CVEs published in June 2025

CVE-2023-47310Medium

misconfiguration in the default settings of MikroTik RouterOS 7 allows incoming IPv6 UDP traceroute packets, which

CVE-2025-32462High

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL

CVE-2024-24915Medium

SmartConsole: Credentials are not cleared from memory after being used.

CVE-2025-53392Medium

In Netgate pfSense CE 2.8.0, the "WebCfg - Diagnostics: Command" privilege allows reading arbitrary files

CVE-2025-4802High

GNU C Library (glibc) Vulnerability in NetApp Products

CVE-2025-2938Low

Business Logic Errors in GitLab

CVE-2025-6443High

RouterOS: Mikrotik RouterOS VXLAN Source IP Improper Access Control Vulnerability.

CVE-2025-5025High

Libcurl Vulnerability in NetApp Products

CVE-2025-4947High

Libcurl Vulnerability in NetApp Products

CVE-2025-4123High

Grafana Vulnerability in NetApp Products

CVE-2024-24916Medium

Untrusted DLLs in the installer's directory

CVE-2025-6020High

linux-pam directory traversal

CVE-2025-49794Critical

heap use after free (uaf) leads to denial of service (dos)

CVE-2025-6170Low

stack buffer overflow in xmllint interactive shell command handling

CVE-2025-49795High

Libxml: null pointer dereference leads to denial of service (dos)

CVE-2025-49796Critical

type confusion leads to denial of service (dos)

CVE-2025-27363HighCISA KEV

FreeType Out-of-Bounds Write Vulnerability

CVE-2025-24855High

Libxslt Vulnerability in NetApp Products

CVE-2024-56406High

Perl Vulnerability in NetApp Products

CVE-2024-47685Critical

Linux Kernel Vulnerability in NetApp Products

CVE-2025-4228Medium

Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability

CVE-2025-6021High

Libxml2: integer overflow in xmlbuildqname leads to stack buffer overflow in libxml2

CVE-2025-24471Medium

Improper Certificate Validation vulnerability [CWE-295] in FortiOS version 7.6.1 and below, version 7.4.7 and below may

CVE-2025-31104High

improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiADC 7.6.0 through 7.6.1, FortiADC 7.4.0 through 7.4.6, FortiADC 7.2.0 through 7.2.7, FortiADC 7.1.0 through 7.1.4, FortiADC 7.0 all versions, FortiADC 6.2 all versions, FortiADC 6.1 all versions, FortiADC 6.0 all versions, FortiADC 5.4 all versions, FortiADC 5.3 all versions, FortiADC 5.2 all versions, FortiADC 5.1 all versions, FortiADC 5.0 all versions, FortiADC 4.8 all versions, FortiADC 4.7 all versions, FortiADC 4.6 all versions, FortiADC 4.5 all versions, FortiADC 4.4 all versions, FortiADC 4.3 all versions, FortiADC 4.2 all versions, FortiADC 4.1 all versions, FortiADC 4.0 all versions, FortiADC 3.2 all versions, FortiADC 3.1 all versions, FortiADC 3.0 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>

CVE-2024-50562Medium

Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL-VPN version 7.6.0, version 7.4.6 and below, version…

CVE-2025-25250Medium

Information Disclosure on SSLVPN endpoint

CVE-2025-33035Medium

path traversal vulnerability has been reported to affect File Station 5.

CVE-2025-33031High

improper certificate validation vulnerability has been reported to affect File Station 5.

CVE-2025-30279High

improper certificate validation vulnerability has been reported to affect File Station 5.

CVE-2025-29892High

Qsync: SQL injection vulnerability has been reported to affect Qsync Central.

CVE-2025-29885High

improper certificate validation vulnerability has been reported to affect File Station 5.

CVE-2025-29884High

improper certificate validation vulnerability has been reported to affect File Station 5.

CVE-2025-29883High

improper certificate validation vulnerability has been reported to affect File Station 5.

CVE-2025-29877High

NULL pointer dereference vulnerability has been reported to affect File Station 5.

CVE-2025-29876High

NULL pointer dereference vulnerability has been reported to affect File Station 5.

CVE-2025-29873High

NULL pointer dereference vulnerability has been reported to affect File Station 5.

CVE-2025-29872High

allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5.

CVE-2025-29871Medium

out-of-bounds read vulnerability has been reported to affect File Station 5.

CVE-2025-22490High

NULL pointer dereference vulnerability has been reported to affect File Station 5.

CVE-2025-22486High

improper certificate validation vulnerability has been reported to affect File Station 5.

CVE-2025-22484Unrated

allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5.

CVE-2025-22482High

Qsync: use of externally-controlled format string vulnerability has been reported to affect Qsync Central.

CVE-2025-22481High

QTS: command injection vulnerability has been reported to affect several QNAP operating system versions.

CVE-2024-56805Medium

QTS: buffer overflow vulnerability has been reported to affect several QNAP operating system versions.

CVE-2024-50406Medium

License Center: cross-site scripting (XSS) vulnerability has been reported to affect License Center.

CVE-2024-13088High

improper authentication vulnerability has been reported to affect QHora.

CVE-2024-13087Medium

command injection vulnerability has been reported to affect QHora.

CVE-2025-32415High

Libxml2 Vulnerability in NetApp Products

CVE-2025-32414High

Libxml2 Vulnerability in NetApp Products

CVE-2025-29088Medium

SQLite Vulnerability in NetApp Products

CVE-2025-20277Low

Cisco Unified Contact Center Express Path Traversal Vulnerability