CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- adonesevangelista restaurant management systemitsourcecode Restaurant Management System category_save.php sql injection6.9 Medium
c-blosc2OSS-FuzzHeap-buffer-overflow in ZSTD_decompressMultiFrameNo score- phpgurukul employee record management systemPHPGurukul Employee Record Management System editmyeducation.php sql injection6.9 Medium
- wangshen secgate 3600Wangshen SecGate 3600 g=route_ispinfo_export_save path traversal5.3 Medium
ansibleDebianansible - regression updateNo score- grokability, inc. snipe-itGrokability Snipe-IT has incorrect authorization for accessing asset information5.0 Medium
- intrexx, intrexx portal server +1 moreIn Intrexx Portal Server before 12.0.4, multiple Velocity-Scripts are susceptible to the...4.4 Medium
- totolink a950rg firmwareTOTOLINK A950RG V4.1.2cu.5204_B20210112 contains a command execution vulnerability in the...9.8 Critical
- tenda ac9 firmwareTenda AC9 V15.03.06.42_multi was found to contain a command injection vulnerability in the...9.8 Critical
- tenda ac9 firmwareTenda AC9 V15.03.06.42_multi was found to contain a command injection vulnerability in the...9.8 Critical
- wavlink wl-wn530h4 firmwareWavlink WL-WN530H4 20220801 was found to contain a command injection vulnerability in the...9.8 Critical
- casualx obfstrobfstr Type Confusion vulnerability2.9 Low
- ffmpegffmpeg 7.1 is vulnerable to Null Pointer Dereference in function iamf_read_header in /libavformat...5.3 Medium
- wangshen secgate 3600Wangshen SecGate 3600 g=obj_area_export_save path traversal5.3 Medium
- pcman ftp serverPCMan FTP Server QUOTE Command buffer overflow6.9 Medium
- pcman ftp serverPCMan FTP Server RECV Command buffer overflow6.9 Medium
- pcman ftp serverPCMan FTP Server BELL Command buffer overflow6.9 Medium
- pcman ftp serverPCMan FTP Server SEND Command buffer overflow6.9 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 denial of service5.3 Medium
- ibm mq operator, supplied mq advanced container images +1 moreIBM MQ Operator information disclosure6.0 Medium
- pcman ftp serverPCMan FTP Server TRACE Command buffer overflow6.9 Medium
- xiaowei1118 java serverxiaowei1118 java_server File Upload API FoodController.java path traversal5.3 Medium
- phpgurukul blood bank & donor management system, blood bank \& donor management system +1 morePHPGurukul Blood Bank & Donor Management System request-received-bydonar.php sql injection6.9 Medium
- ibm mq operator, supplied mq advanced container images +1 moreIBM MQ Operator denial of service6.5 Medium
- msp360 backupMSP360 Backup (for Linux) insecure filesystem permissions8.5 High
- alanbinu007 spring-boot-advanced-projectsAlanBinu007 Spring-Boot-Advanced-Projects Upload Profile API Endpoint UserProfileController.java uploadUserProfileImage path traversal5.3 Medium
- phpgurukul covid19 testing management systemPHPGurukul COVID19 Testing Management System login.php sql injection6.9 Medium
- kunbus gmbh revolution pi pictoryKUNBUS Revolution Pi Improper Neutralization of Server-Side Includes (SSI) Within a Web Page5.1 Medium
- kunbus gmbh revolution pi pictoryKUNBUS Revolution Pi Improper Neutralization of Server-Side Includes (SSI) Within a Web Page8.5 High
- kunbus gmbh revolution pi pictoryKUNBUS Revolution Pi Authentication Bypass by Primary Weakness9.3 Critical
- kunbus gmbh revolution pi os bookwormKUNBUS Revolution Pi Authentication Bypass by Primary Weakness9.3 Critical
- microdicom dicom viewerMicroDicom DICOM Viewer Out-of-bounds Read8.6 High
- devolutions serverIncorrect privilege assignment in PAM JIT elevation feature in Devolutions Server 2025.1.5.0 and...6.3 Medium
- microdicom dicom viewerMicroDicom DICOM Viewer Out-of-bounds Write8.6 High
- stirling-tools stirling-pdf, stirlingpdf stirling pdf +1 moreStirling-PDF Server-Side Request Forgery (SSRF)-Induced Arbitrary File Read Vulnerability7.7 High
- dataeaseDataease redshift JDBC Connection Remote Code Execution6.8 Medium
- auth0-extensions auth0-account-link-extensionAuth0 Account Link Extension JWT Invalid Signature Validation6.9 Medium
- open-policy-agent opaOPA server Data API HTTP path injection of Rego7.4 High
- oretnom23 online eyewear shopSourceCodester Online Eyewear Shop Master.php delete_cart sql injection5.3 Medium
- nvidia vgpu software, cloud gamingNVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager ...5.5 Medium
- linux, linux kernel +1 moreIB/hfi1: Correctly move list in sc_disable()8.8 High
- linux, linux kernel +1 moreRDMA/hns: Fix NULL pointer problem in free_mr_init()5.5 Medium
- linux, linux kernel +1 moreRDMA/rxe: Fix mr leak in RESPST_ERR_RNR5.5 Medium
- linux, linux kernel +1 moreSUNRPC: Fix null-ptr-deref when xps sysfs alloc failed7.5 High
- linux, linux kernel +1 morenfs4: Fix kmemleak when allocate slot failed5.5 Medium
- linux, linux kernel +1 morenet: dsa: Fix possible memory leaks in dsa_loop_init()5.5 Medium
- linux, linux kernel +1 morenfc: fdp: Fix potential memory leak in fdp_nci_send()5.5 Medium
- linux, linux kernel +1 morenfc: nxp-nci: Fix potential memory leak in nxp_nci_send()5.5 Medium
- linux, linux kernel +1 morenfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send()5.5 Medium
- linux, linux kernel +1 morenet: sched: Fix use after free in red_enqueue()7.8 High
- Show moreLoading…