CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- gofiber fiberFiber panics when fiber.Ctx.BodyParser parses invalid range index7.7 High
- wire wire-webappwire-webapp has no database deletion on client logout6.0 Medium
- wireapp wire-webappwire-webapp Has Insufficient Session Invalidation after User Logout5.6 Medium
- asterisk, sangoma certified asterisk +1 morecli_permissions.conf: deny option does not work for disallowing shell commands4.8 Medium
- asterisk, sangoma certified asterisk +1 moreUsing malformed From header can forge identity with ";" or NULL in name portion7.7 High
- sandboxie-plus sandboxieSandboxie Arbitrary Kernel Read in SbieDrv.sys API (API_SET_SECURE_PARAM)5.5 Medium
- msp360 backupMSP360 Backup (for Windows) insecure filesystem permissions8.5 High
- sandboxie-plus sandboxieSandboxie Arbitrary Kernel Write in SbieDrv.sys API (API_GET_SECURE_PARAM)7.8 High
- abb aspect-enterprise, matrix series, nexus series +2 moreAuthenticated Absolute Path Traversal7.5 High
- abb aspect-enterprise, matrix series, nexus series +2 moreAuthenticated Escalation to guest to root9.5 Critical
- ibm aspera faspexIBM Aspera Faspex HTML injection5.4 Medium
- ibm aspera faspexIBM Aspera Faspex data modification7.1 High
- ibm aspera faspexIBM Aspera Faspex data modification7.1 High
- ubtech freepassUBtech – CWE-601: URL Redirection to Untrusted Site ('Open Redirect')6.1 Medium
- campcodes cybercafe management systemCampcodes Cybercafe Management System adminprofile.php sql injection6.9 Medium
- ubtech freepassUBtech – CWE-203: Observable Discrepancy4.3 Medium
- enterprisedb bdr/pgd, pglogical +1 moreWhen pglogical attempts to replicate data, it does not verify it is using a replication...5.3 Medium
pythonTuxCare,python-debugTuxCare,python-develTuxCare +4 more +6 moreUpdate of pythonNo score- tenda fh451, fh451 firmware +1 moreTenda FH451 webExcptypemanFilter stack-based overflow8.7 High
linux-awsUbuntulinux-aws vulnerabilitiesNo score- red hat enterprise linux 10, enterprise linux 8, enterprise linux 8.2 advanced update support +11 more +13 moreGnome-remote-desktop: uncontrolled resource consumption due to malformed rdp pdus7.4 High
- gitlabImproper Validation of Consistency within Input in GitLab6.8 Medium
- gitlabWeak Authentication in GitLab4.6 Medium
- gitlabExposure of Private Personal Information to an Unauthorized Actor in GitLab4.3 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab7.5 High
- campcodes online shopping portalPHPGurukul/Campcodes Online Shopping Portal updateorder.php sql injection6.9 Medium
- checkmkSensitive data exposed during automatic agent updates4.3 Medium
- gitlabInsufficient Granularity of Access Control in GitLab2.7 Low
- campcodes online shopping portalPHPGurukul/Campcodes Online Shopping Portal subcategory.php sql injection6.9 Medium
- campcodes online shopping portalCampcodes Online Shopping Portal edit-subcategory.php sql injection6.9 Medium
- opensslThe x509 application adds trusted use instead of rejected use6.5 Medium
- freefloat ftp serverFreeFloat FTP Server SEND Command buffer overflow6.9 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- gitlabInsufficient Granularity of Access Control in GitLab4.9 Medium
- tridium niagara, niagara enterprise security, niagara framework +2 moreImproper Neutralization of Argument Delimiters in a Command (‘Argument Injection’)7.2 High
- tridium niagara, niagara enterprise security, niagara framework +2 moreIncorrect Permission Assignment for Critical Resource7.2 High
- tridium niagara, niagara enterprise security, niagara framework +2 moreUse of GET Request Method With sensitive Query Strings4.1 Medium
- tridium niagara, niagara enterprise security, niagara framework +2 moreImproper Output Neutralization for Logs4.3 Medium
- tridium niagara, niagara enterprise security, niagara framework +2 moreImproper Handling of Windows: DATA Alternate Data Stream5.4 Medium
- tridium niagara, niagara enterprise security, niagara framework +2 moreImproper Use of Validation Framework5.3 Medium
- tridium niagara, niagara enterprise security, niagara framework +2 moreObservable Response Discrepancy5.3 Medium
- tridium niagara, niagara enterprise security, niagara framework +2 moreMissing Cryptographic Step6.8 Medium
- freefloat ftp serverFreeFloat FTP Server DEBUG Command buffer overflow6.9 Medium
- sandboxie-plus sandboxieSandboxie has Pool Buffer Overflow in SbieDrv.sys API (API_GET_SECURE_PARAM)7.8 High
- tridium niagara, niagara enterprise security, niagara framework +2 moreUse of Password Hash with Insufficient Computational Effort7.7 High
- sandboxie-plus sandboxieSandboxie has Pool Buffer Overflow in SbieDrv.sys API (API_SET_SECURE_PARAM)7.8 High
- forcepoint fie endpointPrivilege Escalation and Arbitrary code execution in F1E Endpoint7.3 High
- tridium niagara, niagara enterprise security, niagara framework +2 moreIncorrect Permission Assignment for Critical Resource6.5 Medium
- freefloat ftp serverFreeFloat FTP Server PROMPT Command buffer overflow6.9 Medium
- Show moreLoading…