CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- linux, linux kernel +1 moreBluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition7.8 High
- campcodes sales and inventory systemCampcodes Sales and Inventory System customer_update.php sql injection6.9 Medium
- campcodes sales and inventory systemCampcodes Sales and Inventory System creditor_add.php sql injection6.9 Medium
- llamaindex, run-llama run-llama/llama index +1 moreDenial of Service in run-llama/llama_index7.5 High
- code-projects album management systemcode-projects Album Management System Search Albums searchalbum stack-based overflow4.8 Medium
- code-projects hotel management systemcode-projects Hotel Management System Edit Room edit stack-based overflow4.8 Medium
- code-projects simple hospital management systemcode-projects Simple Hospital Management System Add Information add stack-based overflow4.8 Medium
- cozyvision sms alert order notifications, cozyvision1 sms alert – sms & otp for woocommerce, order notifications & abandoned cart recovery +1 moreSMS Alert Order Notifications – WooCommerce <= 3.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via sa_verify Shortcode6.4 Medium
- cozyvision sms alert order notifications, cozyvision1 sms alert – sms & otp for woocommerce, order notifications & abandoned cart recovery +1 moreSMS Alert Order Notifications – WooCommerce <= 3.8.1 - Authenticated (Subscriber+) Privilege Escalation via handleWpLoginCreateUserAction Function8.8 High
- code-projects simple bus reservation systemcode-projects Simple Bus Reservation System Install Bus install stack-based overflow4.8 Medium
- mythemeshop wordpress review plugin: the ultimate solution for building a review websiteWordPress Review Plugin: The Ultimate Solution for Building a Review Website <= 5.3.5 - Authenticated (Contributor+) Local File Inclusion via Post Custom Fields8.8 High
- code-projects simple banking systemcode-projects Simple Banking System Sign In buffer overflow4.8 Medium
- jegtheme jeg kit for elementor – powerful addons for elementor, widgets & templates for wordpressJeg Elementor Kit <= 2.6.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Button and Countdown Widgets6.4 Medium
- totolink a3000ru, a3100r, a800r +11 more +13 moreTOTOLINK T10/A3100R/A950RG/A800R/N600R/A3000RU/A810R cstecgi.cgi CloudACMunualUpdate buffer overflow8.7 High
- ibm storage scaleIBM Storage Scale command injection7.5 High
- jadmin-java jadminJAdmin-JAVA JAdmin save cross site scripting5.1 Medium
quickjsOSS-FuzzUse-of-uninitialized-value in JS_FreeRuntimeNo score- bluewave checkmateIn BlueWave Checkmate through 2.0.2 before b387eba, a profile edit request can include a role...8.8 High
- gnu pspplibpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause an spvxml-helpers.c...2.9 Low
- gnu pspplibpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow...4.5 Medium
- gnu pspplibpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow...4.5 Medium
- smub wpforms – easy form builder for wordpress – contact forms, payment forms, surveys, & moreWPForms Lite <= 1.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'start_timestamp' Parameter5.4 Medium
- jadmin-java jadminJAdmin-JAVA JAdmin Admin Backend NoNeedLoginController.java toLogin improper authentication6.9 Medium
- campcodes online food ordering systemCampcodes Online Food Ordering System ticket-message.php sql injection6.9 Medium
- campcodes online food ordering systemCampcodes Online Food Ordering System ticket-status.php sql injection6.9 Medium
- campcodes online food ordering systemCampcodes Online Food Ordering System view-ticket-admin.php sql injection6.9 Medium
- eclipse openj9Buffer Overflow in Eclipse OpenJ97.0 High
- campcodes online food ordering systemCampcodes Online Food Ordering System user-router.php sql injection6.9 Medium
- admerc gym management systemitsourcecode Gym Management System ajax.php sql injection6.9 Medium
- admerc gym management systemitsourcecode Gym Management System ajax.php sql injection6.9 Medium
- coder code-servercode-server session cookie can be extracted by having user visit specially crafted proxy URL8.3 High
- admerc gym management systemitsourcecode Gym Management System ajax.php sql injection6.9 Medium
- admerc gym management systemitsourcecode Gym Management System ajax.php sql injection6.9 Medium
- admerc gym management systemitsourcecode Gym Management System ajax.php sql injection6.9 Medium
- admerc gym management systemitsourcecode Gym Management System view_pdetails.php sql injection6.9 Medium
- project worlds student project allocation systemProject Worlds Student Project Allocation System forgot_password_sql.php sql injection6.9 Medium
- ibm app connect enterprise certified container, app connect enterprise certified containers operands, app connect operator +2 moreIBM App Connect Enterprise Certified Container information disclosure5.1 Medium
- oretnom23 apartment visitor management systemSourceCodester Apartment Visitor Management System search-result.php sql injection6.9 Medium
- code-projects simple college management systemcode-projects Simple College Management System Add New Student input stack-based overflow4.8 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- gitlabAuthentication Bypass Using an Alternate Path or Channel in GitLab6.8 Medium
- gitlabInsufficient Granularity of Access Control in GitLab5.3 Medium
- aira primePrivilege Escalation Vulnerability in Avira Prime Version 1.1.96.27.8 High
- avast cleanup premiumLink Following Local Privilege Escalation Vulnerability in Avast Cleanup Premium Version 24.2.16593.178107.8 High
- avast cleanup premiumAvast Cleanup Premium TuneupSvc Link Following Local Privilege Escalation Vulnerability7.8 High
- avg tuneupLink Following Local Privilege Escalation Vulnerability in AVG TuneUp Version 23.47.8 High
- avg tuneupLink Following Local Privilege Escalation Vulnerability in AVG TuneUp 24.2.16593.98447.8 High
- avira primeLocal Privilege Escalation in Avira Prime 1.1.96.2 on Windows 10 x647.8 High
- avast cleanup, avg tuneup, norton utilities ultimate +2 moreLink Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate (Also affects Avast CleanUp and AVG TuneUp)7.8 High
- enersys ampaCommand injection in EnerSys AMPA versions 24.04 through 24.16, inclusive9.8 Critical
- Show moreLoading…