# CVEs published 2025-05-16

172 CVEs were published on May 16, 2025: 4 critical, 43 high. Days are UTC.

- [CVE-2025-4813](https://cve.now/CVE-2025-4813.md): PHPGurukul Human Metapneumovirus Testing Management System edit-phlebotomist.php sql injection (CVSS 6.9, PHPGurukul Human Metapneumovirus Testing Management System)
- [CVE-2025-4812](https://cve.now/CVE-2025-4812.md): PHPGurukul Human Metapneumovirus Testing Management System profile.php sql injection (CVSS 6.9, PHPGurukul Human Metapneumovirus Testing Management System)
- [CVE-2025-4811](https://cve.now/CVE-2025-4811.md): CodeAstro Pharmacy Management System Login index.php sql injection (CVSS 6.9, CodeAstro Pharmacy Management System)
- [CVE-2022-4363](https://cve.now/CVE-2022-4363.md): Wholesale Market \<= 2.2.2 - Settings Update via CSRF (CVSS 6.5, Wholesale Market)
- [CVE-2025-4810](https://cve.now/CVE-2025-4810.md): Tenda AC7 SetRebootTimer formSetRebootTimer stack-based overflow (CVSS 8.7, Tenda AC7)
- [CVE-2025-4805](https://cve.now/CVE-2025-4805.md): WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Acces Portal Configuration (CVSS 4.8, WatchGuard Fireware OS)
- [CVE-2025-4804](https://cve.now/CVE-2025-4804.md): WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Hotpot Configuration (CVSS 4.8, WatchGuard Fireware OS)
- [CVE-2025-4809](https://cve.now/CVE-2025-4809.md): Tenda AC7 setMacFilterCfg fromSafeSetMacFilter stack-based overflow (CVSS 8.7, Tenda AC7)
- [CVE-2025-4808](https://cve.now/CVE-2025-4808.md): PHPGurukul Park Ticketing Management System add-normal-ticket.php sql injection (CVSS 5.3, PHPGurukul Park Ticketing Management System)
- [CVE-2025-4802](https://cve.now/CVE-2025-4802.md): Untrusted LD\_LIBRARY\_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of (CVSS 7.8, The GNU C Library glibc)
- [CVE-2025-4807](https://cve.now/CVE-2025-4807.md): SourceCodester Online Student Clearance System exposure of information through directory listing (CVSS 6.9, SourceCodester Online Student Clearance System)
- [CVE-2025-22233](https://cve.now/CVE-2025-22233.md): Spring Framework DataBinder Case Sensitive Match Exception (CVSS 3.1, Spring Framework · org.springframework:spring-context)
- [CVE-2025-4806](https://cve.now/CVE-2025-4806.md): SourceCodester/oretnom23 Stock Management System view\_bo sql injection (CVSS 5.3, SourceCodester Stock Management System · oretnom23 Stock Ma…)
- [CVE-2025-4795](https://cve.now/CVE-2025-4795.md): gongfuxiang schoolcms index.php SaveInfo sql injection (CVSS 5.1, gongfuxiang schoolcms)
- [CVE-2025-4794](https://cve.now/CVE-2025-4794.md): PHPGurukul Online Course Registration news.php sql injection (CVSS 6.9, PHPGurukul Online Course Registration)
- [CVE-2025-4793](https://cve.now/CVE-2025-4793.md): PHPGurukul Online Course Registration edit-student-profile.php sql injection (CVSS 6.9, PHPGurukul Online Course Registration)
- [CVE-2025-4476](https://cve.now/CVE-2025-4476.md): Libsoup: null pointer dereference in libsoup may lead to denial of service (CVSS 4.3, libsoup · Red Hat Enterprise Linux)
- [CVE-2025-4792](https://cve.now/CVE-2025-4792.md): FreeFloat FTP Server MDELETE Command buffer overflow (CVSS 6.9, FreeFloat FTP Server)
- [CVE-2025-4791](https://cve.now/CVE-2025-4791.md): FreeFloat FTP Server HASH Command buffer overflow (CVSS 6.9, FreeFloat FTP Server)
- [CVE-2025-4790](https://cve.now/CVE-2025-4790.md): FreeFloat FTP Server GLOB Command buffer overflow (CVSS 6.9, FreeFloat FTP Server)
- [CVE-2025-4789](https://cve.now/CVE-2025-4789.md): FreeFloat FTP Server LCD Command buffer overflow (CVSS 6.9, FreeFloat FTP Server)
- [CVE-2025-4788](https://cve.now/CVE-2025-4788.md): FreeFloat FTP Server DELETE Command buffer overflow (CVSS 6.9, FreeFloat FTP Server)
- [CVE-2025-4787](https://cve.now/CVE-2025-4787.md): SourceCodester/oretnom23 Stock Management System view\_sale sql injection (CVSS 5.3, SourceCodester Stock Management System · oretnom23 Stock Ma…)
- [CVE-2025-31062](https://cve.now/CVE-2025-31062.md): WordPress Wishlist plugin \<= 2.1.0 - Sensitive Data Exposure Vulnerability (CVSS 4.3, redqteam Wishlist)
- [CVE-2025-31063](https://cve.now/CVE-2025-31063.md): WordPress Wishlist plugin \<= 2.1.0 - Broken Access Control Vulnerability (CVSS 4.3, redqteam Wishlist)
- [CVE-2025-31065](https://cve.now/CVE-2025-31065.md): WordPress Rozario \<= 1.4 - Broken Access Control Vulnerability (CVSS 5.3, themeton Rozario)
- [CVE-2025-31066](https://cve.now/CVE-2025-31066.md): WordPress Acerola theme \<= 1.6.5 - Broken Access Control Vulnerability (CVSS 5.3, themeton Acerola)
- [CVE-2025-31068](https://cve.now/CVE-2025-31068.md): WordPress Seven Stars \<= 1.4.4 - Cross Site Request Forgery (CSRF) Vulnerability (CVSS 4.3, themeton Seven Stars)
- [CVE-2025-31071](https://cve.now/CVE-2025-31071.md): WordPress HotStar – Multi-Purpose Business Theme \<= 1.4 - Broken Access Control Vulnerability (CVSS 5.3, themeton HotStar – Multi-Purpose Business Theme)
- [CVE-2025-31630](https://cve.now/CVE-2025-31630.md): WordPress The Business \<= 1.6.1 - Broken Access Control Vulnerability (CVSS 5.3, themeton The Business)
- [CVE-2025-31637](https://cve.now/CVE-2025-31637.md): WordPress SHOUT plugin \<= 3.5.3 - SQL Injection Vulnerability (CVSS 8.5, LambertGroup SHOUT)
- [CVE-2025-31639](https://cve.now/CVE-2025-31639.md): WordPress Spare \<= 1.7 - Cross Site Request Forgery (CSRF) Vulnerability (CVSS 4.3, themeton Spare)
- [CVE-2025-31640](https://cve.now/CVE-2025-31640.md): WordPress Magic Responsive Slider and Carousel WordPress plugin \< 1.6 - SQL Injection Vulnerability (CVSS 8.5, LambertGroup Magic Responsive Slider and Carousel WordPress)
- [CVE-2025-31641](https://cve.now/CVE-2025-31641.md): WordPress UberSlider plugin \<= 2.3 - SQL Injection Vulnerability (CVSS 8.5, LambertGroup UberSlider)
- [CVE-2025-31915](https://cve.now/CVE-2025-31915.md): WordPress Pixel Form BuilderPlugin & Autoresponder plugin \<= 1.0.3 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 5.4, kamleshyadav Pixel WordPress Form BuilderPlugin & Autorespo…)
- [CVE-2025-31921](https://cve.now/CVE-2025-31921.md): WordPress WP Ultimate Tours Builder plugin \<= 1.055 - Cross Site Request Forgery (CSRF) Vulnerability (CVSS 4.3, loopus WP Ultimate Tours Builder)
- [CVE-2025-31922](https://cve.now/CVE-2025-31922.md): WordPress CSS3 Accordions for WordPress plugin \<= 3.0 - CSRF to Stored XSS vulnerability (CVSS 7.1, QuanticaLabs CSS3 Accordions for WordPress)
- [CVE-2025-31923](https://cve.now/CVE-2025-31923.md): WordPress CSS3 Accordions for WordPress plugin \<= 3.0 - Broken Access Control Vulnerability (CVSS 5.4, QuanticaLabs CSS3 Accordions for WordPress)
- [CVE-2025-31926](https://cve.now/CVE-2025-31926.md): WordPress Sticky Radio Player plugin \<= 3.4 - SQL Injection Vulnerability (CVSS 8.5, LambertGroup Sticky Radio Player)
- [CVE-2025-31928](https://cve.now/CVE-2025-31928.md): WordPress Multimedia Responsive Carousel with Image Video Audio Support plugin \<= 2.6.0 - SQL Injection Vulnerability (CVSS 8.5, LambertGroup Multimedia Responsive Carousel with Image Vide…)
- [CVE-2025-32180](https://cve.now/CVE-2025-32180.md): WordPress Product Carousel For WooCommerce – WoorouSell plugin \<= 1.1.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, mojofywp Product Carousel For WooCommerce – WoorouSell)
- [CVE-2025-32245](https://cve.now/CVE-2025-32245.md): WordPress Featured Posts Scroll plugin \<= 1.25 - CSRF to Stored Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Chaser324 Featured Posts Scroll)
- [CVE-2025-32287](https://cve.now/CVE-2025-32287.md): WordPress Responsive HTML5 Audio Player PRO With Playlist plugin \<= 3.5.7 - SQL Injection Vulnerability (CVSS 8.5, LambertGroup Responsive HTML5 Audio Player PRO With Playlist)
- [CVE-2025-32290](https://cve.now/CVE-2025-32290.md): WordPress Sticky HTML5 Music Player plugin \<= 3.1.6 - SQL Injection Vulnerability (CVSS 8.5, LambertGroup Sticky HTML5 Music Player)
- [CVE-2025-32295](https://cve.now/CVE-2025-32295.md): WordPress Salon Booking Wordpress plugin \<= 10.10.2 - Broken Access Control vulnerability (CVSS 4.3, wordpresschef Salon Booking Pro)
- [CVE-2025-32296](https://cve.now/CVE-2025-32296.md): WordPress Simple Link Directory Pro plugin \< 14.8.1 - Broken Access Control Vulnerability (CVSS 5.3, quantumcloud Simple Link Directory)
- [CVE-2025-32299](https://cve.now/CVE-2025-32299.md): WordPress QuickCal plugin \<= 1.0.15 - Sensitive Data Exposure Vulnerability (CVSS 4.3, Themovation QuickCal - Appointment Booking Calendar for Wor…)
- [CVE-2025-32301](https://cve.now/CVE-2025-32301.md): WordPress CountDown Pro WP Plugin \<= 2.7 - SQL Injection Vulnerability (CVSS 8.5, LambertGroup CountDown Pro WP Plugin)
- [CVE-2025-32306](https://cve.now/CVE-2025-32306.md): WordPress Radio Player Shoutcast & Icecast theme \<= 4.4.6 - SQL Injection Vulnerability (CVSS 8.5, LambertGroup Radio Player Shoutcast & Icecast WordPress Plu…)
- [CVE-2025-32307](https://cve.now/CVE-2025-32307.md): WordPress Chameleon HTML5 Audio Player With/Without Playlist plugin \<= 3.5.6 - SQL Injection Vulnerability (CVSS 8.5, LambertGroup Chameleon HTML5 Audio Player With/Without Play…)
- [CVE-2025-32310](https://cve.now/CVE-2025-32310.md): WordPress QuickCal plugin \<= 1.0.15 - CSRF to Privilege Escalation vulnerability (CVSS 8.8, ThemeMove QuickCal - Appointment Booking Calendar for WordP…)
- [CVE-2025-32643](https://cve.now/CVE-2025-32643.md): WordPress WPGYM Plugin \<= 65.0 - SQL Injection vulnerability (CVSS 9.3, mojoomla WPGYM)
- [CVE-2025-39481](https://cve.now/CVE-2025-39481.md): WordPress Eventer plugin \< 3.11.4 - SQL Injection vulnerability (CVSS 9.3, imithemes Eventer)
- [CVE-2025-39482](https://cve.now/CVE-2025-39482.md): WordPress Eventer plugin \< 3.11.4 - Broken Access Control vulnerability (CVSS 4.3, imithemes Eventer)
- [CVE-2025-39491](https://cve.now/CVE-2025-39491.md): WordPress WHMpress plugin \<= 6.2-revision-9 - Local File Inclusion vulnerability (CVSS 8.1, WHMpress)
- [CVE-2025-39492](https://cve.now/CVE-2025-39492.md): WordPress WHMpress plugin \<= 6.2-revision-9 - Local File Inclusion vulnerability (CVSS 7.5, WHMpress)
- [CVE-2025-39493](https://cve.now/CVE-2025-39493.md): WordPress Rankie plugin \< 1.8.2 - Broken Access Control Vulnerability (CVSS 4.3, ValvePress Rankie)
- [CVE-2025-39507](https://cve.now/CVE-2025-39507.md): WordPress Nasa Core Plugin \<= 6.4.4 - Local File Inclusion vulnerability (CVSS 7.5, NasaTheme Nasa Core)
- [CVE-2025-39509](https://cve.now/CVE-2025-39509.md): WordPress TNC FlipBook plugin \<= 12.1.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, ThemeNcode TNC FlipBook)
- [CVE-2025-39511](https://cve.now/CVE-2025-39511.md): WordPress Pinterest Automatic Pin plugin \<= 4.19.0 - Broken Access Control Vulnerability (CVSS 4.3, ValvePress Pinterest Automatic Pin)
- [CVE-2025-39537](https://cve.now/CVE-2025-39537.md): WordPress Better Customer List for WooCommerce Plugin \<= 1.2.3 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, Blaze Concepts Better Customer List for WooCommerce)
- [CVE-2025-46464](https://cve.now/CVE-2025-46464.md): WordPress Ads Pro plugin \<= 5.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, scripteo Ads Pro)
- [CVE-2025-47534](https://cve.now/CVE-2025-47534.md): WordPress Wordpress Auto Spinner plugin \<= 3.25.0 - Broken Access Control Vulnerability (CVSS 4.3, ValvePress Wordpress Auto Spinner)
- [CVE-2025-47556](https://cve.now/CVE-2025-47556.md): WordPress CSS3 Compare Pricing Tables for WordPress plugin \<= 11.6 - Broken Access Control Vulnerability (CVSS 5.4, QuanticaLabs CSS3 Compare Pricing Tables for WordPress)
- [CVE-2025-47557](https://cve.now/CVE-2025-47557.md): WordPress MapSVG plugin \<= 8.5.31 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, RomanCode MapSVG)
- [CVE-2025-47560](https://cve.now/CVE-2025-47560.md): WordPress MapSVG plugin \< 8.6.13 - Broken Access Control Vulnerability (CVSS 5.0, RomanCode MapSVG)
- [CVE-2025-47562](https://cve.now/CVE-2025-47562.md): WordPress MapSVG plugin \<= 8.5.34 - Content Injection Vulnerability (CVSS 5.3, RomanCode MapSVG)
- [CVE-2025-47563](https://cve.now/CVE-2025-47563.md): WordPress CURCY plugin \<= 2.3.7 - Arbitrary Shortcode Execution vulnerability (CVSS 5.3, villatheme CURCY)
- [CVE-2025-47564](https://cve.now/CVE-2025-47564.md): WordPress EventON plugin \<= 4.9.8 - Broken Access Control vulnerability (CVSS 5.3, ashanjay EventON)
- [CVE-2025-47567](https://cve.now/CVE-2025-47567.md): WordPress Video Player & FullScreen Video Background plugin \<= 2.4.1 - SQL Injection vulnerability (CVSS 7.6, LambertGroup Video Player & FullScreen Video Background)
- [CVE-2025-47693](https://cve.now/CVE-2025-47693.md): WordPress Fat Services Booking plugin \<= 5.5 - Local File Inclusion vulnerability (CVSS 7.5, roninwp FAT Services Booking)
- [CVE-2025-48146](https://cve.now/CVE-2025-48146.md): WordPress SEO Flow by LupsOnline plugin \<= 2.2.1 - CSRF to Stored XSS vulnerability (CVSS 7.1, Michael Lups SEO Flow by LupsOnline)
- [CVE-2025-48144](https://cve.now/CVE-2025-48144.md): WordPress Import Export For WooCommerce plugin \<= 1.6.2 - CSRF to Stored XSS vulnerability (CVSS 7.1, sidngr Import Export For WooCommerce)
- [CVE-2025-48138](https://cve.now/CVE-2025-48138.md): WordPress BERTHA AI plugin \<= 1.13 - Broken Access Control Vulnerability (CVSS 4.3, Bertha AI – Andrew Palmer BERTHA AI)
- [CVE-2025-48137](https://cve.now/CVE-2025-48137.md): WordPress Interview plugin \<= 1.01 - SQL Injection Vulnerability (CVSS 8.5, proxymis Interview)
- [CVE-2025-48136](https://cve.now/CVE-2025-48136.md): WordPress Mortgage Calculator Estatik plugin \<= 2.0.12 - Local File Inclusion Vulnerability (CVSS 7.5, Mortgage Calculator Estatik)
- [CVE-2025-48135](https://cve.now/CVE-2025-48135.md): WordPress Aptivada for WP plugin \<= 2.0.0 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5, aptivadadev Aptivada for WP)
- [CVE-2025-48134](https://cve.now/CVE-2025-48134.md): WordPress WP Tabs plugin \<= 2.2.12 - PHP Object Injection Vulnerability (CVSS 7.2, ShapedPlugin WP Tabs)
- [CVE-2025-48132](https://cve.now/CVE-2025-48132.md): WordPress X Addons for Elementor plugin \<= 1.0.16 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5, pencilwp X Addons for Elementor)
- [CVE-2025-48131](https://cve.now/CVE-2025-48131.md): WordPress UltraAddons Elementor Lite plugin \<= 2.0.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Saiful Islam UltraAddons Elementor Lite)
- [CVE-2025-48128](https://cve.now/CVE-2025-48128.md): WordPress Sharespine Woocommerce Connector plugin \<= 4.7.55 - Broken Access Control Vulnerability (CVSS 4.3, Sharespine Woocommerce Connector)
- [CVE-2025-48127](https://cve.now/CVE-2025-48127.md): WordPress Push notification for Mobile and Web app plugin \<= 2.0.3 - Broken Access Control vulnerability (CVSS 6.5, App Cheap Push notification for Mobile and Web app)
- [CVE-2025-48121](https://cve.now/CVE-2025-48121.md): WordPress WP Notes Widget plugin \<= 1.0.6 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5, Steve Puddick WP Notes Widget)
- [CVE-2025-48120](https://cve.now/CVE-2025-48120.md): WordPress MapSVG Lite plugin \<= 8.6.9 - Arbitrary Shortcode Execution vulnerability (CVSS 5.3, RomanCode MapSVG)
- [CVE-2025-48119](https://cve.now/CVE-2025-48119.md): WordPress RS WP Book Showcase plugin \<= 6.7.59 - Content Injection vulnerability (CVSS 5.3, RS WP THEMES RS WP Book Showcase)
- [CVE-2025-48117](https://cve.now/CVE-2025-48117.md): WordPress WooCommerce POS plugin \<= 1.7.8 - Broken Access Control Vulnerability (CVSS 5.3, kilbot WooCommerce POS)
- [CVE-2025-48116](https://cve.now/CVE-2025-48116.md): WordPress EventON plugin \<= 2.4.4 - Broken Access Control Vulnerability (CVSS 5.3, Ashan Perera EventON)
- [CVE-2025-48115](https://cve.now/CVE-2025-48115.md): WordPress ValidateCertify plugin \<= 1.6.4 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3, Javier Revilla ValidateCertify)
- [CVE-2025-48114](https://cve.now/CVE-2025-48114.md): WordPress ShayanWeb Admin FontChanger plugin \<= 1.9.1 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability (CVSS 7.1, Shayan Farhang Pazhooh ShayanWeb Admin FontChanger)
- [CVE-2025-48113](https://cve.now/CVE-2025-48113.md): WordPress Broadstreet plugin \<= 1.51.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Broadstreet Ads)
- [CVE-2025-48112](https://cve.now/CVE-2025-48112.md): WordPress Dot html,php,xml etc pages plugin \<= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, karimmughal Dot html,php,xml etc pages)
- [CVE-2025-48080](https://cve.now/CVE-2025-48080.md): WordPress Uncanny Toolkit for LearnDash plugin \<= 3.7.0.2 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5, Uncanny Owl Uncanny Toolkit for LearnDash)
- [CVE-2025-48079](https://cve.now/CVE-2025-48079.md): WordPress ProfileGrid plugin \<= 5.9.5.1 - Broken Access Control Vulnerability (CVSS 4.3, Metagauss ProfileGrid)
- [CVE-2025-4786](https://cve.now/CVE-2025-4786.md): SourceCodester/oretnom23 Stock Management System view\_return sql injection (CVSS 5.3, SourceCodester Stock Management System · oretnom23 Stock Ma…)
- [CVE-2025-40906](https://cve.now/CVE-2025-40906.md): BSON::XS versions 0.8.4 and earlier for Perl includes a bundled libbson 1.1.7, which has several vulnerabilities (CVSS 9.8, MONGODB BSON::XS)
- [CVE-2025-4785](https://cve.now/CVE-2025-4785.md): PHPGurukul Daily Expense Tracker System user-profile.php sql injection (CVSS 6.9, PHPGurukul Daily Expense Tracker System)
- [CVE-2025-47794](https://cve.now/CVE-2025-47794.md): Nextcloud Server vulnerable to insecure temporary file creation, race with write access and permission (CVSS 2.6, nextcloud security-advisories)
- [CVE-2025-47793](https://cve.now/CVE-2025-47793.md): Nextcloud Server and Groupfolders app vulnerable to bypass of group folder quota limit using attachment in text file (CVSS 4.3, nextcloud security-advisories)
- [CVE-2025-4782](https://cve.now/CVE-2025-4782.md): SourceCodester/oretnom23 Stock Management System view\_receiving sql injection (CVSS 5.3, SourceCodester Stock Management System · oretnom23 Stock Ma…)
- [CVE-2025-4781](https://cve.now/CVE-2025-4781.md): PHPGurukul Park Ticketing Management System forgot-password.php sql injection (CVSS 5.3, PHPGurukul Park Ticketing Management System)
- [CVE-2025-4478](https://cve.now/CVE-2025-4478.md): Gnome-remote-desktop: freerdp: unauthenticated rdp packet causes segfault in freerdp leading to denial of service (CVSS 6.5, freerdp · Red Hat Enterprise Linux)
- [CVE-2025-47792](https://cve.now/CVE-2025-47792.md): Nextcloud Desktop 3rdparty applications can create share links via socket API (CVSS 5.0, nextcloud security-advisories)
- [CVE-2025-47791](https://cve.now/CVE-2025-47791.md): Nextcloud Server's test remote endpoint is not rate limited (CVSS 4.3, nextcloud security-advisories)
- [CVE-2025-47790](https://cve.now/CVE-2025-47790.md): Nextcloud Server doesn't request second factor after session timeout (CVSS 6.4, nextcloud security-advisories)
- [CVE-2025-4780](https://cve.now/CVE-2025-4780.md): PHPGurukul Park Ticketing Management System foreigner-search.php sql injection (CVSS 5.3, PHPGurukul Park Ticketing Management System)
- [CVE-2025-32962](https://cve.now/CVE-2025-32962.md): Flask-AppBuilder open redirect vulnerability using HTTP host injection (CVSS 4.3, dpgaspar Flask-AppBuilder · flask-appbuilder)
- [CVE-2025-4600](https://cve.now/CVE-2025-4600.md): HTTP Request Smuggling in Google Cloud Classic Application Load Balancer due to Improper Chunked Encoding Validation (CVSS 8.7, Google Cloud Classic Application Load Balancer)
- [CVE-2025-4778](https://cve.now/CVE-2025-4778.md): PHPGurukul Park Ticketing Management System normal-search.php sql injection (CVSS 5.3, PHPGurukul Park Ticketing Management System)
- [CVE-2025-4211](https://cve.now/CVE-2025-4211.md): Improper Link Resolution Before File Access in QFileSystemEngine on Windows (CVSS 7.3, Qt)
- [CVE-2025-40907](https://cve.now/CVE-2025-40907.md): FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library (CVSS 5.3, ETHER FCGI)
- [CVE-2025-37890](https://cve.now/CVE-2025-37890.md): net\_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CVSS 7.8, Linux)
- [CVE-2025-4777](https://cve.now/CVE-2025-4777.md): PHPGurukul Park Ticketing Management System view-foreigner-ticket.php sql injection (CVSS 5.3, PHPGurukul Park Ticketing Management System)
- [CVE-2025-40629](https://cve.now/CVE-2025-40629.md): Path Traversal vulnerability in PNETLab (CVSS 8.7, PNETLab)
- [CVE-2025-4773](https://cve.now/CVE-2025-4773.md): PHPGurukul Online Course Registration level.php sql injection (CVSS 6.9, PHPGurukul Online Course Registration)
- [CVE-2025-2306](https://cve.now/CVE-2025-2306.md): Improper Access Control vulnerability in LIVE CONTRACT (CVSS 5.9, SYNCPILOT LIVE CONTRACT)
- [CVE-2025-2305](https://cve.now/CVE-2025-2305.md): Local file inclusion vulnerability in LIVE CONTRACT (CVSS 8.6, SYNCPILOT LIVE CONTRACT)
- [CVE-2025-4772](https://cve.now/CVE-2025-4772.md): PHPGurukul Online Course Registration department.php sql injection (CVSS 6.9, PHPGurukul Online Course Registration)
- [CVE-2025-4771](https://cve.now/CVE-2025-4771.md): PHPGurukul Online Course Registration course.php sql injection (CVSS 6.9, PHPGurukul Online Course Registration)
- [CVE-2025-40632](https://cve.now/CVE-2025-40632.md): Cross-site scripting (XSS) vulnerability in IceWarp Mail Server (CVSS 2.0, Icewarp Mail Server)
- [CVE-2025-40631](https://cve.now/CVE-2025-40631.md): HTTP host header injection vulnerability in IceWarp Mail Server (CVSS 2.0, Icewarp Mail Server)
- [CVE-2025-40630](https://cve.now/CVE-2025-40630.md): Open redirection vulnerability in IceWarp Mail Server (CVSS 5.1, Icewarp Mail Server)
- [CVE-2025-4770](https://cve.now/CVE-2025-4770.md): PHPGurukul Park Ticketing Management System view-normal-ticket.php sql injection (CVSS 5.3, PHPGurukul Park Ticketing Management System)
- [CVE-2025-4769](https://cve.now/CVE-2025-4769.md): CBEWIN Anytxt Searcher ATService.exe uncontrolled search path (CVSS 7.3, CBEWIN Anytxt Searcher)
- [CVE-2025-4768](https://cve.now/CVE-2025-4768.md): feng\_ha\_ha/megagao ssm-erp/production\_ssm PictureServiceImpl.java uploadPicture unrestricted upload (CVSS 5.3, feng\_ha\_ha ssm-erp · feng\_ha\_ha production\_ssm +2)
- [CVE-2025-4767](https://cve.now/CVE-2025-4767.md): defog-ai introspect Test Endpoint integration\_routes.py test\_custom\_tool code injection (CVSS 4.8, defog-ai introspect)
- [CVE-2025-4766](https://cve.now/CVE-2025-4766.md): PHPGurukul Zoo Management System profile.php sql injection (CVSS 6.9, PHPGurukul Zoo Management System)
- [CVE-2025-4679](https://cve.now/CVE-2025-4679.md): A vulnerability in Synology Active Backup for Microsoft 365 allows remote authenticated attackers to obtain sensitive information via unspec (CVSS 6.5, Synology Active Backup for Microsoft)
- [CVE-2025-4765](https://cve.now/CVE-2025-4765.md): PHPGurukul Zoo Management System contactus.php sql injection (CVSS 6.9, PHPGurukul Zoo Management System)
- [CVE-2025-1975](https://cve.now/CVE-2025-1975.md): Improper Validation of Array Index in ollama/ollama (CVSS 7.5, ollama/ollama · github.com/ollama/ollama)
- [CVE-2025-4761](https://cve.now/CVE-2025-4761.md): PHPGurukul Complaint Management System admin-profile.php sql injection (CVSS 6.9, PHPGurukul Complaint Management System)
- [CVE-2025-4758](https://cve.now/CVE-2025-4758.md): PHPGurukul Beauty Parlour Management System contact.php sql injection (CVSS 6.9, PHPGurukul Beauty Parlour Management System)
- [CVE-2025-4757](https://cve.now/CVE-2025-4757.md): PHPGurukul Beauty Parlour Management System forgot-password.php sql injection (CVSS 6.9, PHPGurukul Beauty Parlour Management System)
- [CVE-2025-4756](https://cve.now/CVE-2025-4756.md): D-Link DI-7003GV2 restart.asp denial of service (CVSS 6.9, D-Link DI-7003GV2)
- [CVE-2024-53827](https://cve.now/CVE-2024-53827.md): Ericsson Packet Core Controller (PCC) - Improper Input Validation Vulnerability (CVSS 7.5, Ericsson Packet Core Controller)
- [CVE-2025-4755](https://cve.now/CVE-2025-4755.md): D-Link DI-7003GV2 netconfig.asp sub\_497DE4 improper authentication (CVSS 6.9, D-Link DI-7003GV2)
- [CVE-2025-3624](https://cve.now/CVE-2025-3624.md): Missing Authorization Vulnerability in Hitachi Ops Center Analyzer (CVSS 4.3, Hitachi Ops Center Analyzer)
- [CVE-2024-8201](https://cve.now/CVE-2024-8201.md): Cross-Site WebSocket Hijacking Vulnerability in Hitachi Ops Center Analyzer (CVSS 5.4, Hitachi Ops Center Analyzer)
- [CVE-2025-4753](https://cve.now/CVE-2025-4753.md): D-Link DI-7003GV2 login.data information disclosure (CVSS 6.9, D-Link DI-7003GV2)
- [CVE-2025-1531](https://cve.now/CVE-2025-1531.md): Authentication credentials leakage vulnerability in Hitachi Ops Center Analyzer viewpoint OVF (CVSS 6.5, Hitachi Ops Center Analyzer viewpoint)
- [CVE-2025-1245](https://cve.now/CVE-2025-1245.md): Bypass Connection Restriction Vulnerability in Hitachi Ops Center Analyzer (CVSS 6.5, Hitachi Infrastructure Analytics Advisor · Hitachi Ops Cent…)
- [CVE-2025-4752](https://cve.now/CVE-2025-4752.md): D-Link DI-7003GV2 install\_base.data information disclosure (CVSS 6.9, D-Link DI-7003GV2)
- [CVE-2025-4751](https://cve.now/CVE-2025-4751.md): D-Link DI-7003GV2 index.data information disclosure (CVSS 6.9, D-Link DI-7003GV2)
- [CVE-2025-3516](https://cve.now/CVE-2025-3516.md): Simple Lightbox \< 2.9.4 - Contributor+ Stored XSS (CVSS 5.9, Simple Lightbox)
- [CVE-2025-3201](https://cve.now/CVE-2025-3201.md): Kali Forms \< 2.4.3 - Contributor+ Stored XSS (CVSS 5.9, Contact Form builder with drag & drop for WordPress)
- [CVE-2025-4750](https://cve.now/CVE-2025-4750.md): D-Link DI-7003GV2 Configuration get\_version.data information disclosure (CVSS 6.9, D-Link DI-7003GV2)
- [CVE-2025-4749](https://cve.now/CVE-2025-4749.md): D-Link DI-7003GV2 Factory Reset backup.asp sub\_4983B0 denial of service (CVSS 8.7, D-Link DI-7003GV2)
- [CVE-2025-4747](https://cve.now/CVE-2025-4747.md): Bohua NetDragon Firewall ip\_status.php command injection (CVSS 5.3, Bohua NetDragon Firewall)
- [CVE-2025-4759](https://cve.now/CVE-2025-4759.md): Versions of the package lockfile-lint-api before 5.9.2 are vulnerable to Incorrect Behavior Order: Early Validation via the resolved attribu (CVSS 6.9, lockfile-lint-api)
- [CVE-2025-4746](https://cve.now/CVE-2025-4746.md): Campcodes Sales and Inventory System purchase\_delete.php sql injection (CVSS 6.9, Campcodes Sales and Inventory System)
- [CVE-2025-4745](https://cve.now/CVE-2025-4745.md): code-projects Employee Record System current\_employees.php cross site scripting (CVSS 5.1, code-projects Employee Record System)
- [CVE-2025-4744](https://cve.now/CVE-2025-4744.md): code-projects Employee Record System edit\_employee.php cross site scripting (CVSS 5.1, code-projects Employee Record System)
- [CVE-2025-4743](https://cve.now/CVE-2025-4743.md): code-projects Employee Record System getData.php sql injection (CVSS 5.3, code-projects Employee Record System)
- [CVE-2025-4742](https://cve.now/CVE-2025-4742.md): XU-YIJIE grpo-flat grpo\_vanilla.py main deserialization (CVSS 4.8, XU-YIJIE grpo-flat)
- [CVE-2025-4741](https://cve.now/CVE-2025-4741.md): Campcodes Sales and Inventory System purchase\_add.php sql injection (CVSS 6.9, Campcodes Sales and Inventory System)
- [CVE-2025-4740](https://cve.now/CVE-2025-4740.md): BeamCtrl Airiana coef deserialization (CVSS 4.8, BeamCtrl Airiana)
- [CVE-2025-4169](https://cve.now/CVE-2025-4169.md): Posts per Cat \[Unmaintained\] \<= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, urkekg Posts per Cat)
- [CVE-2025-4739](https://cve.now/CVE-2025-4739.md): projectworlds Hospital Database Management System medicines\_info.php sql injection (CVSS 6.9, projectworlds Hospital Database Management System)
- [CVE-2025-4736](https://cve.now/CVE-2025-4736.md): PHPGurukul Daily Expense Tracker register.php sql injection (CVSS 6.9, PHPGurukul Daily Expense Tracker)
- [CVE-2025-4735](https://cve.now/CVE-2025-4735.md): Campcodes Sales and Inventory System product.php unrestricted upload (CVSS 5.3, Campcodes Sales and Inventory System)
- [CVE-2025-4734](https://cve.now/CVE-2025-4734.md): Campcodes Sales and Inventory System ci\_update.php sql injection (CVSS 6.9, Campcodes Sales and Inventory System)
- [CVE-2024-51475](https://cve.now/CVE-2024-51475.md): IBM Content Navigator HTML injection (CVSS 5.4, IBM Content Navigator)
- [CVE-2025-4733](https://cve.now/CVE-2025-4733.md): TOTOLINK A3002R/A3002RU HTTP POST Request formIpQoS buffer overflow (CVSS 8.7, TOTOLINK A3002R · TOTOLINK A3002RU)
- [CVE-2025-4732](https://cve.now/CVE-2025-4732.md): TOTOLINK A3002R/A3002RU HTTP POST Request formFilter buffer overflow (CVSS 8.7, TOTOLINK A3002R · TOTOLINK A3002RU)
- [CVE-2025-4731](https://cve.now/CVE-2025-4731.md): TOTOLINK A3002R/A3002RU HTTP POST Request formPortFw buffer overflow (CVSS 8.7, TOTOLINK A3002R · TOTOLINK A3002RU)
- [CVE-2025-4730](https://cve.now/CVE-2025-4730.md): TOTOLINK A3002R/A3002RU HTTP POST Request formMapDel buffer overflow (CVSS 8.7, TOTOLINK A3002R · TOTOLINK A3002RU)
- [CVE-2024-40120](https://cve.now/CVE-2024-40120.md): seaweedfs v3.68 was discovered to contain a SQL injection vulnerability via the component /abstract\_sql/abstract\_sql\_store.go. (CVSS 6.5, github.com/seaweedfs/seaweedfs)
- [CVE-2025-32407](https://cve.now/CVE-2025-32407.md): Samsung Internet for Galaxy Watch version 5.0.9, available up until Samsung Galaxy Watch 3, does not properly validate TLS certificates, all (CVSS 5.9)
- [CVE-2025-47809](https://cve.now/CVE-2025-47809.md): Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after installation (before a logoff or reboot). (CVSS 8.2, Wibu CodeMeter)
- [CVE-2025-47916](https://cve.now/CVE-2025-47916.md): Invision Community 5.0.0 before 5.0.7 allows remote code execution via crafted template strings to themeeditor.php. (CVSS 10.0, invisioncommunity Invision Power Board)
- [CVE-2025-48174](https://cve.now/CVE-2025-48174.md): In libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer overflow in stream-\>offset+size. (CVSS 4.5, aomedia libavif)
- [CVE-2025-48175](https://cve.now/CVE-2025-48175.md): In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowByte (CVSS 4.5, aomedia libavif)
- [CVE-2025-48188](https://cve.now/CVE-2025-48188.md): libpspp-core.a in GNU PSPP through 2.0.1 has an incorrect call from fill\_buffer (in data/encrypted-file.c) to the Gnulib rijndaelDecrypt fun (CVSS 2.9, GNU PSPP)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-05-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.