CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- adobe coldfusionColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)6.8 Medium
- adobe coldfusionColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)9.1 Critical
- adobe coldfusionColdFusion | Incorrect Authorization (CWE-863)9.1 Critical
- adobe coldfusionColdFusion | Improper Input Validation (CWE-20)9.1 Critical
- adobe coldfusionColdFusion | Improper Access Control (CWE-284)9.1 Critical
- adobe coldfusionColdFusion | Incorrect Authorization (CWE-863)9.1 Critical
- adobe connectAdobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- adobe connectAdobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)6.1 Medium
- adobe connectAdobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)6.1 Medium
- adobe connectAdobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)9.3 Critical
- adobe substance3d - modeler, substance 3d modeler +1 moreSubstance3D - Modeler | Out-of-bounds Write (CWE-787)7.8 High
- adobe substance3d - modeler, substance 3d modeler +1 moreSubstance3D - Modeler | Uncontrolled Search Path Element (CWE-427)7.8 High
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Out-of-bounds Write (CWE-787)7.8 High
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Use After Free (CWE-416)7.8 High
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Use After Free (CWE-416)7.8 High
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Use After Free (CWE-416)7.8 High
- adobe substance3d - stager, substance 3d stager +1 moreSubstance3D - Stager | Use After Free (CWE-416)7.8 High
- adobe dimensionDimension | Out-of-bounds Write (CWE-787)7.8 High
- adobe dimensionDimension | Out-of-bounds Write (CWE-787)7.8 High
- hashicorp nomad, nomad enterprise +1 moreNomad Vulnerable To Violation Of Mandatory Sentinel Policies in Nomad Job Submissions via Policy Override7.6 High
- adobe bridgeBridge | Integer Overflow or Wraparound (CWE-190)7.8 High
- adobe bridgeBridge | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- adobe bridgeBridge | Access of Uninitialized Pointer (CWE-824)7.8 High
- adobe illustratorIllustrator | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe animateAnimate | Access of Uninitialized Pointer (CWE-824)7.8 High
- adobe animateAnimate | NULL Pointer Dereference (CWE-476)5.5 Medium
- adobe animateAnimate | Integer Overflow or Wraparound (CWE-190)7.8 High
- adobe animateAnimate | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- adobe animateAnimate | Out-of-bounds Write (CWE-787)7.8 High
- forescout secureconnectorRemote Code Execution in Windows Secure Connector/ HPS Inspection Engine via Insecure Named Pipe Access8.7 High
- adobe photoshop, photoshop desktop +1 morePhotoshop Desktop | Integer Overflow or Wraparound (CWE-190)7.8 High
- adobe photoshop, photoshop desktop +1 morePhotoshop Desktop | Access of Uninitialized Pointer (CWE-824)7.8 High
- adobe photoshop, photoshop desktop +1 morePhotoshop Desktop | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- adobe substance3d - painter, substance 3d painter +1 moreSubstance3D - Painter | Out-of-bounds Write (CWE-787)7.8 High
- amd aim-t manageability apiIncorrect default permissions in the AMD Manageability API could allow an attacker to achieve...7.3 High
- amd aim-t manageability apiA DLL hijacking vulnerability in the AMD Manageability API could allow an attacker to achieve...7.3 High
- adobe lightroom, lightroom desktop +1 moreLightroom Desktop | Out-of-bounds Write (CWE-787)7.8 High
- adobe indesign, indesign desktop +1 moreInDesign Desktop | NULL Pointer Dereference (CWE-476)5.5 Medium
- adobe indesign, indesign desktop +1 moreInDesign Desktop | NULL Pointer Dereference (CWE-476)5.5 Medium
- adobe indesign, indesign desktop +1 moreInDesign Desktop | Out-of-bounds Write (CWE-787)7.8 High
- amd cloud manageability serviceUnquoted search path within AMD Cloud Manageability Service can allow a local attacker to...7.3 High
- umbraco forms, umbraco.forms.issues +1 moreUmbraco.Forms has HTML injection vulnerability in 'Send email' workflow2.3 Low
- amd aim-t manageability serviceUnquoted search path within AIM-T Manageability Service can allow a local attacker to escalate...7.3 High
- absolute persistenceServer Identity Validation Bypass in Absolute Persistence®6.9 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreKernel Streaming Service Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +16 more +18 moreNTFS Elevation of Privilege Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +2 more +4 moreMicrosoft Outlook Remote Code Execution Vulnerability7.8 High
- microsoft excel, office, 365 apps +6 more +8 moreMicrosoft Excel Remote Code Execution Vulnerability8.4 High
- microsoft visual studio 2019 version 16.11 (includes 16.0 - 16.10), visual studio 2022 version 17.10, visual studio 2022 version 17.12 +4 more +6 moreVisual Studio Remote Code Execution Vulnerability7.8 High
- Show moreLoading…