CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- redhat pagurePagure: _update_file_in_git() follows symbolic links in temporary clones7.6 High
- cozy vision sms alert order notificationsWordPress SMS Alert Order Notifications – WooCommerce plugin <= 3.8.1 - SQL Injection Vulnerability9.3 Critical
- ibm 4769 developers toolkitIBM 4769 Developers Toolkit denial of service7.5 High
- schweitzer engineering laboratories sel blueframe osCross-Site Request Forgery6.3 Medium
- schweitzer engineering laboratories sel-3350-1, sel-3355-2, sel-3360-2 +2 moreAuthentication Bypass4.4 Medium
- schweitzer engineering laboratories sel blueframe osImproper Neutralization of Input4.3 Medium
- schweitzer engineering laboratories sel blueframe osUnverified Password Change2.7 Low
- schweitzer engineering laboratories sel blueframe osExposure of Sensitive System Information5.7 Medium
- schweitzer engineering laboratories sel blueframe osError Message Contains Sensitive Information5.8 Medium
- schweitzer engineering laboratories sel blueframe osImproper Privilege Management6.5 Medium
- schweitzer engineering laboratories sel blueframe osImproper Privilege Management2.7 Low
- schweitzer engineering laboratories sel blueframe osImproper Access Control4.3 Medium
- schweitzer engineering laboratories sel blueframe osImproper Privilege Management5.7 Medium
- schweitzer engineering laboratories sel blueframe osImproper Handling of Insufficient Permissions7.5 High
- schweitzer engineering laboratories sel blueframe osImproper Restriction of Excessive Authentication Attempts8.1 High
- schweitzer engineering laboratories sel-5033 acselerator rtac softwareDeserialization of Untrusted Data6.6 Medium
- schweitzer engineering laboratories sel-5037 grid configuratorOrigin Validation Error7.4 High
- edward caissie bns twitter follow buttonWordPress BNS Twitter Follow Button plugin <= 0.3.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- stacklok toolhiveToolHive stores secrets in the state store with no encryption2.4 Low
- trifectatech sudo, trifectatechfoundation sudo-rs +1 moresudo-rs Allows Low Privilege Users to Enumerate Privileges of Others3.3 Low
- trifectatech sudo, trifectatechfoundation sudo-rs +1 moresudo-rs Allows Low Privilege Users to Discover the Existence of Files in Inaccessible Folders3.3 Low
- abantecartReflected Cross-Site Scripting (XSS) in AbanteCart5.1 Medium
- abantecartReflected Cross-Site Scripting (XSS) in AbanteCart5.1 Medium
- ozi-project publishOZI-Project/ozi-publish Code Injection vulnerability6.3 Medium
- nimiq core-rs-albatrossnimiq-network-libp2p Uncontrolled Resource Consumption vulnerability7.5 High
- julmud phpdvdprofilerphpDVDProfiler Cross-site Scripting vulnerability2.1 Low
- espocrmEspoCRM vulnerable to HTML Injection into phishing, which may lead to account takeover7.0 High
- asus armoury crateA stack buffer overflow has been identified in the AsIO3.sys driver. This vulnerability can be...8.2 High
ca-certificates-mozillaSUSESecurity update for ca-certificates-mozillaNo score- konica minolta japan, inc. multiple mfps which implement web image monitor, ricoh company, ltd. multiple laser printers and mfps which implement web image monitor, the specific versions of laser printers and mfps which implement web image monitor +2 moreReflected cross-site scripting vulnerability exists in the laser printers and MFPs (multifunction...5.1 Medium
- auma ac1.2, profox, auma riester mec 03.01 +3 more +5 moreAUMA Riester: Buffer overflow in service telegram7.5 High
- kinfor kfoxKinfor KFOX - Arbitrary File Upload8.7 High
- netvision isoinsightNetvision ISOinsight - Missing Authentication6.9 Medium
- netvision isoinsightNetvision ISOinsight - SQL Injection9.3 Critical
- lightpress lightbox, unknown lightpress lightbox +1 moreLightPress Lightbox < 2.3.4 - Contributor+ Stored XSS6.8 Medium
- firelightwp firelight lightboxFirelight Lightbox < 2.3.15 - Contributor+ Stored XSS5.9 Medium
- wormhole tech gpmWormHole Tech GPM - Unverified Password Change9.3 Critical
- zong yu parking management systemZONG YU Parking Management System - Missing Authentication8.8 High
- zong yu okcat parking management platformZONG YU Okcat Parking Management Platform - Arbitrary File Upload9.3 Critical
- zong yu okcat parking management platformZONG YU Okcat Parking Management Platform - Missing Authentication9.3 Critical
- phpgurukul apartment visitors management systemPHPGurukul Apartment Visitors Management System bwdates-passreports-details.php sql injection6.9 Medium
pcapplusplusOSS-FuzzSegv on unknown address in pcpp::Packet::computeCalculateFieldsNo score- phpgurukul apartment visitors management systemPHPGurukul Apartment Visitors Management System bwdates-reports-details.php sql injection6.9 Medium
- artec-it emaCross Site Scripting vulnerability in ARTEC EMA Mail v6.92 allows an attacker to execute...6.1 Medium
- artec-it enterprise mail archiveARTEC EMA Mail 6.92 allows CSRF.8.8 High
- netis-systems wf2880 firmwareA null pointer dereference vulnerability was discovered in Netis WF2880 v2.1.40207. The...7.5 High
- tenda ac10 firmwareTenda AC10 V1.0re_V15.03.06.46 is vulnerable to Buffer Overflow in the formSetPPTPUserList...9.8 Critical
- engineercms project engineercmsEngineerCMS v1.02 through v.2.0.5 has a SQL injection vulnerability in the /project...9.8 Critical
- tenda fh451 firmwareTenda FH451 V1.0.0.9 is vulnerable to Remote Code Execution in the formSafeEmailFilter function.6.5 Medium
- tenda ac10 firmwareTenda AC10 v4 V16.03.10.13 is vulnerable to Buffer Overflow in the GetParentControlInfo function.5.4 Medium
- Show moreLoading…