CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, sdm429w firmware +8 more +10 moreImproper Input Validation in Camera Driver7.8 High
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, sdm429w firmware +17 more +19 moreImproper Validation of Array Index in Camera Driver7.8 High
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, sdm429w firmware +12 more +14 moreInteger Overflow or Wraparound in Camera Driver7.8 High
- qualcomm sdm429w firmware, snapdragon 429 mobile firmware, wcn3620 firmware +2 more +4 moreImproper Validation of Array Index in Camera Driver7.8 High
- qualcomm c-v2x 9150 firmware, fastconnect 6800 firmware, fastconnect 6900 firmware +56 more +58 moreUse of Out-of-range Pointer Offset in Camera Driver6.6 Medium
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, sdm429w firmware +11 more +13 moreBuffer Over-read in Camera Driver6.7 Medium
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, sdm429w firmware +12 more +14 moreUse After Free in Camera Driver7.8 High
- qualcomm fastconnect 6800 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +21 more +23 moreUse After Free in Camera Driver7.8 High
- qualcomm sdm429w firmware, snapdragon 429 mobile firmware, wcn3620 firmware +2 more +4 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver7.8 High
- qualcomm c-v2x 9150 firmware, fastconnect 6800 firmware, fastconnect 6900 firmware +61 more +63 moreUse After Free in HLOS7.8 High
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, sdm429w firmware +12 more +14 moreOut-of-bounds Write in Camera Driver6.6 Medium
- qualcomm c-v2x 9150 firmware, fastconnect 6800 firmware, fastconnect 6900 firmware +78 more +80 moreUse After Free in HLOS6.6 Medium
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, qca6174a firmware +19 more +21 moreUse After Free in DSP Service7.8 High
- d-link dir-600l, dlink dir-600l firmware +1 moreD-Link DIR-600L formEasySetupWizard3 buffer overflow8.7 High
- d-link dir-880l, dlink dir-880l firmware +1 moreD-Link DIR-880L Request Header ssdpcgi sub_16570 command injection5.3 Medium
- wiesemann & theis erp-gateway 12x digital input, 6x digital relais, erp-gateway 2x digital input, 2x digital output, erp-gateway 2x digital poe +18 more +20 moreWiesemann & Theis: Multiple W&T Products are vulnerable to cross-site-scripting5.4 Medium
- d-link dir-806a1, dir-890l, dlink dir-806 firmware +1 more +3 moreD-Link DIR-890L/DIR-806A1 soap.cgi sub_175C8 command injection5.3 Medium
- feng ha ha ssm-erp, production ssm +1 morefeng_ha_ha/megagao ssm-erp/production_ssm FileServiceImpl.java uploadFile unrestricted upload5.3 Medium
- phpgurukul company visitor management systemPHPGurukul Company Visitor Management System visitor-detail.php sql injection6.9 Medium
- senior-walter online student clearance systemSourceCodester Online Student Clearance System login.php sql injection6.9 Medium
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.2.1 - Insecure Direct Object Reference to Unauthenticated Limited User Deletion5.3 Medium
- huawei harmonyosProcess residence vulnerability in abnormal scenarios in the print module Impact: Successful...5.1 Medium
- huawei harmonyosNull pointer dereference vulnerability in the USB HDI driver module Impact: Successful...4.4 Medium
- huawei harmonyosOut-of-bounds data read vulnerability in the authorization module Impact: Successful exploitation...6.2 Medium
- huawei harmonyosBypass vulnerability in the network search instruction authentication module Impact: Successful...6.3 Medium
- huawei harmonyosVulnerability of unauthorized access in the app lock module Impact: Successful exploitation of...4.4 Medium
- huawei harmonyosVulnerability of unauthorized access in the app lock module Impact: Successful exploitation of...4.4 Medium
- huawei harmonyosVulnerability of insufficient information protection in the media library module Impact:...6.2 Medium
- huawei harmonyosPermission control vulnerability in the media library module Impact: Successful exploitation of...6.2 Medium
- huawei harmonyosPermission control vulnerability in the contacts module Impact: Successful exploitation of this...5.1 Medium
- huawei harmonyosOut-of-bounds array read/write vulnerability in the kernel module Impact: Successful exploitation...7.5 High
- huawei harmonyosVulnerability of improper authentication logic implementation in the file system module Impact:...7.8 High
- 74cms74CMS index path traversal5.3 Medium
- fp2952 spring-cloud-basefp2952 spring-cloud-base HTTP Header MvcController.java sendBack redirect5.1 Medium
- mrcmsMRCMS cross-site request forgery5.3 Medium
- mrcmsMRCMS Add Fragment Page add.do cross site scripting4.8 Medium
- mrcmsMRCMS Category Management Page add.do cross site scripting4.8 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +34 more +36 moreGlib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar4.8 Medium
- mrcmsMRCMS External Link Management Page edit.do cross site scripting4.8 Medium
- mrcmsMRCMS Edit Article Page cross site scripting4.8 Medium
- donbermoy advanced web storeSourceCodester Advanced Web Store index.php sql injection6.9 Medium
- donbermoy advanced web storeSourceCodester Advanced Web Store admin_addnew_product.php sql injection6.9 Medium
- layoutboxxLayoutBoxx <= 0.3.1 - Unauthenticated Arbitrary Shortcode Execution7.3 High
- mitchelllevy ahathat pluginAHAthat Plugin <= 1.6 - Cross-Site Request Forgery to AHA Page Deletion4.3 Medium
- donbermoy advanced web storeSourceCodester Advanced Web Store productdetail.php sql injection6.9 Medium
- code-projects content management systemitsourcecode Content Management System update_main_topic_img.php sql injection6.9 Medium
- code-projects content management systemitsourcecode Content Management System add_topic.php unrestricted upload5.1 Medium
- phpgurukul art gallery management systemPHPGurukul Art Gallery Management System add-art-type.php sql injection6.9 Medium
- phpgurukul art gallery management systemPHPGurukul Art Gallery Management System add-art-type.php sql injection6.9 Medium
- phpgurukul art gallery management systemPHPGurukul Art Gallery Management System add-art-medium.php sql injection6.9 Medium
- Show moreLoading…