June 2025
Published in June 2025
- criticalexploitedCVE-2025-6543: Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2019-6693
- criticalGitLab Patch Release: 18.1.1, 18.0.3, 17.11.5gitlab
- known exploitedpublic exploitCVE-2021-32030
- criticalGitLab Patch Release: 18.1.1, 18.0.3, 17.11.5gitlab
- known exploitedpublic exploitCVE-2023-0386
- criticalexploitedCVE-2024-54085: AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2023-33538
- criticalexploitedCVE-2024-0769: D-Link DIR-859 Router Path Traversal Vulnerabilitycisa-kev
- known exploitedCVE-2023-39780
- criticalexploitedCVE-2023-0386: Linux Kernel Improper Ownership Management Vulnerabilitycisa-kev
- known exploitedCVE-2024-0769
- criticalexploitedCVE-2023-33538: TP-Link Multiple Routers Command Injection Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2024-42009
- criticalGitLab Patch Release: 18.0.2, 17.11.4, 17.10.8gitlab
- known exploitedpublic exploitCVE-2024-54085
- criticalGitLab Patch Release: 18.0.2, 17.11.4, 17.10.8gitlab
- known exploitedpublic exploitCVE-2024-56145
- unknownInformation Disclosure on SSLVPN endpointfortinet
- known exploitedpublic exploitCVE-2025-21479
- criticalexploitedCVE-2025-33053: Microsoft Windows External Control of File Name or Path Vulnerabilitycisa-kev
- known exploitedCVE-2025-21480
- criticalexploitedCVE-2025-32433: Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-24016
- criticalexploitedCVE-2024-42009: RoundCube Webmail Cross-Site Scripting Vulnerabilitycisa-kev
- known exploitedCVE-2025-27038
- criticalexploitedCVE-2025-5419: Google Chromium V8 Out-of-Bounds Read and Write Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-32433
- unknownexploited[Update] Vulnerability in Roundcube (June 5, 2025)cert-fr-alerte
- known exploitedpublic exploitCVE-2025-33053
- criticalexploitedCVE-2025-21480: Qualcomm Multiple Chipsets Incorrect Authorization Vulnerabilitycisa-kev
- known exploitedCVE-2025-35939
- criticalexploitedCVE-2025-21479: Qualcomm Multiple Chipsets Incorrect Authorization Vulnerabilitycisa-kev
- known exploitedCVE-2025-3935
- criticalexploitedCVE-2025-3935: ConnectWise ScreenConnect Improper Authentication Vulnerabilitycisa-kev
- known exploitedCVE-2025-43200
- criticalexploitedCVE-2025-35939: Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-49113
- criticalexploitedCVE-2021-32030: ASUS Routers Improper Authentication Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-5419
- known exploitedpublic exploitCVE-2025-6543