Skip to content
OpenAdvisories

Archive

29 June 2025

Vulnerabilities first published on this day (UTC), newest first.

← May 2025 2025 / June /29 July 2025 →
  1. 119
  2. 2121
  3. 3116
  4. 4134
  5. 597
  6. 6344
  7. 715
  8. 833
  9. 9181
  10. 10490
  11. 1159
  12. 1280
  13. 1388
  14. 1421
  15. 1515
  16. 1695
  17. 17174
  18. 18414
  19. 1955
  20. 20222
  21. 2157
  22. 2238
  23. 2374
  24. 24120
  25. 25120
  26. 26116
  27. 27225
  28. 2846
  29. 2948
  30. 3089
All Critical High Medium Low Exploited only Public exploit

48 results · Feed

  • Medium 4.7
    CVE-2025-6841

    code-projects Product Inventory System edit_product.php sql injection

    A vulnerability has been found in code-projects Product Inventory System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/edit_product.php. The manipulation of the argument ID leads to sql injection. The attack can be…

    code-projects Product Inventory System
  • High 7.3
    CVE-2025-6840

    code-projects Product Inventory System Login index.php sql injection

    A vulnerability, which was classified as critical, was found in code-projects Product Inventory System 1.0. This affects an unknown part of the file /index.php of the component Login. The manipulation of the argument Username leads to sql injection. It is pos…

    code-projects Product Inventory System
  • Medium 6.3
    CVE-2025-6839

    Conjure Position Department Service Quality Evaluation System head.php eval backdoor

    A vulnerability, which was classified as critical, has been found in Conjure Position Department Service Quality Evaluation System up to 1.0.11. Affected by this issue is the function eval of the file public/assets/less/bootstrap-less/mixins/head.php. The man…

    Conjure Position Department Service Quality Evaluation System
  • Medium 6.3
    CVE-2025-6837

    code-projects Library System profile.php unrestricted upload

    A vulnerability classified as critical was found in code-projects Library System 1.0. Affected by this vulnerability is an unknown functionality of the file /profile.php. The manipulation of the argument image leads to unrestricted upload. The attack can be l…

    code-projects Library System
  • High 7.3
    CVE-2025-6836

    code-projects Library System profile.php sql injection

    A vulnerability classified as critical has been found in code-projects Library System 1.0. Affected is an unknown function of the file /profile.php. The manipulation of the argument phone leads to sql injection. It is possible to launch the attack remotely. T…

    code-projects Library System
  • Unscored —
    OSV-2025-500

    UNKNOWN READ in getUShort

    OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=428022218 ``` Crash type: UNKNOWN READ Crash state: getUShort disInstr_THUMB_WRK disInstr_ARM ```

    pyvex PyPI
  • High 7.3
    CVE-2025-6835

    code-projects Library System student-issue-book.php sql injection

    A vulnerability was found in code-projects Library System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student-issue-book.php. The manipulation of the argument reg leads to sql injection. The attack may be initia…

    code-projects Library System
  • Low 3.4
    CVE-2015-20112

    RLPx 5 has two CTR streams based on the same key, IV, and nonce. This can facilitate decryption on a private network.

    ethereum RLPx