CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- erzhongxmu jeewms JeeWMS File filedeal.do filedeal access control 5.3 Medium
- erzhongxmu jeewms JeeWMS File generateController.do dogenerateOne2Many access control 5.3 Medium
- erzhongxmu jeewms JeeWMS generateController.do dogenerate sql injection 5.3 Medium
- erzhongxmu jeewms JeeWMS File generateController.do dogenerate access control 5.3 Medium
- erzhongxmu jeewms JeeWMS cgformTransController.do transEditor sql injection 5.3 Medium
- erzhongxmu jeewms JeeWMS cgformTemplateController.do doAdd path traversal 5.3 Medium
-
delugeMageia Updated deluge packages fix security vulnerabilities & bug No score -
delugeMageia Updated deluge packages fix security vulnerabilities & bug No score -
delugeMageia Updated deluge packages fix security vulnerabilities & bug No score -
delugeMageia Updated deluge packages fix security vulnerabilities & bug No score - erzhongxmu jeewms JeeWMS cgAutoListController.do CgAutoListController sql injection 5.3 Medium
- statamic cms, wanglongcn yifang +1 more Yifang CMS Article Management Module cross site scripting 4.8 Medium
- statamic cms, wanglongcn yifang +1 more Yifang CMS Admin Panel downloadFile path traversal 5.1 Medium
- ashinigit 天青一白 xueshengzhusu 学生住宿管理系统 ashinigit 天青一白 XueShengZhuSu 学生住宿管理系统 Image File Upload upload path traversal 5.3 Medium
- nucom nc-wr744g NuCom NC-WR744G Console Application hard-coded credentials 5.3 Medium
- astun technology ishare maps Astun Technology iShare Maps mycouncil2.aspx cross site scripting 5.3 Medium
- astun technology ishare maps Astun Technology iShare Maps historic1.asp cross site scripting 5.3 Medium
- code-projects health center patient record management system SourceCodester Health Center Patient Record Management System patient.php sql injection 6.9 Medium
- contrid newsletters Newsletters <= 4.9.9.9 - Authenticated (Administrator+) Local File Inclusion 7.2 High
- syntacticsinc easync, syntactics easync booking – hotels, restaurants & car rentals +1 more Free Booking Plugin for Hotels, Restaurants and Car Rentals – eaSYNC Booking <= 1.3.21 - Insecure Direct Object Reference to Sensitive Information Exposure 5.3 Medium
- phpgurukul hpgurukul online birth certificate system, online birth certificate system +1 more PHPGurukul HPGurukul Online Birth Certificate System registered-users.php sql injection 5.3 Medium
- phpgurukul online birth certificate system PHPGurukul Online Birth Certificate System all-applications.php sql injection 5.3 Medium
- phpgurukul online birth certificate system PHPGurukul Online Birth Certificate System users-applications.php sql injection 5.3 Medium
- code-projects health center patient record management system SourceCodester Health Center Patient Record Management System admin.php sql injection 6.9 Medium
- royal-elementor-addons royal elementor addons, wproyal royal addons for elementor – addons and templates kit for elementor +1 more Royal Elementor Addons and Templates <= 1.7.1020 - Authenticated (Contributor+) Stored Cross-Site Scripting 6.4 Medium
- visualmodo borderless – addons and templates for elementor Borderless – Elementor Addons and Templates <= 1.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 6.4 Medium
- unitybusinesstechnology the e-commerce erp: purchasing, inventory, fulfillment, manufacturing, bom, accounting, sales analysis Profitori 2.0.6.0 - 2.1.1.3 - Missing Authorization to Unauthenticated Privilege Escalation via stocktend_object Endpoint 9.8 Critical
- jtewes fastspring FastSpring <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 6.4 Medium
- bdthemes element pack – widgets, templates & addons for elementor Element Pack Addons for Elementor – Best Elementor addons with Ready Templates, Blocks, Widgets and WooCommerce Builder <= 5.11.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting 6.4 Medium
- spiderwares product subtitle for woocommerce Product Subtitle for WooCommerce <= 1.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via htmlTag Parameter 6.4 Medium
- empoweringprowebsite psw front-end login & registration PSW Front-end Login & Registration <= 1.12 - Insufficiently Random Values to Unauthenticated Account Takeover/Privilege Escalation via customer_registration Function 9.8 Critical
- offsprout page builder Offsprout Page Builder 2.2.1 - 2.15.2 - Authenticated (Contributor+) Privilege Escalation via permission_callback Function 8.8 High
- daisycon prijsvergelijkers Daisycon prijsvergelijkers <= 4.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting 6.4 Medium
- luminfire wp-geometa WP-GeoMeta 0.3.4 - 0.3.5 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via wp_ajax_wpgm_start_geojson_import Function 8.8 High
- phpgurukul news portal, news portal project +1 more PHPGurukul News Portal forgot-password.php sql injection 6.9 Medium
- razormist display username after login, sourcecodester php display username after login +1 more SourceCodester PHP Display Username After Login login.php sql injection 6.9 Medium
- phpgurukul daily expense tracker system PHPGurukul Daily Expense Tracker System expense-yearwise-reports-detailed.php sql injection 5.3 Medium
- comesio relevanssi – a better search, relevanssi premium, unknown relevanssi premium +2 more Relevanssi <= 4.24.5 (Free) and <= 2.27.6 (Premium) - Unauthenticated Stored Cross-Site Scripting via Excerpt Highlights 4.7 Medium
- phpgurukul online shopping portal project, online shopping portal +1 more PHPGurukul Online Shopping Portal Project category.php sql injection 6.9 Medium
- campcodes online hospital management system Campcodes Online Hospital Management System patient-search.php sql injection 6.9 Medium
- django-helpdesk project django-helpdesk django-helpdesk Allows Sensitive Data Exposure 5.1 Medium
- campcodes online hospital management system Campcodes Online Hospital Management System add-patient.php sql injection 6.9 Medium
- campcodes online hospital management system Campcodes Online Hospital Management System index.php sql injection 6.9 Medium
-
httpdTuxCare,httpd-develTuxCare,httpd-manualTuxCare +5 more +7 more Update of httpd No score - campcodes online hospital management system Campcodes Online Hospital Management System doctor-specilization.php sql injection 6.9 Medium
- erudika para Para Server Logs Sensitive Information 6.2 Medium
- campcodes online hospital management system Campcodes Online Hospital Management System contact.php sql injection 6.9 Medium
- campcodes online hospital management system Campcodes Online Hospital Management System book-appointment.php sql injection 6.9 Medium
- open-quantum-safe liboqs liboqs affected by theoretical design flaw in HQC 3.7 Low
- lenovo pc manager, pcmanager +1 more An improper permission handling vulnerability was reported in Lenovo PC Manager that could allow... 6.9 Medium
- Show olderLoading…