CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- red hat amq broker 7.13.0.opr.1.ga, amq broker 7.12.5, rhel-8 based middleware containers +2 moreActivemq-artemis-operator: amq broker operator starting credentials reuse5.5 Medium
- realce tecnologia queue ticket kioskRealce Tecnologia Queue Ticket Kiosk Admin Login Page index.php cross site scripting5.3 Medium
- pepperl+fuchs profinet gateway fb8122a.1.el, profinet gateway lb8122a.1.el +1 morePEPPERL+FUCHS: Attacker can cause a DoS via URL7.5 High
- pepperl+fuchs profinet gateway lb8122a.1.el, profinet gateway fb8122a.1.el +1 morePEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by information disclosure via the SNMP protocol8.2 High
- pepperl+fuchs profinet gateway lb8122a.1.el, profinet gateway fb8122a.1.el +1 morePEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by XSS vulnerability6.1 Medium
- realce tecnologia queue ticket kioskRealce Tecnologia Queue Ticket Kiosk Admin Login Page index.php sql injection6.9 Medium
- erdogant pypickleerdogant pypickle pypickle.py save improper authorization4.8 Medium
- erdogant pypickleerdogant pypickle pypickle.py load deserialization4.8 Medium
- humansignal label-studio-ml-backend, label studio ml backend +1 moreHumanSignal label-studio-ml-backend PT File neural_nets.py load deserialization4.8 Medium
- synck mailform pro cgiMailform Pro CGI prior to 4.3.4 generates error messages containing sensitive information, which...6.3 Medium
- econtrataEcontrata valida sql injection6.9 Medium
- llisoft mta maita training systemllisoft MTA Maita Training System OpenController.java this.fileService.download unrestricted upload5.3 Medium
- llisoft mta maita training systemllisoft MTA Maita Training System AdminShitiController.java AdminShitiListRequestVo sql injection5.3 Medium
- assimpOpen Asset Import Library Assimp MDLLoader.cpp InternReadFile_3DGS_MDL345 out-of-bounds4.8 Medium
- assimpOpen Asset Import Library Assimp MDLLoader.cpp ImportUVCoordinate_3DGS_MDL345 out-of-bounds4.8 Medium
- assimpOpen Asset Import Library Assimp LWOLoader.h GetS0 out-of-bounds4.8 Medium
- assimpOpen Asset Import Library Assimp MDC File Parser MDCLoader.cpp InternReadFile out-of-bounds4.8 Medium
- assimpOpen Asset Import Library Assimp MDCLoader.cpp ValidateSurfaceHeader out-of-bounds4.8 Medium
- perfree perfreeblogPerfreeBlog JWT JwtUtil hard-coded key6.3 Medium
- yangshare warehousemanager 仓库管理系统, warehouse management system +1 moreyangshare 技术杨工 warehouseManager 仓库管理系统 access control6.9 Medium
- h3c seccenter smp-e1114p02, seccenter smp-1114p02 +1 moreH3C SecCenter SMP-E1114P02 importFile unrestricted upload5.3 Medium
- h3c seccenter smp-e1114p02, seccenter smp-1114p02 +1 moreH3C SecCenter SMP-E1114P02 download operationDailyOut path traversal5.3 Medium
- h3c seccenter smp-e1114p02, seccenter smp-1114p02 +1 moreH3C SecCenter SMP-E1114P02 download path traversal5.3 Medium
- schedmd slurmIn SchedMD Slurm before 24.11.5, 24.05.8, and 23.11.11, the accounting system can allow a...4.2 Medium
- canon i-sensys x 1238pr ii firmware, imageclass x lbp1238 ii firmware, satera mf457dw firmware +71 more +73 moreBuffer overflow in WebService Authentication processing of Small Office Multifunction Printers...9.8 Critical
- h3c seccenter smp-e1114p02, seccenter smp-1114p02 +1 moreH3C SecCenter SMP-E1114P02 download path traversal5.3 Medium
- h3c seccenter smp-e1114p02, seccenter smp-1114p02 +1 moreH3C SecCenter SMP-E1114P02 downloadSoftware path traversal5.3 Medium
- h3c seccenter smp-e1114p02, seccenter smp-1114p02 +1 moreH3C SecCenter SMP-E1114P02 fileContent path traversal5.3 Medium
- h3c gr-5400ax, gr-5400ax firmware +1 moreH3C GR-5400AX aspForm EditWlanMacList buffer overflow8.7 High
- foxcmsqianfox FoxCMS Article.php batchCope sql injection5.3 Medium
- phonepePhonePe App SQLite Database databases cleartext storage in file4.6 Medium
- cmsmadesimple cms made simpleCMS Made Simple Design Manager Module cross site scripting5.1 Medium
- chanjet crm, cms +1 moreChanjet CRM newActivityedit.php sql injection5.3 Medium
- defog introspectdefog-ai introspect analysis_tools.py execute_analysis_code_safely code injection4.8 Medium
- linuxfoundation docarraydocarray Web API torch_dataset.py __getitem__ prototype pollution5.3 Medium
- wcmsWCMS Login getallcon getMemberByUid improper authentication6.3 Medium
- funaudiollm inspiremusicFunAudioLLM InspireMusic Pickle Data model.py load_state_dict deserialization4.8 Medium
- adslr nbr1005gpev2, netcore b6v2, nbr200v2 +2 moreNetcore NBR1005GPEV2/NBR200V2/B6V2 network_tools tools_ping command injection5.3 Medium
- adslr nbr1005gpev2, netcore b6v2, cover5 +4 more +6 moreNetcore NBR200V2 HTTP Header routerd passwd_set command injection5.3 Medium
- adslr nbr1005gpev2, netcore b6v2, cover5 +5 more +7 moreNetcore POWER13 Query String cgi-bin command injection5.3 Medium
- seeyon zhiyuan oa web application systemSeeyon Zhiyuan OA Web Application System ThirdMenuController.class this.oursNetService.getData server-side request forgery5.3 Medium
- qualitorQualitor Office 365-type Connection testaConexaoOffice365.php command injection6.3 Medium
- No product listedBitwarden PDF File cross site scripting5.1 Medium
- dedecmsDedeCMS Incomplete Fix CVE-2018-9175 sys_verifies.php code injection5.1 Medium
- project team tmall demo, tmall demo +1 moreTmall Demo Payment Identifier pay random values6.3 Medium
- project team tmall demo, tmall demo +1 moreTmall Demo Product Details Page admin cross site scripting4.8 Medium
- project team tmall demo, tmall demo +1 moreTmall Demo Buy Item Page cross site scripting5.1 Medium
- project team tmall demo, tmall demo +1 moreTmall Demo Search Box cross site scripting5.3 Medium
- project team tmall demo, tmall demo +1 moreTmall Demo logout cross-site request forgery5.3 Medium
- project team tmall demo, tmall demo +1 moreTmall Demo uploadCategoryImage unrestricted upload5.1 Medium
- Show moreLoading…