CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +1 more +3 moreGimp: stack-based buffer overflows in file-ico7.3 High
- gnu binutils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +2 more +4 moreGNU Binutils ld elflink.c elf_gc_sweep memory corruption4.8 Medium
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox 139 and Thunderbird 1397.3 High
- mozilla firefox, thunderbird +1 moreDevtools' preview ignored CSP headers6.5 Medium
- mozilla firefox, thunderbird +1 moreSNI was sometimes unencrypted7.5 High
- themeglow property – real estate directory listingProperty 1.0.5 - 1.0.6 - Missing Authorization to Authenticated (Author+) Privilege Escalation via property_package_user_role Metadata in PayPal Registration8.8 High
- sparklabs viscosityTCC Bypass via Dylib Loading in Viscosity.app4.8 Medium
govulncheck-vulndbopenSUSESecurity update for govulncheck-vulndbNo score- weidmueller ie-sw-pl10m-3gt-7tx, ie-sw-pl10mt-3gt-7tx, ie-sw-pl16m-16tx +10 more +12 moreWeidmueller: Denial-of-Service Vulnerability in the web server functionality of Industrial Ethernet Switches7.5 High
- weidmueller ie-sw-pl10m-3gt-7tx, ie-sw-pl10mt-3gt-7tx, ie-sw-pl16m-16tx +10 more +12 moreWeidmueller: Authentication Bypass Vulnerability in Industrial Ethernet Switches9.8 Critical
- weidmueller ie-sw-pl10m-3gt-7tx, ie-sw-pl10mt-3gt-7tx, ie-sw-pl16m-16tx +10 more +12 moreWeidmueller: Missing Authentication Vulnerability in Industrial Ethernet Switches9.8 Critical
- weidmueller ie-sw-pl10m-3gt-7tx, ie-sw-pl10mt-3gt-7tx, ie-sw-pl16m-16tx +10 more +12 moreWeidmueller: Denial-of-Service Vulnerability in Industrial Ethernet Switches7.5 High
- weidmueller ie-sw-pl10m-3gt-7tx, ie-sw-pl10mt-3gt-7tx, ie-sw-pl16m-16tx +10 more +12 moreWeidmueller: Out-of-Bounds Write Vulnerability in Industrial Ethernet Switches7.5 High
- mobatime amx mtapi, amxgt-100 +1 moreMissing Authentication & Authorization in Web-API allows adversary unrestricted access9.3 Critical
- suse manager server module 4.3, container suse/manager/5.0/x86 64/server:5.0.4.7.19.1 +1 moreReflected XSS in spacewalk-java5.6 Medium
- nagvisXSS via WYSIWYG editor5.1 Medium
- nagvisLivestatus Injection in dynmaps5.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +16 more +18 moreIcu: stack buffer overflow in the srbroot::addtag function7.0 High
- phpgurukul student study center management systemPHPGurukul Student Study Center Management System report.php sql injection5.1 Medium
- codelibs fessFess has Insecure Temporary File Permissions1.2 Low
- phpgurukul company visitor management systemPHPGurukul Company Visitor Management System forgot-password.php sql injection6.9 Medium
- radashi-org radashiRadashi Vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')6.8 Medium
- phpgurukul online nurse hiring systemPHPGurukul Online Nurse Hiring System bwdates-report-details.php sql injection6.9 Medium
- campcodes online hospital management systemCampcodes Online Hospital Management System view-patient.php sql injection6.9 Medium
- d-link di-8100, dlink di-8100 firmware +1 moreD-Link DI-8100 jhttpd login.cgi httpd_get_parm stack-based overflow8.7 High
- phpgurukul small crmPHPGurukul Small CRM manage-tickets.php sql injection6.9 Medium
- phpgurukul small crmPHPGurukul Small CRM change-password.php sql injection6.9 Medium
- campcodes advanced online voting systemCampcodes Advanced Online Voting System index.php sql injection6.9 Medium
- campcodes online hospital management systemCampcodes Online Hospital Management System add-doctor.php sql injection6.9 Medium
- freefloat ftp serverFreeFloat FTP Server QUOTE Command buffer overflow6.9 Medium
- inspireui mstore api – create native android & ios apps on the cloud, mstore api +1 moreMStore API – Create Native Android & iOS Apps On The Cloud <= 4.17.5 - Missing Authorization to Authenticated (Subscriber+) Posts Creation4.3 Medium
- wpdevteam gutenberg essential blocks – page builder for gutenberg blocks & patternsEssential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slider and Post Carousel Widgets6.4 Medium
- freefloat ftp serverFreeFloat FTP Server GET Command buffer overflow6.9 Medium
- ibm controller, cognos controller +1 moreIBM Controller information disclosure6.5 Medium
- freefloat ftp serverFreeFloat FTP Server ASCII Command buffer overflow6.9 Medium
- freefloat ftp serverFreeFloat FTP Server LITERAL Command buffer overflow6.9 Medium
- freefloat ftp serverFreeFloat FTP Server RMDIR Command buffer overflow6.9 Medium
- phpgurukul student record systemPHPGurukul Student Record System login.php sql injection6.9 Medium
readstatOSS-FuzzHeap-buffer-overflow in sav_parse_long_variable_names_recordNo scorecheckstyleOSS-FuzzSecurity exception in com.puppycrawl.tools.checkstyle.JavaAstVisitor.getInnerBopAstNo score- d-link dcs-5020l, dlink dcs-5020l firmware +1 moreD-Link DCS-5020L ptdc.cgi websReadEvent stack-based overflow8.7 High
- mozilla firefox, thunderbird +1 moreMemory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.118.1 High
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.118.1 High
- mozilla firefox, thunderbird +1 moreClickjacking vulnerability could have led to leaking saved payment card details5.4 Medium
- mozilla firefox, thunderbird +1 moreScript element events leaked cross-origin resource status4.3 Medium
- mozilla firefox, thunderbird +1 morePotential local code execution in “Copy as cURL” command4.8 Medium
- mozilla firefox, thunderbird +1 morePotential local code execution in “Copy as cURL” command4.8 Medium
- mozilla firefox, thunderbird +1 moreError handling for script execution was incorrectly isolated from web content4.3 Medium
- mozilla thunderbirdA double-free could have occurred in `vpx_codec_enc_init_multi` after a failed allocation when...7.5 High
- vbulletinCertain vBulletin versions might allow attackers to execute arbitrary PHP code by abusing...9.0 Critical
- Show moreLoading…