CVEs published May 2, 2025
176 CVEs were published on May 2, 2025: 13 critical, 35 high.
- Published
- 176
- Critical
- 13
- High
- 35
- Medium
- 43
- Low
- 4
- Unrated
- 81
- Now in CISA KEV
- 0
- Fix available
- 58
Most affected products
- Linux
- 107
- IBM Concert Software
- 4
- G5Theme Benaa Framework · G5Theme April Framework +2
- 3
- Boss Media BuddyBoss Platform
- 2
- Dassault Systèmes SOLIDWORKS eDrawings
- 2
- Fave Themes Homey
- 2
- HashiCorp Vault · github.com/hashicorp/vault
- 2
- itsourcecode Restaurant Management System
- 2
- Profelis Informatics SambaBox
- 2
- SureForms
- 2
Critical 13
- CVE-2023-53116nvmet: avoid potential UAF in nvmet_req_complete()Linux
- CVE-2023-53083nfsd: don't replace page in rq_pages if it's a continuation of last pageLinux
- CVE-2025-3927CVE-2025-3927Digigram PYKO-OUT
- CVE-2025-2605Authenticated command injectionHoneywell MB-Secure
- CVE-2025-2421Remote Code Execution in Profelis Informatics' SambaBoxProfelis Informatics SambaBox
- CVE-2025-2812SQLi in Mydata Informatics' Ticket Sales AutomationMydata Informatics Ticket Sales Automation
- CVE-2025-3709Flowring Technology Agentflow - Account Lockout BypassFlowring Technology Agentflow
- CVE-2025-3708Le-show Medical Practice Management System - SQL InjectionLe-yan Le-show
- CVE-2025-3746OTP-less one tap Sign in 2.0.14 - 2.0.59 - Unauthenticated Arbitrary Email Update to Account Takeover/Privilege Escalationthedrifted OTP-less one tap Sign in
- CVE-2025-44868Wavlink WL-WN530H4 20220801 was found to contain a command injection vulnerability in the ping_test function of the adm.cgi via the pingIp p
- CVE-2025-44872Tenda AC9 V15.03.06.42_multi was found to contain a command injection vulnerability in the formsetUsbUnload function via the deviceName para
- CVE-2025-44877Tenda AC9 V15.03.06.42_multi was found to contain a command injection vulnerability in the formSetSambaConf function via the usbname paramet
- CVE-2025-45800TOTOLINK A950RG V4.1.2cu.5204_B20210112 contains a command execution vulnerability in the setDeviceName interface of the /lib/cste_modules/g
High 35
- CVE-2025-46723OpenVM byte decomposition of pc in AUIPC chip can overflowopenvm-org openvm · openvm
- CVE-2022-21546scsi: target: Fix WRITE_SAME No Data Buffer crashLinux
- CVE-2023-53138net: caif: Fix use-after-free in cfusbl_device_notify()Linux
- CVE-2023-53111loop: Fix use-after-free issuesLinux
- CVE-2023-53110net/smc: fix NULL sndbuf_desc in smc_cdc_tx_handler()Linux
- CVE-2023-53107veth: Fix use after free in XDP_REDIRECTLinux
- CVE-2023-53102ice: xsk: disable txq irq before flushing hwLinux
- CVE-2023-53100ext4: fix WARNING in ext4_update_inline_dataLinux
- CVE-2023-53094tty: serial: fsl_lpuart: fix race on RX DMA shutdownLinux
- CVE-2023-53090drm/amdkfd: Fix an illegal memory accessLinux
- CVE-2023-53088mptcp: fix UaF in listener shutdownLinux
- CVE-2023-53087drm/i915/active: Fix misuse of non-idle barriers as fence trackersLinux
- CVE-2023-53086wifi: mt76: connac: do not check WED status for non-mmio devicesLinux
- CVE-2023-53084drm/shmem-helper: Remove another errant put in error pathLinux
- CVE-2023-53080xsk: Add missing overflow check in xdp_umem_regLinux
- CVE-2023-53072mptcp: use the workqueue to destroy unaccepted socketsLinux
- CVE-2023-53065perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_outputLinux
- CVE-2023-53057Bluetooth: HCI: Fix global-out-of-boundsLinux
- CVE-2023-53052cifs: fix use-after-free bug in refresh_cache_worker()Linux
- CVE-2023-53047tee: amdtee: fix race condition in amdtee_open_sessionLinux
- CVE-2023-53046Bluetooth: Fix race condition in hci_cmd_sync_clearLinux
- CVE-2023-53043arm64: dts: qcom: sc7280: Mark PCIe controller as cache coherentLinux
- CVE-2023-53039HID: intel-ish-hid: ipc: Fix potential use-after-free in work functionLinux
- CVE-2025-1884Use-After-Free vulnerability exists in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025Dassault Systèmes SOLIDWORKS eDrawings
- CVE-2025-1883Out-Of-Bounds Write vulnerability exists in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025Dassault Systèmes SOLIDWORKS eDrawings
- CVE-2025-37798codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()Linux
- CVE-2025-37797net_sched: hfsc: Fix a UAF vulnerability in class handlingLinux
- CVE-2025-4204Ultimate Auction Pro <= 1.5.2 - Unauthenticated SQL Injection via 'auction_id'Inception Software LLP Ultimate Auction Pro
- CVE-2025-0427Mali GPU Kernel Driver allows access to already freed memoryArm Bifrost GPU Kernel Driver · Arm Valhall GPU Kernel D… +1
- CVE-2025-0072Mali GPU Kernel Driver allows improper GPU memory processing operationsArm Valhall GPU Kernel Driver · Arm 5th Gen GPU Architectur…
- CVE-2024-11142CSRF in Gosoft Software's Proticaret E-CommerceGosoft Software Proticaret E-Commerce
- CVE-2024-13418Smart Framework <= Multiple Plugins - Authenticated (Subscriber+) Arbitrary File UploadG5Theme Benaa Framework · G5Theme April Framework +2
- CVE-2024-13322Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.88 - Unauthenticated SQL Injectionscripteo Ads Pro Plugin - Multi-Purpose WordPress Advertisi…
- CVE-2024-13344Advance Seat Reservation Management for WooCommerce <= 3.3 - Unauthenticated SQL Injectionsmartcms Advance Seat Reservation Management for WooCommerce
- CVE-2025-4179Flynax Bridge <= 2.2.0 - Unauthenticated Limited Privilege Escalationv1rustyle Flynax Bridge
Medium, low and unrated 128
- CVE-2025-21572OpenGrok 1.13.25 has a reflected Cross-Site Scripting (XSS) issue when producing the history view page.Oracle OpenGrok
- CVE-2025-4218handrew browserpilot gpt_selenium_agent.py GPTSeleniumAgent code injectionhandrew browserpilot
- CVE-2025-4215gorhill uBlock Origin UI 1p-filters.js currentStateChanged redosgorhill uBlock Origin
- CVE-2025-4214PHPGuruku Online DJ Booking Management System booking-bwdates-reports-details.php sql injectionPHPGuruku Online DJ Booking Management System
- CVE-2025-4213PHPGurukul Online Birth Certificate System search.php sql injectionPHPGurukul Online Birth Certificate System
- CVE-2025-46332Information Disclosure via Flags override linkvercel flags · flags +1
- CVE-2025-3879Vault’s Azure Authentication Method bound_location Restriction Could be Bypassed on LoginHashiCorp Vault · github.com/hashicorp/vault
- CVE-2023-53144erofs: fix wrong kunmap when using LZMA on HIGHMEM platformsLinux
- CVE-2023-53143ext4: fix another off-by-one fsmap error on 1k block filesystemsLinux
- CVE-2023-53142ice: copy last block omitted in ice_get_module_eeprom()Linux
- CVE-2023-53141ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping()Linux
- CVE-2023-53140scsi: core: Remove the /proc/scsi/${proc_name} directory earlierLinux
- CVE-2023-53139nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_propertiesLinux
- CVE-2023-53136af_unix: fix struct pid leaks in OOB supportLinux
- CVE-2023-53135riscv: Use READ_ONCE_NOCHECK in imprecise unwinding stack modeLinux
- CVE-2023-53134bnxt_en: Avoid order-5 memory allocation for TPA dataLinux
- CVE-2023-53133bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser()Linux
- CVE-2023-53132scsi: mpi3mr: Fix mpi3mr_hba_port memory leak in mpi3mr_remove()Linux
- CVE-2023-53131SUNRPC: Fix a server shutdown leakLinux
- CVE-2023-53128scsi: mpi3mr: Fix throttle_groups memory leakLinux
- CVE-2023-53127scsi: mpi3mr: Fix expander node leak in mpi3mr_remove()Linux
- CVE-2023-53126scsi: mpi3mr: Fix sas_hba.phy memory leak in mpi3mr_remove()Linux
- CVE-2023-53125net: usb: smsc75xx: Limit packet length to skb->lenLinux
- CVE-2023-53124scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()Linux
- CVE-2023-53123PCI: s390: Fix use-after-free of PCI resources with per-function hotplugLinux
- CVE-2023-53121tcp: tcp_make_synack() can be called from process contextLinux
- CVE-2023-53120scsi: mpi3mr: Fix config page DMA memory leakLinux
- CVE-2023-53119nfc: pn533: initialize struct pn533_out_arg properlyLinux
- CVE-2023-53118scsi: core: Fix a procfs host directory removal regressionLinux
- CVE-2023-53117fs: prevent out-of-bounds array speculation when closing a file descriptorLinux
- CVE-2023-53115scsi: mpi3mr: Fix memory leaks in mpi3mr_init_ioc()Linux
- CVE-2023-53114i40e: Fix kernel crash during reboot when adapter is in recovery modeLinux
- CVE-2023-53113wifi: nl80211: fix NULL-ptr deref in offchan checkLinux
- CVE-2023-53112drm/i915/sseu: fix max_subslices array-index-out-of-bounds accessLinux
- CVE-2023-53109net: tunnels: annotate lockless accesses to dev->needed_headroomLinux
- CVE-2023-53108net/iucv: Fix size of interrupt dataLinux
- CVE-2023-53106nfc: st-nci: Fix use after free bug in ndlc_remove due to race conditionLinux
- CVE-2023-53105net/mlx5e: Fix cleanup null-ptr deref on encap lockLinux
- CVE-2023-53103bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave failsLinux
- CVE-2023-53101ext4: zero i_disksize when initializing the bootloader inodeLinux
- CVE-2023-53099firmware: xilinx: don't make a sleepable memory allocation from an atomic contextLinux
- CVE-2023-53098media: rc: gpio-ir-recv: add remove functionLinux
- CVE-2023-53097powerpc/iommu: fix memory leak with using debugfs_lookup()Linux
- CVE-2023-53096interconnect: fix mem leak when freeing nodesLinux
- CVE-2023-53095drm/ttm: Fix a NULL pointer dereferenceLinux
- CVE-2023-53093tracing: Do not let histogram values have some modifiersLinux
- CVE-2023-53092interconnect: exynos: fix node leak in probe PM QoS error pathLinux
- CVE-2023-53091ext4: update s_journal_inum if it changes after journal replayLinux
- CVE-2023-53089ext4: fix task hung in ext4_xattr_delete_inodeLinux
- CVE-2023-53085drm/edid: fix info leak when failing to get panel idLinux
- CVE-2023-53082vp_vdpa: fix the crash in hot unplug with vp_vdpaLinux
- CVE-2023-53081ocfs2: fix data corruption after failed writeLinux
- CVE-2023-53079net/mlx5: Fix steering rules cleanupLinux
- CVE-2023-53078scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate()Linux
- CVE-2023-53077drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytesLinux
- CVE-2023-53075ftrace: Fix invalid address access in lookup_rec() when index is 0Linux
- CVE-2023-53074drm/amdgpu: fix ttm_bo calltrace warning in psp_hw_finiLinux
- CVE-2023-53073perf/x86/amd/core: Always clear status for idxLinux
- CVE-2023-53071wifi: mt76: do not run mt76_unregister_device() on unregistered hwLinux
- CVE-2023-53070ACPI: PPTT: Fix to avoid sleep in the atomic context when PPTT is absentLinux
- CVE-2023-53069octeontx2-vf: Add missing free for alloc_percpuLinux
- CVE-2023-53068net: usb: lan78xx: Limit packet length to skb->lenLinux
- CVE-2023-53067LoongArch: Only call get_timer_irq() once in constant_clockevent_init()Linux
- CVE-2023-53066qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_infoLinux
- CVE-2023-53064iavf: fix hang on reboot with iceLinux
- CVE-2023-53062net: usb: smsc95xx: Limit packet length to skb->lenLinux
- CVE-2023-53061ksmbd: fix possible refcount leak in smb2_open()Linux
- CVE-2023-53060igb: revert rtnl_lock() that causes deadlockLinux
- CVE-2023-53059platform/chrome: cros_ec_chardev: fix kernel data leak from ioctlLinux
- CVE-2023-53058net/mlx5: E-Switch, Fix an Oops in error handling codeLinux
- CVE-2023-53056scsi: qla2xxx: Synchronize the IOCB count to be in orderLinux
- CVE-2023-53055fscrypt: destroy keyring after security_sb_delete()Linux
- CVE-2023-53054usb: dwc2: fix a devres leak in hw_enable upon suspend resumeLinux
- CVE-2023-53053erspan: do not use skb_mac_header() in ndo_start_xmit()Linux
- CVE-2023-53051dm crypt: add cond_resched() to dmcrypt_write()Linux
- CVE-2023-53050thunderbolt: Fix memory leak in marginingLinux
- CVE-2023-53049usb: ucsi: Fix NULL pointer deref in ucsi_connector_change()Linux
- CVE-2023-53048usb: typec: tcpm: fix warning when handle discover_identity messageLinux
- CVE-2023-53045usb: gadget: u_audio: don't let userspace block driver unbindLinux
- CVE-2023-53044dm stats: check for and propagate alloc_percpu failureLinux
- CVE-2023-53042drm/amd/display: Do not set DRR on pipe CommitLinux
- CVE-2023-53041scsi: qla2xxx: Perform lockless command completion in abort pathLinux
- CVE-2023-53040ca8210: fix mac_len negative array accessLinux
- CVE-2023-53038scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read()Linux
- CVE-2023-53037scsi: mpi3mr: Bad drive in topology results kernel crashLinux
- CVE-2023-53036drm/amdgpu: Fix call trace warning and hang when removing amdgpu deviceLinux
- CVE-2023-53035nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy()Linux
- CVE-2022-49932KVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspaceLinux
- CVE-2025-4210Casdoor SCIM User Creation Endpoint scim.go HandleScim authorizationCasdoor · github.com/casdoor/casdoor
- CVE-2025-4166Vault May Include Sensitive Data in Error Logs When Using the KV v2 PluginHashiCorp Vault · github.com/hashicorp/vault
- CVE-2025-2488XSS in Profelis Informatics' SambaBoxProfelis Informatics SambaBox
- CVE-2025-1301Reflected XSS in Yordam Informatics' Library Automation SystemYordam Informatics Library Automation System
- CVE-2024-13859BuddyBoss Platform <= 2.8.50 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'bp_nouveau_ajax_media_save' functionBoss Media BuddyBoss Platform
- CVE-2024-13860BuddyBoss Platform <= 2.8.50 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'bbp_topic_title'Boss Media BuddyBoss Platform
- CVE-2024-13858BuddyBoss Platform and BuddyBoss Theme <= Multiple Versions - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'invitee_name'Boss Media BuddyBoss Theme · Boss Media BuddyBoss Platform
- CVE-2025-3514SureForms < 1.4.4 - Admin+ Stored XSSSureForms
- CVE-2025-3513SureForms < 1.4.4 - Admin+ Stored XSSSureForms
- CVE-2025-3438MStore API – Create Native Android & iOS Apps On The Cloud <= 4.17.4 - Unauthenticated Limited Privilege Escalationinspireui MStore API – Create Native Android & iOS Apps On…
- CVE-2025-3488WPML Multilingual CMS 3.6.0 - 4.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpml_language_switcher ShortcodeWPML
- CVE-2025-3858Formality <= 1.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Parametermichelegiorgi Formality
- CVE-2025-1326Homey - Booking and Rentals WordPress Theme <= 2.4.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Reservation & Post DeletionFave Themes Homey
- CVE-2024-12023FULL – Cliente 3.1.5 - 3.1.25 - Authenticated (Subscriber+) SQL Injectionfullservices FULL – Cliente
- CVE-2024-13420Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Settings UpdatesG5Theme Benaa Framework · G5Theme April Framework +2
- CVE-2025-1327Homey - Booking and Rentals WordPress Theme <= 2.4.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User DeletionFave Themes Homey
- CVE-2025-3510tagDiv Composer <= 5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple ShortcodestagDiv Composer
- CVE-2025-3748Taxonomy Chain Menu <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via pn_chain_menu Shortcoderealmag777 Taxonomy Chain Menu
- CVE-2024-13419Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site ScriptingG5Theme Benaa Framework · G5Theme April Framework +2
- CVE-2025-3707Sunnet eHRD CTMS - SQL InjectionSunnet eHRD CTMS
- CVE-2025-3670KiwiChat NextClient <= 6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via url ParameterKiwiChat NextClient
- CVE-2025-4177Flynax Bridge <= 2.2.0 - Unauthenticated Arbitrary User Deletionv1rustyle Flynax Bridge
- CVE-2025-2880Yame | Link In Bio <= 0.9.0 - Unauthenticated Information ExposureYame | Link In Bio
- CVE-2025-4131GmapsMania <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodegarubi GmapsMania
- CVE-2025-4197code-projects Patient Record Management System edit_xpatient.php sql injectioncode-projects Patient Record Management System
- CVE-2025-4196SourceCodester Patient Record Management System birthing.php sql injectionSourceCodester Patient Record Management System
- CVE-2025-29825Microsoft Edge (Chromium-based) Spoofing VulnerabilityMicrosoft Edge
- CVE-2025-4195itsourcecode Gym Management System ajax.php sql injectionitsourcecode Gym Management System
- CVE-2025-4193itsourcecode Restaurant Management System category_update.php sql injectionitsourcecode Restaurant Management System
- CVE-2024-55910IBM Concert Software server-side request forgeryIBM Concert Software
- CVE-2024-55913IBM Concert Software path traversalIBM Concert Software
- CVE-2024-55912IBM Concert Software information disclosureIBM Concert Software
- CVE-2024-55909IBM Concert Software denial of serviceIBM Concert Software
- CVE-2025-4192itsourcecode Restaurant Management System category_save.php sql injectionitsourcecode Restaurant Management System
- CVE-2025-4191PHPGurukul Employee Record Management System editmyeducation.php sql injectionPHPGurukul Employee Record Management System
- CVE-2025-4186Wangshen SecGate 3600 g=route_ispinfo_export_save path traversalWangshen SecGate
- CVE-2024-55069ffmpeg 7.1 is vulnerable to Null Pointer Dereference in function iamf_read_header in /libavformat/iamfdec.c.
- CVE-2024-58253In the obfstr crate before 0.4.4 for Rust, the obfstr! argument type is not restricted to string slices, leading to invalid UTF-8 conversionCasualX obfstr · obfstr
- CVE-2025-47201In Intrexx Portal Server before 12.0.4, multiple Velocity-Scripts are susceptible to the execution of unrequested JavaScript code in HTML, aIntrexx Portal Server
- CVE-2025-47226Grokability Snipe-IT before 8.1.0 has incorrect authorization for accessing asset information.snipeitapp Snipe-IT · snipe/snipe-it