CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- siemens scalance lpe9403, scalance lpe9403 firmware +1 moreA vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions)....6.7 Medium
- siemens scalance lpe9403, scalance lpe9403 firmware +1 moreA vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions)....6.8 Medium
- siemens mendix oidc sso (mendix 10.12 compatible), mendix oidc sso (mendix 9 compatible), mendix oidc sso v4.2 (mendix 10 compatible) +1 more +3 moreA vulnerability has been identified in Mendix OIDC SSO (Mendix 10 compatible) (All versions < V4...2.1 Low
- siemens simatic pcs neo v4.1, simatic pcs neo v5.0, simatic pcs neo +2 moreA vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions < V4.1 Update 3),...8.7 High
- siemens bacnet atec 550-440, bacnet atec 550-441, bacnet atec 550-445 +1 more +3 moreA vulnerability has been identified in BACnet ATEC 550-440 (All versions), BACnet ATEC 550-441 ...7.1 High
- siemens apogee pxc+talon tc series (bacnet)A vulnerability has been identified in APOGEE PXC+TALON TC Series (BACnet) (All versions)....5.3 Medium
- siemens ruggedcom rox mx5000, ruggedcom rox mx5000re, ruggedcom rox rx1400 +8 more +10 moreA vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM...9.4 Critical
- siemens ruggedcom rox mx5000, ruggedcom rox mx5000re, ruggedcom rox rx1400 +8 more +10 moreA vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM...9.4 Critical
- siemens ruggedcom rox mx5000, ruggedcom rox mx5000re, ruggedcom rox rx1400 +8 more +10 moreA vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM...9.4 Critical
- siemens teamcenter visualization v14.3, teamcenter visualization v2312, teamcenter visualization v2406 +4 more +6 moreA vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.14)...7.3 High
- siemens iec 1ph 7.4kw child socket, iec 1ph 7.4kw child socket/ shutter, iec 1ph 7.4kw parent cable 7m +29 more +31 moreA vulnerability has been identified in IEC 1Ph 7.4kW Child socket (8EM1310-2EH04-0GA0) (All...8.7 High
- siemens iec 1ph 7.4kw child socket, iec 1ph 7.4kw child socket/ shutter, iec 1ph 7.4kw parent cable 7m +31 more +33 moreA vulnerability has been identified in IEC 1Ph 7.4kW Child socket (8EM1310-2EH04-0GA0) (All...4.1 Medium
- siemens simatic pcs neo v4.1, simatic pcs neo v5.0, simatic pcs neo +9 more +11 moreA vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 ...8.7 High
- siemens simatic pcs neo v4.1, simatic pcs neo v5.0, simatic pcs neo +9 more +11 moreA vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 ...8.7 High
- siemens simatic pcs neo v4.1, simatic pcs neo v5.0, sinec nms +8 more +10 moreA vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 ...8.7 High
- siemens ozw672, ozw772, ozw672 firmware +1 more +3 moreA vulnerability has been identified in OZW672 (All versions < V6.0), OZW772 (All versions < V6.0)...9.3 Critical
- siemens ozw672, ozw772, ozw672 firmware +1 more +3 moreA vulnerability has been identified in OZW672 (All versions < V8.0), OZW772 (All versions < V8.0)...10.0 Critical
- siemens ms/tp point pickup moduleA vulnerability has been identified in MS/TP Point Pickup Module (All versions). Affected devices...7.1 High
- siemens sirius 3rk3 modular safety system (mss), sirius safety relays 3sk2 +1 moreA vulnerability has been identified in SIRIUS 3RK3 Modular Safety System (MSS) (All versions),...8.2 High
- siemens sirius 3rk3 modular safety system (mss), sirius safety relays 3sk2 +1 moreA vulnerability has been identified in SIRIUS 3RK3 Modular Safety System (MSS) (All versions),...8.7 High
- siemens sirius 3rk3 modular safety system (mss), sirius safety relays 3sk2 +1 moreA vulnerability has been identified in SIRIUS 3RK3 Modular Safety System (MSS) (All versions),...8.7 High
- siemens polarion v2310, polarion v2404, polarion alm +2 moreA vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All...6.9 Medium
- siemens polarion v2310, polarion v2404, polarion alm +2 moreA vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All...5.1 Medium
- siemens polarion v2310, polarion v2404, polarion alm +2 moreA vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All...7.1 High
- siemens polarion v2310, polarion v2404, polarion alm +2 moreA vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All...7.1 High
- siemens desigo ccA vulnerability has been identified in Desigo CC (All versions if access from Installed Clients...8.7 High
- domainsproSQL Injection in DomainsPRO9.3 Critical
- centreon webA user with elevated privileges can bypass sanitization measures by replacing the content of an existing SVG8.4 High
- centreon webA high privilege user is able to create and use a valid admin API token in centreon-web7.2 High
- sma www.sunnyportal.comSMA: Sunny Portal demo system privilege escalation8.6 High
- schneider electric ecostruxure™ power build rapsody softwareCWE-121: Stack-based Buffer Overflow vulnerability exists that could cause local attackers being...4.6 Medium
- apache supersetApache Superset: Incorrect authorization leading to resource ownership takeover5.3 Medium
- broadcom bitnami, bitnami\/pgpool +1 more[pgpool] Unauthenticated access to postgres through pgpool9.4 Critical
- m a vinoth kumar frontend dashboardFrontend Dashboard 1.0 - 2.2.7 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via fed_admin_setting_form_function Function8.8 High
- codexthemes thegemTheGem <= 5.10.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Theme Options Update4.3 Medium
- codexthemes thegemTheGem <= 5.10.3 - Authenticated (Subscriber+) Arbitrary File Upload8.8 High
- contrid newslettersNewsletters <= 4.9.9.8 - Authenticated (Contributor+) SQL Injection orderby Parameter6.5 Medium
- m a vinoth kumar frontend dashboardFrontend Dashboard 1.5.10 - 2.2.7 - Missing Authorization to Authenticated (Subscriber+) Account Takeover/Privilege Escalation via ajax_request Function8.8 High
- samsung magicinfo 9 serverImproper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9...9.8 Critical
- cloud foundry uaa, cloudfoundry uaa release, cloud foundry cf deployment +1 more +3 moreCVE-2025-22246 – UAA Private Key Exposure3.0 Low
- vmware aria automation, cloud foundation, telco cloud platform +2 moreVMSA-2025-0008: VMware Aria automation updates address a DOM based Cross-site scripting vulnerability (CVE-2025-22249)8.2 High
- comesio relevanssi – a better search, relevanssi premium, unknown relevanssi premium +2 moreRelevanssi <= 4.24.4 (Free) and <= 2.27.5 (Premium) - Unauthenticated SQL Injection7.5 High
- conda-forge miniforge, openssl-feedstock +1 moreconda-forge openssl-feedstock writable OPENSSLDIR7.0 High
- sap se landscape transformation (pcl basis)Missing Authorization Check in SAP Landscape Transformation (PCL Basis)7.7 High
- sap se s/4hana cloud private edition or on premise (scm master data layer (mdl))Code injection vulnerability in SAP S/4HANA Cloud Private Edition or On Premise(SCM Master Data Layer (MDL))8.3 High
- sap se service parts management (spm)Missing Authorization check in SAP Service Parts Management (SPM)6.3 Medium
- sap se s/4hana hcm portugal and sap erp hcm portugalMissing Authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal5.8 Medium
- sap se service parts management (spm)Missing Authorization check in SAP Service Parts Management (SPM)6.3 Medium
- sap se supplier relationship management (master data management catalog)Cross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship Management (Master Data Management Catalog)6.1 Medium
- sap se gui for windowsInformation Disclosure vulnerability in SAP GUI for Windows4.3 Medium
- Show moreLoading…