Skip to content
OpenAdvisories

Archive

27 June 2025

Vulnerabilities first published on this day (UTC), newest first.

← May 2025 2025 / June /27 July 2025 →
  1. 119
  2. 2121
  3. 3116
  4. 4134
  5. 597
  6. 6344
  7. 715
  8. 833
  9. 9181
  10. 10490
  11. 1159
  12. 1280
  13. 1388
  14. 1421
  15. 1515
  16. 1695
  17. 17174
  18. 18414
  19. 1955
  20. 20222
  21. 2157
  22. 2238
  23. 2374
  24. 24120
  25. 25120
  26. 26116
  27. 27225
  28. 2846
  29. 2948
  30. 3089
All Critical High Medium Low Exploited only Public exploit

95 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-41418

    Buffer Overflow vulnerability exists in multiple versions of TB-eye network recorders and AHD recorders. The CGI proces…

    TB-eye PRN-4011N/TE XRN-820S/TE HRX-821/TE
  • Medium 6.4
    CVE-2025-6488

    isMobile <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via device Parameter

    The isMobile plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘device’ parameter in all versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacker…

    jairoochoa isMobile() Shortcode for WordPress Web / CMS
  • Medium 6.3
    CVE-2025-6753

    huija bicycleSharingServer AdminController.java selectAdminByNameLike sql injection

    A vulnerability was found in huija bicycleSharingServer 1.0 and classified as critical. This issue affects the function selectAdminByNameLike of the file AdminController.java. The manipulation leads to sql injection. The attack may be initiated remotely. The …

    huija bicycleSharingServer
  • Medium 6.3
    CVE-2025-6749

    huija bicycleSharingServer AdminController.java searchAdminMessageShow sql injection

    A vulnerability classified as critical was found in huija bicycleSharingServer up to 7b8a3ba48ad618604abd4797d2e7cf3b5ac7625a. Affected by this vulnerability is the function searchAdminMessageShow of the file AdminController.java. The manipulation of the argu…

    huija bicycleSharingServer
  • Medium 6.3
    CVE-2025-6738

    huija bicycleSharingServer UserServiceImpl.java userDao.selectUserByUserNameLike sql injection

    A vulnerability, which was classified as critical, has been found in huija bicycleSharingServer up to 7b8a3ba48ad618604abd4797d2e7cf3b5ac7625a. Affected by this issue is the function userDao.selectUserByUserNameLike of the file UserServiceImpl.java. The manip…

    huija bicycleSharingServer
  • Medium 6.1
    CVE-2025-50367

    A stored blind XSS vulnerability exists in the Contact Page of the Phpgurukul Medical Card Generation System 1.0 mcgs/c…

  • Medium 6.5
    CVE-2025-50369

    A Cross-Site Request Forgery (CSRF) vulnerability exists in the Manage Card functionality (/mcgs/admin/manage-card.php)…

  • Medium 6.5
    CVE-2025-50370

    A Cross-Site Request Forgery (CSRF) vulnerability exists in the Inquiry Management functionality /mcgs/admin/readenq.ph…

  • Medium 6.5
    CVE-2025-45737 Public exploit

    An issue in NetEase (Hangzhou) Network Co., Ltd NeacSafe64 Driver before v1.0.0.8 allows attackers to escalate privileg…

  • Medium 6.3
    CVE-2025-45729

    D-Link DIR-823-Pro 1.02 has improper permission control, allowing unauthorized users to turn on and access Telnet servi…

  • Medium 6.3
    CVE-2025-44163

    raspap-webgui has a Directory Traversal vulnerability

    RaspAP raspap-webgui 3.3.1 is vulnerable to Directory Traversal in ajax/networking/get_wgkey.php. An authenticated attacker can send a crafted POST request with a path traversal payload in the `entity` parameter to overwrite arbitrary files writable by the we…

    billz/raspap-webgui Packagist
  • Medium 6.5
    CVE-2025-44559

    An issue in the Bluetooth Low Energy (BLE) stack of Realtek RTL8762E BLE SDK v1.4.0 allows attackers within Bluetooth r…

  • Medium 5.6
    CVE-2025-52993

    A race condition in the Nix, Lix, and Guix package managers enables changing the ownership of arbitrary files to the UI…

    NixOS Nix guix guix Debian Ubuntu
  • Medium 6.4
    CVE-2025-47822

    Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have an on-chip debug interface with improper…

    Flock Safety License Plate Reader
  • Medium 6.4
    CVE-2025-47819

    Flock Safety Gunshot Detection devices before 1.3 have an on-chip debug interface with improper access control.

    Flock Safety Gunshot Detection devices