# CVEs published 2025-05-08

112 CVEs were published on May 8, 2025: 12 critical, 37 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2025-4443](https://cve.now/CVE-2025-4443.md): D-Link DIR-605L sub\_454F2C command injection (CVSS 5.3, D-Link DIR-605L)
- [CVE-2025-4442](https://cve.now/CVE-2025-4442.md): D-Link DIR-605L formSetWAN\_Wizard55 buffer overflow (CVSS 8.7, D-Link DIR-605L)
- [CVE-2025-4441](https://cve.now/CVE-2025-4441.md): D-Link DIR-605L formSetWAN\_Wizard534 buffer overflow (CVSS 8.7, D-Link DIR-605L)
- [CVE-2025-4440](https://cve.now/CVE-2025-4440.md): H3C GR-1800AX aspForm EnableIpv6 buffer overflow (CVSS 8.6, H3C GR-1800AX)
- [CVE-2025-27720](https://cve.now/CVE-2025-27720.md): Pixmeo OsiriX MD Cleartext Transmission of Sensitive Information (CVSS 9.3, Pixmeo OsiriX MD)
- [CVE-2025-31946](https://cve.now/CVE-2025-31946.md): Pixmeo OsiriX MD Use After Free (CVSS 6.9, Pixmeo OsiriX MD)
- [CVE-2025-27578](https://cve.now/CVE-2025-27578.md): Pixmeo OsiriX MD Use After Free (CVSS 8.7, Pixmeo OsiriX MD)
- [CVE-2025-47732](https://cve.now/CVE-2025-47732.md): Microsoft Dataverse Remote Code Execution Vulnerability (CVSS 8.7, Microsoft Dataverse)
- [CVE-2025-47733](https://cve.now/CVE-2025-47733.md): Microsoft Power Apps Information Disclosure Vulnerability (CVSS 9.1, Microsoft Power Pages)
- [CVE-2025-29813](https://cve.now/CVE-2025-29813.md): Azure DevOps Elevation of Privilege Vulnerability (CVSS 10.0, Microsoft Azure DevOps)
- [CVE-2025-29827](https://cve.now/CVE-2025-29827.md): Azure Automation Elevation of Privilege Vulnerability (CVSS 9.9, Microsoft Azure Automation)
- [CVE-2025-29972](https://cve.now/CVE-2025-29972.md): Azure Storage Resource Provider Spoofing Vulnerability (CVSS 9.9, Microsoft Azure Storage Resource Provider)
- [CVE-2025-33072](https://cve.now/CVE-2025-33072.md): Microsoft msagsfeedback.azurewebsites.net Information Disclosure Vulnerability (CVSS 8.1, Microsoft msagsfeedback.azurewebsites.net)
- [CVE-2025-1331](https://cve.now/CVE-2025-1331.md): IBM CICS TX code execution (CVSS 7.8, IBM CICS TX Standard · IBM CICS TX Advanced)
- [CVE-2025-1330](https://cve.now/CVE-2025-1330.md): IBM CICS TX code execution (CVSS 7.8, IBM CICS TX Standard · IBM CICS TX Advanced)
- [CVE-2025-1329](https://cve.now/CVE-2025-1329.md): IBM CICS TX code execution (CVSS 7.8, IBM CICS TX Standard · IBM CICS TX Advanced)
- [CVE-2025-46833](https://cve.now/CVE-2025-46833.md): Programs/P73\_SimplePythonEncryption.py has weak cryptographic key (CVSS 4.6, ShashikantSingh09 python-progrrames)
- [CVE-2025-46812](https://cve.now/CVE-2025-46812.md): Trix vulnerable to Cross-site Scripting on copy & paste (CVSS 2.0, basecamp trix · trix)
- [CVE-2025-46712](https://cve.now/CVE-2025-46712.md): Erlang/OTP SSH Has Strict KEX Violations (CVSS 3.7, erlang otp)
- [CVE-2025-46336](https://cve.now/CVE-2025-46336.md): Rack session gets restored after deletion (CVSS 4.2, rack-session)
- [CVE-2024-9448](https://cve.now/CVE-2024-9448.md): On affected platforms running Arista EOS with Traffic Policies configured the vulnerability will cause received untagged packets not to hit Traffic Policy rules that they are expected to hit. If the rule was to drop the packet, the packet will not be dropp (CVSS 7.5, Arista Networks EOS)
- [CVE-2025-27695](https://cve.now/CVE-2025-27695.md): Dell Wyse Management Suite, versions prior to WMS 5.1 contain an Authentication Bypass by Spoofing vulnerability. (CVSS 4.9, Dell Wyse Management Suite)
- [CVE-2024-12378](https://cve.now/CVE-2024-12378.md): On affected platforms running Arista EOS with secure Vxlan configured, restarting the Tunnelsec agent will result in packets being sent over the secure Vxlan tunnels in the clear. (CVSS 9.1, Arista Networks CloudVision Portal)
- [CVE-2024-11186](https://cve.now/CVE-2024-11186.md): On affected versions of the CloudVision Portal, improper access controls could enable a malicious authenticated user to take broader actions on managed EOS devices than intended. This advisory impacts the Arista CloudVision Portal products when run on-prem (CVSS 10.0, Arista Networks CloudVision Portal)
- [CVE-2025-0505](https://cve.now/CVE-2025-0505.md): On Arista CloudVision systems (virtual or physical on-premise deployments), Zero Touch Provisioning can be used to gain admin privileges on the CloudVision system, with more permissions than necessary, which can be used to query or manipulate system state (CVSS 10.0, Arista Networks CloudVision Portal)
- [CVE-2024-8100](https://cve.now/CVE-2024-8100.md): On affected versions of the Arista CloudVision Portal (CVP on-prem), the time-bound device onboarding token can be used to gain admin privileges on CloudVision. (CVSS 8.7, Arista Networks CloudVision)
- [CVE-2025-1948](https://cve.now/CVE-2025-1948.md): Eclipse Jetty HTTP clients can increase memory allocation (CVSS 7.5, Eclipse Foundation Jetty · org.eclipse.jetty.http2:jetty-ht…)
- [CVE-2025-4098](https://cve.now/CVE-2025-4098.md): Out-of-bounds Read in Horner Automation Cscape (CVSS 8.4, Horner Automation Cscape)
- [CVE-2025-30101](https://cve.now/CVE-2025-30101.md): Dell PowerScale OneFS, versions 9.8.0.0 through 9.10.1.0, contain a time-of-check time-of-use (TOCTOU) race condition vulnerability. (CVSS 4.4, Dell PowerScale OneFS)
- [CVE-2025-30102](https://cve.now/CVE-2025-30102.md): Dell PowerScale OneFS, versions 9.4.0.0 through 9.10.1.0, contains an out-of-bounds write vulnerability. (CVSS 5.5, Dell PowerScale OneFS)
- [CVE-2024-13009](https://cve.now/CVE-2024-13009.md): Eclipse Jetty GZIP buffer release (CVSS 7.2, Eclipse Foundation Jetty · org.eclipse.jetty:jetty-server)
- [CVE-2025-4207](https://cve.now/CVE-2025-4207.md): PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (CVSS 5.9, PostgreSQL)
- [CVE-2024-6648](https://cve.now/CVE-2024-6648.md): Path Traversal in AP Page Builder (CVSS 8.7, Apollo Theme AP Page Builder)
- [CVE-2025-3506](https://cve.now/CVE-2025-3506.md): Potentially senitive path exposed via unauthenticated http route (CVSS 6.3, Checkmk)
- [CVE-2025-2806](https://cve.now/CVE-2025-2806.md): tagDiv Composer \<= 5.3 - Reflected Cross-Site Scripting via 'data' (CVSS 6.1, tagDiv Composer)
- [CVE-2025-3468](https://cve.now/CVE-2025-3468.md): NEX-Forms – Ultimate Form Builder – Contact forms and much more \<= 8.9.1 - Authenticated (Custom) Stored Cross-Site Scripting (CVSS 6.4, webaways NEX-Forms – Ultimate Forms Plugin for WordPress)
- [CVE-2025-3862](https://cve.now/CVE-2025-3862.md): Contest Gallery \<= 26.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter (CVSS 6.4, contest-gallery Contest Gallery – Upload & Vote Photos, Med…)
- [CVE-2025-4208](https://cve.now/CVE-2025-4208.md): NEX-Forms – Ultimate Form Builder – Contact forms and much more \<= 8.9.1 - Authenticated (Custom) Limited Code Execution via get\_table\_records Function (CVSS 6.3, webaways NEX-Forms – Ultimate Forms Plugin for WordPress)
- [CVE-2025-3759](https://cve.now/CVE-2025-3759.md): Missing Authentication for Changing Device Configuration in WF2220 (CVSS 8.7, Netis Systems WF2220)
- [CVE-2025-3758](https://cve.now/CVE-2025-3758.md): Exposure of Device Configuration without Authentication in WF2220 (CVSS 8.7, Netis Systems WF2220)
- [CVE-2025-41450](https://cve.now/CVE-2025-41450.md): Authentication bypass with privileged access in Danfoss AK-SM 8xxA Series prior to version 4.2 (CVSS 8.2, Danfoss AK-SM 8xxA Series)
- [CVE-2025-1254](https://cve.now/CVE-2025-1254.md): Out-of-bounds Read, Out-of-bounds Write vulnerability in RTI Connext Professional (Recording Service) allows Overflow Buffers, Overread Buffers. (CVSS 7.7, RTI Connext Professional)
- [CVE-2025-1253](https://cve.now/CVE-2025-1253.md): Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags. (CVSS 6.9, RTI Connext Professional)
- [CVE-2025-1252](https://cve.now/CVE-2025-1252.md): Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags. (CVSS 6.9, RTI Connext Professional)
- [CVE-2025-40846](https://cve.now/CVE-2025-40846.md): HaloITSM open redirect via the returnUrl (CVSS 7.1, HaloITSM ITSM)
- [CVE-2025-4127](https://cve.now/CVE-2025-4127.md): WP SEO Structured Data Schema \<= 2.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin Settings (CVSS 6.4, kcseopro WP SEO Structured Data Schema)
- [CVE-2025-37834](https://cve.now/CVE-2025-37834.md): mm/vmscan: don't try to reclaim hwpoison folio (no CVSS, Linux)
- [CVE-2025-37833](https://cve.now/CVE-2025-37833.md): net/niu: Niu requires MSIX ENTRY\_DATA fields touch before entry reads (no CVSS, Linux)
- [CVE-2025-37831](https://cve.now/CVE-2025-37831.md): cpufreq: apple-soc: Fix null-ptr-deref in apple\_soc\_cpufreq\_get\_rate() (no CVSS, Linux)
- [CVE-2025-37830](https://cve.now/CVE-2025-37830.md): cpufreq: scmi: Fix null-ptr-deref in scmi\_cpufreq\_get\_rate() (no CVSS, Linux)
- [CVE-2025-37829](https://cve.now/CVE-2025-37829.md): cpufreq: scpi: Fix null-ptr-deref in scpi\_cpufreq\_get\_rate() (no CVSS, Linux)
- [CVE-2025-37828](https://cve.now/CVE-2025-37828.md): scsi: ufs: mcq: Add NULL check in ufshcd\_mcq\_abort() (no CVSS, Linux)
- [CVE-2025-37827](https://cve.now/CVE-2025-37827.md): btrfs: zoned: return EIO on RAID1 block group write pointer mismatch (no CVSS, Linux)
- [CVE-2025-37826](https://cve.now/CVE-2025-37826.md): scsi: ufs: core: Add NULL check in ufshcd\_mcq\_compl\_pending\_transfer() (no CVSS, Linux)
- [CVE-2025-37825](https://cve.now/CVE-2025-37825.md): nvmet: fix out-of-bounds access in nvmet\_enable\_port (no CVSS, Linux)
- [CVE-2025-37824](https://cve.now/CVE-2025-37824.md): tipc: fix NULL pointer dereference in tipc\_mon\_reinit\_self() (no CVSS, Linux)
- [CVE-2025-37823](https://cve.now/CVE-2025-37823.md): net\_sched: hfsc: Fix a potential UAF in hfsc\_dequeue() too (CVSS 7.8, Linux)
- [CVE-2025-37822](https://cve.now/CVE-2025-37822.md): riscv: uprobes: Add missing fence.i after building the XOL buffer (CVSS 7.8, Linux)
- [CVE-2025-37821](https://cve.now/CVE-2025-37821.md): sched/eevdf: Fix se-\>slice being set to U64\_MAX and resulting crash (no CVSS, Linux)
- [CVE-2025-37820](https://cve.now/CVE-2025-37820.md): xen-netfront: handle NULL returned by xdp\_convert\_buff\_to\_frame() (CVSS 7.5, Linux)
- [CVE-2025-37819](https://cve.now/CVE-2025-37819.md): irqchip/gic-v2m: Prevent use after free of gicv2m\_get\_fwnode() (no CVSS, Linux)
- [CVE-2025-37818](https://cve.now/CVE-2025-37818.md): LoongArch: Return NULL from huge\_pte\_offset() for invalid PMD (no CVSS, Linux)
- [CVE-2025-37817](https://cve.now/CVE-2025-37817.md): mcb: fix a double free bug in chameleon\_parse\_gdd() (no CVSS, Linux)
- [CVE-2025-37816](https://cve.now/CVE-2025-37816.md): mei: vsc: Fix fortify-panic caused by invalid counted\_by() use (no CVSS, Linux)
- [CVE-2025-37815](https://cve.now/CVE-2025-37815.md): misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration (no CVSS, Linux)
- [CVE-2025-37814](https://cve.now/CVE-2025-37814.md): tty: Require CAP\_SYS\_ADMIN for all usages of TIOCL\_SELMOUSEREPORT (CVSS 7.8, Linux)
- [CVE-2025-37813](https://cve.now/CVE-2025-37813.md): usb: xhci: Fix invalid pointer dereference in Etron workaround (CVSS 7.8, Linux)
- [CVE-2025-37812](https://cve.now/CVE-2025-37812.md): usb: cdns3: Fix deadlock when using NCM gadget (no CVSS, Linux)
- [CVE-2025-37811](https://cve.now/CVE-2025-37811.md): usb: chipidea: ci\_hdrc\_imx: fix usbmisc handling (no CVSS, Linux)
- [CVE-2025-37810](https://cve.now/CVE-2025-37810.md): usb: dwc3: gadget: check that event count does not exceed event buffer length (no CVSS, Linux)
- [CVE-2025-37809](https://cve.now/CVE-2025-37809.md): usb: typec: class: Fix NULL pointer access (no CVSS, Linux)
- [CVE-2025-37808](https://cve.now/CVE-2025-37808.md): crypto: null - Use spin lock instead of mutex (no CVSS, Linux)
- [CVE-2025-37807](https://cve.now/CVE-2025-37807.md): bpf: Fix kmemleak warning for percpu hashmap (no CVSS, Linux)
- [CVE-2025-37806](https://cve.now/CVE-2025-37806.md): fs/ntfs3: Keep write operations atomic (no CVSS, Linux)
- [CVE-2025-37805](https://cve.now/CVE-2025-37805.md): sound/virtio: Fix cancel\_sync warnings on uninitialized work\_structs (CVSS 5.5, Linux)
- [CVE-2025-37803](https://cve.now/CVE-2025-37803.md): udmabuf: fix a buf size overflow issue during udmabuf creation (CVSS 7.8, Linux)
- [CVE-2025-37802](https://cve.now/CVE-2025-37802.md): ksmbd: fix WARNING "do not call blocking ops when !TASK\_RUNNING" (CVSS 7.5, Linux)
- [CVE-2025-37801](https://cve.now/CVE-2025-37801.md): spi: spi-imx: Add check for spi\_imx\_setupxfer() (CVSS 7.8, Linux)
- [CVE-2025-37800](https://cve.now/CVE-2025-37800.md): driver core: fix potential NULL pointer dereference in dev\_uevent() (CVSS 7.1, Linux)
- [CVE-2025-3419](https://cve.now/CVE-2025-3419.md): Event Manager, Events Calendar, Tickets, Registrations – Eventin \<= 4.0.26 - Unauthenticated Arbitrary File Read (CVSS 7.5, arraytics Eventin – Event Calendar, Event Registration, Tic…)
- [CVE-2024-13793](https://cve.now/CVE-2024-13793.md): Wolmart | Multi-Vendor Marketplace WooCommerce Theme \<= 1.8.11 - Unauthenticated Arbitrary Shortcode Execution in wolmart\_loadmore (CVSS 7.3, don-themes Wolmart | Multi-Vendor Marketplace WooCommerce T…)
- [CVE-2023-31585](https://cve.now/CVE-2023-31585.md): Grocery-CMS-PHP-Restful-API v1.3 is vulnerable to File Upload via /admin/add-category.php. (CVSS 9.8)
- [CVE-2023-51295](https://cve.now/CVE-2023-51295.md): PHPJabbers Event Booking Calendar v4.0 is vulnerable to Multiple HTML Injection in the "name, plugin\_sms\_api\_key, plugin\_sms\_country\_code, t (CVSS 6.5)
- [CVE-2023-51328](https://cve.now/CVE-2023-51328.md): PHPJabbers Cleaning Business Software v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "c\_name, name" parameters. (CVSS 5.4)
- [CVE-2025-26842](https://cve.now/CVE-2025-26842.md): An issue was discovered in Znuny through 7.1.3. (CVSS 7.5)
- [CVE-2025-26844](https://cve.now/CVE-2025-26844.md): An issue was discovered in Znuny through 7.1.3. (CVSS 9.8)
- [CVE-2025-26845](https://cve.now/CVE-2025-26845.md): An Eval Injection issue was discovered in Znuny through 7.1.3. (CVSS 9.8)
- [CVE-2025-26847](https://cve.now/CVE-2025-26847.md): An issue was discovered in Znuny before 7.1.5. (CVSS 9.1)
- [CVE-2025-28073](https://cve.now/CVE-2025-28073.md): phpList before 3.6.15 is vulnerable to Reflected Cross-Site Scripting (XSS) via the /lists/dl.php endpoint. (CVSS 6.1)
- [CVE-2025-28074](https://cve.now/CVE-2025-28074.md): phpList before 3.6.15 is vulnerable to Cross-Site Scripting (XSS) due to improper input sanitization in lt.php. (CVSS 6.1)
- [CVE-2025-32873](https://cve.now/CVE-2025-32873.md): An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1. (CVSS 5.3, djangoproject Django · django)
- [CVE-2025-43926](https://cve.now/CVE-2025-43926.md): An issue was discovered in Znuny through 6.5.14 and 7.x through 7.1.6. (CVSS 6.1)
- [CVE-2025-44021](https://cve.now/CVE-2025-44021.md): OpenStack Ironic before 29.0.1 can write unintended files to a target node disk during image handling (if a deployment was performed via the (CVSS 2.8, OpenStack Ironic · ironic)
- [CVE-2025-44023](https://cve.now/CVE-2025-44023.md): An issue in dlink DNS-320 v.1.00 and DNS-320LW v.1.01.0914.20212 allows an attacker to execute arbitrary via the account\_mgr.cgi-\>cgi\_chg\_ad (CVSS 6.5)
- [CVE-2025-45787](https://cve.now/CVE-2025-45787.md): TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow viathe comment parameter in setIpPortFilterRules. (CVSS 6.5)
- [CVE-2025-45788](https://cve.now/CVE-2025-45788.md): TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the comment parameter in setMacFilterRules. (CVSS 6.5)
- [CVE-2025-45789](https://cve.now/CVE-2025-45789.md): TOTOLINK A3100R V5.9c.1527 is vulnerable to buffer overflow via the urlKeyword parameter in setParentalRules. (CVSS 6.5)
- [CVE-2025-45790](https://cve.now/CVE-2025-45790.md): TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the priority parameter in the setMacQos interface of /lib/cste\_modules/firew (CVSS 6.5)
- [CVE-2025-45797](https://cve.now/CVE-2025-45797.md): TOTOlink A950RG V4.1.2cu.5204\_B20210112 contains a buffer overflow vulnerability. (CVSS 6.5)
- [CVE-2025-45798](https://cve.now/CVE-2025-45798.md): A command execution vulnerability exists in the TOTOLINK A950RG V4.1.2cu.5204\_B20210112. (CVSS 6.5)
- [CVE-2025-45818](https://cve.now/CVE-2025-45818.md): Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/master\_file/item\_status.php. (CVSS 6.5)
- [CVE-2025-45819](https://cve.now/CVE-2025-45819.md): Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/master\_file/author.php. (CVSS 6.5)
- [CVE-2025-45820](https://cve.now/CVE-2025-45820.md): Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/bibliography/pop\_author\_edit.php. (CVSS 6.5)
- [CVE-2025-45841](https://cve.now/CVE-2025-45841.md): TOTOLINK NR1800X V9.1.0u.6681\_B20230703 was discovered to contain an authenticated stack overflow via the text parameter in the setSmsCfg fu (CVSS 6.5)
- [CVE-2025-45842](https://cve.now/CVE-2025-45842.md): TOTOLINK NR1800X V9.1.0u.6681\_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEas (CVSS 8.8)
- [CVE-2025-45843](https://cve.now/CVE-2025-45843.md): TOTOLINK NR1800X V9.1.0u.6681\_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiGuest (CVSS 8.8)
- [CVE-2025-45844](https://cve.now/CVE-2025-45844.md): TOTOLINK NR1800X V9.1.0u.6681\_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiBasic (CVSS 8.8)
- [CVE-2025-45845](https://cve.now/CVE-2025-45845.md): TOTOLINK NR1800X V9.1.0u.6681\_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEas (CVSS 8.8)
- [CVE-2025-45846](https://cve.now/CVE-2025-45846.md): ALFA AIP-W512 v3.2.2.2.3 was discovered to contain an authenticated stack overflow via the torrentsindex parameter in the formBTClinetSettin (CVSS 8.8)
- [CVE-2025-45847](https://cve.now/CVE-2025-45847.md): ALFA AIP-W512 v3.2.2.2.3 was discovered to contain an authenticated stack overflow via the targetAPMac parameter in the formWsc function. (CVSS 6.5)
- [CVE-2025-47729](https://cve.now/CVE-2025-47729.md): The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which i (CVSS 1.9, KEV, TeleMessage archiving backend)
- [CVE-2025-47730](https://cve.now/CVE-2025-47730.md): The TeleMessage archiving backend through 2025-05-05 accepts API calls (to request an authentication token) from the TM SGNL (aka Archive Si (CVSS 4.8, TeleMessage archiving backend)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-05-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.