Skip to content
OpenAdvisories

Archive

30 June 2025

Vulnerabilities first published on this day (UTC), newest first.

← May 2025 2025 / June /30 July 2025 →
  1. 119
  2. 2121
  3. 3116
  4. 4134
  5. 597
  6. 6344
  7. 715
  8. 833
  9. 9181
  10. 10490
  11. 1159
  12. 1280
  13. 1388
  14. 1421
  15. 1515
  16. 1695
  17. 17174
  18. 18414
  19. 1955
  20. 20222
  21. 2157
  22. 2238
  23. 2374
  24. 24120
  25. 25120
  26. 26116
  27. 27225
  28. 2846
  29. 2948
  30. 3089
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.1
    CVE-2025-6554 Exploited Public exploit EPSS 14%

    Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write …

    Google Chrome chromium chromium Browsers Debian Azure Linux Alpine Wolfi
    KEV Jul 2, 2025
  • High 8.8
    CVE-2025-6916 Public exploit

    TOTOLINK T6 formLoginAuth.htm Form_Login missing authentication

    A vulnerability, which was classified as critical, was found in TOTOLINK T6 4.1.5cu.748_B20211015. This affects the function Form_Login of the file /formLoginAuth.htm. The manipulation of the argument authCode/goURL leads to missing authentication. The attack…

    Toto Link T6
  • High 7.3
    CVE-2025-6907 Public exploit

    code-projects Car Rental System book_car.php sql injection

    A vulnerability classified as critical was found in code-projects Car Rental System 1.0. This vulnerability affects unknown code of the file /book_car.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. Th…

    code-projects Car Rental System
  • Critical 9.8
    CVE-2025-38089 Public exploit

    sunrpc: handle SVC_GARBAGE during svc auth processing as auth error

    In the Linux kernel, the following vulnerability has been resolved: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error tianshuo han reported a remotely-triggerable crash if the client sends a kernel RPC server a specially crafted packet. If d…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Critical 9.3
    CVE-2025-32463 Exploited Public exploit EPSS 56%

    Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directo…

    sudo-project sudo sudo sudo Debian Ubuntu Azure Linux Alpine Wolfi
    KEV Sep 29, 2025
  • Low 2.8
    CVE-2025-32462 Public exploit

    Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, all…

    sudo-project sudo sudo sudo Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 5.8
    CVE-2025-49493 Public exploit Scanner template

    Akamai CloudTest before 60 2025.06.02 (12988) allows file inclusion via XML External Entity (XXE) injection.

    Akamai CloudTest