Skip to content
OpenAdvisories

Archive

30 June 2025

Vulnerabilities first published on this day (UTC), newest first.

← May 2025 2025 / June /30 July 2025 →
  1. 119
  2. 2121
  3. 3116
  4. 4134
  5. 597
  6. 6344
  7. 715
  8. 833
  9. 9181
  10. 10490
  11. 1159
  12. 1280
  13. 1388
  14. 1421
  15. 1515
  16. 1695
  17. 17174
  18. 18414
  19. 1955
  20. 20222
  21. 2157
  22. 2238
  23. 2374
  24. 24120
  25. 25120
  26. 26116
  27. 27225
  28. 2846
  29. 2948
  30. 3089
All Critical High Medium Low Exploited only Public exploit

89 results · Feed

  • High 7.5
    CVE-2024-53621

    A buffer overflow in the formSetCfm() function of Tenda AC1206 1200M 11ac US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 allo…

  • Critical 9.3
    CVE-2025-32463 Exploited Public exploit EPSS 56%

    Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directo…

    sudo-project sudo sudo sudo Debian Ubuntu Azure Linux Alpine Wolfi
    KEV Sep 29, 2025
  • Low 2.8
    CVE-2025-32462 Public exploit

    Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, all…

    sudo-project sudo sudo sudo Debian Ubuntu Azure Linux Alpine Wolfi
  • High 8.8
    CVE-2025-46014

    Several services in Honor Device Co., Ltd Honor PC Manager v16.0.0.118 was discovered to connect services to the named …

  • Critical 9.8
    CVE-2025-45931

    An issue D-Link DIR-816-A2 DIR-816A2_FWv1.10CNB05_R1B011D88210 allows a remote attacker to execute arbitrary code via s…

  • High 7.0
    CVE-2025-45143

    string-math's string-math.js vulnerability can cause Regex Denial of Service (ReDoS)

    string-math v1.2.2 was discovered to contain a Regex Denial of Service (ReDoS) which is exploited via a crafted input.

    string-math npm
  • Medium 5.8
    CVE-2025-52491

    Akamai CloudTest before 60 2025.06.09 (12989) allows SSRF.

    Akamai CloudTest
  • Critical 9.8
    CVE-2025-26074

    Conductor vulnerable to OS command injection through unrestricted access to Java classes

    Orkes Conductor v3.21.11 allows remote attackers to execute arbitrary OS commands through unrestricted access to Java classes.

    org.conductoross:conductor-core Maven
  • Medium 5.8
    CVE-2025-49493 Public exploit Scanner template

    Akamai CloudTest before 60 2025.06.02 (12988) allows file inclusion via XML External Entity (XXE) injection.

    Akamai CloudTest