Skip to content
OpenAdvisories

Archive

June 2025

Vulnerabilities first published in this month (UTC), newest first.

← May 2025 2025 / June July 2025 →
  1. 119
  2. 2121
  3. 3116
  4. 4134
  5. 597
  6. 6344
  7. 715
  8. 833
  9. 9181
  10. 10490
  11. 1159
  12. 1280
  13. 1388
  14. 1421
  15. 1515
  16. 1695
  17. 17174
  18. 18414
  19. 1955
  20. 20222
  21. 2157
  22. 2238
  23. 2374
  24. 24120
  25. 25120
  26. 26116
  27. 27225
  28. 2846
  29. 2948
  30. 3089
All Critical High Medium Low Exploited only Public exploit

126 results · Clear filters · Feed

  • Medium 5.9
    CVE-2025-31710 Public exploit

    In engineermode service, there is a possible command injection due to improper input validation. This could lead to loc…

    Unisoc (Shanghai) Technologies SC9863A/T606/T612/T616/T750/T765/T760/T770/T820/S8000/T8300/T9300
  • Critical 9.8
    CVE-2025-44148 Public exploit Scanner template EPSS 55%

    Cross Site Scripting (XSS) vulnerability in MailEnable before v10 allows a remote attacker to execute arbitrary code vi…

  • High 8.8
    CVE-2025-5419 Exploited Public exploit

    Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exp…

    Google Chrome chromium chromium Browsers Debian Alpine Wolfi
    KEV Jun 5, 2025
  • Critical 9.4
    CVE-2025-0324 Public exploit

    The VAPIX Device Configuration framework allowed a privilege escalation, enabling a lower-privileged user to gain admin…

    Axis Communications AB AXIS OS
  • High 7.3
    CVE-2025-45542 Public exploit

    SQL injection vulnerability in the registrationform endpoint of CloudClassroom-PHP-Project v1.0. The pass parameter is …

  • Critical 9.9
    CVE-2025-49113 Exploited Public exploit Scanner template EPSS 100%

    Roundcube Webmail Vulnerable to Authenticated RCE via PHP Object Deserialization

    Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execution by authenticated users because the _from parameter in a URL is not validated in program/actions/settings/upload.php, leading to PHP Object Deserialization.

    Roundcube Webmail roundcube roundcube Debian Ubuntu Packagist
    KEV Feb 20, 2026