CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
toodeecrates.iotoodee is vulnerable to Heap Buffer Overflow through its DrainCol Destructor8.8 High- cloudflare pingoraRequest Smuggling Vulnerability in Pingora7.4 High
- freefloat ftp serverFreeFloat FTP Server MKDIR Command buffer overflow6.9 Medium
govulncheck-vulndbopenSUSESecurity update for govulncheck-vulndbNo score- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL Injection8.3 High
- manageengine adaudit plus, zohocorp manageengine adaudit plus +1 moreSQL Injection8.3 High
- manageengine servicedesk plus msp, supportcenter plus, zohocorp manageengine servicedesk plus msp +1 more +3 moreLocal File Inclusion6.5 Medium
- ericsson site controller 6610, ran compute basebands (all bb variants) +1 moreEricsson RAN Compute and Site Controller 6610 - Improper Input Validation Vulnerability8.8 High
- poeditTCC Bypass via Inherited Permissions in Bundled Interpreter in Poedit.app4.8 Medium
- hot-themes hot random imageHot Random Image <= 1.9.2 - Path Traversal to Authenticated (Contributor+) Limited Arbitrary Image Access via path Parameter4.3 Medium
- hot-themes hot random imageHot Random Image <= 1.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via link Parameter4.9 Medium
- mapsvgMapSVG - All Kinds of Maps and Store Locator for WordPress <= 8.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- adenion blog2social, pr-gateway blog2social: social media auto post & scheduler +1 moreBlog2Social: Social Media Auto Post & Scheduler < 8.4.0 - Contributor+ Stored XSS5.4 Medium
- automattic woocommerceWooCommerce <= 9.4.2 - PostMessage-Based Cross-Site Scripting6.1 Medium
- gstreamerGStreamer Incorrect Permission Assignment Local Privilege Escalation Vulnerability7.0 High
- allegraAllegra isZipEntryValide Directory Traversal Remote Code Execution Vulnerability7.2 High
- meddream web dicom viewer, pacs server +1 moreMedDream WEB DICOM Viewer Cleartext Transmission of Credentials Information Disclosure Vulnerability5.3 Medium
- meddream pacs serverMedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability9.8 Critical
- meddream pacs serverMedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability9.8 Critical
- meddream pacs serverMedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability9.8 Critical
- meddream pacs serverMedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability9.8 Critical
- harman becker mgu21, samsung harman mgu21 firmware +1 moreHarman Becker MGU21 Bluetooth Improper Input Validation Denial-of-Service Vulnerability5.3 Medium
- cloudera hueCloudera Hue Ace Editor Directory Traversal Information Disclosure Vulnerability7.5 High
- echarge hardy barth cph2, hardy-barth cph2 echarge firmware +1 moreeCharge Hardy Barth cPH2 index.php Command Injection Remote Code Execution Vulnerability8.8 High
- echarge hardy barth cph2, hardy-barth cph2 echarge firmware +1 moreeCharge Hardy Barth cPH2 nwcheckexec.php dest Command Injection Remote Code Execution Vulnerability8.8 High
- echarge hardy barth cph2, hardy-barth cph2 echarge firmware +1 moreeCharge Hardy Barth cPH2 check_req.php ntp Command Injection Remote Code Execution Vulnerability8.8 High
- gstreamer, debian linux +1 moreGStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability8.8 High
checkstyleOSS-FuzzSecurity exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.exprNo score- lumigo autodeploy-layerInsecure permissions in autodeploy-layer v1.2.0 allows attackers to escalate privileges and...8.8 High
- lumigo measure-cold-startInsecure permissions in measure-cold-start v1.4.1 allows attackers to escalate privileges and...8.8 High
- devsapp fc-stable-diffusionInsecure permissions in fc-stable-diffusion-plus v1.0.18 allows attackers to escalate privileges...8.8 High
- infoblox netmriAn issue was discovered in Infoblox NETMRI before 7.6.1. Authentication Bypass via a Hardcoded...6.5 Medium
- infoblox netmriAn issue was discovered in Infoblox NETMRI before 7.6.1. Unauthenticated SQL Injection can occur.9.8 Critical
- infoblox netmriAn issue was discovered in Infoblox NETMRI before 7.6.1. Remote Unauthenticated Command Injection...7.2 High
- infoblox netmriInfoblox NETMRI before 7.6.1 has a vulnerability allowing remote authenticated users to read...5.3 Medium
- infoblox netmriIn Infoblox NETMRI before 7.6.1, authenticated users can perform SQL injection attacks.8.8 High
- ocuco innovationAn issue in Ocuco Innovation - JOBMANAGER.EXE v2.10.24.16 allows attackers to bypass...7.2 High
- ocuco innovationAn issue in Ocuco Innovation - REPORTS.EXE v2.10.24.13 allows attackers to bypass authentication...9.8 Critical
- ocuco innovationAn issue in Ocuco Innovation - INVCLIENT.EXE v2.10.24.5 allows attackers to bypass authentication...9.8 Critical
- ocuco innovationAn issue in Ocuco Innovation - REPORTSERVER.EXE v2.10.24.13 allows attackers to bypass...9.8 Critical
- ocuco innovationAn issue in Ocuco Innovation - INNOVASERVICEINTF.EXE v2.10.24.17 allows attackers to bypass...9.8 Critical
- ocuco innovationAn issue in Ocuco Innovation v.2.10.24.51 allows a local attacker to escalate privileges via the...7.8 High
- ocuco innovationAn issue in Ocuco Innovation v.2.10.24.51 allows a local attacker to escalate privileges via the...7.8 High
- ocuco innovationAn issue in Ocuco Innovation v.2.10.24.51 allows a local attacker to escalate privileges via the...7.8 High
- ocuco innovationAn issue in Ocuco Innovation APPMANAGER.EXE v.2.10.24.51 allows a local attacker to escalate...7.8 High
- ocuco innovationAn issue in Ocuco Innovation Tracking.exe v.2.10.24.51 allows a local attacker to escalate...7.8 High
- taglibTagLib before 2.0 allows a segmentation violation and application crash during tag writing via a...2.9 Low
- campcodes online shopping portalCampcodes Online Shopping Portal edit-subcategory.php unrestricted upload5.1 Medium
- versa concertoVersa Concerto Insecure Docker Mount Container Escape8.6 High
- makeplane planePlane has insecure permissions in UserSerializer3.5 Low
- Show moreLoading…