CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- debian linux, linux kernel +1 morearm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays5.5 Medium
- debian linux, linux kernel +1 moredm-bufio: don't schedule in atomic context7.8 High
- debian linux, linux kernel +1 moreiommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid7.8 High
- linux, linux kernel +1 moreksmbd: fix use-after-free in ksmbd_session_rpc_open8.8 High
- debian linux, linux kernel +1 moreksmbd: fix use-after-free in kerberos authentication9.8 Critical
- debian linux, linux kernel +1 moretracing: Fix oob write in trace_seq_to_buffer()7.8 High
- linux, linux kernel +1 morebook3s64/radix : Align section vmemmap start address to PAGE_SIZE5.5 Medium
- debian linux, linux kernel +1 morevxlan: vnifilter: Fix unlocked deletion of default FDB entry7.8 High
- linux, linux kernel +1 morexsk: Fix race condition in AF_XDP generic RX path7.8 High
- linux, linux kernel +1 moreASoC: amd: acp: Fix NULL pointer deref in acp_i2s_set_tdm_slot5.5 Medium
- linux, linux kernel +1 moreBluetooth: btusb: avoid NULL pointer dereference in skb_dequeue()8.8 High
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll7.5 High
- linux, linux kernel +1 morepds_core: remove write-after-free of client_id7.8 High
- linux, linux kernel +1 morenet_sched: drr: Fix double list add in class with netem as child qdisc7.8 High
- debian linux, linux kernel +1 morenet_sched: ets: Fix double list add in class with netem as child qdisc7.8 High
- debian linux, linux kernel +1 morenet_sched: qfq: Fix double list add in class with netem as child qdisc7.8 High
- debian linux, linux kernel +1 moreice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr()5.5 Medium
- debian linux, linux kernel +1 morebnxt_en: Fix out-of-bound memcpy() during ethtool -w7.8 High
- linux, linux kernel +1 moreptp: ocp: Fix NULL dereference in Adva board SMA sysfs operations5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: lan743x: Fix memleak issue when GSO enabled5.5 Medium
- linux, linux kernel +1 moremm, slab: clean up slab->obj_exts always7.8 High
- linux, linux kernel +1 moreaccel/ivpu: Fix locking order in ivpu_job_submit5.5 Medium
- linux, linux kernel +1 moreublk: fix race between io_uring_cmd_complete_in_task and ublk_cancel_cmd7.8 High
- debian linux, linux kernel +1 morefirmware: arm_scmi: Balance device refcount when destroying devices5.5 Medium
- linux, linux kernel +1 morebtrfs: fix the inode leak in btrfs_iget()5.5 Medium
- debian linux, linux kernel +1 moredrm/amd/display: Fix slab-use-after-free in hdcp7.8 High
- debian linux, linux kernel +1 moreirqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs7.8 High
- linux, linux kernel +1 moreiommu: Fix two issues in iommu_copy_struct_from_user()5.5 Medium
- linux, linux kernel +1 moreksmbd: fix use-after-free in session logoff8.8 High
- linux, linux kernel +1 morepowerpc64/ftrace: fix module loading without patchable function entries5.5 Medium
- debian linux, linux kernel +1 morewifi: plfxlc: Remove erroneous assert in plfxlc_mac_release5.5 Medium
- linux, linux kernel +1 morespi: spi-mem: Add fix to avoid divide error5.5 Medium
- linux, linux kernel +1 morebnxt_en: Fix error handling path in bnxt_init_chip()5.5 Medium
- linux, linux kernel +1 morenet: use sock_gen_put() when sk_state is TCP_TIME_WAIT9.8 Critical
- schweitzer engineering laboratories sel-5030 acselerator quickset softwareDeserialization of Untrusted Data7.5 High
- schweitzer engineering laboratories sel-5056 software-defined network flow controllerImproper Limitation of a Pathname to a Restricted Directory9.0 Critical
- schweitzer engineering laboratories sel-5056 software-defined network flow controllerImproper Control of Interaction Frequency4.3 Medium
- schweitzer engineering laboratories sel-5056 software-defined network flow controllerObservable Response Discrepancy3.7 Low
- schweitzer engineering laboratories sel-5056 software-defined network flow controllerImproper Restriction of Excessive Authentication Attempts7.5 High
- ibm security reaqta edr, security qradar edr +1 moreIBM Security ReaQta improper certificate validation6.5 Medium
- vmware esxi, vcenter server, cloud foundation +2 more +4 moreVMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) Vulnerability4.3 Medium
- vmware esxi, fusion, workstation +3 more +5 moreDenial-of-Service Vulnerability5.5 Medium
- vmware esxi, cloud foundation, telco cloud infrastructure +1 more +3 moreGuest Operations Denial-of-Service Vulnerability6.8 Medium
- vmware vcenter server, cloud foundation, telco cloud infrastructure +1 more +3 moreVMware vCenter Server authenticated command-execution vulnerability8.8 High
- typo3TYPO3 Has Broken Authentication in Backend MFA7.2 High
- typo3TYPO3 CMS Vulnerable to Privilege Escalation to System Maintainer7.2 High
- typo3TYPO3 CMS Vulnerable to Unrestricted File Upload in File Abstraction Layer5.4 Medium
- netgear dgnd3700, dgnd3700 firmware +1 moreNetgear DGND3700 mini_http currentsetting.htm information disclosure6.9 Medium
- typo3TYPO3 Vulnerable to Unverified Password Change for Backend Users3.8 Low
- typo3TYPO3 Vulnerable to Information Disclosure via DBAL Restriction Handling3.7 Low
- Show moreLoading…