# CVEs published 2025-05-29

78 CVEs were published on May 29, 2025: 12 critical, 20 high. Days are UTC.

- [CVE-2025-46352](https://cve.now/CVE-2025-46352.md): Consilium Safety CS5000 Fire Panel Use of Hard-coded Credentials (CVSS 9.8, Consilium Safety CS5000 Fire Panel)
- [CVE-2025-41438](https://cve.now/CVE-2025-41438.md): Consilium Safety CS5000 Fire Panel Initialization of a Resource with an Insecure Default (CVSS 9.8, Consilium Safety CS5000 Fire Panel)
- [CVE-2025-1907](https://cve.now/CVE-2025-1907.md): Instantel Micromate Missing Authentication for Critical Function (CVSS 9.8, Instantel Micromate)
- [CVE-2025-5332](https://cve.now/CVE-2025-5332.md): 1000 Projects Online Notice Board index.php sql injection (CVSS 6.9, 1000 Projects Online Notice Board)
- [CVE-2025-5307](https://cve.now/CVE-2025-5307.md): Santesoft Sante DICOM Viewer Pro Out-of-bounds Read (CVSS 8.4, Santesoft Sante DICOM Viewer Pro)
- [CVE-2025-5331](https://cve.now/CVE-2025-5331.md): PCMan FTP Server NLST Command buffer overflow (CVSS 6.9, PCMan FTP Server)
- [CVE-2025-30466](https://cve.now/CVE-2025-30466.md): This issue was addressed through improved state management. (CVSS 9.8, Apple Safari · Apple iOS and iPadOS +2)
- [CVE-2025-31261](https://cve.now/CVE-2025-31261.md): A permissions issue was addressed with additional sandbox restrictions. (CVSS 5.5, Apple macOS)
- [CVE-2025-31231](https://cve.now/CVE-2025-31231.md): A permissions issue was addressed with additional restrictions. (CVSS 5.5, Apple macOS)
- [CVE-2025-31199](https://cve.now/CVE-2025-31199.md): A logging issue was addressed with improved data redaction. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2025-31264](https://cve.now/CVE-2025-31264.md): An authentication issue was addressed with improved state management. (CVSS 4.6, Apple macOS)
- [CVE-2025-31198](https://cve.now/CVE-2025-31198.md): This issue was addressed with improved validation of symlinks. (CVSS 5.5, Apple macOS)
- [CVE-2025-31189](https://cve.now/CVE-2025-31189.md): A file quarantine bypass was addressed with additional checks. (CVSS 8.2, Apple macOS)
- [CVE-2025-31263](https://cve.now/CVE-2025-31263.md): The issue was addressed with improved memory handling. (CVSS 9.1, Apple macOS)
- [CVE-2025-5330](https://cve.now/CVE-2025-5330.md): FreeFloat FTP Server RETR Command buffer overflow (CVSS 6.9, FreeFloat FTP Server)
- [CVE-2025-5328](https://cve.now/CVE-2025-5328.md): chshcms mccms Backups.php restore\_del path traversal (CVSS 5.3, chshcms mccms)
- [CVE-2025-5327](https://cve.now/CVE-2025-5327.md): chshcms mccms Gf.php index server-side request forgery (CVSS 5.3, chshcms mccms)
- [CVE-2025-5326](https://cve.now/CVE-2025-5326.md): zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 verifyToken deserialization (CVSS 5.3, zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用…)
- [CVE-2025-4967](https://cve.now/CVE-2025-4967.md): Server Side Request Forgery (SSRF) vulnerability in Portal for ArcGIS (CVSS 9.1, Esri Portal for ArcGIS)
- [CVE-2025-5325](https://cve.now/CVE-2025-5325.md): zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 testService special elements used in a template engine (CVSS 5.3, zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用…)
- [CVE-2025-47933](https://cve.now/CVE-2025-47933.md): Argo CD allows cross-site scripting on repositories page (CVSS 9.1, argoproj argo-cd · github.com/argoproj/argo-cd +2)
- [CVE-2025-47288](https://cve.now/CVE-2025-47288.md): Discourse Policy plugin private group members visible (CVSS 3.5, discourse-policy)
- [CVE-2024-49350](https://cve.now/CVE-2024-49350.md): IBM Db2 denial of service (CVSS 6.5, IBM Db2 for Linux, UNIX and Windows)
- [CVE-2025-2518](https://cve.now/CVE-2025-2518.md): IBM Db2 denial of service (CVSS 5.3, IBM Db2 for Linux, UNIX and Windows)
- [CVE-2025-3050](https://cve.now/CVE-2025-3050.md): IBM Db2 denial of service (CVSS 5.3, IBM Db2 for Linux, UNIX and Windows)
- [CVE-2025-46701](https://cve.now/CVE-2025-46701.md): Apache Tomcat: Security constraint bypass for CGI scripts (CVSS 7.3, Apache Software Foundation Apache Tomcat · org.apache.to… +1)
- [CVE-2025-48336](https://cve.now/CVE-2025-48336.md): WordPress Course Builder \< 3.6.6 - PHP Object Injection Vulnerability (CVSS 9.8, ThimPress Course Builder)
- [CVE-2025-32752](https://cve.now/CVE-2025-32752.md): Dell ThinOS 2502 and prior contain a Cleartext Storage of Sensitive Information vulnerability. (CVSS 5.7, Dell ThinOS)
- [CVE-2025-5324](https://cve.now/CVE-2025-5324.md): TechPowerUp GPU-Z 0x8000645C IOCTL GPU-Z.sys sub\_140001880 memory leak (CVSS 4.8, TechPowerUp GPU-Z)
- [CVE-2025-5323](https://cve.now/CVE-2025-5323.md): fossasia open-event-server Mail Verification mail.py send\_email\_change\_user\_email reliance on obfuscation or encryption of security-relevant inputs without integrity checking (CVSS 6.3, fossasia open-event-server)
- [CVE-2025-46823](https://cve.now/CVE-2025-46823.md): OpenMRS has Vulnerability in FHIR2 Module Privileges (CVSS 8.0, openmrs-module-fhir2)
- [CVE-2025-46722](https://cve.now/CVE-2025-46722.md): vLLM has a Weakness in MultiModalHasher Image Hashing Implementation (CVSS 4.2, vllm-project vllm · vllm)
- [CVE-2025-46570](https://cve.now/CVE-2025-46570.md): vLLM’s Chunk-Based Prefix Caching Vulnerable to Potential Timing Side-Channel (CVSS 2.6, vllm-project vllm · vllm)
- [CVE-2025-48475](https://cve.now/CVE-2025-48475.md): FreeScout Vulnerable to Insufficient Authorization (CVSS 5.3, freescout-help-desk freescout)
- [CVE-2025-48474](https://cve.now/CVE-2025-48474.md): FreeScout Vulnerable to Insufficient Authorization (CVSS 5.3, freescout-help-desk freescout)
- [CVE-2025-48473](https://cve.now/CVE-2025-48473.md): FreeScout Vulnerable to Insufficient Authorization (CVSS 5.3, freescout-help-desk freescout)
- [CVE-2025-48472](https://cve.now/CVE-2025-48472.md): FreeScout Vulnerable to Insufficient Authorization (CVSS 6.9, freescout-help-desk freescout)
- [CVE-2025-48471](https://cve.now/CVE-2025-48471.md): FreeScout Vulnerable to Arbitrary File Upload (CVSS 7.0, freescout-help-desk freescout)
- [CVE-2025-48390](https://cve.now/CVE-2025-48390.md): FreeScout Vulnerable to Remote Code Execution (RCE) (CVSS 8.6, freescout-help-desk freescout)
- [CVE-2025-48389](https://cve.now/CVE-2025-48389.md): FreeScout Vulnerable to Deserialization of Untrusted Data (CVSS 8.6, freescout-help-desk freescout)
- [CVE-2025-3913](https://cve.now/CVE-2025-3913.md): Team Privacy Settings Authorization Bypass in Mattermost Server (CVSS 5.3, Mattermost · github.com/mattermost/mattermost-server +3)
- [CVE-2025-5321](https://cve.now/CVE-2025-5321.md): aimhubio aim run\_view Object query.py RestrictedPythonQuery privilege escalation (CVSS 5.3, aimhubio aim · aim)
- [CVE-2025-5334](https://cve.now/CVE-2025-5334.md): Exposure of private personal information to an unauthorized actor in the user vaults component of Devolutions Remote Desktop Manager allows (CVSS 7.5, Devolutions Remote Desktop Manager)
- [CVE-2025-4081](https://cve.now/CVE-2025-4081.md): TCC Bypass via Dylib Substitution in DaVinci Resolve (CVSS 4.8, Blackmagic Design DaVinci Resolve)
- [CVE-2025-33043](https://cve.now/CVE-2025-33043.md): SMM buffer Integrity (CVSS 5.8, AMI AptioV)
- [CVE-2025-5320](https://cve.now/CVE-2025-5320.md): gradio-app gradio CORS is\_valid\_origin privilege escalation (CVSS 6.3, gradio-app gradio · gradio)
- [CVE-2025-37999](https://cve.now/CVE-2025-37999.md): fs/erofs/fileio: call erofs\_onlinefolio\_split() after bio\_add\_folio() (no CVSS, Linux)
- [CVE-2025-37998](https://cve.now/CVE-2025-37998.md): openvswitch: Fix unsafe attribute parsing in output\_userspace() (CVSS 7.8, Linux)
- [CVE-2025-37997](https://cve.now/CVE-2025-37997.md): netfilter: ipset: fix region locking in hash types (CVSS 7.8, Linux)
- [CVE-2025-37996](https://cve.now/CVE-2025-37996.md): KVM: arm64: Fix uninitialized memcache pointer in user\_mem\_abort() (CVSS 8.8, Linux)
- [CVE-2025-37995](https://cve.now/CVE-2025-37995.md): module: ensure that kobject\_put() is safe for module type kobjects (no CVSS, Linux)
- [CVE-2025-37994](https://cve.now/CVE-2025-37994.md): usb: typec: ucsi: displayport: Fix NULL pointer access (no CVSS, Linux)
- [CVE-2025-37993](https://cve.now/CVE-2025-37993.md): can: m\_can: m\_can\_class\_allocate\_dev(): initialize spin lock on device probe (no CVSS, Linux)
- [CVE-2025-48047](https://cve.now/CVE-2025-48047.md): MICI Network Co. Ltd. NetFax Server Command Injection (CVSS 9.4, MICI Network Co. NetFax Server)
- [CVE-2025-48046](https://cve.now/CVE-2025-48046.md): MICI Network Co. Ltd. NetFax Server Disclosure of Stored Passwords in Cleartext (CVSS 5.3, MICI Network Co. NetFax Server)
- [CVE-2025-48045](https://cve.now/CVE-2025-48045.md): MICI Network Co. Ltd. NetFax Server Default Administrator Credentials Disclosure (CVSS 8.7, MICI Network Co. NetFax Server)
- [CVE-2025-48388](https://cve.now/CVE-2025-48388.md): FreeScout Has Insufficient Protection Against CRLF-injection (CVSS 7.0, freescout-help-desk freescout)
- [CVE-2025-27151](https://cve.now/CVE-2025-27151.md): redis-check-aof may lead to stack overflow and potential RCE (CVSS 4.7, redis)
- [CVE-2024-52588](https://cve.now/CVE-2024-52588.md): Strapi allows Server-Side Request Forgery in Webhook function (CVSS 4.9, strapi · @strapi/admin)
- [CVE-2025-4687](https://cve.now/CVE-2025-4687.md): Account pre-hijacking through invite misuse (CVSS 7.2, Teltonika Networks RMS)
- [CVE-2025-5286](https://cve.now/CVE-2025-5286.md): Bold Builder \<= 5.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via additional\_settings Parameter (CVSS 6.4, boldthemes Bold Page Builder)
- [CVE-2025-4670](https://cve.now/CVE-2025-4670.md): Easy Digital Downloads \<= 3.3.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via edd\_receipt Shortcode (CVSS 6.4, smub Easy Digital Downloads – eCommerce Payments and Subscr…)
- [CVE-2025-5122](https://cve.now/CVE-2025-5122.md): Map Block Leaflet \<= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter (CVSS 6.4, goiblas Map Block Leaflet)
- [CVE-2025-5276](https://cve.now/CVE-2025-5276.md): Versions of the package mcp-markdownify-server before 1.0.0 are vulnerable to Server-Side Request Forgery (SSRF) via the Markdownify.get() f (CVSS 8.2, mcp-markdownify-server)
- [CVE-2025-5273](https://cve.now/CVE-2025-5273.md): Versions of the package mcp-markdownify-server before 1.0.0 are vulnerable to Files or Directories Accessible to External Parties via the ge (CVSS 8.2, mcp-markdownify-server)
- [CVE-2025-3755](https://cve.now/CVE-2025-3755.md): Information Disclosure and Denial-of-Service(DoS) Vulnerability in MELSEC iQ-F Series CPU module (CVSS 9.1, Mitsubishi Electric MELSEC iQ-F Series FX5U-32MT/ES · M… +73)
- [CVE-2025-4583](https://cve.now/CVE-2025-4583.md): Smash Balloon Instagram Feed \<= 6.9.0 (Free) & \<= 6.8.0 (Pro) - Authenticated (Contributor+) Stored Cross-Site Scripting via \`data-plugin\` Attribute (CVSS 5.4, https://profiles.wordpress.org/smub/ Smash Balloon Instagra…)
- [CVE-2023-41591](https://cve.now/CVE-2023-41591.md): An issue in Open Network Foundation ONOS v2.7.0 allows attackers to create fake IP/MAC addresses and potentially execute a man-in-the-middle (CVSS 9.8)
- [CVE-2024-22653](https://cve.now/CVE-2024-22653.md): yasm commit 9defefae was discovered to contain a NULL pointer dereference via the yasm\_section\_bcs\_append function at section.c. (CVSS 4.8)
- [CVE-2024-22654](https://cve.now/CVE-2024-22654.md): tcpreplay v4.4.4 was discovered to contain an infinite loop via the tcprewrite function at get.c. (CVSS 7.5)
- [CVE-2024-51392](https://cve.now/CVE-2024-51392.md): An issue in OpenKnowledgeMaps Headstart v7 allows a remote attacker to escalate privileges via the url parameter of the getPDF.php component (CVSS 8.8)
- [CVE-2024-53423](https://cve.now/CVE-2024-53423.md): An issue in Open Network Foundation ONOS v2.7.0 allows attackers to cause a Denial of Service (DoS) via supplying crafted packets. (CVSS 5.6)
- [CVE-2024-54952](https://cve.now/CVE-2024-54952.md): MikroTik RouterOS 6.40.5, the SMB service contains a memory corruption vulnerability. (CVSS 7.5)
- [CVE-2025-29632](https://cve.now/CVE-2025-29632.md): Buffer Overflow vulnerability in Free5gc v.4.0.0 allows a remote attacker to cause a denial of service via the AMF, NGAP, security.go, handl (CVSS 5.4)
- [CVE-2025-45474](https://cve.now/CVE-2025-45474.md): maccms10 v2025.1000.4047 is vulnerable to Server-side request forgery (SSRF) in Email Settings. (CVSS 7.3)
- [CVE-2025-46078](https://cve.now/CVE-2025-46078.md): HuoCMS V3.5.1 and before is vulnerable to file upload, which allows attackers to take control of the target server (CVSS 5.3)
- [CVE-2025-46080](https://cve.now/CVE-2025-46080.md): HuoCMS V3.5.1 has a File Upload Vulnerability. (CVSS 5.3)
- [CVE-2025-48748](https://cve.now/CVE-2025-48748.md): Netwrix Directory Manager (formerly Imanami GroupID) through v.10.0.7784.0 has a hard-coded password. (CVSS 10.0)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-05-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.