CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- easyappointments easy\!appointmentsEasy!Appointments Denial of Service (DoS)7.5 High
- No product listedHTML injection vulnerability in lemeconsultoria HCM galera.app v.4.58.0 allows an attacker to...6.5 Medium
- lemeconsultoria galeraSQL Injection vulnerability in lemeconsultoria HCM galera.app v.4.58.0 allows an attacker to...5.4 Medium
- lemeconsultoria galeraCross-Site Scripting vulnerability in lemeconsultoria HCM galera.app v.4.58.0 allows an attacker...7.6 High
- ixon vpn clientIXON VPN Client before 1.4.4 on Windows allows Local Privilege Escalation to SYSTEM because there...8.1 High
- ixon vpn clientIXON VPN Client before 1.4.4 on Linux and macOS allows Local Privilege Escalation to root because...8.1 High
- go standard library os, golang go +1 moreImproper access to parent directory of root in os3.8 Low
- potenza global solutions pgs corePGS Core <= 5.8.0 - Missing Authorization via Multiple Functions7.3 High
- potenza global solutions pgs corePGS Core <= 5.8.0 - Unauthenticated PHP Object Injection9.8 Critical
- google chromeUse after free in WebAudio in Google Chrome prior to 136.0.7103.92 allowed a remote attacker to...8.8 High
- crestron automate vxUser Permissions on Network API8.7 High
- potenza global solutions pgs corePGS Core <= 5.8.0 - Unauthenticated SQL Injection7.5 High
- crestron automate vxNon-Secure Access10.0 Critical
- auth0 passport-wsfed-saml2passport-wsfed-saml2 Has SAML Authentication Bypass via Attribute Smuggling8.6 High
- google tensorflow, tensorflow serving +1 moreStack Exhaustion In Tensorflow Serving8.9 High
- auth0 passport-wsfed-saml2passport-wsfed-saml2 Has SAML Authentication Bypass via Signature Wrapping9.3 Critical
- crestron automate vxRecording5.3 Medium
- quarkus, red hat build of quarkus +1 moreIo.quarkus:quarkus-security-webauthn: quarkus webauthn unexpected authentication bypass9.1 Critical
- crestron automate vxEnable Debug Images5.1 Medium
- phpgt domphpgt/Dom exposes the GITHUB_TOKEN in Dom workflow run artifact7.1 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Reflected XSS in marketplace-app-manager-web6.9 Medium
- elastic kibanaKibana arbitrary code execution via prototype pollution9.1 Critical
- elastic logstashLogstash Improper Certificate Validation in TCP output6.5 Medium
- troglobit finitFinit has heap based buffer overwrite in urandom.so plugin4.6 Medium
- zitadelZITADEL Allows IdP Intent Token Reuse8.0 High
- patrickhener goshsgoshs route not protected, allows command execution9.4 Critical
@misskey-dev/summalynpm@misskey-dev/summaly allows IP Filter Bypass via Redirect5.3 Medium- umbraco umbraco-cms, cms +1 moreUmbraco Makes User Enumeration Feasible Based on Timing of Login Response5.3 Medium
- nrkno terraform-provider-windnsTerraform WinDNS Provider improperly sanitizes input variables in `windns_record`1.1 Low
- vllmRemote Code Execution Vulnerability in vLLM Multi-Node Cluster Configuration8.0 High
- optigo networks ons nc600Use of Hard-coded Credentials Optigo Networks ONS NC6009.3 Critical
- dell storage center - dell storage manager, storage manager +1 moreDell Storage Center - Dell Storage Manager, version(s) 20.1.20, contain(s) an Improper...5.5 Medium
- dell storage center - dell storage manager, storage manager +1 moreDell Storage Center - Dell Storage Manager, version(s) 20.1.20, contain(s) an Improper...8.3 High
- arcinfo pcvueCertificate validity not properly verified6.0 Medium
- dell storage center - dell storage manager, storage manager +1 moreDell Storage Center - Dell Storage Manager, version(s) 20.1.20, contain(s) an Improper...8.1 High
- dell storage center - dell storage manager, storage manager +1 moreDell Storage Center - Dell Storage Manager, version(s) 20.0.21, contain(s) an Improper Limitation...3.5 Low
- tenda ac8, ac8 firmware +1 moreTenda AC8 MtuSetMacWan formGetRouterStatus buffer overflow8.7 High
- admerc gym management systemitsourcecode Gym Management System ajax.php sql injection6.9 Medium
- dell storage center - dell storage manager, storage manager +1 moreDell Storage Center - Dell Storage Manager, version(s) 21.0.20, contain(s) an Improper...3.5 Low
- admerc gym management systemitsourcecode Gym Management System ajax.php sql injection6.9 Medium
- fastapi-guard fastapi guard, rennf93 fastapi-guard +1 moreFastAPI Guard Remote Header Injection via X-Forwarded-For Manipulation3.4 Low
- project quay quay, red hat quay 3 +1 moreQuay: incorrect privilege assignment6.5 Medium
- ibm maximo application suiteIBM Maximo Application Suite privilege escalation7.5 High
- phpgurukul company visitor management systemPHPGurukul Company Visitor Management System department.php sql injection6.9 Medium
- admerc gym management systemitsourcecode Gym Management System view_member.php sql injection6.9 Medium
- admerc gym management systemitsourcecode Gym Management System ajax.php sql injection6.9 Medium
- phpgurukul company visitor management systemPHPGurukul Company Visitor Management System admin-profile.php sql injection6.9 Medium
- tenda rx3, rx3 firmware +1 moreTenda RX3 telnet command injection5.1 Medium
- tenda dap-1520, dlink dap-1520 firmware +1 moreTenda DAP-1520 Authentication storage mod_graph_auth_uri_handler stack-based overflow8.7 High
- tenda dap-1520, dlink dap-1520 firmware +1 moreTenda DAP-1520 api set_ws_action heap-based overflow8.7 High
- Show moreLoading…