CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- vbulletinvBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated users to invoke...10.0 Critical
- redmine pmbIn SIGB PMB before 8.0.1.2, attackers can achieve Local File Inclusion and remote code execution.6.4 Medium
- redmine pmbSIGB PMB before 8.0.1.2 allows SQL injection.5.3 Medium
- redmine pmbThe installer in SIGB PMB before 8.0.1.2 allows remote code execution.5.4 Medium
- code-projects online exam mastering systemcode-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting (XSS) via...6.1 Medium
- sscms siteserver cmsAn arbitrary file read vulnerability in the ReadTextAsynchronous function of SSCMS v7.3.1 allows...7.1 High
- maccmsmaccms10 v2025.1000.4047 is vulnerable to Server-Side request forgery (SSRF) in Friend Link...5.4 Medium
- gibbonedu gibbonGibbon before 29.0.00 allows CSRF.3.7 Low
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +7 more +9 moreAn issue was discovered in Wi-Fi in Samsung Mobile Processor and Wearable Processor Exynos 980,...6.5 Medium
- samsung exynos 1480 firmware, exynos 2400 firmware +1 moreAn issue was discovered in the GPU in Samsung Mobile Processor Exynos 1480 and 2400. Type...7.5 High
- kashipara responsive online learing platformKashipara Responsive Online Learing Platform course_detail_user_new.php sql injection6.9 Medium
- jkev responsive e-learning systemprojectworlds Responsive E-Learning System delete_file.php sql injection6.9 Medium
- exclusiveaddons exclusive addons for elementorExclusive Addons for Elementor <= 2.7.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Timer Widget6.4 Medium
- phpgurukul employee record management systemPHPGurukul Employee Record Management System editempexp.php sql injection6.9 Medium
- phpgurukul employee record management systemPHPGurukul Employee Record Management System myprofile.php sql injection6.9 Medium
- phpgurukul employee record management systemPHPGurukul Employee Record Management System loginerms.php sql injection6.9 Medium
- campcodes online hospital management systemSourceCodester Online Hospital Management System check_availability.php sql injection6.9 Medium
- lerouxyxchire client database management systemSourceCodester Client Database Management System superadmin_update_profile.php sql injection5.1 Medium
- pixelimityPixelimity Installation index.php sql injection5.1 Medium
- 1000 projects daily college class work report book1000 Projects Daily College Class Work Report Book dcwr_entry.php sql injection6.9 Medium
- assimpOpen Asset Import Library Assimp MDLMaterialLoader.cpp ParseSkinLump_3DGS_MDL7 out-of-bounds4.8 Medium
- assimpOpen Asset Import Library Assimp ParsingUtils.h SkipSpaces out-of-bounds4.8 Medium
- assimpOpen Asset Import Library Assimp HL1MDLLoader.cpp validate_header out-of-bounds4.8 Medium
- assimpOpen Asset Import Library Assimp LWOLoader.cpp CountVertsAndFacesLWO2 out-of-bounds4.8 Medium
- assimpOpen Asset Import Library Assimp MDLLoader.cpp InternReadFile_Quake1 out-of-bounds4.8 Medium
- debian linux, linux kernel +1 morenet_sched: Flush gso_skb list too during ->change()5.5 Medium
- spotlight - social media feeds (premium)WordPress Spotlight - Social Media Feeds (Premium) plugin <= 1.7.1 - Sensitive Data Exposure vulnerability5.3 Medium
- pcman ftp server, wftpserver wing ftp server +1 moreWing FTP Server Lua Admin Console unnecessary privileges7.5 High
- jeesitethinkgem JeeSite URI Scheme form ResourceLoader.getResource server-side request forgery5.3 Medium
- i2a cronosStored Cross-Site Scripting (XSS) in i2A-Cronos by i2A5.1 Medium
- m3m printer server webUser enumeration in M3M Printer Server Web6.9 Medium
- covermanagerCross-Site Scripting (XSS) in CoverManager5.3 Medium
- clickeduInsecure Direct Object Reference (IDOR) in Clickedu8.7 High
- tcman gimMissing authorization vulnerability in TCMAN GIM v118.7 High
- tcman gimTime-based blind SQL injection vulnerability in TCMAN GIM v118.7 High
- tcman gimTime-based blind SQL injection vulnerability in TCMAN GIM v118.7 High
- tcman gimMissing authentication vulnerability in TCMAN GIM v119.3 Critical
amd64-microcodeTuxCareUpdate of amd64-microcodeNo score- summer pearl group vacation rental management platformSummer Pearl Group Vacation Rental Management Platform cross-site request forgery5.3 Medium
- summer pearl group vacation rental management platformSummer Pearl Group Vacation Rental Management Platform HTTP Response Header information disclosure5.3 Medium
- summer pearl group vacation rental management platformSummer Pearl Group Vacation Rental Management Platform Header redirect5.1 Medium
- summer pearl group vacation rental management platformSummer Pearl Group Vacation Rental Management Platform Listing authorization5.3 Medium
- summer pearl group vacation rental management platformSummer Pearl Group Vacation Rental Management Platform updateListing cross site scripting5.1 Medium
- be-tech mifare classic cardsUnauthorized creation of master key in Mifare Classic Be-Tech cards6.8 Medium
- apache nuttx, apache software foundation nuttx rtos +1 moreApache NuttX RTOS: NuttX Bluetooth Stack HCI and UART DoS/RCE Vulnerabilities.9.8 Critical
- wondershare filmoraWondershare Filmora Installer NFWCHK.exe uncontrolled search path7.3 High
- realce tecnologia queue ticket kioskRealce Tecnologia Queue Ticket Kiosk Cadastro de Administrador Page index.php cross site scripting4.8 Medium
- aes multimedia gestnetSQL injection vulnerability in AES Multimedia's Gestnet9.3 Critical
- grupo espiral ms panloader.exePrivilege Escalation in Panloader.exe8.5 High
- realce tecnologia queue ticket kioskRealce Tecnologia Queue Ticket Kiosk Image File ajax.php unrestricted upload5.3 Medium
- Show moreLoading…