CVEs published May 10, 2025
33 CVEs were published on May 10, 2025: 0 critical, 7 high.
- Published
- 33
- Critical
- 0
- High
- 7
- Medium
- 24
- Low
- 1
- Unrated
- 1
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- GNU PSPP
- 3
- Campcodes Online Food Ordering System
- 2
- Campcodes Sales and Inventory System
- 2
- cozyvision1 SMS Alert – SMS & OTP for WooCommerce, Order No…
- 2
- PHPGurukul e-Diary Management System
- 2
- BlueWave Checkmate
- 1
- Catalyst User Key Authentication Plugin
- 1
- Changjietong UFIDA CRM
- 1
- code-projects Album Management System
- 1
- code-projects Hotel Management System
- 1
High 7
- CVE-2025-4525Discord WINSTA.dll uncontrolled search pathDiscord
- CVE-2025-1752Denial of Service in run-llama/llama_indexrun-llama/llama_index · llama-index
- CVE-2025-3876SMS Alert Order Notifications – WooCommerce <= 3.8.1 - Authenticated (Subscriber+) Privilege Escalation via handleWpLoginCreateUserAction Functioncozyvision1 SMS Alert – SMS & OTP for WooCommerce, Order No…
- CVE-2025-2158WordPress Review Plugin: The Ultimate Solution for Building a Review Website <= 5.3.5 - Authenticated (Contributor+) Local File Inclusion via Post Custom Fieldsmythemeshop WordPress Review Plugin: The Ultimate Solution…
- CVE-2025-4496TOTOLINK T10/A3100R/A950RG/A800R/N600R/A3000RU/A810R cstecgi.cgi CloudACMunualUpdate buffer overflowTOTOLINK T10 · TOTOLINK A3100R +5
- CVE-2025-1137IBM Storage Scale command injectionIBM Storage Scale
- CVE-2025-47817In BlueWave Checkmate through 2.0.2 before b387eba, a profile edit request can include a role parameter.BlueWave Checkmate
Medium, low and unrated 26
- CVE-2025-4515Zylon PrivateGPT settings.yaml cross-domain policyZylon PrivateGPT
- CVE-2025-4514Zhengzhou Jiuhua Electronic Technology mayicms javascript.php sql injectionZhengzhou Jiuhua Electronic Technology mayicms
- CVE-2025-4513Catalyst User Key Authentication Plugin Logout logout.php redirectCatalyst User Key Authentication Plugin
- CVE-2025-4512Inetum IODAS app.jsp cross site scriptingInetum IODAS
- CVE-2025-4511vector4wang spring-boot-quick quick-img2txt Img2TxtController.java ResponseEntity path traversalvector4wang spring-boot-quick
- CVE-2025-4510Changjietong UFIDA CRM optntyday.php sql injectionChangjietong UFIDA CRM
- CVE-2025-4509PHPGurukul e-Diary Management System manage-notes.php sql injectionPHPGurukul e-Diary Management System
- CVE-2025-4508PHPGurukul e-Diary Management System my-profile.php sql injectionPHPGurukul e-Diary Management System
- CVE-2025-4507Campcodes Online Food Ordering System add-item.php sql injectionCampcodes Online Food Ordering System
- CVE-2025-4506Campcodes Online Food Ordering System menu-router.php sql injectionCampcodes Online Food Ordering System
- CVE-2025-4505PHPGurukul Apartment Visitors Management System category.php sql injectionPHPGurukul Apartment Visitors Management System
- CVE-2025-4504SourceCodester Online College Library System index.php sql injectionSourceCodester Online College Library System
- CVE-2023-53145Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race conditionLinux
- CVE-2025-4503Campcodes Sales and Inventory System customer_update.php sql injectionCampcodes Sales and Inventory System
- CVE-2025-4502Campcodes Sales and Inventory System creditor_add.php sql injectionCampcodes Sales and Inventory System
- CVE-2025-4501code-projects Album Management System Search Albums searchalbum stack-based overflowcode-projects Album Management System
- CVE-2025-4500code-projects Hotel Management System Edit Room edit stack-based overflowcode-projects Hotel Management System
- CVE-2025-4499code-projects Simple Hospital Management System Add Information add stack-based overflowcode-projects Simple Hospital Management System
- CVE-2025-3878SMS Alert Order Notifications – WooCommerce <= 3.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via sa_verify Shortcodecozyvision1 SMS Alert – SMS & OTP for WooCommerce, Order No…
- CVE-2025-4498code-projects Simple Bus Reservation System Install Bus install stack-based overflowcode-projects Simple Bus Reservation System
- CVE-2025-4497code-projects Simple Banking System Sign In buffer overflowcode-projects Simple Banking System
- CVE-2025-2944Jeg Elementor Kit <= 2.6.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Button and Countdown Widgetsjegtheme Jeg Kit for Elementor – Powerful Addons for Elemen…
- CVE-2025-4495JAdmin-JAVA JAdmin save cross site scriptingJAdmin-JAVA JAdmin
- CVE-2025-47814libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from spv_GNU PSPP
- CVE-2025-47815libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from zip_GNU PSPP
- CVE-2025-47816libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause an spvxml-helpers.c spvxml_parse_attributes out-of-bounds read, related tGNU PSPP