CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- pcman ftp serverPCMan FTP Server LIST Command buffer overflow6.9 Medium
- pcman ftp serverPCMan FTP Server HASH Command buffer overflow6.9 Medium
- pcman ftp serverPCMan FTP Server APPEND Command buffer overflow6.9 Medium
- pcman ftp serverPCMan FTP Server RMDIR Command buffer overflow6.9 Medium
- geal trailertrailer mishandles allocating with a size of zero2.9 Low
- code-projects nero social networking sitecode-projects Nero Social Networking Site index.php sql injection6.9 Medium
- phpgurukul e-diary management systemPHPGurukul e-Diary Management System manage-categories.php sql injection6.9 Medium
- chuck24 simple to-do list systemSourceCodester Simple To-Do List System complete_task.php sql injection5.3 Medium
- chuck24 simple to-do list systemSourceCodester Simple To-Do List System delete_task.php sql injection5.3 Medium
checkstyleOSS-FuzzSecurity exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.exprNo scorequickjsOSS-FuzzUse-of-uninitialized-value in JS_DefinePropertyNo score- code-projects online bus reservation systemcode-projects Online Bus Reservation System seatlocation.php sql injection5.3 Medium
- code-projects online bus reservation systemcode-projects Online Bus Reservation System print.php sql injection5.3 Medium
- phpgurukul online birth certificate systemPHPGurukul Online Birth Certificate System between-dates-report.php sql injection6.9 Medium
- ibm cloud pak for business automationIBM Cloud Pak for Business Automation denial of service6.5 Medium
- phpgurukul teacher subject allocation management systemPHPGurukul Teacher Subject Allocation Management System search.php sql injection6.9 Medium
- pcman ftp serverPCMan FTP Server LCD Command buffer overflow6.9 Medium
- pcman ftp serverPCMan FTP Server TYPE Command buffer overflow6.9 Medium
- ibm business automation workflowIBM Business Automation Workflow missing authentication4.3 Medium
- pcman ftp serverPCMan FTP Server MGET Command buffer overflow6.9 Medium
- mojoliciousMojolicious versions from 0.999922 for Perl uses a hard coded string, or the application's class name, as an HMAC session cookie secret by default8.1 High
- ibm cloud pak for business automationIBM Cloud Pak for Business Automation cross-site scripting6.1 Medium
- pcman ftp serverPCMan FTP Server MDELETE Command buffer overflow6.9 Medium
- pcman ftp serverPCMan FTP Server MDIR Command buffer overflow6.9 Medium
- linux, linux kernel +1 morevmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp8.6 High
- campcodes cyber cafe management systemPHPGurukul/Campcodes Cyber Cafe Management System add-computer.php sql injection6.9 Medium
- mojoliciousMojolicious versions from 7.28 through 9.45 for Perl will generate weak HMAC session cookie secrets via "mojo generate app" by default5.3 Medium
- devsoftbaltic surveyjs: drag & drop form builderSurveyJS <= 1.12.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter6.4 Medium
- stylemixthemes motors - car dealer, rental & listing wordpress themeMotors - Car Dealer, Rental & Listing WordPress theme <= 5.6.65 - Unauthenticated Arbitrary Shortcode Execution7.3 High
- neoslab database toolsetDatabase Toolset <= 1.8.4 - Unauthenticated Sensitive Information Exposure via Backup Files5.9 Medium
- withinboredom abundatrade pluginAbundatrade Plugin <= 1.8.02 - Cross-Site Request Forgery to Stored Cross-Site Scripting6.1 Medium
- personizely — a/b testing, personalization, popups & croPersonizely <= 0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via widgetId Parameter6.4 Medium
- todoapuestas alink tapAlink Tap <= 1.3.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting6.1 Medium
- codework subpage listSubpage List <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- nootheme job listingsJob Listings 0.1 - 0.1.1 - Unauthenticated Privilege Escalation via register_action Function9.8 Critical
- balasahebbhise advanced reorder image text sliderAdvanced Reorder Image Text Slider <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting6.1 Medium
- xavinnydek xavin's review ratingsXavin's Review Ratings <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- katzwebdesign verticalresponse newsletter widgetVerticalResponse Newsletter Widget <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- bluewave checkmateIn BlueWave Checkmate through 2.0.2 before d4a6072, an invite request can be modified to specify...8.1 High
- inedo progetInedo ProGet through 2024.22 allows remote attackers to reach restricted functionality through...7.3 High
- browser-useDuplicate Advisory: `allowed_domains` can be bypassed by putting a decoy domain in http auth username portion of a URL4.0 Medium
- gnu pspplibpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a denial of service ...2.9 Low
- openvm-org openvmOpenVM byte decomposition of pc in AUIPC chip can overflow7.8 High
- debian linux, linux kernel +1 morescsi: target: Fix WRITE_SAME No Data Buffer crash7.5 High
- oracle opengrokOpenGrok 1.13.25 has a reflected Cross-Site Scripting (XSS) issue when producing the history view...6.1 Medium
- andrewhhan browserpilothandrew browserpilot gpt_selenium_agent.py GPTSeleniumAgent code injection4.8 Medium
- gorhill ublock origin, debian linux +1 moregorhill uBlock Origin UI 1p-filters.js currentStateChanged redos2.3 Low
- phpguruku online dj booking management systemPHPGuruku Online DJ Booking Management System booking-bwdates-reports-details.php sql injection6.9 Medium
- phpgurukul online birth certificate systemPHPGurukul Online Birth Certificate System search.php sql injection6.9 Medium
- vercel flagsInformation Disclosure via Flags override link6.5 Medium
- Show moreLoading…