CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- linux, linux kernel +1 morespi: spi-imx: Add check for spi_imx_setupxfer()7.8 High
- linux, linux kernel +1 moredriver core: fix potential NULL pointer dereference in dev_uevent()7.1 High
- themewinter eventin, arraytics eventin – event calendar, event registration, tickets & booking (ai powered) +1 moreEvent Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.26 - Unauthenticated Arbitrary File Read7.5 High
- d-themes wolmart, don-themes wolmart | multi-vendor marketplace woocommerce theme +1 moreWolmart | Multi-Vendor Marketplace WooCommerce Theme <= 1.8.11 - Unauthenticated Arbitrary Shortcode Execution in wolmart_loadmore7.3 High
- smarsh telemessage, telemessage archiving backend +1 moreThe TeleMessage archiving backend through 2025-05-05 accepts API calls (to request an...4.8 Medium
- telemessage archiving backend, tm sgnl, text message archiver +2 moreThe TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM...1.9 Low
screenAlpaquitaScreen has a TOCTOU race potentially allowing to send SIGHUP, SIGCONT to privileged processes when installed setuid-root5.7 MediumscreenAlpaquitaScreen 5.0.0 and older versions allow file existence tests when installed setuid-root2.0 Low- suse linux enterprise desktop 15 sp6, linux enterprise high performance computing 15 sp6, linux enterprise micro 5.3 +5 more +7 moreTemporary chown() of users' TTY to mode 0666 allows PTY hijacking in screen5.3 Medium
- alfa aip-w512 firmwareALFA AIP-W512 v3.2.2.2.3 was discovered to contain an authenticated stack overflow via the...6.5 Medium
- alfa aip-w512 firmwareALFA AIP-W512 v3.2.2.2.3 was discovered to contain an authenticated stack overflow via the...8.8 High
- totolink nr1800x firmwareTOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow...8.8 High
- totolink nr1800x firmwareTOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow...8.8 High
- totolink nr1800x firmwareTOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow...8.8 High
- totolink nr1800x firmwareTOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow...8.8 High
- totolink nr1800x firmwareTOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow...9.8 Critical
- slims senayan library management system bulianSlims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin...6.5 Medium
- slims senayan library management system bulianSlims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin...6.5 Medium
- slims senayan library management system bulianSlims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin...6.5 Medium
- totolink a950rg firmwareA command execution vulnerability exists in the TOTOLINK A950RG V4.1.2cu.5204_B20210112. The...9.8 Critical
- totolink a950rg firmwareTOTOlink A950RG V4.1.2cu.5204_B20210112 contains a buffer overflow vulnerability. The...9.8 Critical
- totolink a3100r firmwareTOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the priority parameter in the...9.8 Critical
- totolink a3100r firmwareTOTOLINK A3100R V5.9c.1527 is vulnerable to buffer overflow via the urlKeyword parameter in...9.8 Critical
- totolink a3100r firmwareTOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the comment parameter in...9.8 Critical
- totolink a3100r firmwareTOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow viathe comment parameter in...9.8 Critical
- No product listedAn issue in dlink DNS-320 v.1.00 and DNS-320LW v.1.01.0914.20212 allows an attacker to execute...6.5 Medium
- openstack ironicOpenStack Ironic fails to restrict paths used for file:// image URLs2.8 Low
- znunyAn issue was discovered in Znuny through 6.5.14 and 7.x through 7.1.6. Custom AJAX calls to the...6.1 Medium
- phplistphpList prior to 3.6.3 is vulnerable to Cross-Site Scripting (XSS) due to improper input...6.1 Medium
- phplistphpList 3.6.3 is vulnerable to Reflected Cross-Site Scripting (XSS) via the /lists/dl.php...6.1 Medium
- znunyAn issue was discovered in Znuny before 7.1.5. When generating a support bundle, not all...7.5 High
- znunyAn Eval Injection issue was discovered in Znuny through 7.1.3. A user with write access to the...9.8 Critical
- znunyAn issue was discovered in Znuny through 7.1.3. A cookie is set without the HttpOnly flag.9.8 Critical
- znunyAn issue was discovered in Znuny through 7.1.3. If access to a ticket is not given, the content...7.5 High
- phpjabbers cleaning business softwarePHPJabbers Cleaning Business Software v1.0 is vulnerable to Multiple Stored Cross-Site Scripting ...5.4 Medium
- phpjabbers event booking calendarPHPJabbers Event Booking Calendar v4.0 is vulnerable to Multiple HTML Injection in the "name,...6.5 Medium
- No product listedGrocery-CMS-PHP-Restful-API v1.3 is vulnerable to File Upload via /admin/add-category.php.9.8 Critical
- portabilis i-educari-Educar Stored Cross-Site Scripting vulnerability2.0 Low
- rackUnbounded-Parameter DoS in Rack::QueryParser7.5 High
- rackRack session gets restored after deletion4.2 Medium
- arista networks eosOn affected platforms running Arista EOS with a gNMI transport enabled, running the gNOI File TransferToRemote RPC with credentials for a remote server may cause these remote-server credentials to be…6.5 Medium
- craft cms, craftcms craft cms +1 moreCraft CMS stores user-provided content in session files6.9 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreTMM Vulnerability8.7 High
- f5 big-ip, big-ip access policy manager +1 moreBIG-IP APM PingAccess Virtual Server Vulnerability8.7 High
- f5 big-ip, big-ip policy enforcement manager +1 moreBIG-IP PEM vulnerability8.7 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +19 more +21 moreAppliance mode BIG-IP iControl REST and tmsh vulnerability8.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +19 more +21 moreBIG-IP SIP ALG profile vulnerability8.7 High
- f5 big-ip, big-ip next cnf, big-ip next spk +23 more +25 moreBIG-IP HTTP/2 vulnerability8.7 High
- f5 big-ip, big-ip next, big-ip next cnf +25 more +27 moreBIG-IP HTTP/2 vulnerability8.7 High
- f5 f5os - appliance, f5os - chassis, f5os-a +1 more +3 moreF5OS vulnerability8.7 High
- Show moreLoading…