İçeriğe atla
Noroxi

Yayın tarihine göre

Haziran 2025: sömürülen ve yeni ciddi CVE kayıtları

207 kayıt · 18 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 2 / 3

  • CVE-2025-5301
    43Planlayın

    Reflected Cross-Site Scripting in ONLYOFFICE Docs (DocumentServer)

    OrtaCVSS 6,1Kavram kanıtıEPSS %62

    onlyoffice · docs (documentserver)12 Haz 2025

  • CVE-2025-4278
    37İzleyin

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLab

    YüksekCVSS 8,7İstismar yokEPSS %10

    gitlab · gitlab12 Haz 2025

  • CVE-2025-47959
    31İzleyin

    Visual Studio Remote Code Execution Vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %10

    microsoft · visual studio 202212 Haz 2025

  • CVE-2025-5288
    39İzleyin

    REST API | Custom API Generator For Cross Platform And Import Export In WP 1.0.0 - 2.0.3 - Missing Authorization to Unauthenticated Privilege Escalation via pro

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    weboccults · rest api | custom api generator for cross platform and import export in wp12 Haz 2025

  • CVE-2025-5815
    21İzleyin

    Traffic Monitor <= 3.2.2 - Missing Authorization to Unauthenticated Settings Update

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    dmitriamartin · traffic monitor13 Haz 2025

  • CVE-2025-45985
    41Planlayın

    Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X26_AC8 v1.2.8, BLAC450

    KritikCVSS 9,8Kavram kanıtıEPSS %6

    b-link · bl-wr9000 firmware13 Haz 2025

  • CVE-2025-45988
    42Planlayın

    Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X26_AC8 v1.2.8, BLAC450

    KritikCVSS 9,8İstismar yokEPSS %10

    b-link · bl-wr9000 firmware13 Haz 2025

  • CVE-2025-49596
    50Planlayın

    MCP Inspector proxy server lacks authentication between the Inspector client and proxy

    KritikCVSS 9,4Kavram kanıtıEPSS %44

    modelcontextprotocol · inspector13 Haz 2025

  • CVE-2025-36041
    39İzleyin

    IBM MQ improper certificate validation

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    ibm · mq operator15 Haz 2025

  • CVE-2025-5964
    37İzleyin

    Path traversal in M-Files API

    YüksekCVSS 8,4Kavram kanıtıEPSS %13

    m-files · m-files server15 Haz 2025

  • CVE-2025-6095
    60Bu hafta

    codesiddhant Jasmin Ransomware checklogin.php sql injection

    OrtaCVSS 5,5SilahlaştırılmışEPSS %2

    codesiddhant · jasmin-ransomware15 Haz 2025

  • CVE-2025-3464
    33İzleyin

    A race condition vulnerability exists in Armoury Crate.

    YüksekCVSS 8,4Kavram kanıtıEPSS %0

    asus · armoury crate16 Haz 2025

  • CVE-2025-48976
    40Planlayın

    Apache Commons FileUpload, Apache Commons FileUpload: FileUpload DoS via part headers

    YüksekCVSS 7,5Kavram kanıtıEPSS %32

    apache · commons fileupload16 Haz 2025

  • CVE-2025-48988
    39İzleyin

    Apache Tomcat: FileUpload large number of parts with headers DoS

    YüksekCVSS 7,5Kavram kanıtıEPSS %30

    apache · tomcat16 Haz 2025

  • CVE-2025-49125
    31İzleyin

    Apache Tomcat: Security constraint bypass for pre/post-resources

    YüksekCVSS 7,5Kavram kanıtıEPSS %3

    apache · tomcat16 Haz 2025

  • CVE-2025-6087
    31İzleyin

    SSRF vulnerability in opennextjs-cloudflare via /_next/image endpoint

    YüksekCVSS 7,8İstismar yokEPSS %0

    cloudflare · create-cloudflare16 Haz 2025

  • CVE-2025-43200
    60Bu hafta

    This issue was addressed with improved checks.

    OrtaCVSS 4,2KEVSilahlaştırılmışEPSS %1

    apple · ipados16 Haz 2025

  • CVE-2025-3515
    41Planlayın

    Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.9 - Unauthenticated Arbitrary File Upload via Insufficient Blacklist Checks

    KritikCVSS 9,8Kavram kanıtıEPSS %6

    codedropz · drag and drop multiple file upload - contact form 717 Haz 2025

  • CVE-2025-4365
    30İzleyin

    NetScaler Console and NetScaler SDX (SVM) - Arbitrary file read

    OrtaCVSS 6,9İstismar yokEPSS %10

    citrix · netscaler console17 Haz 2025

  • CVE-2025-5349
    36İzleyin

    NetScaler ADC and NetScaler Gateway - Improper access control on the NetScaler Management Interface

    YüksekCVSS 8,7Kavram kanıtıEPSS %6

    citrix · netscaler application delivery controller17 Haz 2025

  • CVE-2025-4404
    37İzleyin

    Freeipa: idm: privilege escalation from host to domain admin in freeipa

    KritikCVSS 9,1Kavram kanıtıEPSS %1

    red hat · red hat enterprise linux 1017 Haz 2025

  • CVE-2025-34508
    43Planlayın

    ZendTo < 6.15-8 Path Traversal

    OrtaCVSS 5,3İstismar yokEPSS %73

    zendto · zendto17 Haz 2025

  • CVE-2025-49071
    40Planlayın

    WordPress Flozen < 1.5.1 - Arbitrary File Upload Vulnerability

    KritikCVSS 10,0Kavram kanıtıEPSS %0

    nasatheme · flozen17 Haz 2025

  • CVE-2025-49857
    17İzleyin

    WordPress myCred plugin <= 2.9.4.2 - Broken Access Control Vulnerability

    OrtaCVSS 4,3İstismar yokEPSS %0

    saad iqbal · mycred17 Haz 2025

  • CVE-2025-5777
    97Hemen

    NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread

    KritikCVSS 9,3KEVSilahlaştırılmışEPSS %99

    citrix · netscaler application delivery controller17 Haz 2025

  • CVE-2025-34509
    47Planlayın

    Sitecore XM and XP Hardcoded Credentials

    YüksekCVSS 7,5Kavram kanıtıEPSS %55

    sitecore · experience commerce17 Haz 2025

  • CVE-2025-34510
    42Planlayın

    Sitecore XM, XC, and XP Post-Auth RCE via Zip Slip

    YüksekCVSS 8,8SilahlaştırılmışEPSS %24

    sitecore · experience commerce17 Haz 2025

  • CVE-2025-34511
    44Planlayın

    Sitecore PowerShell Extension RCE via Unrestricted Upload

    YüksekCVSS 8,8SilahlaştırılmışEPSS %29

    sitecore · experience commerce17 Haz 2025

  • CVE-2025-49212
    43Planlayın

    An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code exe

    KritikCVSS 9,8İstismar yokEPSS %13

    trendmicro · trend micro endpoint encryption17 Haz 2025

  • CVE-2025-49213
    43Planlayın

    An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code exe

    KritikCVSS 9,8İstismar yokEPSS %13

    trendmicro · trend micro endpoint encryption17 Haz 2025

  • CVE-2025-49825
    41Planlayın

    Teleport allows remote authentication bypass

    KritikCVSS 9,8Kavram kanıtıEPSS %7

    gravitational · teleport17 Haz 2025

  • CVE-2025-1562
    40Planlayın

    Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit <= 3.5.3 - Missing Authorization to Unauthenticated Arbitra

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    funnelkit · funnelkit automations18 Haz 2025

  • CVE-2025-6220
    28İzleyin

    Ultimate Addons for Contact Form 7 <= 3.5.12 - Authenticated (Administrator+) Arbitrary File Upload via 'save_options'

    YüksekCVSS 7,2Kavram kanıtıEPSS %1

    themefic · ultimate addons for contact form 718 Haz 2025

  • CVE-2025-46157
    39İzleyin

    An issue in EfroTech Time Trax v.1.0 allows a remote attacker to execute arbitrary code via the file attachment function in the leave reques

    KritikCVSS 9,9Kavram kanıtıEPSS %0

    efrotech · timetrax18 Haz 2025

  • CVE-2025-20260
    39İzleyin

    ClamAV PDF Scanning Buffer Overflow Vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    clamav · clamav18 Haz 2025

  • CVE-2025-26198
    39İzleyin

    CloudClassroom-PHP-Project v1.0 contains a critical SQL Injection vulnerability in the loginlinkadmin.php component.

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    vishalmathur · cloudclassroom-php project18 Haz 2025

  • CVE-2025-6191
    38İzleyin

    Integer overflow in V8 in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially perform out of bounds memory access

    YüksekCVSS 8,8İstismar yokEPSS %11

    google · chrome18 Haz 2025

  • CVE-2025-26199
    39İzleyin

    CloudClassroom-PHP-Project v1.0 is affected by an insecure credential transmission vulnerability.

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    vishalmathur · cloudclassroom-php project18 Haz 2025

  • CVE-2025-23121
    42Planlayın

    A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user

    YüksekCVSS 8,8İstismar yokEPSS %24

    veeam · veeam backup \& replication18 Haz 2025

  • CVE-2025-24286
    25İzleyin

    A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute arbitrary code.

    OrtaCVSS 4,9İstismar yokEPSS %19

    veeam · veeam backup \& replication18 Haz 2025

  • CVE-2025-52467
    36İzleyin

    pgai secrets exfiltration via `pull_request_target`

    KritikCVSS 9,1Kavram kanıtıEPSS %0

    timescale · pgai18 Haz 2025

  • CVE-2025-6019
    28İzleyin

    Libblockdev: lpe from allow_active to root in libblockdev via udisks

    YüksekCVSS 7,0Kavram kanıtıEPSS %0

    red hat · red hat enterprise linux 1019 Haz 2025

  • CVE-2025-52464
    38İzleyin

    Meshtastic Repeated Public and Private Keypairs

    KritikCVSS 9,5Kavram kanıtıEPSS %0

    meshtastic · meshtastic firmware19 Haz 2025

  • CVE-2025-6384
    29İzleyin

    Improper Control of Dynamically-Managed Code Resources in Crafter Studio

    YüksekCVSS 7,3Kavram kanıtıEPSS %0

    craftercms · craftercms19 Haz 2025

  • CVE-2025-6264
    22İzleyin

    Velociraptor priviledge escalation via UpdateConfig artifact

    OrtaCVSS 5,5Kavram kanıtıEPSS %1

    rapid7 · velociraptor19 Haz 2025

  • CVE-2025-6299
    11İzleyin

    TOTOLINK N150RT formWSC os command injection

    DüşükCVSS 2,0İstismar yokEPSS %11

    totolink · n150rt firmware19 Haz 2025

  • CVE-2025-6335
    10İzleyin

    DedeCMS Template dedetag.class.php command injection

    DüşükCVSS 2,0Kavram kanıtıEPSS %6

    dedecms · dedecms20 Haz 2025

  • CVE-2025-44203
    30İzleyin

    In HotelDruid 3.0.0 and 3.0.7, the unauthenticated database-setup endpoint creadb.php can be reached before setup is completed and performs

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    digitaldruid · hoteldruid20 Haz 2025

  • CVE-2025-49132
    60Bu hafta

    Pterodactyl Panel Allows Unauthenticated Arbitrary Remote Code Execution

    KritikCVSS 10,0SilahlaştırılmışEPSS %54

    pterodactyl · panel20 Haz 2025

  • CVE-2025-5121
    43Planlayın

    Missing Authorization in GitLab

    KritikCVSS 9,9İstismar yokEPSS %12

    gitlab · gitlab20 Haz 2025

  • CVE-2024-4994
    32İzleyin

    Cross-Site Request Forgery (CSRF) in GitLab

    YüksekCVSS 8,1İstismar yokEPSS %0

    gitlab · gitlab20 Haz 2025

  • CVE-2025-25034
    60Bu hafta

    SugarCRM PHP Deserialization RCE

    KritikCVSS 9,3SilahlaştırılmışEPSS %4

    sugarcrm · sugarcrm20 Haz 2025

  • CVE-2025-25037
    37İzleyin

    Aquatronica Controller System Complete Information Disclosure

    KritikCVSS 9,3Kavram kanıtıEPSS %1

    aquatronica · aquatronica controller system20 Haz 2025

  • CVE-2025-34030
    56Planlayın

    sar2html OS Command Injection

    KritikCVSS 10,0Kavram kanıtıEPSS %54

    sar2html · sar2html20 Haz 2025

  • CVE-2025-34023
    34İzleyin

    Karel IP Phone IP1211 Path Traversal

    YüksekCVSS 8,5Kavram kanıtıEPSS %1

    karel · karel ip phone ip121120 Haz 2025

  • CVE-2025-6216
    53Planlayın

    Allegra calculateTokenExpDate Password Recovery Authentication Bypass Vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %47

    alltena · allegra20 Haz 2025

  • CVE-2025-6218
    88Hemen

    RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %90

    rarlab · winrar20 Haz 2025

  • CVE-2025-52488
    45Planlayın

    DNN.PLATFORM leaks NTLM hash via SMB Share Interaction with malicious user input

    YüksekCVSS 8,6Kavram kanıtıEPSS %35

    dnnsoftware · dotnetnuke20 Haz 2025

  • CVE-2025-6403
    23İzleyin

    code-projects School Fees Payment System student.php sql injection

    OrtaCVSS 5,5Kavram kanıtıEPSS %2

    fabian · school fees payment system21 Haz 2025

  • CVE-2025-2172
    30İzleyin

    Aviatrix Controller versions prior to 7.1.4208, 7.2.5090, and 8.0.0 fail to sanitize user input prior to passing the input to command line u

    OrtaCVSS 6,6İstismar yokEPSS %12

    aviatrix · controller23 Haz 2025

  • CVE-2025-48700
    60Bu hafta

    An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0 and 10.0 and 10.1.

    OrtaCVSS 6,1KEVSilahlaştırılmışEPSS %1

    synacor · zimbra collaboration suite23 Haz 2025

  • CVE-2025-52876
    32İzleyin

    In JetBrains TeamCity before 2025.03.3 reflected XSS on the favoriteIcon page was possible

    OrtaCVSS 5,4İstismar yokEPSS %37

    jetbrains · teamcity23 Haz 2025

  • CVE-2025-52877
    30İzleyin

    In JetBrains TeamCity before 2025.03.3 reflected XSS on diskUsageBuildsStats page was possible

    OrtaCVSS 4,8İstismar yokEPSS %36

    jetbrains · teamcity23 Haz 2025

  • CVE-2025-49144
    29İzleyin

    Notepad++ Privilege Escalation in Installer via Uncontrolled Executable Search Path

    YüksekCVSS 7,3Kavram kanıtıEPSS %0

    notepad-plus-plus · notepad-plus-plus23 Haz 2025

  • CVE-2025-2828
    46Planlayın

    SSRF Vulnerability in RequestsToolkit in langchain-ai/langchain

    KritikCVSS 10,0İstismar yokEPSS %21

    langchain · langchain23 Haz 2025

  • CVE-2025-34031
    35İzleyin

    Moodle LMS Jmol Plugin Path Traversal

    YüksekCVSS 8,7Kavram kanıtıEPSS %3

    geoffrowland · jmol23 Haz 2025

  • CVE-2025-34032
    20İzleyin

    Moodle LMS Jmol Plugin Cross-site Scripting (XSS)

    OrtaCVSS 5,1Kavram kanıtıEPSS %0

    geoffrowland · jmol23 Haz 2025

  • CVE-2025-34033
    33İzleyin

    5VTechnologies Blue Angel Software Suite OS Command Injection

    YüksekCVSS 7,7Kavram kanıtıEPSS %11

    5vtechnologies · blue angel software suite23 Haz 2025

  • CVE-2025-34035
    47Planlayın

    EnGenius EnShare IoT Gigabit Cloud Service Command Injection

    KritikCVSS 10,0Kavram kanıtıEPSS %22

    engeniustech · esr300 firmware23 Haz 2025

  • CVE-2025-34036
    49Planlayın

    Shenzhen TVT CCTV-DVR Command Injection

    KritikCVSS 10,0İstismar yokEPSS %30

    tvt · td-2108ts-cl firmware23 Haz 2025

  • CVE-2025-34037
    68Bu hafta

    Linksys Routers E/WAG/WAP/WES/WET/WRT-Series

    KritikCVSS 10,0SilahlaştırılmışEPSS %92

    linksys · e420023 Haz 2025

  • CVE-2025-34038
    35İzleyin

    Weaver E-cology SQL Injection

    YüksekCVSS 8,7Kavram kanıtıEPSS %2

    weaver · e-cology23 Haz 2025

  • CVE-2025-34040
    45Planlayın

    Seeyon Zhiyuan OA System Path Traversal File Upload

    KritikCVSS 10,0Kavram kanıtıEPSS %15

    seeyon (beijing zhiyuan internet software co., ltd.) · zhiyuan oa web application system23 Haz 2025

  • CVE-2025-48461
    20İzleyin

    Weak Session Cookie Entropy

    OrtaCVSS 5,0Kavram kanıtıEPSS %0

    advantech · wise-4060lan firmware23 Haz 2025

  • CVE-2025-48466
    32İzleyin

    Modbus Command Injection without Authentication

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    advantech · wise-4060lan firmware23 Haz 2025

  • CVE-2025-32975
    71Bu hafta

    Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %2

    quest · kace systems management appliance24 Haz 2025

  • CVE-2021-41691
    40Planlayın

    A SQL injection vulnerability exists in OS4Ed Open Source Information System Community v8.0 via the "student_id" and "TRANSFER{SCHOOL]" para

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    os4ed · opensis24 Haz 2025

  • CVE-2024-51977
    60Bu hafta

    Unauthenticated leak of sensitive information affecting multiple models from Brother Industries, Ltd., FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Kon

    OrtaCVSS 5,3SilahlaştırılmışEPSS %46

    brother industries, ltd · hl-l8260cdn25 Haz 2025

  • CVE-2024-51978
    60Bu hafta

    Authentication bypass via default password generation affecting multiple models from Brother Industries, Ltd, Toshiba Tec, and Konica Minolta, Inc.

    KritikCVSS 9,8SilahlaştırılmışEPSS %15

    brother industries, ltd · dcp-j928n-w/b25 Haz 2025

  • CVE-2024-51982
    33İzleyin

    Unauthenticated Denial of Service (DoS) via malformed PJL request affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, and Rico

    YüksekCVSS 7,5İstismar yokEPSS %10

    brother industries, ltd · hl-l8260cdn25 Haz 2025

  • CVE-2024-51983
    34İzleyin

    Unauthenticated Denial of Service (DoS) via malformed WS-Scan request affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Rico

    YüksekCVSS 7,5İstismar yokEPSS %11

    brother industries, ltd · hl-l8260cdn25 Haz 2025

  • CVE-2025-6543
    69Bu hafta

    Memory overflow vulnerability leading to unintended control flow and Denial of Service

    KritikCVSS 9,2KEVSilahlaştırılmışEPSS %10

    citrix · netscaler application delivery controller25 Haz 2025

  • CVE-2025-48954
    24İzleyin

    Discourse vulnerable to XSS via user-provided query parameter in oauth failure flow

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    discourse · discourse25 Haz 2025

  • CVE-2024-57708
    22İzleyin

    An issue in OneTrust SDK v.6.33.0 allows a local attacker to cause a denial of service via the Object.setPrototypeOf, __proto__, and Object.

    OrtaCVSS 5,7Kavram kanıtıEPSS %0

    25 Haz 2025

  • CVE-2025-20281
    99Hemen

    Cisco ISE API Unauthenticated Remote Code Execution Vulnerability

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %97

    cisco · identity services engine25 Haz 2025

  • CVE-2025-20282
    52Planlayın

    Cisco ISE API Unauthenticated Remote Code Execution Vulnerability

    KritikCVSS 10,0Kavram kanıtıEPSS %38

    cisco · identity services engine25 Haz 2025

  • CVE-2025-52999
    34İzleyin

    jackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    fasterxml · jackson-core25 Haz 2025

  • CVE-2025-36038
    43Planlayın

    IBM WebSphere Application Server code execution

    KritikCVSS 9,8İstismar yokEPSS %13

    ibm · websphere application server25 Haz 2025

  • CVE-2025-4334
    40Planlayın

    Simple User Registration <= 6.3 - Unauthenticated Privilege Escalation

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    najeebmedia · memberhero25 Haz 2025

  • CVE-2025-34045
    35İzleyin

    WeiPHP Path Traversal Arbitrary File Read

    YüksekCVSS 8,7Kavram kanıtıEPSS %4

    weiphp · weiphp26 Haz 2025

  • CVE-2025-45737
    26İzleyin

    An issue in NetEase (Hangzhou) Network Co., Ltd NeacSafe64 Driver before v1.0.0.8 allows attackers to escalate privileges via sending crafte

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    netease · neacsafe6427 Haz 2025

  • CVE-2025-5306
    40Planlayın

    Command Injection in Netflow path

    YüksekCVSS 7,0SilahlaştırılmışEPSS %35

    artica · pandora fms27 Haz 2025

  • CVE-2025-52207
    39İzleyin

    PBXCoreREST/Controllers/Files/PostController.php in MikoPBX through 2024.1.114 allows uploading a PHP script to an arbitrary directory.

    KritikCVSS 9,9Kavram kanıtıEPSS %1

    miko · mikopbx27 Haz 2025

  • CVE-2025-5304
    39İzleyin

    PT Project Notebooks 1.0.0 - 1.1.3 - Missing Authorization to Unauthenticated Privilege Escalation via wpnb_pto_new_users_add Function

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    ptoffice · pt project notebooks28 Haz 2025

  • CVE-2025-53392
    27İzleyin

    In Netgate pfSense CE 2.8.0, the "WebCfg - Diagnostics: Command" privilege allows reading arbitrary files via diag_command.php dlPath direct

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    pfsense · pfsense28 Haz 2025

  • CVE-2025-5878
    22İzleyin

    ESAPI esapi-java-legacy SQL Injection Defense Encoder.encodeForSQL special element

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    esapi · esapi-java-legacy29 Haz 2025

  • CVE-2025-6860
    8İzleyin

    SourceCodester Best Salon Management System staff_commision.php sql injection

    DüşükCVSS 2,1Kavram kanıtıEPSS %0

    mayurik · best salon management system29 Haz 2025

  • CVE-2025-6867
    8İzleyin

    SourceCodester Simple Company Website manage.php sql injection

    DüşükCVSS 2,0Kavram kanıtıEPSS %0

    oretnom23 · simple company website29 Haz 2025

  • CVE-2025-6898
    13İzleyin

    D-Link DI-7300G+ in proxy_client.asp os command injection

    DüşükCVSS 2,1İstismar yokEPSS %16

    dlink · di-7300g\+ firmware30 Haz 2025

  • CVE-2025-38089
    22İzleyin

    sunrpc: handle SVC_GARBAGE during svc auth processing as auth error

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    linux · linux kernel30 Haz 2025