# CVEs published 2025-05-08

112 CVEs were published on May 8, 2025: 12 critical, 37 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2025-4443](https://cve.now/CVE-2025-4443.md): D-Link DIR-605L sub\_454F2C command injection (CVSS 5.3, D-Link DIR-605L)
- [CVE-2025-4442](https://cve.now/CVE-2025-4442.md): D-Link DIR-605L formSetWAN\_Wizard55 buffer overflow (CVSS 8.7, D-Link DIR-605L)
- [CVE-2025-4441](https://cve.now/CVE-2025-4441.md): D-Link DIR-605L formSetWAN\_Wizard534 buffer overflow (CVSS 8.7, D-Link DIR-605L)
- [CVE-2025-4440](https://cve.now/CVE-2025-4440.md): H3C GR-1800AX aspForm EnableIpv6 buffer overflow (CVSS 8.6, H3C GR-1800AX)
- [CVE-2025-27720](https://cve.now/CVE-2025-27720.md): Pixmeo OsiriX MD Cleartext Transmission of Sensitive Information (CVSS 9.3, Pixmeo OsiriX MD)
- [CVE-2025-31946](https://cve.now/CVE-2025-31946.md): Pixmeo OsiriX MD Use After Free (CVSS 6.9, Pixmeo OsiriX MD)
- [CVE-2025-27578](https://cve.now/CVE-2025-27578.md): Pixmeo OsiriX MD Use After Free (CVSS 8.7, Pixmeo OsiriX MD)
- [CVE-2025-47732](https://cve.now/CVE-2025-47732.md): Microsoft Dataverse Remote Code Execution Vulnerability (CVSS 8.7, Microsoft Dataverse)
- [CVE-2025-47733](https://cve.now/CVE-2025-47733.md): Microsoft Power Apps Information Disclosure Vulnerability (CVSS 9.1, Microsoft Power Pages)
- [CVE-2025-29813](https://cve.now/CVE-2025-29813.md): Azure DevOps Elevation of Privilege Vulnerability (CVSS 10.0, Microsoft Azure DevOps)
- [CVE-2025-29827](https://cve.now/CVE-2025-29827.md): Azure Automation Elevation of Privilege Vulnerability (CVSS 9.9, Microsoft Azure Automation)
- [CVE-2025-29972](https://cve.now/CVE-2025-29972.md): Azure Storage Resource Provider Spoofing Vulnerability (CVSS 9.9, Microsoft Azure Storage Resource Provider)
- [CVE-2025-33072](https://cve.now/CVE-2025-33072.md): Microsoft msagsfeedback.azurewebsites.net Information Disclosure Vulnerability (CVSS 8.1, Microsoft msagsfeedback.azurewebsites.net)
- [CVE-2025-1331](https://cve.now/CVE-2025-1331.md): IBM CICS TX code execution (CVSS 7.8, IBM CICS TX Standard · IBM CICS TX Advanced)
- [CVE-2025-1330](https://cve.now/CVE-2025-1330.md): IBM CICS TX code execution (CVSS 7.8, IBM CICS TX Standard · IBM CICS TX Advanced)
- [CVE-2025-1329](https://cve.now/CVE-2025-1329.md): IBM CICS TX code execution (CVSS 7.8, IBM CICS TX Standard · IBM CICS TX Advanced)
- [CVE-2025-46833](https://cve.now/CVE-2025-46833.md): Programs/P73\_SimplePythonEncryption.py has weak cryptographic key (CVSS 4.6, ShashikantSingh09 python-progrrames)
- [CVE-2025-46812](https://cve.now/CVE-2025-46812.md): Trix vulnerable to Cross-site Scripting on copy & paste (CVSS 2.0, basecamp trix · trix)
- [CVE-2025-46712](https://cve.now/CVE-2025-46712.md): Erlang/OTP SSH Has Strict KEX Violations (CVSS 3.7, erlang otp)
- [CVE-2025-46336](https://cve.now/CVE-2025-46336.md): Rack session gets restored after deletion (CVSS 4.2, rack-session)
- [CVE-2024-9448](https://cve.now/CVE-2024-9448.md): On affected platforms running Arista EOS with Traffic Policies configured the vulnerability will cause received untagged packets not to… (CVSS 7.5, Arista Networks EOS)
- [CVE-2025-27695](https://cve.now/CVE-2025-27695.md): Dell Wyse Management Suite, versions prior to WMS 5.1 contain an Authentication Bypass by Spoofing vulnerability. (CVSS 4.9, Dell Wyse Management Suite)
- [CVE-2024-12378](https://cve.now/CVE-2024-12378.md): On affected platforms running Arista EOS with secure Vxlan configured, restarting the Tunnelsec agent will result in packets being sent… (CVSS 9.1, Arista Networks CloudVision Portal)
- [CVE-2024-11186](https://cve.now/CVE-2024-11186.md): On affected versions of the CloudVision Portal, improper access controls could enable a malicious authenticated user to take broader… (CVSS 10.0, Arista Networks CloudVision Portal)
- [CVE-2025-0505](https://cve.now/CVE-2025-0505.md): On Arista CloudVision systems (virtual or physical on-premise deployments), Zero Touch Provisioning can be used to gain admin privileges… (CVSS 10.0, Arista Networks CloudVision Portal)
- [CVE-2024-8100](https://cve.now/CVE-2024-8100.md): On affected versions of the Arista CloudVision Portal (CVP on-prem), the time-bound device onboarding token can be used to gain admin… (CVSS 8.7, Arista Networks CloudVision)
- [CVE-2025-1948](https://cve.now/CVE-2025-1948.md): Eclipse Jetty HTTP clients can increase memory allocation (CVSS 7.5, Eclipse Foundation Jetty · org.eclipse.jetty.http2:jetty-ht…)
- [CVE-2025-4098](https://cve.now/CVE-2025-4098.md): Out-of-bounds Read in Horner Automation Cscape (CVSS 8.4, Horner Automation Cscape)
- [CVE-2025-30101](https://cve.now/CVE-2025-30101.md): Dell PowerScale OneFS, versions 9.8.0.0 through 9.10.1.0, contain a time-of-check time-of-use (TOCTOU) race condition vulnerability. (CVSS 4.4, Dell PowerScale OneFS)
- [CVE-2025-30102](https://cve.now/CVE-2025-30102.md): Dell PowerScale OneFS, versions 9.4.0.0 through 9.10.1.0, contains an out-of-bounds write vulnerability. (CVSS 5.5, Dell PowerScale OneFS)
- [CVE-2024-13009](https://cve.now/CVE-2024-13009.md): Eclipse Jetty GZIP buffer release (CVSS 7.2, Eclipse Foundation Jetty · org.eclipse.jetty:jetty-server)
- [CVE-2025-4207](https://cve.now/CVE-2025-4207.md): PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (CVSS 5.9, PostgreSQL)
- [CVE-2024-6648](https://cve.now/CVE-2024-6648.md): Path Traversal in AP Page Builder (CVSS 8.7, Apollo Theme AP Page Builder)
- [CVE-2025-3506](https://cve.now/CVE-2025-3506.md): Potentially senitive path exposed via unauthenticated http route (CVSS 6.3, Checkmk)
- [CVE-2025-2806](https://cve.now/CVE-2025-2806.md): tagDiv Composer \<= 5.3 - Reflected Cross-Site Scripting via 'data' (CVSS 6.1, tagDiv Composer)
- [CVE-2025-3468](https://cve.now/CVE-2025-3468.md): NEX-Forms – Ultimate Form Builder – Contact forms and much more \<= 8.9.1 - Authenticated (Custom) Stored Cross-Site Scripting (CVSS 6.4, webaways NEX-Forms – Ultimate Forms Plugin for WordPress)
- [CVE-2025-3862](https://cve.now/CVE-2025-3862.md): Contest Gallery \<= 26.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter (CVSS 6.4, contest-gallery Contest Gallery – Upload & Vote Photos, Med…)
- [CVE-2025-4208](https://cve.now/CVE-2025-4208.md): NEX-Forms – Ultimate Form Builder – Contact forms and much more \<= 8.9.1 - Authenticated (Custom) Limited Code Execution via… (CVSS 6.3, webaways NEX-Forms – Ultimate Forms Plugin for WordPress)
- [CVE-2025-3759](https://cve.now/CVE-2025-3759.md): Missing Authentication for Changing Device Configuration in WF2220 (CVSS 8.7, Netis Systems WF2220)
- [CVE-2025-3758](https://cve.now/CVE-2025-3758.md): Exposure of Device Configuration without Authentication in WF2220 (CVSS 8.7, Netis Systems WF2220)
- [CVE-2025-41450](https://cve.now/CVE-2025-41450.md): Authentication bypass with privileged access in Danfoss AK-SM 8xxA Series prior to version 4.2 (CVSS 8.2, Danfoss AK-SM 8xxA Series)
- [CVE-2025-1254](https://cve.now/CVE-2025-1254.md): Out-of-bounds Read, Out-of-bounds Write vulnerability in RTI Connext Professional (Recording Service) allows Overflow Buffers, Overread… (CVSS 7.7, RTI Connext Professional)
- [CVE-2025-1253](https://cve.now/CVE-2025-1253.md): Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Stack-based Buffer Overflow vulnerability in RTI Connext… (CVSS 6.9, RTI Connext Professional)
- [CVE-2025-1252](https://cve.now/CVE-2025-1252.md): Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags. (CVSS 6.9, RTI Connext Professional)
- [CVE-2025-40846](https://cve.now/CVE-2025-40846.md): HaloITSM open redirect via the returnUrl (CVSS 7.1, HaloITSM ITSM)
- [CVE-2025-4127](https://cve.now/CVE-2025-4127.md): WP SEO Structured Data Schema \<= 2.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin Settings (CVSS 6.4, kcseopro WP SEO Structured Data Schema)
- [CVE-2025-37834](https://cve.now/CVE-2025-37834.md): mm/vmscan: don't try to reclaim hwpoison folio (no CVSS, Linux)
- [CVE-2025-37833](https://cve.now/CVE-2025-37833.md): net/niu: Niu requires MSIX ENTRY\_DATA fields touch before entry reads (no CVSS, Linux)
- [CVE-2025-37831](https://cve.now/CVE-2025-37831.md): cpufreq: apple-soc: Fix null-ptr-deref in apple\_soc\_cpufreq\_get\_rate() (no CVSS, Linux)
- [CVE-2025-37830](https://cve.now/CVE-2025-37830.md): cpufreq: scmi: Fix null-ptr-deref in scmi\_cpufreq\_get\_rate() (no CVSS, Linux)
- [CVE-2025-37829](https://cve.now/CVE-2025-37829.md): cpufreq: scpi: Fix null-ptr-deref in scpi\_cpufreq\_get\_rate() (no CVSS, Linux)
- [CVE-2025-37828](https://cve.now/CVE-2025-37828.md): scsi: ufs: mcq: Add NULL check in ufshcd\_mcq\_abort() (no CVSS, Linux)
- [CVE-2025-37827](https://cve.now/CVE-2025-37827.md): btrfs: zoned: return EIO on RAID1 block group write pointer mismatch (no CVSS, Linux)
- [CVE-2025-37826](https://cve.now/CVE-2025-37826.md): scsi: ufs: core: Add NULL check in ufshcd\_mcq\_compl\_pending\_transfer() (no CVSS, Linux)
- [CVE-2025-37825](https://cve.now/CVE-2025-37825.md): nvmet: fix out-of-bounds access in nvmet\_enable\_port (no CVSS, Linux)
- [CVE-2025-37824](https://cve.now/CVE-2025-37824.md): tipc: fix NULL pointer dereference in tipc\_mon\_reinit\_self() (no CVSS, Linux)
- [CVE-2025-37823](https://cve.now/CVE-2025-37823.md): net\_sched: hfsc: Fix a potential UAF in hfsc\_dequeue() too (CVSS 7.8, Linux)
- [CVE-2025-37822](https://cve.now/CVE-2025-37822.md): riscv: uprobes: Add missing fence.i after building the XOL buffer (CVSS 7.8, Linux)
- [CVE-2025-37821](https://cve.now/CVE-2025-37821.md): sched/eevdf: Fix se-\>slice being set to U64\_MAX and resulting crash (no CVSS, Linux)
- [CVE-2025-37820](https://cve.now/CVE-2025-37820.md): xen-netfront: handle NULL returned by xdp\_convert\_buff\_to\_frame() (CVSS 7.5, Linux)
- [CVE-2025-37819](https://cve.now/CVE-2025-37819.md): irqchip/gic-v2m: Prevent use after free of gicv2m\_get\_fwnode() (no CVSS, Linux)
- [CVE-2025-37818](https://cve.now/CVE-2025-37818.md): LoongArch: Return NULL from huge\_pte\_offset() for invalid PMD (no CVSS, Linux)
- [CVE-2025-37817](https://cve.now/CVE-2025-37817.md): mcb: fix a double free bug in chameleon\_parse\_gdd() (no CVSS, Linux)
- [CVE-2025-37816](https://cve.now/CVE-2025-37816.md): mei: vsc: Fix fortify-panic caused by invalid counted\_by() use (no CVSS, Linux)
- [CVE-2025-37815](https://cve.now/CVE-2025-37815.md): misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration (no CVSS, Linux)
- [CVE-2025-37814](https://cve.now/CVE-2025-37814.md): tty: Require CAP\_SYS\_ADMIN for all usages of TIOCL\_SELMOUSEREPORT (CVSS 7.8, Linux)
- [CVE-2025-37813](https://cve.now/CVE-2025-37813.md): usb: xhci: Fix invalid pointer dereference in Etron workaround (CVSS 7.8, Linux)
- [CVE-2025-37812](https://cve.now/CVE-2025-37812.md): usb: cdns3: Fix deadlock when using NCM gadget (no CVSS, Linux)
- [CVE-2025-37811](https://cve.now/CVE-2025-37811.md): usb: chipidea: ci\_hdrc\_imx: fix usbmisc handling (no CVSS, Linux)
- [CVE-2025-37810](https://cve.now/CVE-2025-37810.md): usb: dwc3: gadget: check that event count does not exceed event buffer length (no CVSS, Linux)
- [CVE-2025-37809](https://cve.now/CVE-2025-37809.md): usb: typec: class: Fix NULL pointer access (no CVSS, Linux)
- [CVE-2025-37808](https://cve.now/CVE-2025-37808.md): crypto: null - Use spin lock instead of mutex (no CVSS, Linux)
- [CVE-2025-37807](https://cve.now/CVE-2025-37807.md): bpf: Fix kmemleak warning for percpu hashmap (no CVSS, Linux)
- [CVE-2025-37806](https://cve.now/CVE-2025-37806.md): fs/ntfs3: Keep write operations atomic (no CVSS, Linux)
- [CVE-2025-37805](https://cve.now/CVE-2025-37805.md): sound/virtio: Fix cancel\_sync warnings on uninitialized work\_structs (CVSS 5.5, Linux)
- [CVE-2025-37803](https://cve.now/CVE-2025-37803.md): udmabuf: fix a buf size overflow issue during udmabuf creation (CVSS 7.8, Linux)
- [CVE-2025-37802](https://cve.now/CVE-2025-37802.md): ksmbd: fix WARNING "do not call blocking ops when !TASK\_RUNNING" (CVSS 7.5, Linux)
- [CVE-2025-37801](https://cve.now/CVE-2025-37801.md): spi: spi-imx: Add check for spi\_imx\_setupxfer() (CVSS 7.8, Linux)
- [CVE-2025-37800](https://cve.now/CVE-2025-37800.md): driver core: fix potential NULL pointer dereference in dev\_uevent() (CVSS 7.1, Linux)
- [CVE-2025-3419](https://cve.now/CVE-2025-3419.md): Event Manager, Events Calendar, Tickets, Registrations – Eventin \<= 4.0.26 - Unauthenticated Arbitrary File Read (CVSS 7.5, arraytics Eventin – Event Calendar, Event Registration, Tic…)
- [CVE-2024-13793](https://cve.now/CVE-2024-13793.md): Wolmart | Multi-Vendor Marketplace WooCommerce Theme \<= 1.8.11 - Unauthenticated Arbitrary Shortcode Execution in wolmart\_loadmore (CVSS 7.3, don-themes Wolmart | Multi-Vendor Marketplace WooCommerce T…)
- [CVE-2023-31585](https://cve.now/CVE-2023-31585.md): Grocery-CMS-PHP-Restful-API v1.3 is vulnerable to File Upload via /admin/add-category.php. (CVSS 9.8)
- [CVE-2023-51295](https://cve.now/CVE-2023-51295.md): PHPJabbers Event Booking Calendar v4.0 is vulnerable to Multiple HTML Injection in the "name, plugin\_sms\_api\_key, plugin\_sms\_country\_code… (CVSS 6.5)
- [CVE-2023-51328](https://cve.now/CVE-2023-51328.md): PHPJabbers Cleaning Business Software v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "c\_name, name" parameters. (CVSS 5.4)
- [CVE-2025-26842](https://cve.now/CVE-2025-26842.md): An issue was discovered in Znuny through 7.1.3. (CVSS 7.5)
- [CVE-2025-26844](https://cve.now/CVE-2025-26844.md): An issue was discovered in Znuny through 7.1.3. (CVSS 9.8)
- [CVE-2025-26845](https://cve.now/CVE-2025-26845.md): An Eval Injection issue was discovered in Znuny through 7.1.3. (CVSS 9.8)
- [CVE-2025-26847](https://cve.now/CVE-2025-26847.md): An issue was discovered in Znuny before 7.1.5. (CVSS 9.1)
- [CVE-2025-28073](https://cve.now/CVE-2025-28073.md): phpList before 3.6.15 is vulnerable to Reflected Cross-Site Scripting (XSS) via the /lists/dl.php endpoint. (CVSS 6.1)
- [CVE-2025-28074](https://cve.now/CVE-2025-28074.md): phpList before 3.6.15 is vulnerable to Cross-Site Scripting (XSS) due to improper input sanitization in lt.php. (CVSS 6.1)
- [CVE-2025-32873](https://cve.now/CVE-2025-32873.md): An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1. (CVSS 5.3, djangoproject Django · django)
- [CVE-2025-43926](https://cve.now/CVE-2025-43926.md): An issue was discovered in Znuny through 6.5.14 and 7.x through 7.1.6. (CVSS 6.1)
- [CVE-2025-44021](https://cve.now/CVE-2025-44021.md): OpenStack Ironic before 29.0.1 can write unintended files to a target node disk during image handling (if a deployment was performed via… (CVSS 2.8, OpenStack Ironic · ironic)
- [CVE-2025-44023](https://cve.now/CVE-2025-44023.md): An issue in dlink DNS-320 v.1.00 and DNS-320LW v.1.01.0914.20212 allows an attacker to execute arbitrary via the… (CVSS 6.5)
- [CVE-2025-45787](https://cve.now/CVE-2025-45787.md): TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow viathe comment parameter in setIpPortFilterRules. (CVSS 6.5)
- [CVE-2025-45788](https://cve.now/CVE-2025-45788.md): TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the comment parameter in setMacFilterRules. (CVSS 6.5)
- [CVE-2025-45789](https://cve.now/CVE-2025-45789.md): TOTOLINK A3100R V5.9c.1527 is vulnerable to buffer overflow via the urlKeyword parameter in setParentalRules. (CVSS 6.5)
- [CVE-2025-45790](https://cve.now/CVE-2025-45790.md): TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the priority parameter in the setMacQos interface of… (CVSS 6.5)
- [CVE-2025-45797](https://cve.now/CVE-2025-45797.md): TOTOlink A950RG V4.1.2cu.5204\_B20210112 contains a buffer overflow vulnerability. (CVSS 6.5)
- [CVE-2025-45798](https://cve.now/CVE-2025-45798.md): A command execution vulnerability exists in the TOTOLINK A950RG V4.1.2cu.5204\_B20210112. (CVSS 6.5)
- [CVE-2025-45818](https://cve.now/CVE-2025-45818.md): Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/master\_file/item\_status.php. (CVSS 6.5)
- [CVE-2025-45819](https://cve.now/CVE-2025-45819.md): Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/master\_file/author.php. (CVSS 6.5)
- [CVE-2025-45820](https://cve.now/CVE-2025-45820.md): Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/bibliography/pop\_author\_edit.php. (CVSS 6.5)
- [CVE-2025-45841](https://cve.now/CVE-2025-45841.md): TOTOLINK NR1800X V9.1.0u.6681\_B20230703 was discovered to contain an authenticated stack overflow via the text parameter in the setSmsCfg… (CVSS 6.5)
- [CVE-2025-45842](https://cve.now/CVE-2025-45842.md): TOTOLINK NR1800X V9.1.0u.6681\_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the… (CVSS 8.8)
- [CVE-2025-45843](https://cve.now/CVE-2025-45843.md): TOTOLINK NR1800X V9.1.0u.6681\_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the… (CVSS 8.8)
- [CVE-2025-45844](https://cve.now/CVE-2025-45844.md): TOTOLINK NR1800X V9.1.0u.6681\_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the… (CVSS 8.8)
- [CVE-2025-45845](https://cve.now/CVE-2025-45845.md): TOTOLINK NR1800X V9.1.0u.6681\_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the… (CVSS 8.8)
- [CVE-2025-45846](https://cve.now/CVE-2025-45846.md): ALFA AIP-W512 v3.2.2.2.3 was discovered to contain an authenticated stack overflow via the torrentsindex parameter in the… (CVSS 8.8)
- [CVE-2025-45847](https://cve.now/CVE-2025-45847.md): ALFA AIP-W512 v3.2.2.2.3 was discovered to contain an authenticated stack overflow via the targetAPMac parameter in the formWsc function. (CVSS 6.5)
- [CVE-2025-47729](https://cve.now/CVE-2025-47729.md): The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which i (CVSS 1.9, KEV, TeleMessage archiving backend)
- [CVE-2025-47730](https://cve.now/CVE-2025-47730.md): The TeleMessage archiving backend through 2025-05-05 accepts API calls (to request an authentication token) from the TM SGNL (aka Archive… (CVSS 4.8, TeleMessage archiving backend)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2025-05-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.