CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- phpgurukul student management systemPHPGURUKUL Student Management System using PHP and MySQL v1 was discovered to contain multiple...4.4 Medium
- phpgurukul restaurant table booking systemPHPGURUKUL Restaurant Table Booking System using PHP and MySQL v1.0 was discovered to contain a...9.8 Critical
- phpgurukul medical card generation systemA reflected cross-site scripting (XSS) vulnerability in the component mcgs/download-medical-cards...6.1 Medium
- phpgurukul medical card generation systemPhpgurukul Medical Card Generation System v1.0 is vulnerable to HTML Injection in admin/contactus...6.1 Medium
- phpgurukul old age home management systemPHPGurukul Old Age Home Management System v1.0 is vulnerable to HTML Injection via the searchdata...5.4 Medium
- cjson project cjsonparse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {"1":1, with no...2.9 Low
- merit lilin p3, mobotix mx6 +1 moreOn MOBOTIX P3 cameras before MX-V4.7.2.18 and Mx6 cameras before MX-V5.2.0.61, the tcpdump...8.7 High
- abup iot cloud platformABUP IoT Cloud Platform Incorrect Privilege Assignment5.9 Medium
- lantronix device installerLantronix Device Installer Improper Restriction of XML External Entity Reference6.9 Medium
- openfga, openfga helm charts +1 moreOpenFGA Authorization Bypass5.8 Medium
- microsoft edge update, edge (chromium-based) updater +1 moreMicrosoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability8.8 High
- tp-link systems inc. tapo appTapo privilege escalation on shared devices using notifications4.8 Medium
- schule111 schule, schule school management system +1 moreSchule Has Client-Side Role-Based Access Control (RBAC) Bypass Vulnerability6.6 Medium
- schule111 schule, schule school management system +1 moreSchule Has Insecure OTP Length, is Susceptible to Brute-Force Attacks6.6 Medium
- project-zot zotzot logs secrets5.5 Medium
- wso2 api manager, identity server +1 moreReflected Cross-Site Scripting (XSS) in Authentication Endpoint of Multiple WSO2 Products Due to Missing Output Encoding6.1 Medium
- wso2 identity server, client attestation filter, carbon identity client attestation met data mgt be +2 moreImproper Authentication in WSO2 Identity Server 7.0.0 Allows Bypass of App-Native Authentication5.8 Medium
- wso2 identity serverReflected Cross-Site Scripting (XSS) in WSO2 Identity Server 7.0.0 Sub-Organization Login Flow4.6 Medium
- abb aspect-enterprise, matrix series, nexus series +2 moreWeak Password Storage7.1 High
- abb aspect-enterprise, matrix series, nexus series +2 moreStored Cross Site Scripting4.6 Medium
- abb aspect-enterprise, matrix series, nexus series +2 moreSSRF Server Side Request Forgery7.0 High
- abb aspect-enterprise, matrix series, nexus series +2 moreSSL Verification Bypass8.8 High
- abb aspect-enterprise, matrix series, nexus series +2 moreSQL Injection 2nd Order9.4 Critical
- abb aspect-enterprise, matrix series, nexus series +2 moreSerialization / Deserialization of configuration data5.1 Medium
- abb aspect-enterprise, matrix series, nexus series +2 moreSensitive Information disclosed in log files6.9 Medium
- abb aspect-enterprise, matrix series, nexus series +2 moreRemote Code Execution8.7 High
- wso2 api manager, identity server, identity server as key manager +6 more +8 moreIncorrect Authorization in Multiple WSO2 Products via Account Recovery SOAP Admin Service Leading to Account Takeover9.8 Critical
- abb aspect-enterprise, matrix series, nexus series +2 morePredictable Filename7.0 High
- abb aspect-enterprise, matrix series, nexus series +2 moreOne way hash with predictable salt6.1 Medium
- abb aspect-enterprise, matrix series, nexus series +2 moreLog Injection6.9 Medium
- abb aspect-enterprise, matrix series, nexus series +2 moreLog Forging6.9 Medium
- abb aspect-enterprise, matrix series, nexus series +2 moreLARGECONTENT - device disk overutilization7.0 High
- abb aspect-enterprise, matrix series, nexus series +2 moreInsecure Permissions6.9 Medium
- abb aspect-enterprise, matrix series, nexus series +2 moreExternal System or Configuration Control7.1 High
- abb aspect-enterprise, matrix series, nexus series +2 moreBinary Planting / LoadLibrary DLL's not Signed7.1 High
- abb aspect-enterprise, matrix series, nexus series +2 moreAuthenticated Relative Path Traversal7.5 High
- abb aspect-enterprise, matrix series, nexus series +2 moreAuthenticated Unchecked Loop Condition5.9 Medium
- abb aspect-enterprise, matrix series, nexus series +2 moreAuthenticated Servlet Command Injection7.5 High
- abb aspect-enterprise, matrix series, nexus series +2 moreAuthenticated SQL Injection7.5 High
- abb aspect-enterprise, matrix series, nexus series +2 moreAdmin Authorized File Upload and Execute PHP6.0 Medium
- abb aspect-enterprise, matrix series, nexus series +2 moreAdmin Authorized File Upload6.0 Medium
- abb aspect-enterprise, matrix series, nexus series +2 moreAdmin Authorized Remote Code Execution8.9 High
- abb aspect-enterprise, matrix series, nexus series +2 moreAdmin Authorized System File Deletion7.3 High
- abb aspect-enterprise, matrix series, nexus series +2 moreAdmin Authorized Exposure of file path, file size or file existence5.9 Medium
- abb aspect-enterprise, matrix series, nexus series +2 moreAdmin Authorized System File corruption8.9 High
- intermesh group-office, groupoffice +1 moreGroupOffice vulnerable to Stored XSS in Tasks Comment Section5.3 Medium
- abb aspect-enterprise, matrix series, nexus series +2 moreAdmin Authorized Port (iptables) manipulation (open/close/disable ports)8.9 High
- intermesh group-office, groupoffice +1 moreGroupOffice's DOM-Based XSS in all Date Input Fields Allows Arbitrary JavaScript Execution5.8 Medium
- intermesh group-office, groupoffice +1 moreGroupOffice's Blind Stored XSS in Phone Number Field Enables Forced Redirect and Unauthorized Actions6.9 Medium
- abb aspect-enterprise, matrix series, nexus series +2 moreAuthenticated Remote Code Execution7.5 High
- Show moreLoading…