Skip to content
OpenAdvisories

Archive

15 June 2025

Vulnerabilities first published on this day (UTC), newest first.

← May 2025 2025 / June /15 July 2025 →
  1. 119
  2. 2121
  3. 3116
  4. 4134
  5. 597
  6. 6344
  7. 715
  8. 833
  9. 9181
  10. 10490
  11. 1159
  12. 1280
  13. 1388
  14. 1421
  15. 1515
  16. 1695
  17. 17174
  18. 18414
  19. 1955
  20. 20222
  21. 2157
  22. 2238
  23. 2374
  24. 24120
  25. 25120
  26. 26116
  27. 27225
  28. 2846
  29. 2948
  30. 3089
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 6.3
    CVE-2025-6096

    codesiddhant Jasmin Ransomware dashboard.php sql injection

    A vulnerability has been found in codesiddhant Jasmin Ransomware up to 1.0.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /dashboard.php. The manipulation of the argument Search leads to sql injection. The…

    codesiddhant Jasmin Ransomware
  • Medium 6.3
    CVE-2025-6094

    qianfox FoxCMS Download.php batchCope sql injection

    A vulnerability, which was classified as critical, has been found in qianfox FoxCMS up to 1.2.5. This issue affects the function batchCope of the file app/admin/controller/Download.php. The manipulation of the argument ids leads to sql injection. The attack m…

    QianFox FoxCMS
  • Medium 5.5
    CVE-2025-6093

    uYanki board-stm32f103rc-berial heartrate1_hal.c heartrate1_i2c_hal_write stack-based overflow

    A vulnerability classified as critical was found in uYanki board-stm32f103rc-berial up to 84daed541609cb7b46854cc6672a275d1007e295. This vulnerability affects the function heartrate1_i2c_hal_write of the file 7.Example/hal/i2c/max30100/Manual/demo2/2/heartrat…

    uYanki board-stm32f103rc-berial
  • Medium 4.3
    CVE-2025-6092

    comfyanonymous comfyui Incomplete Fix CVE-2024-10099 image cross site scripting

    A vulnerability was found in comfyanonymous comfyui up to 0.3.39. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /upload/image of the component Incomplete Fix CVE-2024-10099. The manipulation of the…

    comfyanonymous comfyui
  • Medium 6.9
    CVE-2024-25573

    Stored Cross-Site Scripting in Administrative Console Context

    Unsanitized user-supplied data saved in the PingFederate Administrative Console could trigger the execution of JavaScript code in subsequent user processing.

    Ping Identity PingFederate
  • Medium 6.9
    CVE-2025-22854

    Possible thread exhaustion from processing http responses in PingFederate Google Adapter

    Improper handling of non-200 http responses in the PingFederate Google Adapter leads to thread exhaustion under normal usage conditions.

    Ping Identity PingFederate
  • Medium 4.3
    CVE-2025-6089

    Astun Technology iShare Maps atCheckJS.aspx redirect

    A vulnerability has been found in Astun Technology iShare Maps 5.4.0 and classified as problematic. This vulnerability affects unknown code of the file atCheckJS.aspx. The manipulation of the argument ref leads to open redirect. The attack can be initiated re…

    Astun Technology iShare Maps
  • Medium 4.7
    CVE-2025-36041 Public exploit

    IBM MQ improper certificate validation

    IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, and MQ Operator SC2 3.2.0 through 3.2.12 Native HA CRR could be configured with a private key and chain other than the…

    IBM MQ Operator