CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2024 +1 more +3 moreMicrosoft PowerPoint Remote Code Execution Vulnerability7.8 High
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft sharepoint server, sharepoint enterprise server 2016, sharepoint server 2019 +1 more +3 moreMicrosoft SharePoint Server Elevation of Privilege Vulnerability7.8 High
- microsoft pc managerMicrosoft PC Manager Elevation of Privilege Vulnerability7.8 High
- microsoft azure file syncMicrosoft Azure File Sync Elevation of Privilege Vulnerability7.0 High
- microsoft windows 11 version 22h2, windows 11 version 22h3, windows 11 version 23h2 +4 more +6 moreWeb Threat Defense (WTD.sys) Denial of Service Vulnerability7.5 High
- microsoft windows 11 version 24h2, windows server 2022, 23h2 edition (server core installation), windows server 2025 +3 more +5 moreMicrosoft Brokering File System Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreMS-EVEN RPC Remote Code Execution Vulnerability7.5 High
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +13 more +15 moreActive Directory Certificate Services (AD CS) Denial of Service Vulnerability6.5 Medium
- microsoft remote desktop client for windows desktop, windows 10 version 1507, windows 10 version 1607 +32 more +34 moreRemote Desktop Client Remote Code Execution Vulnerability8.8 High
- microsoft remote desktop, remote desktop client for windows desktop, windows 10 version 1507 +34 more +36 moreRemote Desktop Client Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreWindows Media Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability6.5 Medium
- microsoft defender for endpoint, defender for endpoint for linux +1 moreMicrosoft Defender Elevation of Privilege Vulnerability6.7 Medium
- amd optimizing cpu libraries (aocl)A DLL hijacking vulnerability in the AMD Optimizing CPU Libraries could allow an attacker to...7.3 High
- amd optimizing cpu libraries (aocl)Incorrect default permissions in the AMD Optimizing CPU Libraries (AOCL) installation directory...7.3 High
- adobe dreamweaver, dreamweaver desktop +1 moreDreamweaver Desktop | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)7.8 High
- openpubkey, openpubkey opkssh +1 moreAuthentication Bypass in OPKSSH9.3 Critical
- openpubkey, opkssh +1 moreAuthentication Bypass in OpenPubKey9.3 Critical
- pallets flaskFlask uses fallback key instead of current signing key1.8 Low
- ivanti endpoint manager mobile, endpoint manager mobile (epmm) +1 moreRemote Code Execution7.2 High
- ivanti endpoint manager mobile, endpoint manager mobile (epmm) +1 moreAuthentication Bypass5.3 Medium
- chewkeanho actualizerActualizer Uses OpenSSL's "-passwd" Function Which Uses SHA512 Under The Hood Instead of Proper Password Hasher like Yescript/Argon2i7.5 High
- justinas nosurfnosurf vulnerable to CSRF due to non-functional same-origin request checks6.0 Medium
- getkirby kirbyPath traversal of collection names during file system lookup6.3 Medium
- getkirby kirbyKirby vulnerable to path traversal in the router for PHP's built-in server2.3 Low
- ivanti neurons for itsm, neurons for itsm (on-prem) +1 moreAn authentication bypass in Ivanti Neurons for ITSM (on-prem only) before 2023.4, 2024.2 and 2024...9.8 Critical
- ivanti cloud services appliance, csa (cloud services appliance) +1 moreDefault credentials in Ivanti Cloud Services Application before version 5.0.5 allows a local...7.8 High
- getkirby kirbyKirby vulnerable to path traversal of snippet names in the `snippet()` helper6.3 Medium
- phoenix securecore technology 4, phoenixtech securecore technology +1 moreImproper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore...3.3 Low
- fortinet forticamera, fortimail, fortindr +4 more +6 moreA stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiVoice versions 7.2.0, 7.0...9.6 Critical
- fortinet forticlientems, forticlientems cloud +1 moreA Relative Path Traversal vulnerability [CWE-23] in FortiClientEMS 7.4.0 through 7.4.1 and...5.0 Medium
- fortinet forticlient, forticlientmac, fortivoiceucdesktop +1 more +3 moreAn improper isolation or compartmentalization vulnerability [CWE-653] in FortiClientMac version 7...2.3 Low
- amd uprof, μprof +1 moreA junction point vulnerability within AMD uProf can allow a local low-privileged attacker to...6.6 Medium
- ami aptiov, aptio v +1 moreTOCTOU in SmmWhea7.5 High
freetype2SUSESecurity update for freetype2No score- centreon webACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs.4.9 Medium
- checkmkPrivilege escalation in jar_signature5.2 Medium
- centreon webA user with elevated privileges can inject XSS by altering the content of a SVG media during the submit request.8.4 High
- siemens scalance lpe9403, scalance lpe9403 firmware +1 moreA vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions with...6.7 Medium
- siemens scalance lpe9403, scalance lpe9403 firmware +1 moreA vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions with...8.5 High
- siemens scalance lpe9403, scalance lpe9403 firmware +1 moreA vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions with...8.4 High
- siemens scalance lpe9403, scalance lpe9403 firmware +1 moreA vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions)....5.4 Medium
- siemens scalance lpe9403, scalance lpe9403 firmware +1 moreA vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions)....5.4 Medium
- siemens scalance lpe9403, scalance lpe9403 firmware +1 moreA vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions)....5.3 Medium
- siemens scalance lpe9403, scalance lpe9403 firmware +1 moreA vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions)....5.3 Medium
- siemens scalance lpe9403, scalance lpe9403 firmware +1 moreA vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions)....5.3 Medium
- siemens scalance lpe9403, scalance lpe9403 firmware +1 moreA vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions)....5.3 Medium
- siemens scalance lpe9403, scalance lpe9403 firmware +1 moreA vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions)....8.5 High
- Show moreLoading…