Skip to content
OpenAdvisories

Archive

12 June 2025

Vulnerabilities first published on this day (UTC), newest first.

← May 2025 2025 / June /12 July 2025 →
  1. 119
  2. 2121
  3. 3116
  4. 4134
  5. 597
  6. 6344
  7. 715
  8. 833
  9. 9181
  10. 10490
  11. 1159
  12. 1280
  13. 1388
  14. 1421
  15. 1515
  16. 1695
  17. 17174
  18. 18414
  19. 1955
  20. 20222
  21. 2157
  22. 2238
  23. 2374
  24. 24120
  25. 25120
  26. 26116
  27. 27225
  28. 2846
  29. 2948
  30. 3089
All Critical High Medium Low Exploited only Public exploit

46 results · Clear filters · Feed

  • Medium 4.7
    CVE-2025-6005

    kiCode111 like-girl aboutPost.php sql injection

    A vulnerability classified as critical was found in kiCode111 like-girl 5.2.0. This vulnerability affects unknown code of the file /admin/aboutPost.php. The manipulation of the argument title/aboutimg/info1/info2/info3/btn1/btn2/infox1/infox2/infox3/infox4/in…

    kiCode111 like-girl
  • Medium 5.4
    CVE-2023-45256

    Multiple SQL injection vulnerabilities in the EuroInformation MoneticoPaiement module before 1.1.1 for PrestaShop allow…

  • Medium 6.5
    CVE-2024-44906

    uptrace pgdriver SQL injection vulnerability

    uptrace pgdriver v1.2.1 was discovered to contain a SQL injection vulnerability via the appendArg function in /pgdriver/format.go. The maintainer has stated that the issue is fixed in v1.2.15.

    kyverno-policy-reporter github.com/uptrace/bun/driver/pgdriver Wolfi Go
  • Medium 6.5
    CVE-2024-44905

    go-pg SQL injection vulnerability via the component /types/append_value.go

    go-pg pg v10.13.0 was discovered to contain a SQL injection vulnerability via the component /types/append_value.go.

    nuclei github.com/go-pg/pg golang-gopkg-pg.v5 golang-gopkg-pg.v5 Debian Ubuntu Wolfi Go
  • Medium 5.4
    CVE-2025-29744

    pg-promise SQL Injection vulnerability

    pg-promise before 11.5.5 is vulnerable to SQL Injection due to improper handling of negative numbers.

    pg-promise npm
  • Medium 5.4
    CVE-2025-44091

    yangyouwang crud v1.0.0 is vulnerable to Cross Site Scripting (XSS) via the role management function.