CVEs published May 18, 2025
51 CVEs were published on May 18, 2025: 0 critical, 4 high.
- Published
- 51
- Critical
- 0
- High
- 4
- Medium
- 46
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- itsourcecode Restaurant Management System
- 7
- FreeFloat FTP Server
- 6
- D-Link DAP-2695
- 3
- TOTOLINK N300RH
- 3
- Campcodes Sales and Inventory System
- 2
- code-projects Police Station Management System
- 2
- code-projects Tourism Management System
- 2
- itsourcecode Sales and Inventory System
- 2
- PHPGurukul News Portal
- 2
- Tenda A15
- 2
High 4
- CVE-2025-4897Tenda A15 HTTP POST Request multimodalAdd buffer overflowTenda A15
- CVE-2025-4896Tenda AC10 UserCongratulationsExec buffer overflowTenda AC10
- CVE-2025-4883D-Link DI-8100 Connection Limit Page ctxz.asp ctxz_asp stack-based overflowD-Link DI-8100
- CVE-2025-4867Tenda A15 ArpNerworkSet formArpNerworkSet denial of serviceTenda A15
Medium, low and unrated 47
- CVE-2025-4901D-Link DI-7003GV2 HTTP Endpoint state_view.data sub_41E304 information disclosureD-Link DI-7003GV2
- CVE-2025-4900Campcodes Sales and Inventory System payment.php sql injectionCampcodes Sales and Inventory System
- CVE-2025-4899Campcodes Sales and Inventory System transaction_update.php sql injectionCampcodes Sales and Inventory System
- CVE-2025-4898SourceCodester Student Result Management System Logo File update_system.php unlink path traversalSourceCodester Student Result Management System
- CVE-2025-4895SourceCodester Doctors Appointment System delete-session.php sql injectionSourceCodester Doctors Appointment System
- CVE-2025-4894calmkart Django-sso-server crypto.py gen_rsa_keys inadequate encryptioncalmkart Django-sso-server
- CVE-2025-4893jammy928 CoinExchange_CryptoExchange_Java File Upload Endpoint UploadFileUtil.java uploadLocalImage path traversaljammy928 CoinExchange_CryptoExchange_Java
- CVE-2025-4892code-projects Police Station Management System Delete Record source.cpp remove stack-based overflowcode-projects Police Station Management System
- CVE-2025-4891code-projects Police Station Management System Display Record source.cpp display buffer overflowcode-projects Police Station Management System
- CVE-2025-4890code-projects Tourism Management System Login User LoginUser stack-based overflowcode-projects Tourism Management System
- CVE-2025-4889code-projects Tourism Management System User Registration AddUser buffer overflowcode-projects Tourism Management System
- CVE-2025-4888code-projects Pharmacy Management System Add Order Details take_order buffer overflowcode-projects Pharmacy Management System
- CVE-2025-4887SourceCodester Online Student Clearance System cross-site request forgerySourceCodester Online Student Clearance System
- CVE-2025-4886itsourcecode Sales and Inventory System product_update.php sql injectionitsourcecode Sales and Inventory System
- CVE-2025-4885itsourcecode Sales and Inventory System product_add.php sql injectionitsourcecode Sales and Inventory System
- CVE-2025-4884itsourcecode Restaurant Management System assign_save.php sql injectionitsourcecode Restaurant Management System
- CVE-2025-4882itsourcecode Restaurant Management System team_update.php sql injectionitsourcecode Restaurant Management System
- CVE-2025-4881itsourcecode Restaurant Management System user_save.php sql injectionitsourcecode Restaurant Management System
- CVE-2025-4880PHPGurukul News Portal aboutus.php sql injectionPHPGurukul News Portal
- CVE-2025-4875Campcodes Online Shopping Portal forgot-password.php sql injectionCampcodes Online Shopping Portal
- CVE-2025-4874PHPGurukul News Portal Project contactus.php sql injectionPHPGurukul News Portal Project
- CVE-2025-4873PHPGurukul News Portal Login index.php sql injectionPHPGurukul News Portal
- CVE-2025-4872FreeFloat FTP Server CCC Command buffer overflowFreeFloat FTP Server
- CVE-2025-4871PCMan FTP Server REST Command buffer overflowPCMan FTP Server
- CVE-2025-4870itsourcecode Restaurant Management System menu_save.php sql injectionitsourcecode Restaurant Management System
- CVE-2025-4869itsourcecode Restaurant Management System member_update.php sql injectionitsourcecode Restaurant Management System
- CVE-2025-4868merikbest ecommerce-spring-reactjs File Upload Endpoint admin path traversalmerikbest ecommerce-spring-reactjs
- CVE-2025-4866weibocom rill-flow Management Console code injectionweibocom rill-flow
- CVE-2025-4865itsourcecode Restaurant Management System member_save.php sql injectionitsourcecode Restaurant Management System
- CVE-2025-4864itsourcecode Restaurant Management System finished.php sql injectionitsourcecode Restaurant Management System
- CVE-2025-4863Advaya Softech GEMS ERP Portal studentLogin.action sql injectionAdvaya Softech GEMS ERP Portal
- CVE-2025-4862PHPGurukul Directory Management System searchdata.php cross site scriptingPHPGurukul Directory Management System
- CVE-2025-4861PHPGurukul Beauty Parlour Management System admin-profile.php sql injectionPHPGurukul Beauty Parlour Management System
- CVE-2025-3715Bold Page Builder <= 5.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-text' Parameterboldthemes Bold Page Builder
- CVE-2025-4860D-Link DAP-2695 Static Pool Settings Page adv_dhcps.php cross site scriptingD-Link DAP-2695
- CVE-2025-4859D-Link DAP-2695 MAC Bypass Settings Page adv_macbypass.php cross site scriptingD-Link DAP-2695
- CVE-2025-4858D-Link DAP-2695 ARP Spoofing Prevention Page adv_arpspoofing.php cross site scriptingD-Link DAP-2695
- CVE-2025-4852TOTOLINK A3002R VPN Page cross site scriptingTOTOLINK A3002R
- CVE-2025-4851TOTOLINK N300RH cstecgi.cgi setUploadUserData command injectionTOTOLINK N300RH
- CVE-2025-4850TOTOLINK N300RH cstecgi.cgi setUnloadUserData command injectionTOTOLINK N300RH
- CVE-2025-4849TOTOLINK N300RH cstecgi.cgi CloudACMunualUpdateUserdata command injectionTOTOLINK N300RH
- CVE-2025-4848FreeFloat FTP Server RECV Command buffer overflowFreeFloat FTP Server
- CVE-2025-4847FreeFloat FTP Server MLS Command buffer overflowFreeFloat FTP Server
- CVE-2025-4846FreeFloat FTP Server MPUT Command buffer overflowFreeFloat FTP Server
- CVE-2025-4845FreeFloat FTP Server TRACE Command buffer overflowFreeFloat FTP Server
- CVE-2025-4844FreeFloat FTP Server CD Command buffer overflowFreeFloat FTP Server
- CVE-2025-48219O2 UK before 2025-05-19 allows subscribers to determine the Cell ID of other subscribers by initiating an IMS (IP Multimedia Subsystem) callO2 UK O2