CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- fuji electric co., ltd. v-sft, fujielectric monitouch v-sft +1 moreV-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds write in VS6ComFile...8.4 High
- fuji electric co., ltd. v-sft, fujielectric monitouch v-sft +1 moreV-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds write in VS6EditData...8.4 High
- fuji electric co., ltd. v-sft, fujielectric monitouch v-sft +1 moreV-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds write in VS6MemInIF...8.4 High
- fuji electric co., ltd. v-sft, fujielectric monitouch v-sft +1 moreV-SFT v6.2.5.0 and earlier contains an issue with free of pointer not at start of buffer in...8.4 High
- phpgurukul auto taxi stand management system, auto\/taxi stand management system +1 morePHPGurukul Auto Taxi Stand Management System new-autoortaxi-entry-form.php sql injection6.9 Medium
- linux, linux kernel +1 moreALSA: ump: Fix buffer overflow at UMP SysEx message conversion7.8 High
- pgpool global development group pgpool-iiPgpool-II provided by PgPool Global Development Group contains an authentication bypass by...9.3 Critical
- phpgurukul auto taxi stand management system, auto\/taxi stand management system +1 morePHPGurukul Auto Taxi Stand Management System admin-profile.php sql injection6.9 Medium
- phpgurukul auto taxi stand management system, auto\/taxi stand management system +1 morePHPGurukul Auto Taxi Stand Management System auto-taxi-entry-detail.php sql injection6.9 Medium
- phpgurukul auto taxi stand management system, auto\/taxi stand management system +1 morePHPGurukul Auto Taxi Stand Management System forgot-password.php sql injection6.9 Medium
- ninjaforms ninja formsNinja Forms < 3.10.1 - Admin+ Stored XSS4.8 Medium
- ninjaforms ninja formsNinja Forms < 3.10.1 - Admin+ Stored XSS4.8 Medium
- ninjaforms ninja formsNinja Forms < 3.10.1 - Admin+ Stored XSS4.8 Medium
- qode qi blocksQi Blocks < 1.4 - Contributor+ Stored XSS via ToC Block5.4 Medium
- qode qi blocksQi Blocks < 1.4 - Contributor+ Stored XSS vi Countdown Block5.4 Medium
- qode qi blocksQi Blocks < 1.4 - Contributor+ Stored XSS via Counter Block5.4 Medium
- teamt5 threatsonar anti-ransomwareTeamT5 ThreatSonar Anti-Ransomware - Privilege Escalation8.6 High
- phpgurukul auto taxi stand management system, auto\/taxi stand management system +1 morePHPGurukul Auto Taxi Stand Management System index.php sql injection6.9 Medium
- munyweki student result management systemSourceCodester Student Result Management System Image File update_student.php path traversal5.3 Medium
- phpgurukul zoo management systemPHPGurukul Zoo Management System view-foreigner-ticket.php sql injection6.9 Medium
- aioseo all in one seo, smub all in one seo – powerful seo plugin to boost seo rankings & increase traffic +1 moreAll in One SEO Pack <= 4.8.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta Description and Canonical URL6.4 Medium
- phpgurukul zoo management systemPHPGurukul Zoo Management System edit-animal-details.php sql injection6.9 Medium
- lerouxyxchire client database management systemSourceCodester Client Database Management System exposure of information through directory listing6.9 Medium
- phpgurukul daily expense tracker systemPHPGurukul Daily Expense Tracker System expense-datewise-reports-detailed.php sql injection6.9 Medium
- phpgurukul daily expense tracker systemPHPGurukul Daily Expense Tracker System forgot-password.php sql injection6.9 Medium
- phpgurukul notice board systemPHPGurukul Notice Board System login.php sql injection6.9 Medium
- iop-apl-uw basestation3, washington basestation +1 moreiop-apl-uw basestation3 QC.py load_qc_pickl deserialization4.8 Medium
- nodejs nodeA flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using `\r\n\rX`...6.5 Medium
- ubiquiti inc unifi protect applicationA misconfigured access token mechanism in the Unifi Protect Application (Version 5.3.41 and...4.4 Medium
- ubiquiti inc unifi protect camerasA malicious actor with access to the management network could execute a remote code execution ...10.0 Critical
- d-link di-7003gv2, dlink di-7003g firmware +1 moreD-Link DI-7003GV2 webgl.data sub_41F0FC information disclosure6.9 Medium
- d-link di-7003gv2, dlink di-7003g firmware +1 moreD-Link DI-7003GV2 webgl.asp sub_41F4F0 unverified password change6.9 Medium
- d-link di-7003gv2, dlink di-7003g firmware +1 moreD-Link DI-7003GV2 versionupdate.data sub_48F4F0 information disclosure6.9 Medium
wireless-regdbDebianwireless-regdb - security updateNo score- flatpressA stored Cross-Site Scripting (XSS) vulnerability exists in the administration panel of Flatpress...4.8 Medium
- openai chatgptThe ChatGPT system through 2025-03-30 performs inline rendering of SVG documents (instead of, for...6.5 Medium
- grafanaGrafana Cross-Site-Scripting (XSS) via custom loaded frontend plugin7.6 High
- tiiwee twx1hakv2 firmwareTiiwee X1 Alarm System TWX1HAKV2 allows Authentication Bypass by Capture-replay, leading to...7.6 High
- engeniustech enh500 firmwareEnGenius ENH500 AP 2T2R V3.0 FW3.7.22 is vulnerable to Incorrect Access Control via the password...6.5 Medium
- easyvirt dc netscopeMultiple Code Injection vulnerabilities in EasyVirt DC NetScope <= 8.7.0 allows remote...8.8 High
- anujk305 medical card generation systemA cross-site scripting (XSS) vulnerability in the component mcgs/admin/aboutus.php of PHPGURUKUL...4.6 Medium
- d-link di-7003gv2, dlink di-7003g firmware +1 moreD-Link DI-7003GV2 HTTP Endpoint state_view.data sub_41E304 information disclosure5.3 Medium
- campcodes sales and inventory systemCampcodes Sales and Inventory System payment.php sql injection6.9 Medium
- campcodes sales and inventory systemCampcodes Sales and Inventory System transaction_update.php sql injection6.9 Medium
- munyweki student result management systemSourceCodester Student Result Management System Logo File update_system.php unlink path traversal5.3 Medium
- tenda a15, a15 firmware +1 moreTenda A15 HTTP POST Request multimodalAdd buffer overflow8.7 High
- tenda ac10, ac10 firmware +1 moreTenda AC10 UserCongratulationsExec buffer overflow8.7 High
- hshnudr doctors appointment systemSourceCodester Doctors Appointment System delete-session.php sql injection6.9 Medium
- calmkart django-sso-servercalmkart Django-sso-server crypto.py gen_rsa_keys inadequate encryption6.3 Medium
- jammy928 coinexchange cryptoexchange javajammy928 CoinExchange_CryptoExchange_Java File Upload Endpoint UploadFileUtil.java uploadLocalImage path traversal5.3 Medium
- Show moreLoading…