CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server doesn't request second factor after session timeout6.4 Medium
- phpgurukul park ticketing management systemPHPGurukul Park Ticketing Management System foreigner-search.php sql injection5.3 Medium
- dpgaspar flask-appbuilderFlask-AppBuilder open redirect vulnerability using HTTP host injection4.3 Medium
- google application load balancer, google cloud classic application load balancer +1 moreHTTP Request Smuggling in Google Cloud Classic Application Load Balancer due to Improper Chunked Encoding Validation8.7 High
- phpgurukul park ticketing management systemPHPGurukul Park Ticketing Management System normal-search.php sql injection5.3 Medium
- qtImproper Link Resolution Before File Access in QFileSystemEngine on Windows7.3 High
- ether fcgiFCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library5.3 Medium
- debian linux, linux kernel +1 morenet_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc7.8 High
- phpgurukul park ticketing management systemPHPGurukul Park Ticketing Management System view-foreigner-ticket.php sql injection5.3 Medium
- pnetlabPath Traversal vulnerability in PNETLab8.7 High
- phpgurukul online course registrationPHPGurukul Online Course Registration level.php sql injection6.9 Medium
- syncpilot live contractImproper Access Control vulnerability in LIVE CONTRACT5.9 Medium
- syncpilot live contractLocal file inclusion vulnerability in LIVE CONTRACT8.6 High
- phpgurukul online course registrationPHPGurukul Online Course Registration department.php sql injection6.9 Medium
- phpgurukul online course registrationPHPGurukul Online Course Registration course.php sql injection6.9 Medium
- icewarp mail serverCross-site scripting (XSS) vulnerability in IceWarp Mail Server2.0 Low
- icewarp mail serverHTTP host header injection vulnerability in IceWarp Mail Server2.0 Low
- icewarp mail serverOpen redirection vulnerability in IceWarp Mail Server5.1 Medium
- phpgurukul park ticketing management systemPHPGurukul Park Ticketing Management System view-normal-ticket.php sql injection5.3 Medium
- cbewin anytxt searcherCBEWIN Anytxt Searcher ATService.exe uncontrolled search path7.3 High
- feng ha ha ssm-erp, production ssm +1 morefeng_ha_ha/megagao ssm-erp/production_ssm PictureServiceImpl.java uploadPicture unrestricted upload5.3 Medium
- defog-ai introspectdefog-ai introspect Test Endpoint integration_routes.py test_custom_tool code injection4.8 Medium
- phpgurukul zoo management systemPHPGurukul Zoo Management System profile.php sql injection6.9 Medium
- synology active backup for microsoft 365A vulnerability in Synology Active Backup for Microsoft 365 allows remote authenticated attackers...6.5 Medium
- phpgurukul zoo management systemPHPGurukul Zoo Management System contactus.php sql injection6.9 Medium
- ollama, ollama ollama/ollama +1 moreImproper Validation of Array Index in ollama/ollama7.5 High
- phpgurukul complaint management systemPHPGurukul Complaint Management System admin-profile.php sql injection6.9 Medium
- phpgurukul beauty parlour management systemPHPGurukul Beauty Parlour Management System contact.php sql injection6.9 Medium
- phpgurukul beauty parlour management systemPHPGurukul Beauty Parlour Management System forgot-password.php sql injection6.9 Medium
- d-link di-7003gv2, dlink di-7003g firmware +1 moreD-Link DI-7003GV2 restart.asp denial of service6.9 Medium
- ericsson packet core controllerEricsson Packet Core Controller (PCC) - Improper Input Validation Vulnerability7.5 High
- d-link di-7003gv2, dlink di-7003g firmware +1 moreD-Link DI-7003GV2 netconfig.asp sub_497DE4 improper authentication6.9 Medium
- hitachi ops center analyzerMissing Authorization Vulnerability in Hitachi Ops Center Analyzer4.3 Medium
- hitachi ops center analyzerCross-Site WebSocket Hijacking Vulnerability in Hitachi Ops Center Analyzer5.4 Medium
- d-link di-7003gv2, dlink di-7003g firmware +1 moreD-Link DI-7003GV2 login.data information disclosure6.9 Medium
- hitachi ops center analyzer viewpointAuthentication credentials leakage vulnerability in Hitachi Ops Center Analyzer viewpoint OVF6.5 Medium
- hitachi infrastructure analytics advisor, ops center analyzer +1 moreBypass Connection Restriction Vulnerability in Hitachi Ops Center Analyzer6.5 Medium
- d-link di-7003gv2, dlink di-7003g firmware +1 moreD-Link DI-7003GV2 install_base.data information disclosure6.9 Medium
- d-link di-7003gv2, dlink di-7003g firmware +1 moreD-Link DI-7003GV2 index.data information disclosure6.9 Medium
- archetyped simple lightboxSimple Lightbox < 2.9.4 - Contributor+ Stored XSS5.9 Medium
- kaliforms kali forms, unknown contact form builder with drag & drop for wordpress +1 moreKali Forms < 2.4.3 - Contributor+ Stored XSS5.9 Medium
- nodejs nodeThe C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user...7.5 High
- nodejs nodeIn Node.js, the `ReadFileUtf8` internal binding leaks memory due to a corrupted pointer in ...3.7 Low
- d-link di-7003gv2, dlink di-7003g firmware +1 moreD-Link DI-7003GV2 Configuration get_version.data information disclosure6.9 Medium
- d-link di-7003gv2, dlink di-7003g firmware +1 moreD-Link DI-7003GV2 Factory Reset backup.asp sub_4983B0 denial of service8.7 High
- bohua netdragon firewallBohua NetDragon Firewall ip_status.php command injection5.3 Medium
- lirantal lockfile-lint-apilockfile-lint-api Vulnerable to Incorrect Behavior Order6.9 Medium
- campcodes sales and inventory systemCampcodes Sales and Inventory System purchase_delete.php sql injection6.9 Medium
- code-projects employee record systemcode-projects Employee Record System current_employees.php cross site scripting5.1 Medium
- code-projects employee record systemcode-projects Employee Record System edit_employee.php cross site scripting5.1 Medium
- Show moreLoading…