CVE-2025 records published in May 2025
Page three of four: records 2,001 to 3,000 of the 3,226 published in May 2025, newest first. The first page carries the figures for May 2025.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2025-44175 | Tenda AC10 buffer overflow | 5.4CISA ADP v3.1 | 0.3% | 2025-05-12 | |
| CVE-2025-44022 | Vvveb code injection | 9.8CISA ADP v3.1 | 1.2% | 2025-05-12 | |
| CVE-2025-41393 | Ricoh Multiple laser printers and MFPs which implement Web Image Monitor cross-site scripting | 5.1CNA v4.0 | 0.7% | 2025-05-12 | Nuclei |
| CVE-2025-40627 | Reflected cross-site scripting (XSS) in AbanteCart | 6.1v3.1 | 0.2% | 2025-05-12 | Fix |
| CVE-2025-40626 | Reflected cross-site scripting (XSS) in AbanteCart | 6.1v3.1 | 0.2% | 2025-05-12 | Fix |
| CVE-2025-32390 | EspoCRM vulnerable to HTML injection into phishing, which may lead to account takeover | 7.0CNA v4.0 | 0.4% | 2025-05-12 | Fix |
| CVE-2025-31260 | Apple macOS insecure permissions | 5.5CISA ADP v3.1 | 0.2% | 2025-05-12 | Fix |
| CVE-2025-31259 | Apple macOS improper input validation | 7.8CISA ADP v3.1 | 0.2% | 2025-05-12 | Fix |
| CVE-2025-31258 | Apple macOS sandbox escape | 6.5CISA ADP v3.1 | 0.4% | 2025-05-12 | Exploit codeFix |
| CVE-2025-31257 | Apple Safari memory corruption | 4.7CISA ADP v3.1 | 1.1% | 2025-05-12 | Fix |
| CVE-2025-31256 | Apple macOS information disclosure | 5.5CISA ADP v3.1 | 0.2% | 2025-05-12 | Fix |
| CVE-2025-31253 | Apple iOS and iPadOS operation on a released resource | 7.1CISA ADP v3.1 | 0.2% | 2025-05-12 | Fix |
| CVE-2025-31251 | Apple iPadOS resource exhaustion | 5.5CISA ADP v3.1 | 0.3% | 2025-05-12 | Fix |
| CVE-2025-31250 | Apple macOS information disclosure | 5.5CISA ADP v3.1 | 0.2% | 2025-05-12 | Fix |
| CVE-2025-31249 | Apple macOS improper authorization | 7.1CISA ADP v3.1 | 0.3% | 2025-05-12 | Fix |
| CVE-2025-31247 | Apple macOS logic flaw | 7.5CISA ADP v3.1 | 0.5% | 2025-05-12 | Fix |
| CVE-2025-31246 | Apple macOS memory corruption | 8.8CISA ADP v3.1 | 0.6% | 2025-05-12 | Fix |
| CVE-2025-31245 | Apple iPadOS denial of service | 5.5CISA ADP v3.1 | 0.2% | 2025-05-12 | Fix |
| CVE-2025-31244 | Apple macOS sandbox escape | 8.8CISA ADP v3.1 | 0.2% | 2025-05-12 | Fix |
| CVE-2025-31242 | Apple iPadOS information disclosure | 5.5CISA ADP v3.1 | 0.2% | 2025-05-12 | Fix |
| CVE-2025-31241 | Apple iPadOS double free | 5.3CISA ADP v3.1 | 0.8% | 2025-05-12 | Fix |
| CVE-2025-31240 | Apple macOS improper input validation | 7.5CISA ADP v3.1 | 0.6% | 2025-05-12 | Fix |
| CVE-2025-31239 | Apple iPadOS use-after-free | 4.3CISA ADP v3.1 | 0.7% | 2025-05-12 | Fix |
| CVE-2025-31238 | Apple Safari memory corruption | 7.3CISA ADP v3.1 | 1.0% | 2025-05-12 | Fix |
| CVE-2025-31237 | Apple macOS improper resource release | 7.5CISA ADP v3.1 | 0.6% | 2025-05-12 | Fix |
| CVE-2025-31236 | Apple macOS information disclosure | 5.5CISA ADP v3.1 | 0.2% | 2025-05-12 | Fix |
| CVE-2025-31235 | Apple iPadOS double free | 6.5CISA ADP v3.1 | 0.2% | 2025-05-12 | Fix |
| CVE-2025-31234 | Apple macOS denial of service | 8.2CISA ADP v3.1 | 0.6% | 2025-05-12 | Fix |
| CVE-2025-31233 | Apple iPadOS improper input validation | 6.3CISA ADP v3.1 | 1.2% | 2025-05-12 | Fix |
| CVE-2025-31232 | Apple macOS logic flaw | 7.1CISA ADP v3.1 | 0.4% | 2025-05-12 | Fix |
| CVE-2025-31228 | Apple iPadOS improper authentication | 6.8CISA ADP v3.1 | 0.3% | 2025-05-12 | Fix |
| CVE-2025-31227 | Apple iOS and iPadOS incorrect authorization | 4.6CISA ADP v3.1 | 0.3% | 2025-05-12 | Fix |
| CVE-2025-31226 | Apple iPadOS logic flaw | 5.5CISA ADP v3.1 | 0.2% | 2025-05-12 | Fix |
| CVE-2025-31225 | Apple iOS and iPadOS information disclosure | 7.1CISA ADP v3.1 | 0.4% | 2025-05-12 | Fix |
| CVE-2025-31224 | Apple macOS logic flaw | 7.8CISA ADP v3.1 | 0.2% | 2025-05-12 | Fix |
| CVE-2025-31223 | Apple Safari buffer overflow | 8.0CISA ADP v3.1 | 0.6% | 2025-05-12 | Fix |
| CVE-2025-31222 | Apple macOS improper privilege management | 7.8CISA ADP v3.1 | 0.2% | 2025-05-12 | Fix |
| CVE-2025-31221 | Apple iPadOS integer overflow | 7.5CISA ADP v3.1 | 1.0% | 2025-05-12 | Fix |
| CVE-2025-31220 | Apple iPadOS information disclosure | 5.5CISA ADP v3.1 | 0.2% | 2025-05-12 | Fix |
| CVE-2025-31219 | Apple iPadOS denial of service | 7.1CISA ADP v3.1 | 1.1% | 2025-05-12 | Fix |
| CVE-2025-31218 | Apple macOS information disclosure | 6.2CISA ADP v3.1 | 0.2% | 2025-05-12 | Fix |
| CVE-2025-31217 | Apple Safari denial of service | 6.5CISA ADP v3.1 | 0.7% | 2025-05-12 | Fix |
| CVE-2025-31215 | Apple Safari denial of service | 6.5CISA ADP v3.1 | 0.6% | 2025-05-12 | Fix |
| CVE-2025-31214 | Apple iOS and iPadOS man-in-the-middle | 8.1CISA ADP v3.1 | 0.5% | 2025-05-12 | Fix |
| CVE-2025-31213 | Apple iPadOS sensitive information in log files | 7.6CISA ADP v3.1 | 0.6% | 2025-05-12 | Fix |
| CVE-2025-31212 | Apple macOS information disclosure | 5.5CISA ADP v3.1 | 0.2% | 2025-05-12 | Fix |
| CVE-2025-31210 | Apple iPadOS denial of service | 6.5CISA ADP v3.1 | 0.5% | 2025-05-12 | Fix |
| CVE-2025-31209 | Apple iPadOS out-of-bounds read | 6.3CISA ADP v3.1 | 0.8% | 2025-05-12 | Fix |
| CVE-2025-31208 | Apple iPadOS improper input validation | 7.5CISA ADP v3.1 | 1.3% | 2025-05-12 | Fix |
| CVE-2025-31207 | Apple iOS and iPadOS logic flaw | 7.7CISA ADP v3.1 | 0.3% | 2025-05-12 | Fix |
| CVE-2025-31206 | Apple Safari type confusion | 4.3CISA ADP v3.1 | 1.0% | 2025-05-12 | Fix |
| CVE-2025-31205 | Apple Safari cross-site request forgery | 6.5CISA ADP v3.1 | 0.4% | 2025-05-12 | Fix |
| CVE-2025-31204 | Apple Safari memory corruption | 8.8CISA ADP v3.1 | 0.7% | 2025-05-12 | Fix |
| CVE-2025-31196 | Apple iPadOS out-of-bounds read | 5.5CISA ADP v3.1 | 0.2% | 2025-05-12 | Fix |
| CVE-2025-31195 | Apple macOS sandbox escape | 6.3CISA ADP v3.1 | 0.2% | 2025-05-12 | Fix |
| CVE-2025-30453 | Apple macOS improper handling of insufficient permissions | 7.8CISA ADP v3.1 | 0.2% | 2025-05-12 | Fix |
| CVE-2025-30448 | Apple iPadOS missing authorization | 9.1CISA ADP v3.1 | 1.0% | 2025-05-12 | Fix |
| CVE-2025-30442 | Apple macOS privilege escalation | 7.8CISA ADP v3.1 | 0.2% | 2025-05-12 | Fix |
| CVE-2025-30440 | Apple macOS incorrect authorization | 5.5CISA ADP v3.1 | 0.2% | 2025-05-12 | Fix |
| CVE-2025-30436 | Apple iOS and iPadOS improper access control | 9.1CISA ADP v3.1 | 0.5% | 2025-05-12 | Fix |
| CVE-2025-26846 | Znuny missing authorization | 9.8CISA ADP v3.1 | 0.4% | 2025-05-12 | Fix |
| CVE-2025-26841 | wpeverest Everest Forms cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2025-05-12 | |
| CVE-2025-24274 | Apple macOS improper input validation | 7.8CISA ADP v3.1 | 0.2% | 2025-05-12 | Fix |
| CVE-2025-24258 | Apple macOS improper privilege management | 7.8CISA ADP v3.1 | 0.2% | 2025-05-12 | Fix |
| CVE-2025-24225 | Apple iPadOS cross-site scripting | 6.5CISA ADP v3.1 | 0.5% | 2025-05-12 | Fix |
| CVE-2025-24223 | Apple Safari cross-site request forgery | 8.0CISA ADP v3.1 | 0.3% | 2025-05-12 | Fix |
| CVE-2025-24222 | Apple macOS memory corruption | 6.5CISA ADP v3.1 | 0.5% | 2025-05-12 | Fix |
| CVE-2025-24220 | Apple iPadOS insecure permissions | 5.5CISA ADP v3.1 | 0.2% | 2025-05-12 | Fix |
| CVE-2025-24155 | Apple macOS information disclosure | 5.5CISA ADP v3.1 | 0.2% | 2025-05-12 | Fix |
| CVE-2025-24144 | Apple iPadOS information disclosure | 5.5CISA ADP v3.1 | 0.2% | 2025-05-12 | Fix |
| CVE-2025-24142 | Apple macOS information disclosure | 5.5CISA ADP v3.1 | 0.2% | 2025-05-12 | Fix |
| CVE-2025-24111 | Apple iPadOS memory corruption | 5.5CISA ADP v3.1 | 0.2% | 2025-05-12 | Fix |
| CVE-2025-22247 | VMware Tools insecure file handling vulnerability | 6.1CNA v3.1 | 0.3% | 2025-05-12 | Fix |
| CVE-2025-4561 | Kinfor KFOX arbitrary file upload | 8.7CNA v4.0 | 0.7% | 2025-05-12 | Fix |
| CVE-2025-4560 | Netvision ISOinsight missing authentication | 6.9CNA v4.0 | 0.3% | 2025-05-12 | Fix |
| CVE-2025-4559 | Netvision ISOinsight SQL injection | 9.3CNA v4.0 | 0.5% | 2025-05-12 | Fix |
| CVE-2025-4558 | WormHole Tech GPM unverified password change | 9.3CNA v4.0 | 0.5% | 2025-05-12 | Fix |
| CVE-2025-4557 | ZONG YU Parking Management System missing authentication | 8.8CNA v4.0 | 0.5% | 2025-05-12 | |
| CVE-2025-4556 | ZONG YU Okcat Parking Management Platform arbitrary file upload | 9.3CNA v4.0 | 0.7% | 2025-05-12 | |
| CVE-2025-4555 | ZONG YU Okcat Parking Management Platform missing authentication | 9.3CNA v4.0 | 0.6% | 2025-05-12 | |
| CVE-2025-4554 | PHPGurukul Apartment Visitors Management System bwdates-passreports-details.php SQL injection | 9.8v3.1 | 0.5% | 2025-05-12 | |
| CVE-2025-4553 | PHPGurukul Apartment Visitors Management System bwdates-reports-details.php SQL injection | 9.8v3.1 | 0.5% | 2025-05-12 | |
| CVE-2025-4552 | ContiNew Admin password unverified password change | 8.1v3.1 | 0.5% | 2025-05-12 | |
| CVE-2025-3659 | Improper authentication handling for Digi PortServer TS; Digi One SP, SP IA, IA; Digi One IAP | 9.4CNA v4.0 | 0.3% | 2025-05-12 | Fix |
| CVE-2025-3649 | LightPress Lightbox WordPress plugin Contributor+ stored XSS | 6.8CISA ADP v3.1 | 0.4% | 2025-05-12 | Fix |
| CVE-2025-3632 | IBM 4769 Developers Toolkit denial of service | 7.5CNA v3.1 | 0.5% | 2025-05-12 | Fix |
| CVE-2025-3597 | Firelight Lightbox WordPress plugin Contributor+ stored XSS | 5.9CISA ADP v3.1 | 0.3% | 2025-05-12 | Fix |
| CVE-2025-3496 | AUMA Riester: Buffer overflow in service telegram | 7.5CNA v3.1 | 0.6% | 2025-05-12 | Fix |
| CVE-2025-1533 | ASUS Armoury Crate AsIO3.sys driver stack-based buffer overflow | 8.2CNA v4.0 | 0.3% | 2025-05-12 | Fix |
| CVE-2025-1079 | RCE in Google Web Designer | 7.8CNA v3.1 | 0.2% | 2025-05-12 | Fix |
| CVE-2025-47828 | Lumi H5P-Nodejs-library @lumieducation/h5p-server fails to Sanitize Plain Text Strings | 6.4CNA v3.1 | 0.3% | 2025-05-11 | Fix |
| CVE-2025-4551 | ContiNew Admin file cross-site scripting | 5.4v3.1 | 0.4% | 2025-05-11 | |
| CVE-2025-4550 | PHPGurukul Apartment Visitors Management System pass-details.php SQL injection | 9.8v3.1 | 0.5% | 2025-05-11 | |
| CVE-2025-4549 | Campcodes Online Food Ordering System register-router.php SQL injection | 9.8v3.1 | 0.5% | 2025-05-11 | |
| CVE-2025-4548 | Campcodes Online Food Ordering System router.php SQL injection | 9.8v3.1 | 0.5% | 2025-05-11 | |
| CVE-2025-4547 | SourceCodester Web-based Pharmacy Product Management System Add User page cross-site scripting | 4.8v3.1 | 0.4% | 2025-05-11 | |
| CVE-2025-4546 | 1Panel-dev MaxKB Knowledge Base module CSV injection | 8.8v3.1 | 0.7% | 2025-05-11 | |
| CVE-2025-4545 | Ctcms Content Management System File Tpl.php del path traversal | 8.1v3.1 | 0.8% | 2025-05-11 | |
| CVE-2025-4544 | D-Link DI-8100 jhttpd ddos.asp stack-based overflow | 7.2v3.1 | 10.9% | 2025-05-11 | Emerging Threats |
| CVE-2025-4543 | LyLme Spage ajax_link.php SQL injection | 6.9CNA v4.0 | 0.5% | 2025-05-11 | |
| CVE-2025-4542 | Freeebird Hotel 酒店管理系统 API SessionInterceptor.java cross-domain policy | 4.2v3.1 | 0.3% | 2025-05-11 | |
| CVE-2025-4541 | LmxCMS POST Request ZtAction.class.php manageZt SQL injection | 8.8v3.1 | 0.5% | 2025-05-11 | |
| CVE-2025-4540 | MTSoftware C-Lodop CLodopPrintService unquoted search path | 7.3CNA v4.0 | 0.3% | 2025-05-11 | |
| CVE-2025-4539 | Hainan ToDesk DLL file parser profapi.dll uncontrolled search path | 7.3CNA v4.0 | 0.2% | 2025-05-11 | |
| CVE-2025-4538 | kkFileView fileUpload unrestricted upload | 9.8v3.1 | 0.4% | 2025-05-11 | |
| CVE-2025-4537 | yangzongzhuan RuoYi-Vue Password login.vue sensitive information in a cookie | 2.3CNA v4.0 | 0.3% | 2025-05-11 | |
| CVE-2025-4536 | Gosuncn Audio-Visual Integrated Management Platform listByPage endpoint information disclosure | 6.9CNA v4.0 | 0.7% | 2025-05-11 | |
| CVE-2025-4535 | Gosuncn Audio-Visual Integrated Management Platform information disclosure | 6.9CNA v4.0 | 0.7% | 2025-05-11 | |
| CVE-2025-4534 | SunGrow Logger1000 weak password | 6.3CNA v4.0 | 0.4% | 2025-05-11 | |
| CVE-2025-4533 | JeecgBoot Document library upload zip unzipFile resource consumption | 7.5v3.1 | 0.7% | 2025-05-11 | |
| CVE-2025-4532 | Shanghai Bairui Information Technology SunloginClient sunlogin_guard.exe uncontrolled search path | 7.3CNA v4.0 | 0.2% | 2025-05-11 | |
| CVE-2025-4531 | Seeyon Zhiyuan OA Web Application System Beetl Template Handler code injection | 8.8v3.1 | 0.5% | 2025-05-11 | |
| CVE-2025-4530 | Feng_ha_ha/megagao ssm-erp/production_ssm File FileController.java handleFileDownload path traversal | 5.3CNA v4.0 | 0.5% | 2025-05-11 | |
| CVE-2025-4529 | Seeyon Zhiyuan OA Web Application System ZIP File M3CoreController.class download path traversal | 5.3CNA v4.0 | 0.5% | 2025-05-11 | |
| CVE-2025-4528 | Dígitro NGC Explorer session expiration | 9.8v3.1 | 0.4% | 2025-05-11 | Fix |
| CVE-2025-4527 | Dígitro NGC Explorer Password Transmission client-side enforcement of server-side security | 5.9v3.1 | 0.6% | 2025-05-11 | Fix |
| CVE-2025-4526 | Dígitro NGC Explorer Configuration missing password field masking | 5.5v3.1 | 0.3% | 2025-05-11 | Fix |
| CVE-2025-47817 | BlueWave Checkmate web parameter tampering | 8.8CNA v3.1 | 0.5% | 2025-05-10 | |
| CVE-2025-47816 | GNU PSPP out-of-bounds read | 9.1v3.1 | 0.3% | 2025-05-10 | |
| CVE-2025-47815 | GNU PSPP heap-based buffer overflow | 9.8v3.1 | 0.3% | 2025-05-10 | |
| CVE-2025-47814 | GNU PSPP heap-based buffer overflow | 9.8v3.1 | 0.3% | 2025-05-10 | |
| CVE-2025-4525 | Discord WINSTA.dll uncontrolled search path | 7.8v3.1 | 0.3% | 2025-05-10 | |
| CVE-2025-4515 | Zylon PrivateGPT settings.yaml cross-domain policy | 6.5v3.1 | 0.3% | 2025-05-10 | |
| CVE-2025-4514 | Zhengzhou Jiuhua Electronic Technology Mayicms javascript.php SQL injection | 9.8v3.1 | 0.4% | 2025-05-10 | |
| CVE-2025-4513 | Catalyst User Key Authentication Plugin Logout logout.php redirect | 5.3CNA v4.0 | 0.4% | 2025-05-10 | |
| CVE-2025-4512 | Inetum IODAS app.jsp cross-site scripting | 5.3CNA v4.0 | 0.4% | 2025-05-10 | |
| CVE-2025-4511 | vector4wang spring-boot-quick quick-img2txt Img2TxtController.java ResponseEntity path traversal | 5.3CNA v4.0 | 0.5% | 2025-05-10 | |
| CVE-2025-4510 | Changjietong UFIDA CRM optntyday.php SQL injection | 5.3CNA v4.0 | 0.3% | 2025-05-10 | |
| CVE-2025-4509 | PHPGurukul e-Diary Management System manage-notes.php SQL injection | 9.8v3.1 | 0.5% | 2025-05-10 | |
| CVE-2025-4508 | PHPGurukul e-Diary Management System my-profile.php SQL injection | 9.8v3.1 | 0.5% | 2025-05-10 | |
| CVE-2025-4507 | Campcodes Online Food Ordering System add-item.php SQL injection | 9.8v3.1 | 0.5% | 2025-05-10 | |
| CVE-2025-4506 | Campcodes Online Food Ordering System menu-router.php SQL injection | 9.8v3.1 | 0.5% | 2025-05-10 | |
| CVE-2025-4505 | PHPGurukul Apartment Visitors Management System category.php SQL injection | 9.8v3.1 | 0.5% | 2025-05-10 | |
| CVE-2025-4504 | SourceCodester Online College Library System index.php SQL injection | 9.8v3.1 | 0.5% | 2025-05-10 | |
| CVE-2025-4503 | Campcodes Sales and Inventory System customer_update.php SQL injection | 9.8v3.1 | 0.5% | 2025-05-10 | |
| CVE-2025-4502 | Campcodes Sales and Inventory System creditor_add.php SQL injection | 9.8v3.1 | 0.5% | 2025-05-10 | |
| CVE-2025-4501 | code-projects Album Management System Search Albums searchalbum stack-based overflow | 7.8v3.1 | 0.3% | 2025-05-10 | |
| CVE-2025-4500 | code-projects Hotel Management System Edit Room edit stack-based overflow | 7.8v3.1 | 0.3% | 2025-05-10 | |
| CVE-2025-4499 | code-projects Simple Hospital Management System Add Information add stack-based overflow | 7.8v3.1 | 0.3% | 2025-05-10 | |
| CVE-2025-4498 | code-projects Simple Bus Reservation System Install Bus install stack-based overflow | 7.8v3.1 | 0.3% | 2025-05-10 | |
| CVE-2025-4497 | code-projects Simple Banking System Sign In buffer overflow | 7.8v3.1 | 0.4% | 2025-05-10 | |
| CVE-2025-4496 | TOTOLINK T10/A3100R/A950RG/A800R/N600R/A3000RU/A810R cstecgi.cgi CloudACMunualUpdate buffer overflow | 9.8v3.1 | 1.2% | 2025-05-10 | |
| CVE-2025-4495 | JAdmin-JAVA JAdmin save cross-site scripting | 5.4v3.1 | 0.4% | 2025-05-10 | |
| CVE-2025-3878 | SMS Alert Order Notifications WooCommerce WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-05-10 | Fix |
| CVE-2025-3876 | SMS Alert Order Notifications WooCommerce WordPress plugin privilege escalation | 8.8v3.1 | 0.4% | 2025-05-10 | Fix |
| CVE-2025-2944 | Jeg Elementor Kit WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2025-05-10 | Fix |
| CVE-2025-2158 | WordPress Review Plugin: The Ultimate Solution for Building a Review Website local file inclusion | 8.8CNA v3.1 | 0.8% | 2025-05-10 | |
| CVE-2025-1752 | Denial of service in run-llama/llama_index | 7.5CNA v3.0 | 0.5% | 2025-05-10 | Fix |
| CVE-2025-1137 | IBM Storage Scale command injection | 7.5CNA v3.1 | 0.4% | 2025-05-10 | Fix |
| CVE-2025-47737 | trailer mishandles allocating with a size of zero | 9.8v3.1 | 0.5% | 2025-05-09 | |
| CVE-2025-47736 | libsql-sqlite3-parser crash due to invalid UTF-8 input | 2.9CNA v3.1 | 0.3% | 2025-05-09 | |
| CVE-2025-47735 | wgp race condition in inner::drop | 9.8v3.1 | 0.3% | 2025-05-09 | |
| CVE-2025-47424 | Retool use of a less trusted source | 7.1CNA v3.1 | 0.2% | 2025-05-09 | |
| CVE-2025-47269 | code-server session cookie can be extracted by having user visit specially crafted proxy URL | 8.3CNA v3.1 | 44.5% | 2025-05-09 | Fix |
| CVE-2025-46392 | Apache Commons Configuration uncontrolled resource consumption | 6.5CISA ADP v3.1 | 2.1% | 2025-05-09 | Fix |
| CVE-2025-46193 | Lerouxyxchire Client Database Management System unrestricted file upload | 9.8CISA ADP v3.1 | 0.8% | 2025-05-09 | |
| CVE-2025-46192 | Lerouxyxchire Client Database Management System SQL injection | 9.8CISA ADP v3.1 | 0.4% | 2025-05-09 | |
| CVE-2025-46191 | Lerouxyxchire Client Database Management System arbitrary file upload | 9.8CISA ADP v3.1 | 1.2% | 2025-05-09 | |
| CVE-2025-46190 | Lerouxyxchire Client Database Management System SQL injection | 9.8CISA ADP v3.1 | 0.4% | 2025-05-09 | |
| CVE-2025-46189 | Lerouxyxchire Client Database Management System SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2025-05-09 | |
| CVE-2025-46188 | Lerouxyxchire Client Database Management System SQL injection | 9.8CISA ADP v3.1 | 0.7% | 2025-05-09 | |
| CVE-2025-45887 | wanglongcn Yifang server-side request forgery | 9.1CISA ADP v3.1 | 0.4% | 2025-05-09 | |
| CVE-2025-45885 | PHPGurukul Vehicle Parking Management System SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2025-05-09 | |
| CVE-2025-45513 | Tenda FH451 stack-based buffer overflow | 9.8CISA ADP v3.1 | 0.6% | 2025-05-09 | |
| CVE-2025-37889 | Linux kernel ASoC volume control vulnerability | 5.5v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37888 | Linux kernel mlx5 flow table driver null pointer dereference | 5.5v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37887 | Linux kernel pds_core firmware control driver vulnerability | 7.1CNA v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37886 | Linux kernel pds_core admin queue driver null pointer dereference | 7.8CNA v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37885 | Linux kernel KVM x86 interrupt remapping use-after-free | 8.8CNA v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37884 | Linux kernel BPF tracing subsystem deadlock | 5.5v3.1 | 0.2% | 2025-05-09 | Fix |
| CVE-2025-37883 | Linux kernel s390 SCLP console driver null pointer dereference | 5.5v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37882 | Linux kernel xHCI USB driver use-after-free | 7.8CNA v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37881 | Linux kernel Aspeed USB gadget driver null pointer dereference | 5.5v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37880 | Linux kernel UML time-travel scheduler deadlock | 5.5v3.1 | 0.2% | 2025-05-09 | Fix |
| CVE-2025-37879 | Linux kernel 9p/net null pointer dereference | 9.8CNA v3.1 | 0.7% | 2025-05-09 | Fix |
| CVE-2025-37878 | Linux kernel perf event initialization denial of service | 5.5v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37877 | Linux kernel IOMMU DMA ops cleanup denial of service | 5.5v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37876 | Linux kernel netfs proc interface null pointer dereference | 7.0CNA v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37875 | In the Linux kernel, the following vulnerability has been resolved: igc: fix PTM cycle trigger logic Writing to clear the PTM status 'valid' bit while the PTM cycle is triggered results in unreliable PTM operation. To fix this, clear the PTM 'trigger' and status after each PTM transaction. The is | 5.5v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37874 | Linux kernel ngbe memory leak | 5.5v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37873 | Linux kernel bnxt crash | 7.8CNA v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37872 | Linux kernel txgbe memory leak | 5.5v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37871 | Linux kernel NFS server delegation recall deadlock | 7.5CNA v3.1 | 0.8% | 2025-05-09 | Fix |
| CVE-2025-37870 | Linux kernel AMD display link training denial of service | 5.5NVD v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37869 | Linux kernel drm/xe use-after-free | 7.8CNA v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37868 | Linux kernel Xe GPU driver userptr notifier deadlock | 5.5v3.1 | 0.2% | 2025-05-09 | Fix |
| CVE-2025-37867 | Linux kernel RDMA core memory allocation vulnerability | 5.5v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37866 | Linux kernel mlxbf-bootctl driver vulnerability | 5.5v3.1 | 0.2% | 2025-05-09 | Fix |
| CVE-2025-37865 | Linux kernel mv88e6xxx switch driver vulnerability | 5.5v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37864 | Linux kernel DSA switch driver denial of service | 5.5v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37863 | Linux kernel overlay filesystem vulnerability | 5.5v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37862 | Linux kernel pidff null pointer dereference | 5.5v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37861 | Linux kernel mpi3mr driver reply queue use-after-free | 7.8CNA v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37859 | Linux kernel page pool denial of service | 5.5v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37858 | Linux kernel JFS filesystem integer overflow | 5.5v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37857 | Linux kernel SCSI tape driver vulnerability | 5.5v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37856 | Linux kernel btrfs block group list race condition | 7.8CNA v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37855 | Linux kernel AMD display driver null pointer dereference | 5.5v3.1 | 0.2% | 2025-05-09 | Fix |
| CVE-2025-37854 | Linux kernel amdkfd GPU reset handling use-after-free | 7.8CNA v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37853 | Linux kernel amdkfd debugfs interface null pointer dereference | 5.5v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37852 | Linux kernel amdgpu Powerplay driver null pointer dereference | 5.5v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37851 | Linux kernel omapfb framebuffer driver out-of-bounds write | 5.5v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37850 | Linux kernel MediaTek PWM driver divide-by-zero | 5.5v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37849 | Linux kernel KVM arm64 vGIC use-after-free | 8.8CNA v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37848 | Linux kernel ivpu accelerator driver deadlock | 5.5v3.1 | 0.2% | 2025-05-09 | Fix |
| CVE-2025-37847 | Linux kernel ivpu accelerator driver deadlock | 5.5v3.1 | 0.2% | 2025-05-09 | Fix |
| CVE-2025-37846 | Linux kernel arm64 MOPS emulation out-of-bounds read | 7.1v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37845 | Linux kernel fprobe tracing events use-after-free | 7.8CNA v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37844 | Linux kernel cifs null pointer dereference | 5.5v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37843 | Linux kernel pciehp hotplug driver deadlock | 5.5v3.1 | 0.2% | 2025-05-09 | Fix |
| CVE-2025-37842 | Linux kernel fsl-qspi driver denial of service | 5.5v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37841 | Linux kernel cpupower bench tool null pointer dereference | 5.5v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37840 | Linux kernel brcmnand uninitialized resource use | 7.8v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37839 | Linux kernel jbd2 journaling layer denial of service | 7.8v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37837 | Linux kernel Tegra241 CMDQV IOMMU driver vulnerability | 5.5v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-37836 | Linux kernel PCI host bridge registration memory leak | 5.5v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-29509 | Jan shell.openExternal function command injection | 8.8CISA ADP v3.1 | 0.6% | 2025-05-09 | |
| CVE-2025-28203 | Govicture RX1800 code injection | 8.8CISA ADP v3.1 | 0.9% | 2025-05-09 | |
| CVE-2025-28202 | Govicture RX1800 missing authorization | 8.8CISA ADP v3.1 | 0.6% | 2025-05-09 | |
| CVE-2025-28201 | Govicture RX1800 arbitrary code execution | 6.8CISA ADP v3.1 | 0.4% | 2025-05-09 | |
| CVE-2025-28200 | Govicture RX1800 weak password requirements | 9.8CISA ADP v3.1 | 0.7% | 2025-05-09 | |
| CVE-2025-4494 | JAdmin-JAVA JAdmin Admin Backend NoNeedLoginController.java toLogin improper authentication | 9.8v3.1 | 0.7% | 2025-05-09 | |
| CVE-2025-4492 | Campcodes Online Food Ordering System ticket-message.php SQL injection | 9.8v3.1 | 0.6% | 2025-05-09 | |
| CVE-2025-4491 | Campcodes Online Food Ordering System ticket-status.php SQL injection | 9.8v3.1 | 0.7% | 2025-05-09 | |
| CVE-2025-4490 | Campcodes Online Food Ordering System view-ticket-admin.php SQL injection | 9.8v3.1 | 0.7% | 2025-05-09 | |
| CVE-2025-4489 | Campcodes Online Food Ordering System user-router.php SQL injection | 9.8v3.1 | 0.7% | 2025-05-09 | |
| CVE-2025-4488 | itsourcecode Gym Management System ajax.php SQL injection | 9.8v3.1 | 0.5% | 2025-05-09 | |
| CVE-2025-4487 | itsourcecode Gym Management System ajax.php SQL injection | 9.8v3.1 | 0.5% | 2025-05-09 | |
| CVE-2025-4486 | itsourcecode Gym Management System ajax.php SQL injection | 9.8v3.1 | 0.5% | 2025-05-09 | |
| CVE-2025-4485 | itsourcecode Gym Management System ajax.php SQL injection | 9.8v3.1 | 0.5% | 2025-05-09 | |
| CVE-2025-4484 | itsourcecode Gym Management System ajax.php SQL injection | 9.8v3.1 | 0.5% | 2025-05-09 | |
| CVE-2025-4483 | itsourcecode Gym Management System view_pdetails.php SQL injection | 9.8v3.1 | 0.5% | 2025-05-09 | |
| CVE-2025-4482 | Project Worlds Student Project Allocation System forgot_password_sql.php SQL injection | 9.8v3.1 | 0.5% | 2025-05-09 | |
| CVE-2025-4481 | SourceCodester Apartment Visitor Management System search-result.php SQL injection | 9.8v3.1 | 0.5% | 2025-05-09 | |
| CVE-2025-4480 | code-projects Simple College Management System Add New Student input stack-based overflow | 7.8v3.1 | 0.4% | 2025-05-09 | |
| CVE-2025-4472 | code-projects Departmental Store Management System bill stack-based overflow | 7.8v3.1 | 0.5% | 2025-05-09 | |
| CVE-2025-4471 | code-projects Jewelery Store Management system Search Item view stack-based overflow | 7.8v3.1 | 0.4% | 2025-05-09 | |
| CVE-2025-4470 | SourceCodester Online Student Clearance System add-student.php cross-site scripting | 5.4v3.1 | 0.6% | 2025-05-09 | |
| CVE-2025-4469 | SourceCodester Online Student Clearance System add-admin.php cross-site scripting | 5.4v3.1 | 0.6% | 2025-05-09 | |
| CVE-2025-4468 | SourceCodester Online Student Clearance System edit-photo.php unrestricted upload | 9.8v3.1 | 1.2% | 2025-05-09 | |
| CVE-2025-4467 | SourceCodester Online Student Clearance System edit-admin.php SQL injection | 9.8v3.1 | 1.0% | 2025-05-09 | |
| CVE-2025-4466 | itsourcecode Gym Management System ajax.php SQL injection | 9.8v3.1 | 0.9% | 2025-05-09 | |
| CVE-2025-4465 | itsourcecode Gym Management System ajax.php SQL injection | 9.8v3.1 | 0.9% | 2025-05-09 | |
| CVE-2025-4464 | itsourcecode Gym Management System ajax.php SQL injection | 9.8v3.1 | 0.9% | 2025-05-09 | |
| CVE-2025-4463 | itsourcecode Gym Management System ajax.php SQL injection | 9.8v3.1 | 0.9% | 2025-05-09 | |
| CVE-2025-4462 | TOTOLINK N150RT formWsc buffer overflow | 8.7CNA v4.0 | 2.0% | 2025-05-09 | |
| CVE-2025-4461 | TOTOLINK N150RT Virtual Server page cross-site scripting | 5.4v3.1 | 0.6% | 2025-05-09 | |
| CVE-2025-4460 | TOTOLINK N150RT URL Filtering page cross-site scripting | 4.8v3.1 | 0.6% | 2025-05-09 | |
| CVE-2025-4459 | code-projects Patient Record Management System fecalysis_form.php SQL injection | 8.8v3.1 | 0.8% | 2025-05-09 | |
| CVE-2025-4458 | code-projects Patient Record Management System edit_upatient.php SQL injection | 8.8v3.1 | 0.8% | 2025-05-09 | |
| CVE-2025-4457 | Project Worlds Car Rental Project approve.php SQL injection | 9.8v3.1 | 0.9% | 2025-05-09 | |
| CVE-2025-4456 | Project Worlds Car Rental Project signup.php SQL injection | 9.8v3.1 | 0.9% | 2025-05-09 | |
| CVE-2025-4455 | Patch My PC Home Updater System.IO uncontrolled search path | 7.3CNA v4.0 | 0.3% | 2025-05-09 | |
| CVE-2025-4454 | D-Link DIR-619L wake_on_lan command injection | 9.8v3.1 | 6.7% | 2025-05-09 | |
| CVE-2025-4453 | D-Link DIR-619L formSysCmd command injection | 9.8v3.1 | 6.7% | 2025-05-09 | |
| CVE-2025-4452 | D-Link DIR-619L formSetWizard2 buffer overflow | 9.8v3.1 | 2.9% | 2025-05-09 | |
| CVE-2025-4451 | D-Link DIR-619L formSetWAN_Wizard52 buffer overflow | 9.8v3.1 | 2.9% | 2025-05-09 | |
| CVE-2025-4450 | D-Link DIR-619L formSetEasy_Wizard buffer overflow | 9.8v3.1 | 2.9% | 2025-05-09 | |
| CVE-2025-4449 | D-Link DIR-619L formEasySetupWizard3 buffer overflow | 9.8v3.1 | 2.9% | 2025-05-09 | |
| CVE-2025-4448 | D-Link DIR-619L formEasySetupWizard buffer overflow | 9.8v3.1 | 2.9% | 2025-05-09 | |
| CVE-2025-4447 | Buffer overflow in Eclipse OpenJ9 | 7.0CNA v4.0 | 0.2% | 2025-05-09 | Fix |
| CVE-2025-4446 | H3C GR-5400AX aspForm Edit_List_SSID buffer overflow | 8.6CNA v4.0 | 0.6% | 2025-05-09 | |
| CVE-2025-4445 | D-Link DIR-605L wake_on_lan command injection | 9.8v3.1 | 5.7% | 2025-05-09 | |
| CVE-2025-4443 | D-Link DIR-605L sub_454F2C command injection | 9.8v3.1 | 62.7% | 2025-05-09 | |
| CVE-2025-4442 | D-Link DIR-605L formSetWAN_Wizard55 buffer overflow | 9.8v3.1 | 2.7% | 2025-05-09 | |
| CVE-2025-4432 | Red Hat Enterprise Linux 10 some AES functions may panic when overflow checking is enabled in ring | 5.3CNA v3.1 | 1.0% | 2025-05-09 | Fix |
| CVE-2025-4403 | glenwpcoder Drag and Drop Multiple File Upload for WooCommerce unrestricted file upload | 9.8CNA v3.1 | 2.3% | 2025-05-09 | Exploit codeFix |
| CVE-2025-4382 | GRUB2 TPM auto-decryption rescue mode missing authentication | 5.9CNA v3.1 | 0.4% | 2025-05-09 | Fix |
| CVE-2025-4377 | Path traversal vulnerability in Sparx Pro Cloud Server WebEA webconfig in logview.php | 8.3CNA v4.0 | 0.8% | 2025-05-09 | |
| CVE-2025-4376 | Sparx Systems Pro Cloud Server improper input validation | 5.3CNA v4.0 | 0.7% | 2025-05-09 | |
| CVE-2025-4375 | Sparx Systems Pro Cloud Server cross-site request forgery vulnerability in Pro Cloud Server's WebEA | 6.9CNA v4.0 | 0.3% | 2025-05-09 | |
| CVE-2025-4206 | WordPress CRM, Email and Marketing Automation for WordPress WordPress plugin arbitrary file deletion | 7.2CNA v3.1 | 1.6% | 2025-05-09 | Fix |
| CVE-2025-3949 | Website Builder by SeedProd WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.6% | 2025-05-09 | Fix |
| CVE-2025-3897 | EUCookieLaw WordPress plugin unauthenticated arbitrary file read | 5.9CNA v3.1 | 0.8% | 2025-05-09 | Fix |
| CVE-2025-3811 | WPBookit WordPress plugin insecure direct object reference to unauthenticated privilege escalation | 9.8v3.1 | 0.7% | 2025-05-09 | Fix |
| CVE-2025-3810 | WPBookit WordPress plugin insecure direct object reference to unauthenticated privilege escalation | 9.8CNA v3.1 | 0.8% | 2025-05-09 | Fix |
| CVE-2025-3794 | WPForms Lite WordPress plugin stored cross-site scripting | 5.4CNA v3.1 | 0.3% | 2025-05-09 | Fix |
| CVE-2025-3714 | ATEN LCD KVM over IP Switch CL5708IM stack-based buffer overflow | 9.3CNA v4.0 | 1.6% | 2025-05-09 | Fix |
| CVE-2025-3713 | ATEN LCD KVM over IP Switch CL5708IM heap-based buffer overflow | 8.7CNA v4.0 | 1.0% | 2025-05-09 | Fix |
| CVE-2025-3712 | ATEN LCD KVM over IP Switch CL5708IM heap-based buffer overflow | 8.7CNA v4.0 | 1.0% | 2025-05-09 | Fix |
| CVE-2025-3711 | ATEN LCD KVM over IP Switch CL5708IM stack-based buffer overflow | 9.3CNA v4.0 | 1.6% | 2025-05-09 | Fix |
| CVE-2025-3710 | ATEN LCD KVM over IP Switch CL5708IM stack-based buffer overflow | 9.3CNA v4.0 | 1.6% | 2025-05-09 | Fix |
| CVE-2025-3605 | Frontend Login and Registration Blocks WordPress plugin unauthenticated privilege escalation | 9.8CNA v3.1 | 7.7% | 2025-05-09 | NucleiExploit codeFix |
| CVE-2025-3528 | Red Hat Mirror Registry quay-app container privilege escalation | 8.2CNA v3.1 | 0.2% | 2025-05-09 | Fix |
| CVE-2025-3463 | ASUS DriverHub improper certificate validation | 9.4CNA v4.0 | 0.9% | 2025-05-09 | Fix |
| CVE-2025-3462 | ASUS DriverHub origin validation error | 8.4CNA v4.0 | 0.5% | 2025-05-09 | Fix |
| CVE-2025-3455 | 1 Click WordPress Migration Plugin WordPress plugin unauthorized access | 8.8CNA v3.1 | 1.6% | 2025-05-09 | Fix |
| CVE-2025-2253 | IMITHEMES Listing WordPress plugin unauthenticated privilege escalation | 9.8CNA v3.1 | 0.8% | 2025-05-09 | Fix |
| CVE-2025-1993 | IBM App Connect Enterprise Certified Container information disclosure | 5.1CNA v3.1 | 0.1% | 2025-05-09 | Fix |
| CVE-2025-1278 | Insufficient granularity of access control in GitLab | 5.3CNA v3.1 | 0.4% | 2025-05-09 | Fix |
| CVE-2025-1087 | Arbitrary code execution in Kong Insomnia Desktop application | 9.3CNA v4.0 | 1.1% | 2025-05-09 | |
| CVE-2025-0549 | Authentication bypass using an alternate path or channel in GitLab | 6.8CNA v3.1 | 0.4% | 2025-05-09 | Fix |
| CVE-2025-47733 | Microsoft Power Apps information disclosure | 9.1CNA v3.1 | 2.0% | 2025-05-08 | Fix |
| CVE-2025-47732 | Microsoft Dataverse remote code execution | 8.7CNA v3.1 | 3.7% | 2025-05-08 | Fix |
| CVE-2025-47730 | TeleMessage archiving backend hard-coded credentials | 7.5v3.1 | 0.4% | 2025-05-08 | Fix |
| CVE-2025-47729 | TeleMessage TM SGNL hidden functionality | 4.9v3.1 | 0.4% | 2025-05-08 | KEVFix |
| CVE-2025-46833 | python-progrrames P73 Simple Python Encryption script vulnerability | 4.6CNA v4.0 | 0.3% | 2025-05-08 | Fix |
| CVE-2025-46812 | Trix vulnerable to cross-site scripting on copy and paste | 2.0CNA v4.0 | 0.7% | 2025-05-08 | Fix |
| CVE-2025-46712 | Erlang/OTP SSH has Strict KEX Violations | 3.7CNA v3.1 | 0.5% | 2025-05-08 | Fix |
| CVE-2025-46336 | Rack session gets restored after deletion | 4.2CNA v3.1 | 0.3% | 2025-05-08 | Fix |
| CVE-2025-45847 | Alfa Aip-w512 stack-based buffer overflow | 6.5CISA ADP v3.1 | 0.3% | 2025-05-08 | |
| CVE-2025-45846 | Alfa Aip-w512 stack-based buffer overflow | 8.8CISA ADP v3.1 | 0.6% | 2025-05-08 | |
| CVE-2025-45845 | TOTOLINK NR1800X stack-based buffer overflow | 8.8v3.1 | 0.7% | 2025-05-08 | |
| CVE-2025-45844 | TOTOLINK NR1800X stack-based buffer overflow | 8.8v3.1 | 0.7% | 2025-05-08 | |
| CVE-2025-45843 | TOTOLINK NR1800X stack-based buffer overflow | 8.8v3.1 | 0.7% | 2025-05-08 | |
| CVE-2025-45842 | TOTOLINK NR1800X stack-based buffer overflow | 8.8v3.1 | 0.9% | 2025-05-08 | Emerging Threats |
| CVE-2025-45841 | TOTOLINK NR1800X stack-based buffer overflow | 9.8v3.1 | 0.5% | 2025-05-08 | |
| CVE-2025-45820 | SLIMS Senayan Library Management System Bulian SQL injection | 6.5CISA ADP v3.1 | 0.3% | 2025-05-08 | |
| CVE-2025-45819 | SLIMS Senayan Library Management System Bulian SQL injection | 6.5CISA ADP v3.1 | 0.3% | 2025-05-08 | |
| CVE-2025-45818 | SLIMS Senayan Library Management System Bulian SQL injection | 6.5CISA ADP v3.1 | 0.3% | 2025-05-08 | |
| CVE-2025-45798 | TOTOLINK A950RG command execution | 9.8v3.1 | 1.2% | 2025-05-08 | |
| CVE-2025-45797 | TOTOLINK A950RG stack-based buffer overflow | 9.8v3.1 | 18.2% | 2025-05-08 | |
| CVE-2025-45790 | TOTOLINK A3100R stack-based buffer overflow | 9.8v3.1 | 0.8% | 2025-05-08 | |
| CVE-2025-45789 | TOTOLINK A3100R stack-based buffer overflow | 9.8v3.1 | 0.8% | 2025-05-08 | |
| CVE-2025-45788 | TOTOLINK A3100R stack-based buffer overflow | 9.8v3.1 | 0.8% | 2025-05-08 | |
| CVE-2025-45787 | TOTOLINK A3100R stack-based buffer overflow | 9.8v3.1 | 0.8% | 2025-05-08 | |
| CVE-2025-44023 | DNS-320 and DNS-320LW account_mgr.cgi command injection | 6.5CISA ADP v3.1 | 0.5% | 2025-05-08 | |
| CVE-2025-44021 | OpenStack Ironic fails to restrict paths used for file:// image URLs | 2.8CNA v3.1 | 0.2% | 2025-05-08 | Fix |
| CVE-2025-43926 | Znuny cross-site scripting | 6.1CISA ADP v3.1 | 0.2% | 2025-05-08 | Fix |
| CVE-2025-41450 | Authentication bypass with privileged access in Danfoss AK-SM 8xxA Series prior to | 8.2CNA v3.1 | 0.8% | 2025-05-08 | Reported exploitedExploit codeKCVFix |
| CVE-2025-40846 | HaloITSM open redirect via the returnUrl | 7.1CNA v4.0 | 0.4% | 2025-05-08 | Fix |
| CVE-2025-37834 | Linux kernel vmscan memory reclaim vulnerability | 5.5v3.1 | 0.2% | 2025-05-08 | Fix |
| CVE-2025-37833 | In the Linux kernel, the following vulnerability has been resolved: net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads Fix niu_try_msix() to not cause a fatal trap on sparc systems. Set PCI_DEV_FLAGS_MSIX_TOUCH_ENTRY_DATA_FIRST on the struct pci_dev to work around a bug in the | 5.5v3.1 | 0.2% | 2025-05-08 | Fix |
| CVE-2025-37831 | Linux kernel apple-soc null pointer dereference | 5.5v3.1 | 0.2% | 2025-05-08 | Fix |
| CVE-2025-37830 | Linux kernel SCMI cpufreq driver null pointer dereference | 5.5v3.1 | 0.2% | 2025-05-08 | Fix |
| CVE-2025-37829 | Linux kernel SCPI cpufreq driver null pointer dereference | 5.5v3.1 | 0.2% | 2025-05-08 | Fix |
| CVE-2025-37828 | Linux kernel UFS MCQ abort handler null pointer dereference | 5.5v3.1 | 0.2% | 2025-05-08 | Fix |
| CVE-2025-37827 | Linux kernel Btrfs zoned RAID1 block groups null pointer dereference | 5.5v3.1 | 0.2% | 2025-05-08 | Fix |
| CVE-2025-37826 | Linux kernel UFS MCQ transfer completion null pointer dereference | 5.5v3.1 | 0.2% | 2025-05-08 | Fix |
| CVE-2025-37825 | Linux kernel nvmet out-of-bounds access | 7.1v3.1 | 0.2% | 2025-05-08 | Fix |
| CVE-2025-37824 | Linux kernel TIPC monitor null pointer dereference | 5.5v3.1 | 0.2% | 2025-05-08 | Fix |
| CVE-2025-37823 | Linux kernel hfsc use-after-free | 7.8CNA v3.1 | 0.2% | 2025-05-08 | Fix |
| CVE-2025-37822 | Linux kernel RISC-V uprobes vulnerability | 7.8CNA v3.1 | 0.3% | 2025-05-08 | Fix |
| CVE-2025-37821 | Linux kernel EEVDF scheduler vulnerability | 5.5v3.1 | 0.2% | 2025-05-08 | Fix |
| CVE-2025-37820 | Linux kernel Xen netfront driver null pointer dereference | 7.5CNA v3.1 | 0.4% | 2025-05-08 | Fix |
| CVE-2025-37819 | Linux kernel irqchip/gic-v2m use-after-free | 7.8v3.1 | 0.2% | 2025-05-08 | Fix |
| CVE-2025-37818 | Linux kernel LoongArch huge page table handling vulnerability | 5.5v3.1 | 0.2% | 2025-05-08 | Fix |
| CVE-2025-37817 | Linux kernel MCB chameleon parser double free | 7.8v3.1 | 0.2% | 2025-05-08 | Fix |
| CVE-2025-37816 | Linux kernel mei vsc driver buffer overflow | 5.5v3.1 | 0.2% | 2025-05-08 | Fix |
| CVE-2025-37815 | Linux kernel pci1xxxx IRQ handler vulnerability | 5.5v3.1 | 0.2% | 2025-05-08 | Fix |
| CVE-2025-37814 | Linux kernel tty selection mouse reporting vulnerability | 7.8CNA v3.1 | 0.2% | 2025-05-08 | Fix |
| CVE-2025-37813 | Linux kernel xHCI Etron host controller workaround vulnerability | 7.8CNA v3.1 | 0.2% | 2025-05-08 | Fix |
| CVE-2025-37812 | Linux kernel cdns3 USB NCM gadget driver deadlock | 5.5v3.1 | 0.2% | 2025-05-08 | Fix |
| CVE-2025-37811 | Linux kernel chipidea ci_hdrc_imx USB driver null pointer dereference | 5.5v3.1 | 0.2% | 2025-05-08 | Fix |
| CVE-2025-37810 | Linux kernel dwc3 USB gadget driver out-of-bounds write | 7.8v3.1 | 0.2% | 2025-05-08 | Fix |
| CVE-2025-37809 | Linux kernel USB Type-C class driver null pointer dereference | 5.5v3.1 | 0.2% | 2025-05-08 | Fix |
| CVE-2025-37808 | Linux kernel null crypto algorithm vulnerability | 5.5v3.1 | 0.2% | 2025-05-08 | Fix |
| CVE-2025-37807 | Linux kernel BPF percpu hash map memory leak | 5.5NVD v3.1 | 0.2% | 2025-05-08 | Fix |
| CVE-2025-37806 | Linux kernel NTFS3 file system null pointer dereference | 5.5NVD v3.1 | 0.2% | 2025-05-08 | Fix |
| CVE-2025-37805 | Linux kernel virtio sound driver vulnerability | 5.5v3.1 | 0.2% | 2025-05-08 | Fix |
| CVE-2025-37803 | Linux kernel udmabuf allocator vulnerability | 7.8v3.1 | 0.2% | 2025-05-08 | Fix |
| CVE-2025-37802 | Linux kernel ksmbd durable scavenger improper locking | 7.5CNA v3.1 | 0.4% | 2025-05-08 | Fix |
| CVE-2025-37801 | Linux kernel spi-imx driver null pointer dereference | 7.8CNA v3.1 | 0.2% | 2025-05-08 | Fix |
| CVE-2025-37800 | Linux kernel device uevent handling null pointer dereference | 7.1CNA v3.1 | 0.2% | 2025-05-08 | Fix |
| CVE-2025-33072 | Microsoft Msagsfeedback.azurewebsites.net information disclosure | 8.1CNA v3.1 | 1.8% | 2025-05-08 | Fix |
| CVE-2025-32873 | Django has a denial of service possibility in strip_tags | 5.3v3.1 | 13.6% | 2025-05-08 | Exploit codeFix |
| CVE-2025-31946 | Pixmeo OsiriX MD use-after-free | 6.9CNA v4.0 | 0.3% | 2025-05-08 | Fix |
| CVE-2025-30102 | Dell PowerScale OneFS out-of-bounds write | 5.5CNA v3.1 | 0.2% | 2025-05-08 | Fix |
| CVE-2025-30101 | Dell PowerScale OneFS time-of-check time-of-use race condition | 4.4CNA v3.1 | 0.2% | 2025-05-08 | Fix |
| CVE-2025-29972 | Microsoft Azure Storage Resource Provider spoofing | 9.9CNA v3.1 | 3.5% | 2025-05-08 | Exploit codeFix |
| CVE-2025-29827 | Microsoft Azure Automation elevation of privilege | 9.9CNA v3.1 | 1.7% | 2025-05-08 | Fix |
| CVE-2025-29813 | Microsoft Azure DevOps elevation of privilege | 10.0CNA v3.1 | 1.8% | 2025-05-08 | Fix |
| CVE-2025-28074 | phpList cross-site scripting | 6.1CISA ADP v3.1 | 0.6% | 2025-05-08 | Fix |
| CVE-2025-28073 | phpList cross-site scripting | 6.1CISA ADP v3.1 | 0.6% | 2025-05-08 | Fix |
| CVE-2025-27720 | Pixmeo OsiriX MD cleartext transmission of sensitive information | 9.3CNA v4.0 | 0.3% | 2025-05-08 | Fix |
| CVE-2025-27695 | Dell Wyse Management Suite authentication bypass by spoofing | 4.9CNA v3.1 | 0.7% | 2025-05-08 | Fix |
| CVE-2025-27578 | Pixmeo OsiriX MD use-after-free | 8.7CNA v4.0 | 1.0% | 2025-05-08 | Fix |
| CVE-2025-26847 | Znuny weak password requirements | 7.5NVD v3.1 | 0.4% | 2025-05-08 | Fix |
| CVE-2025-26845 | Znuny An eval injection | 9.8v3.1 | 0.5% | 2025-05-08 | Fix |
| CVE-2025-26844 | Znuny sensitive cookie without the HttpOnly flag | 9.8CISA ADP v3.1 | 0.4% | 2025-05-08 | Fix |
| CVE-2025-26842 | Znuny incorrect authorization | 7.5CISA ADP v3.1 | 0.4% | 2025-05-08 | Fix |
| CVE-2025-4441 | D-Link DIR-605L formSetWAN_Wizard534 buffer overflow | 9.8v3.1 | 2.7% | 2025-05-08 | |
| CVE-2025-4440 | H3C GR-1800AX aspForm EnableIpv6 buffer overflow | 8.6CNA v4.0 | 0.6% | 2025-05-08 | |
| CVE-2025-4208 | NEX-Forms Ultimate Form Builder Contact forms and much more WordPress plugin limited code execution | 6.3CNA v3.1 | 0.4% | 2025-05-08 | Fix |
| CVE-2025-4207 | PostgreSQL buffer over-read | 5.9CNA v3.1 | 0.8% | 2025-05-08 | Fix |
| CVE-2025-4127 | WP SEO Structured Data Schema WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-05-08 | Fix |
| CVE-2025-4098 | Out-of-bounds read in Horner Automation Cscape | 8.4CNA v4.0 | 0.3% | 2025-05-08 | Fix |
| CVE-2025-3862 | Contest Gallery WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2025-05-08 | Fix |
| CVE-2025-3759 | Missing authentication for Changing Device Configuration in WF2220 | 8.7CNA v4.0 | 0.3% | 2025-05-08 | |
| CVE-2025-3758 | Exposure of Device Configuration without Authentication in WF2220 | 8.7CNA v4.0 | 0.2% | 2025-05-08 | |
| CVE-2025-3506 | Checkmk potentially senitive path exposed via unauthenticated HTTP route | 6.3CNA v4.0 | 0.3% | 2025-05-08 | Fix |
| CVE-2025-3468 | NEX-Forms WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.2% | 2025-05-08 | Fix |
| CVE-2025-3419 | Event Manager WordPress plugin arbitrary file read | 7.5v3.1 | 0.7% | 2025-05-08 | Exploit codeFix |
| CVE-2025-2806 | tagDiv Composer WordPress plugin reflected cross-site scripting via data | 6.1CNA v3.1 | 0.3% | 2025-05-08 | Fix |
| CVE-2025-1948 | Eclipse Jetty HTTP clients can increase memory allocation | 7.5CNA v3.1 | 0.8% | 2025-05-08 | Fix |
| CVE-2025-1331 | IBM CICS TX code execution | 7.8CNA v3.1 | 0.3% | 2025-05-08 | Fix |
| CVE-2025-1330 | IBM CICS TX code execution | 7.8CNA v3.1 | 0.3% | 2025-05-08 | Fix |
| CVE-2025-1329 | IBM CICS TX code execution | 7.8CNA v3.1 | 0.3% | 2025-05-08 | Fix |
| CVE-2025-1254 | RTI Connext Professional Recording Service out-of-bounds write | 7.7CNA v4.0 | 0.3% | 2025-05-08 | Fix |
| CVE-2025-1253 | RTI Connext Professional core libraries stack-based buffer overflow | 6.9CNA v4.0 | 0.2% | 2025-05-08 | Fix |
| CVE-2025-1252 | RTI Connext Professional heap-based buffer overflow | 6.9CNA v4.0 | 0.2% | 2025-05-08 | Fix |
| CVE-2025-0505 | Arista Networks CloudVision Portal Zero Touch Provisioning privilege escalation | 10.0CNA v3.1 | 0.7% | 2025-05-08 | |
| CVE-2025-47692 | ContentStudio WordPress plugin broken access control | 4.3CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47691 | Ultimate Member WordPress plugin arbitrary function Call vulnerability | 5.5CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47688 | Advanced File Manager WordPress plugin broken access control to Notice Dismissal | 9.8v3.1 | 0.4% | 2025-05-07 | Fix |
| CVE-2025-47686 | DELUCKS SEO WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47685 | Contribuinte Checkout WordPress plugin cross-site request forgery (CSRF) to stored XSS | 7.1CNA v3.1 | 0.1% | 2025-05-07 | Fix |
| CVE-2025-47684 | Smaily for WP WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.1% | 2025-05-07 | |
| CVE-2025-47683 | WP Maintenance WordPress plugin PHP object injection | 7.2CNA v3.1 | 0.5% | 2025-05-07 | Fix |
| CVE-2025-47681 | Web Accessibility with Max Access WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47679 | RS WP Book Showcase WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-05-07 | |
| CVE-2025-47677 | Photo Gallery - GT3 Image Gallery and Gutenberg Block Gallery WordPress plugin cross-site scripting | 6.5CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47676 | User Login History WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47675 | Woobox WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47674 | Credova_Financial WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47669 | CBX Map for Google Map and OpenStreetMap WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47668 | CookieCode WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.2% | 2025-05-07 | |
| CVE-2025-47667 | LiveAgent WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.1% | 2025-05-07 | Fix |
| CVE-2025-47665 | N360 Splash Screen WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47664 | WordPress WP Pipes plugin server side request forgery (SSRF) | 6.5v3.1 | 0.2% | 2025-05-07 | |
| CVE-2025-47662 | Woobox WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47661 | 워드프레스 결제 심플페이 WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47659 | WPBakery Visual Composer WHMCS Elements WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-05-07 | |
| CVE-2025-47657 | Productive Commerce WordPress plugin SQL injection | 9.3CNA v3.1 | 0.4% | 2025-05-07 | |
| CVE-2025-47656 | Spiraclethemes Site Library WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47655 | theMarketer WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.1% | 2025-05-07 | Fix |
| CVE-2025-47653 | WordPress WP-Recall plugin local file inclusion | 7.5CNA v3.1 | 0.6% | 2025-05-07 | |
| CVE-2025-47649 | Open Close WooCommerce Store WordPress plugin local file inclusion | 8.8CNA v3.1 | 0.5% | 2025-05-07 | |
| CVE-2025-47648 | Pays WooCommerce Payment Gateway WordPress plugin cross-site request forgery (CSRF) | 7.1CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47647 | Sidebar Manager Light WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-05-07 | |
| CVE-2025-47644 | Integrations of Zoho CRM with Elementor form WordPress plugin open redirection | 4.7CNA v3.1 | 0.3% | 2025-05-07 | |
| CVE-2025-47643 | WordPress ELEX Product Feed for WooCommerce plugin SQL injection | 7.6CNA v3.1 | 0.4% | 2025-05-07 | Fix |
| CVE-2025-47639 | Supertext Translation and Proofreading WordPress plugin CSRF to stored XSS | 7.1CNA v3.1 | 0.2% | 2025-05-07 | |
| CVE-2025-47638 | WP Discord Invite WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47636 | List category posts WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.7% | 2025-05-07 | Fix |
| CVE-2025-47635 | WebinarPress WordPress plugin server side request forgery (SSRF) | 9.8v3.1 | 0.4% | 2025-05-07 | Fix |
| CVE-2025-47633 | Awin Advertiser Tracking for WooCommerce WordPress plugin CSRF to Product Feed Regeneration | 8.8v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47632 | Awesome Gallery WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2025-05-07 | |
| CVE-2025-47630 | Ajax Load More WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47629 | WP-CRM System WordPress plugin PHP object injection | 7.2v3.1 | 0.5% | 2025-05-07 | Fix |
| CVE-2025-47628 | QS Dark Mode WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2025-05-07 | |
| CVE-2025-47626 | Submission DOM tracking for Contact Form 7 WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47625 | DoFollow Case by Case WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47624 | DoFollow Case by Case WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47623 | Easy PayPal Buy Now Button WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47622 | Email Notification on Login WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2025-05-07 | |
| CVE-2025-47621 | Meks Flexible Shortcodes WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47620 | Martins Free Monetized Ad Exchange Network WordPress plugin cross-site request forgery (CSRF) | 7.1CNA v3.1 | 0.2% | 2025-05-07 | |
| CVE-2025-47617 | WP Front User Submit / Front Editor WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2025-05-07 | |
| CVE-2025-47616 | aBlocks WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47615 | Amazon Product in a Post WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2025-05-07 | |
| CVE-2025-47614 | LessButtons Social Sharing and Statistics WordPress plugin Chris Clark cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2025-05-07 | |
| CVE-2025-47612 | ClickWhale WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2025-05-07 | Fix |
| CVE-2025-47609 | EasyMe Connect WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47607 | Show All Comments WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2025-05-07 | |
| CVE-2025-47606 | Simple Giveaways WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-05-07 | |
| CVE-2025-47605 | WP jQuery DataTable WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2025-05-07 | |
| CVE-2025-47604 | Inline Related Posts WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47602 | Calculate Prices based on Distance For WooCommerce WordPress plugin broken access control | 5.4CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47597 | WP Podcasts Manager WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47596 | Beacon Lead Magnets and Lead Capture WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47595 | Color Your Bar WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2025-05-07 | |
| CVE-2025-47594 | WordPress Soccer Live Scores plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-05-07 | |
| CVE-2025-47593 | Really Simple Under Construction Page WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47592 | Árpád Lehel Mátyus Terms Popup On User Login stored cross-site scripting | 5.9CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47591 | Bulk Featured Image WordPress plugin broken access control | 4.3CNA v3.1 | 0.4% | 2025-05-07 | |
| CVE-2025-47590 | WPSpeed WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47589 | Ebook Store WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47587 | YaySMTP WordPress plugin SQL injection | 7.6CNA v3.1 | 0.4% | 2025-05-07 | Fix |
| CVE-2025-47551 | Wiki Embed WordPress plugin cross-site request forgery (CSRF) to settings Change | 4.3CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47550 | Instantio WordPress plugin arbitrary file upload | 7.2v3.1 | 0.4% | 2025-05-07 | Exploit codeFix |
| CVE-2025-47549 | BEAF WordPress plugin arbitrary file upload | 7.2NVD v3.1 | 0.5% | 2025-05-07 | Exploit codeFix |
| CVE-2025-47548 | Wbcom Designs - Activity Link Preview For BuddyPress WordPress plugin server side request forgery | 9.8v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47547 | SendPulse Email Marketing Newsletter WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47546 | WP Compress WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47545 | Poll Maker WordPress plugin race condition | 8.1v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47544 | Dynamic Pricing With Discount Rules for WooCommerce WordPress plugin SQL injection | 7.2v3.1 | 0.5% | 2025-05-07 | Fix |
| CVE-2025-47543 | TrueBooker WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47542 | Simple calendar for Elementor WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47540 | weMail WordPress plugin sensitive data exposure | 7.5v3.1 | 0.4% | 2025-05-07 | Fix |
| CVE-2025-47538 | Cart tracking for WooCommerce WordPress plugin SQL injection | 7.2v3.1 | 0.5% | 2025-05-07 | Fix |
| CVE-2025-47537 | PDF Invoice Builder for WooCommerce WordPress plugin SQL injection | 7.6CNA v3.1 | 0.4% | 2025-05-07 | Fix |
| CVE-2025-47533 | Graphina WordPress plugin cross-site request forgery (CSRF) to local file inclusion | 8.1CNA v3.1 | 0.4% | 2025-05-07 | Exploit codeFix |
| CVE-2025-47531 | XT Event Widget for Social Events WordPress plugin local file inclusion | 8.8v3.1 | 0.6% | 2025-05-07 | Fix |
| CVE-2025-47528 | Ovation Elements WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47526 | GS Variation Swatches for WooCommerce WordPress plugin broken access control | 5.4CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47525 | Bold Page Builder WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47524 | Quran multilanguage Text and Audio WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47523 | Seznam Webmaster WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47522 | AWEOS WP Lock WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47521 | Robo Gallery WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47520 | Charitable WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47519 | Easy PayPal Events WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47518 | Contact Form 7 PayPal and Stripe Add-on WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47517 | Accept Donations with PayPal WordPress plugin CSRF to stored XSS | 6.1NVD v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47516 | Time Clock WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47515 | WP DPE-GES WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47514 | ELI's Related Posts Footer Links and Widget WordPress plugin cross-site request forgery | 7.1CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47510 | Display Eventbrite Events WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.8% | 2025-05-07 | Fix |
| CVE-2025-47509 | Top 10 WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47508 | GamiPress WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.8% | 2025-05-07 | Fix |
| CVE-2025-47507 | Better Search WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47506 | Contextual Related Posts WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47505 | Product Time Countdown for WooCommerce WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47504 | Custom Checkout Fields for WooCommerce WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47503 | NGG Smart Image Search WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47502 | Mollie Forms WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47501 | Content Control WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47499 | Simple Blog Stats WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47498 | Hotel Booking WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.8% | 2025-05-07 | Fix |
| CVE-2025-47497 | Logo Showcase WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47496 | PublishPress Authors WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.8% | 2025-05-07 | Fix |
| CVE-2025-47495 | Blockspare WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47494 | EventON WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.8% | 2025-05-07 | Fix |
| CVE-2025-47493 | Ultimate Blocks WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47491 | Contact Form Widget WordPress plugin cross-site request forgery (CSRF) | 7.4CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47490 | Ultimate WP Mail WordPress plugin SQL injection | 8.5CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47489 | Beds24 Online Booking WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47488 | Bold Page Builder WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47486 | Gutenberg and Elementor Templates Importer For Responsive WordPress plugin broken access control | 5.3CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47485 | Cozy Blocks WordPress plugin broken access control | 5.3CNA v3.1 | 0.4% | 2025-05-07 | Fix |
| CVE-2025-47484 | Display Remote Posts Block WordPress plugin server side request forgery (SSRF) | 6.4CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47483 | Easy Replace Image WordPress plugin server side request forgery (SSRF) | 4.9CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47482 | SKT Skill Bar WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47481 | GS Testimonial Slider WordPress plugin content injection | 5.3CNA v3.1 | 0.4% | 2025-05-07 | Fix |
| CVE-2025-47480 | Graphina WordPress plugin broken access control | 5.4CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47476 | Cost Calculator for Elementor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47475 | JupiterX Core WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47473 | PW WooCommerce Bulk Edit WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47472 | Music Player for WooCommerce WordPress plugin broken access control | 5.4CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47471 | Envo Extra WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47470 | GPT3 AI Content Writer WordPress plugin cross-site request forgery (CSRF) to Prompt Generation | 4.3CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47469 | Media Hygiene WordPress plugin broken access control | 5.4CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47468 | Hash Form WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47467 | GS Testimonial Slider WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47466 | Ultimate WP Mail WordPress plugin cross-site request forgery (CSRF) | 5.4CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47465 | Blocksy WordPress theme broken access control | 4.9CNA v3.1 | 0.4% | 2025-05-07 | Fix |
| CVE-2025-47464 | Solace Extra WordPress plugin server side request forgery (SSRF) | 4.9CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47462 | Challan WordPress plugin CSRF to privilege escalation | 8.8CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47460 | TrackShip for WooCommerce WordPress plugin SQL injection | 7.6CNA v3.1 | 0.4% | 2025-05-07 | Fix |
| CVE-2025-47459 | FundEngine WordPress plugin Roxnor cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47457 | LocateAndFilter WordPress plugin broken access control | 5.3CNA v3.1 | 0.4% | 2025-05-07 | Fix |
| CVE-2025-47456 | WP Gravity Forms Zendesk WordPress plugin open redirection | 4.7CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47455 | Integration for WooCommerce and Salesforce WordPress plugin open redirection | 4.7CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47454 | WP Gravity Forms Dynamics CRM WordPress plugin open redirection | 4.7CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47451 | Product Quantity Dropdown For Woocommerce WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47450 | Simple File List WordPress plugin settings Change vulnerability | 5.3CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47449 | Meow Gallery WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47448 | WP Hotel Booking WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47447 | Cool Author Box WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47446 | Listamester WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-47443 | Widget Countdown WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47442 | CC BMI Calculator WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47441 | Progress Bar WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-47440 | WPAdverts WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.8% | 2025-05-07 | Fix |
| CVE-2025-47439 | Download Monitor WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.8% | 2025-05-07 | Fix |
| CVE-2025-47423 | pwsdashboard Personal Weather Station Dashboard path traversal | 5.8CNA v3.1 | 2.0% | 2025-05-07 | Nuclei |
| CVE-2025-47203 | Dropbear SSH OS command injection | 4.5CNA v3.1 | 0.6% | 2025-05-07 | Fix |
| CVE-2025-46828 | LabRedesCefetRJ WeGIA unauthenticated SQL injection on get_socios.php endpoint | 10.0CNA v4.0 | 0.6% | 2025-05-07 | Fix |
| CVE-2025-46827 | Graylog allows Session takeover via Insufficient HTML Sanitization | 8.0CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-46826 | insa-auth Open-Redirect on provided CAS server login endpoint | 1.3CNA v4.0 | 0.5% | 2025-05-07 | Fix |
| CVE-2025-46824 | Discourse Code Review plugin vulnerable to XSS via auto link commits | 3.1CNA v3.1 | 0.3% | 2025-05-07 | |
| CVE-2025-46821 | Envoy vulnerable to bypass of RBAC uri_template permission | 5.3CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-46727 | Unbounded-parameter DoS in Rack::QueryParser | 7.5CNA v3.1 | 1.2% | 2025-05-07 | Fix |
| CVE-2025-46551 | JRuby-OpenSSL has hostname verification disabled by default | 5.7CNA v4.0 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-46265 | F5OS incorrect authorization | 8.7CNA v4.0 | 0.4% | 2025-05-07 | Fix |
| CVE-2025-45514 | Tenda FH451 stack-based buffer overflow | 6.5CISA ADP v3.1 | 0.3% | 2025-05-07 | |
| CVE-2025-45388 | Wagtail CMS document upload stored cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2025-05-07 | |
| CVE-2025-43878 | F5OS tcpdump diagnostics utility improper syntax validation | 8.3CNA v4.0 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-41433 | BIG-IP SIP ALG profile vulnerability | 8.7CNA v4.0 | 0.4% | 2025-05-07 | Fix |
| CVE-2025-41431 | F5 BIG-IP Traffic Management Microkernel out-of-bounds write | 8.7CNA v4.0 | 0.4% | 2025-05-07 | Fix |
| CVE-2025-41414 | F5 BIG-IP HTTP/2 profile null pointer dereference | 8.7CNA v4.0 | 0.4% | 2025-05-07 | Fix |
| CVE-2025-41399 | F5 BIG-IP SCTP profile improper resource release | 8.7CNA v4.0 | 0.4% | 2025-05-07 | Fix |
| CVE-2025-39361 | Royal Elementor Addons WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-36557 | F5 BIG-IP HTTP profile RFC compliance enforcement buffer overflow | 8.7CNA v4.0 | 0.4% | 2025-05-07 | Fix |
| CVE-2025-36546 | F5OS Appliance Mode SSH authentication incorrect authorization | 9.2CNA v4.0 | 0.4% | 2025-05-07 | Fix |
| CVE-2025-36525 | BIG-IP APM PingAccess Virtual Server vulnerability | 8.7CNA v4.0 | 0.4% | 2025-05-07 | Fix |
| CVE-2025-36504 | F5 BIG-IP HTTP/2 httprouter profile resource exhaustion | 8.7CNA v4.0 | 0.4% | 2025-05-07 | Fix |
| CVE-2025-35995 | F5 BIG-IP Policy Enforcement Manager Traffic Management Microkernel out-of-bounds read | 8.7CNA v4.0 | 0.4% | 2025-05-07 | Fix |
| CVE-2025-35939 | Craft CMS external control of assumed-immutable web parameter | 5.3v3.1 | 1.3% | 2025-05-07 | KEVKCVFix |
| CVE-2025-33093 | IBM Sterling Partner Engagement Manager information disclosure | 7.5CNA v3.1 | 0.4% | 2025-05-07 | Fix |
| CVE-2025-32821 | SonicWall SMA100 OS command injection | 7.2v3.1 | 22.2% | 2025-05-07 | Emerging ThreatsKCVFix |
| CVE-2025-32820 | SonicWall SMA100 path traversal | 8.8v3.1 | 2.8% | 2025-05-07 | Emerging ThreatsKCVFix |
| CVE-2025-32819 | SonicWall SMA100 files accessible to external parties | 8.8v3.1 | 6.8% | 2025-05-07 | Emerging ThreatsKCVFix |
| CVE-2025-32441 | Rack session gets restored after deletion | 4.2CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-32405 | RT-Labs P-Net An out-of-bounds write | 7.5NVD v3.1 | 0.5% | 2025-05-07 | |
| CVE-2025-32404 | RT-Labs P-Net An out-of-bounds write | 9.8NVD v3.1 | 0.3% | 2025-05-07 | |
| CVE-2025-32403 | RT-Labs P-Net An out-of-bounds write | 9.8NVD v3.1 | 0.3% | 2025-05-07 | |
| CVE-2025-32402 | RT-Labs P-Net An out-of-bounds write | 7.5NVD v3.1 | 0.4% | 2025-05-07 | |
| CVE-2025-32401 | RT-Labs P-Net An heap-based buffer overflow | 9.8NVD v3.1 | 0.3% | 2025-05-07 | |
| CVE-2025-32400 | RT-Labs P-Net An heap-based buffer overflow | 7.5NVD v3.1 | 0.4% | 2025-05-07 | |
| CVE-2025-32399 | RT-Labs P-Net An unchecked loop condition | 7.5NVD v3.1 | 0.5% | 2025-05-07 | |
| CVE-2025-32398 | RT-Labs P-Net null pointer dereference | 7.5NVD v3.1 | 0.4% | 2025-05-07 | |
| CVE-2025-32397 | RT-Labs P-Net An heap-based buffer overflow | 7.5NVD v3.1 | 0.4% | 2025-05-07 | |
| CVE-2025-32396 | RT-Labs P-Net An heap-based buffer overflow | 7.5NVD v3.1 | 0.4% | 2025-05-07 | |
| CVE-2025-31644 | Appliance mode BIG-IP iControl REST and tmsh vulnerability | 8.5CNA v4.0 | 24.1% | 2025-05-07 | Emerging ThreatsExploit codeFix |
| CVE-2025-31177 | Gnuplot: Gnuplot heap-buffer overflow on utf8_copy_one | 5.5NVD v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-30147 | Hyperledger Besu Native ALTBN128 precompile functions missing cryptographic step | 8.7CNA v4.0 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-29746 | Koillection cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-29602 | FlatPress cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2025-05-07 | |
| CVE-2025-29448 | Easy!Appointments denial of service (DoS) | 7.5CISA ADP v3.1 | 0.6% | 2025-05-07 | Exploit code |
| CVE-2025-29154 | lemeconsultoria HCM galera.app v.4.58.0 HTML injection | 6.5CISA ADP v3.1 | 0.5% | 2025-05-07 | |
| CVE-2025-29153 | Lemeconsultoria Galera SQL injection | 5.4CISA ADP v3.1 | 0.4% | 2025-05-07 | |
| CVE-2025-29152 | Lemeconsultoria Galera cross-site scripting | 7.6CISA ADP v3.1 | 0.4% | 2025-05-07 | |
| CVE-2025-27533 | Apache ActiveMQ: Unchecked buffer length can cause excessive memory allocation | 6.9CNA v4.0 | 9.0% | 2025-05-07 | Exploit codeFix |
| CVE-2025-26169 | IXON VPN Client incorrect permission assignment | 8.1CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-26168 | IXON VPN Client incorrect permission assignment | 8.1CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-20980 | Samsung Mobile libsavscmn out-of-bounds write | 4.0CNA v3.1 | 0.1% | 2025-05-07 | Fix |
| CVE-2025-20979 | Samsung Mobile libsavscmn out-of-bounds write | 8.4CNA v3.1 | 0.1% | 2025-05-07 | Fix |
| CVE-2025-20978 | Samsung Mobile PENUP improper access control | 6.2CNA v3.1 | 0.1% | 2025-05-07 | |
| CVE-2025-20977 | Samsung Mobile Samsung Notes translation implicit intent for sensitive communication | 3.3CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-20976 | Samsung Mobile Samsung Notes applying binary of text content out-of-bounds read | 5.5CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-20975 | Samsung Mobile AODService improper export of Android application components | 5.5CNA v3.1 | 0.1% | 2025-05-07 | |
| CVE-2025-20974 | Samsung Mobile PackageInstallerCN Improper handling of improper permissions | 6.1CNA v3.1 | 0.1% | 2025-05-07 | |
| CVE-2025-20973 | Samsung Mobile Secure Folder improper authentication | 5.4CNA v3.1 | 0.2% | 2025-05-07 | |
| CVE-2025-20972 | Samsung Mobile Samsung Flow improper intent verification | 6.2CNA v3.1 | 0.1% | 2025-05-07 | Fix |
| CVE-2025-20971 | Samsung Mobile Samsung Flow improper input validation | 5.5CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-20970 | Samsung Mobile Bixby Vision improper access control | 6.2CNA v3.1 | 0.1% | 2025-05-07 | |
| CVE-2025-20969 | Samsung Mobile Samsung Gallery improper input validation | 5.5CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-20968 | Samsung Mobile Samsung Gallery improper access control | 7.2CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-20967 | Samsung Mobile Samsung Gallery improper access control | 5.1CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-20966 | Samsung Mobile Samsung Gallery improper access control | 4.6CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-20965 | Samsung Bixby Improper handling of improper permissions | 6.2CNA v3.1 | 0.1% | 2025-05-07 | Fix |
| CVE-2025-20964 | Samsung Mobile Devices parsing media files in libsavsvc.so out-of-bounds write | 6.6CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-20963 | Samsung Mobile Devices memory initialization in libsavsvc.so out-of-bounds write | 6.6CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-20962 | Samsung Mobile Devices SpenGesture service improper permissions | 4.0CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-20961 | Samsung Mobile Devices improper permissions | 5.5CNA v3.1 | 0.1% | 2025-05-07 | Fix |
| CVE-2025-20960 | Samsung Mobile Devices CocktailBarService improper permissions | 4.0CNA v3.1 | 0.1% | 2025-05-07 | Fix |
| CVE-2025-20959 | Samsung Mobile Devices Wi-Fi P2P service implicit intent for sensitive communication | 5.1CNA v3.1 | 0.1% | 2025-05-07 | Fix |
| CVE-2025-20958 | Samsung Mobile Devices UnifiedWFC improper intent verification | 4.4CNA v3.1 | 0.1% | 2025-05-07 | Fix |
| CVE-2025-20957 | Samsung Mobile Devices SmartManagerCN improper access control | 7.3CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-20956 | Samsung Galaxy Watch settings improper export of Android application components | 4.3CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-20955 | Samsung Mobile Devices improper export of Android application components | 5.5CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-20954 | Samsung Mobile Devices EnrichedCall implicit intent for sensitive communication | 5.5CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-20953 | Samsung Mobile Devices SmartManagerCN improper access control | 5.1CNA v3.1 | 0.1% | 2025-05-07 | Fix |
| CVE-2025-20949 | Samsung Mobile Samsung Members path traversal | 5.1CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-20937 | Samsung Mobile Devices Keymaster trustlet out-of-bounds write | 6.7CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-20223 | Cisco Digital Network Architecture Center (DNA Center) improper access control | 4.7CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-20221 | Cisco IOS XE Software information disclosure | 5.3CNA v3.1 | 0.5% | 2025-05-07 | Fix |
| CVE-2025-20216 | Cisco Catalyst SD-WAN Manager Reflected HTML injection | 4.7CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-20214 | Cisco IOS XE Software insecure direct object reference | 4.3CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-20213 | Cisco Catalyst SDWAN Manager arbitrary file overwrite | 5.5CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-20210 | Cisco Catalyst Center Unprotected API endpoint | 7.3CNA v3.1 | 0.4% | 2025-05-07 | Fix |
| CVE-2025-20202 | Cisco IOS XE Software buffer access with incorrect length | 7.4CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-20201 | Cisco IOS XE Software improper check for exceptional conditions | 6.7CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-20200 | Cisco IOS XE Software improper check for exceptional conditions | 6.7CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-20199 | Cisco IOS XE Software improper input validation | 4.6CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-20198 | Cisco IOS XE Software improper check for exceptional conditions | 4.6CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-20197 | Cisco IOS XE Software improper input validation | 6.7CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-20196 | Cisco IOS missing brute-force protection | 5.3CNA v3.1 | 0.4% | 2025-05-07 | Fix |
| CVE-2025-20195 | Cisco IOS XE Software cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-20194 | Cisco IOS XE Software OS command injection | 5.4CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-20193 | Cisco IOS XE Software OS command injection | 6.5CNA v3.1 | 0.4% | 2025-05-07 | Fix |
| CVE-2025-20192 | Cisco IOS XE Software improper input validation | 7.7CNA v3.1 | 0.5% | 2025-05-07 | Fix |
| CVE-2025-20191 | Multiple Cisco Products denial of service | 7.4CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-20190 | Cisco IOS XE Software improper access control | 6.5CNA v3.1 | 0.4% | 2025-05-07 | Fix |
| CVE-2025-20189 | Cisco IOS XE Software denial of service | 7.4CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-20188 | Cisco IOS XE Software hard-coded credentials | 10.0CNA v3.1 | 27.5% | 2025-05-07 | NucleiEmerging ThreatsFix |
| CVE-2025-20187 | Cisco SD-WAN Manager software arbitrary file creation | 6.5CNA v3.1 | 1.3% | 2025-05-07 | Fix |
| CVE-2025-20186 | Cisco IOS XE Software OS command injection | 8.8CNA v3.1 | 0.9% | 2025-05-07 | Fix |
| CVE-2025-20182 | Cisco Adaptive Security Appliance (ASA) Software out-of-bounds write | 8.6CNA v3.1 | 0.6% | 2025-05-07 | Fix |
| CVE-2025-20181 | Cisco IOS improper signature verification | 6.8CNA v3.0 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-20164 | Cisco IOS missing authorization | 8.3CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-20162 | Cisco IOS XE Software denial of service | 8.6CNA v3.1 | 0.5% | 2025-05-07 | Fix |
| CVE-2025-20157 | Cisco Catalyst vManage Certificate Validation vulnerability | 5.9CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-20155 | Cisco IOS XE Software improper type validation | 6.0CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-20154 | Cisco IOS, IOS XE and IOS XR Software TWAMP denial of service | 8.6CNA v3.1 | 0.5% | 2025-05-07 | Fix |
| CVE-2025-20151 | Cisco IOS and IOS XE Software SNMPv3 Configuration Restriction vulnerability | 4.3CNA v3.1 | 0.4% | 2025-05-07 | |
| CVE-2025-20147 | Cisco SD-WAN vManage stored cross-site scripting | 5.4CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-20140 | Cisco IOS XE Software excessive memory allocation | 7.4CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-20137 | Cisco IOS improper access control | 4.7CNA v3.1 | 0.3% | 2025-05-07 | |
| CVE-2025-20122 | Cisco Catalyst SD-WAN Manager privilege escalation | 7.8CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-4335 | Woocommerce Multiple Addresses WordPress plugin authenticated (Subscriber+) privilege escalation | 8.8CNA v3.1 | 0.4% | 2025-05-07 | |
| CVE-2025-4220 | Xavin's List Subpages WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-05-07 | |
| CVE-2025-4171 | WZ Followed Posts Display what visitors are reading WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-4104 | Frontend Dashboard - missing authorization to unauthenticated privilege escalation | 9.8CNA v3.1 | 0.6% | 2025-05-07 | Fix |
| CVE-2025-4055 | Multiple Post Type Order WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-05-07 | |
| CVE-2025-4054 | Relevanssi (Free) and (Premium) unauthenticated stored cross-site scripting via Search Highlights | 6.1CNA v3.1 | 0.4% | 2025-05-07 | Fix |
| CVE-2025-4043 | Milesight UG65-868M-EA improper access control for Volatile Memory Containing Boot Code | 6.1CNA v4.0 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-3925 | BrightSign Players execution with unnecessary privileges | 8.5CNA v4.0 | 0.2% | 2025-05-07 | |
| CVE-2025-3924 | PeproDev Ultimate Profile Solutions - missing authorization to Unauthenticated Email Enumeration | 5.3CNA v3.1 | 0.4% | 2025-05-07 | Fix |
| CVE-2025-3921 | PeproDev Ultimate Profile Solutions WordPress plugin unauthorized access | 8.2CNA v3.1 | 0.4% | 2025-05-07 | Fix |
| CVE-2025-3860 | CarDealerPress WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-3853 | WPshop 2 WordPress plugin insecure direct object reference | 6.5CNA v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-3852 | WPshop 2 E-Commerce - Authenticated (Subscriber+) privilege escalation via account takeover | 8.8CNA v3.1 | 0.4% | 2025-05-07 | Fix |
| CVE-2025-3851 | Download Manager and Payment Form WordPress Plugin WP SmartPay - Authenticated information exposure | 4.3CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-3844 | PeproDev Ultimate Profile Solutions - authentication bypass to account takeover | 9.8CNA v3.1 | 0.6% | 2025-05-07 | Fix |
| CVE-2025-3766 | webfactory Login Lockdown and Protection ajax_run_tool function missing authorization | 5.4CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-3476 | OpenText Operations Bridge Manager incorrect authorization | 9.4CNA v4.0 | 0.4% | 2025-05-07 | |
| CVE-2025-3272 | OpenText Operations Bridge Manager incorrect authorization | 6.7CNA v4.0 | 0.2% | 2025-05-07 | |
| CVE-2025-3218 | IBM i improper certificate validation | 5.4CNA v3.1 | 0.3% | 2025-05-07 | Fix |
| CVE-2025-2821 | Search Exclude WordPress plugin missing authorization unauthenticated plugin settings modification | 5.3CNA v3.1 | 0.4% | 2025-05-07 | Fix |
| CVE-2025-2777 | SysAid On-Prem lshw Proceessing XML external entity injection | 9.8v3.1 | 72.5% | 2025-05-07 | Reported exploitedNucleiEmerging ThreatsKCVFix |
| CVE-2025-2776 | SysAid On-Prem improper restriction of XML external entity reference | 9.8NVD v3.1 | 64.7% | 2025-05-07 | KEVNucleiEmerging ThreatsKCVFix |
| CVE-2025-2775 | SysAid On-Prem improper restriction of XML external entity reference | 7.5NVD v3.1 | 42.6% | 2025-05-07 | KEVNucleiEmerging ThreatsExploit codeKCVFix |
| CVE-2025-1400 | Out-of-bounds read in libplctag library | 3.1CNA v3.1 | 0.2% | 2025-05-07 | |
| CVE-2025-1399 | Out-of-bounds read in libplctag library | 3.1CNA v3.1 | 0.2% | 2025-05-07 | |
| CVE-2025-0936 | Arista Networks EOS gNOI File TransferToRemote RPC vulnerability | 6.5CNA v3.1 | 0.3% | 2025-05-07 | |
| CVE-2025-0669 | BOINC Server cross-site request forgery | 8.8v3.1 | 0.2% | 2025-05-07 | Fix |
| CVE-2025-0668 | BOINC Server multiple SQL Injections | 9.8v3.1 | 0.6% | 2025-05-07 | Fix |
| CVE-2025-0667 | BOINC Server stored XSS injection in pm.php | 5.4NVD v3.1 | 0.3% | 2025-05-07 | |
| CVE-2025-0666 | BOINC Server stored XSS injection in host_venue_action.php | 5.4NVD v3.1 | 0.3% | 2025-05-07 | |
| CVE-2025-47420 | Crestron Automate VX User Permissions on Network API | 8.7CNA v4.0 | 0.4% | 2025-05-06 | Fix |
| CVE-2025-47419 | Crestron Automate VX cleartext transmission of sensitive information | 10.0CNA v4.0 | 0.3% | 2025-05-06 | Fix |
| CVE-2025-47418 | Crestron Automate VX information disclosure | 5.3CNA v4.0 | 0.4% | 2025-05-06 | Fix |
| CVE-2025-47417 | Crestron Automate VX Enable Debug Images | 5.1CNA v4.0 | 0.4% | 2025-05-06 | Fix |
| CVE-2025-47256 | Libxmp integer underflow | 5.6CNA v3.1 | 0.3% | 2025-05-06 | Exploit codeFix |
| CVE-2025-46820 | Phpgt/Dom exposes the GITHUB_TOKEN in Dom workflow run artifact | 7.1CNA v3.1 | 0.2% | 2025-05-06 | Exploit codeFix |
| CVE-2025-46816 | goshs route not protected, allows command execution | 9.4CNA v3.0 | 0.7% | 2025-05-06 | Exploit codeFix |
| CVE-2025-46815 | ZITADEL allows IdP Intent Token Reuse | 8.0CNA v3.1 | 0.5% | 2025-05-06 | Fix |
| CVE-2025-46814 | rennf93 fastapi-guard FastAPI Guard Remote header injection via X-Forwarded-For Manipulation | 3.4CNA v3.1 | 0.3% | 2025-05-06 | Fix |
| CVE-2025-46762 | Apache Parquet Java parquet-avro module arbitrary code execution | 7.1CNA v4.0 | 1.6% | 2025-05-06 | Fix |
| CVE-2025-46736 | Umbraco Makes User Enumeration Feasible Based on Timing of Login Response | 5.3CNA v3.1 | 0.4% | 2025-05-06 | Fix |
| CVE-2025-46735 | Terraform WinDNS Provider windns_record resource command injection | 1.1CNA v4.0 | 0.6% | 2025-05-06 | |
| CVE-2025-46728 | cpp-httplib has Unbounded Memory Allocation in Chunked/No-Length requests | 7.5CNA v3.1 | 0.7% | 2025-05-06 | Fix |
| CVE-2025-46593 | Huawei HarmonyOS process residence vulnerability in abnormal scenarios in the print module | 5.1CNA v3.1 | 0.1% | 2025-05-06 | Fix |
| CVE-2025-46592 | Huawei HarmonyOS null pointer dereference vulnerability in the USB HDI driver module | 4.4CNA v3.1 | 0.1% | 2025-05-06 | Fix |
| CVE-2025-46591 | Huawei HarmonyOS out-of-bounds data read vulnerability in the authorization module | 6.2CNA v3.1 | 0.1% | 2025-05-06 | Fix |
| CVE-2025-46590 | Huawei HarmonyOS bypass vulnerability in the network search instruction authentication module | 6.3CNA v3.1 | 0.2% | 2025-05-06 | Fix |
| CVE-2025-46589 | Huawei HarmonyOS vulnerability of unauthorized access in the app lock module | 4.4CNA v3.1 | 0.1% | 2025-05-06 | Fix |
| CVE-2025-46588 | Huawei HarmonyOS vulnerability of unauthorized access in the app lock module | 4.4CNA v3.1 | 0.1% | 2025-05-06 | Fix |
| CVE-2025-46587 | Huawei HarmonyOS permission control vulnerability in the media library module | 6.2CNA v3.1 | 0.1% | 2025-05-06 | Fix |
| CVE-2025-46586 | Huawei HarmonyOS permission control vulnerability in the contacts module | 5.1CNA v3.1 | 0.1% | 2025-05-06 | Fix |
| CVE-2025-46585 | Huawei HarmonyOS out-of-bounds array read/write vulnerability in the kernel module | 7.5CNA v3.1 | 0.1% | 2025-05-06 | Fix |
| CVE-2025-46584 | Huawei HarmonyOS improper handling of insufficient permissions | 7.8CNA v3.1 | 0.1% | 2025-05-06 | Fix |
| CVE-2025-46573 | passport-wsfed-saml2 has SAML authentication bypass via Attribute Smuggling | 8.6CNA v4.0 | 0.4% | 2025-05-06 | Fix |
| CVE-2025-46572 | passport-wsfed-saml2 has SAML authentication bypass via Signature Wrapping | 9.3CNA v4.0 | 0.4% | 2025-05-06 | Fix |
| CVE-2025-45492 | NETGEAR EX8000 command injection | 9.8v3.1 | 1.3% | 2025-05-06 | |
| CVE-2025-45491 | Linksys E5600 command injection | 9.8v3.1 | 2.0% | 2025-05-06 | Emerging Threats |
| CVE-2025-45490 | Linksys E5600 command injection | 9.8v3.1 | 1.7% | 2025-05-06 | Emerging Threats |
| CVE-2025-45489 | Linksys E5600 command injection | 9.8v3.1 | 1.8% | 2025-05-06 | Emerging Threats |
| CVE-2025-45488 | Linksys E5600 command injection | 9.8v3.1 | 11.1% | 2025-05-06 | Emerging Threats |
| CVE-2025-45487 | Linksys E5600 command injection | 9.8v3.1 | 11.0% | 2025-05-06 | Emerging Threats |
| CVE-2025-45250 | MrDoc server-side request forgery | 5.5CISA ADP v3.1 | 0.3% | 2025-05-06 | Exploit code |
| CVE-2025-44900 | Tenda RX3 stack-based buffer overflow | 6.5CISA ADP v3.1 | 0.3% | 2025-05-06 | |
| CVE-2025-44899 | Tenda RX3 There is a stack-based buffer overflow | 9.8CISA ADP v3.1 | 0.5% | 2025-05-06 | |
| CVE-2025-44073 | Seacms SQL injection | 9.8CISA ADP v3.1 | 0.5% | 2025-05-06 | |
| CVE-2025-40625 | TCMAN GIM arbitrary file upload | 9.8v3.1 | 0.8% | 2025-05-06 | Fix |
| CVE-2025-40624 | TCMAN GIM SQL injection | 9.8v3.1 | 0.4% | 2025-05-06 | Fix |
| CVE-2025-40623 | TCMAN GIM SQL injection | 9.8v3.1 | 0.4% | 2025-05-06 | Fix |
| CVE-2025-40622 | TCMAN GIM SQL injection | 9.8v3.1 | 0.4% | 2025-05-06 | Fix |
| CVE-2025-40621 | TCMAN GIM SQL injection | 9.8v3.1 | 0.4% | 2025-05-06 | Fix |
| CVE-2025-40620 | TCMAN GIM SQL injection | 9.8v3.1 | 0.4% | 2025-05-06 | Fix |
| CVE-2025-37730 | Logstash improper certificate validation in TCP output | 6.5CNA v3.1 | 0.2% | 2025-05-06 | Fix |
| CVE-2025-32022 | Finit has heap based buffer overwrite in urandom.so plugin | 4.6CNA v3.1 | 0.1% | 2025-05-06 | Fix |
| CVE-2025-30165 | Remote code execution vulnerability in vLLM Multi-Node Cluster Configuration | 8.0CNA v3.1 | 0.5% | 2025-05-06 | Fix |
| CVE-2025-27248 | OpenHarmony ai_neural_network_runtime has a null pointer dereference | 3.3CNA v3.1 | 0.1% | 2025-05-06 | |
| CVE-2025-27241 | OpenHarmony multimedia_av_codec has a null pointer dereference | 3.3CNA v3.1 | 0.1% | 2025-05-06 | |
| CVE-2025-27132 | OpenHarmony arkcompiler_ets_runtime has an out-of-bounds write | 3.8CNA v3.1 | 0.2% | 2025-05-06 | |
| CVE-2025-26262 | R-fx Networks Linux Malware Detect filename handling command injection | 6.5CISA ADP v3.1 | 0.3% | 2025-05-06 | |
| CVE-2025-25218 | OpenHarmony third_party_mksh has a null pointer dereference | 3.3CNA v3.1 | 0.1% | 2025-05-06 | |
| CVE-2025-25052 | OpenHarmony arkcompiler_ets_runtime has a buffer overflow | 3.3CNA v3.1 | 0.1% | 2025-05-06 | |
| CVE-2025-25014 | Kibana arbitrary code execution via prototype pollution | 9.1CNA v3.1 | 22.2% | 2025-05-06 | Exploit codeFix |
| CVE-2025-23379 | Dell Storage Center cross-site scripting | 3.5CNA v3.1 | 0.3% | 2025-05-06 | Fix |
| CVE-2025-22886 | OpenHarmony distributeddatamgr_udmf has a memory leak | 3.3CNA v3.1 | 0.1% | 2025-05-06 | |
| CVE-2025-22479 | Dell Storage Center path traversal | 3.5CNA v3.1 | 0.3% | 2025-05-06 | Fix |
| CVE-2025-22478 | Dell Storage Center XML external entity injection | 8.1CNA v3.1 | 0.3% | 2025-05-06 | Fix |
| CVE-2025-22477 | Dell Storage Center improper authentication | 8.3CNA v3.1 | 0.3% | 2025-05-06 | Fix |
| CVE-2025-22476 | Dell Storage Center command injection | 5.5CNA v3.1 | 0.6% | 2025-05-06 | Fix |
| CVE-2025-21475 | Qualcomm Snapdragon buffer over-read in Display | 7.8CNA v3.1 | 0.1% | 2025-05-06 | Fix |
| CVE-2025-21470 | Qualcomm Snapdragon improper access control in Camera driver | 7.8CNA v3.1 | 0.1% | 2025-05-06 | Fix |
| CVE-2025-21469 | Qualcomm Snapdragon improper access control in Camera driver | 7.8CNA v3.1 | 0.1% | 2025-05-06 | Fix |
| CVE-2025-21468 | Qualcomm Snapdragon out-of-bounds write in Computer Vision | 7.8CNA v3.1 | 0.1% | 2025-05-06 | Fix |
| CVE-2025-21467 | Qualcomm Snapdragon out-of-bounds write in Computer Vision | 7.8CNA v3.1 | 0.1% | 2025-05-06 | Fix |
| CVE-2025-21462 | Qualcomm Snapdragon out-of-bounds write in Computer Vision | 7.8CNA v3.1 | 0.1% | 2025-05-06 | Fix |
| CVE-2025-21460 | Qualcomm Snapdragon improper input validation in Automotive software platform based on QNX | 7.8CNA v3.1 | 0.1% | 2025-05-06 | Fix |
| CVE-2025-21459 | Qualcomm Snapdragon buffer over-read in WLAN Host Communication | 7.5CNA v3.1 | 0.3% | 2025-05-06 | Fix |
| CVE-2025-21453 | Qualcomm Snapdragon use-after-free in GPS HLOS driver | 7.8CNA v3.1 | 0.1% | 2025-05-06 | Fix |
| CVE-2025-4388 | Liferay Portal reflected XSS in marketplace-app-manager-web | 6.9CNA v4.0 | 3.8% | 2025-05-06 | NucleiFix |
| CVE-2025-4384 | arcinfo PcVue certificate validity not properly verified | 6.0CNA v4.0 | 0.1% | 2025-05-06 | Fix |
| CVE-2025-4374 | Quay: Incorrect privilege assignment | 6.5CNA v3.1 | 0.3% | 2025-05-06 | Fix |
| CVE-2025-4373 | Red Hat Enterprise Linux 10 glib: Buffer underflow on glib | 4.8CNA v3.1 | 0.6% | 2025-05-06 | Fix |
| CVE-2025-4372 | Google Chrome WebAudio use-after-free | 8.8CISA ADP v3.1 | 0.5% | 2025-05-06 | Fix |
| CVE-2025-4368 | Tenda AC8 MtuSetMacWan formGetRouterStatus buffer overflow | 9.8v3.1 | 0.9% | 2025-05-06 | |
| CVE-2025-4363 | itsourcecode Gym Management System ajax.php SQL injection | 9.8v3.1 | 0.6% | 2025-05-06 | |
| CVE-2025-4362 | itsourcecode Gym Management System ajax.php SQL injection | 9.8v3.1 | 0.6% | 2025-05-06 | |
| CVE-2025-4361 | PHPGurukul Company Visitor Management System department.php SQL injection | 9.8v3.1 | 0.6% | 2025-05-06 | |
| CVE-2025-4360 | itsourcecode Gym Management System view_member.php SQL injection | 9.8v3.1 | 0.6% | 2025-05-06 | |
| CVE-2025-4359 | itsourcecode Gym Management System ajax.php SQL injection | 9.8v3.1 | 0.6% | 2025-05-06 | |
| CVE-2025-4358 | PHPGurukul Company Visitor Management System admin-profile.php SQL injection | 9.8v3.1 | 0.6% | 2025-05-06 | |
| CVE-2025-4357 | Tenda RX3 telnet command injection | 9.8v3.1 | 15.7% | 2025-05-06 | |
| CVE-2025-4356 | Tenda DAP-1520 Authentication storage mod_graph_auth_uri_handler stack-based overflow | 9.8v3.1 | 1.6% | 2025-05-06 | |
| CVE-2025-4355 | Tenda DAP-1520 API set_ws_action heap-based overflow | 9.8v3.1 | 1.2% | 2025-05-06 | |
| CVE-2025-4354 | Tenda DAP-1520 storage check_dws_cookie stack-based overflow | 9.8v3.1 | 1.2% | 2025-05-06 | |
| CVE-2025-4353 | Brilliance Golden Link Secondary System queryTsDictionaryType.htm SQL injection | 9.8v3.1 | 0.5% | 2025-05-06 | |
| CVE-2025-4352 | Brilliance Golden Link Secondary System tcEntrFlowSelect.htm SQL injection | 9.8v3.1 | 0.5% | 2025-05-06 | |
| CVE-2025-4350 | D-Link DIR-600L wake_on_lan command injection | 9.8v3.1 | 4.2% | 2025-05-06 | |
| CVE-2025-4349 | D-Link DIR-600L formSysCmd command injection | 9.8v3.1 | 4.2% | 2025-05-06 | |
| CVE-2025-4348 | D-Link DIR-600L formSetWanL2TP buffer overflow | 9.8v3.1 | 2.4% | 2025-05-06 | |
| CVE-2025-4347 | D-Link DIR-600L formWlSiteSurvey buffer overflow | 9.8v3.1 | 2.4% | 2025-05-06 | |
| CVE-2025-4346 | D-Link DIR-600L formSetWAN_Wizard534 buffer overflow | 9.8v3.1 | 1.6% | 2025-05-06 | |
| CVE-2025-4345 | D-Link DIR-600L formSetLog buffer overflow | 9.8v3.1 | 1.6% | 2025-05-06 | |
| CVE-2025-4344 | D-Link DIR-600L formLogin buffer overflow | 9.8v3.1 | 1.6% | 2025-05-06 | |
| CVE-2025-4343 | D-Link DIR-600L formEasySetupWizard buffer overflow | 9.8v3.1 | 1.3% | 2025-05-06 | |
| CVE-2025-4342 | D-Link DIR-600L formEasySetupWizard3 buffer overflow | 9.8v3.1 | 1.3% | 2025-05-06 | |
| CVE-2025-4341 | D-Link DIR-880L request header ssdpcgi sub_16570 command injection | 9.8v3.1 | 24.0% | 2025-05-06 | |
| CVE-2025-4340 | D-Link DIR-890L/DIR-806A1 soap.cgi sub_175C8 command injection | 9.8v3.1 | 5.3% | 2025-05-06 | |
| CVE-2025-4337 | AHAthat WordPress plugin cross-site request forgery to AHA page deletion | 4.3CNA v3.1 | 0.2% | 2025-05-06 | |
| CVE-2025-4333 | Feng_ha_ha/megagao ssm-erp/production_ssm FileServiceImpl.java uploadFile unrestricted upload | 5.3CNA v4.0 | 0.3% | 2025-05-06 | |
| CVE-2025-4332 | PHPGurukul Company Visitor Management System visitor-detail.php SQL injection | 9.8v3.1 | 0.7% | 2025-05-06 | |
| CVE-2025-4331 | SourceCodester Online Student Clearance System login.php SQL injection | 9.8v3.1 | 0.6% | 2025-05-06 | |
| CVE-2025-4329 | 74CMS index path traversal | 5.3CNA v4.0 | 0.7% | 2025-05-06 | |
| CVE-2025-4328 | fp2952 spring-cloud-base HTTP Header MvcController.java sendBack redirect | 5.1CNA v4.0 | 0.3% | 2025-05-06 | |
| CVE-2025-4327 | Mrcms cross-site request forgery | 5.3CNA v4.0 | 0.3% | 2025-05-06 | |
| CVE-2025-4326 | Mrcms Add Fragment page add.do cross-site scripting | 5.4v3.1 | 0.3% | 2025-05-06 | |
| CVE-2025-4325 | Mrcms Category Management page add.do cross-site scripting | 4.8CNA v4.0 | 0.4% | 2025-05-06 | |
| CVE-2025-4324 | Mrcms External Link Management page edit.do cross-site scripting | 5.4v3.1 | 0.3% | 2025-05-06 | |
| CVE-2025-4323 | Mrcms Edit Article page cross-site scripting | 5.4v3.1 | 0.3% | 2025-05-06 | |
| CVE-2025-4314 | SourceCodester Advanced Web Store index.php SQL injection | 9.8v3.1 | 0.6% | 2025-05-06 | |
| CVE-2025-4313 | SourceCodester Advanced Web Store admin_addnew_product.php SQL injection | 9.8v3.1 | 0.6% | 2025-05-06 | |
| CVE-2025-4312 | SourceCodester Advanced Web Store productdetail.php SQL injection | 9.8v3.1 | 0.6% | 2025-05-06 | |
| CVE-2025-4311 | itsourcecode Content Management System update_main_topic_img.php SQL injection | 9.8v3.1 | 0.6% | 2025-05-06 | |
| CVE-2025-4310 | itsourcecode Content Management System add_topic.php unrestricted upload | 6.3v3.1 | 0.4% | 2025-05-06 | |
| CVE-2025-4309 | PHPGurukul Art Gallery Management System add-art-type.php SQL injection | 9.8v3.1 | 0.6% | 2025-05-06 | |
| CVE-2025-4308 | PHPGurukul Art Gallery Management System add-art-type.php SQL injection | 9.8v3.1 | 0.6% | 2025-05-06 | |
| CVE-2025-4307 | PHPGurukul Art Gallery Management System add-art-medium.php SQL injection | 9.8v3.1 | 0.6% | 2025-05-06 | |
| CVE-2025-4306 | PHPGurukul Nipah Virus Testing Management System edit-phlebotomist.php SQL injection | 9.8v3.1 | 0.6% | 2025-05-06 | |
| CVE-2025-4305 | kefaming mayi File.php upload unrestricted upload | 5.3CNA v4.0 | 0.3% | 2025-05-06 | |
| CVE-2025-4304 | PHPGurukul Cyber Cafe Management System adminprofile.php SQL injection | 9.8v3.1 | 0.6% | 2025-05-06 | |
| CVE-2025-4303 | PHPGurukul Human Metapneumovirus Testing Management System add-phlebotomist.php SQL injection | 9.8v3.1 | 0.6% | 2025-05-06 | |
| CVE-2025-4301 | itsourcecode Content Management System search-notice.php SQL injection | 9.8v3.1 | 0.6% | 2025-05-06 | |
| CVE-2025-4300 | itsourcecode Content Management System search_list.php SQL injection | 9.8v3.1 | 0.6% | 2025-05-06 | |
| CVE-2025-4299 | Tenda AC1206 openSchedWifi setSchedWifi buffer overflow | 9.8v3.1 | 0.9% | 2025-05-06 | |
| CVE-2025-4298 | Tenda AC1206 setcfm formSetCfm buffer overflow | 9.8v3.1 | 1.2% | 2025-05-06 | Emerging Threats |
| CVE-2025-4041 | Optigo Networks ONS NC600 SSH server hard-coded credentials | 9.3CNA v4.0 | 0.7% | 2025-05-06 | |
| CVE-2025-3782 | Cision Block WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-05-06 | Fix |
| CVE-2025-3610 | Reales WP STPT WordPress plugin authenticated (Subscriber+) privilege escalation via password update | 8.8CNA v3.1 | 0.6% | 2025-05-06 | |
| CVE-2025-3609 | Reales WP STPT WordPress plugin unauthorized user Registration | 5.3CNA v3.1 | 0.3% | 2025-05-06 | |
| CVE-2025-3281 | User Registration and Membership WordPress plugin insecure direct object reference | 5.3CNA v3.1 | 0.4% | 2025-05-06 | Fix |
| CVE-2025-3020 | Wiesemann and Theis: Multiple W&T Products are vulnerable to cross-site-scripting | 5.4CNA v3.1 | 0.3% | 2025-05-06 | Fix |
| CVE-2025-2898 | IBM Maximo Application Suite privilege escalation | 7.5CNA v3.1 | 0.3% | 2025-05-06 | Fix |
| CVE-2025-2802 | LayoutBoxx WordPress plugin unauthenticated arbitrary shortcode execution | 7.3CNA v3.1 | 0.5% | 2025-05-06 | |
| CVE-2025-2509 | Google ChromeOS Virglrenderer out-of-bounds read | 7.8CISA ADP v3.1 | 0.1% | 2025-05-06 | Fix |
| CVE-2025-2011 | Slider and Popup Builder by Depicter WordPress plugin unauthenticated SQL injection via s parameter | 7.5CNA v3.1 | 45.7% | 2025-05-06 | NucleiMetasploitExploit codeFix |
| CVE-2025-0984 | Arbitrary file upload in Netoloji Software's E-Flow | 8.2CNA v3.1 | 0.3% | 2025-05-06 | Fix |
| CVE-2025-0856 | PGS Core WordPress plugin missing authorization via Multiple Functions | 7.3CNA v3.1 | 0.3% | 2025-05-06 | Fix |
| CVE-2025-0855 | PGS Core WordPress plugin unauthenticated PHP object injection | 9.8CNA v3.1 | 0.7% | 2025-05-06 | Fix |
| CVE-2025-0853 | PGS Core WordPress plugin unauthenticated SQL injection | 7.5CNA v3.1 | 0.4% | 2025-05-06 | Fix |
| CVE-2025-0649 | Google stack exhaustion in TensorFlow Serving | 8.9CNA v4.0 | 0.2% | 2025-05-06 | |
| CVE-2025-47268 | iputils integer overflow | 6.5CNA v3.1 | 1.7% | 2025-05-05 | Fix |
| CVE-2025-46813 | Private data leak on login-required Discourse sites | 5.8CNA v3.1 | 0.4% | 2025-05-05 | |
| CVE-2025-46734 | League/commonmark cross-site scripting vulnerability in attributes extension | 6.4CNA v3.1 | 0.4% | 2025-05-05 | Fix |
| CVE-2025-46731 | Craft CMS Contains a potential remote code execution vulnerability via Twig SSTI | 7.3CNA v4.0 | 1.5% | 2025-05-05 | Exploit codeFix |
| CVE-2025-46730 | Mobile Security Framework (MobSF) allows Web Server resource exhaustion via ZIP of Death Attack | 6.8CNA v3.1 | 0.5% | 2025-05-05 | |
| CVE-2025-46726 | Langroid vulnerable to XXE injection via XMLToolMessage | 7.8CNA v4.0 | 0.6% | 2025-05-05 | Fix |
| CVE-2025-46720 | Keystone isFilterable access control information disclosure | 3.1CNA v3.1 | 0.3% | 2025-05-05 | Fix |
| CVE-2025-46719 | open-webui open WebUI vulnerable to stored XSS | 5.4CNA v4.0 | 0.6% | 2025-05-05 | Fix |
| CVE-2025-46571 | open-webui open WebUI vulnerable to limited stored XSS vila uploaded html file | 5.3CNA v4.0 | 0.4% | 2025-05-05 | Fix |
| CVE-2025-46559 | Misskey directory traversal vulnerability in AiScript via `Mk:API` | 5.4CNA v3.1 | 0.5% | 2025-05-05 | Fix |
| CVE-2025-46553 | @misskey-dev/summaly Redirect Filter Bypass | 2.1CNA v4.0 | 0.3% | 2025-05-05 | Fix |
| CVE-2025-46340 | Misskey CSS Style injection vulnerability in `MkUrlPreview` | 7.2CNA v3.1 | 0.3% | 2025-05-05 | Fix |
| CVE-2025-46335 | Mobile Security Framework allows stored cross-site scripting | 8.6CNA v4.0 | 0.3% | 2025-05-05 | Fix |
| CVE-2025-45751 | Senior-walter Web-based Pharmacy Product Management System cross-site scripting | 6.1v3.1 | 0.3% | 2025-05-05 | |
| CVE-2025-45618 | Huangjian888 Jeeweb-mybatis-springboot information disclosure | 6.5CISA ADP v3.1 | 0.4% | 2025-05-05 | |
| CVE-2025-45617 | megagao production_ssm information disclosure | 7.5CISA ADP v3.1 | 0.4% | 2025-05-05 | |
| CVE-2025-45616 | Brcc incorrect access control vulnerability | 9.8CISA ADP v3.1 | 0.4% | 2025-05-05 | |
| CVE-2025-45615 | user-xiangpeng yaoqishan improper access control | 9.8CISA ADP v3.1 | 0.4% | 2025-05-05 | |
| CVE-2025-45614 | LCW2004 ONE information disclosure | 7.5CISA ADP v3.1 | 0.4% | 2025-05-05 | |
| CVE-2025-45613 | Zhaojun1998 Shiro-action information disclosure | 7.5CISA ADP v3.1 | 0.4% | 2025-05-05 | |
| CVE-2025-45612 | Exrick xmall authentication bypass | 9.8CISA ADP v3.1 | 0.5% | 2025-05-05 | |
| CVE-2025-45611 | java-aodeng Hope-Boot authentication bypass | 9.8CISA ADP v3.1 | 0.5% | 2025-05-05 | |
| CVE-2025-45610 | Passjava information disclosure | 7.5CISA ADP v3.1 | 0.4% | 2025-05-05 | |
| CVE-2025-45609 | Ke Kob information disclosure | 7.5CISA ADP v3.1 | 0.4% | 2025-05-05 | |
| CVE-2025-45608 | Zykzhangyukang Xinguan information disclosure | 7.5CISA ADP v3.1 | 0.4% | 2025-05-05 | |
| CVE-2025-45607 | Liaoxuefeng itranswarp authentication bypass | 9.8CISA ADP v3.1 | 0.5% | 2025-05-05 | |
| CVE-2025-45322 | Lopalopa Online Service Management Portal SQL injection | 8.8NVD v3.1 | 0.5% | 2025-05-05 | |
| CVE-2025-45321 | Lopalopa Online Service Management Portal SQL injection | 8.8v3.1 | 0.4% | 2025-05-05 | |
| CVE-2025-45320 | Lopalopa Online Service Management Portal directory listing | 5.3NVD v3.1 | 0.4% | 2025-05-05 | |
| CVE-2025-45242 | Rhymix insecure storage of sensitive information | 7.7CISA ADP v3.1 | 0.4% | 2025-05-05 | |
| CVE-2025-45240 | qianfox FoxCMS SQL injection | 6.5CISA ADP v3.1 | 0.3% | 2025-05-05 | |
| CVE-2025-45239 | qianfox FoxCMS path traversal | 5.3CISA ADP v3.1 | 0.7% | 2025-05-05 | Fix |
| CVE-2025-45238 | qianfox FoxCMS path traversal | 9.1CISA ADP v3.1 | 0.7% | 2025-05-05 | |
| CVE-2025-45237 | Dbsyncer improper access control | 7.5CISA ADP v3.1 | 0.5% | 2025-05-05 | |
| CVE-2025-45236 | Dbsyncer Edit Profile feature stored cross-site scripting | 5.4CISA ADP v3.1 | 0.3% | 2025-05-05 | |
| CVE-2025-45042 | Tenda AC9 command injection | 9.8v3.1 | 1.6% | 2025-05-05 | |
| CVE-2025-44074 | Seacms SQL injection | 9.8v3.1 | 0.5% | 2025-05-05 | |
| CVE-2025-44072 | Seacms SQL injection | 9.8v3.1 | 0.5% | 2025-05-05 | |
| CVE-2025-44071 | Seacms code injection | 9.8v3.1 | 1.0% | 2025-05-05 | |
| CVE-2025-43915 | Linkerd resource exhaustion | 6.5CISA ADP v3.1 | 0.3% | 2025-05-05 | Fix |
| CVE-2025-43852 | RVC-Project Retrieval-based-Voice-Conversion-WebUI voice separation module insecure deserialization | 9.8NVD v3.1 | 1.0% | 2025-05-05 | |
| CVE-2025-43851 | RVC-Project Retrieval-based-Voice-Conversion-WebUI voice separation module insecure deserialization | 9.8NVD v3.1 | 1.0% | 2025-05-05 | |
| CVE-2025-43850 | RVC-Project Retrieval-based-Voice-Conversion-WebUI model export insecure deserialization | 9.8NVD v3.1 | 0.9% | 2025-05-05 | |
| CVE-2025-43849 | RVC-Project Retrieval-based-Voice-Conversion-WebUI deserialization of untrusted data | 9.8NVD v3.1 | 0.9% | 2025-05-05 | |
| CVE-2025-43848 | RVC-Project Retrieval-based-Voice-Conversion-WebUI deserialization of untrusted data | 9.8NVD v3.1 | 1.0% | 2025-05-05 | |
| CVE-2025-43847 | RVC-Project Retrieval-based-Voice-Conversion-WebUI deserialization of untrusted data | 9.8NVD v3.1 | 1.0% | 2025-05-05 | |
| CVE-2025-43846 | RVC-Project Retrieval-based-Voice-Conversion-WebUI deserialization of untrusted data | 9.8NVD v3.1 | 1.0% | 2025-05-05 | |
| CVE-2025-43845 | RVC-Project Retrieval-based-Voice-Conversion-WebUI model info loader code injection | 9.8NVD v3.1 | 1.0% | 2025-05-05 | |
| CVE-2025-43844 | RVC-Project Retrieval-based-Voice-Conversion-WebUI model training command injection | 9.8NVD v3.1 | 2.2% | 2025-05-05 | |
| CVE-2025-43843 | RVC-Project Retrieval-based-Voice-Conversion-WebUI pitch feature extraction command injection | 9.8NVD v3.1 | 2.4% | 2025-05-05 | |
| CVE-2025-43842 | RVC-Project Retrieval-based-Voice-Conversion-WebUI dataset preprocessing command injection | 9.8NVD v3.1 | 2.2% | 2025-05-05 | |
| CVE-2025-39363 | WordPress Custom Login and Registration plugin cross-site scripting (XSS) | 5.4v3.1 | 0.2% | 2025-05-05 | |
| CVE-2025-29573 | Mezzanine CMS cross-site scripting (XSS) | 6.1CISA ADP v3.1 | 0.3% | 2025-05-05 | |
| CVE-2025-28168 | Multi Uploaders Multiple File Upload client-side enforcement of server-side security | 9.8v3.1 | 0.3% | 2025-05-05 | Fix |
| CVE-2025-28062 | frappe erpnext cross-site request forgery | 8.1CISA ADP v3.1 | 0.8% | 2025-05-05 | Exploit code |
| CVE-2025-27921 | Srimax Output Messenger cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2025-05-05 | Fix |
| CVE-2025-27920 | Srimax Output Messenger directory traversal | 8.8v3.1 | 1.9% | 2025-05-05 | KEVFix |
| CVE-2025-26241 | Enhancesoft osTicket "Search" functionality of "tickets.php" page SQL injection | 6.5CISA ADP v3.1 | 0.3% | 2025-05-05 | |
| CVE-2025-25504 | Niceforyou Gefen Webfwc improper authentication | 6.5CISA ADP v3.1 | 0.4% | 2025-05-05 | |
| CVE-2025-24977 | OpenCTI has remote code execution and sensitive secrets exposed through web hook | 9.1CNA v3.1 | 0.8% | 2025-05-05 | Fix |
| CVE-2025-20671 | MediaTek chipsets out-of-bounds write in thermal | 7.0v3.1 | 0.1% | 2025-05-05 | Fix |
| CVE-2025-20670 | MediaTek chipsets improper certificate validation in Modem | 5.7v3.1 | 0.3% | 2025-05-05 | Fix |
| CVE-2025-20668 | MediaTek chipsets out-of-bounds write in scp | 7.8v3.1 | 0.1% | 2025-05-05 | Fix |
| CVE-2025-20667 | MediaTek chipsets inadequate encryption strength in Modem | 7.5v3.1 | 0.4% | 2025-05-05 | Fix |
| CVE-2025-20666 | MediaTek chipsets reachable assertion in Modem | 7.5v3.1 | 0.8% | 2025-05-05 | Fix |
| CVE-2025-20665 | MediaTek chipsets file and directory information exposure in devinfo | 5.5v3.1 | 0.1% | 2025-05-05 | Fix |
| CVE-2025-4318 | Input validation issue in AWS Amplify Studio UI component properties | 9.0CNA v4.0 | 1.0% | 2025-05-05 | Fix |
| CVE-2025-4316 | Devolutions Server PAM feature improper access control | 4.3CISA ADP v3.1 | 0.4% | 2025-05-05 | Fix |
| CVE-2025-4297 | PHPGurukul Men Salon Management System change-password.php SQL injection | 9.8v3.1 | 0.6% | 2025-05-05 | |
| CVE-2025-4293 | Mrcms Group Edit page edit.do cross-site scripting | 5.4v3.1 | 0.3% | 2025-05-05 | |
| CVE-2025-4292 | Mrcms Edit User page edit.do cross-site scripting | 5.4v3.1 | 0.3% | 2025-05-05 | |
| CVE-2025-4291 | IdeaCMS saveUpload unrestricted upload | 9.8v3.1 | 0.4% | 2025-05-05 | |
| CVE-2025-4290 | PCMan FTP Server SMNT command buffer overflow | 9.8v3.1 | 0.7% | 2025-05-05 | |
| CVE-2025-4289 | PCMan FTP Server RNTO command buffer overflow | 9.8v3.1 | 0.7% | 2025-05-05 | |
| CVE-2025-4288 | PCMan FTP Server RNFR command buffer overflow | 9.8v3.1 | 0.7% | 2025-05-05 | |
| CVE-2025-4287 | PyTorch nccl.py torch.cuda.nccl.reduce denial of service | 4.8CNA v4.0 | 0.2% | 2025-05-05 | |
| CVE-2025-4286 | Intelbras InControl Dispositivos Edição page credentials storage | 4.9v3.1 | 0.5% | 2025-05-05 | |
| CVE-2025-4283 | SourceCodester/oretnom23 Stock Management System Login.php SQL injection | 9.8v3.1 | 0.7% | 2025-05-05 | |
| CVE-2025-4282 | SourceCodester/oretnom23 Stock Management System Users.php cross-site request forgery | 8.8v3.1 | 0.4% | 2025-05-05 | |
| CVE-2025-4281 | Shenzhen Sixun Software Shanghui Group Business Management System information disclosure | 5.3CNA v4.0 | 0.3% | 2025-05-05 | |
| CVE-2025-4279 | External image replace WordPress plugin authenticated (Contributor+) arbitrary file upload | 8.8CNA v3.1 | 0.8% | 2025-05-05 | |
| CVE-2025-4272 | Mechrevo Control Console GCUService csCAPI.dll uncontrolled search path | 7.3CNA v4.0 | 0.2% | 2025-05-05 | |
| CVE-2025-4271 | TOTOLINK A720R cstecgi.cgi information disclosure | 6.9CNA v4.0 | 0.7% | 2025-05-05 | |
| CVE-2025-4270 | TOTOLINK A720R Config cstecgi.cgi information disclosure | 7.5v3.1 | 13.9% | 2025-05-05 | |
| CVE-2025-4269 | TOTOLINK A720R Log cstecgi.cgi access control | 5.3v3.1 | 0.6% | 2025-05-05 | |
| CVE-2025-4268 | TOTOLINK A720R cstecgi.cgi missing authentication | 6.9CNA v4.0 | 1.1% | 2025-05-05 | |
| CVE-2025-4267 | SourceCodester/oretnom23 Stock Management System Purchase Order Details page view_po SQL injection | 7.2v3.1 | 0.5% | 2025-05-05 | |
| CVE-2025-4266 | PHPGurukul Notice Board System bwdates-reports-details.php SQL injection | 9.8v3.1 | 0.5% | 2025-05-05 | |
| CVE-2025-4265 | PHPGurukul Emergency Ambulance Hiring Portal contact-us.php SQL injection | 9.8v3.1 | 0.5% | 2025-05-05 | |
| CVE-2025-4264 | PHPGurukul Emergency Ambulance Hiring Portal edit-ambulance.php SQL injection | 9.8v3.1 | 0.5% | 2025-05-05 | |
| CVE-2025-4263 | PHPGurukul Online DJ Booking Management System booking-search.php SQL injection | 9.8v3.1 | 0.5% | 2025-05-05 | |
| CVE-2025-4262 | PHPGurukul Online DJ Booking Management System user-search.php SQL injection | 9.8v3.1 | 0.5% | 2025-05-05 | |
| CVE-2025-4261 | GAIR-NLP factool tool.py run_single code injection | 4.8CNA v4.0 | 0.2% | 2025-05-05 | |
| CVE-2025-4260 | zhangyanbo2007 youkefu TemplateController.java impsave deserialization | 8.3v3.1 | 0.7% | 2025-05-05 | |
| CVE-2025-4259 | newbee-mall UploadController.java upload unrestricted upload | 9.8v3.1 | 0.5% | 2025-05-05 | |
| CVE-2025-4258 | zhangyanbo2007 youkefu MediaController.java upload unrestricted upload | 8.8v3.1 | 0.4% | 2025-05-05 | |
| CVE-2025-4257 | SeaCMS admin_pay.php cross-site scripting | 6.1v3.1 | 0.3% | 2025-05-05 | |
| CVE-2025-4256 | SeaCMS admin_paylog.php cross-site scripting | 5.4v3.1 | 0.3% | 2025-05-05 | |
| CVE-2025-4255 | PCMan FTP Server RMD command buffer overflow | 9.8v3.1 | 2.1% | 2025-05-05 | Exploit code |
| CVE-2025-4254 | PCMan FTP Server LIST command buffer overflow | 9.8v3.1 | 0.7% | 2025-05-05 | |
| CVE-2025-4096 | Google Chrome HTML heap-based buffer overflow | 8.8CISA ADP v3.1 | 0.4% | 2025-05-05 | Fix |
| CVE-2025-4052 | Google Chrome DevTools inappropriate implementation | 9.8CISA ADP v3.1 | 0.5% | 2025-05-05 | Fix |
| CVE-2025-4051 | Google Chrome DevTools improper input validation | 6.3CISA ADP v3.1 | 0.3% | 2025-05-05 | Fix |
| CVE-2025-4050 | Google Chrome DevTools out-of-bounds access | 8.8CISA ADP v3.1 | 0.4% | 2025-05-05 | Fix |
| CVE-2025-3583 | Newsletter WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.3% | 2025-05-05 | Fix |
| CVE-2025-2905 | An XML external entity (XXE) vulnerability in multiple WSO2 Products | 9.1CNA v3.1 | 1.3% | 2025-05-05 | Emerging ThreatsFix |
| CVE-2025-2545 | Deprecated 3DES cryptographic algorithm used by Request Tracker in emails encrypted with S/MIME | 2.3CNA v4.0 | 0.2% | 2025-05-05 | Fix |
| CVE-2025-1992 | IBM Db2 denial of service | 5.3CNA v3.1 | 0.4% | 2025-05-05 | Fix |
| CVE-2025-1909 | BuddyBoss Platform Pro WordPress plugin authentication bypass via Apple OAuth provider | 9.8v3.1 | 0.6% | 2025-05-05 | Fix |
| CVE-2025-1493 | IBM Db2 denial of service | 5.3CNA v3.1 | 0.4% | 2025-05-05 | Fix |
| CVE-2025-1000 | IBM Db2 denial of service | 5.3CNA v3.1 | 0.4% | 2025-05-05 | Fix |
| CVE-2025-0915 | IBM Db2 denial of service | 5.3CNA v3.1 | 0.4% | 2025-05-05 | Fix |
| CVE-2025-0217 | Privileged Remote Access authentication bypass | 7.3CNA v4.0 | 0.2% | 2025-05-05 | Fix |
| CVE-2025-47245 | BlueWave Checkmate web parameter tampering | 8.1CNA v3.1 | 0.5% | 2025-05-04 | |
| CVE-2025-4253 | PCMan FTP Server HASH command buffer overflow | 9.8v3.1 | 0.7% | 2025-05-04 | |
| CVE-2025-4252 | PCMan FTP Server APPEND command buffer overflow | 9.8v3.1 | 0.7% | 2025-05-04 | |
| CVE-2025-4251 | PCMan FTP Server RMDIR command buffer overflow | 9.8v3.1 | 0.7% | 2025-05-04 | |
| CVE-2025-4250 | code-projects Nero Social Networking Site index.php SQL injection | 9.8v3.1 | 0.6% | 2025-05-04 | |
| CVE-2025-4249 | PHPGurukul e-Diary Management System manage-categories.php SQL injection | 9.8v3.1 | 0.6% | 2025-05-04 | |
| CVE-2025-4248 | SourceCodester Simple To-Do List System complete_task.php SQL injection | 9.8v3.1 | 0.6% | 2025-05-04 | |
| CVE-2025-4247 | SourceCodester Simple To-Do List System delete_task.php SQL injection | 8.8v3.1 | 0.5% | 2025-05-04 | |
| CVE-2025-47244 | Inedo ProGet authentication bypass | 7.3CNA v3.1 | 0.5% | 2025-05-03 | |
| CVE-2025-47241 | browser-use allowed_domains URL parser vulnerability | 4.0CNA v3.1 | 0.5% | 2025-05-03 | Fix |
| CVE-2025-47229 | GNU PSPP reachable assertion | 5.5v3.1 | 0.2% | 2025-05-03 | Fix |
| CVE-2025-37799 | Linux kernel vmxnet3 XDP packet processing information disclosure | 8.6CNA v3.1 | 0.4% | 2025-05-03 | Fix |
| CVE-2025-4244 | code-projects Online Bus Reservation System seatlocation.php SQL injection | 8.8v3.1 | 0.5% | 2025-05-03 | |
| CVE-2025-4243 | code-projects Online Bus Reservation System print.php SQL injection | 8.8v3.1 | 0.5% | 2025-05-03 | |
| CVE-2025-4242 | PHPGurukul Online Birth Certificate System between-dates-report.php SQL injection | 9.8v3.1 | 0.4% | 2025-05-03 | |
| CVE-2025-4241 | PHPGurukul Teacher Subject Allocation Management System search.php SQL injection | 9.8v3.1 | 0.6% | 2025-05-03 | |
| CVE-2025-4240 | PCMan FTP Server LCD command buffer overflow | 9.8v3.1 | 0.7% | 2025-05-03 | |
| CVE-2025-4239 | PCMan FTP Server type command buffer overflow | 9.8v3.1 | 0.7% | 2025-05-03 | |
| CVE-2025-4238 | PCMan FTP Server MGET command buffer overflow | 9.8v3.1 | 0.7% | 2025-05-03 | |
| CVE-2025-4237 | PCMan FTP Server MDELETE command buffer overflow | 9.8v3.1 | 0.7% | 2025-05-03 | |
| CVE-2025-4236 | PCMan FTP Server MDIR command buffer overflow | 9.8v3.1 | 0.7% | 2025-05-03 | |
| CVE-2025-4226 | PHPGurukul/Campcodes Cyber Cafe Management System add-computer.php SQL injection | 9.8v3.1 | 0.6% | 2025-05-03 | |
| CVE-2025-4222 | Database Toolset WordPress plugin unauthenticated sensitive information exposure via Backup files | 5.9CNA v3.1 | 0.5% | 2025-05-03 | |
| CVE-2025-4199 | Abundatrade WordPress plugin cross-site request forgery to stored cross-site scripting | 6.1CNA v3.1 | 0.2% | 2025-05-03 | |
| CVE-2025-4198 | Alink Tap WordPress plugin cross-site request forgery to stored cross-site scripting | 6.1CNA v3.1 | 0.2% | 2025-05-03 | |
| CVE-2025-4188 | Advanced Reorder Image Text Slider WordPress plugin cross-site request forgery | 6.1CNA v3.1 | 0.2% | 2025-05-03 | |
| CVE-2025-4172 | VerticalResponse Newsletter Widget WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-05-03 | |
| CVE-2025-4170 | Xavin's Review Ratings WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-05-03 | |
| CVE-2025-4168 | Subpage List WordPress plugin authenticated (Contributor+) stored cross-site scripting | 6.4CNA v3.1 | 0.2% | 2025-05-03 | |
| CVE-2025-3918 | Job Listings - unauthenticated privilege escalation via register_action function | 9.8CNA v3.1 | 0.6% | 2025-05-03 | |
| CVE-2025-3815 | SurveyJS WordPress plugin authenticated (Contributor+) stored cross-site scripting via id parameter | 6.4CNA v3.1 | 0.3% | 2025-05-03 | Fix |
| CVE-2025-3779 | Personizely WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2025-05-03 | Fix |
| CVE-2025-1838 | IBM Cloud Pak for Business Automation denial of service | 6.5CNA v3.1 | 0.4% | 2025-05-03 | Fix |
| CVE-2025-1495 | IBM Business Automation Workflow missing authentication | 4.3CNA v3.1 | 0.3% | 2025-05-03 | Fix |
| CVE-2025-47226 | Grokability Snipe-IT has incorrect authorization for accessing asset information | 3.3NVD v3.1 | 1.3% | 2025-05-02 | Exploit codeFix |
| CVE-2025-47201 | Intrexx Portal Server cross-site scripting | 5.4v3.1 | 0.2% | 2025-05-02 | Fix |
| CVE-2025-46723 | OpenVM byte decomposition of pc in AUIPC chip can overflow | 7.8CNA v4.0 | 0.5% | 2025-05-02 | Fix |
| CVE-2025-46332 | Information disclosure via Flags override link | 6.5CNA v3.1 | 0.3% | 2025-05-02 | Fix |
| CVE-2025-45800 | TOTOLINK A950RG command injection | 9.8CISA ADP v3.1 | 1.0% | 2025-05-02 | |
| CVE-2025-44877 | Tenda AC9 command injection | 9.8CISA ADP v3.1 | 1.9% | 2025-05-02 | |
| CVE-2025-44872 | Tenda AC9 command injection | 9.8CISA ADP v3.1 | 1.9% | 2025-05-02 | |
| CVE-2025-44868 | WAVLINK WL-WN530H4 command injection | 9.8CISA ADP v3.1 | 2.7% | 2025-05-02 | |
| CVE-2025-37798 | In the Linux kernel, the following vulnerability has been resolved: codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() After making all ->qlen_notify() callbacks idempotent, now it is safe to remove the check of qlen!=0 from both fq_codel_dequeue() and codel_qdisc_dequeue(). | 7.8CNA v3.1 | 0.2% | 2025-05-02 | Fix |
| CVE-2025-37797 | Linux kernel HFSC queueing discipline use-after-free | 7.8CNA v3.1 | 0.2% | 2025-05-02 | Fix |
| CVE-2025-29825 | Microsoft Edge (Chromium-based) spoofing | 6.5CNA v3.1 | 0.9% | 2025-05-02 | Fix |
| CVE-2025-21572 | Oracle OpenGrok cross-site scripting | 6.1CNA v3.1 | 0.2% | 2025-05-02 | Fix |
| CVE-2025-4218 | handrew browserpilot gpt_selenium_agent.py GPTSeleniumAgent code injection | 7.8v3.1 | 0.3% | 2025-05-02 | |
| CVE-2025-4215 | gorhill uBlock Origin UI 1p-filters.js currentStateChanged redos | 3.7v3.1 | 0.8% | 2025-05-02 | Fix |
| CVE-2025-4214 | PHPGuruku Online DJ Booking Management System booking-bwdates-reports-details.php SQL injection | 9.8v3.1 | 0.6% | 2025-05-02 | |
| CVE-2025-4213 | PHPGurukul Online Birth Certificate System search.php SQL injection | 9.8v3.1 | 0.4% | 2025-05-02 | |
| CVE-2025-4210 | Casdoor SCIM User Creation endpoint scim.go HandleScim authorization | 6.9CNA v4.0 | 1.8% | 2025-05-02 | NucleiFix |
| CVE-2025-4204 | Ultimate Auction Pro WordPress plugin unauthenticated SQL injection via auction_id | 7.5CNA v3.1 | 0.4% | 2025-05-02 | Fix |
| CVE-2025-4197 | code-projects Patient Record Management System edit_xpatient.php SQL injection | 8.8v3.1 | 0.5% | 2025-05-02 | |
| CVE-2025-4196 | SourceCodester Patient Record Management System birthing.php SQL injection | 8.8v3.1 | 0.5% | 2025-05-02 | |
| CVE-2025-4195 | itsourcecode Gym Management System ajax.php SQL injection | 9.8v3.1 | 0.6% | 2025-05-02 | |
| CVE-2025-4193 | itsourcecode Restaurant Management System category_update.php SQL injection | 9.8v3.1 | 0.6% | 2025-05-02 | |
| CVE-2025-4192 | itsourcecode Restaurant Management System category_save.php SQL injection | 9.8v3.1 | 0.6% | 2025-05-02 | |
| CVE-2025-4191 | PHPGurukul Employee Record Management System editmyeducation.php SQL injection | 9.8v3.1 | 0.6% | 2025-05-02 |