CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- enersys ampaCommand injection in EnerSys AMPA 22.09 and prior versions9.8 Critical
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: grub allow access to encrypted device through cli once root device is unlocked via tpm5.9 Medium
- red hat mirror registry for red hat openshift, mirror-registry-2.0-rhel-8 +1 moreMirror-registry: local privilege escalation due to incorrect permissions in mirror-registry8.2 High
- kong inc. insomniaArbitrary Code Execution in Kong Insomnia Desktop Application9.3 Critical
- trainingbusinesspros groundhogg — crm, newsletters, and marketing automationWordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg <= 4.1.1.2 - Authenticated (Administrator+) Arbitrary File Deletion7.2 High
- diego-la-monica eucookielawEUCookieLaw <= 2.7.2 - Unauthenticated Arbitrary File Read5.9 Medium
- apache commons configurationApache Commons Configuration: Uncontrolled Resource Consumption when loading untrusted configurations in 1.x6.5 Medium
- glenwpcoder drag and drop multiple file upload for woocommerceDrag and Drop Multiple File Upload for WooCommerce <= 1.1.6 - Unauthenticated Arbitrary File Upload via upload Function9.8 Critical
- seedprod website builder by seedprod — theme builder, landing page builder, coming soon page, maintenance modeWebsite Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode <= 6.18.15 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure4.3 Medium
- code-projects departmental store management systemcode-projects Departmental Store Management System bill stack-based overflow4.8 Medium
- code-projects jewelery store management system, fabian jewellery store management system +1 morecode-projects Jewelery Store Management system Search Item View stack-based overflow4.8 Medium
- senior-walter online student clearance systemSourceCodester Online Student Clearance System add-student.php cross site scripting4.8 Medium
- senior-walter online student clearance systemSourceCodester Online Student Clearance System add-admin.php cross site scripting4.8 Medium
- debian linux, linux kernel +1 moreASoC: ops: Consistently treat platform_max as control value5.5 Medium
- linux, linux kernel +1 morenet/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table()5.5 Medium
- linux, linux kernel +1 morepds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result7.1 High
- linux, linux kernel +1 morepds_core: make wait_context part of q_info7.8 High
- debian linux, linux kernel +1 moreKVM: x86: Reset IRTE to host control if *new* route isn't postable8.8 High
- debian linux, linux kernel +1 morebpf: Fix deadlock between rcu_tasks_trace and event_mutex.5.5 Medium
- debian linux, linux kernel +1 mores390/sclp: Add check for get_zeroed_page()5.5 Medium
- linux, linux kernel +1 moreusb: xhci: Fix isochronous Ring Underrun/Overrun event handling7.8 High
- debian linux, linux kernel +1 moreusb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()5.5 Medium
- linux, linux kernel +1 moreum: work around sched_yield not yielding in time-travel mode5.5 Medium
- debian linux, linux kernel +1 more9p/net: fix improper handling of bogus negative read/write replies9.8 Critical
- linux, linux kernel +1 moreperf/core: Fix WARN_ON(!ctx) in __free_event() for partial init5.5 Medium
- linux, linux kernel +1 moreiommu: Clear iommu-dma ops on cleanup5.5 Medium
- linux, linux kernel +1 morenetfs: Only create /proc/fs/netfs with CONFIG_PROC_FS7.0 High
- debian linux, linux kernel +1 moreigc: fix PTM cycle trigger logic5.5 Medium
- linux, linux kernel +1 morenet: ngbe: fix memory leak in ngbe_probe() error path5.5 Medium
- linux, linux kernel +1 moreeth: bnxt: fix missing ring index trim on error path7.8 High
- linux, linux kernel +1 morenet: txgbe: fix memory leak in txgbe_probe() error path5.5 Medium
- debian linux, linux kernel +1 morenfsd: decrease sc_count directly if fail to queue dl_recall7.5 High
- linux, linux kernel +1 moredrm/amd/display: prevent hang on link training fail5.5 Medium
- linux, linux kernel +1 moredrm/xe: Use local fence in error path of xe_migrate_clear7.8 High
- linux, linux kernel +1 moredrm/xe/userptr: fix notifier vs folio deadlock5.5 Medium
- debian linux, linux kernel +1 moreRDMA/core: Silence oversized kvmalloc() warning5.5 Medium
- linux, linux kernel +1 moremlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show()5.5 Medium
- debian linux, linux kernel +1 morenet: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported5.5 Medium
- linux, linux kernel +1 morenet: dsa: clean up FDB, MDB, VLAN entries on unbind5.5 Medium
- linux, linux kernel +1 moreovl: don't allow datadir only5.5 Medium
- 1clickmigration 1 click migration & backup: free wordpress migration plugin with zero downtime & easy clone1 Click WordPress Migration Plugin – 100% FREE for a limited time <= 2.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- imithemes listingIMITHEMES Listing <= 3.3 - Unauthenticated Privilege Escalation via Unverified Password Reset9.8 Critical
- themekalia envolve pluginEnvolve Plugin <= 1.0 - Unauthenticated Arbitrary File Upload via language_file and fonts_file9.8 Critical
- arkenon login, registration and lost password blocksFrontend Login and Registration Blocks <= 1.1.1 - Unauthenticated Privilege Escalation via Account Takeover9.8 Critical
- debian linux, linux kernel +1 moreHID: pidff: Fix null pointer dereference in pidff_find_fields5.5 Medium
- linux, linux kernel +1 morescsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue7.8 High
- debian linux, linux kernel +1 morepage_pool: avoid infinite loop to schedule delayed worker5.5 Medium
- debian linux, linux kernel +1 morefs/jfs: Prevent integer overflow in AG size calculation5.5 Medium
- debian linux, linux kernel +1 morescsi: st: Fix array overflow in st_setup()5.5 Medium
- linux, linux kernel +1 morebtrfs: harden block_group::bg_list against list_del() races7.8 High
- Show moreLoading…