# CVEs published 2025-05-02

176 CVEs were published on May 2, 2025: 13 critical, 35 high. Days are UTC.

- [CVE-2025-46723](https://cve.now/CVE-2025-46723.md): OpenVM byte decomposition of pc in AUIPC chip can overflow (CVSS 7.8, openvm-org openvm · openvm)
- [CVE-2022-21546](https://cve.now/CVE-2022-21546.md): scsi: target: Fix WRITE\_SAME No Data Buffer crash (CVSS 7.5, Linux)
- [CVE-2025-21572](https://cve.now/CVE-2025-21572.md): OpenGrok 1.13.25 has a reflected Cross-Site Scripting (XSS) issue when producing the history view page. (CVSS 6.1, Oracle OpenGrok)
- [CVE-2025-4218](https://cve.now/CVE-2025-4218.md): handrew browserpilot gpt\_selenium\_agent.py GPTSeleniumAgent code injection (CVSS 4.8, handrew browserpilot)
- [CVE-2025-4215](https://cve.now/CVE-2025-4215.md): gorhill uBlock Origin UI 1p-filters.js currentStateChanged redos (CVSS 2.3, gorhill uBlock Origin)
- [CVE-2025-4214](https://cve.now/CVE-2025-4214.md): PHPGuruku Online DJ Booking Management System booking-bwdates-reports-details.php sql injection (CVSS 6.9, PHPGuruku Online DJ Booking Management System)
- [CVE-2025-4213](https://cve.now/CVE-2025-4213.md): PHPGurukul Online Birth Certificate System search.php sql injection (CVSS 6.9, PHPGurukul Online Birth Certificate System)
- [CVE-2025-46332](https://cve.now/CVE-2025-46332.md): Information Disclosure via Flags override link (CVSS 6.5, vercel flags · flags +1)
- [CVE-2025-3879](https://cve.now/CVE-2025-3879.md): Vault’s Azure Authentication Method bound\_location Restriction Could be Bypassed on Login (CVSS 6.6, HashiCorp Vault · github.com/hashicorp/vault)
- [CVE-2023-53144](https://cve.now/CVE-2023-53144.md): erofs: fix wrong kunmap when using LZMA on HIGHMEM platforms (no CVSS, Linux)
- [CVE-2023-53143](https://cve.now/CVE-2023-53143.md): ext4: fix another off-by-one fsmap error on 1k block filesystems (no CVSS, Linux)
- [CVE-2023-53142](https://cve.now/CVE-2023-53142.md): ice: copy last block omitted in ice\_get\_module\_eeprom() (no CVSS, Linux)
- [CVE-2023-53141](https://cve.now/CVE-2023-53141.md): ila: do not generate empty messages in ila\_xlat\_nl\_cmd\_get\_mapping() (no CVSS, Linux)
- [CVE-2023-53140](https://cve.now/CVE-2023-53140.md): scsi: core: Remove the /proc/scsi/${proc\_name} directory earlier (no CVSS, Linux)
- [CVE-2023-53139](https://cve.now/CVE-2023-53139.md): nfc: fdp: add null check of devm\_kmalloc\_array in fdp\_nci\_i2c\_read\_device\_properties (no CVSS, Linux)
- [CVE-2023-53138](https://cve.now/CVE-2023-53138.md): net: caif: Fix use-after-free in cfusbl\_device\_notify() (CVSS 7.8, Linux)
- [CVE-2023-53136](https://cve.now/CVE-2023-53136.md): af\_unix: fix struct pid leaks in OOB support (no CVSS, Linux)
- [CVE-2023-53135](https://cve.now/CVE-2023-53135.md): riscv: Use READ\_ONCE\_NOCHECK in imprecise unwinding stack mode (no CVSS, Linux)
- [CVE-2023-53134](https://cve.now/CVE-2023-53134.md): bnxt\_en: Avoid order-5 memory allocation for TPA data (no CVSS, Linux)
- [CVE-2023-53133](https://cve.now/CVE-2023-53133.md): bpf, sockmap: Fix an infinite loop error when len is 0 in tcp\_bpf\_recvmsg\_parser() (no CVSS, Linux)
- [CVE-2023-53132](https://cve.now/CVE-2023-53132.md): scsi: mpi3mr: Fix mpi3mr\_hba\_port memory leak in mpi3mr\_remove() (no CVSS, Linux)
- [CVE-2023-53131](https://cve.now/CVE-2023-53131.md): SUNRPC: Fix a server shutdown leak (no CVSS, Linux)
- [CVE-2023-53128](https://cve.now/CVE-2023-53128.md): scsi: mpi3mr: Fix throttle\_groups memory leak (no CVSS, Linux)
- [CVE-2023-53127](https://cve.now/CVE-2023-53127.md): scsi: mpi3mr: Fix expander node leak in mpi3mr\_remove() (no CVSS, Linux)
- [CVE-2023-53126](https://cve.now/CVE-2023-53126.md): scsi: mpi3mr: Fix sas\_hba.phy memory leak in mpi3mr\_remove() (no CVSS, Linux)
- [CVE-2023-53125](https://cve.now/CVE-2023-53125.md): net: usb: smsc75xx: Limit packet length to skb-\>len (no CVSS, Linux)
- [CVE-2023-53124](https://cve.now/CVE-2023-53124.md): scsi: mpt3sas: Fix NULL pointer access in mpt3sas\_transport\_port\_add() (no CVSS, Linux)
- [CVE-2023-53123](https://cve.now/CVE-2023-53123.md): PCI: s390: Fix use-after-free of PCI resources with per-function hotplug (no CVSS, Linux)
- [CVE-2023-53121](https://cve.now/CVE-2023-53121.md): tcp: tcp\_make\_synack() can be called from process context (no CVSS, Linux)
- [CVE-2023-53120](https://cve.now/CVE-2023-53120.md): scsi: mpi3mr: Fix config page DMA memory leak (no CVSS, Linux)
- [CVE-2023-53119](https://cve.now/CVE-2023-53119.md): nfc: pn533: initialize struct pn533\_out\_arg properly (no CVSS, Linux)
- [CVE-2023-53118](https://cve.now/CVE-2023-53118.md): scsi: core: Fix a procfs host directory removal regression (no CVSS, Linux)
- [CVE-2023-53117](https://cve.now/CVE-2023-53117.md): fs: prevent out-of-bounds array speculation when closing a file descriptor (no CVSS, Linux)
- [CVE-2023-53116](https://cve.now/CVE-2023-53116.md): nvmet: avoid potential UAF in nvmet\_req\_complete() (CVSS 9.8, Linux)
- [CVE-2023-53115](https://cve.now/CVE-2023-53115.md): scsi: mpi3mr: Fix memory leaks in mpi3mr\_init\_ioc() (no CVSS, Linux)
- [CVE-2023-53114](https://cve.now/CVE-2023-53114.md): i40e: Fix kernel crash during reboot when adapter is in recovery mode (no CVSS, Linux)
- [CVE-2023-53113](https://cve.now/CVE-2023-53113.md): wifi: nl80211: fix NULL-ptr deref in offchan check (no CVSS, Linux)
- [CVE-2023-53112](https://cve.now/CVE-2023-53112.md): drm/i915/sseu: fix max\_subslices array-index-out-of-bounds access (no CVSS, Linux)
- [CVE-2023-53111](https://cve.now/CVE-2023-53111.md): loop: Fix use-after-free issues (CVSS 7.8, Linux)
- [CVE-2023-53110](https://cve.now/CVE-2023-53110.md): net/smc: fix NULL sndbuf\_desc in smc\_cdc\_tx\_handler() (CVSS 7.5, Linux)
- [CVE-2023-53109](https://cve.now/CVE-2023-53109.md): net: tunnels: annotate lockless accesses to dev-\>needed\_headroom (no CVSS, Linux)
- [CVE-2023-53108](https://cve.now/CVE-2023-53108.md): net/iucv: Fix size of interrupt data (no CVSS, Linux)
- [CVE-2023-53107](https://cve.now/CVE-2023-53107.md): veth: Fix use after free in XDP\_REDIRECT (CVSS 7.8, Linux)
- [CVE-2023-53106](https://cve.now/CVE-2023-53106.md): nfc: st-nci: Fix use after free bug in ndlc\_remove due to race condition (no CVSS, Linux)
- [CVE-2023-53105](https://cve.now/CVE-2023-53105.md): net/mlx5e: Fix cleanup null-ptr deref on encap lock (no CVSS, Linux)
- [CVE-2023-53103](https://cve.now/CVE-2023-53103.md): bonding: restore bond's IFF\_SLAVE flag if a non-eth dev enslave fails (no CVSS, Linux)
- [CVE-2023-53102](https://cve.now/CVE-2023-53102.md): ice: xsk: disable txq irq before flushing hw (CVSS 7.8, Linux)
- [CVE-2023-53101](https://cve.now/CVE-2023-53101.md): ext4: zero i\_disksize when initializing the bootloader inode (no CVSS, Linux)
- [CVE-2023-53100](https://cve.now/CVE-2023-53100.md): ext4: fix WARNING in ext4\_update\_inline\_data (CVSS 7.8, Linux)
- [CVE-2023-53099](https://cve.now/CVE-2023-53099.md): firmware: xilinx: don't make a sleepable memory allocation from an atomic context (no CVSS, Linux)
- [CVE-2023-53098](https://cve.now/CVE-2023-53098.md): media: rc: gpio-ir-recv: add remove function (no CVSS, Linux)
- [CVE-2023-53097](https://cve.now/CVE-2023-53097.md): powerpc/iommu: fix memory leak with using debugfs\_lookup() (no CVSS, Linux)
- [CVE-2023-53096](https://cve.now/CVE-2023-53096.md): interconnect: fix mem leak when freeing nodes (no CVSS, Linux)
- [CVE-2023-53095](https://cve.now/CVE-2023-53095.md): drm/ttm: Fix a NULL pointer dereference (no CVSS, Linux)
- [CVE-2023-53094](https://cve.now/CVE-2023-53094.md): tty: serial: fsl\_lpuart: fix race on RX DMA shutdown (CVSS 7.8, Linux)
- [CVE-2023-53093](https://cve.now/CVE-2023-53093.md): tracing: Do not let histogram values have some modifiers (no CVSS, Linux)
- [CVE-2023-53092](https://cve.now/CVE-2023-53092.md): interconnect: exynos: fix node leak in probe PM QoS error path (no CVSS, Linux)
- [CVE-2023-53091](https://cve.now/CVE-2023-53091.md): ext4: update s\_journal\_inum if it changes after journal replay (no CVSS, Linux)
- [CVE-2023-53090](https://cve.now/CVE-2023-53090.md): drm/amdkfd: Fix an illegal memory access (CVSS 7.8, Linux)
- [CVE-2023-53089](https://cve.now/CVE-2023-53089.md): ext4: fix task hung in ext4\_xattr\_delete\_inode (no CVSS, Linux)
- [CVE-2023-53088](https://cve.now/CVE-2023-53088.md): mptcp: fix UaF in listener shutdown (CVSS 7.8, Linux)
- [CVE-2023-53087](https://cve.now/CVE-2023-53087.md): drm/i915/active: Fix misuse of non-idle barriers as fence trackers (CVSS 7.8, Linux)
- [CVE-2023-53086](https://cve.now/CVE-2023-53086.md): wifi: mt76: connac: do not check WED status for non-mmio devices (CVSS 8.8, Linux)
- [CVE-2023-53085](https://cve.now/CVE-2023-53085.md): drm/edid: fix info leak when failing to get panel id (no CVSS, Linux)
- [CVE-2023-53084](https://cve.now/CVE-2023-53084.md): drm/shmem-helper: Remove another errant put in error path (CVSS 7.8, Linux)
- [CVE-2023-53083](https://cve.now/CVE-2023-53083.md): nfsd: don't replace page in rq\_pages if it's a continuation of last page (CVSS 9.8, Linux)
- [CVE-2023-53082](https://cve.now/CVE-2023-53082.md): vp\_vdpa: fix the crash in hot unplug with vp\_vdpa (no CVSS, Linux)
- [CVE-2023-53081](https://cve.now/CVE-2023-53081.md): ocfs2: fix data corruption after failed write (no CVSS, Linux)
- [CVE-2023-53080](https://cve.now/CVE-2023-53080.md): xsk: Add missing overflow check in xdp\_umem\_reg (CVSS 7.8, Linux)
- [CVE-2023-53079](https://cve.now/CVE-2023-53079.md): net/mlx5: Fix steering rules cleanup (no CVSS, Linux)
- [CVE-2023-53078](https://cve.now/CVE-2023-53078.md): scsi: scsi\_dh\_alua: Fix memleak for 'qdata' in alua\_activate() (no CVSS, Linux)
- [CVE-2023-53077](https://cve.now/CVE-2023-53077.md): drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes (no CVSS, Linux)
- [CVE-2023-53075](https://cve.now/CVE-2023-53075.md): ftrace: Fix invalid address access in lookup\_rec() when index is 0 (no CVSS, Linux)
- [CVE-2023-53074](https://cve.now/CVE-2023-53074.md): drm/amdgpu: fix ttm\_bo calltrace warning in psp\_hw\_fini (no CVSS, Linux)
- [CVE-2023-53073](https://cve.now/CVE-2023-53073.md): perf/x86/amd/core: Always clear status for idx (no CVSS, Linux)
- [CVE-2023-53072](https://cve.now/CVE-2023-53072.md): mptcp: use the workqueue to destroy unaccepted sockets (CVSS 7.8, Linux)
- [CVE-2023-53071](https://cve.now/CVE-2023-53071.md): wifi: mt76: do not run mt76\_unregister\_device() on unregistered hw (no CVSS, Linux)
- [CVE-2023-53070](https://cve.now/CVE-2023-53070.md): ACPI: PPTT: Fix to avoid sleep in the atomic context when PPTT is absent (no CVSS, Linux)
- [CVE-2023-53069](https://cve.now/CVE-2023-53069.md): octeontx2-vf: Add missing free for alloc\_percpu (no CVSS, Linux)
- [CVE-2023-53068](https://cve.now/CVE-2023-53068.md): net: usb: lan78xx: Limit packet length to skb-\>len (no CVSS, Linux)
- [CVE-2023-53067](https://cve.now/CVE-2023-53067.md): LoongArch: Only call get\_timer\_irq() once in constant\_clockevent\_init() (no CVSS, Linux)
- [CVE-2023-53066](https://cve.now/CVE-2023-53066.md): qed/qed\_sriov: guard against NULL derefs from qed\_iov\_get\_vf\_info (no CVSS, Linux)
- [CVE-2023-53065](https://cve.now/CVE-2023-53065.md): perf/core: Fix perf\_output\_begin parameter is incorrectly invoked in perf\_event\_bpf\_output (CVSS 7.8, Linux)
- [CVE-2023-53064](https://cve.now/CVE-2023-53064.md): iavf: fix hang on reboot with ice (no CVSS, Linux)
- [CVE-2023-53062](https://cve.now/CVE-2023-53062.md): net: usb: smsc95xx: Limit packet length to skb-\>len (no CVSS, Linux)
- [CVE-2023-53061](https://cve.now/CVE-2023-53061.md): ksmbd: fix possible refcount leak in smb2\_open() (no CVSS, Linux)
- [CVE-2023-53060](https://cve.now/CVE-2023-53060.md): igb: revert rtnl\_lock() that causes deadlock (no CVSS, Linux)
- [CVE-2023-53059](https://cve.now/CVE-2023-53059.md): platform/chrome: cros\_ec\_chardev: fix kernel data leak from ioctl (no CVSS, Linux)
- [CVE-2023-53058](https://cve.now/CVE-2023-53058.md): net/mlx5: E-Switch, Fix an Oops in error handling code (no CVSS, Linux)
- [CVE-2023-53057](https://cve.now/CVE-2023-53057.md): Bluetooth: HCI: Fix global-out-of-bounds (CVSS 7.8, Linux)
- [CVE-2023-53056](https://cve.now/CVE-2023-53056.md): scsi: qla2xxx: Synchronize the IOCB count to be in order (no CVSS, Linux)
- [CVE-2023-53055](https://cve.now/CVE-2023-53055.md): fscrypt: destroy keyring after security\_sb\_delete() (no CVSS, Linux)
- [CVE-2023-53054](https://cve.now/CVE-2023-53054.md): usb: dwc2: fix a devres leak in hw\_enable upon suspend resume (no CVSS, Linux)
- [CVE-2023-53053](https://cve.now/CVE-2023-53053.md): erspan: do not use skb\_mac\_header() in ndo\_start\_xmit() (no CVSS, Linux)
- [CVE-2023-53052](https://cve.now/CVE-2023-53052.md): cifs: fix use-after-free bug in refresh\_cache\_worker() (CVSS 7.8, Linux)
- [CVE-2023-53051](https://cve.now/CVE-2023-53051.md): dm crypt: add cond\_resched() to dmcrypt\_write() (no CVSS, Linux)
- [CVE-2023-53050](https://cve.now/CVE-2023-53050.md): thunderbolt: Fix memory leak in margining (no CVSS, Linux)
- [CVE-2023-53049](https://cve.now/CVE-2023-53049.md): usb: ucsi: Fix NULL pointer deref in ucsi\_connector\_change() (no CVSS, Linux)
- [CVE-2023-53048](https://cve.now/CVE-2023-53048.md): usb: typec: tcpm: fix warning when handle discover\_identity message (no CVSS, Linux)
- [CVE-2023-53047](https://cve.now/CVE-2023-53047.md): tee: amdtee: fix race condition in amdtee\_open\_session (CVSS 7.8, Linux)
- [CVE-2023-53046](https://cve.now/CVE-2023-53046.md): Bluetooth: Fix race condition in hci\_cmd\_sync\_clear (CVSS 7.8, Linux)
- [CVE-2023-53045](https://cve.now/CVE-2023-53045.md): usb: gadget: u\_audio: don't let userspace block driver unbind (no CVSS, Linux)
- [CVE-2023-53044](https://cve.now/CVE-2023-53044.md): dm stats: check for and propagate alloc\_percpu failure (no CVSS, Linux)
- [CVE-2023-53043](https://cve.now/CVE-2023-53043.md): arm64: dts: qcom: sc7280: Mark PCIe controller as cache coherent (CVSS 7.8, Linux)
- [CVE-2023-53042](https://cve.now/CVE-2023-53042.md): drm/amd/display: Do not set DRR on pipe Commit (no CVSS, Linux)
- [CVE-2023-53041](https://cve.now/CVE-2023-53041.md): scsi: qla2xxx: Perform lockless command completion in abort path (no CVSS, Linux)
- [CVE-2023-53040](https://cve.now/CVE-2023-53040.md): ca8210: fix mac\_len negative array access (no CVSS, Linux)
- [CVE-2023-53039](https://cve.now/CVE-2023-53039.md): HID: intel-ish-hid: ipc: Fix potential use-after-free in work function (CVSS 7.8, Linux)
- [CVE-2023-53038](https://cve.now/CVE-2023-53038.md): scsi: lpfc: Check kzalloc() in lpfc\_sli4\_cgn\_params\_read() (no CVSS, Linux)
- [CVE-2023-53037](https://cve.now/CVE-2023-53037.md): scsi: mpi3mr: Bad drive in topology results kernel crash (no CVSS, Linux)
- [CVE-2023-53036](https://cve.now/CVE-2023-53036.md): drm/amdgpu: Fix call trace warning and hang when removing amdgpu device (no CVSS, Linux)
- [CVE-2023-53035](https://cve.now/CVE-2023-53035.md): nilfs2: fix kernel-infoleak in nilfs\_ioctl\_wrap\_copy() (no CVSS, Linux)
- [CVE-2022-49932](https://cve.now/CVE-2022-49932.md): KVM: VMX: Do \_all\_ initialization before exposing /dev/kvm to userspace (no CVSS, Linux)
- [CVE-2025-4210](https://cve.now/CVE-2025-4210.md): Casdoor SCIM User Creation Endpoint scim.go HandleScim authorization (CVSS 6.9, Casdoor · github.com/casdoor/casdoor)
- [CVE-2025-1884](https://cve.now/CVE-2025-1884.md): Use-After-Free vulnerability exists in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 (CVSS 7.8, Dassault Systèmes SOLIDWORKS eDrawings)
- [CVE-2025-1883](https://cve.now/CVE-2025-1883.md): Out-Of-Bounds Write vulnerability exists in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 (CVSS 7.8, Dassault Systèmes SOLIDWORKS eDrawings)
- [CVE-2025-4166](https://cve.now/CVE-2025-4166.md): Vault May Include Sensitive Data in Error Logs When Using the KV v2 Plugin (CVSS 4.5, HashiCorp Vault · github.com/hashicorp/vault)
- [CVE-2025-3927](https://cve.now/CVE-2025-3927.md): CVE-2025-3927 (CVSS 9.8, Digigram PYKO-OUT)
- [CVE-2025-37798](https://cve.now/CVE-2025-37798.md): codel: remove sch-\>q.qlen check before qdisc\_tree\_reduce\_backlog() (CVSS 7.8, Linux)
- [CVE-2025-37797](https://cve.now/CVE-2025-37797.md): net\_sched: hfsc: Fix a UAF vulnerability in class handling (CVSS 7.8, Linux)
- [CVE-2025-2605](https://cve.now/CVE-2025-2605.md): Authenticated command injection (CVSS 9.9, Honeywell MB-Secure)
- [CVE-2025-4204](https://cve.now/CVE-2025-4204.md): Ultimate Auction Pro \<= 1.5.2 - Unauthenticated SQL Injection via 'auction\_id' (CVSS 7.5, Inception Software LLP Ultimate Auction Pro)
- [CVE-2025-2488](https://cve.now/CVE-2025-2488.md): XSS in Profelis Informatics' SambaBox (CVSS 6.1, Profelis Informatics SambaBox)
- [CVE-2025-2421](https://cve.now/CVE-2025-2421.md): Remote Code Execution in Profelis Informatics' SambaBox (CVSS 9.8, Profelis Informatics SambaBox)
- [CVE-2025-1301](https://cve.now/CVE-2025-1301.md): Reflected XSS in Yordam Informatics' Library Automation System (CVSS 6.1, Yordam Informatics Library Automation System)
- [CVE-2025-0427](https://cve.now/CVE-2025-0427.md): Mali GPU Kernel Driver allows access to already freed memory (CVSS 7.8, Arm Bifrost GPU Kernel Driver · Arm Valhall GPU Kernel D… +1)
- [CVE-2025-0072](https://cve.now/CVE-2025-0072.md): Mali GPU Kernel Driver allows improper GPU memory processing operations (CVSS 7.8, Arm Valhall GPU Kernel Driver · Arm 5th Gen GPU Architectur…)
- [CVE-2025-2812](https://cve.now/CVE-2025-2812.md): SQLi in Mydata Informatics' Ticket Sales Automation (CVSS 9.8, Mydata Informatics Ticket Sales Automation)
- [CVE-2024-11142](https://cve.now/CVE-2024-11142.md): CSRF in Gosoft Software's Proticaret E-Commerce (CVSS 8.8, Gosoft Software Proticaret E-Commerce)
- [CVE-2024-13859](https://cve.now/CVE-2024-13859.md): BuddyBoss Platform \<= 2.8.50 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'bp\_nouveau\_ajax\_media\_save' function (CVSS 6.4, Boss Media BuddyBoss Platform)
- [CVE-2024-13860](https://cve.now/CVE-2024-13860.md): BuddyBoss Platform \<= 2.8.50 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'bbp\_topic\_title' (CVSS 6.4, Boss Media BuddyBoss Platform)
- [CVE-2024-13858](https://cve.now/CVE-2024-13858.md): BuddyBoss Platform and BuddyBoss Theme \<= Multiple Versions - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'invitee\_name' (CVSS 6.4, Boss Media BuddyBoss Theme · Boss Media BuddyBoss Platform)
- [CVE-2025-3514](https://cve.now/CVE-2025-3514.md): SureForms \< 1.4.4 - Admin+ Stored XSS (CVSS 3.5, SureForms)
- [CVE-2025-3513](https://cve.now/CVE-2025-3513.md): SureForms \< 1.4.4 - Admin+ Stored XSS (CVSS 3.5, SureForms)
- [CVE-2025-3438](https://cve.now/CVE-2025-3438.md): MStore API – Create Native Android & iOS Apps On The Cloud \<= 4.17.4 - Unauthenticated Limited Privilege Escalation (CVSS 6.5, inspireui MStore API – Create Native Android & iOS Apps On…)
- [CVE-2025-3488](https://cve.now/CVE-2025-3488.md): WPML Multilingual CMS 3.6.0 - 4.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpml\_language\_switcher Shortcode (CVSS 6.4, WPML)
- [CVE-2025-3858](https://cve.now/CVE-2025-3858.md): Formality \<= 1.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Parameter (CVSS 6.4, michelegiorgi Formality)
- [CVE-2025-1326](https://cve.now/CVE-2025-1326.md): Homey - Booking and Rentals WordPress Theme \<= 2.4.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Reservation & Post Deletion (CVSS 4.3, Fave Themes Homey)
- [CVE-2024-13418](https://cve.now/CVE-2024-13418.md): Smart Framework \<= Multiple Plugins - Authenticated (Subscriber+) Arbitrary File Upload (CVSS 8.8, G5Theme Benaa Framework · G5Theme April Framework +2)
- [CVE-2024-12023](https://cve.now/CVE-2024-12023.md): FULL – Cliente 3.1.5 - 3.1.25 - Authenticated (Subscriber+) SQL Injection (CVSS 6.5, fullservices FULL – Cliente)
- [CVE-2024-13420](https://cve.now/CVE-2024-13420.md): Smart Framework \<= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Settings Updates (CVSS 4.3, G5Theme Benaa Framework · G5Theme April Framework +2)
- [CVE-2024-13322](https://cve.now/CVE-2024-13322.md): Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager \<= 4.88 - Unauthenticated SQL Injection (CVSS 7.5, scripteo Ads Pro Plugin - Multi-Purpose WordPress Advertisi…)
- [CVE-2025-1327](https://cve.now/CVE-2025-1327.md): Homey - Booking and Rentals WordPress Theme \<= 2.4.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Deletion (CVSS 4.3, Fave Themes Homey)
- [CVE-2024-13344](https://cve.now/CVE-2024-13344.md): Advance Seat Reservation Management for WooCommerce \<= 3.3 - Unauthenticated SQL Injection (CVSS 7.5, smartcms Advance Seat Reservation Management for WooCommerce)
- [CVE-2025-3510](https://cve.now/CVE-2025-3510.md): tagDiv Composer \<= 5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes (CVSS 6.4, tagDiv Composer)
- [CVE-2025-3748](https://cve.now/CVE-2025-3748.md): Taxonomy Chain Menu \<= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via pn\_chain\_menu Shortcode (CVSS 6.4, realmag777 Taxonomy Chain Menu)
- [CVE-2024-13419](https://cve.now/CVE-2024-13419.md): Smart Framework \<= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting (CVSS 6.4, G5Theme Benaa Framework · G5Theme April Framework +2)
- [CVE-2025-3709](https://cve.now/CVE-2025-3709.md): Flowring Technology Agentflow - Account Lockout Bypass (CVSS 9.8, Flowring Technology Agentflow)
- [CVE-2025-3708](https://cve.now/CVE-2025-3708.md): Le-show Medical Practice Management System - SQL Injection (CVSS 9.8, Le-yan Le-show)
- [CVE-2025-3707](https://cve.now/CVE-2025-3707.md): Sunnet eHRD CTMS - SQL Injection (CVSS 6.5, Sunnet eHRD CTMS)
- [CVE-2025-3670](https://cve.now/CVE-2025-3670.md): KiwiChat NextClient \<= 6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter (CVSS 6.4, KiwiChat NextClient)
- [CVE-2025-4177](https://cve.now/CVE-2025-4177.md): Flynax Bridge \<= 2.2.0 - Unauthenticated Arbitrary User Deletion (CVSS 5.3, v1rustyle Flynax Bridge)
- [CVE-2025-2880](https://cve.now/CVE-2025-2880.md): Yame | Link In Bio \<= 0.9.0 - Unauthenticated Information Exposure (CVSS 5.3, Yame | Link In Bio)
- [CVE-2025-4179](https://cve.now/CVE-2025-4179.md): Flynax Bridge \<= 2.2.0 - Unauthenticated Limited Privilege Escalation (CVSS 7.3, v1rustyle Flynax Bridge)
- [CVE-2025-3746](https://cve.now/CVE-2025-3746.md): OTP-less one tap Sign in 2.0.14 - 2.0.59 - Unauthenticated Arbitrary Email Update to Account Takeover/Privilege Escalation (CVSS 9.8, thedrifted OTP-less one tap Sign in)
- [CVE-2025-4131](https://cve.now/CVE-2025-4131.md): GmapsMania \<= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, garubi GmapsMania)
- [CVE-2025-4197](https://cve.now/CVE-2025-4197.md): code-projects Patient Record Management System edit\_xpatient.php sql injection (CVSS 5.3, code-projects Patient Record Management System)
- [CVE-2025-4196](https://cve.now/CVE-2025-4196.md): SourceCodester Patient Record Management System birthing.php sql injection (CVSS 5.3, SourceCodester Patient Record Management System)
- [CVE-2025-29825](https://cve.now/CVE-2025-29825.md): Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVSS 6.5, Microsoft Edge)
- [CVE-2025-4195](https://cve.now/CVE-2025-4195.md): itsourcecode Gym Management System ajax.php sql injection (CVSS 6.9, itsourcecode Gym Management System)
- [CVE-2025-4193](https://cve.now/CVE-2025-4193.md): itsourcecode Restaurant Management System category\_update.php sql injection (CVSS 6.9, itsourcecode Restaurant Management System)
- [CVE-2024-55910](https://cve.now/CVE-2024-55910.md): IBM Concert Software server-side request forgery (CVSS 6.5, IBM Concert Software)
- [CVE-2024-55913](https://cve.now/CVE-2024-55913.md): IBM Concert Software path traversal (CVSS 5.3, IBM Concert Software)
- [CVE-2024-55912](https://cve.now/CVE-2024-55912.md): IBM Concert Software information disclosure (CVSS 5.9, IBM Concert Software)
- [CVE-2024-55909](https://cve.now/CVE-2024-55909.md): IBM Concert Software denial of service (CVSS 6.5, IBM Concert Software)
- [CVE-2025-4192](https://cve.now/CVE-2025-4192.md): itsourcecode Restaurant Management System category\_save.php sql injection (CVSS 6.9, itsourcecode Restaurant Management System)
- [CVE-2025-4191](https://cve.now/CVE-2025-4191.md): PHPGurukul Employee Record Management System editmyeducation.php sql injection (CVSS 6.9, PHPGurukul Employee Record Management System)
- [CVE-2025-4186](https://cve.now/CVE-2025-4186.md): Wangshen SecGate 3600 g=route\_ispinfo\_export\_save path traversal (CVSS 5.3, Wangshen SecGate)
- [CVE-2024-55069](https://cve.now/CVE-2024-55069.md): ffmpeg 7.1 is vulnerable to Null Pointer Dereference in function iamf\_read\_header in /libavformat/iamfdec.c. (CVSS 5.3)
- [CVE-2024-58253](https://cve.now/CVE-2024-58253.md): In the obfstr crate before 0.4.4 for Rust, the obfstr! argument type is not restricted to string slices, leading to invalid UTF-8 conversion (CVSS 2.9, CasualX obfstr · obfstr)
- [CVE-2025-44868](https://cve.now/CVE-2025-44868.md): Wavlink WL-WN530H4 20220801 was found to contain a command injection vulnerability in the ping\_test function of the adm.cgi via the pingIp p (CVSS 9.8)
- [CVE-2025-44872](https://cve.now/CVE-2025-44872.md): Tenda AC9 V15.03.06.42\_multi was found to contain a command injection vulnerability in the formsetUsbUnload function via the deviceName para (CVSS 9.8)
- [CVE-2025-44877](https://cve.now/CVE-2025-44877.md): Tenda AC9 V15.03.06.42\_multi was found to contain a command injection vulnerability in the formSetSambaConf function via the usbname paramet (CVSS 9.8)
- [CVE-2025-45800](https://cve.now/CVE-2025-45800.md): TOTOLINK A950RG V4.1.2cu.5204\_B20210112 contains a command execution vulnerability in the setDeviceName interface of the /lib/cste\_modules/g (CVSS 9.8)
- [CVE-2025-47201](https://cve.now/CVE-2025-47201.md): In Intrexx Portal Server before 12.0.4, multiple Velocity-Scripts are susceptible to the execution of unrequested JavaScript code in HTML, a (CVSS 4.4, Intrexx Portal Server)
- [CVE-2025-47226](https://cve.now/CVE-2025-47226.md): Grokability Snipe-IT before 8.1.0 has incorrect authorization for accessing asset information. (CVSS 5.0, snipeitapp Snipe-IT · snipe/snipe-it)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-05-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.