# CVEs published 2025-05-04

8 CVEs were published on May 4, 2025: 0 critical, 0 high. Days are UTC.

- [CVE-2025-4254](https://cve.now/CVE-2025-4254.md): PCMan FTP Server LIST Command buffer overflow (CVSS 6.9, PCMan FTP Server)
- [CVE-2025-4253](https://cve.now/CVE-2025-4253.md): PCMan FTP Server HASH Command buffer overflow (CVSS 6.9, PCMan FTP Server)
- [CVE-2025-4252](https://cve.now/CVE-2025-4252.md): PCMan FTP Server APPEND Command buffer overflow (CVSS 6.9, PCMan FTP Server)
- [CVE-2025-4251](https://cve.now/CVE-2025-4251.md): PCMan FTP Server RMDIR Command buffer overflow (CVSS 6.9, PCMan FTP Server)
- [CVE-2025-4250](https://cve.now/CVE-2025-4250.md): code-projects Nero Social Networking Site index.php sql injection (CVSS 6.9, code-projects Nero Social Networking Site)
- [CVE-2025-4249](https://cve.now/CVE-2025-4249.md): PHPGurukul e-Diary Management System manage-categories.php sql injection (CVSS 6.9, PHPGurukul e-Diary Management System)
- [CVE-2025-4248](https://cve.now/CVE-2025-4248.md): SourceCodester Simple To-Do List System complete\_task.php sql injection (CVSS 5.3, SourceCodester Simple To-Do List System)
- [CVE-2025-4247](https://cve.now/CVE-2025-4247.md): SourceCodester Simple To-Do List System delete\_task.php sql injection (CVSS 5.3, SourceCodester Simple To-Do List System)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-05-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.