CVEs published May 19 to May 25, 2025
895 CVEs were published May 19 to May 25, 2025, 130 of them critical. CISA added 7 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 895
- Critical
- 130
- Added to CISA KEV
- 7
- Busiest day
- Mon, May 19 (244)
- Quietest day
- Sun, May 25 (20)
- May 19, 2025244 CVEs · 28 critical
- May 20, 2025172 CVEs · 28 critical
- May 21, 2025114 CVEs · 11 critical
- May 22, 2025136 CVEs · 12 critical
- May 23, 2025183 CVEs · 47 critical
- May 24, 202526 CVEs · 3 critical
- May 25, 202520 CVEs · 1 critical
Added to CISA KEV 7
- CVE-2023-38950A path traversal vulnerability in the iclock API of ZKTeco BioTime v8.5.5 allows unauthenticated attackers to read arbitrary files via suppl
- CVE-2024-11182Stored XSS vulnerability in MDaemon Email ServerMDaemon Email Server
- CVE-2024-27443An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0.
- CVE-2025-27920Output Messenger before 2.0.63 was vulnerable to a directory traversal attack through improper file path handling.Srimax Output Messenger
- CVE-2025-4427Authentication BypassIvanti Endpoint Manager Mobile
- CVE-2025-4428Remote Code ExecutionIvanti Endpoint Manager Mobile
- CVE-2025-4632Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackSamsung Electronics MagicINFO 9 Server