CVEs published May 25, 2025
20 CVEs were published on May 25, 2025: 1 critical, 1 high.
- Published
- 20
- Critical
- 1
- High
- 1
- Medium
- 18
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- H3C SecCenter SMP-E1114P02
- 3
- Bitwarden
- 1
- Canon Satera MF656Cdw · Canon Satera MF654Cdw +35
- 1
- Chanjet CRM
- 1
- CMS Made Simple
- 1
- DedeCMS
- 1
- defog-ai introspect
- 1
- docarray
- 1
- FunAudioLLM InspireMusic · inspiremusic
- 1
- H3C GR-5400AX
- 1
Critical 1
High 1
Medium, low and unrated 18
- CVE-2025-5159H3C SecCenter SMP-E1114P02 download path traversalH3C SecCenter SMP-E1114P02
- CVE-2025-5158H3C SecCenter SMP-E1114P02 downloadSoftware path traversalH3C SecCenter SMP-E1114P02
- CVE-2025-5157H3C SecCenter SMP-E1114P02 fileContent path traversalH3C SecCenter SMP-E1114P02
- CVE-2025-5155qianfox FoxCMS Article.php batchCope sql injectionqianfox FoxCMS
- CVE-2025-5154PhonePe App SQLite Database databases cleartext storage in filePhonePe App
- CVE-2025-5153CMS Made Simple Design Manager Module cross site scriptingCMS Made Simple
- CVE-2025-5152Chanjet CRM newActivityedit.php sql injectionChanjet CRM
- CVE-2025-5151defog-ai introspect analysis_tools.py execute_analysis_code_safely code injectiondefog-ai introspect
- CVE-2025-5150docarray Web API torch_dataset.py __getitem__ prototype pollutiondocarray
- CVE-2025-5149WCMS Login getallcon getMemberByUid improper authenticationWCMS
- CVE-2025-5148FunAudioLLM InspireMusic Pickle Data model.py load_state_dict deserializationFunAudioLLM InspireMusic · inspiremusic
- CVE-2025-5147Netcore NBR1005GPEV2/NBR200V2/B6V2 network_tools tools_ping command injectionNetcore NBR1005GPEV2 · Netcore NBR200V2 +1
- CVE-2025-5146Netcore NBR200V2 HTTP Header routerd passwd_set command injectionNetcore NBR1005GPEV2 · Netcore B6V2 +5
- CVE-2025-5145Netcore POWER13 Query String cgi-bin command injectionNetcore NBR1005GPEV2 · Netcore B6V2 +6
- CVE-2025-5140Seeyon Zhiyuan OA Web Application System ThirdMenuController.class this.oursNetService.getData server-side request forgerySeeyon Zhiyuan OA Web Application System
- CVE-2025-5139Qualitor Office 365-type Connection testaConexaoOffice365.php command injectionQualitor
- CVE-2025-5138Bitwarden PDF File cross site scriptingBitwarden
- CVE-2025-5137DedeCMS Incomplete Fix CVE-2018-9175 sys_verifies.php code injectionDedeCMS