Skip to content
OpenAdvisories

Archive

20 May 2025

Vulnerabilities first published on this day (UTC), newest first.

← April 2025 2025 / May /20 June 2025 →
  1. 1372
  2. 2176
  3. 331
  4. 48
  5. 5127
  6. 6172
  7. 7308
  8. 8113
  9. 9152
  10. 1033
  11. 1128
  12. 12125
  13. 13312
  14. 14107
  15. 15309
  16. 16172
  17. 1751
  18. 1851
  19. 19244
  20. 20172
  21. 21114
  22. 22136
  23. 23183
  24. 2426
  25. 2520
  26. 2669
  27. 2795
  28. 2869
  29. 2978
  30. 30112
  31. 3137
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.8
    CVE-2025-37947 Public exploit

    ksmbd: prevent out-of-bounds stream writes by validating *pos

    In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds stream writes by validating *pos ksmbd_vfs_stream_write() did not validate whether the write offset (*pos) was within the bounds of the existing stream data lengt…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-37928 Public exploit

    dm-bufio: don't schedule in atomic context

    In the Linux kernel, the following vulnerability has been resolved: dm-bufio: don't schedule in atomic context A BUG was reported as below when CONFIG_DEBUG_ATOMIC_SLEEP and try_verify_in_tasklet are enabled. [ 129.444685][ T934] BUG: sleeping function called…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 8.8
    CVE-2025-37899 Public exploit

    ksmbd: fix use-after-free in session logoff

    In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in session logoff The sess->user object can currently be in use by another thread, for example if another connection has sent a session setup request to bind to the …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 4.3
    CVE-2025-41228 Public exploit

    VMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) Vulnerability

    VMware ESXi and vCenter Server contain a reflected cross-site scripting vulnerability due to improper input validation. A malicious actor with network access to the login page of certain ESXi host or vCenter Server URL paths may exploit this issue to steal co…

    VMware ESXi Telco Cloud Platform Cloud Foundation Virtualization
  • Critical 9.2
    CVE-2025-40634 Public exploit

    Stack-based buffer overflow in TP-Link Archer AX50

    Stack-based buffer overflow vulnerability in the 'conn-indicator' binary running as root on the TP-Link Archer AX50 router, in firmware versions prior to 1.0.15 build 241203 rel61480. This vulnerability allows an attacker to execute arbitrary code on the devi…

    TP-Link Systems Link Archer AX50 Network devices
  • Critical 9.8
    CVE-2025-4322 Public exploit Scanner template EPSS 15%

    Motors <= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover

    The Motors theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.6.67. This is due to the theme not properly validating a user's identity prior to updating their password. This makes it possible…

    StylemixThemes Motors - Car Dealer, Rental & Listing WordPress theme Web / CMS