# CVEs published 2025-05-25

20 CVEs were published on May 25, 2025: 1 critical, 1 high. Days are UTC.

- [CVE-2025-2146](https://cve.now/CVE-2025-2146.md): Buffer overflow in WebService Authentication processing of Small Office Multifunction Printers and Laser Printers(\*) which may allow an atta (CVSS 9.8, Canon Satera MF656Cdw · Canon Satera MF654Cdw +35)
- [CVE-2025-5159](https://cve.now/CVE-2025-5159.md): H3C SecCenter SMP-E1114P02 download path traversal (CVSS 5.3, H3C SecCenter SMP-E1114P02)
- [CVE-2025-5158](https://cve.now/CVE-2025-5158.md): H3C SecCenter SMP-E1114P02 downloadSoftware path traversal (CVSS 5.3, H3C SecCenter SMP-E1114P02)
- [CVE-2025-5157](https://cve.now/CVE-2025-5157.md): H3C SecCenter SMP-E1114P02 fileContent path traversal (CVSS 5.3, H3C SecCenter SMP-E1114P02)
- [CVE-2025-5156](https://cve.now/CVE-2025-5156.md): H3C GR-5400AX aspForm EditWlanMacList buffer overflow (CVSS 8.7, H3C GR-5400AX)
- [CVE-2025-5155](https://cve.now/CVE-2025-5155.md): qianfox FoxCMS Article.php batchCope sql injection (CVSS 5.3, qianfox FoxCMS)
- [CVE-2025-5154](https://cve.now/CVE-2025-5154.md): PhonePe App SQLite Database databases cleartext storage in file (CVSS 4.6, PhonePe App)
- [CVE-2025-5153](https://cve.now/CVE-2025-5153.md): CMS Made Simple Design Manager Module cross site scripting (CVSS 5.1, CMS Made Simple)
- [CVE-2025-5152](https://cve.now/CVE-2025-5152.md): Chanjet CRM newActivityedit.php sql injection (CVSS 5.3, Chanjet CRM)
- [CVE-2025-5151](https://cve.now/CVE-2025-5151.md): defog-ai introspect analysis\_tools.py execute\_analysis\_code\_safely code injection (CVSS 4.8, defog-ai introspect)
- [CVE-2025-5150](https://cve.now/CVE-2025-5150.md): docarray Web API torch\_dataset.py \_\_getitem\_\_ prototype pollution (CVSS 5.3, docarray)
- [CVE-2025-5149](https://cve.now/CVE-2025-5149.md): WCMS Login getallcon getMemberByUid improper authentication (CVSS 6.3, WCMS)
- [CVE-2025-5148](https://cve.now/CVE-2025-5148.md): FunAudioLLM InspireMusic Pickle Data model.py load\_state\_dict deserialization (CVSS 4.8, FunAudioLLM InspireMusic · inspiremusic)
- [CVE-2025-5147](https://cve.now/CVE-2025-5147.md): Netcore NBR1005GPEV2/NBR200V2/B6V2 network\_tools tools\_ping command injection (CVSS 5.3, Netcore NBR1005GPEV2 · Netcore NBR200V2 +1)
- [CVE-2025-5146](https://cve.now/CVE-2025-5146.md): Netcore NBR200V2 HTTP Header routerd passwd\_set command injection (CVSS 5.3, Netcore NBR1005GPEV2 · Netcore B6V2 +5)
- [CVE-2025-5145](https://cve.now/CVE-2025-5145.md): Netcore POWER13 Query String cgi-bin command injection (CVSS 5.3, Netcore NBR1005GPEV2 · Netcore B6V2 +6)
- [CVE-2025-5140](https://cve.now/CVE-2025-5140.md): Seeyon Zhiyuan OA Web Application System ThirdMenuController.class this.oursNetService.getData server-side request forgery (CVSS 5.3, Seeyon Zhiyuan OA Web Application System)
- [CVE-2025-5139](https://cve.now/CVE-2025-5139.md): Qualitor Office 365-type Connection testaConexaoOffice365.php command injection (CVSS 6.3, Qualitor)
- [CVE-2025-5138](https://cve.now/CVE-2025-5138.md): Bitwarden PDF File cross site scripting (CVSS 5.1, Bitwarden)
- [CVE-2025-5137](https://cve.now/CVE-2025-5137.md): DedeCMS Incomplete Fix CVE-2018-9175 sys\_verifies.php code injection (CVSS 5.1, DedeCMS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-05-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.