
  8. 833
  9. 9181
  10. 10490
  11. 1159
  12. 1280
  13. 1388
  14. 1421
  15. 1515
  16. 1695
  17. 17174
  18. 18414
  19. 1955
  20. 20222
  21. 2157
  22. 2238
  23. 2374
  24. 24120
  25. 25120
  26. 26116
  27. 27225
  28. 2846
  29. 2948
  30. 3089
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 6.6
    CVE-2025-5915 Public exploit

    Libarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c

    A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the size of a filter block potentially exceeding the Lempel-Ziv-Storer-Schieber (LZSS) window. This means the library may attempt to read beyon…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  • Critical 9.1
    CVE-2025-49136 Public exploit

    listmonk's Sprig template Injection vulnerability leads to reading of Environment Variable for low privilege user

    listmonk is a standalone, self-hosted, newsletter and mailing list manager. Starting in version 4.0.0 and prior to version 5.0.2, the `env` and `expandenv` template functions which is enabled by default in Sprig enables capturing of env variables on host. Whi…

    knadh listmonk github.com/knadh/listmonk Go
  • Critical 9.3
    CVE-2025-47608 Public exploit

    WordPress Recover abandoned cart for WooCommerce plugin <= 2.5 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in sonalsinha21 Recover abandoned cart for WooCommerce recover-wc-abandoned-cart allows SQL Injection.This issue affects Recover abandoned cart for WooCommerce:…

    sonalsinha21 Recover abandoned cart for WooCommerce Web / CMS
  • Critical 9.8
    CVE-2025-48129 Public exploit

    WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - Privilege Escalation Vulnerability

    Incorrect Privilege Assignment vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light allows Privilege Escalation.This issue affects Spreadsheet P…

    Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light Web / CMS
  • Medium 4.3
    CVE-2025-5880 Public exploit

    Whistle get-temp-file path traversal

    A vulnerability has been found in Whistle 2.9.98 and classified as problematic. This vulnerability affects unknown code of the file /cgi-bin/sessions/get-temp-file. The manipulation of the argument filename leads to path traversal. The exploit has been disclo…

  • Medium 6.3
    CVE-2025-49131 Public exploit

    FastGPT Sandbox Vulnerable to Sandbox Bypass

    FastGPT is an open-source project that provides a platform for building, deploying, and operating AI-driven workflows and conversational agents. The Sandbox container (fastgpt-sandbox) is a specialized, isolated environment used by FastGPT to safely execute u…

    labring FastGPT
  • Medium 5.4
    CVE-2025-46041 Public exploit

    A stored cross-site scripting (XSS) vulnerability in Anchor CMS v0.12.7 allows attackers to inject malicious JavaScript…

  • Medium 6.1
    CVE-2025-46178 Public exploit

    Cross-Site Scripting (XSS) vulnerability exists in askquery.php via the eid parameter in the CloudClassroom PHP Project…