CVEs published May 5, 2025
127 CVEs were published on May 5, 2025: 16 critical, 36 high. 1 is now in CISA KEV.
- Published
- 127
- Critical
- 16
- High
- 36
- Medium
- 70
- Low
- 5
- Unrated
- 0
- Now in CISA KEV
- 1
- Fix available
- 33
Most affected products
- RVC-Project Retrieval-based-Voice-Conversion-WebUI
- 11
- Google Chrome
- 4
- IBM Db2 for Linux, UNIX and Windows
- 4
- PCMan FTP Server
- 4
- TOTOLINK A720R
- 4
- Linux
- 3
- SourceCodester Stock Management System · oretnom23 Stock Ma…
- 3
- HCL Software HCL BigFix Compliance
- 2
- misskey-dev misskey
- 2
- Mobile-Security-Framework-MobSF · mobsf
- 2
Critical 16
- CVE-2025-1909BuddyBoss Platform Pro <= 2.7.01 - Authentication Bypass via Apple OAuth providerBuddyBoss Platform Pro
- CVE-2025-4318Input validation issue in AWS Amplify Studio UI component propertiesAmazon Amplify Studio · @aws-amplify/codegen-ui-react
- CVE-2025-4052Inappropriate implementation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage inGoogle Chrome
- CVE-2025-24977OpenCTI has remote code execution and sensitive secrets exposed through web hookOpenCTI-Platform opencti · pycti
- CVE-2025-2905An XML External Entity (XXE) vulnerability in Multiple WSO2 ProductsWSO2 API Manager · WSO2 Enterprise Integrator +4
- CVE-2025-44071SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component phomebak.php.
- CVE-2025-44072SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admin_manager.php.
- CVE-2025-44074SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admin_topic.php.
- CVE-2025-45042Tenda AC9 v15.03.05.14 was discovered to contain a command injection vulnerability via the Telnet function.
- CVE-2025-45238foxcms v1.2.5 was discovered to contain an arbitrary file deletion vulnerability via the delRestoreSerie method.
- CVE-2025-45322kashipara Online Service Management Portal V1.0 is vulnerable to SQL Injection in osms/Requester/CheckStatus.php via the checkid parameter.
- CVE-2025-45607An issue in the component /manage/ of itranswarp v2.19 allows attackers to bypass authentication via a crafted request.
- CVE-2025-45611Incorrect access control in the /user/edit/ component of hope-boot v1.0.0 allows attackers to bypass authentication via a crafted GET reques
- CVE-2025-45612Incorrect access control in xmall v1.1 allows attackers to bypass authentication via a crafted GET request to /index.
- CVE-2025-45615Incorrect access control in the /admin/ API of yaoqishan v0.0.1-SNAPSHOT allows attackers to gain access to Admin rights via a crafted reque
- CVE-2025-45616Incorrect access control in the /admin/** API of brcc v1.2.0 allows attackers to gain access to Admin rights via a crafted request.com.baidu.mapp:brcc-core
High 36
- CVE-2025-4298Tenda AC1206 setcfm formSetCfm buffer overflowTenda AC1206
- CVE-2025-46731Craft CMS Contains a Potential Remote Code Execution Vulnerability via Twig SSTIcraftcms cms · craftcms/cms
- CVE-2025-46726Langroid Vulnerable to XXE Injection via XMLToolMessagelangroid
- CVE-2025-46340Misskey CSS Style Injection Vulnerability In `MkUrlPreview`misskey-dev misskey
- CVE-2025-46335Mobile Security Framework (MobSF) Allows Stored Cross Site Scripting (XSS) via malicious SVG Icon UploadMobile-Security-Framework-MobSF · mobsf
- CVE-2025-4279External image replace <= 1.0.8 - Authenticated (Contributor+) Arbitrary File Uploadmuromuro External image replace
- CVE-2025-43852GHSL-2025-022_Retrieval-based-Voice-Conversion-WebUIRVC-Project Retrieval-based-Voice-Conversion-WebUI
- CVE-2025-43851GHSL-2025-021_Retrieval-based-Voice-Conversion-WebUIRVC-Project Retrieval-based-Voice-Conversion-WebUI
- CVE-2025-43850GHSL-2025-020_Retrieval-based-Voice-Conversion-WebUIRVC-Project Retrieval-based-Voice-Conversion-WebUI
- CVE-2025-43849GHSL-2025-019_Retrieval-based-Voice-Conversion-WebUIRVC-Project Retrieval-based-Voice-Conversion-WebUI
- CVE-2025-4050Out of bounds memory access in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in Google Chrome
- CVE-2025-4096Heap buffer overflow in HTML in Google Chrome prior to 136.0.7103.59 allowed a remote attacker to potentially exploit heap corruption via a Google Chrome
- CVE-2025-43848GHSL-2025-018_Retrieval-based-Voice-Conversion-WebUIRVC-Project Retrieval-based-Voice-Conversion-WebUI
- CVE-2025-43847GHSL-2025-017_Retrieval-based-Voice-Conversion-WebUIRVC-Project Retrieval-based-Voice-Conversion-WebUI
- CVE-2025-43846GHSL-2025-016_Retrieval-based-Voice-Conversion-WebUIRVC-Project Retrieval-based-Voice-Conversion-WebUI
- CVE-2025-43845GHSL-2025-015_Retrieval-based-Voice-Conversion-WebUIRVC-Project Retrieval-based-Voice-Conversion-WebUI
- CVE-2025-43844GHSL-2025-014_Retrieval-based-Voice-Conversion-WebUIRVC-Project Retrieval-based-Voice-Conversion-WebUI
- CVE-2025-43843GHSL-2025-013_Retrieval-based-Voice-Conversion-WebUIRVC-Project Retrieval-based-Voice-Conversion-WebUI
- CVE-2025-43842GHSL-2025-012_Retrieval-based-Voice-Conversion-WebUIRVC-Project Retrieval-based-Voice-Conversion-WebUI
- CVE-2025-0217Privileged Remote Access Authentication BypassBeyondTrust Privileged Remote Access
- CVE-2024-58237bpf: consider that tail calls invalidate packet pointersLinux
- CVE-2024-58100bpf: check changes_pkt_data property for extension programsLinux
- CVE-2024-58098bpf: track changes_pkt_data property for global functionsLinux
- CVE-2025-4272Mechrevo Control Console GCUService csCAPI.dll uncontrolled search pathMechrevo Control Console
- CVE-2025-27920Output Messenger before 2.0.63 was vulnerable to a directory traversal attack through improper file path handling.Srimax Output Messenger
- CVE-2025-28062A Cross-Site Request Forgery (CSRF) vulnerability was discovered in ERPNEXT 14.82.1 and 14.74.3.
- CVE-2025-45237Incorrect access control in the component /config/download of DBSyncer v2.0.6 allows attackers to access the JSON file containing sensitive
- CVE-2025-45242Rhymix v2.1.22 was discovered to contain an arbitrary file deletion vulnerability via the procFileAdminEditImage method in /file/file.admin.
- CVE-2025-45320A Directory Listing Vulnerability was found in the /osms/Requester/ directory of the Kashipara Online Service Management Portal V1.0.
- CVE-2025-45321kashipara Online Service Management Portal V1.0 is vulnerable to SQL Injection in /osms/Requester/Requesterchangepass.php via the parameter:
- CVE-2025-45608Incorrect access control in the /system/user/findUserList API of Xinguan v0.0.1-SNAPSHOT allows attackers to access sensitive information vi
- CVE-2025-45609Incorrect access control in the doFilter function of kob latest v1.0.0-SNAPSHOT allows attackers to access sensitive information via a craft
- CVE-2025-45610Incorrect access control in the component /scheduleLog/info/1 of PassJava-Platform v3.0.0 allows attackers to access sensitive information v
- CVE-2025-45613Incorrect access control in the component /user/list of Shiro-Action v0.6 allows attackers to access sensitive information via a crafted pay
- CVE-2025-45614Incorrect access control in the component /api/user/manager of One v1.0 allows attackers to access sensitive information via a crafted paylo
- CVE-2025-45617Incorrect access control in the component /user/list of production_ssm v0.0.1-SNAPSHOT allows attackers to access sensitive information via
Medium, low and unrated 75
- CVE-2025-4297PHPGurukul Men Salon Management System change-password.php sql injectionPHPGurukul Men Salon Management System
- CVE-2025-4293MRCMS Group Edit Page edit.do cross site scriptingMRCMS
- CVE-2025-4292MRCMS Edit User Page edit.do cross site scriptingMRCMS
- CVE-2025-4291IdeaCMS saveUpload unrestricted uploadIdeaCMS
- CVE-2025-4290PCMan FTP Server SMNT Command buffer overflowPCMan FTP Server
- CVE-2025-4289PCMan FTP Server RNTO Command buffer overflowPCMan FTP Server
- CVE-2025-1493IBM Db2 denial of serviceIBM Db2 for Linux, UNIX and Windows
- CVE-2025-0915IBM Db2 denial of serviceIBM Db2 for Linux, UNIX and Windows
- CVE-2025-1000IBM Db2 denial of serviceIBM Db2 for Linux, UNIX and Windows
- CVE-2025-4288PCMan FTP Server RNFR Command buffer overflowPCMan FTP Server
- CVE-2025-46813Private data leak on login-required Discourse sitesdiscourse
- CVE-2025-4287PyTorch nccl.py torch.cuda.nccl.reduce denial of servicePyTorch
- CVE-2025-46734league/commonmark Cross-site Scripting vulnerability in Attributes extensionthephpleague commonmark · league/commonmark
- CVE-2025-46730Mobile Security Framework (MobSF) Allows Web Server Resource Exhaustion via ZIP of Death AttackMobile-Security-Framework-MobSF · mobsf
- CVE-2025-4286Intelbras InControl Dispositivos Edição Page credentials storageIntelbras InControl
- CVE-2024-42213HCL BigFix Compliance is affected by inclusion of temporary files left in the production environmentHCL Software HCL BigFix Compliance
- CVE-2025-46720Keystone has an unintended `isFilterable` bypass that can be used as an oracle to match hidden fieldskeystonejs keystone · @keystone-6/core
- CVE-2025-46719Open WebUI vulnerable to stored XSS via unescaped markdown token in MarkdownTokens.svelte leading to full account takeover and RCE via functionsopen-webui
- CVE-2025-46571Open WebUI vulnerable to limited stored XSS vila uploaded html fileopen-webui
- CVE-2024-42212HCL BigFix Compliance is affected by an improper or missing SameSite attributeHCL Software HCL BigFix Compliance
- CVE-2025-46559Misskey Directory Traversal Vulnerability in AiScript via `Mk:api`misskey-dev misskey
- CVE-2025-4283SourceCodester/oretnom23 Stock Management System Login.php sql injectionSourceCodester Stock Management System · oretnom23 Stock Ma…
- CVE-2025-46553@misskey-dev/summaly Redirect Filter Bypassmisskey-dev summaly · @misskey-dev/summaly
- CVE-2025-4051Insufficient data validation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage inGoogle Chrome
- CVE-2025-4282SourceCodester/oretnom23 Stock Management System Users.php cross-site request forgerySourceCodester Stock Management System · oretnom23 Stock Ma…
- CVE-2024-51991October CMS Allows Unprotected SVG Rename in Media Manageroctobercms october · october/system +1
- CVE-2025-1992IBM Db2 denial of serviceIBM Db2 for Linux, UNIX and Windows
- CVE-2024-11615Envolve Plugin <= 1.0 - Unauthenticated Language File DeletionThemeKalia Envolve Plugin
- CVE-2025-4281Shenzhen Sixun Software Sixun Shanghui Group Business Management System LoadData information disclosureShenzhen Sixun Software Sixun Shanghui Group Business Manag…
- CVE-2025-4316Improper access control in PAM feature in Devolutions Server allows a PAM user to self approve their PAM requests even if disallowed by the Devolutions Server
- CVE-2025-2545Deprecated 3DES cryptographic algorithm used by Request Tracker in emails encrypted with S/MIMEBest Practical Solutions Request Tracker
- CVE-2025-4271TOTOLINK A720R cstecgi.cgi information disclosureTOTOLINK A720R
- CVE-2025-4270TOTOLINK A720R Config cstecgi.cgi information disclosureTOTOLINK A720R
- CVE-2025-4269TOTOLINK A720R Log cstecgi.cgi access controlTOTOLINK A720R
- CVE-2025-4268TOTOLINK A720R cstecgi.cgi missing authenticationTOTOLINK A720R
- CVE-2025-39363WordPress Custom Login and Registration <= 1.0.0 - Cross Site Scripting (XSS) VulnerabilityAlphaEfficiencyTeam Custom Login and Registration
- CVE-2025-4267SourceCodester/oretnom23 Stock Management System Purchase Order Details Page view_po sql injectionSourceCodester Stock Management System · oretnom23 Stock Ma…
- CVE-2025-3583Newsletter < 8.7.1 - Admin+ Stored XSSNewsletter
- CVE-2025-4266PHPGurukul Notice Board System bwdates-reports-details.php sql injectionPHPGurukul Notice Board System
- CVE-2025-4265PHPGurukul Emergency Ambulance Hiring Portal contact-us.php sql injectionPHPGurukul Emergency Ambulance Hiring Portal
- CVE-2025-4264PHPGurukul Emergency Ambulance Hiring Portal edit-ambulance.php sql injectionPHPGurukul Emergency Ambulance Hiring Portal
- CVE-2025-4263PHPGurukul Online DJ Booking Management System booking-search.php sql injectionPHPGurukul Online DJ Booking Management System
- CVE-2025-4262PHPGurukul Online DJ Booking Management System user-search.php sql injectionPHPGurukul Online DJ Booking Management System
- CVE-2025-4261GAIR-NLP factool tool.py run_single code injectionGAIR-NLP factool
- CVE-2025-20665In devinfo, there is a possible information disclosure due to a missing SELinux policy.MediaTek MT6580, MT6761, MT6765, MT6768, MT6779, MT6781, MT…
- CVE-2025-20670In Modem, there is a possible permission bypass due to improper certificate validation.MediaTek MT2737, MT6813, MT6835, MT6835T, MT6878, MT6878M,…
- CVE-2025-20668In scp, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6878, MT6897, MT6899, MT6989, MT6991, MT8775, MT…
- CVE-2025-20671In thermal, there is a possible out of bounds write due to a race condition.MediaTek MT2718, MT6878, MT6897, MT6899, MT6989, MT6991, MT…
- CVE-2025-20667In Modem, there is a possible information disclosure due to incorrect error handling.MediaTek MT2735, MT2737, MT6739, MT6761, MT6762, MT6762D, M…
- CVE-2025-20666In Modem, there is a possible system crash due to an uncaught exception.MediaTek MT2735, MT6833, MT6833P, MT6853, MT6853T, MT6855,…
- CVE-2025-4260zhangyanbo2007 youkefu TemplateController.java impsave deserializationzhangyanbo2007 youkefu
- CVE-2025-4259newbee-mall UploadController.java upload unrestricted uploadnewbee-mall
- CVE-2025-4258zhangyanbo2007 youkefu MediaController.java upload unrestricted uploadzhangyanbo2007 youkefu
- CVE-2025-4257SeaCMS admin_pay.php cross site scriptingSeaCMS
- CVE-2025-4256SeaCMS admin_paylog.php cross site scriptingSeaCMS
- CVE-2025-4255PCMan FTP Server RMD Command buffer overflowPCMan FTP Server
- CVE-2024-57229NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the devname parameter in the res
- CVE-2024-57230NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcl
- CVE-2024-57231NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcl
- CVE-2024-57232NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcl
- CVE-2024-57233NETGEAR RAX5 (AX1600 WiFi Router) v1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vif_d
- CVE-2024-57234NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcl
- CVE-2024-57235NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vif_e
- CVE-2025-25504An issue in the /usr/local/bin/jncs.sh script of Gefen WebFWC (In AV over IP products) v1.85h, v1.86v, and v1.70 allows attackers with netwo
- CVE-2025-26241A SQL injection vulnerability in the "Search" functionality of "tickets.php" page in osTicket <=1.17.5 allows authenticated attackers to exe
- CVE-2025-27921A reflected cross-site scripting (XSS) vulnerability was discovered in Output Messenger before 2.0.63, where unsanitized input could be inje
- CVE-2025-28168The Multiple File Upload add-on component 3.1.0 for OutSystems is vulnerable to Unrestricted File Upload.Multi Uploaders Multiple File Upload
- CVE-2025-29573Cross-Site Scripting (XSS) vulnerability exists in Mezzanine CMS 6.0.0 in the "View Entries" feature within the Forms module.mezzanine
- CVE-2025-43915In Linkerd edge releases before edge-25.2.1, and Buoyant Enterprise for Linkerd releases 2.13.0–2.13.7, 2.14.0–2.14.10, 2.15.0–2.15.7, 2.16.github.com/linkerd/linkerd2
- CVE-2025-45236A stored cross-site scripting (XSS) vulnerability in the Edit Profile feature of DBSyncer v2.0.6 allows attackers to execute arbitrary web s
- CVE-2025-45239An issue in the restores method (DataBackup.php) of foxcms v2.0.6 allows attackers to execute a directory traversal.
- CVE-2025-45240foxcms v1.2.5 was discovered to contain a SQL injection vulnerability via the executeCommand method in DataBackup.php.
- CVE-2025-45618Incorrect access control in the component /admin/sys/datasource/ajaxList of jeeweb-mybatis-springboot v0.0.1.RELEASE allows attackers to acc
- CVE-2025-45751SourceCodester Web Based Pharmacy Product Management System 1.0 is vulnerable to Cross Site Scripting (XSS) in add-admin.php via the Fullnam
- CVE-2025-47268ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply paiputils