Skip to content
OpenAdvisories

Archive

15 June 2025

Vulnerabilities first published on this day (UTC), newest first.

← May 2025 2025 / June /15 July 2025 →
  1. 119
  2. 2121
  3. 3116
  4. 4134
  5. 597
  6. 6344
  7. 715
  8. 833
  9. 9181
  10. 10490
  11. 1159
  12. 1280
  13. 1388
  14. 1421
  15. 1515
  16. 1695
  17. 17174
  18. 18414
  19. 1955
  20. 20222
  21. 2157
  22. 2238
  23. 2374
  24. 24120
  25. 25120
  26. 26116
  27. 27225
  28. 2846
  29. 2948
  30. 3089
All Critical High Medium Low Exploited only Public exploit

15 results · Feed

  • Medium 6.3
    CVE-2025-6096

    codesiddhant Jasmin Ransomware dashboard.php sql injection

    A vulnerability has been found in codesiddhant Jasmin Ransomware up to 1.0.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /dashboard.php. The manipulation of the argument Search leads to sql injection. The…

    codesiddhant Jasmin Ransomware
  • High 7.3
    CVE-2025-6095 Public exploit

    codesiddhant Jasmin Ransomware checklogin.php sql injection

    A vulnerability, which was classified as critical, was found in codesiddhant Jasmin Ransomware 1.0.1. Affected is an unknown function of the file /checklogin.php. The manipulation of the argument username/password leads to sql injection. It is possible to lau…

    codesiddhant Jasmin Ransomware
  • Medium 6.3
    CVE-2025-6094

    qianfox FoxCMS Download.php batchCope sql injection

    A vulnerability, which was classified as critical, has been found in qianfox FoxCMS up to 1.2.5. This issue affects the function batchCope of the file app/admin/controller/Download.php. The manipulation of the argument ids leads to sql injection. The attack m…

    QianFox FoxCMS
  • Medium 5.5
    CVE-2025-6093

    uYanki board-stm32f103rc-berial heartrate1_hal.c heartrate1_i2c_hal_write stack-based overflow

    A vulnerability classified as critical was found in uYanki board-stm32f103rc-berial up to 84daed541609cb7b46854cc6672a275d1007e295. This vulnerability affects the function heartrate1_i2c_hal_write of the file 7.Example/hal/i2c/max30100/Manual/demo2/2/heartrat…

    uYanki board-stm32f103rc-berial
  • High 8.4
    CVE-2025-5964 Public exploit EPSS 14%

    Path traversal in M-Files API

    A path traversal issue in the API endpoint in M-Files Server before version 25.6.14925.0 allows an authenticated user to read files in the server.

    M-Files M-Files Server
  • High 7.6
    CVE-2025-5990

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty Controller

    An input neutralization vulnerability in the Server Name form and API Key form components of Crafty Controller allows a remote, authenticated attacker to perform stored XSS via malicious form input.

    Arcadia Technology Crafty Controller
  • Medium 4.3
    CVE-2025-6092

    comfyanonymous comfyui Incomplete Fix CVE-2024-10099 image cross site scripting

    A vulnerability was found in comfyanonymous comfyui up to 0.3.39. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /upload/image of the component Incomplete Fix CVE-2024-10099. The manipulation of the…

    comfyanonymous comfyui
  • High 8.8
    CVE-2025-6091

    H3C GR-3000AX aspForm UpdateIpv6Params buffer overflow

    A vulnerability was found in H3C GR-3000AX V100R007L50. It has been classified as critical. Affected is the function UpdateWanParamsMulti/UpdateIpv6Params of the file /routing/goform/aspForm. The manipulation of the argument param leads to buffer overflow. It…

    H3C GR-3000AX
  • Medium 6.9
    CVE-2024-25573

    Stored Cross-Site Scripting in Administrative Console Context

    Unsanitized user-supplied data saved in the PingFederate Administrative Console could trigger the execution of JavaScript code in subsequent user processing.

    Ping Identity PingFederate
  • Medium 6.9
    CVE-2025-22854

    Possible thread exhaustion from processing http responses in PingFederate Google Adapter

    Improper handling of non-200 http responses in the PingFederate Google Adapter leads to thread exhaustion under normal usage conditions.

    Ping Identity PingFederate
  • High 8.8
    CVE-2025-6090

    H3C GR-5400AX aspForm UpdateIpv6params buffer overflow

    A vulnerability was found in H3C GR-5400AX V100R009L50 and classified as critical. This issue affects the function UpdateWanparamsMulti/UpdateIpv6params of the file /routing/goform/aspForm. The manipulation of the argument param leads to buffer overflow. The …

    H3C GR-5400AX
  • Low 2.1
    CVE-2025-21085

    PingFederate OAuth Grant attribute duplication may use excessive memory

    PingFederate OAuth2 grant duplication in PostgreSQL persistent storage allows OAuth2 requests to use excessive memory utilization.

    Ping Identity PingFederate
  • Medium 4.3
    CVE-2025-6089

    Astun Technology iShare Maps atCheckJS.aspx redirect

    A vulnerability has been found in Astun Technology iShare Maps 5.4.0 and classified as problematic. This vulnerability affects unknown code of the file atCheckJS.aspx. The manipulation of the argument ref leads to open redirect. The attack can be initiated re…

    Astun Technology iShare Maps
  • Medium 4.7
    CVE-2025-36041 Public exploit

    IBM MQ improper certificate validation

    IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, and MQ Operator SC2 3.2.0 through 3.2.12 Native HA CRR could be configured with a private key and chain other than the…

    IBM MQ Operator
  • High 7.8
    CVE-2025-1411

    IBM Security Verify Directory Container command execution

    IBM Security Verify Directory Container 10.0.0.0 through 10.0.3.1 could allow a local user to execute commands as root due to execution with unnecessary privileges.

    IBM Security Verify Directory