İçeriğe atla
Noroxi

Yayın tarihine göre

Mayıs 2025: sömürülen ve yeni ciddi CVE kayıtları

214 kayıt · 19 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 3

  • CVE-2025-1304
    35İzleyin

    NewsBlogger <= 0.2.5.1 - Authenticated (Subscriber+) Arbitrary File Upload

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    spicethemes · newsblogger1 May 2025

  • CVE-2025-27007
    55Planlayın

    WordPress SureTriggers <= 1.0.82 - Privilege Escalation Vulnerability

    KritikCVSS 9,8SilahlaştırılmışEPSS %54

    brainstorm force · ottokit1 May 2025

  • CVE-2025-46565
    24İzleyin

    Vite's server.fs.deny bypassed with /. for files under project root

    OrtaCVSS 6,0Kavram kanıtıEPSS %1

    vitejs · vite1 May 2025

  • CVE-2025-32011
    46Planlayın

    KUNBUS Revolution Pi Authentication Bypass by Primary Weakness

    KritikCVSS 9,3İstismar yokEPSS %28

    kunbus gmbh · revolution pi pictory1 May 2025

  • CVE-2025-35996
    40Planlayın

    KUNBUS Revolution Pi Improper Neutralization of Server-Side Includes (SSI) Within a Web Page

    YüksekCVSS 8,5İstismar yokEPSS %19

    kunbus gmbh · revolution pi pictory1 May 2025

  • CVE-2025-36558
    26İzleyin

    KUNBUS Revolution Pi Improper Neutralization of Server-Side Includes (SSI) Within a Web Page

    OrtaCVSS 5,1İstismar yokEPSS %19

    kunbus gmbh · revolution pi pictory1 May 2025

  • CVE-2025-4185
    25İzleyin

    Wangshen SecGate 3600 g=obj_area_export_save path traversal

    OrtaCVSS 5,3İstismar yokEPSS %13

    wangshen · secgate 36001 May 2025

  • CVE-2024-13322
    31İzleyin

    Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.88 - Unauthenticated SQL Injection

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    scripteo · ads pro2 May 2025

  • CVE-2025-2812
    39İzleyin

    SQLi in Mydata Informatics' Ticket Sales Automation

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    mydata · ticket sales automation2 May 2025

  • CVE-2025-2605
    40Planlayın

    Authenticated command injection

    YüksekCVSS 8,8İstismar yokEPSS %16

    honeywell · mb-secure firmware2 May 2025

  • CVE-2025-4210
    28İzleyin

    Casdoor SCIM User Creation Endpoint scim.go HandleScim authorization

    OrtaCVSS 6,9Kavram kanıtıEPSS %1

    2 May 2025

  • CVE-2025-47226
    13İzleyin

    Grokability Snipe-IT before 8.1.0 has incorrect authorization for accessing asset information.

    DüşükCVSS 3,3Kavram kanıtıEPSS %1

    snipeitapp · snipe-it2 May 2025

  • CVE-2025-4255
    28İzleyin

    PCMan FTP Server RMD Command buffer overflow

    OrtaCVSS 6,9Kavram kanıtıEPSS %2

    pcman · ftp server4 May 2025

  • CVE-2025-4270
    31İzleyin

    TOTOLINK A720R Config cstecgi.cgi information disclosure

    OrtaCVSS 6,9İstismar yokEPSS %14

    totolink · a720r firmware5 May 2025

  • CVE-2025-27920
    66Bu hafta

    Output Messenger before 2.0.63 was vulnerable to a directory traversal attack through improper file path handling.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %1

    srimax · output messenger5 May 2025

  • CVE-2025-28062
    32İzleyin

    A Cross-Site Request Forgery (CSRF) vulnerability was discovered in ERPNEXT 14.82.1 and 14.74.3.

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    frappe · erpnext5 May 2025

  • CVE-2025-46731
    29İzleyin

    Craft CMS Contains a Potential Remote Code Execution Vulnerability via Twig SSTI

    YüksekCVSS 7,3Kavram kanıtıEPSS %1

    craftcms · craft cms5 May 2025

  • CVE-2025-4341
    28İzleyin

    D-Link DIR-880L Request Header ssdpcgi sub_16570 command injection

    OrtaCVSS 5,3İstismar yokEPSS %24

    dlink · dir-880l firmware6 May 2025

  • CVE-2025-2011
    44Planlayın

    Slider & Popup Builder by Depicter <= 3.6.1 - Unauthenticated SQL Injection via 's' Parameter

    YüksekCVSS 7,5SilahlaştırılmışEPSS %45

    averta · depicter — popup & slider builder6 May 2025

  • CVE-2025-4357
    25İzleyin

    Tenda RX3 telnet command injection

    OrtaCVSS 5,1İstismar yokEPSS %15

    tenda · rx3 firmware6 May 2025

  • CVE-2025-45487
    42Planlayın

    Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.InternetConnection function.

    KritikCVSS 9,8İstismar yokEPSS %11

    linksys · e5600 firmware6 May 2025

  • CVE-2025-45488
    43Planlayın

    Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the mailex

    KritikCVSS 9,8İstismar yokEPSS %11

    linksys · e5600 firmware6 May 2025

  • CVE-2025-45250
    22İzleyin

    MrDoc v0.95 and before is vulnerable to Server-Side Request Forgery (SSRF) in the validate_url function of the app_doc/utils.py file.

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    mrdoc · mrdoc6 May 2025

  • CVE-2025-25014
    46Planlayın

    Kibana arbitrary code execution via prototype pollution

    KritikCVSS 9,8Kavram kanıtıEPSS %22

    elastic · kibana6 May 2025

  • CVE-2025-4388
    28İzleyin

    A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q

    OrtaCVSS 6,9Kavram kanıtıEPSS %3

    liferay · digital experience platform6 May 2025

  • CVE-2025-46816
    37İzleyin

    goshs route not protected, allows command execution

    KritikCVSS 9,4Kavram kanıtıEPSS %0

    patrickhener · goshs6 May 2025

  • CVE-2025-46820
    28İzleyin

    phpgt/Dom exposes the GITHUB_TOKEN in Dom workflow run artifact

    YüksekCVSS 7,1Kavram kanıtıEPSS %0

    phpgt · dom6 May 2025

  • CVE-2025-47256
    22İzleyin

    Libxmp through 4.6.2 has a stack-based buffer overflow in depack_pha in loaders/prowizard/pha.c via a malformed Pha format tracker module in

    OrtaCVSS 5,6Kavram kanıtıEPSS %0

    libxmp · libxmp6 May 2025

  • CVE-2025-27533
    30İzleyin

    Apache ActiveMQ: Unchecked buffer length can cause excessive memory allocation

    OrtaCVSS 6,9Kavram kanıtıEPSS %8

    apache · activemq7 May 2025

  • CVE-2025-29602
    24İzleyin

    flatpress 1.3.1 is vulnerable to Cross Site Scripting (XSS) in Administration area via Manage categories.

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    flatpress · flatpress7 May 2025

  • CVE-2025-29448
    30İzleyin

    Booking logic flaw in Easy!Appointments v1.5.1 allows unauthenticated attackers to create appointments with excessively long durations, caus

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    easyappointments · easy\!appointments7 May 2025

  • CVE-2025-2775
    73Bu hafta

    SysAid On-Prem <= 23.3.40 Checkin Proceessing XML External Entity Injection

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %42

    sysaid · sysaid7 May 2025

  • CVE-2025-2776
    88Hemen

    SysAid On-Prem <= 23.3.40 serverurl Proceessing XML External Entity Injection

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %64

    sysaid · sysaid7 May 2025

  • CVE-2025-2777
    61Bu hafta

    SysAid On-Prem <= 23.3.40 lshw Proceessing XML External Entity Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %72

    sysaid · sysaid7 May 2025

  • CVE-2025-47468
    17İzleyin

    WordPress Hash Form plugin <= 1.2.8 - Cross Site Request Forgery (CSRF) Vulnerability

    OrtaCVSS 4,3İstismar yokEPSS %0

    hashthemes · hash form7 May 2025

  • CVE-2025-47533
    32İzleyin

    WordPress Graphina plugin <= 3.0.4 - Cross Site Request Forgery (CSRF) to Local File Inclusion vulnerability

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    iqonic design · graphina7 May 2025

  • CVE-2025-47549
    28İzleyin

    WordPress BEAF plugin <= 4.6.10 - Arbitrary File Upload Vulnerability

    YüksekCVSS 7,2Kavram kanıtıEPSS %0

    themefic · ultimate before after image slider \& gallery7 May 2025

  • CVE-2025-47550
    28İzleyin

    WordPress Instantio plugin <= 3.3.16 - Arbitrary File Upload Vulnerability

    YüksekCVSS 7,2Kavram kanıtıEPSS %0

    themefic · instantio7 May 2025

  • CVE-2025-47664
    26İzleyin

    WordPress WP Pipes <= 1.4.2 - Server Side Request Forgery (SSRF) Vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %0

    thimpress · wp pipes7 May 2025

  • CVE-2025-20188
    48Planlayın

    A vulnerability in the Out-of-Band Access Point (AP) Image Download, the Clean Air Spectral Recording, and the client debug bundles features

    KritikCVSS 10,0Kavram kanıtıEPSS %27

    cisco · ios xe7 May 2025

  • CVE-2025-32821
    35İzleyin

    A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin privileges can inject shell com

    YüksekCVSS 7,2İstismar yokEPSS %22

    sonicwall · sma 100 firmware7 May 2025

  • CVE-2025-47423
    24İzleyin

    Personal Weather Station Dashboard 12_lts allows unauthenticated remote attackers to read arbitrary files via ../ directory traversal in the

    OrtaCVSS 5,8Kavram kanıtıEPSS %1

    pwsdashboard · personal weather station dashboard7 May 2025

  • CVE-2025-31644
    41Planlayın

    Appliance mode BIG-IP iControl REST and tmsh vulnerability

    YüksekCVSS 8,5Kavram kanıtıEPSS %24

    f5 · big-ip access policy manager7 May 2025

  • CVE-2025-35939
    57Planlayın

    Craft CMS stores user-provided content in session files

    OrtaCVSS 6,9KEVSilahlaştırılmışEPSS %1

    craftcms · craft cms7 May 2025

  • CVE-2025-32873
    25İzleyin

    An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1.

    OrtaCVSS 5,3Kavram kanıtıEPSS %14

    djangoproject · django8 May 2025

  • CVE-2025-3419
    30İzleyin

    Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.26 - Unauthenticated Arbitrary File Read

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    themewinter · eventin8 May 2025

  • CVE-2025-41450
    32İzleyin

    Authentication bypass with privileged access in Danfoss AK-SM 8xxA Series prior to version 4.2

    YüksekCVSS 8,2Kavram kanıtıEPSS %0

    danfoss · ak-sm 8xxa series8 May 2025

  • CVE-2024-6648
    34İzleyin

    Path Traversal in AP Page Builder

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    apollotheme · ap pagebuilder8 May 2025

  • CVE-2025-47729
    49Planlayın

    The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which i

    OrtaCVSS 4,9KEVSilahlaştırılmışEPSS %0

    telemessage · text message archiver8 May 2025

  • CVE-2025-28073
    24İzleyin

    phpList before 3.6.15 is vulnerable to Reflected Cross-Site Scripting (XSS) via the /lists/dl.php endpoint.

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    phplist · phplist8 May 2025

  • CVE-2025-45797
    44Planlayın

    TOTOlink A950RG V4.1.2cu.5204_B20210112 contains a buffer overflow vulnerability.

    KritikCVSS 9,8İstismar yokEPSS %18

    totolink · a950rg firmware8 May 2025

  • CVE-2025-28074
    24İzleyin

    phpList before 3.6.15 is vulnerable to Cross-Site Scripting (XSS) due to improper input sanitization in lt.php.

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    phplist · phplist8 May 2025

  • CVE-2025-29972
    40Planlayın

    Azure Storage Resource Provider Spoofing Vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    microsoft · azure storage resource provider8 May 2025

  • CVE-2025-4443
    40Planlayın

    D-Link DIR-605L sub_454F2C command injection

    OrtaCVSS 5,3İstismar yokEPSS %62

    dlink · dir-605l firmware8 May 2025

  • CVE-2025-3605
    41Planlayın

    Frontend Login and Registration Blocks <= 1.1.1 - Unauthenticated Privilege Escalation via Account Takeover

    KritikCVSS 9,8Kavram kanıtıEPSS %7

    arkenon · login, registration and lost password blocks9 May 2025

  • CVE-2025-4403
    40Planlayın

    Drag and Drop Multiple File Upload for WooCommerce <= 1.1.6 - Unauthenticated Arbitrary File Upload via upload Function

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    glenwpcoder · drag and drop multiple file upload for woocommerce9 May 2025

  • CVE-2025-47269
    46Planlayın

    code-server session cookie can be extracted by having user visit specially crafted proxy URL

    YüksekCVSS 8,3İstismar yokEPSS %44

    coder · code-server9 May 2025

  • CVE-2025-4544
    34İzleyin

    D-Link DI-8100 jhttpd ddos.asp stack-based overflow

    YüksekCVSS 7,5İstismar yokEPSS %11

    dlink · di-8100 firmware11 May 2025

  • CVE-2025-41393
    20İzleyin

    Reflected cross-site scripting vulnerability exists in the laser printers and MFPs (multifunction printers) which implement Ricoh Web Image

    OrtaCVSS 5,1Kavram kanıtıEPSS %0

    ricoh company, ltd. · multiple laser printers and mfps which implement web image monitor12 May 2025

  • CVE-2023-34732
    21İzleyin

    An issue in the userId parameter in the change password function of Flytxt NEON-dX v0.0.1-SNAPSHOT-6.9-qa-2-9-g5502a0c allows attackers to e

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    flytxt · neon-dx12 May 2025

  • CVE-2025-44176
    29İzleyin

    Tenda FH451 V1.0.0.9 is vulnerable to Remote Code Execution in the formSafeEmailFilter function.

    OrtaCVSS 6,5İstismar yokEPSS %10

    tenda · fh451 firmware12 May 2025

  • CVE-2024-55466
    26İzleyin

    An arbitrary file upload vulnerability in the Image Gallery of ThingsBoard Community, ThingsBoard Cloud and ThingsBoard Professional v3.8.1

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    thingsboard · thingsboard12 May 2025

  • CVE-2025-31207
    30İzleyin

    A logic issue was addressed with improved checks.

    YüksekCVSS 7,7Kavram kanıtıEPSS %0

    apple · ipados12 May 2025

  • CVE-2025-31258
    26İzleyin

    This issue was addressed by removing the vulnerable code.

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    apple · macos12 May 2025

  • CVE-2025-42999
    70Bu hafta

    Insecure Deserialization in SAP NetWeaver (Visual Composer development server)

    KritikCVSS 9,1KEVSilahlaştırılmışEPSS %12

    sap · netweaver12 May 2025

  • CVE-2025-4396
    31İzleyin

    Relevanssi <= 4.24.4 (Free) and <= 2.27.5 (Premium) - Unauthenticated SQL Injection

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    relevanssi · relevanssi premium13 May 2025

  • CVE-2025-4632
    76Bu hafta

    Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attack

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %24

    samsung · magicinfo 9 server13 May 2025

  • CVE-2025-32756
    78Bu hafta

    A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all version

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %30

    fortinet · fortimail13 May 2025

  • CVE-2025-44039
    20İzleyin

    CP-XR-DE21-S -4G Router Firmware version 1.031.022 was discovered to contain insecure protections for its UART console.

    OrtaCVSS 5,1Kavram kanıtıEPSS %0

    cpplusworld · cp-xr-de21-s firmware13 May 2025

  • CVE-2024-46506
    59Planlayın

    NetAlertX 23.01.14 through 24.x before 24.10.12 allows unauthenticated command injection via settings update because function=savesettings l

    KritikCVSS 10,0SilahlaştırılmışEPSS %62

    netalertx · netalertx13 May 2025

  • CVE-2024-48766
    54Planlayın

    NetAlertX 24.7.18 before 24.10.12 allows unauthenticated file reading because an HTTP client can ignore a redirect, and because of factors r

    YüksekCVSS 8,6SilahlaştırılmışEPSS %67

    netalertx · netalertx13 May 2025

  • CVE-2025-45858
    42Planlayın

    TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability via the FUN_00459fdc function.

    KritikCVSS 9,8İstismar yokEPSS %10

    totolink · a3002r firmware13 May 2025

  • CVE-2025-46721
    24İzleyin

    nosurf vulnerable to CSRF due to non-functional same-origin request checks

    OrtaCVSS 6,0Kavram kanıtıEPSS %0

    nosurf project · nosurf13 May 2025

  • CVE-2025-47204
    24İzleyin

    An issue was discovered in post.php in bootstrap-multiselect (aka Bootstrap Multiselect) 1.1.2.

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    davidstutz · bootstrap multiselect13 May 2025

  • CVE-2025-4427
    90Hemen

    Authentication Bypass

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %99

    ivanti · endpoint manager mobile13 May 2025

  • CVE-2025-4428
    91Hemen

    Remote Code Execution

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %86

    ivanti · endpoint manager mobile13 May 2025

  • CVE-2025-29962
    39İzleyin

    Windows Media Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %14

    microsoft · windows 10 150713 May 2025

  • CVE-2025-29969
    30İzleyin

    MS-EVEN RPC Remote Code Execution Vulnerability

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    microsoft · windows 10 150713 May 2025

  • CVE-2025-29971
    50Planlayın

    Web Threat Defense (WTD.sys) Denial of Service Vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %66

    microsoft · windows 11 22h213 May 2025

  • CVE-2025-30394
    33İzleyin

    Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

    OrtaCVSS 5,9İstismar yokEPSS %32

    microsoft · windows server 201213 May 2025

  • CVE-2025-30397
    68Bu hafta

    Scripting Engine Memory Corruption Vulnerability

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %27

    microsoft · windows 10 150713 May 2025

  • CVE-2025-30400
    62Bu hafta

    Microsoft DWM Core Library Elevation of Privilege Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %1

    microsoft · windows 10 180913 May 2025

  • CVE-2025-32701
    61Bu hafta

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %1

    microsoft · windows 10 150713 May 2025

  • CVE-2025-32706
    62Bu hafta

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %2

    microsoft · windows 10 150713 May 2025

  • CVE-2025-32709
    62Bu hafta

    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %1

    microsoft · windows 10 150713 May 2025

  • CVE-2025-4660
    34İzleyin

    Remote Code Execution in Windows Secure Connector/ HPS Inspection Engine via Insecure Named Pipe Access

    YüksekCVSS 8,7Kavram kanıtıEPSS %1

    forescout · secureconnector13 May 2025

  • CVE-2025-43560
    42Planlayın

    ColdFusion | Improper Input Validation (CWE-20)

    KritikCVSS 9,1İstismar yokEPSS %21

    adobe · coldfusion13 May 2025

  • CVE-2025-43561
    43Planlayın

    ColdFusion | Incorrect Authorization (CWE-863)

    KritikCVSS 9,1İstismar yokEPSS %22

    adobe · coldfusion13 May 2025

  • CVE-2025-43562
    51Planlayın

    ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)

    KritikCVSS 9,1İstismar yokEPSS %49

    adobe · coldfusion13 May 2025

  • CVE-2025-43563
    41Planlayın

    ColdFusion | Improper Access Control (CWE-284)

    KritikCVSS 9,1İstismar yokEPSS %15

    adobe · coldfusion13 May 2025

  • CVE-2025-43564
    41Planlayın

    ColdFusion | Incorrect Authorization (CWE-863)

    KritikCVSS 9,1Kavram kanıtıEPSS %16

    adobe · coldfusion13 May 2025

  • CVE-2025-43565
    38İzleyin

    ColdFusion | Incorrect Authorization (CWE-863)

    YüksekCVSS 8,4İstismar yokEPSS %17

    adobe · coldfusion13 May 2025

  • CVE-2025-43566
    44Planlayın

    ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

    OrtaCVSS 6,8İstismar yokEPSS %56

    adobe · coldfusion13 May 2025

  • CVE-2025-3833
    46Planlayın

    Zohocorp ManageEngine ADSelfService Plus versions 6513 and prior are vulnerable to authenticated SQL injection in the MFA reports.

    YüksekCVSS 8,1İstismar yokEPSS %46

    zohocorp · manageengine adselfservice plus14 May 2025

  • CVE-2025-47445
    41Planlayın

    WordPress Eventin plugin <= 4.0.26 - Arbitrary File Download Vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %5

    themewinter · eventin14 May 2025

  • CVE-2024-54780
    39İzleyin

    Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds are vulnerable to command injection in the OpenVPN widget due

    YüksekCVSS 8,8İstismar yokEPSS %12

    netgate · pfsense ce14 May 2025

  • CVE-2025-3600
    38İzleyin

    Unsafe Reflection Vulnerability in Telerik UI for ASP.NET AJAX

    YüksekCVSS 7,5İstismar yokEPSS %25

    progress · telerik ui for asp.net ajax14 May 2025

  • CVE-2025-4664
    19İzleyin

    Insufficient policy enforcement in Loader in Google Chrome prior to 136.0.7103.113 allowed a remote attacker to leak cross-origin data via a

    OrtaCVSS 4,3Kavram kanıtıEPSS %5

    google · chrome14 May 2025

  • CVE-2025-0133
    24İzleyin

    PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Gateway and Portal

    DüşükCVSS 2,7Kavram kanıtıEPSS %46

    palo alto networks · cloud ngfw14 May 2025

  • CVE-2025-32421
    14İzleyin

    Next.js Race Condition to Cache Poisoning

    DüşükCVSS 3,7Kavram kanıtıEPSS %0

    vercel · next.js14 May 2025