Skip to content
OpenAdvisories

Archive

17 June 2025

Vulnerabilities first published on this day (UTC), newest first.

← May 2025 2025 / June /17 July 2025 →
  1. 119
  2. 2121
  3. 3116
  4. 4134
  5. 597
  6. 6344
  7. 715
  8. 833
  9. 9181
  10. 10490
  11. 1159
  12. 1280
  13. 1388
  14. 1421
  15. 1515
  16. 1695
  17. 17174
  18. 18414
  19. 1955
  20. 20222
  21. 2157
  22. 2238
  23. 2374
  24. 24120
  25. 25120
  26. 26116
  27. 27225
  28. 2846
  29. 2948
  30. 3089
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.8
    CVE-2025-34511 Public exploit EPSS 30%

    Sitecore PowerShell Extension RCE via Unrestricted Upload

    Sitecore PowerShell Extensions, an add-on to Sitecore Experience Manager (XM) and Experience Platform (XP), through version 7.0 is vulnerable to an unrestricted file upload issue. A remote, authenticated attacker can upload arbitrary files to the server using…

    Sitecore Powershell Extension
  • High 8.8
    CVE-2025-34510 Public exploit EPSS 25%

    Sitecore XM, XC, and XP Post-Auth RCE via Zip Slip

    Sitecore Experience Manager (XM), Experience Platform (XP), and Experience Commerce (XC) versions 9.0 through 9.3 and 10.0 through 10.4 are affected by a Zip Slip vulnerability. A remote, authenticated attacker can exploit this issue by sending a crafted HTTP…

    Sitecore Experience Platform Experience Manager Experience Commerce
  • Critical 10.0
    CVE-2025-49071 Public exploit

    WordPress Flozen < 1.5.1 - Arbitrary File Upload Vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in NasaTheme Flozen flozen-theme allows Upload a Web Shell to a Web Server.This issue affects Flozen: from n/a through < 1.5.1.

    NasaTheme Flozen
  • Critical 9.1
    CVE-2025-4404 Public exploit

    Freeipa: idm: privilege escalation from host to domain admin in freeipa

    A privilege escalation from host to domain vulnerability was found in the FreeIPA project. The FreeIPA package fails to validate the uniqueness of the `krbCanonicalName` for the admin account by default, allowing users to create services with the same canonic…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu
  • High 7.8
    CVE-2025-6020 Public exploit

    Linux-pam: linux-pam directory traversal

    A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Ubuntu Azure Linux
  • High 8.7
    CVE-2025-5349 Public exploit

    NetScaler ADC and NetScaler Gateway - Improper access control on the NetScaler Management Interface

    Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway

    NetScaler ADC
  • Critical 9.3
    CVE-2025-5777 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread

    Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

    NetScaler ADC Gateway
    KEV Jul 10, 2025
  • High 8.1
    CVE-2025-3515 Public exploit Scanner template

    Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.9 - Unauthenticated Arbitrary File Upload via Insufficient Blacklist Checks

    The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in all versions up to, and including, 1.3.8.9. This makes it possible for unauthenticated attackers…

    glenwpcoder Drag and Drop Multiple File Upload for Contact Form 7 Web / CMS