CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- typo3TYPO3 Vulnerable to Server Side Request Forgery via Webhooks3.3 Low
- netgear dgnd3700, dgnd3700 firmware +1 moreNetgear DGND3700 Basic Authentication BRS_top.html improper authentication9.3 Critical
- netgear dgnd3700, dgnd3700 firmware +1 moreNetgear DGND3700 BRS_top.html information disclosure6.9 Medium
- vmware cloud foundationVMware Cloud Foundation Missing Authorisation Vulnerability7.3 High
- vmware cloud foundationVMware Cloud Foundation Information Disclosure Vulnerability7.5 High
- vmware cloud foundationVMware Cloud Foundation Directory Traversal Vulnerability8.2 High
- comerzzia backoffice: sales orchestratorSQL injection at Comerzzia9.3 Critical
microcode_ctlTuxCareUpdate of microcode_ctlNo score- powerdns dnsdistDenial of service via crafted TCP exchange7.5 High
microcode_ctlTuxCareUpdate of microcode_ctlNo score- debian linux, linux kernel +1 moremtd: inftlcore: Add error check for inftl_read_oob()7.8 High
microcode_ctlTuxCareUpdate of microcode_ctlNo score- koiboxStored Cross-Site Scripting (XSS) in Koibox5.1 Medium
- tp-link link archer ax50Stack-based buffer overflow in TP-Link Archer AX509.2 Critical
microcode_ctlTuxCareUpdate of microcode_ctlNo score- rapid7 appspider proEditions of Rapid7 AppSpider Pro before version 7.5.018 is vulnerable to a stored cross-site...4.6 Medium
helmopenSUSESecurity update for helmNo score- aknieriem simplelightbox, smub photo gallery, sliders, proofing and themes – nextgen gallery +1 moreMultiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via SimpleLightbox JavaScript Library6.4 Medium
microcode_ctlTuxCareUpdate of microcode_ctlNo scoremicrocode_ctlTuxCareUpdate of microcode_ctlNo scoremicrocode_ctlTuxCareUpdate of microcode_ctlNo score- unknown order delivery date, tychesoftwares order delivery date for woocommerce +1 moreOrder Delivery Date Pro for WooCommerce < 12.4.0 - Reflected XSS7.1 High
- stylemixthemes motors - car dealer, rental & listing wordpress themeMotors <= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover9.8 Critical
rtpproxyOSS-FuzzSegv on unknown address in rtpp_refcnt_decrefNo score- totolink a3002r firmwareTOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the...6.5 Medium
- planet wgs-804hpt firmwareFW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the theauthName...9.8 Critical
- planet wgs-804hpt firmwareFW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the bytftp_srvip...9.8 Critical
- planet wgs-804hpt firmwareFW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the bindEditMACName...9.8 Critical
- planet wgs-804hpt firmwareFW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the radDftParamKey...9.8 Critical
- planet wgs-804hpt firmwareFW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the ruleNamekey...9.8 Critical
- planet wgs-804hpt firmwareFW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the host_ip parameter...9.8 Critical
- planet wgs-804hpt firmwareFW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the host_ip parameter...9.8 Critical
- planet wgs-804hpt firmwareFW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the stp_conf_name...9.8 Critical
- planet wgs-804hpt firmwareFW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the radIpkey parameter...9.8 Critical
- planet wgs-804hpt firmwareFW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the byruleEditName...9.8 Critical
- planet wgs-804hpt firmwareFW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the remote_ip...9.8 Critical
- planet wgs-804hpt firmwareFW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the...9.8 Critical
- planet wgs-804hpt firmwareFW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the tacIp parameter in...9.8 Critical
- wavlink wl-wn579a3 firmwareA command injection vulnerability in the component /cgi-bin/firewall.cgi of Wavlink WL-WN579A3 v1...9.8 Critical
- wavlink wl-wn579a3 firmwareA command injection vulnerability in the component /cgi-bin/qos.cgi of Wavlink WL-WN579A3 v1.0...9.8 Critical
- wavlink wl-wn579a3 firmwareA command injection vulnerability in the component /cgi-bin/adm.cgi of Wavlink WL-WN579A3 v1.0...9.8 Critical
- dlink di-8100g firmwareD-link DI-8100 16.07.26A1 is vulnerable to Command Injection. An attacker can exploit this...9.8 Critical
- rsiqueue management systemAn unauthenticated blind SQL injection vulnerability exists in RSI Queue Management System v3.0...7.5 High
- zaloAn issue in Zalo v23.09.01 allows attackers to obtain sensitive user information via a crafted...7.5 High
- canon inc. i-sensys series, imageclass series, imagerunner series +1 more +3 moreA passback vulnerability which relates to office/small office multifunction printers and laser...6.3 Medium
- canon inc. imageclass series, imagepress series, imagepress v series +2 more +4 moreA passback vulnerability which relates to production printers and office multifunction printers.6.3 Medium
- broadcom automic automationBroadcom Automic Automation Agent Unix privilege escalation8.5 High
microcode_ctlTuxCareUpdate of microcode_ctlNo score- pure storage px backupPX Backup Improper Sanitization Vulnerability8.4 High
- ge vernova workstationstWorkstationST EGD Configuration Server Path Traversal Vulnerability5.9 Medium
- Show moreLoading…