Skip to content
OpenAdvisories

Archive

18 June 2025

Vulnerabilities first published on this day (UTC), newest first.

← May 2025 2025 / June /18 July 2025 →
  1. 119
  2. 2121
  3. 3116
  4. 4134
  5. 597
  6. 6344
  7. 715
  8. 833
  9. 9181
  10. 10490
  11. 1159
  12. 1280
  13. 1388
  14. 1421
  15. 1515
  16. 1695
  17. 17174
  18. 18414
  19. 1955
  20. 20222
  21. 2157
  22. 2238
  23. 2374
  24. 24120
  25. 25120
  26. 26116
  27. 27225
  28. 2846
  29. 2948
  30. 3089
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-20260 Public exploit

    ClamAV PDF Scanning Buffer Overflow Vulnerability

    A vulnerability in the PDF scanning processes of ClamAV could allow an unauthenticated, remote attacker to cause a buffer overflow condition, cause a denial of service (DoS) condition, or execute arbitrary code on an affected device. This vulnerability exists…

    Cisco ClamAV clamav clamav Network devices Debian Ubuntu Azure Linux Alpine
  • High 7.2
    CVE-2025-6220 Public exploit

    Ultimate Addons for Contact Form 7 <= 3.5.12 - Authenticated (Administrator+) Arbitrary File Upload via 'save_options'

    The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'save_options' function in all versions up to, and including, 3.5.12. This makes it possible for authenticated attacker…

    themefic Ultra Addons for Contact Form 7 Web / CMS
  • Critical 9.8
    CVE-2025-1562 Public exploit Scanner template

    Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit <= 3.5.3 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation

    The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the install_or_activate_addon_plugin…

    amans2k FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce Web / CMS
  • Critical 9.9
    CVE-2025-46157 Public exploit

    An issue in EfroTech Time Trax v.1.0 allows a remote attacker to execute arbitrary code via the file attachment functio…

  • Critical 9.8
    CVE-2025-26198 Public exploit

    CloudClassroom-PHP-Project v1.0 contains a critical SQL Injection vulnerability in the loginlinkadmin.php component. Th…

  • Critical 9.8
    CVE-2025-26199 Public exploit

    CloudClassroom-PHP-Project v1.0 is affected by an insecure credential transmission vulnerability. The application trans…