Skip to content
OpenAdvisories

Archive

24 June 2025

Vulnerabilities first published on this day (UTC), newest first.

← May 2025 2025 / June /24 July 2025 →
  1. 119
  2. 2121
  3. 3116
  4. 4134
  5. 597
  6. 6344
  7. 715
  8. 833
  9. 9181
  10. 10490
  11. 1159
  12. 1280
  13. 1388
  14. 1421
  15. 1515
  16. 1695
  17. 17174
  18. 18414
  19. 1955
  20. 20222
  21. 2157
  22. 2238
  23. 2374
  24. 24120
  25. 25120
  26. 26116
  27. 27225
  28. 2846
  29. 2948
  30. 3089
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.1
    CVE-2025-48466 Public exploit

    Modbus Command Injection without Authentication

    Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digital Outputs, potentially allowing remote control of relay channel which may lead to operational or safety risks.

    Advantech Advantech Wireless Sensing and Equipment (WISE)
  • Medium 5.0
    CVE-2025-48461 Public exploit

    Weak Session Cookie Entropy

    Successful exploitation of the vulnerability could allow an unauthenticated attacker to conduct brute force guessing and account takeover as the session cookies are predictable, potentially allowing the attackers to gain root, admin or user access and reset p…

    Advantech Advantech Wireless Sensing and Equipment (WISE)
  • Critical 10.0
    CVE-2025-34040 Public exploit Scanner template EPSS 15%

    Seeyon Zhiyuan OA System Path Traversal File Upload

    An arbitrary file upload vulnerability exists in the Zhiyuan OA platform via the wpsAssistServlet interface. The realFileType and fileId parameters are improperly validated during multipart file uploads, allowing unauthenticated attackers to upload crafted JS…

    Seeyon (Beijing Zhiyuan Internet Software Co., Ltd.) Zhiyuan OA Web Application System
  • Critical 10.0
    CVE-2025-34037 Public exploit EPSS 96%

    Linksys Routers E/WAG/WAP/WES/WET/WRT-Series

    An OS command injection vulnerability exists in various models of E-Series Linksys routers via the /tmUnblock.cgi and /hndUnblock.cgi endpoints over HTTP on port 8080. The CGI scripts improperly process user-supplied input passed to the ttcp_ip parameter with…

    Linksys E3200 E1000 v1 E3000