CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- code-projects police station management systemcode-projects Police Station Management System Delete Record source.cpp remove stack-based overflow4.8 Medium
- code-projects police station management systemcode-projects Police Station Management System Display Record source.cpp display buffer overflow4.8 Medium
- code-projects tourism management systemcode-projects Tourism Management System Login User LoginUser stack-based overflow4.8 Medium
- code-projects tourism management systemcode-projects Tourism Management System User Registration AddUser buffer overflow4.8 Medium
- bdtask pharmacy management systemcode-projects Pharmacy Management System Add Order Details take_order buffer overflow4.8 Medium
- senior-walter online student clearance systemSourceCodester Online Student Clearance System cross-site request forgery5.3 Medium
- campcodes sales and inventory systemitsourcecode Sales and Inventory System product_update.php sql injection6.9 Medium
- campcodes sales and inventory systemitsourcecode Sales and Inventory System product_add.php sql injection6.9 Medium
- adonesevangelista restaurant management systemitsourcecode Restaurant Management System assign_save.php sql injection6.9 Medium
- d-link di-8100, dlink di-8100g firmware +1 moreD-Link DI-8100 Connection Limit Page ctxz.asp ctxz_asp stack-based overflow8.6 High
- adonesevangelista restaurant management systemitsourcecode Restaurant Management System team_update.php sql injection6.9 Medium
- adonesevangelista restaurant management systemitsourcecode Restaurant Management System user_save.php sql injection6.9 Medium
- phpgurukul news portalPHPGurukul News Portal aboutus.php sql injection6.9 Medium
- campcodes online shopping portalCampcodes Online Shopping Portal forgot-password.php sql injection6.9 Medium
- phpgurukul news portal project, news portal +1 morePHPGurukul News Portal Project contactus.php sql injection6.9 Medium
- phpgurukul news portalPHPGurukul News Portal Login index.php sql injection6.9 Medium
- freefloat ftp serverFreeFloat FTP Server CCC Command buffer overflow6.9 Medium
- pcman ftp serverPCMan FTP Server REST Command buffer overflow6.9 Medium
- adonesevangelista restaurant management systemitsourcecode Restaurant Management System menu_save.php sql injection6.9 Medium
- adonesevangelista restaurant management systemitsourcecode Restaurant Management System member_update.php sql injection6.9 Medium
- merikbest ecommerce-spring-reactjsmerikbest ecommerce-spring-reactjs File Upload Endpoint admin path traversal5.3 Medium
- tenda a15, a15 firmware +1 moreTenda A15 ArpNerworkSet formArpNerworkSet denial of service7.1 High
- weibo rill-flowweibocom rill-flow Management Console code injection5.3 Medium
- adonesevangelista restaurant management systemitsourcecode Restaurant Management System member_save.php sql injection6.9 Medium
- adonesevangelista restaurant management systemitsourcecode Restaurant Management System finished.php sql injection6.9 Medium
- advaya softech gems erp portalAdvaya Softech GEMS ERP Portal studentLogin.action sql injection5.3 Medium
- itsourcecode directory management systemPHPGurukul Directory Management System searchdata.php cross site scripting5.3 Medium
- phpgurukul beauty parlour management systemPHPGurukul Beauty Parlour Management System admin-profile.php sql injection6.9 Medium
- boldthemes bold page builderBold Page Builder <= 5.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-text' Parameter6.4 Medium
- d-link dap-2695, dlink dap-2695 firmware +1 moreD-Link DAP-2695 Static Pool Settings Page adv_dhcps.php cross site scripting4.8 Medium
- d-link dap-2695, dlink dap-2695 firmware +1 moreD-Link DAP-2695 MAC Bypass Settings Page adv_macbypass.php cross site scripting4.8 Medium
- d-link dap-2695, dlink dap-2695 firmware +1 moreD-Link DAP-2695 ARP Spoofing Prevention Page adv_arpspoofing.php cross site scripting4.8 Medium
- totolink a3002r, a3002r firmware +1 moreTOTOLINK A3002R VPN Page cross site scripting4.8 Medium
- totolink n300rh, n300rh firmware +1 moreTOTOLINK N300RH cstecgi.cgi setUploadUserData command injection5.3 Medium
- totolink n300rh, n300rh firmware +1 moreTOTOLINK N300RH cstecgi.cgi setUnloadUserData command injection5.3 Medium
- totolink n300rh, n300rh firmware +1 moreTOTOLINK N300RH cstecgi.cgi CloudACMunualUpdateUserdata command injection5.3 Medium
- freefloat ftp serverFreeFloat FTP Server RECV Command buffer overflow6.9 Medium
- freefloat ftp serverFreeFloat FTP Server MLS Command buffer overflow6.9 Medium
- freefloat ftp serverFreeFloat FTP Server MPUT Command buffer overflow6.9 Medium
- freefloat ftp serverFreeFloat FTP Server TRACE Command buffer overflow6.9 Medium
- freefloat ftp serverFreeFloat FTP Server CD Command buffer overflow6.9 Medium
- o2 uk o2O2 UK through 2025-05-17 allows subscribers to determine the Cell ID of other subscribers by...3.5 Low
- d-link dcs-932l, dlink dcs-932l firmware +1 moreD-Link DCS-932L udev SubUPnPCSInit stack-based overflow8.7 High
- d-link dcs-932l, dlink dcs-932l firmware +1 moreD-Link DCS-932L ucp isUCPCameraNameChanged stack-based overflow8.7 High
- d-link dcs-932l, dlink dcs-932l firmware +1 moreD-Link DCS-932L gpio sub_404780 stack-based overflow8.7 High
- itwanger paicodingitwanger paicoding CrossUtil.java cross-domain policy2.3 Low
- kanwangzjm funiturekanwangzjm Funiture Login LoginServlet.java doPost redirect5.3 Medium
- mozilla firefox, thunderbird +1 moreOut-of-bounds access when optimizing linear sums8.8 High
- mozilla firefox, thunderbird +1 moreOut-of-bounds access when resolving Promise objects9.8 Critical
- projectworlds student project allocation systemprojectworlds Student Project Allocation System make_group_sql.php sql injection6.9 Medium
- Show moreLoading…