CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- smarsh telemessage, telemessage service +1 moreThe TeleMessage service through 2025-05-05 relies on the client side (e.g., the TM SGNL app) to...4.3 Medium
- netwrix directory managerNetwrix Directory Manager (formerly Imanami GroupID) v11.0.0.0 and before & after v.11.1.25134.03...9.1 Critical
- netwrix directory managerNetwrix Directory Manager (formerly Imanami GroupID) before and including v.11.0.0.0 and after v...5.0 Medium
- netwrix directory managerNetwrix Directory Manager (formerly Imanami GroupID) v.11.0.0.0 and before, as well as after v.11...6.5 Medium
- netwrix directory managerNetwrix Directory Manager v.11.0.0.0 and before & after v.11.1.25134.03 contains a hardcoded...5.3 Medium
- senior-walter web-based pharmacy product management systemSourcecodester Web-based Pharmacy Product Management System v.1.0 has a file upload vulnerability...8.6 High
- tenda w18e firmwareAn issue in Tenda W18E v.2.0 v.16.01.0.11 allows an attacker to execute arbitrary code via the...9.8 Critical
- linux, linux kernel +1 moresched/rt: Fix race in push_rt_task7.8 High
- isc keaInsecure file permissions can result in confidential information leakage4.0 Medium
- isc keaInsecure handling of file paths allows multiple local attacks6.1 Medium
- isc keaLoading a malicious hook library can lead to local privilege escalation7.8 High
- No product listedAn arbitrary file upload vulnerability in M2Soft CROWNIX Report & ERS v5.x to v5.5.14.1070, v7.x...6.5 Medium
- No product listedAn arbitrary file upload vulnerability in the opcode 500 functionality of M2Soft CROWNIX Report &...6.5 Medium
- No product listedIncorrect access control in M2Soft CROWNIX Report & ERS affected v7.x to v7.4.3.599 and v8.x to...6.5 Medium
- ibm hardware management console, hardware management console r10.0 firmware, hardware management console r9.3 firmware +1 more +3 moreIBM DS8900F and DS8A00 Hardware Management Console (HMC) cross-site scripting5.5 Medium
- arista networks eosn affected platforms running Arista EOS, ACL policies may not be enforced. IPv4 ingress ACL, MAC ingress ACL, or IPv6 standard ingress ACL enabled on one or more ethernet or LAG interfaces may result…2.6 Low
- arista networks eosOn affected platforms with hardware IPSec support running Arista EOS with IPsec enabled and anti-replay protection configured, EOS may exhibit unexpected behavior in specific cases. Received duplicate…5.3 Medium
- arista networks eosOn affected platforms running Arista EOS, ingress traffic on Layer 2 ports may, under certain conditions, be improperly forwarded to ports associated with different VLANs, resulting in a breach of VLA…6.5 Medium
- jokob-sk netalertxNetAlertX Vulnerable to Authentication Bypass10.0 Critical
- rrwo net::cidr::setNet::CIDR::Set versions 0.10 through 0.13 for Perl does not properly consider leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on…6.5 Medium
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +12 more +14 moreCoreutils: heap buffer under-read in gnu coreutils sort via key specification4.4 Medium
- stackrox, red hat advanced cluster security 4, redhat advanced cluster security +2 moreStackrox: xss in stackrox5.0 Medium
- google chromeUse after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to...5.4 Medium
- google chromeInappropriate implementation in BFCache in Google Chrome prior to 137.0.7151.55 allowed a remote...5.4 Medium
- google chromeInappropriate implementation in Tab Strip in Google Chrome prior to 137.0.7151.55 allowed a...5.4 Medium
- google chromeInappropriate implementation in Messages in Google Chrome on Android prior to 137.0.7151.55...6.5 Medium
- google chromeOut of bounds write in V8 in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to...8.8 High
- google chromeInappropriate implementation in FileSystemAccess API in Google Chrome prior to 137.0.7151.55...6.5 Medium
- google chromeInappropriate implementation in Background Fetch API in Google Chrome prior to 137.0.7151.55...5.4 Medium
- google chromeUse after free in Compositing in Google Chrome prior to 137.0.7151.55 allowed a remote attacker...8.8 High
- amazon redshiftIssue with Amazon Redshift Python Connector and the BrowserAzureOAuth2CredentialsProvider plugin7.0 High
- lomkit laravel-rest-apiLaravel Rest Api has a Search Validation Bypass6.6 Medium
- zkteco biotimeZKTeco BioTime default password6.9 Medium
- strapiStrapi allows Server-Side Request Forgery in Webhook function4.9 Medium
- phpgurukul news portal projectPHPGurukul News Portal Project edit-subadmin.php sql injection6.9 Medium
- phpgurukul news portal projectPHPGurukul News Portal Project edit-subcategory.php sql injection6.9 Medium
- phpgurukul news portal projectPHPGurukul News Portal Project edit-category.php sql injection6.9 Medium
- nvidia cuda toolkitNVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a...4.4 Medium
- icinga, icinga icinga2 +1 moreIcinga 2 certificate renewal might incorrectly renew an invalid certificate9.3 Critical
- phpgurukul news portal projectPHPGurukul News Portal Project add-category.php sql injection6.9 Medium
- phpgurukul company visitor management systemPHPGurukul Company Visitor Management System bwdates-reports-details.php sql injection6.9 Medium
- supabase auth-jsauth-js Vulnerable to Insecure Path Routing from Malformed User Input2.7 Low
- codingjoe django-select2Django-Select2 Vulnerable to Widget Instance Secret Cache Key Leaking8.2 High
- opentext advanced authenticationExposure of Sensitive System Information vulnerability during configuration affecting OpenText Advanced Authentication.2.1 Low
- gowabby hfishGowabby HFish url.go LoadUrl improper authentication6.9 Medium
- dbar productions volunteer sign up sheetsWordPress Volunteer Sign Up Sheets plugin < 5.5.5 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- campcodes online hospital management systemCampcodes Online Hospital Management System query-details.php sql injection6.9 Medium
- gnu binutils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +2 more +4 moreGNU Binutils objdump debug.c debug_type_samep memory corruption4.8 Medium
- red hat enterprise linux 6, enterprise linux 7 extended lifecycle support, enterprise linux 8 +11 more +13 moreGimp: multiple use after free in xcf parser7.3 High
- red hat enterprise linux 6, enterprise linux 7 extended lifecycle support, enterprise linux 8 +11 more +13 moreGimp: multiple heap buffer overflows in tga parser7.3 High
- Show moreLoading…