Skip to content
OpenAdvisories

Archive

25 June 2025

Vulnerabilities first published on this day (UTC), newest first.

← May 2025 2025 / June /25 July 2025 →
  1. 119
  2. 2121
  3. 3116
  4. 4134
  5. 597
  6. 6344
  7. 715
  8. 833
  9. 9181
  10. 10490
  11. 1159
  12. 1280
  13. 1388
  14. 1421
  15. 1515
  16. 1695
  17. 17174
  18. 18414
  19. 1955
  20. 20222
  21. 2157
  22. 2238
  23. 2374
  24. 24120
  25. 25120
  26. 26116
  27. 27225
  28. 2846
  29. 2948
  30. 3089
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.7
    CVE-2025-52999 Public exploit

    jackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data

    jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor. In versions prior to 2.15.0, if a user parses an input file and it has deeply nested data, Jackson could end up throwing a Stackov…

    FasterXML jackson-core druid tez Debian Ubuntu Wolfi Maven
  • Critical 10.0
    CVE-2025-20282 Public exploit Scanner template EPSS 39%

    Cisco ISE API Unauthenticated Remote Code Execution Vulnerability

    A vulnerability in an internal API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device and then execute those files on the underlying operating system as root. This vulnerability is du…

    Cisco Cisco Identity Services Engine Software Network devices
  • Critical 10.0
    CVE-2025-20281 Exploited Public exploit Scanner template EPSS 98%

    Cisco ISE API Unauthenticated Remote Code Execution Vulnerability

    A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to execute arbitrary code on the underlying operating system as root. The attacker does not require any valid credentials to exploit this vulnerab…

    Cisco Cisco Identity Services Engine Software Network devices
    KEV Jul 28, 2025
  • Critical 9.2
    CVE-2025-6543 Exploited Public exploit EPSS 10%

    Memory overflow vulnerability leading to unintended control flow and Denial of Service

    Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

    NetScaler ADC Gateway
    KEV Jun 30, 2025
  • Critical 9.8
    CVE-2024-51978 Public exploit Scanner template EPSS 16%

    Authentication bypass via default password generation affecting multiple models from Brother Industries, Ltd, Toshiba Tec, and Konica Minolta, Inc.

    An unauthenticated attacker who knows the target device's serial number, can generate the default administrator password for the device. An unauthenticated attacker can first discover the target device's serial number via CVE-2024-51977 over HTTP/HTTPS/IPP, o…

    BROTHER INDUSTRIES MFC-L8610CDW DCP-L8410CDW MFC-L8690CDW
  • Medium 5.3
    CVE-2024-51977 Public exploit Scanner template EPSS 47%

    Unauthenticated leak of sensitive information affecting multiple models from Brother Industries, Ltd., FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc.

    An unauthenticated attacker who can access either the HTTP service (TCP port 80), the HTTPS service (TCP port 443), or the IPP service (TCP port 631), can leak several pieces of sensitive information from a vulnerable device. The URI path /etc/mnt_info.csv ca…

    BROTHER INDUSTRIES MFC-L8610CDW DCP-L8410CDW MFC-L8690CDW
  • Medium 5.7
    CVE-2024-57708 Public exploit

    An issue in OneTrust SDK v.6.33.0 allows a local attacker to cause a denial of service via the Object.setPrototypeOf, _…