CVE-2025 list

CVE-2025 records published in May 2025

Page two of four: records 1,001 to 2,000 of the 3,226 published in May 2025, newest first. The first page carries the figures for May 2025.

CVE-2025 records published in May 2025, newest first: records 1,001 to 2,000 of 3,226
CVE Summary CVSS EPSS Published Signals
CVE-2025-48344Rootspersona WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.1%2025-05-19Fix
CVE-2025-48342Dynamic Pricing and Discounts Lite for WooCommerce WordPress plugin cross-site request forgery5.4CNA v3.10.1%2025-05-19
CVE-2025-48341Form Maker by 10Web WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-05-19Fix
CVE-2025-48340User Profile Meta Manager WordPress plugin CSRF to privilege escalation9.8CNA v3.10.2%2025-05-19
CVE-2025-48288ElementInvader Addons for Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-05-19Fix
CVE-2025-48285Falang multilanguage WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-05-19Fix
CVE-2025-48284Japanized For WooCommerce WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.1%2025-05-19Fix
CVE-2025-48282Majestic Support WordPress plugin broken access control5.3CNA v3.10.3%2025-05-19Fix
CVE-2025-48280AutomatorWP WordPress plugin SQL injection7.6CNA v3.10.3%2025-05-19Fix
CVE-2025-48278RSVPMarker WordPress plugin SQL injection8.5CNA v3.10.3%2025-05-19Fix
CVE-2025-48277Cost Calculator Builder WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-05-19Fix
CVE-2025-48276Visual Composer Website Builder WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-05-19Fix
CVE-2025-48272WP Job Portal WordPress plugin insecure direct object references (IDOR)5.3CNA v3.10.3%2025-05-19Fix
CVE-2025-48270SKT Blocks WordPress plugin cross-site scripting (XSS)5.4v3.10.2%2025-05-19Fix
CVE-2025-48269WPAdverts WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-05-19Fix
CVE-2025-48268Bot for Telegram on WooCommerce WordPress plugin broken access control4.3CNA v3.10.2%2025-05-19Fix
CVE-2025-48266Active Products Tables for WooCommerce WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-05-19Fix
CVE-2025-48265Year Make Model Search for WooCommerce WordPress plugin Pektsekye cross-site request forgery4.3CNA v3.10.1%2025-05-19Fix
CVE-2025-48264Product Code for WooCommerce WordPress plugin CSRF to Database update4.3CNA v3.10.1%2025-05-19Fix
CVE-2025-48263MultiVendorX WordPress plugin cross-site scripting (XSS)5.4v3.10.2%2025-05-19Fix
CVE-2025-48262Url Rewrite Analyzer WordPress plugin broken access control4.3CNA v3.10.3%2025-05-19Fix
CVE-2025-48260GDPR CCPA Compliance Support WordPress plugin broken access control4.3CNA v3.10.2%2025-05-19Fix
CVE-2025-48259WP Mapa Politico España WordPress plugin cross-site request forgery (CSRF) to settings Change4.3CNA v3.10.1%2025-05-19Fix
CVE-2025-48258Mega Menu Block WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-05-19Fix
CVE-2025-48257Projectopia WordPress plugin broken access control6.5CNA v3.10.4%2025-05-19Fix
CVE-2025-48256Import Social Events WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2025-05-19Fix
CVE-2025-48255Broadcast Live Video WordPress plugin videowhisper cross-site request forgery8.8v3.10.2%2025-05-19Fix
CVE-2025-48254Change Add to Cart Button Text for WooCommerce WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2025-05-19Fix
CVE-2025-48253WPFactory Free Shipping Bar stored cross-site scripting5.4v3.10.3%2025-05-19Fix
CVE-2025-48252Back Button Widget WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2025-05-19Fix
CVE-2025-48251Additional Custom Emails and Recipients for WooCommerce WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-05-19Fix
CVE-2025-48250Coupons and Add to Cart by URL Links for WooCommerce WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-05-19Fix
CVE-2025-48249EAN for WooCommerce WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-05-19Fix
CVE-2025-48248WPFactory Sitewide Discount for WooCommerce stored cross-site scripting6.5CNA v3.10.3%2025-05-19Fix
CVE-2025-48247Shortlinks by Pretty Links WordPress plugin broken access control4.3CNA v3.10.3%2025-05-19Fix
CVE-2025-48246The Events Calendar WordPress plugin broken access control5.4CNA v3.10.4%2025-05-19Fix
CVE-2025-48244Exclusive Addons Elementor WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-05-19Fix
CVE-2025-48243reCAPTCHA for all WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-05-19Fix
CVE-2025-48242Legal Pages WordPress plugin broken access control6.5CNA v3.10.4%2025-05-19Fix
CVE-2025-48240Cost of Goods for WooCommerce WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-05-19Fix
CVE-2025-48239Product Notes Tab and Private Admin Notes for WooCommerce WordPress plugin cross-site scripting6.5CNA v3.10.3%2025-05-19Fix
CVE-2025-48238AWcode Toolkit WordPress plugin cross-site request forgery (CSRF) to stored XSS7.1CNA v3.10.1%2025-05-19Fix
CVE-2025-48237Wishlist for WooCommerce WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-05-19Fix
CVE-2025-48236bunny.net WordPress plugin cross-site scripting (XSS)8.5CNA v3.10.5%2025-05-19Fix
CVE-2025-48235WP Image Mask WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-05-19Fix
CVE-2025-48234Ultimate Blocks WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-05-19Fix
CVE-2025-48233Affiliates Manager Google reCAPTCHA Integration WordPress plugin affmngr cross-site request forgery7.1CNA v3.10.1%2025-05-19Fix
CVE-2025-48232Xpro Addons For Beaver Builder Lite WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-05-19Fix
CVE-2025-47949samlify SAML Signature Wrapping attack9.9CNA v4.00.5%2025-05-19Fix
CVE-2025-47946Symfony UX allows unsanitized HTML attribute injection via ComponentAttributes6.1CNA v3.10.2%2025-05-19Fix
CVE-2025-47944Multer vulnerable to denial of service from maliciously crafted requests7.5CNA v3.10.8%2025-05-19Fix
CVE-2025-47935Multer vulnerable to denial of service via memory leaks from unclosed streams7.5CNA v3.10.8%2025-05-19Fix
CVE-2025-47934openpgpjs OpenPGP.js's message signature verification can be spoofed8.7CNA v4.00.6%2025-05-19Fix
CVE-2025-47760Fuji Electric V-SFT stack-based buffer overflow7.8v3.10.2%2025-05-19Fix
CVE-2025-47759Fuji Electric S-SFT stack-based buffer overflow7.8v3.10.2%2025-05-19Fix
CVE-2025-47758Fuji Electric V-SFT stack-based buffer overflow7.8v3.10.2%2025-05-19Fix
CVE-2025-47757Fuji Electric V-SFT out-of-bounds read7.8v3.10.2%2025-05-19Fix
CVE-2025-47756Fuji Electric V-SFT out-of-bounds read7.8v3.10.2%2025-05-19Fix
CVE-2025-47755Fuji Electric V-SFT out-of-bounds read7.8v3.10.2%2025-05-19Fix
CVE-2025-47754Fuji Electric V-SFT out-of-bounds read7.8v3.10.2%2025-05-19Fix
CVE-2025-47753Fuji Electric V-SFT out-of-bounds read7.8v3.10.2%2025-05-19Fix
CVE-2025-47752Fuji Electric V-SFT out-of-bounds write7.8v3.10.2%2025-05-19Fix
CVE-2025-47751Fuji Electric V-SFT out-of-bounds write7.8v3.10.2%2025-05-19Fix
CVE-2025-47750Fuji Electric V-SFT out-of-bounds write7.8v3.10.2%2025-05-19Fix
CVE-2025-47749Fuji Electric V-SFT crash7.8v3.10.2%2025-05-19Fix
CVE-2025-47583Salon booking system WordPress plugin CSRF to arbitrary content deletion5.4CNA v3.10.1%2025-05-19Fix
CVE-2025-47582WordPress WPBot Pro Wordpress Chatbot plugin PHP object injection9.8CNA v3.10.6%2025-05-19
CVE-2025-47581WordPress Events Calendar Registration and Tickets plugin PHP object injection9.8CNA v3.10.5%2025-05-19
CVE-2025-47577TI WooCommerce Wishlist WordPress plugin arbitrary file upload10.0CNA v3.14.6%2025-05-19NucleiExploit codeFix
CVE-2025-47576Bimber - Viral Magazine WordPress theme local file inclusion8.8CNA v3.10.5%2025-05-19
CVE-2025-47284Gardener vulnerable to metadata injection for a project secret that can lead to privilege escalation9.9CNA v3.00.4%2025-05-19Fix
CVE-2025-47283gardener bypassing project secret validation can lead to privilege escalation9.9CNA v3.00.6%2025-05-19Fix
CVE-2025-47282Gardener External DNS Management privilege escalation9.9CNA v3.00.7%2025-05-19Fix
CVE-2025-46801Pgpool Global Development Group Pgpool-II authentication bypass9.3CNA v4.00.9%2025-05-19Fix
CVE-2025-46543Enhanced Paypal Shortcodes WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-05-19
CVE-2025-46441Section Widget WordPress plugin path traversal5.3CNA v3.10.4%2025-05-19
CVE-2025-46263Author Box After Posts WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-05-19
CVE-2025-46262Mad Mimi for WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-05-19
CVE-2025-44108FlatPress administration panel stored cross-site scripting4.8CISA ADP v3.10.3%2025-05-19Fix
CVE-2025-43841WP Vegas WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-05-19
CVE-2025-43840CheckBot WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-05-19
CVE-2025-43839BP Messages Tool WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-05-19Fix
CVE-2025-43838WordPress Custom PC Builder Lite for WooCommerce plugin settings Change vulnerability6.5CNA v3.10.3%2025-05-19
CVE-2025-43837WordPress Total Donations plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-05-19
CVE-2025-43836WordPress Syndicate Out plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-05-19
CVE-2025-43835wp-cyr-cho WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-05-19
CVE-2025-43834cookieBAR WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2025-05-19Fix
CVE-2025-43833Absolute Links WordPress plugin SQL injection7.6CNA v3.10.3%2025-05-19
CVE-2025-43832Remote Images Grabber WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-05-19
CVE-2025-43714OpenAI Chatgpt command injection6.5CISA ADP v3.10.6%2025-05-19
CVE-2025-41429appleple a-blog cms log injection9.8v3.10.4%2025-05-19Fix
CVE-2025-39460Eduma WordPress theme broken access control5.3CNA v3.10.3%2025-05-19Fix
CVE-2025-39459Real Estate 7 WordPress theme privilege escalation7.3CNA v3.10.4%2025-05-19Exploit codeFix
CVE-2025-39458Foton WordPress theme local file inclusion8.1CNA v3.10.7%2025-05-19Fix
CVE-2025-39454Name Directory WordPress plugin broken access control4.3CNA v3.10.2%2025-05-19Fix
CVE-2025-39451JetBlocks For Elementor WordPress plugin broken access control7.5CNA v3.10.3%2025-05-19Fix
CVE-2025-39450JetTabs WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-05-19Fix
CVE-2025-39449JetWooBuilder WordPress plugin broken access control7.5CNA v3.10.3%2025-05-19Fix
CVE-2025-39448JetElements For Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-05-19Fix
CVE-2025-39447JetElements For Elementor WordPress plugin broken access control7.5CNA v3.10.3%2025-05-19Fix
CVE-2025-39446Booster Plus for WooCommerce WordPress plugin reflected cross-site scripting (XSS)6.1NVD v3.10.2%2025-05-19Fix
CVE-2025-39445WordPress Super Store Finder plugin SQL injection9.3CNA v3.10.4%2025-05-19Fix
CVE-2025-39412Master Slider WordPress plugin broken access control4.3v3.10.2%2025-05-19Fix
CVE-2025-39411WhatsApp Click to Chat Plugin for WordPress local file inclusion7.5CNA v3.10.5%2025-05-19
CVE-2025-39410Smart Sections Theme Builder - WPBakery Page Builder Addon WordPress plugin PHP object injection9.8CNA v3.10.5%2025-05-19
CVE-2025-39409WordPress Video Robot - The Ultimate Video Importer plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-05-19
CVE-2025-39407Memberpress WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-05-19Fix
CVE-2025-39406WPAMS WordPress plugin local file inclusion to privilege escalation9.8CNA v3.10.5%2025-05-19
CVE-2025-39405WordPress WPAMS plugin (17-08-2023) privilege escalation8.8CNA v3.10.4%2025-05-19
CVE-2025-39403WordPress WPAMS plugin (17-08-2023) SQL injection8.5CNA v3.10.3%2025-05-19
CVE-2025-39402WordPress WPAMS plugin (17-08-2023) arbitrary file upload9.9CNA v3.10.4%2025-05-19
CVE-2025-39401WordPress WPAMS plugin (17-08-2023) arbitrary file upload10.0CNA v3.10.5%2025-05-19Exploit code
CVE-2025-39398Hotel + Bed and Breakfast Booking Calendar Theme Bellevue WordPress theme broken access control4.3CNA v3.10.2%2025-05-19
CVE-2025-39396JetReviews WordPress plugin local file inclusion7.5CNA v3.10.6%2025-05-19Fix
CVE-2025-39395WordPress WPAMS plugin (17-08-2023) SQL injection9.3CNA v3.10.4%2025-05-19
CVE-2025-39394AnalyticsWP WordPress plugin sensitive data exposure5.3CNA v3.10.3%2025-05-19
CVE-2025-39393Hospital Management System WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2025-05-19
CVE-2025-39392WordPress WPAMS plugin (17-08-2023) cross-site scripting (XSS)7.1CNA v3.10.2%2025-05-19
CVE-2025-39389WordPress AnalyticsWP plugin SQL injection9.3CNA v3.10.3%2025-05-19Fix
CVE-2025-39388AnalyticsWP WordPress plugin broken access control5.3CNA v3.10.3%2025-05-19
CVE-2025-39386Hospital Management System WordPress plugin SQL injection9.3CNA v3.10.3%2025-05-19
CVE-2025-39380Hospital Management System WordPress plugin arbitrary file upload10.0CNA v3.10.4%2025-05-19
CVE-2025-39376Car Park Booking System for WordPress plugin broken access control4.3CNA v3.10.2%2025-05-19
CVE-2025-39375Easy Child Theme Creator WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-05-19
CVE-2025-39374Best Posts Summary WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-05-19
CVE-2025-39373JNews WordPress theme broken access control5.3CNA v3.10.3%2025-05-19
CVE-2025-39372WordPress Events Calendar Registration and Tickets plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-05-19
CVE-2025-39371Author Box Plugin With Different Description WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-05-19
CVE-2025-39370iCafe Library WordPress plugin SQL injection7.6CNA v3.10.3%2025-05-19
CVE-2025-39369Posts for Page WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-05-19
CVE-2025-39368Rootspersona WordPress plugin broken access control5.3CNA v3.10.3%2025-05-19Fix
CVE-2025-39366wProject WordPress theme Subscriber+ privilege escalation8.8CNA v3.10.3%2025-05-19Fix
CVE-2025-39365wProject WordPress theme reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-05-19Fix
CVE-2025-39364Product Category Slider for WooCommerce WordPress plugin local file inclusion7.5CNA v3.10.6%2025-05-19Fix
CVE-2025-39357Hospital Management System WordPress plugin SQL injection8.5CNA v3.10.3%2025-05-19
CVE-2025-39356Foodbakery Sticky Cart WordPress plugin PHP object injection9.8CNA v3.10.5%2025-05-19
CVE-2025-39355FAT Services Booking WordPress plugin SQL injection8.5CNA v3.10.3%2025-05-19
CVE-2025-39354Grand Conference WordPress theme PHP object injection9.8CNA v3.10.5%2025-05-19
CVE-2025-39353Grand Restaurant WordPress theme broken access control5.3CNA v3.10.3%2025-05-19
CVE-2025-39352Grand Restaurant WordPress theme arbitrary options deletion vulnerability8.2CNA v3.10.3%2025-05-19
CVE-2025-39351Grand Restaurant WordPress theme cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-05-19
CVE-2025-39350wProject WordPress theme unauthenticated Post/Comment/Attachment Modification/Deletion vulnerability8.2CNA v3.10.3%2025-05-19Fix
CVE-2025-39349CiyaShop WordPress theme PHP object injection9.8v3.10.5%2025-05-19
CVE-2025-39348Grand Restaurant WordPress theme PHP object injection9.8v3.10.5%2025-05-19
CVE-2025-37891Linux kernel ALSA UMP driver buffer overflow7.8CNA v3.10.2%2025-05-19Fix
CVE-2025-36560appleple a-blog cms server-side request forgery7.5NVD v3.10.5%2025-05-19Fix
CVE-2025-32999appleple a-blog cms cross-site scripting4.8CNA v4.00.2%2025-05-19Fix
CVE-2025-32928Altair WordPress theme PHP object injection9.8v3.10.5%2025-05-19
CVE-2025-32927FoodBakery WordPress plugin PHP object injection9.8v3.10.5%2025-05-19
CVE-2025-32926Grand Restaurant WordPress theme path traversal to PHP object injection9.8CNA v3.10.6%2025-05-19
CVE-2025-32925SUMO Reward Points WordPress plugin local file inclusion9.8v3.10.5%2025-05-19
CVE-2025-32924Revy WordPress plugin SQL injection8.5CNA v3.10.3%2025-05-19
CVE-2025-32920TI WooCommerce Wishlist WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-05-19Fix
CVE-2025-31262Apple macOS incorrect permission assignment5.5CISA ADP v3.10.2%2025-05-19Fix
CVE-2025-31185Apple iOS and iPadOS logic flaw3.3CISA ADP v3.10.2%2025-05-19Fix
CVE-2025-31027Tiger WordPress theme reflected cross-site scripting (XSS)6.1NVD v3.10.3%2025-05-19
CVE-2025-30072Tiiwee TWX1HAKV2 authentication bypass by replay7.6CISA ADP v3.10.6%2025-05-19
CVE-2025-28371Engeniustech ENH500 improper access control6.5CISA ADP v3.10.5%2025-05-19
CVE-2025-27566appleple a-blog cms path traversal7.2v3.10.5%2025-05-19Fix
CVE-2025-27010WordPress Tastyc theme local file inclusion8.1CNA v3.10.7%2025-05-19Fix
CVE-2025-26997Wireless Butler WordPress theme cross-site scripting (XSS)7.1CNA v3.10.2%2025-05-19
CVE-2025-26920Customify WordPress theme broken access control5.4CNA v3.10.3%2025-05-19
CVE-2025-26892Celestial Aura WordPress theme arbitrary file upload9.9CNA v3.10.6%2025-05-19Exploit code
CVE-2025-26872Eximius WordPress theme arbitrary file upload9.9CNA v3.10.5%2025-05-19
CVE-2025-26867Bulk WordPress theme broken access control5.3CNA v3.10.3%2025-05-19
CVE-2025-26735Grip WordPress theme local file inclusion7.5CNA v3.10.5%2025-05-19
CVE-2025-26621OpenCTI vulnerable to denial of service through web hook7.6CNA v3.10.4%2025-05-19Fix
CVE-2025-24189Apple Safari memory corruption8.8CISA ADP v3.10.7%2025-05-19Fix
CVE-2025-24184Apple iPadOS denial of service5.5CISA ADP v3.10.2%2025-05-19Fix
CVE-2025-24183Apple macOS improper privilege management5.5CISA ADP v3.10.2%2025-05-19Fix
CVE-2025-23988ghostwriter WordPress theme reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-05-19
CVE-2025-23986Tiki Time WordPress theme reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-05-19
CVE-2025-23983Tijaji WordPress theme reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-05-19
CVE-2025-23981CarZine WordPress theme reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-05-19
CVE-2025-23979Flashy WordPress theme reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-05-19
CVE-2025-23167Node.js Node HTTP request smuggling6.5CNA v3.00.5%2025-05-19Exploit codeFix
CVE-2025-23166Node.js Node uncaught exception7.5CNA v3.00.8%2025-05-19Fix
CVE-2025-23165Node.js Node memory leak3.7CNA v3.00.6%2025-05-19Fix
CVE-2025-23164Ubiquiti UniFi Protect Application improper access control4.4CNA v3.00.4%2025-05-19Fix
CVE-2025-23123Ubiquiti UniFi Protect Cameras heap-based buffer overflow10.0CNA v3.01.1%2025-05-19Fix
CVE-2025-22792Js O3 Lite WordPress theme reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-05-19
CVE-2025-22791offset writing WordPress theme reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-05-19
CVE-2025-22790moseter WordPress theme reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-05-19
CVE-2025-22789polka dots WordPress theme reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-05-19
CVE-2025-22687tuaug4 WordPress theme reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-05-19
CVE-2025-22678my white WordPress theme reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-05-19
CVE-2025-22287LTL Freight Quotes FreightQuote Edition WordPress plugin broken access control5.4CNA v3.10.3%2025-05-19Fix
CVE-2025-4948libsoup soup_multipart_new_from_message function integer underflow7.5CNA v3.10.8%2025-05-19Fix
CVE-2025-4945Red Hat Enterprise Linux 10 libsoup: Integer overflow in cookie expiration date handling in libsoup3.7CNA v3.10.7%2025-05-19Fix
CVE-2025-4941PHPGurukul Credit Card Application Management System index.php SQL injection9.8v3.10.6%2025-05-19
CVE-2025-49401000 Projects Daily College Class Work Report Book admin_info.php SQL injection6.9CNA v4.00.5%2025-05-19
CVE-2025-4939PHPGurukul Credit Card Application Management System new-ccapplication.php cross-site scripting6.1v3.10.5%2025-05-19
CVE-2025-4938PHPGurukul Employee Record Management System registererms.php SQL injection9.8v3.10.4%2025-05-19
CVE-2025-4937SourceCodester Apartment Visitor Management System profile.php SQL injection9.8v3.10.6%2025-05-19
CVE-2025-4936Projectworlds Online Food Ordering System admin-page.php SQL injection9.8v3.10.5%2025-05-19
CVE-2025-4935SourceCodester Stock Management System changePassword.php SQL injection9.8v3.10.5%2025-05-19
CVE-2025-4934PHPGurukul User Registration and Login and User Management System edit-profile.php SQL injection9.8v3.10.5%2025-05-19
CVE-2025-4933ponaravindb Hospital-Management-System doctor-panel.php SQL injection9.8v3.10.5%2025-05-19
CVE-2025-4932Projectworlds Online Lawyer Management System lawyer_registation.php SQL injection9.8v3.10.5%2025-05-19
CVE-2025-4931Projectworlds Online Lawyer Management System user_registation.php SQL injection9.8v3.10.5%2025-05-19
CVE-2025-4930Campcodes Online Shopping Portal my-cart.php SQL injection9.8v3.10.5%2025-05-19
CVE-2025-4929Campcodes Online Shopping Portal my-account.php SQL injection9.8v3.10.5%2025-05-19
CVE-2025-4928Projectworlds Online Lawyer Management System save_lawyer_edit_profile.php SQL injection9.8v3.10.5%2025-05-19
CVE-2025-4927PHPGurukul Online Marriage Registration System between-dates-application-report.php SQL injection9.8v3.10.5%2025-05-19
CVE-2025-4926PHPGurukul Car Rental Project post-avehical.php unrestricted upload7.2v3.10.5%2025-05-19
CVE-2025-4925PHPGurukul Daily Expense Tracker System expense-monthwise-reports-detailed.php SQL injection9.8v3.10.5%2025-05-19
CVE-2025-4924SourceCodester Client Database Management System user_void_transaction.php SQL injection9.8v3.10.5%2025-05-19
CVE-2025-4923SourceCodester Client Database Management System user_delivery_update.php unrestricted upload6.9CNA v4.00.5%2025-05-19
CVE-2025-4917PHPGurukul Auto Taxi Stand Management System new-autoortaxi-entry-form.php SQL injection9.8v3.10.6%2025-05-19
CVE-2025-4916PHPGurukul Auto Taxi Stand Management System admin-profile.php SQL injection9.8v3.10.6%2025-05-19
CVE-2025-4915PHPGurukul Auto Taxi Stand Management System auto-taxi-entry-detail.php SQL injection9.8v3.10.6%2025-05-19
CVE-2025-4914PHPGurukul Auto Taxi Stand Management System forgot-password.php SQL injection9.8v3.10.6%2025-05-19
CVE-2025-4913PHPGurukul Auto Taxi Stand Management System index.php SQL injection9.8v3.10.6%2025-05-19
CVE-2025-4912SourceCodester Student Result Management System Image file update_student.php path traversal9.1v3.10.8%2025-05-19
CVE-2025-4911PHPGurukul Zoo Management System view-foreigner-ticket.php SQL injection9.8v3.10.5%2025-05-19
CVE-2025-4910PHPGurukul Zoo Management System edit-animal-details.php SQL injection9.8v3.10.6%2025-05-19
CVE-2025-4909SourceCodester Client Database Management System exposure of information through directory listing6.9CNA v4.00.5%2025-05-19
CVE-2025-4908PHPGurukul Daily Expense Tracker System expense-datewise-reports-detailed.php SQL injection9.8v3.10.6%2025-05-19
CVE-2025-4907PHPGurukul Daily Expense Tracker System forgot-password.php SQL injection9.8v3.10.6%2025-05-19
CVE-2025-4906PHPGurukul Notice Board System login.php SQL injection9.8v3.10.6%2025-05-19
CVE-2025-4905iop-apl-uw basestation3 QC.py load_qc_pickl deserialization9.8v3.10.5%2025-05-19
CVE-2025-4904D-Link DI-7003GV2 webgl.data sub_41F0FC information disclosure5.3v3.11.5%2025-05-19
CVE-2025-4903D-Link DI-7003GV2 webgl.asp sub_41F4F0 unverified password change7.5v3.10.8%2025-05-19
CVE-2025-4902D-Link DI-7003GV2 versionupdate.data sub_48F4F0 information disclosure7.5v3.114.7%2025-05-19
CVE-2025-4901D-Link DI-7003GV2 HTTP endpoint state_view.data sub_41E304 information disclosure6.5v3.178.9%2025-05-19
CVE-2025-4876Hard-coded key Revealed in ConnectWise Password Encryption utility6.0CNA v3.10.1%2025-05-19
CVE-2025-4477TeamT5 ThreatSonar Anti-Ransomware privilege escalation8.6CNA v4.00.5%2025-05-19Fix
CVE-2025-3908OpenVPN 3 Linux link following6.2CISA ADP v3.10.2%2025-05-19Fix
CVE-2025-3223WorkstationST EGD Configuration Server path traversal5.9CNA v3.10.2%2025-05-19
CVE-2025-2892All in One SEO Pack WordPress plugin stored cross-site scripting5.4v3.10.3%2025-05-19Fix
CVE-2025-2561Ninja Forms WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.2%2025-05-19Fix
CVE-2025-2560Ninja Forms WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.2%2025-05-19Fix
CVE-2025-2524Ninja Forms WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-19Fix
CVE-2025-2099Regular expression denial of service (ReDoS) in huggingface/Transformers7.5v3.10.6%2025-05-19Fix
CVE-2025-1627Qi Blocks WordPress plugin Contributor+ stored XSS via ToC block5.4CISA ADP v3.10.2%2025-05-19Fix
CVE-2025-1626Qi Blocks WordPress plugin Contributor+ stored XSS vi Countdown block5.4CISA ADP v3.10.2%2025-05-19Fix
CVE-2025-1625Qi Blocks WordPress plugin Contributor+ stored XSS via Counter block5.4CISA ADP v3.10.3%2025-05-19Fix
CVE-2025-1308PX Backup improper sanitization8.4CNA v4.00.2%2025-05-19
CVE-2025-48219O2 UK O2 information disclosure3.5CNA v3.10.3%2025-05-18Fix
CVE-2025-4900Campcodes Sales and Inventory System payment.php SQL injection9.8v3.10.5%2025-05-18
CVE-2025-4899Campcodes Sales and Inventory System transaction_update.php SQL injection9.8v3.10.5%2025-05-18
CVE-2025-4898SourceCodester Student Result Management System Logo file update_system.php unlink path traversal5.4v3.10.6%2025-05-18
CVE-2025-4897Tenda A15 HTTP POST request multimodalAdd buffer overflow7.5v3.16.1%2025-05-18
CVE-2025-4896Tenda AC10 UserCongratulationsExec buffer overflow7.5v3.10.8%2025-05-18
CVE-2025-4895SourceCodester Doctors Appointment System delete-session.php SQL injection9.8v3.10.5%2025-05-18
CVE-2025-4894calmkart Django-sso-server crypto.py gen_rsa_keys inadequate encryption5.9v3.10.3%2025-05-18
CVE-2025-4893CoinExchange_CryptoExchange_Java file upload endpoint path traversal5.3CNA v4.00.5%2025-05-18
CVE-2025-4892code-projects Police Station Management System Delete Record source.cpp remove stack-based overflow7.8v3.10.4%2025-05-18
CVE-2025-4891code-projects Police Station Management System Display Record source.cpp display buffer overflow7.8v3.10.3%2025-05-18
CVE-2025-4890code-projects Tourism Management System Login User LoginUser stack-based overflow7.8v3.10.4%2025-05-18
CVE-2025-4889code-projects Tourism Management System User Registration AddUser buffer overflow7.8v3.10.3%2025-05-18
CVE-2025-4888code-projects Pharmacy Management System Add Order Details take_order buffer overflow7.8v3.10.3%2025-05-18
CVE-2025-4887SourceCodester Online Student Clearance System cross-site request forgery8.8v3.10.3%2025-05-18
CVE-2025-4886itsourcecode Sales and Inventory System product_update.php SQL injection9.8v3.10.5%2025-05-18
CVE-2025-4885itsourcecode Sales and Inventory System product_add.php SQL injection9.8v3.10.5%2025-05-18
CVE-2025-4884itsourcecode Restaurant Management System assign_save.php SQL injection9.8v3.10.5%2025-05-18
CVE-2025-4883D-Link DI-8100 Connection Limit page ctxz.asp ctxz_asp stack-based overflow7.2v3.18.2%2025-05-18
CVE-2025-4882itsourcecode Restaurant Management System team_update.php SQL injection9.8v3.10.5%2025-05-18
CVE-2025-4881itsourcecode Restaurant Management System user_save.php SQL injection9.8v3.10.5%2025-05-18
CVE-2025-4880PHPGurukul News Portal aboutus.php SQL injection9.8v3.10.6%2025-05-18
CVE-2025-4875Campcodes Online Shopping Portal forgot-password.php SQL injection9.8v3.10.5%2025-05-18
CVE-2025-4874PHPGurukul News Portal Project contactus.php SQL injection9.8v3.10.6%2025-05-18
CVE-2025-4873PHPGurukul News Portal Login index.php SQL injection9.8v3.10.6%2025-05-18
CVE-2025-4872FreeFloat FTP Server CCC command buffer overflow9.8v3.10.7%2025-05-18
CVE-2025-4871PCMan FTP Server REST command buffer overflow9.8v3.11.6%2025-05-18Exploit code
CVE-2025-4870itsourcecode Restaurant Management System menu_save.php SQL injection9.8v3.10.5%2025-05-18
CVE-2025-4869itsourcecode Restaurant Management System member_update.php SQL injection9.8v3.10.5%2025-05-18
CVE-2025-4868merikbest ecommerce-spring-reactjs file upload endpoint admin path traversal5.3CNA v4.00.5%2025-05-18
CVE-2025-4867Tenda A15 ArpNerworkSet formArpNerworkSet denial of service7.1CNA v4.00.8%2025-05-18
CVE-2025-4866weibocom rill-flow Management console code injection8.8v3.10.6%2025-05-18Exploit code
CVE-2025-4865itsourcecode Restaurant Management System member_save.php SQL injection9.8v3.10.5%2025-05-18
CVE-2025-4864itsourcecode Restaurant Management System finished.php SQL injection9.8v3.10.5%2025-05-18
CVE-2025-4863Advaya Softech GEMS ERP Portal studentLogin.action SQL injection8.6v3.10.4%2025-05-18
CVE-2025-4862PHPGurukul Directory Management System searchdata.php cross-site scripting6.1v3.10.5%2025-05-18
CVE-2025-4861PHPGurukul Beauty Parlour Management System admin-profile.php SQL injection9.8v3.10.6%2025-05-18
CVE-2025-4860D-Link DAP-2695 Static Pool settings page adv_dhcps.php cross-site scripting4.8v3.10.8%2025-05-18
CVE-2025-4859D-Link DAP-2695 MAC Bypass settings page adv_macbypass.php cross-site scripting4.8v3.10.9%2025-05-18
CVE-2025-4858D-Link DAP-2695 ARP spoofing Prevention page adv_arpspoofing.php cross-site scripting4.8v3.10.8%2025-05-18
CVE-2025-4852TOTOLINK A3002R VPN page cross-site scripting3.4NVD v3.10.4%2025-05-18
CVE-2025-4851TOTOLINK N300RH cstecgi.cgi setUploadUserData command injection9.8v3.11.5%2025-05-18
CVE-2025-4850TOTOLINK N300RH cstecgi.cgi setUnloadUserData command injection5.3CNA v4.01.2%2025-05-18
CVE-2025-4849TOTOLINK N300RH cstecgi.cgi CloudACMunualUpdateUserdata command injection9.8v3.11.5%2025-05-18
CVE-2025-4848FreeFloat FTP Server RECV command buffer overflow9.8v3.10.7%2025-05-18
CVE-2025-4847FreeFloat FTP Server MLS command buffer overflow9.8v3.10.7%2025-05-18
CVE-2025-4846FreeFloat FTP Server MPUT command buffer overflow9.8v3.10.7%2025-05-18
CVE-2025-4845FreeFloat FTP Server TRACE command buffer overflow9.8v3.10.7%2025-05-18
CVE-2025-4844FreeFloat FTP Server CD command buffer overflow9.8v3.10.7%2025-05-18
CVE-2025-4843D-Link DCS-932L udev SubUPnPCSInit stack-based overflow9.8v3.11.3%2025-05-18
CVE-2025-3715Bold Page Builder WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-05-18Fix
CVE-2025-48187infiniflow ragflow missing brute-force protection9.8v3.10.5%2025-05-17
CVE-2025-47948Cocotais Bot has builtin .echo command injection7.2CNA v3.10.4%2025-05-17Fix
CVE-2025-47945Donetick has Weak Default JWT Secret9.1CNA v3.10.7%2025-05-17Fix
CVE-2025-47931LibreNMS stored cross-site scripting vulnerability in poller group name2.1CNA v4.010.1%2025-05-17Fix
CVE-2025-47273setuptools PackageIndex.download path traversal7.7CNA v4.01.5%2025-05-17Exploit codeFix
CVE-2025-33103IBM i privilege escalation8.5CNA v3.10.4%2025-05-17Fix
CVE-2025-4919Mozilla Firefox out-of-bounds access when optimizing linear sums8.8CISA ADP v3.18.6%2025-05-17Fix
CVE-2025-4918Mozilla Firefox out-of-bounds access when resolving Promise objects9.8CISA ADP v3.19.4%2025-05-17Fix
CVE-2025-4842D-Link DCS-932L ucp isUCPCameraNameChanged stack-based overflow9.8v3.11.3%2025-05-17
CVE-2025-4841D-Link DCS-932L gpio sub_404780 stack-based overflow9.8v3.11.3%2025-05-17
CVE-2025-4839itwanger paicoding CrossUtil.java cross-domain policy8.1v3.10.3%2025-05-17
CVE-2025-4838kanwangzjm Funiture Login LoginServlet.java doPost redirect5.3CNA v4.00.4%2025-05-17
CVE-2025-4837Projectworlds Student Project Allocation System make_group_sql.php SQL injection9.8v3.10.5%2025-05-17
CVE-2025-4836Projectworlds Life Insurance Management System deleteAgent.php SQL injection9.8v3.10.5%2025-05-17
CVE-2025-4835TOTOLINK A702R/A3002R/A3002RU HTTP POST request formWlanRedirect buffer overflow8.7CNA v4.00.8%2025-05-17
CVE-2025-4834TOTOLINK A702R/A3002R/A3002RU HTTP POST request formSetLg buffer overflow8.7CNA v4.00.8%2025-05-17
CVE-2025-4833TOTOLINK A702R/A3002R/A3002RU HTTP POST request formNtp buffer overflow8.7CNA v4.00.8%2025-05-17
CVE-2025-4832TOTOLINK A702R/A3002R/A3002RU HTTP POST request formDosCfg buffer overflow8.7CNA v4.00.8%2025-05-17
CVE-2025-4831TOTOLINK A702R/A3002R/A3002RU HTTP POST request formSiteSurveyProfile buffer overflow8.7CNA v4.00.8%2025-05-17
CVE-2025-4830TOTOLINK A702R/A3002R/A3002RU HTTP POST request formSysCmd buffer overflow8.7CNA v4.00.8%2025-05-17
CVE-2025-4829TOTOLINK A702R/A3002R/A3002RU HTTP POST request formStats sub_40BE30 buffer overflow8.7CNA v4.00.8%2025-05-17
CVE-2025-4827TOTOLINK A702R/A3002R/A3002RU HTTP POST request formSaveConfig buffer overflow8.7CNA v4.00.8%2025-05-17
CVE-2025-4826TOTOLINK A702R/A3002R/A3002RU HTTP POST request formWirelessTbl buffer overflow8.7CNA v4.00.8%2025-05-17
CVE-2025-4825TOTOLINK A702R/A3002R/A3002RU HTTP POST request formDMZ buffer overflow8.7CNA v4.00.8%2025-05-17
CVE-2025-4824TOTOLINK A702R/A3002R/A3002RU HTTP POST request formWsc buffer overflow8.7CNA v4.00.8%2025-05-17
CVE-2025-4823TOTOLINK A702R/A3002R/A3002RU HTTP POST request formReflashClientTbl submit-url buffer overflow8.7CNA v4.00.8%2025-05-17
CVE-2025-4819y_project RuoYi Offline Logout batchForceLogout improper authorization2.3CNA v4.00.5%2025-05-17
CVE-2025-4818SourceCodester Doctor's Appointment System GET parameter delete-doctor.php SQL injection9.8v3.10.5%2025-05-17
CVE-2025-4817SourceCodester Doctor's Appointment System GET parameter delete-appointment.php SQL injection9.8v3.10.5%2025-05-17
CVE-2025-4816SourceCodester Doctor's Appointment System GET parameter appointment.php SQL injection9.8v3.10.5%2025-05-17
CVE-2025-4815Campcodes Sales and Inventory System supplier_update.php SQL injection9.8v3.10.5%2025-05-17
CVE-2025-4814Campcodes Sales and Inventory System supplier_add.php SQL injection9.8v3.10.5%2025-05-17
CVE-2025-4669Booking Calendar WordPress plugin stored cross-site scripting5.4v3.10.3%2025-05-17Fix
CVE-2025-4610WP-Members WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2025-05-17Fix
CVE-2025-4391Echo RSS Feed Post Generator WordPress plugin unauthenticated arbitrary file upload9.8CNA v3.10.7%2025-05-17Fix
CVE-2025-4389Crawlomatic Multipage Scraper Post Generator WordPress plugin unauthenticated arbitrary file upload9.8CNA v3.11.0%2025-05-17Exploit codeFix
CVE-2025-4194AlT Monitoring WordPress plugin cross-site request forgery to stored cross-site scripting6.1CNA v3.10.1%2025-05-17
CVE-2025-4190CSV Mass Importer WordPress plugin Admin+ arbitrary file upload7.2CISA ADP v3.10.6%2025-05-17Exploit code
CVE-2025-4189Audio Comments WordPress plugin cross-site request forgery to stored cross-site scripting6.1CNA v3.10.1%2025-05-17
CVE-2025-4101MultiVendorX delete_fpm_product function incorrect authorization4.3v3.10.3%2025-05-17Fix
CVE-2025-3888Jupiterx Core WordPress plugin stored cross-site scripting5.4v3.10.3%2025-05-17Fix
CVE-2025-3812WPBot Pro Wordpress Chatbot plugin authenticated (Subscriber+) arbitrary file deletion8.1CNA v3.10.6%2025-05-17Fix
CVE-2025-3527EventON Pro WordPress plugin unauthorized access5.4v3.10.2%2025-05-17Fix
CVE-2025-1706GPU DDK improper locking when accessing the pvr_exp_fence object7.5CISA ADP v3.10.4%2025-05-17Fix
CVE-2025-48188GNU PSPP out-of-bounds read5.5v3.10.2%2025-05-16
CVE-2025-48175aomedia libavif integer overflow6.5v3.10.3%2025-05-16Fix
CVE-2025-48174aomedia libavif integer overflow9.1v3.10.4%2025-05-16Fix
CVE-2025-48146SEO Flow by LupsOnline WordPress plugin CSRF to stored XSS6.1NVD v3.10.1%2025-05-16Fix
CVE-2025-48144Import Export For WooCommerce WordPress plugin CSRF to stored XSS6.1NVD v3.10.1%2025-05-16
CVE-2025-48138BERTHA AI WordPress plugin broken access control8.8v3.10.3%2025-05-16
CVE-2025-48137Interview WordPress plugin SQL injection6.5NVD v3.10.3%2025-05-16
CVE-2025-48136Mortgage Calculator Estatik WordPress plugin local file inclusion8.8v3.10.5%2025-05-16
CVE-2025-48135Aptivada for WP WordPress plugin cross-site scripting (XSS)5.4v3.10.2%2025-05-16
CVE-2025-48134WP Tabs WordPress plugin PHP object injection7.2v3.10.5%2025-05-16Fix
CVE-2025-48132X Addons for Elementor WordPress plugin cross-site scripting (XSS)5.4v3.10.2%2025-05-16Fix
CVE-2025-48131UltraAddons Elementor Lite WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-05-16
CVE-2025-48128Sharespine Woocommerce Connector WordPress plugin broken access control4.3CNA v3.10.2%2025-05-16Fix
CVE-2025-48127Push notification for Mobile and Web app WordPress plugin broken access control6.5CNA v3.10.3%2025-05-16Fix
CVE-2025-48121WP Notes Widget WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-05-16
CVE-2025-48120MapSVG Lite WordPress plugin arbitrary shortcode execution vulnerability5.3CNA v3.10.3%2025-05-16Fix
CVE-2025-48119RS WP Book Showcase WordPress plugin content injection5.3CNA v3.10.3%2025-05-16Fix
CVE-2025-48117WooCommerce POS WordPress plugin broken access control5.3CNA v3.10.3%2025-05-16Fix
CVE-2025-48116EventON WordPress plugin broken access control5.3CNA v3.10.3%2025-05-16Fix
CVE-2025-48115ValidateCertify WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2025-05-16Fix
CVE-2025-48114ShayanWeb Admin FontChanger WordPress plugin cross-site request forgery (CSRF) to stored XSS7.1CNA v3.10.1%2025-05-16Fix
CVE-2025-48113Broadstreet WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-05-16Fix
CVE-2025-48112Dot html,php,xml etc pages WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-05-16
CVE-2025-48080Uncanny Toolkit for LearnDash WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-05-16Fix
CVE-2025-48079ProfileGrid WordPress plugin broken access control4.3CNA v3.10.2%2025-05-16Fix
CVE-2025-47930Zulip Server has access control bypass for restrictions on creation of specific channel types5.3CNA v4.00.3%2025-05-16Fix
CVE-2025-47916invisioncommunity Invision Power Board server-side template injection9.8v3.183.7%2025-05-16NucleiMetasploitExploit codeFix
CVE-2025-47809Wibu CodeMeter least privilege violation8.2CNA v3.10.2%2025-05-16Fix
CVE-2025-47794Nextcloud Server temporary file creation race condition2.6CNA v3.10.5%2025-05-16Fix
CVE-2025-47793Nextcloud Server and Groupfolders group folder quota enforcement resource exhaustion4.3CNA v3.10.8%2025-05-16Fix
CVE-2025-47792Nextcloud Desktop 3rdparty applications can create share links via socket API5.0CNA v3.10.2%2025-05-16Fix
CVE-2025-47791Nextcloud Server's test remote endpoint is not rate limited4.3CNA v3.10.4%2025-05-16Fix
CVE-2025-47790Nextcloud Server doesn't request second factor after session timeout6.4CNA v3.10.4%2025-05-16Fix
CVE-2025-47693Fat Services Booking WordPress plugin local file inclusion7.5CNA v3.10.6%2025-05-16
CVE-2025-47567Video Player and FullScreen Video Background WordPress plugin SQL injection7.6CNA v3.10.4%2025-05-16
CVE-2025-47564EventON WordPress plugin broken access control5.3CNA v3.10.4%2025-05-16
CVE-2025-47563CURCY WordPress plugin arbitrary shortcode execution vulnerability5.3CNA v3.10.3%2025-05-16
CVE-2025-47562MapSVG WordPress plugin content injection5.3CNA v3.10.3%2025-05-16Fix
CVE-2025-47560MapSVG WordPress plugin broken access control5.0CNA v3.10.3%2025-05-16Fix
CVE-2025-47557MapSVG WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-05-16Fix
CVE-2025-47556CSS3 Compare Pricing Tables for WordPress plugin broken access control5.4CNA v3.10.3%2025-05-16Fix
CVE-2025-47534Wordpress Auto Spinner plugin broken access control4.3CNA v3.10.3%2025-05-16Fix
CVE-2025-46464Ads Pro WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-05-16
CVE-2025-40907FCGI, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library5.3CISA ADP v3.10.6%2025-05-16Fix
CVE-2025-40906BSON::XS for Perl includes a bundled libbson, which has several vulnerabilities9.8CISA ADP v3.10.6%2025-05-16
CVE-2025-40632Cross-site scripting (XSS) vulnerability in IceWarp Mail Server6.1v3.10.2%2025-05-16Fix
CVE-2025-40631HTTP host header injection vulnerability in IceWarp Mail Server6.1v3.10.2%2025-05-16Fix
CVE-2025-40630Open redirection vulnerability in IceWarp Mail Server6.1v3.10.5%2025-05-16NucleiFix
CVE-2025-40629Path traversal vulnerability in PNETLab8.7CNA v4.00.8%2025-05-16Exploit code
CVE-2025-39537Better Customer List for WooCommerce WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-05-16
CVE-2025-39511Pinterest Automatic Pin WordPress plugin broken access control4.3CNA v3.10.3%2025-05-16
CVE-2025-39509TNC FlipBook WordPress plugin cross-site scripting (XSS)5.4v3.10.2%2025-05-16Fix
CVE-2025-39507Nasa Core WordPress plugin local file inclusion8.8NVD v3.10.8%2025-05-16Fix
CVE-2025-39493Rankie WordPress plugin broken access control8.8v3.10.3%2025-05-16Fix
CVE-2025-39492WHMpress WordPress plugin local file inclusion7.5CNA v3.10.5%2025-05-16
CVE-2025-39491WHMpress WordPress plugin local file inclusion8.1CNA v3.10.4%2025-05-16
CVE-2025-39482Eventer WordPress plugin broken access control8.8v3.10.5%2025-05-16Fix
CVE-2025-39481Eventer WordPress plugin SQL injection9.8v3.10.5%2025-05-16Fix
CVE-2025-37890Linux kernel HFSC packet scheduler use-after-free7.8CNA v3.10.2%2025-05-16Fix
CVE-2025-32962Flask-AppBuilder open redirect vulnerability using HTTP host injection4.3CNA v3.10.2%2025-05-16Fix
CVE-2025-32643WPGYM WordPress plugin SQL injection9.3CNA v3.10.5%2025-05-16Fix
CVE-2025-32407Samsung Internet improper certificate validation5.9CISA ADP v3.10.3%2025-05-16Exploit code
CVE-2025-32310QuickCal WordPress plugin CSRF to privilege escalation8.8CNA v3.10.2%2025-05-16Fix
CVE-2025-32307Chameleon HTML5 Audio Player With/Without Playlist WordPress plugin SQL injection8.5CNA v3.10.3%2025-05-16
CVE-2025-32306Radio Player Shoutcast and Icecast WordPress plugin SQL injection8.5CNA v3.10.3%2025-05-16Fix
CVE-2025-32301CountDown Pro WP WordPress plugin SQL injection8.5CNA v3.10.3%2025-05-16
CVE-2025-32299QuickCal WordPress plugin sensitive data exposure4.3CNA v3.10.3%2025-05-16Fix
CVE-2025-32296Simple Link Directory Pro WordPress plugin broken access control5.3CNA v3.10.3%2025-05-16Fix
CVE-2025-32295Salon Booking Wordpress plugin broken access control4.3CNA v3.10.3%2025-05-16
CVE-2025-32290Sticky HTML5 Music Player WordPress plugin SQL injection8.5CNA v3.10.3%2025-05-16
CVE-2025-32287Responsive HTML5 Audio Player PRO With Playlist WordPress plugin SQL injection8.5CNA v3.10.3%2025-05-16
CVE-2025-32245Featured Posts Scroll WordPress plugin CSRF to stored cross-site scripting (XSS)7.1CNA v3.10.1%2025-05-16
CVE-2025-32180Product Carousel For WooCommerce WoorouSell WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-05-16Fix
CVE-2025-31928Multimedia Responsive Carousel with Image Video Audio Support WordPress plugin SQL injection8.5CNA v3.10.3%2025-05-16Fix
CVE-2025-31926Sticky Radio Player WordPress plugin SQL injection8.5CNA v3.10.3%2025-05-16
CVE-2025-31923CSS3 Accordions for WordPress plugin broken access control5.4CNA v3.10.3%2025-05-16Fix
CVE-2025-31922CSS3 Accordions for WordPress plugin CSRF to stored XSS7.1CNA v3.10.1%2025-05-16Fix
CVE-2025-31921WP Ultimate Tours Builder WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-05-16
CVE-2025-31915Pixel Form BuilderPlugin and Autoresponder WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.1%2025-05-16Fix
CVE-2025-31641UberSlider WordPress plugin SQL injection8.5CNA v3.10.4%2025-05-16Fix
CVE-2025-31640Magic Responsive Slider and Carousel WordPress plugin SQL injection8.5CNA v3.10.4%2025-05-16Fix
CVE-2025-31639WordPress Spare theme cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-05-16
CVE-2025-31637SHOUT WordPress plugin SQL injection8.5CNA v3.10.4%2025-05-16
CVE-2025-31630WordPress The Business theme broken access control5.3CNA v3.10.3%2025-05-16
CVE-2025-31071HotStar Multi-Purpose Business WordPress theme broken access control5.3CNA v3.10.3%2025-05-16
CVE-2025-31068WordPress Seven Stars theme cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-05-16
CVE-2025-31066Acerola WordPress theme broken access control5.3CNA v3.10.4%2025-05-16
CVE-2025-31065WordPress Rozario theme broken access control5.3CNA v3.10.3%2025-05-16
CVE-2025-31063Wishlist WordPress plugin broken access control4.3CNA v3.10.3%2025-05-16
CVE-2025-31062Wishlist WordPress plugin sensitive data exposure4.3CNA v3.10.3%2025-05-16
CVE-2025-22233Spring Framework DataBinder Case Sensitive Match Exception3.1CNA v3.10.4%2025-05-16Fix
CVE-2025-4813PHPGurukul Human Metapneumovirus Testing Management System edit-phlebotomist.php SQL injection9.8v3.10.6%2025-05-16
CVE-2025-4812PHPGurukul Human Metapneumovirus Testing Management System profile.php SQL injection9.8v3.10.6%2025-05-16
CVE-2025-4811CodeAstro Pharmacy Management System Login index.php SQL injection9.8v3.10.5%2025-05-16
CVE-2025-4810Tenda AC7 SetRebootTimer formSetRebootTimer stack-based overflow8.7CNA v4.01.0%2025-05-16
CVE-2025-4809Tenda AC7 setMacFilterCfg fromSafeSetMacFilter stack-based overflow8.7CNA v4.01.3%2025-05-16
CVE-2025-4808PHPGurukul Park Ticketing Management System add-normal-ticket.php SQL injection8.8v3.10.6%2025-05-16
CVE-2025-4807SourceCodester Online Student Clearance System exposure of information through directory listing7.5v3.11.1%2025-05-16
CVE-2025-4806SourceCodester/oretnom23 Stock Management System view_bo SQL injection8.8v3.10.5%2025-05-16
CVE-2025-4805WatchGuard Firebox stored cross-site-scripting (XSS) vulnerability in Acces Portal Configuration4.8CNA v4.00.5%2025-05-16Fix
CVE-2025-4804WatchGuard Firebox stored cross-site-scripting (XSS) vulnerability in Hotpot Configuration4.8CNA v4.00.4%2025-05-16Fix
CVE-2025-4802The GNU C Library glibc untrusted search path7.8CISA ADP v3.10.6%2025-05-16Exploit codeFix
CVE-2025-4795gongfuxiang Schoolcms index.php SaveInfo SQL injection7.2v3.10.5%2025-05-16
CVE-2025-4794PHPGurukul Online Course Registration news.php SQL injection9.8v3.10.6%2025-05-16
CVE-2025-4793PHPGurukul Online Course Registration edit-student-profile.php SQL injection9.8v3.10.7%2025-05-16
CVE-2025-4792FreeFloat FTP Server MDELETE command buffer overflow9.8v3.10.7%2025-05-16
CVE-2025-4791FreeFloat FTP Server HASH command buffer overflow9.8v3.10.7%2025-05-16
CVE-2025-4790FreeFloat FTP Server GLOB command buffer overflow9.8v3.10.7%2025-05-16
CVE-2025-4789FreeFloat FTP Server LCD command buffer overflow9.8v3.10.7%2025-05-16
CVE-2025-4788FreeFloat FTP Server delete command buffer overflow9.8v3.10.7%2025-05-16
CVE-2025-4787SourceCodester/oretnom23 Stock Management System view_sale SQL injection8.8v3.10.5%2025-05-16
CVE-2025-4786SourceCodester/oretnom23 Stock Management System view_return SQL injection8.8v3.10.5%2025-05-16
CVE-2025-4785PHPGurukul Daily Expense Tracker System user-profile.php SQL injection9.8v3.10.7%2025-05-16
CVE-2025-4782SourceCodester/oretnom23 Stock Management System view_receiving SQL injection8.8v3.10.6%2025-05-16
CVE-2025-4781PHPGurukul Park Ticketing Management System forgot-password.php SQL injection8.8v3.10.6%2025-05-16
CVE-2025-4780PHPGurukul Park Ticketing Management System foreigner-search.php SQL injection9.8v3.10.4%2025-05-16
CVE-2025-4778PHPGurukul Park Ticketing Management System normal-search.php SQL injection8.8v3.10.4%2025-05-16
CVE-2025-4777PHPGurukul Park Ticketing Management System view-foreigner-ticket.php SQL injection8.8v3.10.4%2025-05-16
CVE-2025-4773PHPGurukul Online Course Registration level.php SQL injection9.8v3.10.5%2025-05-16
CVE-2025-4772PHPGurukul Online Course Registration department.php SQL injection9.8v3.10.6%2025-05-16
CVE-2025-4771PHPGurukul Online Course Registration course.php SQL injection9.8v3.10.5%2025-05-16
CVE-2025-4770PHPGurukul Park Ticketing Management System view-normal-ticket.php SQL injection8.8v3.10.4%2025-05-16
CVE-2025-4769CBEWIN Anytxt Searcher ATService.exe uncontrolled search path7.3CNA v4.00.2%2025-05-16
CVE-2025-4768Feng_ha_ha/megagao ssm-erp/production_ssm PictureServiceImpl.java uploadPicture unrestricted upload5.3CNA v4.00.3%2025-05-16
CVE-2025-4767defog-ai introspect Test endpoint integration_routes.py test_custom_tool code injection4.8CNA v4.00.2%2025-05-16
CVE-2025-4766PHPGurukul Zoo Management System profile.php SQL injection9.8v3.10.5%2025-05-16
CVE-2025-4765PHPGurukul Zoo Management System contactus.php SQL injection9.8v3.10.5%2025-05-16
CVE-2025-4761PHPGurukul Complaint Management System admin-profile.php SQL injection9.8v3.10.5%2025-05-16
CVE-2025-4759lockfile-lint-api vulnerable to incorrect behavior order5.3NVD v3.10.4%2025-05-16Fix
CVE-2025-4758PHPGurukul Beauty Parlour Management System contact.php SQL injection9.8v3.10.5%2025-05-16
CVE-2025-4757PHPGurukul Beauty Parlour Management System forgot-password.php SQL injection9.8v3.10.5%2025-05-16
CVE-2025-4756D-Link DI-7003GV2 restart.asp denial of service7.5v3.11.8%2025-05-16
CVE-2025-4755D-Link DI-7003GV2 netconfig.asp sub_497DE4 improper authentication5.3NVD v3.17.3%2025-05-16
CVE-2025-4753D-Link DI-7003GV2 login.data information disclosure6.9CNA v4.01.1%2025-05-16
CVE-2025-4752D-Link DI-7003GV2 install_base.data information disclosure6.9CNA v4.01.1%2025-05-16
CVE-2025-4751D-Link DI-7003GV2 index.data information disclosure7.5v3.11.6%2025-05-16
CVE-2025-4750D-Link DI-7003GV2 Configuration get_version.data information disclosure6.9CNA v4.01.1%2025-05-16
CVE-2025-4749D-Link DI-7003GV2 Factory Reset backup.asp sub_4983B0 denial of service8.7CNA v4.01.4%2025-05-16
CVE-2025-4747Bohua NetDragon Firewall ip_status.php command injection5.3CNA v4.01.2%2025-05-16
CVE-2025-4746Campcodes Sales and Inventory System purchase_delete.php SQL injection9.8v3.10.5%2025-05-16
CVE-2025-4745code-projects Employee Record System current_employees.php cross-site scripting5.4v3.10.4%2025-05-16
CVE-2025-4744code-projects Employee Record System edit_employee.php cross-site scripting4.6v3.10.4%2025-05-16
CVE-2025-4743code-projects Employee Record System getData.php SQL injection8.8v3.10.5%2025-05-16
CVE-2025-4742XU-YIJIE grpo-flat grpo_vanilla.py main deserialization4.8CNA v4.00.2%2025-05-16
CVE-2025-4741Campcodes Sales and Inventory System purchase_add.php SQL injection9.8v3.10.5%2025-05-16
CVE-2025-4740BeamCtrl Airiana coef deserialization4.8CNA v4.00.2%2025-05-16
CVE-2025-4739Projectworlds Hospital Database Management System medicines_info.php SQL injection9.8v3.10.5%2025-05-16
CVE-2025-4736PHPGurukul Daily Expense Tracker register.php SQL injection9.8v3.10.5%2025-05-16
CVE-2025-4735Campcodes Sales and Inventory System product.php unrestricted upload8.8v3.10.4%2025-05-16
CVE-2025-4734Campcodes Sales and Inventory System ci_update.php SQL injection9.8v3.10.6%2025-05-16
CVE-2025-4733TOTOLINK A3002R/A3002RU HTTP POST request formIpQoS buffer overflow8.7CNA v4.00.8%2025-05-16
CVE-2025-4732TOTOLINK A3002R/A3002RU HTTP POST request formFilter buffer overflow8.7CNA v4.00.8%2025-05-16
CVE-2025-4731TOTOLINK A3002R/A3002RU HTTP POST request formPortFw buffer overflow8.7CNA v4.00.8%2025-05-16
CVE-2025-4730TOTOLINK A3002R/A3002RU HTTP POST request formMapDel buffer overflow8.7CNA v4.00.8%2025-05-16
CVE-2025-4729TOTOLINK A3002R/A3002RU HTTP POST request formMapDelDevice command injection5.3CNA v4.01.2%2025-05-16
CVE-2025-4679Synology Active Backup for Microsoft 365 insufficiently protected credentials6.5CNA v3.11.1%2025-05-16Exploit codeFix
CVE-2025-4600Google Cloud Classic Application Load Balancer chunked encoding validation HTTP request smuggling8.7CNA v4.00.2%2025-05-16Fix
CVE-2025-4478FreeRDP RDP packet parser null pointer dereference6.5NVD v3.10.5%2025-05-16Fix
CVE-2025-4476libsoup WWW-Authenticate header parser null pointer dereference4.3CNA v3.10.4%2025-05-16Fix
CVE-2025-4211Qt improper link resolution before file access in QFileSystemEngine on Windows7.3CNA v4.00.2%2025-05-16
CVE-2025-4169Posts per Cat [Unmaintained] WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2025-05-16Fix
CVE-2025-3624Missing authorization vulnerability in Hitachi Ops Center Analyzer4.3CNA v3.10.2%2025-05-16Fix
CVE-2025-3516Simple Lightbox WordPress plugin Contributor+ stored XSS5.9CISA ADP v3.10.3%2025-05-16Fix
CVE-2025-3201Kali Forms WordPress plugin Contributor+ stored XSS5.9CISA ADP v3.10.3%2025-05-16Fix
CVE-2025-2306Improper access control vulnerability in LIVE CONTRACT5.9CNA v3.10.5%2025-05-16Fix
CVE-2025-2305Local file inclusion vulnerability in LIVE CONTRACT8.6CNA v3.10.4%2025-05-16Fix
CVE-2025-1975Improper validation of array index in Ollama/Ollama7.5CNA v3.00.5%2025-05-16
CVE-2025-1531Authentication credentials leakage vulnerability in Hitachi Ops Center Analyzer viewpoint OVF6.5CNA v3.10.3%2025-05-16Fix
CVE-2025-1245Bypass Connection Restriction vulnerability in Hitachi Ops Center Analyzer6.5CNA v3.10.2%2025-05-16Fix
CVE-2025-48051Lichess Lila cross-site scripting6.1v3.10.4%2025-05-15
CVE-2025-48050cure53 DOMPurify path traversal7.5CNA v3.10.5%2025-05-15Fix
CVE-2025-48027MutonUfoAI pGina.Fork authentication bypass by spoofing5.4CNA v3.10.3%2025-05-15
CVE-2025-48024BlueWave Checkmate system information disclosure5.0CNA v3.10.3%2025-05-15Fix
CVE-2025-47929DumbDrop vulnerable to DOM XSS via file upload2.1CNA v4.00.4%2025-05-15
CVE-2025-47928Spotipy repo vulnerable to secrets exfiltration via `pull_request_target`9.1CNA v3.10.6%2025-05-15Exploit code
CVE-2025-47789Horilla open redirect vulnerability in Login6.1CNA v3.10.2%2025-05-15Fix
CVE-2025-47788Atheos Missing Path Validation enables path traversal in Controller.php9.4CNA v4.00.5%2025-05-15Fix
CVE-2025-47787Emlog Pro Contains a file upload8.9CNA v4.00.7%2025-05-15Fix
CVE-2025-47786Emlog vulnerable to stored cross-site scripting1.9CNA v4.00.3%2025-05-15
CVE-2025-47785Emlog admin/article_save.php SQL injection8.3CNA v3.10.8%2025-05-15
CVE-2025-47784Emlog vulnerable to deserialization of untrusted data6.6CNA v4.00.5%2025-05-15
CVE-2025-47774Vyper's `slice` may elide side-effects when output length is 02.9CNA v4.00.5%2025-05-15
CVE-2025-47580Front End Users WordPress plugin broken access control9.8v3.10.3%2025-05-15
CVE-2025-47287Tornado vulnerable to excessive logging caused by malformed multipart form data7.5CNA v3.10.7%2025-05-15Fix
CVE-2025-47285Vyper's `concat` builtin may elide side-effects for zero-length arguments2.9CNA v4.00.4%2025-05-15
CVE-2025-47279undici denial of service attack via bad certificate data3.1CNA v3.10.3%2025-05-15Fix
CVE-2025-47275Brute force Authentication Tags of CookieStore Sessions in Auth0-PHP SDK9.1CNA v3.10.5%2025-05-15Fix
CVE-2025-47161Microsoft Defender For Endpoint elevation of privilege7.8CNA v3.10.8%2025-05-15Exploit codeFix
CVE-2025-46834Modular Account allowlist module incorrect authorization6.6CNA v4.00.4%2025-05-15
CVE-2025-46053webERP A SQL injection5.1CISA ADP v3.10.2%2025-05-15
CVE-2025-46052webERP error-based SQL injection9.8CISA ADP v3.10.5%2025-05-15
CVE-2025-44185Mayuri K Best Employee Management System cross-site request forgery5.4CISA ADP v3.10.2%2025-05-15
CVE-2025-44183Anujk305 Vehicle Record Management System cross-site scripting6.1CISA ADP v3.10.3%2025-05-15
CVE-2025-44182Anujk305 Vehicle Record Management System cross-site scripting6.1CISA ADP v3.10.3%2025-05-15
CVE-2025-44181Anujk305 Vehicle Record Management System cross-site scripting6.1CISA ADP v3.10.3%2025-05-15
CVE-2025-44180Anujk305 Vehicle Record Management System cross-site scripting6.1CISA ADP v3.10.3%2025-05-15
CVE-2025-44110FluxBB cross-site scripting5.4CISA ADP v3.10.3%2025-05-15
CVE-2025-43853bytecodealliance wasm-micro-runtime iwasm vulnerable to filesystem sandbox escape with symlink when7.0CNA v4.00.3%2025-05-15Fix
CVE-2025-32922WP2LEADS WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2025-05-15Fix
CVE-2025-32738I-O DATA DEVICE HDL-TC1 missing authentication6.9CNA v4.00.4%2025-05-15
CVE-2025-32002I-O DATA DEVICE HDL-TC1 OS command improper neutralization9.3CNA v4.01.7%2025-05-15
CVE-2025-31947Mattermost repeated LDAP login failures can lock an LDAP account5.8CNA v3.10.3%2025-05-15Fix
CVE-2025-30476Dell PowerScale InsightIQ resource exhaustion5.3CNA v3.10.5%2025-05-15Fix
CVE-2025-30475Dell PowerScale InsightIQ improper privilege management8.1CNA v3.10.4%2025-05-15Fix
CVE-2025-30421Stack-based buffer overflow in DrObjectStorage::XML_Serialize in NI Circuit Design Suite8.5CNA v4.00.2%2025-05-15Fix
CVE-2025-30420Out-of-bounds read in Bitmap::InternalDraw in NI Circuit Design Suite8.5CNA v4.00.2%2025-05-15Fix
CVE-2025-30419Out-of-bounds read in GetSymbolBorderRectSize in NI Circuit Design Suite8.5CNA v4.00.2%2025-05-15Fix
CVE-2025-30418Out-of-bounds write in CheckPins in NI Circuit Design Suite8.5CNA v4.00.2%2025-05-15Fix
CVE-2025-30417Out-of-bounds write in Library!DecodeBase64 in NI Circuit Design Suite8.5CNA v4.00.2%2025-05-15Fix
CVE-2025-27525Information exposure vulnerability in JP1/IT Desktop Management 2 Smart Device Manager3.9CNA v3.10.1%2025-05-15Fix
CVE-2025-27524Weak encryption vulnerability in JP1/IT Desktop Management 2 Smart Device Manager5.3CNA v3.10.2%2025-05-15Fix
CVE-2025-27523XXE vulnerability in JP1/IT Desktop Management 2 Smart Device Manager8.7CNA v3.10.4%2025-05-15Fix
CVE-2025-26481Dell PowerScale OneFS resource exhaustion7.5CNA v3.10.5%2025-05-15Fix
CVE-2025-4762Lleidanet PKI eSigna insecure direct object reference (IDOR) vulnerability in eSignaViewer2.0CNA v4.00.3%2025-05-15
CVE-2025-4737TECNO com.transsion.aivoiceassistant cleartext storage of sensitive information6.2CISA ADP v3.10.1%2025-05-15
CVE-2025-4728SourceCodester Best Online News Portal search.php SQL injection9.8v3.10.6%2025-05-15
CVE-2025-4727Meteor livedata_server.js Object.assign redos6.3CNA v4.00.9%2025-05-15Fix
CVE-2025-4726itsourcecode Placement Management System view_student.php SQL injection9.8v3.10.5%2025-05-15
CVE-2025-4725itsourcecode Placement Management System view_drive.php SQL injection9.8v3.10.5%2025-05-15
CVE-2025-4724itsourcecode Placement Management System student_profile.php SQL injection9.8v3.10.5%2025-05-15
CVE-2025-4723itsourcecode Placement Management System all_student.php SQL injection9.8v3.10.5%2025-05-15
CVE-2025-4722itsourcecode Placement Management System edit_profile.php SQL injection9.8v3.10.5%2025-05-15
CVE-2025-4721itsourcecode Placement Management System drive.php SQL injection9.8v3.10.5%2025-05-15
CVE-2025-4720SourceCodester Student Result Management System drop_student.php path traversal5.3CNA v4.00.6%2025-05-15
CVE-2025-4719Campcodes Sales and Inventory System cash_transaction.php SQL injection9.8v3.10.5%2025-05-15
CVE-2025-4718Campcodes Sales and Inventory System customer_add.php SQL injection9.8v3.10.5%2025-05-15
CVE-2025-4717PHPGurukul Company Visitor Management System visitors-form.php SQL injection9.8v3.10.5%2025-05-15
CVE-2025-4716Campcodes Sales and Inventory System credit_transaction_add.php SQL injection9.8v3.10.5%2025-05-15
CVE-2025-4715Campcodes Sales and Inventory System view_application.php SQL injection9.8v3.10.5%2025-05-15
CVE-2025-4714Campcodes Sales and Inventory System reprint.php SQL injection9.8v3.10.6%2025-05-15
CVE-2025-4713Campcodes Sales and Inventory System print.php SQL injection9.8v3.10.6%2025-05-15
CVE-2025-4712Campcodes Sales and Inventory System account_summary.php SQL injection9.8v3.10.6%2025-05-15
CVE-2025-4711Campcodes Sales and Inventory System stockin_add.php SQL injection9.8v3.10.5%2025-05-15
CVE-2025-4710Campcodes Sales and Inventory System transaction.php SQL injection9.8v3.10.5%2025-05-15
CVE-2025-4709Campcodes Sales and Inventory System transaction_del.php SQL injection9.8v3.10.5%2025-05-15
CVE-2025-4708Campcodes Sales and Inventory System sales_add.php SQL injection9.8v3.10.5%2025-05-15
CVE-2025-4707Campcodes Sales and Inventory System transaction_add.php SQL injection9.8v3.10.5%2025-05-15
CVE-2025-4706Projectworlds Online Examination System Procedure3b_yearwiseVisit.php SQL injection9.8v3.10.5%2025-05-15
CVE-2025-4705PHPGurukul Vehicle Parking Management System view-incomingvehicle-detail.php SQL injection9.8v3.10.5%2025-05-15
CVE-2025-4704PHPGurukul Vehicle Parking Management System edit-category.php SQL injection6.9CNA v4.00.4%2025-05-15
CVE-2025-4703PHPGurukul Vehicle Parking Management System admin-profile.php SQL injection9.8v3.10.5%2025-05-15
CVE-2025-4702PHPGurukul Vehicle Parking Management System add-category.php SQL injection9.8v3.10.5%2025-05-15
CVE-2025-4701VITA-MLLM Freeze-Omni utils.py torch.load deserialization4.8CNA v4.00.2%2025-05-15
CVE-2025-4699PHPGurukul Apartment Visitors Management System visitors-form.php SQL injection9.8v3.10.5%2025-05-15
CVE-2025-4698PHPGurukul Directory Management System forget-password.php SQL injection9.8v3.10.5%2025-05-15
CVE-2025-4697PHPGurukul Directory Management System edit-directory.php SQL injection9.8v3.10.5%2025-05-15
CVE-2025-4696PHPGurukul/Campcodes Cyber Cafe Management System search.php SQL injection8.8v3.10.5%2025-05-15
CVE-2025-4695PHPGurukul/Campcodes Cyber Cafe Management System add-users.php SQL injection8.8v3.10.4%2025-05-15
CVE-2025-4591Weluka Lite WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-05-15
CVE-2025-4589Bon Toolkit WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2025-05-15
CVE-2025-4579WP Content Security WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.4%2025-05-15
CVE-2025-4564TicketBAI Facturas para WooCommerce WordPress plugin unauthenticated arbitrary file deletion9.8CNA v3.11.1%2025-05-15Fix
CVE-2025-4516Python CPython use-after-free in unicode_escape decoder with error handler5.9CNA v4.00.2%2025-05-15Fix
CVE-2025-4126EG-Series WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode6.4CNA v3.10.3%2025-05-15Exploit code
CVE-2025-3917百度站长SEO合集(支持百度/神马/Bing/头条推送) WordPress plugin unauthenticated arbitrary file upload9.8CNA v3.10.9%2025-05-15Fix
CVE-2025-3742Responsive Lightbox and Gallery WordPress plugin Contributor+ stored XSS6.8CISA ADP v3.10.5%2025-05-15Fix
CVE-2025-3446Mattermost Members without Guest Invite Permissions can Add Guests to Teams4.3CNA v3.10.2%2025-05-15Fix
CVE-2025-3440IBM Security Guardium cross-site scripting5.5CNA v3.10.2%2025-05-15Fix
CVE-2025-3053UiPress lite WordPress plugin remote code execution8.8CNA v3.11.0%2025-05-15Fix
CVE-2025-2570Mattermost fails to Check User Access to `ExperimentalSettings`2.7CNA v3.10.3%2025-05-15Fix
CVE-2025-2527Mattermost improper access control to group information4.3CNA v3.10.3%2025-05-15Fix
CVE-2025-2248WP-PManager WordPress plugin Admin+ SQL injection5.4CISA ADP v3.10.2%2025-05-15
CVE-2025-2247WP-PManager WordPress plugin Category deletion via CSRF5.4CISA ADP v3.10.2%2025-05-15
CVE-2025-2203WooCommerce Checkout and Funnel Builder by FunnelKit WordPress plugin Admin+ SQL injection6.1CISA ADP v3.10.3%2025-05-15Fix
CVE-2025-1647XSS in Bootstrap title attribute for Tooltip and Popover5.6CNA v3.10.4%2025-05-15Fix
CVE-2025-1454Ninja Pages WordPress plugin Admin+ stored XSS5.4CISA ADP v3.10.3%2025-05-15
CVE-2025-1303Plugin Oficial Getnet para WooCommerce WordPress plugin unauthenticated reflected XSS6.1CISA ADP v3.10.6%2025-05-15NucleiFix
CVE-2025-1289Plugin Oficial Getnet para WooCommerce WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2025-1288wooexim WordPress plugin CSRF to reflected XSS6.1CISA ADP v3.10.2%2025-05-15
CVE-2025-1286Download HTML TinyMCE Button WordPress plugin reflected XSS6.1CISA ADP v3.10.3%2025-05-15
CVE-2025-1138IBM information server information disclosure4.3CNA v3.10.3%2025-05-15Fix
CVE-2025-1033Badgearoo WordPress plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15
CVE-2025-0921Mitsubishi Electric GENESIS64 multiple services execution with unnecessary privileges6.5CNA v3.10.2%2025-05-15Fix
CVE-2025-0688Spiritual Gifts Survey WordPress plugin unauthenticated CSRF to XSS6.1CISA ADP v3.10.2%2025-05-15
CVE-2025-0687Spiritual Gifts Survey WordPress plugin unauthenticated CSRF to XSS6.1CISA ADP v3.10.2%2025-05-15
CVE-2025-0329AI ChatBot for WordPress WPBot plugin Admin+ stored XSS4.8CISA ADP v3.10.3%2025-05-15Fix
CVE-2025-47889Jenkins WSO2 Oauth Plugin fails to properly Authenticate User Credentials9.8CISA ADP v3.10.6%2025-05-14Fix
CVE-2025-47888Jenkins DingTalk Plugin Unconditionally Disables SSL/TLS Certificate and Hostname Validation5.9CISA ADP v3.10.2%2025-05-14Fix
CVE-2025-47887Jenkins Cadence vManager Plugin is missing permission checks4.3CISA ADP v3.10.3%2025-05-14Fix
CVE-2025-47886Jenkins Cadence vManager Plugin vulnerable to cross-site request forgery4.3CISA ADP v3.10.2%2025-05-14Fix
CVE-2025-47885Jenkins Health Advisor by CloudBees Plugin vulnerable to cross-site scripting8.8CISA ADP v3.10.6%2025-05-14Fix
CVE-2025-47884Jenkins OpenID Connect Provider Plugin incorrectly Validates Crafted Build ID Tokens9.1CISA ADP v3.10.6%2025-05-14Fix
CVE-2025-47783label-studio vulnerable to cross-site scripting (Reflected) via the label_config parameter7.6CNA v4.00.6%2025-05-14NucleiFix
CVE-2025-47782motionEye vulnerable to RCE in add_camera Function Due to unsafe command execution8.9CNA v4.00.5%2025-05-14Fix
CVE-2025-47781Rallly Insufficient Password Login Token Entropy leads to account takeover9.8CNA v3.10.6%2025-05-14
CVE-2025-47778Sulu vulnerable to XXE in SVG file upload Inspector6.1CNA v4.00.4%2025-05-14Fix
CVE-2025-477775IRE client vulnerable to cross-site scripting (XSS) and remote code execution (RCE)9.7CNA v3.10.9%2025-05-14Fix
CVE-2025-47775Bullfrog's DNS over TCP bypasses domain filtering6.2CNA v3.10.5%2025-05-14Fix
CVE-2025-47710Enterprise MFA TFA for Drupal Critical Access bypass SA-CONTRIB-2025-0567.4CISA ADP v3.10.4%2025-05-14Fix
CVE-2025-47709Enterprise MFA TFA for Drupal Critical Access bypass SA-CONTRIB-2025-0556.5CISA ADP v3.10.2%2025-05-14Fix
CVE-2025-47708Enterprise MFA TFA for Drupal Critical cross-site request forgery SA-CONTRIB-2025-0548.8CISA ADP v3.10.2%2025-05-14Fix
CVE-2025-47707Enterprise MFA TFA for Drupal Moderately critical Access bypass SA-CONTRIB-2025-0537.5CISA ADP v3.10.4%2025-05-14Fix
CVE-2025-47706Enterprise MFA TFA for Drupal Moderately critical Access bypass SA-CONTRIB-2025-0524.8CISA ADP v3.10.3%2025-05-14Fix
CVE-2025-47705IFrame Remove Filter Moderately critical cross-site scripting SA-CONTRIB-2025-0516.1CISA ADP v3.10.3%2025-05-14Fix
CVE-2025-47704Klaro Cookie and Consent Management Moderately critical cross-site scripting SA-CONTRIB-2025-0506.1CISA ADP v3.10.2%2025-05-14Fix
CVE-2025-47703COOKiES Consent Management Moderately critical cross-site scripting SA-CONTRIB-2025-0496.1CISA ADP v3.10.2%2025-05-14Fix
CVE-2025-47702oEmbed Providers Moderately critical cross-site scripting SA-CONTRIB-2025-0486.1CISA ADP v3.10.2%2025-05-14Fix
CVE-2025-47701Drupal Restrict route by IP cross-site request forgery8.8CISA ADP v3.10.2%2025-05-14Fix
CVE-2025-47445Eventin WordPress plugin arbitrary file download9.8v3.15.1%2025-05-14NucleiExploit codeFix
CVE-2025-47436Apache ORC: Potential heap buffer overflow during C++ LZO Decompression6.0CNA v4.00.5%2025-05-14Fix
CVE-2025-47292cap-collectif cap Collectif vulnerable to insecure deserialization leading to remote code execution9.5CNA v4.00.7%2025-05-14
CVE-2025-46836net-tools stack-based buffer overflow6.6CNA v3.10.2%2025-05-14Fix
CVE-2025-46786Zoom Workplace Apps cross-site scripting4.3CNA v3.10.3%2025-05-14Fix
CVE-2025-46785Zoom Workplace Apps for Windows buffer over-read6.5CNA v3.10.6%2025-05-14Fix
CVE-2025-44879WS-WN572HP3 upload.cgi buffer overflow7.5CISA ADP v3.10.5%2025-05-14
CVE-2025-44186Mayuri K Best Employee Management System cross-site request forgery5.4CISA ADP v3.10.2%2025-05-14
CVE-2025-44184Mayuri K Best Employee Management System cross-site scripting4.8CISA ADP v3.10.3%2025-05-14
CVE-2025-44024Pichome login form cross-site scripting6.1CISA ADP v3.10.2%2025-05-14
CVE-2025-40595SonicWall SMA1000 server-side request forgery7.2CISA ADP v3.10.4%2025-05-14Fix
CVE-2025-33104IBM WebSphere Application Server Web UI cross-site scripting4.4CNA v3.10.2%2025-05-14Fix
CVE-2025-32421Next.js race condition to cache poisoning3.7CNA v3.10.8%2025-05-14Exploit codeFix
CVE-2025-32363mediDOK deserialization remote code execution9.8CISA ADP v3.10.9%2025-05-14
CVE-2025-30668Zoom Workplace Apps null pointer dereference6.5CNA v3.10.5%2025-05-14Fix
CVE-2025-30667Zoom Workplace Apps null pointer dereference6.5CNA v3.10.5%2025-05-14Fix
CVE-2025-30666Zoom Workplace Apps for Windows null pointer dereference6.5CNA v3.10.5%2025-05-14Fix
CVE-2025-30665Zoom Workplace Apps for Windows null pointer dereference6.5CNA v3.10.5%2025-05-14Fix
CVE-2025-30664Zoom Workplace Apps cross-site scripting6.6CNA v3.10.3%2025-05-14Fix
CVE-2025-30663Zoom Workplace Apps time-of-check time-of-use8.8CNA v3.10.1%2025-05-14Fix
CVE-2025-29691hailey888 oa_system cross-site scripting6.1CISA ADP v3.10.3%2025-05-14
CVE-2025-29690hailey888 oa_system cross-site scripting6.1CISA ADP v3.10.3%2025-05-14
CVE-2025-29689hailey888 oa_system cross-site scripting6.1CISA ADP v3.10.3%2025-05-14
CVE-2025-29688hailey888 oa_system cross-site scripting6.1CISA ADP v3.10.3%2025-05-14
CVE-2025-29686hailey888 oa_system cross-site scripting6.1CISA ADP v3.10.3%2025-05-14
CVE-2025-27891Samsung Exynos 980 out-of-bounds read9.1CISA ADP v3.10.5%2025-05-14Fix
CVE-2025-26864Apache IoTDB: Exposure of sensitive information in IoTDB OpenID Authentication7.5CISA ADP v3.10.7%2025-05-14Fix
CVE-2025-26795Apache IoTDB JDBC driver: Exposure of sensitive information in IoTDB JDBC driver7.5CISA ADP v3.10.7%2025-05-14Fix
CVE-2025-26785Samsung Exynos 980 out-of-bounds write7.5CISA ADP v3.10.4%2025-05-14Fix
CVE-2025-26784Samsung Exynos 980 out-of-bounds write6.5CISA ADP v3.10.3%2025-05-14Fix
CVE-2025-26783Samsung Exynos 2100 denial of service7.5CISA ADP v3.10.4%2025-05-14Fix
CVE-2025-25370realme GT 2 show app only setting information disclosure4.6CISA ADP v3.10.2%2025-05-14
CVE-2025-24969iTop portal user can see any other contact's picture5.0CNA v3.10.3%2025-05-14Fix
CVE-2025-24785iTop dashboard vulnerable to denial of service4.3CNA v3.10.3%2025-05-14Fix
CVE-2025-24026iTop inefficient regular expression complexity5.3CNA v3.10.3%2025-05-14Fix
CVE-2025-24022iTop server vulnerable to portal code injection8.6CNA v3.10.6%2025-05-14Fix
CVE-2025-24021iTop doesn't have mass assignment of fields in the portal form5.0CNA v3.10.3%2025-05-14Fix
CVE-2025-4664Google Chrome Loader insufficient policy enforcement4.3v3.15.4%2025-05-14Exploit codeFix
CVE-2025-4641XML external entity (XXE) injection vulnerability in WebDriverManager9.3CNA v4.00.6%2025-05-14Fix
CVE-2025-4640Out-of-bounds write in pcl8.3CNA v4.00.4%2025-05-14
CVE-2025-4639Improper restriction of XML external entity reference in Peergos8.8CNA v4.00.4%2025-05-14
CVE-2025-4638Improper Pointer Arithmetic in pcl9.8v3.10.5%2025-05-14
CVE-2025-4637Divide by zero in dlib8.7CNA v4.00.5%2025-05-14
CVE-2025-4520Uncanny Automator WordPress plugin missing authorization authenticated plugin settings update4.3v3.10.3%2025-05-14Fix
CVE-2025-4430Unauthorized file manipulation in EZD RP8.6CNA v4.00.3%2025-05-14Fix
CVE-2025-3932Mozilla Thunderbird Tracking Links in Attachments Bypassed Remote Content Blocking6.5CISA ADP v3.10.4%2025-05-14Fix
CVE-2025-3931Red Hat Enterprise Linux 10 yggdrasil: Local privilege escalation in yggdrasil7.8CNA v3.10.2%2025-05-14Fix
CVE-2025-3909Mozilla Thunderbird JavaScript Execution via Spoofed PDF Attachment and file:/// Link8.1CISA ADP v3.10.4%2025-05-14Fix
CVE-2025-3875Mozilla sender spoofing via Malformed from header in Thunderbird7.5CISA ADP v3.10.4%2025-05-14Fix
CVE-2025-3834ManageEngine ADAudit Plus SQL injection8.1CNA v3.11.7%2025-05-14Fix
CVE-2025-3833ManageEngine ADSelfService Plus SQL injection8.1CNA v3.150.5%2025-05-14Fix
CVE-2025-3769Latepoint WordPress plugin unauthenticated insecure direct object reference5.3CNA v3.10.3%2025-05-14Fix
CVE-2025-3623Uncanny Automator WordPress plugin PHP object injection9.1CNA v3.10.8%2025-05-14Fix
CVE-2025-3600Unsafe reflection vulnerability in Telerik UI for ASP.NET AJAX7.5CNA v3.126.3%2025-05-14KCVFix
CVE-2025-2900IBM Semeru Runtime denial of service7.5CNA v3.10.3%2025-05-14Fix
CVE-2025-2875Schneider Electric Modicon Controllers M241/M251 externally controlled resource reference8.7CNA v4.00.4%2025-05-14Fix
CVE-2025-0138Prisma Cloud Compute Edition: Insufficient session expiration vulnerability in the Web interface2.0CNA v4.00.4%2025-05-14Fix
CVE-2025-0137PAN-OS: Improper neutralization of Input in the Management Web interface4.8CNA v4.00.4%2025-05-14Fix
CVE-2025-0136PAN-OS: Unencrypted Data Transfer when using AES-128-CCM on Intel-based hardware devices5.3CNA v4.00.2%2025-05-14Fix
CVE-2025-0135GlobalProtect App on macOS: Non Admin User can Disable the GlobalProtect App5.2CNA v4.00.1%2025-05-14Fix
CVE-2025-0134Cortex XDR Broker VM: Authenticated code injection vulnerability in Broker VM6.5CNA v4.00.5%2025-05-14Fix
CVE-2025-0133PAN-OS: Reflected cross-site scripting (XSS) vulnerability in GlobalProtect Gateway and portal1.2CNA v4.046.3%2025-05-14NucleiEmerging ThreatsExploit codeFix
CVE-2025-0132Cortex XDR Broker VM: Unauthenticated User can Disable Internal services6.9CNA v4.00.4%2025-05-14Fix
CVE-2025-0131OPSWAT MetaDefender Endpoint Security SDK privilege escalation7.1CNA v4.00.2%2025-05-14Fix
CVE-2025-0130PAN-OS: Firewall denial of service in the Web-Proxy feature8.2CNA v4.00.4%2025-05-14Fix
CVE-2025-47905varnish-software Varnish Cache HTTP request smuggling5.4CNA v3.10.4%2025-05-13Fix
CVE-2025-47280Umbraco.Forms.Issues Umbraco.Forms has HTML injection vulnerability in Send email workflow2.3CNA v4.00.3%2025-05-13Fix
CVE-2025-47278Flask uses fallback key instead of current signing key1.8CNA v4.00.2%2025-05-13Fix
CVE-2025-47276ChewKeanHo Actualizer password hashing vulnerability7.5CNA v3.10.3%2025-05-13Fix
CVE-2025-47204Bootstrap Multiselect vulnerable to CSRF and Reflective XSS via arbitrary POST Data6.1CISA ADP v3.10.4%2025-05-13NucleiFix
CVE-2025-46721nosurf vulnerable to CSRF due to non-functional same-origin request checks6.0CNA v4.00.2%2025-05-13Fix
CVE-2025-45867TOTOLINK A3002R stack-based buffer overflow5.4CISA ADP v3.14.9%2025-05-13Emerging Threats
CVE-2025-45866TOTOLINK A3002R buffer overflow5.4CISA ADP v3.10.3%2025-05-13Emerging Threats
CVE-2025-45865TOTOLINK A3002R buffer overflow9.8v3.10.6%2025-05-13
CVE-2025-45864TOTOLINK A3002R buffer overflow5.4CISA ADP v3.14.9%2025-05-13Emerging Threats
CVE-2025-45863TOTOLINK A3002R buffer overflow9.8CISA ADP v3.10.6%2025-05-13
CVE-2025-45861TOTOLINK A3002R buffer overflow9.8v3.10.6%2025-05-13
CVE-2025-45859TOTOLINK A3002R buffer overflow5.4CISA ADP v3.15.0%2025-05-13Emerging Threats
CVE-2025-45858TOTOLINK A3002R OS command injection9.8CISA ADP v3.110.7%2025-05-13Emerging Threats
CVE-2025-45857Edimax Cv-7428ns code injection9.8CISA ADP v3.11.0%2025-05-13
CVE-2025-45746ZKTeco ZKBio CVSecurity hard-coded cryptographic key9.8v3.10.4%2025-05-13Fix
CVE-2025-44831engineercms SQL injection9.8CISA ADP v3.10.4%2025-05-13
CVE-2025-44039Cpplusworld Cp-xr-de21-s missing authentication5.1CISA ADP v3.10.2%2025-05-13
CVE-2025-43572Adobe Dimension out-of-bounds write7.8CNA v3.10.2%2025-05-13Fix
CVE-2025-43571Adobe Substance3D Stager use-after-free7.8CNA v3.10.3%2025-05-13Fix
CVE-2025-43570Adobe Substance3D Stager use-after-free7.8CNA v3.10.3%2025-05-13Fix
CVE-2025-43569Adobe Substance3D Stager out-of-bounds write7.8CNA v3.10.2%2025-05-13Fix
CVE-2025-43568Adobe Substance3D Stager use-after-free7.8CNA v3.10.3%2025-05-13Fix
CVE-2025-43567Adobe Connect cross-site scripting (reflected XSS)9.3CNA v3.10.5%2025-05-13Fix
CVE-2025-43566Adobe ColdFusion improper limitation of a pathname to a restricted directory (path traversal)6.8CNA v3.158.2%2025-05-13Fix
CVE-2025-43565Adobe ColdFusion incorrect authorization8.4CNA v3.117.5%2025-05-13Fix
CVE-2025-43564Adobe ColdFusion incorrect authorization9.1CNA v3.116.8%2025-05-13Exploit codeFix
CVE-2025-43563Adobe ColdFusion improper access control9.1CNA v3.116.7%2025-05-13Fix
CVE-2025-43562Adobe ColdFusion improper neutralization of special elements used in an OS command9.1CNA v3.151.0%2025-05-13Fix
CVE-2025-43561Adobe ColdFusion incorrect authorization9.1CNA v3.123.9%2025-05-13Fix
CVE-2025-43560Adobe ColdFusion improper input validation9.1CNA v3.122.6%2025-05-13Fix
CVE-2025-43559Adobe ColdFusion improper input validation9.1CNA v3.11.5%2025-05-13Fix
CVE-2025-43557Adobe Animate access of uninitialized pointer7.8CNA v3.10.3%2025-05-13Fix
CVE-2025-43556Adobe Animate integer overflow or wraparound7.8CNA v3.10.3%2025-05-13Fix
CVE-2025-43555Adobe Animate integer underflow (wrap or wraparound)7.8CNA v3.10.3%2025-05-13Fix
CVE-2025-43554Adobe Substance3D Modeler out-of-bounds write7.8CNA v3.10.2%2025-05-13Fix
CVE-2025-43553Adobe Substance3D Modeler uncontrolled search path element7.8CNA v3.10.2%2025-05-13Fix
CVE-2025-43551Adobe Substance3D Stager out-of-bounds read5.5CNA v3.10.2%2025-05-13Fix
CVE-2025-43549Adobe Substance3D Stager use-after-free7.8CNA v3.10.3%2025-05-13Fix
CVE-2025-43548Adobe Dimension out-of-bounds write7.8CNA v3.10.2%2025-05-13Fix
CVE-2025-43547Adobe Bridge integer overflow or wraparound7.8CNA v3.10.3%2025-05-13Fix
CVE-2025-43546Adobe Bridge integer underflow (wrap or wraparound)7.8CNA v3.10.3%2025-05-13Fix
CVE-2025-43545Adobe Bridge access of uninitialized pointer7.8CNA v3.10.3%2025-05-13Fix
CVE-2025-43011Missing authorization Check in SAP Landscape Transformation (PCL Basis)7.7CNA v3.10.4%2025-05-13Fix
CVE-2025-43010SAP S/4HANA Cloud Private Edition or on Premise SCM Master Data Layer code injection8.3CNA v3.10.5%2025-05-13Fix
CVE-2025-43009Missing authorization check in SAP Service Parts Management (SPM)6.3CNA v3.10.2%2025-05-13Fix
CVE-2025-43008Missing authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal5.8CNA v3.10.4%2025-05-13Fix
CVE-2025-43007Missing authorization check in SAP Service Parts Management (SPM)6.3CNA v3.10.2%2025-05-13Fix
CVE-2025-43006Cross-site scripting vulnerability in SAP Supplier Relationship Management6.1CNA v3.10.3%2025-05-13Fix
CVE-2025-43005Information disclosure vulnerability in SAP GUI for Windows4.3CNA v3.10.2%2025-05-13Fix
CVE-2025-43004SAP Digital Manufacturing Production Operator Dashboard missing authorization5.3CNA v3.10.3%2025-05-13Fix
CVE-2025-43003Information disclosure vulnerability in SAP S/4HANA (Private Cloud and On-Premise)6.4CNA v3.10.3%2025-05-13Fix
CVE-2025-43002Missing authorization check in SAP S4/HANA (OData meta-data property)4.3CNA v3.10.3%2025-05-13Fix
CVE-2025-43000Information disclosure vulnerability in SAP Business Objects Business Intelligence Platform (PMW)7.9CNA v3.10.2%2025-05-13Fix
CVE-2025-42999SAP NetWeaver deserialization9.1CNA v3.112.7%2025-05-13KEVKCVFix
CVE-2025-42997Information disclosure vulnerability in SAP Gateway Client6.6CNA v3.10.3%2025-05-13Fix
CVE-2025-41645SMA: Sunny portal demo system privilege escalation8.6CNA v3.10.4%2025-05-13Fix
CVE-2025-40628SQL injection in DomainsPRO9.3CNA v4.00.3%2025-05-13
CVE-2025-40583Siemens SCALANCE LPE9403 cleartext transmission of sensitive information6.7CNA v4.00.1%2025-05-13Fix
CVE-2025-40582Siemens SCALANCE LPE9403 OS command injection8.5CNA v4.00.2%2025-05-13Fix
CVE-2025-40581Siemens SCALANCE LPE9403 authentication bypass8.4CNA v4.00.2%2025-05-13Fix
CVE-2025-40580Siemens SCALANCE LPE9403 stack-based buffer overflow5.4CNA v4.00.2%2025-05-13Fix
CVE-2025-40579Siemens SCALANCE LPE9403 stack-based buffer overflow5.4CNA v4.00.2%2025-05-13Fix
CVE-2025-40578Siemens SCALANCE LPE9403 out-of-bounds read5.3CNA v4.00.3%2025-05-13
CVE-2025-40577Siemens SCALANCE LPE9403 out-of-bounds read5.3CNA v4.00.3%2025-05-13Fix
CVE-2025-40576Siemens SCALANCE LPE9403 null pointer dereference5.3CNA v4.00.3%2025-05-13Fix
CVE-2025-40575Siemens SCALANCE LPE9403 uninitialized variable use5.3CNA v4.00.5%2025-05-13Fix
CVE-2025-40574Siemens SCALANCE LPE9403 incorrect permission assignment8.5CNA v4.00.1%2025-05-13KCVFix
CVE-2025-40573Siemens SCALANCE LPE9403 path traversal6.7CNA v4.00.2%2025-05-13KCVFix
CVE-2025-40572Siemens SCALANCE LPE9403 incorrect permission assignment6.8CNA v4.00.1%2025-05-13KCVFix
CVE-2025-40571Siemens Mendix OIDC SSO (Mendix incorrect privilege assignment2.1CNA v4.00.3%2025-05-13Fix
CVE-2025-40566Siemens SIMATIC PCS neo insufficient session expiration8.7CNA v4.00.4%2025-05-13Fix
CVE-2025-40556Siemens BACnet ATEC 550-440 denial of service7.1CNA v4.00.2%2025-05-13
CVE-2025-40555Siemens APOGEE PXC+TALON TC Series (BACnet) expected behavior violation5.3CNA v4.00.2%2025-05-13
CVE-2025-35471conda-forge openssl-feedstock OPENSSLDIR configuration uncontrolled search path7.8v3.10.2%2025-05-13Fix
CVE-2025-33025Siemens RUGGEDCOM ROX MX5000 client-side enforcement of server-side security9.4CNA v4.01.2%2025-05-13Fix
CVE-2025-33024Siemens RUGGEDCOM ROX MX5000 client-side enforcement of server-side security9.4CNA v4.01.2%2025-05-13Fix
CVE-2025-32917Checkmk privilege escalation in jar_signature5.2CNA v4.00.3%2025-05-13Fix
CVE-2025-32756Fortinet Multiple Products stack-based buffer overflow9.6CNA v3.130.9%2025-05-13KEVEmerging ThreatsExploit codeFix
CVE-2025-32709Microsoft Windows Ancillary function driver for WinSock use-after-free7.8CNA v3.11.8%2025-05-13KEVFix
CVE-2025-32707Microsoft Windows NTFS elevation of privilege7.8CNA v3.10.5%2025-05-13Fix
CVE-2025-32706Microsoft Windows Common Log File System (CLFS) driver heap-based buffer overflow7.8CNA v3.12.3%2025-05-13KEVFix
CVE-2025-32705Microsoft Outlook remote code execution7.8CNA v3.10.5%2025-05-13Fix
CVE-2025-32704Microsoft Excel remote code execution8.4CNA v3.10.4%2025-05-13Fix
CVE-2025-32703Visual Studio information disclosure5.5CNA v3.10.5%2025-05-13Fix
CVE-2025-32702Visual Studio remote code execution7.8CNA v3.10.6%2025-05-13Fix
CVE-2025-32701Microsoft Windows Common Log File System (CLFS) driver use-after-free7.8CNA v3.11.4%2025-05-13KEVFix
CVE-2025-32469Siemens RUGGEDCOM ROX MX5000 client-side enforcement of server-side security9.4CNA v4.01.2%2025-05-13Fix
CVE-2025-32454Siemens Teamcenter Visualization out-of-bounds read7.3CNA v4.00.2%2025-05-13Fix
CVE-2025-31930Siemens IEC 1Ph insecure default initialization8.7CNA v4.00.3%2025-05-13Fix
CVE-2025-31929A vulnerability has been identified in IEC 1Ph 7.4kW Child socket (8EM1310-2EH04-0GA0) (All versions), IEC 1Ph 7.4kW Child socket/ shutter (8EM1310-2EN04-0GA0) (All versions), IEC 1Ph 7.4kW Parent cable 7m (8EM1310-2EJ04-3GA1) (All versions), IEC 1Ph 7.4kW Parent cable 7m incl. SIM (8EM1310-2EJ04-3G4.1CNA v4.00.2%2025-05-13
CVE-2025-31493getkirby kirby path traversal of collection names during file system lookup6.3CNA v4.00.6%2025-05-13Fix
CVE-2025-31329Information disclosure vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform6.2CNA v3.10.3%2025-05-13Fix
CVE-2025-30400Microsoft Windows DWM Core library use-after-free7.8CNA v3.11.9%2025-05-13KEVFix
CVE-2025-30397Microsoft Windows Scripting Engine type confusion7.5CNA v3.126.8%2025-05-13KEVExploit codeFix
CVE-2025-30394Microsoft Windows Remote Desktop Gateway (RD Gateway) denial of service5.9CNA v3.134.2%2025-05-13Fix
CVE-2025-30393Microsoft Excel remote code execution7.8CNA v3.10.4%2025-05-13Fix
CVE-2025-30388Windows Graphics component remote code execution7.8CNA v3.14.2%2025-05-13Fix
CVE-2025-30387Microsoft Document Intelligence Studio On-Prem elevation of privilege9.8CNA v3.11.2%2025-05-13Fix
CVE-2025-30386Microsoft Office remote code execution8.4CNA v3.10.7%2025-05-13Fix
CVE-2025-30385Microsoft Windows Common Log File System driver elevation of privilege7.8CNA v3.10.5%2025-05-13Fix
CVE-2025-30384Microsoft SharePoint server remote code execution7.4CNA v3.11.3%2025-05-13Fix
CVE-2025-30383Microsoft Excel remote code execution7.8CNA v3.10.5%2025-05-13Fix
CVE-2025-30382Microsoft SharePoint server remote code execution7.8CNA v3.12.5%2025-05-13Fix
CVE-2025-30381Microsoft Excel remote code execution7.8CNA v3.10.5%2025-05-13Fix
CVE-2025-30379Microsoft Excel remote code execution7.8CNA v3.10.5%2025-05-13Fix
CVE-2025-30378Microsoft SharePoint server remote code execution7.0CNA v3.11.4%2025-05-13Fix
CVE-2025-30377Microsoft Office remote code execution8.4CNA v3.10.6%2025-05-13Fix
CVE-2025-30376Microsoft Excel remote code execution7.8CNA v3.10.6%2025-05-13Fix
CVE-2025-30375Microsoft Excel remote code execution7.8CNA v3.10.6%2025-05-13Fix
CVE-2025-30330Adobe Illustrator heap-based buffer overflow7.8CNA v3.10.6%2025-05-13Fix
CVE-2025-30329Adobe Animate null pointer dereference5.5CNA v3.10.2%2025-05-13Fix
CVE-2025-30328Adobe Animate out-of-bounds write7.8CNA v3.10.3%2025-05-13Fix
CVE-2025-30326Adobe Photoshop Desktop access of uninitialized pointer7.8CNA v3.10.3%2025-05-13Fix
CVE-2025-30325Adobe Photoshop Desktop integer overflow or wraparound7.8CNA v3.10.3%2025-05-13Fix
CVE-2025-30324Adobe Photoshop Desktop integer underflow (wrap or wraparound)7.8CNA v3.10.3%2025-05-13Fix
CVE-2025-30322Adobe Substance3D Painter out-of-bounds write7.8CNA v3.10.2%2025-05-13Fix
CVE-2025-30320Adobe InDesign Desktop null pointer dereference5.5CNA v3.10.2%2025-05-13Fix
CVE-2025-30319Adobe InDesign Desktop null pointer dereference5.5CNA v3.10.2%2025-05-13Fix
CVE-2025-30318Adobe InDesign Desktop out-of-bounds write7.8CNA v3.10.3%2025-05-13Fix
CVE-2025-30316Adobe Connect cross-site scripting (stored XSS)5.4CNA v3.10.3%2025-05-13Fix
CVE-2025-30315Adobe Connect cross-site scripting (stored XSS)6.1CNA v3.10.3%2025-05-13Fix
CVE-2025-30314Adobe Connect cross-site scripting (stored XSS)6.1CNA v3.10.3%2025-05-13Fix
CVE-2025-30310Adobe Dreamweaver Desktop access of resource using incompatible type (type confusion)7.8CNA v3.10.3%2025-05-13Fix
CVE-2025-30207Kirby vulnerable to path traversal in the router for PHP's built-in server2.3CNA v4.00.6%2025-05-13Fix
CVE-2025-30176Siemens SIMATIC PCS neo out-of-bounds read8.7CNA v4.00.6%2025-05-13Fix
CVE-2025-30175Siemens SIMATIC PCS neo out-of-bounds write8.7CNA v4.00.6%2025-05-13Fix
CVE-2025-30174Siemens SIMATIC PCS neo out-of-bounds read8.7CNA v4.00.6%2025-05-13Fix
CVE-2025-30159Kirby vulnerable to path traversal of snippet names in the `snippet` helper6.3CNA v4.00.7%2025-05-13Fix
CVE-2025-30018SAP Supplier Relationship Management Live Auction Cockpit XML external entity injection8.6CNA v3.10.4%2025-05-13Fix
CVE-2025-30012SAP Supplier Relationship Management Live Auction Cockpit deserialization of untrusted data10.0CNA v3.10.8%2025-05-13Fix
CVE-2025-30011SAP Supplier Relationship Management Live Auction Cockpit information disclosure5.3CNA v3.10.4%2025-05-13Fix
CVE-2025-30010SAP Supplier Relationship Management Live Auction Cockpit open redirect6.1CNA v3.10.3%2025-05-13Fix
CVE-2025-30009SAP Supplier Relationship Management Live Auction Cockpit cross-site scripting6.1CNA v3.10.3%2025-05-13Fix
CVE-2025-29979Microsoft Excel remote code execution7.8CNA v3.10.6%2025-05-13Fix
CVE-2025-29978Microsoft PowerPoint remote code execution7.8CNA v3.10.5%2025-05-13Fix
CVE-2025-29977Microsoft Excel remote code execution7.8CNA v3.10.6%2025-05-13Fix
CVE-2025-29976Microsoft SharePoint server elevation of privilege7.8CNA v3.10.6%2025-05-13Fix
CVE-2025-29975Microsoft PC Manager elevation of privilege7.8CNA v3.10.5%2025-05-13Fix
CVE-2025-29974Microsoft Windows Kernel information disclosure5.7CNA v3.10.7%2025-05-13Fix
CVE-2025-29973Microsoft Azure File Sync elevation of privilege7.0CNA v3.10.3%2025-05-13Fix
CVE-2025-29971Microsoft Windows Web Threat Defense (WTD.sys) denial of service7.5CNA v3.168.1%2025-05-13Fix
CVE-2025-29970Microsoft Brokering File System elevation of privilege7.8CNA v3.10.5%2025-05-13Fix
CVE-2025-29969Microsoft Windows MS-EVEN RPC remote code execution7.5CNA v3.11.2%2025-05-13Exploit codeFix
CVE-2025-29968Microsoft Windows Active Directory Certificate Services (AD CS) denial of service6.5CNA v3.11.9%2025-05-13Fix
CVE-2025-29967Microsoft Remote Desktop client remote code execution8.8CNA v3.11.3%2025-05-13Fix
CVE-2025-29966Microsoft Remote Desktop client remote code execution8.8CNA v3.11.4%2025-05-13Fix
CVE-2025-29964Microsoft Windows Media remote code execution8.8CNA v3.11.0%2025-05-13Fix
CVE-2025-29963Microsoft Windows Media remote code execution8.8CNA v3.11.0%2025-05-13Fix
CVE-2025-29962Microsoft Windows Media remote code execution8.8CNA v3.115.7%2025-05-13Fix
CVE-2025-29961Microsoft Windows Routing and Remote Access Service (RRAS) information disclosure6.5CNA v3.11.3%2025-05-13Fix
CVE-2025-29960Microsoft Windows Routing and Remote Access Service (RRAS) information disclosure6.5CNA v3.11.4%2025-05-13Fix
CVE-2025-29959Microsoft Windows Routing and Remote Access Service (RRAS) information disclosure6.5CNA v3.11.4%2025-05-13Fix
CVE-2025-29958Microsoft Windows Routing and Remote Access Service (RRAS) information disclosure6.5CNA v3.11.3%2025-05-13Fix
CVE-2025-29957Microsoft Windows Deployment services denial of service6.2CNA v3.10.6%2025-05-13Fix
CVE-2025-29956Microsoft Windows SMB information disclosure5.4CNA v3.11.0%2025-05-13Fix
CVE-2025-29955Microsoft Windows Hyper-V denial of service6.2CNA v3.10.6%2025-05-13Fix
CVE-2025-29954Microsoft Windows Lightweight Directory Access Protocol (LDAP) denial of service5.9CNA v3.11.4%2025-05-13Fix
CVE-2025-29842Microsoft Windows UrlMon security feature bypass7.5CNA v3.10.4%2025-05-13Fix
CVE-2025-29841Microsoft Windows universal Print Management service elevation of privilege7.0CNA v3.10.4%2025-05-13Fix
CVE-2025-29840Microsoft Windows Media remote code execution8.8CNA v3.11.0%2025-05-13Fix
CVE-2025-29839Microsoft Windows multiple UNC Provider driver information disclosure4.0CNA v3.10.5%2025-05-13Fix
CVE-2025-29838Microsoft Windows ExecutionContext driver elevation of privilege7.4CNA v3.10.4%2025-05-13Fix
CVE-2025-29837Microsoft Windows Installer information disclosure5.5CNA v3.10.7%2025-05-13Fix
CVE-2025-29836Microsoft Windows Routing and Remote Access Service (RRAS) information disclosure6.5CNA v3.11.3%2025-05-13Fix
CVE-2025-29835Microsoft Windows Remote Access Connection Manager information disclosure6.5CNA v3.11.3%2025-05-13Fix
CVE-2025-29833Microsoft Virtual Machine Bus (VMBus) remote code execution7.7CNA v3.10.4%2025-05-13Fix
CVE-2025-29832Microsoft Windows Routing and Remote Access Service (RRAS) information disclosure6.5CNA v3.11.3%2025-05-13Fix
CVE-2025-29831Microsoft Windows Remote Desktop services remote code execution7.5CNA v3.11.0%2025-05-13Fix
CVE-2025-29830Microsoft Windows Routing and Remote Access Service (RRAS) information disclosure6.5CNA v3.11.3%2025-05-13Fix
CVE-2025-29829Microsoft Windows Trusted Runtime interface driver information disclosure5.5CNA v3.10.5%2025-05-13Fix
CVE-2025-29826Microsoft Dataverse elevation of privilege7.3CNA v3.10.8%2025-05-13Fix
CVE-2025-28057OwlAdmin SQL injection7.2CISA ADP v3.10.4%2025-05-13
CVE-2025-28056ruifang-tech Rebuild SQL injection9.8CISA ADP v3.10.4%2025-05-13
CVE-2025-28055Shinnku Upset-gal-web path traversal7.5CISA ADP v3.10.5%2025-05-13
CVE-2025-27696Apache Superset: Incorrect authorization leading to resource ownership takeover5.3CNA v4.01.2%2025-05-13Fix
CVE-2025-27488Microsoft Windows Hardware Lab Kit (HLK) elevation of privilege6.7CNA v3.10.4%2025-05-13Fix
CVE-2025-27468Microsoft Windows Kernel-Mode driver elevation of privilege7.0CNA v3.10.2%2025-05-13Fix
CVE-2025-27197Adobe Lightroom Desktop out-of-bounds write7.8CNA v3.10.2%2025-05-13Fix
CVE-2025-26685Microsoft Defender For Identity spoofing6.5CNA v3.10.7%2025-05-13Fix
CVE-2025-26684Microsoft Defender elevation of privilege6.7CNA v3.10.4%2025-05-13Fix
CVE-2025-26677Microsoft Windows Remote Desktop Gateway (RD Gateway) denial of service7.5CNA v3.11.7%2025-05-13Fix
CVE-2025-26662Cross-site scripting (XSS) vulnerability in the SAP Data Services Management Console4.4CNA v3.10.2%2025-05-13Fix
CVE-2025-26646Microsoft .NET, Visual Studio, and Build Tools for Visual Studio spoofing8.0CNA v3.11.2%2025-05-13Fix
CVE-2025-26390Siemens OZW672 SQL injection9.3CNA v4.00.6%2025-05-13Fix
CVE-2025-26389Siemens OZW672 OS command injection10.0CNA v4.00.9%2025-05-13Fix
CVE-2025-24510Siemens MS/TP Point Pickup Module denial of service7.1CNA v4.00.3%2025-05-13
CVE-2025-24495Intel(R) Core™ Ultra Processors branch prediction unit for some incorrect initialization6.8CNA v4.00.2%2025-05-13Fix
CVE-2025-24308Intel(R) Server D50DNP and M50FCP UEFI firmware error handler for the improper input validation8.7CNA v4.00.2%2025-05-13Fix
CVE-2025-24063Microsoft Windows kernel Streaming service driver elevation of privilege7.8CNA v3.10.7%2025-05-13Fix
CVE-2025-24009Siemens SIRIUS 3RK3 Modular Safety System (MSS) incorrect permission assignment8.2CNA v4.00.4%2025-05-13
CVE-2025-24008Siemens SIRIUS 3RK3 Modular Safety System (MSS) missing encryption8.7CNA v4.00.3%2025-05-13
CVE-2025-24007Siemens SIRIUS 3RK3 Modular Safety System (MSS) weak cryptographic algorithm8.7CNA v4.00.3%2025-05-13
CVE-2025-23233Edge Orchestrator software for Intel(R) Tiber™ Edge Platform privilege escalation5.1CNA v4.00.2%2025-05-13Fix
CVE-2025-22895Edge Orchestrator software for Intel(R) Tiber™ Edge Platform information disclosure6.0CNA v4.00.2%2025-05-13Fix
CVE-2025-22892OpenVINO™ model server software maintained by Intel(R) resource exhaustion7.1CNA v4.00.3%2025-05-13Fix
CVE-2025-22859Fortinet FortiClientEMS relative path traversal5.0CNA v3.10.6%2025-05-13Fix
CVE-2025-22848Intel Edge Orchestrator software for Tiber Edge Platform denial of service5.1CNA v4.00.2%2025-05-13Fix
CVE-2025-22844Edge Orchestrator software for Intel(R) Tiber™ Edge Platform improper access control5.3CNA v4.00.2%2025-05-13Fix
CVE-2025-22843Edge Orchestrator software for Intel(R) Tiber™ Edge Platform privilege escalation8.8CNA v4.00.1%2025-05-13Fix
CVE-2025-22462Ivanti Neurons for ITSM (on-prem) authentication bypass9.8CNA v3.12.1%2025-05-13Fix
CVE-2025-22460Ivanti CSA (Cloud Services Appliance) default credentials7.8CNA v3.10.3%2025-05-13Fix
CVE-2025-22448Intel(R) Simics(R) Package Manager software insecure inherited permissions6.9CNA v4.00.3%2025-05-13Fix
CVE-2025-22446Edge Orchestrator software for Intel(R) Tiber™ Edge Platform inadequate encryption strength5.1CNA v4.00.1%2025-05-13Fix
CVE-2025-22249VMware Aria Automation DOM-based cross-site scripting8.2CNA v3.10.3%2025-05-13Fix
CVE-2025-22248Unauthenticated access to postgres through pgpool9.4CNA v4.00.5%2025-05-13Fix
CVE-2025-22246UAA Private key exposure3.0CNA v3.10.2%2025-05-13Fix
CVE-2025-21264Microsoft Visual Studio Code security feature bypass7.1CNA v3.10.8%2025-05-13Fix
CVE-2025-21100Intel(R) Server D50DNP and M50FCP boards UEFI firmware for the improper initialization5.6CNA v4.00.2%2025-05-13Fix
CVE-2025-21099Intel(R) Graphics software uncontrolled search path5.4CNA v4.00.2%2025-05-13Fix
CVE-2025-21094Intel(R) Server D50DNP and M50FCP boards UEFI firmware DXE module for the improper input validation8.7CNA v4.00.2%2025-05-13Fix
CVE-2025-21081Edge Orchestrator software for Intel(R) Tiber™ Edge Platform protection mechanism failure2.0CNA v4.00.1%2025-05-13Fix
CVE-2025-20629Intel(R) Ethernet Network Adapter E810 Series insecure inherited permissions5.4CNA v4.00.1%2025-05-13Fix
CVE-2025-20624Edge Orchestrator software for Intel(R) Tiber™ Edge Platform information disclosure6.9CNA v4.00.2%2025-05-13Fix
CVE-2025-20623Intel(R) Core™ processors (10th Generation) information disclosure5.7CNA v4.00.2%2025-05-13Fix
CVE-2025-20618Intel(R) PROSet/Wireless WiFi Software stack-based buffer overflow8.3CNA v4.00.2%2025-05-13Fix
CVE-2025-20616Edge Orchestrator software for Intel(R) Tiber™ Edge Platform resource exhaustion2.1CNA v4.00.2%2025-05-13Fix
CVE-2025-20612Edge Orchestrator software for Intel(R) Tiber™ Edge Platform privilege escalation5.1CNA v4.00.2%2025-05-13Fix
CVE-2025-20611Edge Orchestrator software for Intel(R) Tiber™ Edge Platform information disclosure5.7CNA v4.00.1%2025-05-13Fix
CVE-2025-20108Intel(R) Network Adapter Driver installers uncontrolled search path5.4CNA v4.00.2%2025-05-13Fix
CVE-2025-20104Administrative Tools for some Intel(R) Network Adapters package race condition5.4CNA v4.00.1%2025-05-13Fix
CVE-2025-20103Intel(R) Processors denial of service5.7CNA v4.00.2%2025-05-13Fix
CVE-2025-20101Intel(R) Graphics Drivers out-of-bounds read6.9CNA v4.00.2%2025-05-13Fix
CVE-2025-20100Intel(R) Xeon(R) 6 processor with E-cores improper access control8.7CNA v4.00.1%2025-05-13Fix
CVE-2025-20095Intel(R) RealSense™ SDK software incorrect default permissions5.4CNA v4.00.1%2025-05-13Fix
CVE-2025-20084Edge Orchestrator software for Intel(R) Tiber™ Edge Platform resource exhaustion5.1CNA v4.00.2%2025-05-13Fix
CVE-2025-20083Intel(R) Slim Bootloader firmware for the improper authentication7.1CNA v4.00.2%2025-05-13Fix
CVE-2025-20082Intel(R) Server D50DNP and M50FCP boards time-of-check time-of-use race condition8.7CNA v4.00.1%2025-05-13Fix
CVE-2025-20079Intel(R) Advisor software uncontrolled search path5.4CNA v4.00.2%2025-05-13Fix
CVE-2025-20076Edge Orchestrator software for Intel(R) Tiber™ Edge Platform improper access control2.1CNA v4.00.2%2025-05-13Fix
CVE-2025-20071Intel(R) Graphics Drivers null pointer dereference6.8CNA v4.00.2%2025-05-13Fix
CVE-2025-20062Intel(R) PROSet/Wireless WiFi Software use-after-free7.0CNA v4.00.2%2025-05-13Fix
CVE-2025-20057Edge Orchestrator software for Intel(R) Tiber™ Edge Platform resource exhaustion5.1CNA v4.00.2%2025-05-13Fix
CVE-2025-20054Intel(R) Processors core management mechanism for some improper error handling6.8CNA v4.00.2%2025-05-13Fix
CVE-2025-20052Intel(R) Graphics software improper access control6.9CNA v4.00.1%2025-05-13Fix
CVE-2025-20047Intel(R) Core™ Ultra Processors improper locking5.3CNA v4.00.2%2025-05-13Fix
CVE-2025-20046Intel(R) PROSet/Wireless WiFi Software use-after-free7.2CNA v4.00.2%2025-05-13Fix
CVE-2025-20043Intel(R) RealSense™ SDK software uncontrolled search path5.4CNA v4.00.2%2025-05-13Fix
CVE-2025-20041Intel Graphics Software for Arc and Iris Xe Graphics uncontrolled search path5.4CNA v4.00.2%2025-05-13Fix
CVE-2025-20039Intel(R) PROSet/Wireless WiFi Software race condition6.9CNA v4.00.2%2025-05-13Fix
CVE-2025-20034Intel(R) Server D50DNP and M50FCP boards improper input validation5.6CNA v4.00.2%2025-05-13Fix
CVE-2025-20032Intel(R) PROSet/Wireless WiFi Software improper input validation8.3CNA v4.00.2%2025-05-13Fix
CVE-2025-20031Intel(R) Graphics Drivers improper input validation6.8CNA v4.00.2%2025-05-13Fix
CVE-2025-20030Edge Orchestrator software for Intel(R) Tiber™ Edge Platform information disclosure2.1CNA v4.00.2%2025-05-13Fix
CVE-2025-20026Intel(R) PROSet/Wireless WiFi Software out-of-bounds read7.0CNA v4.00.2%2025-05-13Fix
CVE-2025-20022Edge Orchestrator software for Intel(R) Tiber™ Edge Platform insufficient control flow management5.8CNA v4.00.2%2025-05-13Fix
CVE-2025-20018Intel(R) Graphics Drivers untrusted pointer dereference6.9CNA v4.00.2%2025-05-13Fix
CVE-2025-20015Intel(R) Ethernet Connection software uncontrolled search path5.4CNA v4.00.2%2025-05-13Fix
CVE-2025-20013Edge Orchestrator software for Intel(R) Tiber™ Edge Platform information disclosure4.8CNA v4.00.2%2025-05-13Fix
CVE-2025-20012Intel(R) Core™ Ultra Processors incorrect behavior order4.1CNA v4.00.3%2025-05-13Fix
CVE-2025-20009Intel(R) Server D50DNP and M50FCP boards improper input validation5.6CNA v4.00.2%2025-05-13Fix
CVE-2025-20008Intel(R) Simics(R) Package Manager software insecure inherited permissions5.4CNA v4.00.2%2025-05-13Fix
CVE-2025-20006Intel(R) PROSet/Wireless WiFi Software use-after-free8.3CNA v4.00.2%2025-05-13Fix
CVE-2025-20004Intel(R) Xeon(R) 6 processor E-Cores firmware insufficient control flow management8.5CNA v4.00.1%2025-05-13Fix
CVE-2025-20003Intel(R) Graphics Driver software installers link following7.3CNA v4.00.2%2025-05-13Fix
CVE-2025-4660Forescout SecureConnector remote code execution in Windows Secure Connector/ HPS Inspection Engine8.7CNA v4.01.1%2025-05-13Exploit code
CVE-2025-4658Authentication bypass in OPKSSH9.8NVD v3.10.3%2025-05-13Fix
CVE-2025-4649Centreon web improper exception handling4.9CNA v3.10.4%2025-05-13Fix
CVE-2025-4648Centreon web SVG media upload validation cross-site scripting8.4CNA v3.10.3%2025-05-13Fix
CVE-2025-4647Centreon web SVG content sanitization cross-site scripting8.4CNA v3.10.3%2025-05-13Fix
CVE-2025-4646Centreon web A high privilege user is able to create and use a valid admin API token in centreon-web7.2CNA v3.10.4%2025-05-13Fix
CVE-2025-4632Samsung MagicINFO 9 Server path traversal9.8CNA v3.124.3%2025-05-13KEVNucleiExploit codeFix
CVE-2025-4574Red Hat Directory Server 11 crossbeam-channel: Crossbeam-channel vulnerable to double free on drop6.5CNA v3.10.5%2025-05-13Fix
CVE-2025-4474Frontend Dashboard - missing authorization to Authenticated privilege escalation8.8CNA v3.10.4%2025-05-13Fix
CVE-2025-4473Frontend Dashboard - missing authorization to Authenticated account takeover/privilege escalation8.8CNA v3.10.5%2025-05-13Fix
CVE-2025-4428Ivanti Endpoint Manager Mobile (EPMM) code injection7.2CNA v3.188.0%2025-05-13KEVMetasploitEmerging ThreatsExploit codeKCVFix
CVE-2025-4427Ivanti Endpoint Manager Mobile (EPMM) authentication bypass5.3CNA v3.199.9%2025-05-13KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix
CVE-2025-4396Relevanssi (Free) and (Premium) unauthenticated SQL injection7.5CNA v3.12.7%2025-05-13NucleiExploit codeFix
CVE-2025-4339TheGem WordPress theme missing authorization authenticated arbitrary theme options update4.3CNA v3.10.4%2025-05-13Fix
CVE-2025-4317TheGem WordPress theme authenticated (Subscriber+) arbitrary file upload8.8CNA v3.11.1%2025-05-13Fix
CVE-2025-3916Schneider Electric EcoStruxure™ Power Build Rapsody software stack-based buffer overflow4.6CNA v4.00.2%2025-05-13Fix
CVE-2025-3757Authentication bypass in OpenPubKey9.8NVD v3.10.4%2025-05-13Fix
CVE-2025-3744HashiCorp Nomad Enterprise Sentinel policy override incorrect privilege assignment7.6CNA v3.10.3%2025-05-13Fix
CVE-2025-3107Newsletters WordPress plugin authenticated (Contributor+) SQL injection orderby parameter6.5CNA v3.10.4%2025-05-13Fix
CVE-2025-0035AMD Cloud Manageability Service unquoted search path7.3CNA v3.10.2%2025-05-13
CVE-2025-47682SMS Alert Order Notifications WooCommerce WordPress plugin SQL injection9.8v3.10.4%2025-05-12Fix
CVE-2025-47578BNS Twitter Follow Button WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-05-12
CVE-2025-47274ToolHive stores secrets in the state store with no encryption2.4CNA v4.00.1%2025-05-12Fix
CVE-2025-47271OZI-Project/ozi-publish code injection6.3CNA v4.00.4%2025-05-12Fix
CVE-2025-47270nimiq core-rs-albatross nimiq-network-libp2p uncontrolled resource consumption7.5CNA v3.10.7%2025-05-12Fix
CVE-2025-46825Kanboard has stored cross-site scripting vulnerability in project name1.3CNA v4.00.3%2025-05-12Fix
CVE-2025-46750Schweitzer Engineering Laboratories SEL-3350-1 authentication bypass4.4CNA v3.10.2%2025-05-12Fix
CVE-2025-46749Schweitzer Engineering Laboratories SEL Blueframe OS improper neutralization of Input4.3CNA v3.10.3%2025-05-12Fix
CVE-2025-46748Schweitzer Engineering Laboratories SEL Blueframe OS unverified password change2.7CNA v3.10.3%2025-05-12Fix
CVE-2025-46747Schweitzer Engineering Laboratories SEL Blueframe OS Exposure of Sensitive System Information5.7CNA v3.10.3%2025-05-12Fix
CVE-2025-46746Schweitzer Engineering Laboratories SEL Blueframe OS Error Message Contains Sensitive Information5.8CNA v3.10.3%2025-05-12Fix
CVE-2025-46745Schweitzer Engineering Laboratories SEL Blueframe OS improper privilege management6.5CNA v3.10.3%2025-05-12Fix
CVE-2025-46744Schweitzer Engineering Laboratories SEL Blueframe OS improper privilege management2.7CNA v3.10.3%2025-05-12Fix
CVE-2025-46743Schweitzer Engineering Laboratories SEL Blueframe OS cross-site request forgery6.3CNA v3.10.2%2025-05-12Fix
CVE-2025-46742Schweitzer Engineering Laboratories SEL Blueframe OS improper access control4.3CNA v3.10.2%2025-05-12Fix
CVE-2025-46741Schweitzer Engineering Laboratories SEL Blueframe OS improper privilege management5.7CNA v3.10.1%2025-05-12Fix
CVE-2025-46740Schweitzer Engineering Laboratories SEL Blueframe OS improper handling of insufficient permissions7.5CNA v3.10.3%2025-05-12Fix
CVE-2025-46739Schweitzer Engineering Laboratories SEL Blueframe OS missing brute-force protection8.1CNA v3.10.4%2025-05-12Fix
CVE-2025-46738An authenticated attacker can maliciously modify layout data files in the SEL-5033 installation directory to execute arbitrary code.6.6CNA v3.10.2%2025-05-12Fix
CVE-2025-46737Schweitzer Engineering Laboratories SEL-5037 Grid Configurator origin validation error7.4CNA v3.10.2%2025-05-12Fix
CVE-2025-46729phpDVDProfiler cross-site scripting2.1CNA v4.00.5%2025-05-12
CVE-2025-46718sudo-rs allows Low Privilege Users to Enumerate Privileges of Others3.3CNA v3.10.3%2025-05-12Fix
CVE-2025-46717sudo-rs allows Low Privilege Users to Discover the Existence of files in Inaccessible Folders3.3CNA v3.10.4%2025-05-12Fix
CVE-2025-46611Artec-it Ema cross-site scripting6.1CISA ADP v3.10.3%2025-05-12
CVE-2025-46610Artec-it Enterprise Mail Archive cross-site request forgery8.8CISA ADP v3.10.3%2025-05-12
CVE-2025-45835Netis Systems WF2880 null pointer dereference7.5CISA ADP v3.10.5%2025-05-12
CVE-2025-45779Tenda AC10 buffer overflow9.8CISA ADP v3.16.5%2025-05-12Emerging Threats
CVE-2025-44830engineercms SQL injection9.8CISA ADP v3.10.4%2025-05-12
CVE-2025-44176Tenda FH451 command injection6.5CISA ADP v3.19.9%2025-05-12