CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- owasp-modsecurity modsecurityModSecurity Has Possible DoS Vulnerability7.5 High
- versa concertoVersa Concerto Actuator Authentication Bypass Information Leak9.2 Critical
- campcodes online shopping portalCampcodes Online Shopping Portal insert-product.php sql injection6.9 Medium
- campcodes online shopping portalCampcodes Online Shopping Portal edit-products.php sql injection6.9 Medium
- versa concertoVersa Concerto Authentication Bypass File Write Remote Code Execution10.0 Critical
- openedx edx-platformLearners on edX Platform can download python_lib.zip5.3 Medium
- freefloat ftp serverFreeFloat FTP Server MDIR Command buffer overflow6.9 Medium
- freefloat ftp serverFreeFloat FTP Server LS Command buffer overflow6.9 Medium
- freefloat ftp serverFreeFloat FTP Server BINARY Command buffer overflow6.9 Medium
- automationdirect mb-gatewayAutomationDirect MB-Gateway Missing Authentication for Critical Function10.0 Critical
- vertiv liebert rdu101, liebert is-unity +1 moreVertiv Liebert RDU101 and UNITY Stack-based Buffer Overflow9.3 Critical
- vertiv liebert rdu101, liebert is-unity +1 moreVertiv Liebert RDU101 and UNITY Authentication Bypass Using an Alternate Path or Channel9.3 Critical
expatTuxCare,expat-develTuxCare,expat-staticTuxCare +2 moreUpdate of expatNo score- freefloat ftp serverFreeFloat FTP Server BELL Command buffer overflow6.9 Medium
- freefloat ftp serverFreeFloat FTP Server APPEND Command buffer overflow6.9 Medium
- tibco bpm enterpriseTIBCO BPM Enterprise XSS Vulnerability7.0 High
- tibco software inc activematrix businessworksTIBCO ActiveMatrix BusinessWorks SQL Injection Vulnerability7.0 High
- shopify ejson2envejson2env has insufficient input sanitization6.6 Medium
- desktopGitHub Desktop vulnerable to maliciously crafted file renames leading to information disclosure3.3 Low
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform Security Authorization Bridge allows users with just edit right can enforce required rights with programming right4.8 Medium
- jqlang jqAddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt)7.7 High
- teacms project teacmsXiaoBingby TeaCMS addUser cross-site request forgery5.3 Medium
- drupal lightgalleryLightgallery - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-0697.1 High
- admin audit trail project audit trail, drupal admin audit trail +1 moreAdmin Audit Trail - Less critical - Denial of Service - SA-CONTRIB-2025-0686.5 Medium
- commerce alphabank redirect project alphabank redirect, drupal commerce alphabank redirect +1 moreCommerce Alphabank Redirect - Moderately critical - Access bypass - SA-CONTRIB-2025-0678.8 High
- drupal commerce eurobank (redirect), commerce eurobank \(redirect\) project eurobank \(redirect\) +1 moreCommerce Eurobank (Redirect) - Moderately critical - Access bypass - SA-CONTRIB-2025-0668.8 High
- drupal quick node block, quick node block project node block +1 moreQuick Node Block - Moderately critical - Access bypass - SA-CONTRIB-2025-0655.3 Medium
- drupal quick node block, quick node block project node block +1 moreQuick Node Block - Moderately critical - Access bypass - SA-CONTRIB-2025-0645.3 Medium
- containerdcontainerd CRI plugin: Incorrect cgroup hierarchy assignment for containers running in usernamespaced Kubernetes pods.4.6 Medium
- osamataher java-springboot-codebaseUnauthenticated Arbitrary File Read via Absolute Path7.7 High
- hypr passwordlessImproper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Passwordless...5.7 Medium
- mozilla firefox, firefox for ios +1 moreLinks using non-HTTP schemes opened from other apps such as Safari could have allowed spoofing of website addresses4.3 Medium
- hypr passwordlessConcurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')...5.9 Medium
- campcodes online shopping portalCampcodes Online Shopping Portal edit-category.php sql injection6.9 Medium
- ackites killwxapkgAckites KillWxapkg wxapkg File Decompression resource consumption2.3 Low
- cisco webex meetingsA vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross...6.1 Medium
- cisco webex meetingsA vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross...6.1 Medium
- cisco webex meetingsA vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross...6.1 Medium
- cisco duoA vulnerability in the self-service portal of Cisco Duo could allow an unauthenticated, remote...5.4 Medium
- cisco webex meetingsA vulnerability in client join services of Cisco Webex Meetings could allow an unauthenticated,...4.3 Medium
- cisco unified contact center enterpriseA vulnerability in the Cloud Connect component of Cisco Unified Contact Center Enterprise (CCE)...6.5 Medium
- ackites killwxapkgAckites KillWxapkg wxapkg File Parser unpack.go processFile os command injection2.3 Low
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Stored Cross-Site Scripting Vulnerability4.8 Medium
- cisco secure network analyticsCisco Secure Network Analytics API Authorization Vulnerability6.5 Medium
- cisco secure network analyticsCisco Secure Network Analytics Manager Server-Side Template Injection Vulnerability6.5 Medium
- cisco unified intelligence center, unified contact center express +1 moreCisco Unified Intelligence Center Privilege Escalation Vulnerability7.1 High
- cisco identity services engine, identity services engine software +1 moreISE restart8.6 High
- cisco unified intelligence center, unified contact center express +1 moreCisco Unified Intelligence Center Insecure Direct Object Reference Vulnerability4.3 Medium
- cisco emergency responder, finesse, prime collaboration deployment +7 more +9 moreCisco Unified Communications Products Privilege Escalation Vulnerability5.1 Medium
ca-certificates-mozillaSUSESecurity update for ca-certificates-mozillaNo score- Show moreLoading…