Skip to content
OpenAdvisories

Archive

13 June 2025

Vulnerabilities first published on this day (UTC), newest first.

← May 2025 2025 / June /13 July 2025 →
  1. 119
  2. 2121
  3. 3116
  4. 4134
  5. 597
  6. 6344
  7. 715
  8. 833
  9. 9181
  10. 10490
  11. 1159
  12. 1280
  13. 1388
  14. 1421
  15. 1515
  16. 1695
  17. 17174
  18. 18414
  19. 1955
  20. 20222
  21. 2157
  22. 2238
  23. 2374
  24. 24120
  25. 25120
  26. 26116
  27. 27225
  28. 2846
  29. 2948
  30. 3089
All Critical High Medium Low Exploited only Public exploit

17 results · Clear filters · Feed

  • Critical 9.4
    CVE-2025-49596 Public exploit Scanner template EPSS 40%

    MCP Inspector proxy server lacks authentication between the Inspector client and proxy

    The MCP inspector is a developer tool for testing and debugging MCP servers. Versions of MCP Inspector below 0.14.1 are vulnerable to remote code execution due to lack of authentication between the Inspector client and proxy, allowing unauthenticated requests…

    Model Context Protocol inspector @modelcontextprotocol/inspector npm
  • Critical 9.4
    CVE-2025-6030

    Autoeastern Smart Keyless Entry System Replay Attack

    Use of fixed learning codes, one code to lock the car and the other code to unlock it, in the Key Fob Transmitter in Cyclone Matrix TRF Smart Keyless Entry System, which allows a replay attack. Research was completed on the 2024 KIA Soluto.  Attack confirmed …

    Autoeastern Cyclone Matrix TRF
  • Critical 9.4
    CVE-2025-6029

    KIA-branded Aftermarket Generic Smart Keyless Entry System Replay Attack

    Use of fixed learning codes, one code to lock the car and the other code to unlock it, the Key Fob Transmitter in KIA-branded Aftermarket Generic Smart Keyless Entry System, primarily distributed in Ecuador, which allows a replay attack. Manufacture is unknow…

    KIA Aftermarket Generic Smart Keyless Entry System
  • Critical 10.0
    CVE-2025-29902

    Remote code execution that allows unauthorized users to execute arbitrary code on the server machine.

    RTS Telex VLink Virtual Matrix Software Remote Dispatch Console Server
  • Critical 9.8
    CVE-2025-46783

    Path traversal vulnerability exists in RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.242.0. If this vulnerabilit…

    Ricoh Company RICOH Streamline NX V3 PC Client
  • Critical 9.6
    CVE-2024-38824

    CVE-2024-38824 salt advisory

    Directory traversal vulnerability in recv_file method allows arbitrary files to be written to the master cache directory.

    VMware SALT salt salt Ubuntu PyPI
  • Critical 9.8
    CVE-2025-5288 Public exploit

    REST API | Custom API Generator For Cross Platform And Import Export In WP 1.0.0 - 2.0.3 - Missing Authorization to Unauthenticated Privilege Escalation via process_handler Function

    The REST API | Custom API Generator For Cross Platform And Import Export In WP plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the process_handler() function in versions 1.0.0 to 2.0.3. This makes it possible fo…

    weboccults REST API | Custom API Generator For Cross Platform And Import Export In WP Web / CMS
  • Critical 9.1
    CVE-2025-28384

    OpenC3 COSMOS Vulnerable to Directory Traversal via /script-api/scripts/ endpoint

    An issue in the /script-api/scripts/ endpoint of OpenC3 COSMOS before 6.1.0 allows attackers to execute a directory traversal.

    openc3 openc3-cosmos-tool-iframe PyPI RubyGems
  • Critical 9.8
    CVE-2025-28389

    Weak password requirements in OpenC3 COSMOS v6.0.0 allow attackers to bypass authentication via a brute force attack.

    openc3 PyPI
  • Critical 9.8
    CVE-2025-28388

    OpenC3 COSMOS before v6.0.2 was discovered to contain hardcoded credentials for the Service Account.

    openc3 PyPI
  • Critical 9.8
    CVE-2025-28386

    A remote code execution (RCE) vulnerability in the Plugin Management component of OpenC3 COSMOS v6.0.0 allows attackers…

    openc3 PyPI
  • Critical 9.8
    CVE-2025-46060

    Buffer Overflow vulnerability in TOTOLINK N600R v4.3.0cu.7866_B2022506 allows a remote attacker to execute arbitrary co…

  • Critical 9.8
    CVE-2025-45984

    Blink routers BL-WR9000 V2.4.9, BL-AC1900 V1.0.2, BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 V1.0.5, BL-LTE300 V1.2.3, BL-F1200_A…

  • Critical 9.8
    CVE-2025-45985 Scanner template

    Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X2…

  • Critical 9.8
    CVE-2025-45986

    Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X2…

  • Critical 9.8
    CVE-2025-45987

    Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X2…

  • Critical 9.8
    CVE-2025-45988

    Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X2…