CVEs published May 28, 2025
67 CVEs were published on May 28, 2025: 7 critical, 12 high. 2 are now in CISA KEV.
- Published
- 67
- Critical
- 7
- High
- 12
- Medium
- 42
- Low
- 6
- Unrated
- 0
- Now in CISA KEV
- 2
- Fix available
- 25
Most affected products
- TeleMessage service
- 7
- Mautic · mautic/core
- 5
- Absolute Security Secure Access
- 3
- Apache Software Foundation Apache InLong · org.apache.inlon…
- 3
- bestpractical RT
- 3
- IBM Security Guardium
- 3
- ISC Kea
- 3
- curl
- 2
- Fortinet FortiOS
- 2
- IBM Sterling Secure Proxy
- 2
Critical 7
- CVE-2025-3357IBM Tivoli Monitoring code executionIBM Tivoli Monitoring
- CVE-2025-5277aws-mcp-server MCP server is vulnerable to command injection.alexei-led aws-mcp-server
- CVE-2025-27528Apache InLong: JDBC Vulnerability for Invisible Character Bypass Leading to Arbitrary File ReadApache Software Foundation Apache InLong · org.apache.inlon…
- CVE-2025-22252A missing authentication for critical function in Fortinet FortiProxy versions 7.6.0 through 7.6.1, FortiSwitchManager version 7.2.5, and FoFortinet FortiProxy · Fortinet FortiSwitchManager +1
- CVE-2025-4009Unauthenticated Arbitrary Command Injection in Evertz SDVNEvertz 3080ipx-10G · Evertz MViP-II +4
- CVE-2025-45343An issue in Tenda W18E v.2.0 v.16.01.0.11 allows an attacker to execute arbitrary code via the editing functionality of the account module i
- CVE-2025-48749Netwrix Directory Manager (formerly Imanami GroupID) v11.0.0.0 and before & after v.11.1.25134.03 inserts Sensitive Information into Sent Da
High 12
- CVE-2025-27703Privilege escalation in the management console of Absolute Secure Access prior to version 13.54Absolute Security Secure Access
- CVE-2025-32801Loading a malicious hook library can lead to local privilege escalationISC Kea
- CVE-2025-4134Lack of file validation in Avast Business Antivirus for Linux allows writing untrusted update filesAvast Business Antivirus
- CVE-2025-48734Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by defaultApache Software Foundation Apache Commons BeanUtils 1.x… +2
- CVE-2025-1753Command Injection in LLama-Index CLI in run-llama/llama_indexrun-llama/llama_index · llama-index-cli +1
- CVE-2025-5287Likes and Dislikes Plugin <= 1.0.0 - Unauthenticated SQL Injectionerumfaham Likes and Dislikes Plugin
- CVE-2025-25251An Incorrect Authorization vulnerability [CWE-863] in FortiClient Mac 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14 may allFortinet FortiClientMac
- CVE-2025-4800MasterStudy LMS Pro <= 4.7.0 - Authenticated (Subscriber+) Arbitrary File UploadStylemixThemes MasterStudy LMS Pro
- CVE-2025-30087Best Practical RT (Request Tracker) 4.4 through 4.4.7 and 5.0 through 5.0.7 allows XSS via injection of crafted parameters in a search URL.bestpractical RT
- CVE-2025-31500Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an Asset name.bestpractical RT
- CVE-2025-31501Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an RT permalink.bestpractical RT
- CVE-2025-45997Sourcecodester Web-based Pharmacy Product Management System v.1.0 has a file upload vulnerability.
Medium, low and unrated 48
- CVE-2025-27706Cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.54Absolute Security Secure Access
- CVE-2025-27702Permissions bypass in the management console of Absolute Secure Access prior to version 13.54Absolute Security Secure Access
- CVE-2025-5256Open Redirect vulnerability on user unlock pathMautic · mautic/core
- CVE-2024-47055Segment cloning doesn't have a proper permission checkMautic · mautic/core
- CVE-2025-1461Vuetify XSS through 'eventMoreText' prop of VCalendarVuetify
- CVE-2024-47057User name enumeration possible due to response time difference on password reset formMautic · mautic/core
- CVE-2025-32803Insecure file permissions can result in confidential information leakageISC Kea
- CVE-2025-32802Insecure handling of file paths allows multiple local attacksISC Kea
- CVE-2024-47056Mautic does not shield .env files from web trafficMautic · mautic/core
- CVE-2025-5257Predictable Page Indexing Might Lead to Sensitive Data ExposureMautic · mautic/core
- CVE-2025-36572Dell PowerStore, version(s) 4.0.0.0, contain(s) an Use of Hard-coded Credentials vulnerability in the PowerStore image file.Dell PowerStore
- CVE-2024-51453IBM Sterling Secure Proxy directory traversalIBM Sterling Secure Proxy
- CVE-2024-38341IBM Sterling Secure Proxy information disclosureIBM Sterling Secure Proxy
- CVE-2025-40651Reflected Cross Site Scripting (XSS) in Real Easy StoreReal Easy Store
- CVE-2025-4493Improper privilege assignment in PAM JIT privilege sets in Devolutions Server allows a PAM user to perform PAM JIT requests on unauthorizeDevolutions Server
- CVE-2025-5299SourceCodester Client Database Management System user_order_customer_update.php unrestricted uploadSourceCodester Client Database Management System
- CVE-2025-5298Campcodes Online Hospital Management System betweendates-detailsreports.php sql injectionCampcodes Online Hospital Management System
- CVE-2025-5297SourceCodester Computer Store System main.c Add stack-based overflowSourceCodester Computer Store System
- CVE-2025-3864Connection pool exhaustion in hackneyhackney
- CVE-2025-5295FreeFloat FTP Server PORT Command buffer overflowFreeFloat FTP Server
- CVE-2025-40673Missing Authorization in DinoRANKDinoRANK
- CVE-2025-4963WP Extended <= 3.0.15 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadwpextended The Ultimate WordPress Toolkit – WP Extended
- CVE-2025-27526Apache InLong: JDBC Vulnerability For URLEncode and backspace bypassApache Software Foundation Apache InLong · org.apache.inlon…
- CVE-2025-27522Apache InLong: JDBC Vulnerability during verification processingApache Software Foundation Apache InLong · org.apache.inlon…
- CVE-2025-46777A insertion of sensitive information into log file in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5, and versions 7.0.0 Fortinet FortiPortal
- CVE-2025-24473A exposure of sensitive system information to an unauthorized control sphere vulnerability in Fortinet FortiClientWindows 7.2.0 through 7.2.Fortinet FortiClientWindows
- CVE-2025-47294A integer overflow or wraparound in Fortinet FortiOS versions 7.2.0 through 7.2.7, versions 7.0.0 through 7.0.14 may allow a remote unauthenFortinet FortiOS
- CVE-2024-54020A missing authorization in Fortinet FortiManager versions 7.2.0 through 7.2.1, and versions 7.0.0 through 7.0.7 may allow an authenticated aFortinet FortiManager
- CVE-2025-47295A buffer over-read in Fortinet FortiOS versions 7.4.0 through 7.4.3, versions 7.2.0 through 7.2.7, and versions 7.0.0 through 7.0.14 may allFortinet FortiOS
- CVE-2025-5082WP Attachments <= 5.0.12 - Reflected Cross-Site Scripting via attachment_id Parametermilmor WP Attachments
- CVE-2025-5025No QUIC certificate pinning with wolfSSLcurl
- CVE-2025-4947QUIC certificate check skip with wolfSSLcurl
- CVE-2025-25029IBM Security Guardium information disclosureIBM Security Guardium
- CVE-2025-25026IBM Security Guardium information disclosureIBM Security Guardium
- CVE-2025-25025IBM Security Guardium information disclosureIBM Security Guardium
- CVE-2024-57336Incorrect access control in M2Soft CROWNIX Report & ERS affected v7.x to v7.4.3.599 and v8.x to v8.0.3.79 allows unauthorized attackers to o
- CVE-2024-57337An arbitrary file upload vulnerability in the opcode 500 functionality of M2Soft CROWNIX Report & ERS v5.x to v5.5.14.1070, v7.x to v7.4.3.9
- CVE-2024-57338An arbitrary file upload vulnerability in M2Soft CROWNIX Report & ERS v5.x to v5.5.14.1070, v7.x to v7.4.3.960, and v8.x to v8.2.0.345 allow
- CVE-2025-47748Netwrix Directory Manager v.11.0.0.0 and before & after v.11.1.25134.03 contains a hardcoded password.
- CVE-2025-48746Netwrix Directory Manager (formerly Imanami GroupID) v.11.0.0.0 and before, as well as after v.11.1.25134.03 lacks Authentication for a Crit
- CVE-2025-48747Netwrix Directory Manager (formerly Imanami GroupID) before and including v.11.0.0.0 and after v.11.1.25134.03 has Incorrect Permission Assi
- CVE-2025-48925The TeleMessage service through 2025-05-05 relies on the client side (e.g., the TM SGNL app) to do MD5 hashing, and then accepts the hash asTeleMessage service
- CVE-2025-48926The admin panel in the TeleMessage service through 2025-05-05 allows attackers to discover usernames, e-mail addresses, passwords, and telepTeleMessage service
- CVE-2025-48927The TeleMessage service through 2025-05-05 configures Spring Boot Actuator with an exposed heap dump endpoint at a /heapdump URI, as exploitTeleMessage service
- CVE-2025-48928The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalent to a "core dump" inTeleMessage service
- CVE-2025-48929The TeleMessage service through 2025-05-05 implements authentication through a long-lived credential (e.g., not a token with a short expiratTeleMessage service
- CVE-2025-48930The TeleMessage service through 2025-05-05 stores certain cleartext information in memory, even though memory content may be accessible to aTeleMessage service
- CVE-2025-48931The TeleMessage service through 2025-05-05 relies on MD5 for password hashing, which opens up various attack possibilities (including rainboTeleMessage service