CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- dell powerscale onefsDell PowerScale OneFS, versions 9.8.0.0 through 9.10.1.0, contain a time-of-check time-of-use ...4.4 Medium
- dell powerscale onefsDell PowerScale OneFS, versions 9.4.0.0 through 9.10.1.0, contains an out-of-bounds write...5.5 Medium
- basecamp trixTrix vulnerable to Cross-site Scripting on copy & paste2.0 Low
- rack rack-sessionRack session gets restored after deletion4.2 Medium
libpqopenEuler,postgresqlAlmaLinux,pgauditAlmaLinux +55 more +57 morePostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation5.9 Medium- apollo theme ap page builder, apollotheme ap pagebuilder +1 morePath Traversal in AP Page Builder8.7 High
- checkmkPotentially senitive path exposed via unauthenticated http route6.3 Medium
- tagdiv composertagDiv Composer <= 5.3 - Reflected Cross-Site Scripting via 'data'6.1 Medium
- basixonline nex-forms, webaways nex-forms – ultimate forms plugin for wordpress +1 moreNEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.9.1 - Authenticated (Custom) Limited Code Execution via get_table_records Function6.3 Medium
- contest-gallery contest gallery, contest gallery – upload & vote photos, media, sell with paypal & stripe +1 moreContest Gallery <= 26.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter6.4 Medium
- basixonline nex-forms, webaways nex-forms – ultimate forms plugin for wordpress +1 moreNEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.9.1 - Authenticated (Custom) Stored Cross-Site Scripting6.4 Medium
- netis systems wf2220Missing Authentication for Changing Device Configuration in WF22208.7 High
- netis systems wf2220Exposure of Device Configuration without Authentication in WF22208.7 High
- danfoss ak-sm 8xxa seriesAuthentication bypass with privileged access in Danfoss AK-SM 8xxA Series prior to version 4.28.2 High
- rti connext professionalOut-of-bounds Read, Out-of-bounds Write vulnerability in RTI Connext Professional (Recording Service) allows Overflow Buffers, Overread Buffers.7.7 High
- rti connext professionalBuffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.6.9 Medium
- rti connext professionalHeap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.6.9 Medium
- haloitsm itsmHaloITSM open redirect via the returnUrl7.1 High
- kcseopro wp seo structured data schemaWP SEO Structured Data Schema <= 2.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin Settings6.4 Medium
- linux, linux kernel +1 moremm/vmscan: don't try to reclaim hwpoison folio5.5 Medium
- linux, linux kernel +1 morenet/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads5.5 Medium
- linux, linux kernel +1 morecpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate()5.5 Medium
- debian linux, linux kernel +1 morecpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()5.5 Medium
- debian linux, linux kernel +1 morecpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()5.5 Medium
- linux, linux kernel +1 morescsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort()5.5 Medium
- linux, linux kernel +1 morebtrfs: zoned: return EIO on RAID1 block group write pointer mismatch5.5 Medium
- linux, linux kernel +1 morescsi: ufs: core: Add NULL check in ufshcd_mcq_compl_pending_transfer()5.5 Medium
- linux, linux kernel +1 morenvmet: fix out-of-bounds access in nvmet_enable_port7.1 High
- debian linux, linux kernel +1 moretipc: fix NULL pointer dereference in tipc_mon_reinit_self()5.5 Medium
- debian linux, linux kernel +1 morenet_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too7.8 High
- linux, linux kernel +1 moreriscv: uprobes: Add missing fence.i after building the XOL buffer7.8 High
- linux, linux kernel +1 moresched/eevdf: Fix se->slice being set to U64_MAX and resulting crash5.5 Medium
- debian linux, linux kernel +1 morexen-netfront: handle NULL returned by xdp_convert_buff_to_frame()7.5 High
- debian linux, linux kernel +1 moreirqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()7.8 High
- debian linux, linux kernel +1 moreLoongArch: Return NULL from huge_pte_offset() for invalid PMD5.5 Medium
- debian linux, linux kernel +1 moremcb: fix a double free bug in chameleon_parse_gdd()7.8 High
- linux, linux kernel +1 moremei: vsc: Fix fortify-panic caused by invalid counted_by() use5.5 Medium
- linux, linux kernel +1 moremisc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration5.5 Medium
- linux, linux kernel +1 moretty: Require CAP_SYS_ADMIN for all usages of TIOCL_SELMOUSEREPORT7.8 High
- linux, linux kernel +1 moreusb: xhci: Fix invalid pointer dereference in Etron workaround7.8 High
- debian linux, linux kernel +1 moreusb: cdns3: Fix deadlock when using NCM gadget5.5 Medium
- debian linux, linux kernel +1 moreusb: chipidea: ci_hdrc_imx: fix usbmisc handling5.5 Medium
- debian linux, linux kernel +1 moreusb: dwc3: gadget: check that event count does not exceed event buffer length7.8 High
- linux, linux kernel +1 moreusb: typec: class: Fix NULL pointer access5.5 Medium
- debian linux, linux kernel +1 morecrypto: null - Use spin lock instead of mutex5.5 Medium
- linux, linux kernel +1 morebpf: Fix kmemleak warning for percpu hashmap5.5 Medium
- linux, linux kernel +1 morefs/ntfs3: Keep write operations atomic5.5 Medium
- linux, linux kernel +1 moresound/virtio: Fix cancel_sync warnings on uninitialized work_structs5.5 Medium
- linux, linux kernel +1 moreudmabuf: fix a buf size overflow issue during udmabuf creation7.8 High
- linux, linux kernel +1 moreksmbd: fix WARNING "do not call blocking ops when !TASK_RUNNING"7.5 High
- Show moreLoading…