# CVEs published 2025-05-28

67 CVEs were published on May 28, 2025: 7 critical, 12 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2025-27706](https://cve.now/CVE-2025-27706.md): Cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.54 (CVSS 4.6, Absolute Security Secure Access)
- [CVE-2025-27703](https://cve.now/CVE-2025-27703.md): Privilege escalation in the management console of Absolute Secure Access prior to version 13.54 (CVSS 7.0, Absolute Security Secure Access)
- [CVE-2025-27702](https://cve.now/CVE-2025-27702.md): Permissions bypass in the management console of Absolute Secure Access prior to version 13.54 (CVSS 6.9, Absolute Security Secure Access)
- [CVE-2025-5256](https://cve.now/CVE-2025-5256.md): Open Redirect vulnerability on user unlock path (CVSS 5.4, Mautic · mautic/core)
- [CVE-2024-47055](https://cve.now/CVE-2024-47055.md): Segment cloning doesn't have a proper permission check (CVSS 4.3, Mautic · mautic/core)
- [CVE-2025-1461](https://cve.now/CVE-2025-1461.md): Vuetify XSS through 'eventMoreText' prop of VCalendar (CVSS 5.6, Vuetify)
- [CVE-2024-47057](https://cve.now/CVE-2024-47057.md): User name enumeration possible due to response time difference on password reset form (CVSS 5.3, Mautic · mautic/core)
- [CVE-2025-32803](https://cve.now/CVE-2025-32803.md): Insecure file permissions can result in confidential information leakage (CVSS 4.0, ISC Kea)
- [CVE-2025-32802](https://cve.now/CVE-2025-32802.md): Insecure handling of file paths allows multiple local attacks (CVSS 6.1, ISC Kea)
- [CVE-2025-32801](https://cve.now/CVE-2025-32801.md): Loading a malicious hook library can lead to local privilege escalation (CVSS 7.8, ISC Kea)
- [CVE-2024-47056](https://cve.now/CVE-2024-47056.md): Mautic does not shield .env files from web traffic (CVSS 5.1, Mautic · mautic/core)
- [CVE-2025-5257](https://cve.now/CVE-2025-5257.md): Predictable Page Indexing Might Lead to Sensitive Data Exposure (CVSS 6.5, Mautic · mautic/core)
- [CVE-2025-36572](https://cve.now/CVE-2025-36572.md): Dell PowerStore, version(s) 4.0.0.0, contain(s) an Use of Hard-coded Credentials vulnerability in the PowerStore image file. (CVSS 6.5, Dell PowerStore)
- [CVE-2024-51453](https://cve.now/CVE-2024-51453.md): IBM Sterling Secure Proxy directory traversal (CVSS 4.3, IBM Sterling Secure Proxy)
- [CVE-2024-38341](https://cve.now/CVE-2024-38341.md): IBM Sterling Secure Proxy information disclosure (CVSS 5.9, IBM Sterling Secure Proxy)
- [CVE-2025-3357](https://cve.now/CVE-2025-3357.md): IBM Tivoli Monitoring code execution (CVSS 9.8, IBM Tivoli Monitoring)
- [CVE-2025-4134](https://cve.now/CVE-2025-4134.md): Lack of file validation in Avast Business Antivirus for Linux allows writing untrusted update files (CVSS 7.3, Avast Business Antivirus)
- [CVE-2025-48734](https://cve.now/CVE-2025-48734.md): Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default (CVSS 8.8, Apache Software Foundation Apache Commons BeanUtils 1.x… +2)
- [CVE-2025-40651](https://cve.now/CVE-2025-40651.md): Reflected Cross Site Scripting (XSS) in Real Easy Store (CVSS 5.1, Real Easy Store)
- [CVE-2025-5277](https://cve.now/CVE-2025-5277.md): aws-mcp-server MCP server is vulnerable to command injection. (CVSS 9.4, alexei-led aws-mcp-server)
- [CVE-2025-4493](https://cve.now/CVE-2025-4493.md): Improper privilege assignment in PAM JIT privilege sets in Devolutions Server allows a PAM user to perform PAM JIT requests on unauthorize (CVSS 6.5, Devolutions Server)
- [CVE-2025-5299](https://cve.now/CVE-2025-5299.md): SourceCodester Client Database Management System user\_order\_customer\_update.php unrestricted upload (CVSS 6.9, SourceCodester Client Database Management System)
- [CVE-2025-5298](https://cve.now/CVE-2025-5298.md): Campcodes Online Hospital Management System betweendates-detailsreports.php sql injection (CVSS 6.9, Campcodes Online Hospital Management System)
- [CVE-2025-5297](https://cve.now/CVE-2025-5297.md): SourceCodester Computer Store System main.c Add stack-based overflow (CVSS 4.8, SourceCodester Computer Store System)
- [CVE-2025-3864](https://cve.now/CVE-2025-3864.md): Connection pool exhaustion in hackney (CVSS 2.3, hackney)
- [CVE-2025-5295](https://cve.now/CVE-2025-5295.md): FreeFloat FTP Server PORT Command buffer overflow (CVSS 6.9, FreeFloat FTP Server)
- [CVE-2025-40673](https://cve.now/CVE-2025-40673.md): Missing Authorization in DinoRANK (CVSS 5.3, DinoRANK)
- [CVE-2025-1753](https://cve.now/CVE-2025-1753.md): Command Injection in LLama-Index CLI in run-llama/llama\_index (CVSS 7.8, run-llama/llama\_index · llama-index-cli +1)
- [CVE-2025-4963](https://cve.now/CVE-2025-4963.md): WP Extended \<= 3.0.15 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload (CVSS 6.4, wpextended The Ultimate WordPress Toolkit – WP Extended)
- [CVE-2025-5287](https://cve.now/CVE-2025-5287.md): Likes and Dislikes Plugin \<= 1.0.0 - Unauthenticated SQL Injection (CVSS 7.5, erumfaham Likes and Dislikes Plugin)
- [CVE-2025-27528](https://cve.now/CVE-2025-27528.md): Apache InLong: JDBC Vulnerability for Invisible Character Bypass Leading to Arbitrary File Read (CVSS 9.1, Apache Software Foundation Apache InLong · org.apache.inlon…)
- [CVE-2025-27526](https://cve.now/CVE-2025-27526.md): Apache InLong: JDBC Vulnerability For URLEncode and backspace bypass (CVSS 6.5, Apache Software Foundation Apache InLong · org.apache.inlon…)
- [CVE-2025-27522](https://cve.now/CVE-2025-27522.md): Apache InLong: JDBC Vulnerability during verification processing (CVSS 6.5, Apache Software Foundation Apache InLong · org.apache.inlon…)
- [CVE-2025-46777](https://cve.now/CVE-2025-46777.md): A insertion of sensitive information into log file in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5, and versions 7.0.0 (CVSS 2.2, Fortinet FortiPortal)
- [CVE-2025-24473](https://cve.now/CVE-2025-24473.md): A exposure of sensitive system information to an unauthorized control sphere vulnerability in Fortinet FortiClientWindows 7.2.0 through 7.2. (CVSS 4.8, Fortinet FortiClientWindows)
- [CVE-2025-22252](https://cve.now/CVE-2025-22252.md): A missing authentication for critical function in Fortinet FortiProxy versions 7.6.0 through 7.6.1, FortiSwitchManager version 7.2.5, and Fo (CVSS 9.0, Fortinet FortiProxy · Fortinet FortiSwitchManager +1)
- [CVE-2025-47294](https://cve.now/CVE-2025-47294.md): A integer overflow or wraparound in Fortinet FortiOS versions 7.2.0 through 7.2.7, versions 7.0.0 through 7.0.14 may allow a remote unauthen (CVSS 4.8, Fortinet FortiOS)
- [CVE-2024-54020](https://cve.now/CVE-2024-54020.md): A missing authorization in Fortinet FortiManager versions 7.2.0 through 7.2.1, and versions 7.0.0 through 7.0.7 may allow an authenticated a (CVSS 2.1, Fortinet FortiManager)
- [CVE-2025-47295](https://cve.now/CVE-2025-47295.md): A buffer over-read in Fortinet FortiOS versions 7.4.0 through 7.4.3, versions 7.2.0 through 7.2.7, and versions 7.0.0 through 7.0.14 may all (CVSS 3.4, Fortinet FortiOS)
- [CVE-2025-25251](https://cve.now/CVE-2025-25251.md): An Incorrect Authorization vulnerability \[CWE-863\] in FortiClient Mac 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14 may all (CVSS 7.4, Fortinet FortiClientMac)
- [CVE-2025-5082](https://cve.now/CVE-2025-5082.md): WP Attachments \<= 5.0.12 - Reflected Cross-Site Scripting via attachment\_id Parameter (CVSS 6.1, milmor WP Attachments)
- [CVE-2025-4009](https://cve.now/CVE-2025-4009.md): Unauthenticated Arbitrary Command Injection in Evertz SDVN (CVSS 9.3, Evertz 3080ipx-10G · Evertz MViP-II +4)
- [CVE-2025-5025](https://cve.now/CVE-2025-5025.md): No QUIC certificate pinning with wolfSSL (CVSS 4.8, curl)
- [CVE-2025-4947](https://cve.now/CVE-2025-4947.md): QUIC certificate check skip with wolfSSL (CVSS 6.5, curl)
- [CVE-2025-4800](https://cve.now/CVE-2025-4800.md): MasterStudy LMS Pro \<= 4.7.0 - Authenticated (Subscriber+) Arbitrary File Upload (CVSS 8.8, StylemixThemes MasterStudy LMS Pro)
- [CVE-2025-25029](https://cve.now/CVE-2025-25029.md): IBM Security Guardium information disclosure (CVSS 4.9, IBM Security Guardium)
- [CVE-2025-25026](https://cve.now/CVE-2025-25026.md): IBM Security Guardium information disclosure (CVSS 4.3, IBM Security Guardium)
- [CVE-2025-25025](https://cve.now/CVE-2025-25025.md): IBM Security Guardium information disclosure (CVSS 4.3, IBM Security Guardium)
- [CVE-2024-57336](https://cve.now/CVE-2024-57336.md): Incorrect access control in M2Soft CROWNIX Report & ERS affected v7.x to v7.4.3.599 and v8.x to v8.0.3.79 allows unauthorized attackers to o (CVSS 6.5)
- [CVE-2024-57337](https://cve.now/CVE-2024-57337.md): An arbitrary file upload vulnerability in the opcode 500 functionality of M2Soft CROWNIX Report & ERS v5.x to v5.5.14.1070, v7.x to v7.4.3.9 (CVSS 6.5)
- [CVE-2024-57338](https://cve.now/CVE-2024-57338.md): An arbitrary file upload vulnerability in M2Soft CROWNIX Report & ERS v5.x to v5.5.14.1070, v7.x to v7.4.3.960, and v8.x to v8.2.0.345 allow (CVSS 6.5)
- [CVE-2025-30087](https://cve.now/CVE-2025-30087.md): Best Practical RT (Request Tracker) 4.4 through 4.4.7 and 5.0 through 5.0.7 allows XSS via injection of crafted parameters in a search URL. (CVSS 7.2, bestpractical RT)
- [CVE-2025-31500](https://cve.now/CVE-2025-31500.md): Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an Asset name. (CVSS 7.2, bestpractical RT)
- [CVE-2025-31501](https://cve.now/CVE-2025-31501.md): Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an RT permalink. (CVSS 7.2, bestpractical RT)
- [CVE-2025-45343](https://cve.now/CVE-2025-45343.md): An issue in Tenda W18E v.2.0 v.16.01.0.11 allows an attacker to execute arbitrary code via the editing functionality of the account module i (CVSS 9.8)
- [CVE-2025-45997](https://cve.now/CVE-2025-45997.md): Sourcecodester Web-based Pharmacy Product Management System v.1.0 has a file upload vulnerability. (CVSS 8.6)
- [CVE-2025-47748](https://cve.now/CVE-2025-47748.md): Netwrix Directory Manager v.11.0.0.0 and before & after v.11.1.25134.03 contains a hardcoded password. (CVSS 5.3)
- [CVE-2025-48746](https://cve.now/CVE-2025-48746.md): Netwrix Directory Manager (formerly Imanami GroupID) v.11.0.0.0 and before, as well as after v.11.1.25134.03 lacks Authentication for a Crit (CVSS 6.5)
- [CVE-2025-48747](https://cve.now/CVE-2025-48747.md): Netwrix Directory Manager (formerly Imanami GroupID) before and including v.11.0.0.0 and after v.11.1.25134.03 has Incorrect Permission Assi (CVSS 5.0)
- [CVE-2025-48749](https://cve.now/CVE-2025-48749.md): Netwrix Directory Manager (formerly Imanami GroupID) v11.0.0.0 and before & after v.11.1.25134.03 inserts Sensitive Information into Sent Da (CVSS 9.1)
- [CVE-2025-48925](https://cve.now/CVE-2025-48925.md): The TeleMessage service through 2025-05-05 relies on the client side (e.g., the TM SGNL app) to do MD5 hashing, and then accepts the hash as (CVSS 4.3, TeleMessage service)
- [CVE-2025-48926](https://cve.now/CVE-2025-48926.md): The admin panel in the TeleMessage service through 2025-05-05 allows attackers to discover usernames, e-mail addresses, passwords, and telep (CVSS 4.3, TeleMessage service)
- [CVE-2025-48927](https://cve.now/CVE-2025-48927.md): The TeleMessage service through 2025-05-05 configures Spring Boot Actuator with an exposed heap dump endpoint at a /heapdump URI, as exploit (CVSS 5.3, KEV, TeleMessage service)
- [CVE-2025-48928](https://cve.now/CVE-2025-48928.md): The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in (CVSS 4.0, KEV, TeleMessage service)
- [CVE-2025-48929](https://cve.now/CVE-2025-48929.md): The TeleMessage service through 2025-05-05 implements authentication through a long-lived credential (e.g., not a token with a short expirat (CVSS 4.0, TeleMessage service)
- [CVE-2025-48930](https://cve.now/CVE-2025-48930.md): The TeleMessage service through 2025-05-05 stores certain cleartext information in memory, even though memory content may be accessible to a (CVSS 2.8, TeleMessage service)
- [CVE-2025-48931](https://cve.now/CVE-2025-48931.md): The TeleMessage service through 2025-05-05 relies on MD5 for password hashing, which opens up various attack possibilities (including rainbo (CVSS 3.2, TeleMessage service)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-05-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.