CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- emlogEMLOG SQL Injection Vulnerability8.3 High
- emlogEmlog Pro Contains a File Upload Vulnerability8.9 High
- microsoft defender for endpoint, defender for endpoint for linux +1 moreMicrosoft Defender for Endpoint Elevation of Privilege Vulnerability7.8 High
- emlogEmlog vulnerable to Deserialization of Untrusted Data6.6 Medium
- dell powerscale onefsDell PowerScale OneFS, versions 9.4.0.0 through 9.9.0.0, contains an uncontrolled resource...7.5 High
- campcodes sales and inventory systemCampcodes Sales and Inventory System reprint.php sql injection6.9 Medium
- dell insightiq, powerscale insightiq +1 moreDell PowerScale InsightIQ, version 5.2, contains an uncontrolled resource consumption...5.3 Medium
- dell insightiq, powerscale insightiq +1 moreDell PowerScale InsightIQ, versions 5.0 through 5.2, contains an improper privilege management...8.1 High
- campcodes sales and inventory systemCampcodes Sales and Inventory System print.php sql injection6.9 Medium
- campcodes sales and inventory systemCampcodes Sales and Inventory System account_summary.php sql injection6.9 Medium
- automattic toursWordPress Tours plugin <= 1.0.0 - Broken Access Control vulnerability4.3 Medium
- automattic jetpack debug toolsWordPress Jetpack Debug Tools plugin < 2.0.1 - Broken Access Control vulnerability5.3 Medium
- saleswonder team tobias wp2leadsWordPress WP2LEADS plugin <= 3.5.0 - Cross Site Request Forgery (CSRF) vulnerability7.1 High
- campcodes sales and inventory systemCampcodes Sales and Inventory System stockin_add.php sql injection6.9 Medium
- vyperlang vyperVyper's `slice()` may elide side-effects when output length is 02.9 Low
- campcodes sales and inventory systemCampcodes Sales and Inventory System transaction.php sql injection6.9 Medium
- campcodes sales and inventory systemCampcodes Sales and Inventory System transaction_del.php sql injection6.9 Medium
- vyperlang vyperVyper's `concat()` builtin may elide side-effects for zero-length arguments2.9 Low
- bytecodealliance webassembly micro runtime, wasm-micro-runtime +1 moreiwasm vulnerable to filesystem sandbox escape with symlink when using uvwasi feature7.0 High
- etoilewebdesign front end usersWordPress Front End Users plugin <= 3.2.35 - Broken Access Control vulnerability5.4 Medium
- campcodes sales and inventory systemCampcodes Sales and Inventory System sales_add.php sql injection6.9 Medium
- campcodes sales and inventory systemCampcodes Sales and Inventory System transaction_add.php sql injection6.9 Medium
- ni circuit design suiteStack-based Buffer Overflow in DrObjectStorage::XML_Serialize() in NI Circuit Design Suite8.5 High
- code-projects online examination systemprojectworlds Online Examination System Procedure3b_yearwiseVisit.php sql injection6.9 Medium
- ni circuit design suiteOut of Bounds Read in Bitmap::InternalDraw() in NI Circuit Design Suite8.5 High
- ni circuit design suiteOut of Bounds Read in GetSymbolBorderRectSize() in NI Circuit Design Suite8.5 High
- bootstrapXSS in Bootstrap title attribute for Tooltip and Popover5.6 Medium
- ni circuit design suiteOut of Bounds Write in CheckPins() in NI Circuit Design Suite8.5 High
- ni circuit design suiteOut of Bounds Write in Library!DecodeBase64() in NI Circuit Design Suite8.5 High
reflexPyPIReflex vulnerable to private state fields modification8.1 High- phpgurukul vehicle parking management systemPHPGurukul Vehicle Parking Management System view-incomingvehicle-detail.php sql injection6.9 Medium
- ibm security guardiumIBM Security Guardium cross-site scripting5.5 Medium
- phpgurukul vehicle parking management systemPHPGurukul Vehicle Parking Management System edit-category.php sql injection6.9 Medium
- phpgurukul vehicle parking management systemPHPGurukul Vehicle Parking Management System admin-profile.php sql injection6.9 Medium
- mattermost, mattermost server +1 moreSystem Admin Cannot Access Environment settings in System Console While System Manager Can2.7 Low
- mattermost, mattermost server +1 moreImproper access control to group information4.3 Medium
- phpgurukul vehicle parking management systemPHPGurukul Vehicle Parking Management System add-category.php sql injection6.9 Medium
- vita-mllm freeze-omniVITA-MLLM Freeze-Omni utils.py torch.load deserialization4.8 Medium
- nodejs undiciundici Denial of Service attack via bad certificate data3.1 Low
github.com/babylonlabs-io/babylonGoBabylon Integer Overflow in Distribution Module CumulativeRewardRatio Calculation Leading to Chain Halt8.2 Highgithub.com/babylonlabs-io/babylonGoBabylon Finality Provider `MsgCommitPubRandList` replay attack8.9 High- phpgurukul apartment visitors management systemPHPGurukul Apartment Visitors Management System visitors-form.php sql injection6.9 Medium
- itsourcecode directory management systemPHPGurukul Directory Management System forget-password.php sql injection6.9 Medium
- python software foundation cpythonUse-after-free in "unicode_escape" decoder with error handler5.9 Medium
- itsourcecode directory management systemPHPGurukul Directory Management System edit-directory.php sql injection6.9 Medium
- campcodes cyber cafe management systemPHPGurukul/Campcodes Cyber Cafe Management System search.php sql injection5.3 Medium
- campcodes cyber cafe management systemPHPGurukul/Campcodes Cyber Cafe Management System add-users.php sql injection5.3 Medium
- lleidanet pki esignaInsecure Direct Object Reference (IDOR) vulnerability in eSignaViewer2.0 Low
- facturaone ticketbai facturas para woocommerceTicketBAI Facturas para WooCommerce <= 3.18 - Unauthenticated Arbitrary File Deletion9.8 Critical
- mattermost, mattermost server +1 moreMembers Without Guest Invite Permissions Can Add Guests to Teams4.3 Medium
- Show moreLoading…