CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- d-link dir-619l, dlink dir-619l firmware +1 moreD-Link DIR-619L formSetEasy_Wizard buffer overflow8.7 High
- d-link dir-619l, dlink dir-619l firmware +1 moreD-Link DIR-619L formEasySetupWizard3 buffer overflow8.7 High
- d-link dir-619l, dlink dir-619l firmware +1 moreD-Link DIR-619L formEasySetupWizard buffer overflow8.7 High
quickjsOSS-FuzzHeap-buffer-overflow in JS_CallInternalNo score- h3c gr-5400axH3C GR-5400AX aspForm Edit_List_SSID buffer overflow8.6 High
- d-link dir-605l, dlink dir-605l firmware +1 moreD-Link DIR-605L wake_on_lan command injection5.3 Medium
fossilDebianfossil - HTTP client fixNo score- gwenn libsql-sqlite3-parserlibsql-sqlite3-parser crash due to invalid UTF-8 input2.9 Low
- nugine wgpwgp race condition in inner::drop2.9 Low
- retoolRetool (self-hosted) before 3.196.0 allows Host header injection. When the BASE_DOMAIN...7.1 High
- lerouxyxchire client database management systemSourceCodester Client Database Management System 1.0 is vulnerable to Remote code execution via...9.8 Critical
- lerouxyxchire client database management systemSourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in...9.8 Critical
- lerouxyxchire client database management systemArbitrary File Upload in user_payment_update.php in SourceCodester Client Database Management...9.8 Critical
- lerouxyxchire client database management systemSourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in...9.8 Critical
- lerouxyxchire client database management systemSourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in...9.8 Critical
- lerouxyxchire client database management systemSourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in...9.8 Critical
- wanglongcn yifangYifang CMS v2.0.2 is vulnerable to Server-Side Request Forgery (SSRF) in /api/file/getRemoteContent.9.1 Critical
- phpgurukul vehicle parking management systemPHPGURUKUL Vehicle Parking Management System v1.13 is vulnerable to SQL injection in the /vpms...9.8 Critical
- tenda fh451 firmwareTenda FH451 V1.0.0.9 has a stack overflow vulnerability in the function.P2pListFilter.9.8 Critical
- No product listedJan v0.5.14 and before is vulnerable to remote code execution (RCE) when the user clicks on a...8.8 High
- govicture rx1800 firmwareVicture RX1800 EN_V1.0.0_r12_110933 was discovered to contain a command injection vulnerability.8.8 High
- govicture rx1800 firmwareIncorrect access control in Victure RX1800 EN_V1.0.0_r12_110933 allows attackers to enable SSH...8.8 High
- govicture rx1800 firmwareAn issue in Victure RX1800 EN_V1.0.0_r12_110933 allows physically proximate attackers to execute...6.8 Medium
- govicture rx1800 firmwareVicture RX1800 EN_V1.0.0_r12_110933 was discovered to utilize a weak default password which...9.8 Critical
- d-link dir-605l, dlink dir-605l firmware +1 moreD-Link DIR-605L sub_454F2C command injection5.3 Medium
- d-link dir-605l, dlink dir-605l firmware +1 moreD-Link DIR-605L formSetWAN_Wizard55 buffer overflow8.7 High
- d-link dir-605l, dlink dir-605l firmware +1 moreD-Link DIR-605L formSetWAN_Wizard534 buffer overflow8.7 High
- h3c gr-1800axH3C GR-1800AX aspForm EnableIpv6 buffer overflow8.6 High
- pixmeo osirix mdPixmeo OsiriX MD Cleartext Transmission of Sensitive Information9.3 Critical
- pixmeo osirix mdPixmeo OsiriX MD Use After Free6.9 Medium
- pixmeo osirix mdPixmeo OsiriX MD Use After Free8.7 High
- microsoft dataverseMicrosoft Dataverse Remote Code Execution Vulnerability8.7 High
- microsoft power apps, power pages +1 moreMicrosoft Power Apps Information Disclosure Vulnerability9.1 Critical
- microsoft azure devopsAzure DevOps Elevation of Privilege Vulnerability10.0 Critical
- microsoft azure automationAzure Automation Elevation of Privilege Vulnerability9.9 Critical
- microsoft azure storage resource provider, azure storage resource provider (srp) +1 moreAzure Storage Resource Provider Spoofing Vulnerability9.9 Critical
- microsoft msagsfeedback.azurewebsites.netMicrosoft msagsfeedback.azurewebsites.net Information Disclosure Vulnerability8.1 High
- ibm cics tx advanced, cics tx standard, cics tx +2 moreIBM CICS TX code execution7.8 High
- ibm cics tx advanced, cics tx standard, cics tx +2 moreIBM CICS TX code execution7.8 High
- ibm cics tx advanced, cics tx standard, cics tx +2 moreIBM CICS TX code execution7.8 High
- shashikantsingh09 python-progrramesPrograms/P73_SimplePythonEncryption.py has weak cryptographic key4.6 Medium
- erlang otpErlang/OTP SSH Has Strict KEX Violations3.7 Low
- arista networks eosOn affected platforms running Arista EOS with Traffic Policies configured the vulnerability will cause received untagged packets not to hit Traffic Policy rules that they are expected to hit. If the r…7.5 High
- dell wyse management suiteDell Wyse Management Suite, versions prior to WMS 5.1 contain an Authentication Bypass by...4.9 Medium
- arista networks cloudvision portalOn affected platforms running Arista EOS with secure Vxlan configured, restarting the Tunnelsec agent will result in packets being sent over the secure Vxlan tunnels in the clear.9.1 Critical
- arista networks cloudvision portalOn affected versions of the CloudVision Portal, improper access controls could enable a malicious authenticated user to take broader actions on managed EOS devices than intended. This advisory impacts…10.0 Critical
- arista networks cloudvision portalOn Arista CloudVision systems (virtual or physical on-premise deployments), Zero Touch Provisioning can be used to gain admin privileges on the CloudVision system, with more permissions than necessary…10.0 Critical
- arista networks cloudvisionOn affected versions of the Arista CloudVision Portal (CVP on-prem), the time-bound device onboarding token can be used to gain admin privileges on CloudVision.8.7 High
- eclipse jettyEclipse Jetty HTTP clients can increase memory allocation7.5 High
- horner automation cscapeOut-of-bounds Read in Horner Automation Cscape8.4 High
- Show moreLoading…