İçeriğe atla
Noroxi

Yayın tarihine göre

Mayıs 2025: sömürülen ve yeni ciddi CVE kayıtları

214 kayıt · 19 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 2 / 3

  • CVE-2025-47783
    30İzleyin

    label-studio vulnerable to Cross-Site Scripting (Reflected) via the label_config parameter.

    YüksekCVSS 7,6Kavram kanıtıEPSS %0

    humansignal · label studio14 May 2025

  • CVE-2025-4126
    25İzleyin

    EG-Series <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    OrtaCVSS 6,4Kavram kanıtıEPSS %0

    emmanuelg · eg-series15 May 2025

  • CVE-2023-6030
    21İzleyin

    LogDash Activity Log < 1.1.4 - Unauthenticated SQLi

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    deryckoe · logdash activity log15 May 2025

  • CVE-2023-6786
    24İzleyin

    Payment Gateway for Telcell <= 2.0.1 - Unauthenticated Open Redirect

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    hkdigit · payment gateway for telcell15 May 2025

  • CVE-2023-7231
    29İzleyin

    illi Link Party! <= 1.0 - Unauthenticated Arbitrary Link Deletion

    YüksekCVSS 7,3Kavram kanıtıEPSS %0

    evanliewer · illi link party\!15 May 2025

  • CVE-2024-12724
    24İzleyin

    WP DeskLite <= 1.0.0 - Reflected XSS

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    codeflock · wp desklite15 May 2025

  • CVE-2024-12732
    24İzleyin

    AffiliateImporterEb <= 1.0.6 - Reflected XSS

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    cr1000 · affiliateimportereb15 May 2025

  • CVE-2024-12734
    24İzleyin

    Advance Post Prefix <= 1.1.1 - Reflected XSS

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    niceit · advance post prefix15 May 2025

  • CVE-2024-12873
    24İzleyin

    Custom Field Manager <= 1.0 - Reflected XSS Vulnerability

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    f1logic · custom field manager15 May 2025

  • CVE-2024-13619
    24İzleyin

    LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes < 8.0.1 - Reflected XSS

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    lifterlms · lifterlms15 May 2025

  • CVE-2024-13727
    24İzleyin

    MemberSpace – Membership Plugin and Paid Subscriptions < 2.1.14 - Reflected XSS

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    memberspace · memberspace15 May 2025

  • CVE-2024-6159
    40Planlayın

    Push Notification for Post and BuddyPress <=1.93 - Multiple Unauthenticated SQLi

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    pnfpb · push notification for post and buddypress15 May 2025

  • CVE-2024-6690
    24İzleyin

    WP Content Copy Protection & No Right Click (premium) < 15.3 - Open Redirect

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    wp-buy · wp content copy protection \& no right click15 May 2025

  • CVE-2024-8673
    37İzleyin

    Z-Downloads < 1.11.7 - Admin+ Stored XSS via SVG Upload

    KritikCVSS 9,1Kavram kanıtıEPSS %1

    urbanbase · z-downloads15 May 2025

  • CVE-2024-9765
    26İzleyin

    EKC Tournament Manager < 2.2.2 - Local File Download Vulnerability

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    lukashuser · ekc tournament manager15 May 2025

  • CVE-2025-1303
    24İzleyin

    Plugin Oficial – Getnet para WooCommerce <= 1.7.3 - Unauthenticated Reflected XSS

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    coffee-code · plugin oficial15 May 2025

  • CVE-2025-47161
    31İzleyin

    Microsoft Defender for Endpoint Elevation of Privilege Vulnerability

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    microsoft · defender for endpoint15 May 2025

  • CVE-2025-47928
    36İzleyin

    Spotipy repo vulnerable to secrets exfiltration via `pull_request_target`

    KritikCVSS 9,1Kavram kanıtıEPSS %0

    spotipy-dev · spotipy15 May 2025

  • CVE-2025-4720
    21İzleyin

    SourceCodester Student Result Management System drop_student.php path traversal

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    munyweki · student result management system15 May 2025

  • CVE-2025-4679
    26İzleyin

    A vulnerability in Synology Active Backup for Microsoft 365 allows remote authenticated attackers to obtain sensitive information via unspec

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    synology · active backup for microsoft 36516 May 2025

  • CVE-2025-40630
    20İzleyin

    Open redirection vulnerability in IceWarp Mail Server

    OrtaCVSS 5,1Kavram kanıtıEPSS %0

    icewarp · mail server16 May 2025

  • CVE-2025-40629
    34İzleyin

    Path Traversal vulnerability in PNETLab

    YüksekCVSS 8,7Kavram kanıtıEPSS %0

    pnetlab · pnetlab16 May 2025

  • CVE-2025-47916
    64Bu hafta

    Invision Community 5.0.0 before 5.0.7 allows remote code execution via crafted template strings to themeeditor.php.

    KritikCVSS 9,8SilahlaştırılmışEPSS %84

    invisioncommunity · invisioncommunity16 May 2025

  • CVE-2025-39507
    35İzleyin

    WordPress Nasa Core Plugin <= 6.4.4 - Local File Inclusion vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    nasatheme · nasa core16 May 2025

  • CVE-2025-4476
    17İzleyin

    Libsoup: null pointer dereference in libsoup may lead to denial of service

    OrtaCVSS 4,3Kavram kanıtıEPSS %0

    red hat · red hat enterprise linux 1016 May 2025

  • CVE-2025-4802
    31İzleyin

    Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    gnu · glibc16 May 2025

  • CVE-2025-32407
    23İzleyin

    Samsung Internet for Galaxy Watch version 5.0.9, available up until Samsung Galaxy Watch 3, does not properly validate TLS certificates, all

    OrtaCVSS 5,9Kavram kanıtıEPSS %0

    samsung · internet16 May 2025

  • CVE-2025-4190
    28İzleyin

    CSV Mass Importer <= 1.2 - Admin+ Arbitrary File Upload

    YüksekCVSS 7,2Kavram kanıtıEPSS %0

    aleapp · csv mass importer17 May 2025

  • CVE-2025-4389
    39İzleyin

    Crawlomatic Multipage Scraper Post Generator <= 2.6.8.1 - Unauthenticated Arbitrary File Upload

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    coderevolution · crawlomatic multipage scraper post generator17 May 2025

  • CVE-2025-47273
    30İzleyin

    setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

    YüksekCVSS 7,7Kavram kanıtıEPSS %1

    python · setuptools17 May 2025

  • CVE-2025-47931
    11İzleyin

    LibreNMS stored Cross-site Scripting vulnerability in poller group name

    DüşükCVSS 2,1İstismar yokEPSS %10

    librenms · librenms17 May 2025

  • CVE-2025-4866
    21İzleyin

    weibocom rill-flow Management Console code injection

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    weibo · rill-flow18 May 2025

  • CVE-2025-4871
    28İzleyin

    PCMan FTP Server REST Command buffer overflow

    OrtaCVSS 6,9Kavram kanıtıEPSS %1

    pcman · ftp server18 May 2025

  • CVE-2025-4901
    45Planlayın

    D-Link DI-7003GV2 HTTP Endpoint state_view.data sub_41E304 information disclosure

    OrtaCVSS 5,3İstismar yokEPSS %78

    dlink · di-7003g firmware18 May 2025

  • CVE-2025-4902
    31İzleyin

    D-Link DI-7003GV2 versionupdate.data sub_48F4F0 information disclosure

    OrtaCVSS 6,9İstismar yokEPSS %14

    dlink · di-7003g firmware18 May 2025

  • CVE-2025-23167
    26İzleyin

    A flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using `\r\n\rX` instead of the required `\r\n\r\n`.

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    nodejs · node18 May 2025

  • CVE-2025-44108
    19İzleyin

    A stored Cross-Site Scripting (XSS) vulnerability exists in the administration panel of Flatpress CMS before 1.4 via the gallery captions co

    OrtaCVSS 4,8Kavram kanıtıEPSS %0

    flatpress · flatpress19 May 2025

  • CVE-2024-33939
    21İzleyin

    WordPress LMS by Masteriyo plugin <= 1.7.3 - Broken Authentication vulnerability

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    themegrill · masteriyo19 May 2025

  • CVE-2025-26892
    39İzleyin

    WordPress Celestial Aura plugin <= 2.2 - Arbitrary File Upload vulnerability

    KritikCVSS 9,9Kavram kanıtıEPSS %0

    dkszone · celestial aura19 May 2025

  • CVE-2025-39459
    29İzleyin

    WordPress Real Estate 7 theme <= 3.5.2 - Privilege Escalation vulnerability

    YüksekCVSS 7,3Kavram kanıtıEPSS %0

    contempoinc · real estate 719 May 2025

  • CVE-2025-47577
    41Planlayın

    WordPress TI WooCommerce Wishlist plugin <= 2.9.2 - Arbitrary File Upload Vulnerability

    KritikCVSS 10,0Kavram kanıtıEPSS %4

    templateinvaders · ti woocommerce wishlist19 May 2025

  • CVE-2025-39366
    35İzleyin

    WordPress wProject theme < 5.8.0 - Subscriber+ Privilege Escalation vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    rocket apps · wproject19 May 2025

  • CVE-2025-39401
    40Planlayın

    WordPress WPAMS plugin <= 44.0 (17-08-2023) - Arbitrary File Upload vulnerability

    KritikCVSS 10,0Kavram kanıtıEPSS %0

    mojoomla · wpams19 May 2025

  • CVE-2025-4971
    34İzleyin

    Broadcom Automic Automation Agent Unix privilege escalation

    YüksekCVSS 8,5Kavram kanıtıEPSS %0

    broadcom · automic automation19 May 2025

  • CVE-2025-4322
    44Planlayın

    Motors <= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover

    KritikCVSS 9,8Kavram kanıtıEPSS %15

    stylemixthemes · motors - car dealer, rental & listing wordpress theme20 May 2025

  • CVE-2025-40634
    36İzleyin

    Stack-based buffer overflow in TP-Link Archer AX50

    KritikCVSS 9,2Kavram kanıtıEPSS %0

    tp-link · link archer ax5020 May 2025

  • CVE-2025-4978
    43Planlayın

    Netgear DGND3700 Basic Authentication BRS_top.html improper authentication

    KritikCVSS 9,3İstismar yokEPSS %21

    netgear · dgnd3700 firmware20 May 2025

  • CVE-2025-26086
    34İzleyin

    An unauthenticated blind SQL injection vulnerability exists in RSI Queue Management System v3.0 within the TaskID parameter of the get reque

    YüksekCVSS 7,5İstismar yokEPSS %14

    rsiqueue · management system20 May 2025

  • CVE-2025-41228
    17İzleyin

    VMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) Vulnerability

    OrtaCVSS 4,3Kavram kanıtıEPSS %0

    vmware · vcenter server20 May 2025

  • CVE-2025-37899
    31İzleyin

    ksmbd: fix use-after-free in session logoff

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    linux · linux kernel20 May 2025

  • CVE-2025-37928
    31İzleyin

    dm-bufio: don't schedule in atomic context

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    linux · linux kernel20 May 2025

  • CVE-2025-37947
    31İzleyin

    ksmbd: prevent out-of-bounds stream writes by validating *pos

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    linux · linux kernel20 May 2025

  • CVE-2025-44084
    45Planlayın

    D-link DI-8100 16.07.26A1 is vulnerable to Command Injection.

    KritikCVSS 9,8İstismar yokEPSS %21

    dlink · di-8100g firmware20 May 2025

  • CVE-2025-37924
    38İzleyin

    ksmbd: fix use-after-free in kerberos authentication

    YüksekCVSS 7,8İstismar yokEPSS %22

    linux · linux kernel20 May 2025

  • CVE-2025-4094
    44Planlayın

    Digits < 8.4.6.1 - Auth Bypass via OTP Bruteforcing

    KritikCVSS 9,8Kavram kanıtıEPSS %16

    unitedover · digits21 May 2025

  • CVE-2025-4524
    42Planlayın

    Madara – Responsive and modern WordPress theme for manga sites <= 2.2.2 - Unauthenticated Local File Inclusion

    KritikCVSS 9,8Kavram kanıtıEPSS %10

    wpstylish · madara – responsive and modern wordpress theme for manga sites21 May 2025

  • CVE-2025-4611
    25İzleyin

    Slim SEO <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via slim_seo_breadcrumbs Shortcode

    OrtaCVSS 6,4Kavram kanıtıEPSS %0

    rilwis · slim seo – a fast & automated seo plugin for wordpress21 May 2025

  • CVE-2025-40775
    35İzleyin

    DNS message with invalid TSIG causes an assertion failure

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    isc · bind 921 May 2025

  • CVE-2024-56429
    30İzleyin

    itech iLabClient 3.7.1 relies on the hard-coded YngAYdgAE/kKZYu2F2wm6w== key (found in iLabClient.jar) for local users to read or write to t

    YüksekCVSS 7,7Kavram kanıtıEPSS %0

    itech · ilabclient21 May 2025

  • CVE-2025-4008
    92Hemen

    Arbitrary Command Injection in Smartbedded MeteoBridge

    YüksekCVSS 8,7KEVSilahlaştırılmışEPSS %93

    smartbedded · meteobridge vm21 May 2025

  • CVE-2024-56428
    22İzleyin

    The local iLabClient database in itech iLabClient 3.7.1 allows local attackers to read cleartext credentials (from the CONFIGS table) for th

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    itech-gmbh · ilabclient21 May 2025

  • CVE-2025-46822
    31İzleyin

    Unauthenticated Arbitrary File Read via Absolute Path

    YüksekCVSS 7,7Kavram kanıtıEPSS %4

    osamataher · java-springboot-codebase21 May 2025

  • CVE-2025-48060
    30İzleyin

    AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt)

    YüksekCVSS 7,7Kavram kanıtıEPSS %0

    jqlang · jq21 May 2025

  • CVE-2025-27558
    36İzleyin

    IEEE P802.11-REVme D1.1 through D7.0 allows FragAttacks against mesh networks.

    KritikCVSS 9,1Kavram kanıtıEPSS %0

    21 May 2025

  • CVE-2025-34026
    91Hemen

    Versa Concerto Actuator Authentication Bypass Information Leak

    KritikCVSS 9,2KEVSilahlaştırılmışEPSS %81

    versa-networks · concerto21 May 2025

  • CVE-2025-34027
    54Planlayın

    Versa Concerto Authentication Bypass File Write Remote Code Execution

    KritikCVSS 10,0Kavram kanıtıEPSS %46

    versa-networks · concerto21 May 2025

  • CVE-2025-47947
    30İzleyin

    ModSecurity Has Possible DoS Vulnerability

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    trustwave · modsecurity21 May 2025

  • CVE-2025-4123
    53Planlayın

    A cross-site scripting (XSS) vulnerability exists in Grafana caused by combining a client path traversal and open redirect.

    OrtaCVSS 6,1Kavram kanıtıEPSS %97

    grafana · grafana22 May 2025

  • CVE-2025-3937
    39İzleyin

    Use of Password Hash with Insufficient Computational Effort

    KritikCVSS 9,8İstismar yokEPSS %0

    tridium · niagara22 May 2025

  • CVE-2025-3943
    33İzleyin

    Use of GET Request Method With sensitive Query Strings

    YüksekCVSS 7,5İstismar yokEPSS %10

    tridium · niagara22 May 2025

  • CVE-2025-32813
    41Planlayın

    An issue was discovered in Infoblox NETMRI before 7.6.1.

    YüksekCVSS 7,2Kavram kanıtıEPSS %43

    infoblox · netmri22 May 2025

  • CVE-2025-32814
    50Planlayın

    An issue was discovered in Infoblox NETMRI before 7.6.1.

    KritikCVSS 9,8Kavram kanıtıEPSS %36

    infoblox · netmri22 May 2025

  • CVE-2025-32815
    38İzleyin

    An issue was discovered in Infoblox NETMRI before 7.6.1.

    OrtaCVSS 6,5Kavram kanıtıEPSS %39

    infoblox · netmri22 May 2025

  • CVE-2024-52874
    38İzleyin

    In Infoblox NETMRI before 7.6.1, authenticated users can perform SQL injection attacks.

    YüksekCVSS 8,8İstismar yokEPSS %10

    infoblox · netmri22 May 2025

  • CVE-2024-13946
    28İzleyin

    Binary Planting / LoadLibrary DLL's not Signed

    YüksekCVSS 7,1Kavram kanıtıEPSS %1

    abb · aspect-enterprise22 May 2025

  • CVE-2025-47181
    35İzleyin

    Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    microsoft · edge update22 May 2025

  • CVE-2025-48708
    13İzleyin

    gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case.

    DüşükCVSS 3,3Kavram kanıtıEPSS %0

    artifex · ghostscript23 May 2025

  • CVE-2025-36527
    44Planlayın

    Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection while exporting reports.

    YüksekCVSS 8,3İstismar yokEPSS %36

    zohocorp · manageengine adaudit plus23 May 2025

  • CVE-2025-47539
    47Planlayın

    WordPress Eventin plugin <= 4.0.26 - Privilege Escalation Vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %27

    themewinter · eventin23 May 2025

  • CVE-2025-47646
    46Planlayın

    WordPress PSW Front-end Login & Registration plugin <= 1.13 - Broken Authentication Vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %24

    gilblas ngunte possi · psw front-end login & registration23 May 2025

  • CVE-2025-32794
    33İzleyin

    OpenEMR Stored XSS via Patient Name Field in Procedure Orders

    YüksekCVSS 7,6İstismar yokEPSS %10

    open-emr · openemr23 May 2025

  • CVE-2025-32967
    21İzleyin

    OpenEMR doesn't log password administration properly

    OrtaCVSS 5,4İstismar yokEPSS %0

    open-emr · openemr23 May 2025

  • CVE-2025-43860
    34İzleyin

    OpemEMR Vulnerable to Stored XSS Attack in the Additional Address Section of Patient Demographics

    YüksekCVSS 7,6İstismar yokEPSS %14

    open-emr · openemr23 May 2025

  • CVE-2025-44998
    24İzleyin

    A stored cross-site scripting (XSS) vulnerability in the component /tinyfilemanager.php of TinyFileManager v2.4.7 allows attackers to execut

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    prasathmani · tiny file manager23 May 2025

  • CVE-2025-4336
    39İzleyin

    eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Upload via set_file()

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    emagicone · emagicone store manager for woocommerce24 May 2025

  • CVE-2025-4602
    30İzleyin

    eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Read

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    emagicone · emagicone store manager for woocommerce24 May 2025

  • CVE-2025-4603
    36İzleyin

    eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Deletion

    KritikCVSS 9,1Kavram kanıtıEPSS %1

    emagicone · emagicone store manager for woocommerce24 May 2025

  • CVE-2025-5058
    39İzleyin

    eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Upload via set_image()

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    emagicone · emagicone store manager for woocommerce24 May 2025

  • CVE-2025-5154
    7İzleyin

    PhonePe App SQLite Database databases cleartext storage in file

    DüşükCVSS 1,8Kavram kanıtıEPSS %0

    phonepe · phonepe25 May 2025

  • CVE-2025-5182
    21İzleyin

    Summer Pearl Group Vacation Rental Management Platform Listing authorization

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    summerpearlgroup · vacation rental management platform26 May 2025

  • CVE-2025-5196
    30İzleyin

    Wing FTP Server Lua Admin Console unnecessary privileges

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    wftpserver · wing ftp server26 May 2025

  • CVE-2025-48827
    62Bu hafta

    vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated users to invoke protected API controllers' methods when running

    KritikCVSS 9,8SilahlaştırılmışEPSS %75

    vbulletin · vbulletin27 May 2025

  • CVE-2025-48828
    60Bu hafta

    Certain vBulletin versions might allow attackers to execute arbitrary PHP code by abusing Template Conditionals in the template engine.

    YüksekCVSS 8,1SilahlaştırılmışEPSS %57

    vbulletin · vbulletin27 May 2025

  • CVE-2025-23247
    31İzleyin

    NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer coul

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    nvidia · cuda toolkit27 May 2025

  • CVE-2025-46173
    24İzleyin

    code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting (XSS) via the name field in the feedback form.

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    code-projects · online exam mastering system27 May 2025

  • CVE-2025-5222
    28İzleyin

    Icu: stack buffer overflow in the srbroot::addtag function

    YüksekCVSS 7,0Kavram kanıtıEPSS %0

    unicode · international components for unicode27 May 2025

  • CVE-2025-4009
    58Planlayın

    Unauthenticated Arbitrary Command Injection in Evertz SDVN

    KritikCVSS 9,3Kavram kanıtıEPSS %71

    evertz · 3080ipx-10g28 May 2025

  • CVE-2025-5025
    19İzleyin

    No QUIC certificate pinning with wolfSSL

    OrtaCVSS 4,8Kavram kanıtıEPSS %0

    haxx · curl28 May 2025

  • CVE-2025-5287
    31İzleyin

    Likes and Dislikes Plugin <= 1.0.0 - Unauthenticated SQL Injection

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    erumfaham · likes and dislikes plugin28 May 2025

  • CVE-2025-5298
    27İzleyin

    Campcodes Online Hospital Management System betweendates-detailsreports.php sql injection

    OrtaCVSS 6,9Kavram kanıtıEPSS %0

    campcodes · online hospital management system28 May 2025