CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- netgear ex6200, ex6200 firmware +1 moreNetgear EX6200 sub_503FC buffer overflow8.7 High
- a3rev page view countPage View Count 2.8.0 - 2.8.4 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update8.1 High
- netgear ex6200, ex6200 firmware +1 moreNetgear EX6200 sub_47F7C buffer overflow8.7 High
- netgear ex6200, ex6200 firmware +1 moreNetgear EX6200 sub_41940 buffer overflow8.7 High
- cloudflare workers-oauth-providerPKCE bypass via downgrade attack5.3 Medium
- cloudflare workers-oauth-providerMissing validation of redirect_uri on authorize endpoint6.0 Medium
- netgear ex6200, ex6200 firmware +1 moreNetgear EX6200 sub_3D0BC buffer overflow8.7 High
- ladybirdLibJS in Ladybird before f5a6704 mishandles the freeing of the vector that arguments_list...9.0 Critical
- debian trixieCertain build processes for libuv and Node.js for 32-bit systems, such as for the nodejs binary...6.5 Medium
- tenda rx2 pro firmwareAn issue was discovered on Tenda RX2 Pro 16.03.30.14 devices. Improper network isolation between...7.1 High
- tenda rx2 pro firmwareCleartext transmission of sensitive information in the web management portal of the Tenda RX2 Pro...8.2 High
- tenda rx2 pro firmwareCleartext transmission of sensitive information in the web management portal of the Tenda RX2 Pro...8.2 High
- tenda rx2 pro firmwareInitialization vector (IV) reuse in the web management portal of the Tenda RX2 Pro 16.03.30.14...6.5 Medium
- tenda rx2 pro firmwareImproper access controls in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an...6.5 Medium
- tenda rx2 pro firmwareImproper access controls in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an...6.5 Medium
- tenda rx2 pro firmwareLack of access controls in the 'ate' management binary of the Tenda RX2 Pro 16.03.30.14 allows an...6.5 Medium
- tenda rx2 pro firmwareLack of input validation/sanitization in the 'ate' management service in the Tenda RX2 Pro 16.03...7.3 High
- tenda rx2 pro firmwareUse of weak credentials in the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated attacker to...8.2 High
- tenda rx2 pro firmwareReuse of a static AES key and initialization vector for encrypted traffic to the 'ate' management...7.3 High
- tenda rx2 pro firmwareLack of input validation/sanitization in the 'setLanCfg' API endpoint in httpd in the Tenda RX2...8.8 High
- tenda w20e firmwareTenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the...6.3 Medium
- tenda w20e firmwareTenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the...6.3 Medium
- tenda w20e firmwareTenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the...6.3 Medium
- tenda w20e firmwareTenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the...6.3 Medium
- totolink ca300-poe firmwareTOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection vulnerability in...6.5 Medium
- totolink ca300-poe firmwareTOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection vulnerability in...6.3 Medium
- totolink ca300-poe firmwareTOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection vulnerability in...6.3 Medium
- totolink ca300-poe firmwareTOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection vulnerability in...6.5 Medium
- totolink cp900 firmwareTotolink CP900 V6.3c.1144_B20190715 was found to contain a command injection vulnerability in the...6.3 Medium
- totolink ca600-poe firmwareTOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in...6.5 Medium
- totolink ca600-poe firmwareTOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in...6.3 Medium
- totolink ca600-poe firmwareTOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in...6.3 Medium
- totolink ca600-poe firmwareTOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in...6.5 Medium
- totolink ca600-poe firmwareTOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in...6.5 Medium
- totolink ca600-poe firmwareTOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in...6.5 Medium
- totolink ca600-poe firmwareTOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in...6.5 Medium
- totolink ca600-poe firmwareTOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in...6.5 Medium
- totolink ca600-poe firmwareTOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in...6.5 Medium
- totolink ca600-poe firmwareTOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in...6.5 Medium
- totolink cp900 firmwareTOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection...6.3 Medium
- totolink cp900 firmwareTOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection...6.3 Medium
- totolink cp900 firmwareTOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection...6.3 Medium
- dlink dir-816 a2 firmwareD-Link DIR-816 A2V1.1.0B05 was found to contain a command injection in iptablesWebsFilterRun,...6.3 Medium
- google chromeHeap buffer overflow in HTML in Google Chrome prior to 136.0.7103.59 allowed a remote attacker to...8.8 High
- google chromeInappropriate implementation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote...9.8 Critical
- google chromeInsufficient data validation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote...6.3 Medium
- google chromeOut of bounds memory access in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote...8.8 High
- gotenna, gotenna mesh firmware +1 moreAn issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. It uses a...5.3 Medium
- gotenna, gotenna mesh firmware +1 moreAn issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. The...7.3 High
- gotenna, gotenna mesh firmware +1 moreAn issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. The...7.3 High
- Show moreLoading…