Yayın tarihine göre
Mayıs 2025: sömürülen ve yeni ciddi CVE kayıtları
214 kayıt · 19 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 3 / 3
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
36İzleyin | CVE-2025-48734Kavram kanıtı | Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by defaultapache · commons beanutils · CWE-284 | Yüksek8,8 | — | %1,8 | 28 May 2025 |
54Planlayın | CVE-2025-48927Silahlaştırılmış | The TeleMessage service through 2025-05-05 configures Spring Boot Actuator with an exposed heap dump endpoint at a /heapdump URI, as exploitsmarsh · telemessage · CWE-1188 | Orta5,3 | KEV | %11,1 | 28 May 2025 |
46Planlayın | CVE-2025-48928Silahlaştırılmış | The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalent to a "core dump" insmarsh · telemessage · CWE-528 | Orta4,0 | KEV | %0,5 | 28 May 2025 |
22İzleyin | CVE-2025-1461Kavram kanıtı | Vuetify XSS through 'eventMoreText' prop of VCalendarCWE-79 | Orta5,6 | — | %0,3 | 28 May 2025 |
42Planlayın | CVE-2025-48047İstismar yok | MICI Network Co. Ltd. NetFax Server Command Injectionmici network co. ltd. · netfax server · CWE-78 | Kritik9,4 | — | %15,6 | 29 May 2025 |
21İzleyin | CVE-2025-46078Kavram kanıtı | HuoCMS V3.5.1 and before is vulnerable to file upload, which allows attackers to take control of the target serverhuocms · huocms · CWE-434 | Orta5,3 | — | %0,3 | 29 May 2025 |
21İzleyin | CVE-2025-46080Kavram kanıtı | HuoCMS V3.5.1 has a File Upload Vulnerability.huocms · huocms · CWE-434 | Orta5,3 | — | %0,4 | 29 May 2025 |
21İzleyin | CVE-2025-29632Kavram kanıtı | Buffer Overflow vulnerability in Free5gc v.4.0.0 allows a remote attacker to cause a denial of service via the AMF, NGAP, security.go, handlfree5gc · free5gc · CWE-120 | Orta5,4 | — | %0,3 | 29 May 2025 |
30İzleyin | CVE-2025-46701Kavram kanıtı | Apache Tomcat: Security constraint bypass for CGI scriptsapache · tomcat · CWE-178 | Yüksek7,3 | — | %2,9 | 29 May 2025 |
37İzleyin | CVE-2025-48757Kavram kanıtı | An insufficient database Row-Level Security policy in Lovable through 2025-04-15 allows remote unauthenticated attackers to read or write tolovable · lovable · CWE-863 | Kritik9,3 | — | %0,8 | 29 May 2025 |
17İzleyin | CVE-2024-7097Kavram kanıtı | Incorrect Authorization in Multiple WSO2 Products via SOAP Admin Service Allowing Unauthorized User Signupwso2 · api manager · CWE-863 | Orta4,3 | — | %0,6 | 30 May 2025 |
18İzleyin | CVE-2025-5054Kavram kanıtı | Race Condition in Canonical Apportcanonical · apport · CWE-362 | Orta4,7 | — | %0,7 | 30 May 2025 |
34İzleyin | CVE-2025-2502Kavram kanıtı | An improper default permissions vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate privileges.lenovo · pcmanager · CWE-276 | Yüksek8,5 | — | %0,1 | 30 May 2025 |
39İzleyin | CVE-2025-4631Kavram kanıtı | Profitori 2.0.6.0 - 2.1.1.3 - Missing Authorization to Unauthenticated Privilege Escalation via stocktend_object Endpointunitybusinesstechnology · the e-commerce erp: purchasing, inventory, fulfillment, manufacturing, bom, accounting, sales analysis · CWE-285 | Kritik9,8 | — | %0,7 | 31 May 2025 |
- CVE-2025-4873436İzleyin
Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default
YüksekCVSS 8,8Kavram kanıtıEPSS %1apache · commons beanutils28 May 2025
- CVE-2025-4892754Planlayın
The TeleMessage service through 2025-05-05 configures Spring Boot Actuator with an exposed heap dump endpoint at a /heapdump URI, as exploit
OrtaCVSS 5,3KEVSilahlaştırılmışEPSS %11smarsh · telemessage28 May 2025
- CVE-2025-4892846Planlayın
The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in
OrtaCVSS 4,0KEVSilahlaştırılmışEPSS %0smarsh · telemessage28 May 2025
- CVE-2025-146122İzleyin
Vuetify XSS through 'eventMoreText' prop of VCalendar
OrtaCVSS 5,6Kavram kanıtıEPSS %028 May 2025
- CVE-2025-4804742Planlayın
MICI Network Co. Ltd. NetFax Server Command Injection
KritikCVSS 9,4İstismar yokEPSS %15mici network co. ltd. · netfax server29 May 2025
- CVE-2025-4607821İzleyin
HuoCMS V3.5.1 and before is vulnerable to file upload, which allows attackers to take control of the target server
OrtaCVSS 5,3Kavram kanıtıEPSS %0huocms · huocms29 May 2025
- CVE-2025-4608021İzleyin
HuoCMS V3.5.1 has a File Upload Vulnerability.
OrtaCVSS 5,3Kavram kanıtıEPSS %0huocms · huocms29 May 2025
- CVE-2025-2963221İzleyin
Buffer Overflow vulnerability in Free5gc v.4.0.0 allows a remote attacker to cause a denial of service via the AMF, NGAP, security.go, handl
OrtaCVSS 5,4Kavram kanıtıEPSS %0free5gc · free5gc29 May 2025
- CVE-2025-4670130İzleyin
Apache Tomcat: Security constraint bypass for CGI scripts
YüksekCVSS 7,3Kavram kanıtıEPSS %2apache · tomcat29 May 2025
- CVE-2025-4875737İzleyin
An insufficient database Row-Level Security policy in Lovable through 2025-04-15 allows remote unauthenticated attackers to read or write to
KritikCVSS 9,3Kavram kanıtıEPSS %0lovable · lovable29 May 2025
- CVE-2024-709717İzleyin
Incorrect Authorization in Multiple WSO2 Products via SOAP Admin Service Allowing Unauthorized User Signup
OrtaCVSS 4,3Kavram kanıtıEPSS %0wso2 · api manager30 May 2025
- CVE-2025-505418İzleyin
Race Condition in Canonical Apport
OrtaCVSS 4,7Kavram kanıtıEPSS %0canonical · apport30 May 2025
- CVE-2025-250234İzleyin
An improper default permissions vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate privileges.
YüksekCVSS 8,5Kavram kanıtıEPSS %0lenovo · pcmanager30 May 2025
- CVE-2025-463139İzleyin
Profitori 2.0.6.0 - 2.1.1.3 - Missing Authorization to Unauthenticated Privilege Escalation via stocktend_object Endpoint
KritikCVSS 9,8Kavram kanıtıEPSS %0unitybusinesstechnology · the e-commerce erp: purchasing, inventory, fulfillment, manufacturing, bom, accounting, sales analysis31 May 2025