Skip to content
OpenAdvisories

Archive

May 2025

Vulnerabilities first published in this month (UTC), newest first.

← April 2025 2025 / May June 2025 →
  1. 1372
  2. 2176
  3. 331
  4. 48
  5. 5127
  6. 6172
  7. 7308
  8. 8113
  9. 9152
  10. 1033
  11. 1128
  12. 12125
  13. 13312
  14. 14107
  15. 15309
  16. 16172
  17. 1751
  18. 1851
  19. 19244
  20. 20172
  21. 21114
  22. 22136
  23. 23183
  24. 2426
  25. 2520
  26. 2669
  27. 2795
  28. 2869
  29. 2978
  30. 30112
  31. 3137
All Critical High Medium Low Exploited only Public exploit

19 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-48927 Exploited EPSS 12%

    The TeleMessage service through 2025-05-05 configures Spring Boot Actuator with an exposed heap dump endpoint at a /hea…

    TeleMessage service
    KEV Jul 1, 2025
  • Medium 4.0
    CVE-2025-48928 Exploited

    The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalen…

    TeleMessage service
    KEV Jul 1, 2025
  • Critical 9.2
    CVE-2025-34026 Exploited Scanner template EPSS 82%

    Versa Concerto Actuator Authentication Bypass Information Leak

    The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints. The internal Actuator endpoint can be leveraged for access to heap …

    Versa Concerto
    KEV Jan 22, 2026
  • High 8.7
    CVE-2025-4008 Exploited Scanner template EPSS 93%

    Arbitrary Command Injection in Smartbedded MeteoBridge

    The Meteobridge web interface let meteobridge administrator manage their weather station data collection and administer their meteobridge system through a web application written in CGI shell scripts and C. This web interface exposes an endpoint that is vulne…

    Smartbedded MeteoBridge
    KEV Oct 2, 2025
  • High 7.5
    CVE-2025-30397 Exploited Public exploit EPSS 27%

    Scripting Engine Memory Corruption Vulnerability

    Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network.

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV May 13, 2025
  • High 7.8
    CVE-2025-32709 Exploited Public exploit

    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

    Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV May 13, 2025
  • High 7.8
    CVE-2025-32706 Exploited

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV May 13, 2025
  • High 7.8
    CVE-2025-32701 Exploited

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV May 13, 2025
  • High 7.8
    CVE-2025-30400 Exploited Public exploit

    Microsoft DWM Core Library Elevation of Privilege Vulnerability

    Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV May 13, 2025
  • High 7.2
    CVE-2025-4428 Exploited Public exploit EPSS 88%

    Remote Code Execution

    Remote Code Execution in API component in Ivanti Endpoint Manager Mobile 12.5.0.0 and prior on unspecified platforms allows authenticated attackers to execute arbitrary code via crafted API requests.

    ivanti Endpoint Manager Mobile Network devices
    KEV May 19, 2025
  • Medium 5.3
    CVE-2025-4427 Exploited Public exploit Scanner template EPSS 100%

    Authentication Bypass

    An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resources without proper credentials via the API.

    ivanti Endpoint Manager Mobile Network devices
    KEV May 19, 2025
  • Critical 9.6
    CVE-2025-32756 Exploited Public exploit EPSS 31%

    A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiC…

    Fortinet FortiMail FortiVoice FortiRecorder Network devices
    KEV May 14, 2025
  • Critical 9.8
    CVE-2025-4632 Exploited Public exploit Scanner template EPSS 24%

    Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before …

    Samsung Electronics MagicINFO 9 Server
    KEV May 22, 2025
  • Critical 9.1
    CVE-2025-42999 Exploited · Ransomware EPSS 13%

    Insecure Deserialization in SAP NetWeaver (Visual Composer development server)

    SAP NetWeaver Visual Composer Metadata Uploader is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system.

    SAP SAP NetWeaver (Visual Composer development server)
    KEV May 15, 2025
  • Low 1.9
    CVE-2025-47729 Exploited

    The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signa…

    TeleMessage archiving backend
    KEV May 12, 2025
  • Medium 5.3
    CVE-2025-35939 Exploited

    Craft CMS stores user-provided content in session files

    Craft CMS stores arbitrary content provided by unauthenticated users in session files. This content could be accessed and executed, possibly using an independent vulnerability. Craft CMS redirects requests that require authentication to the login page and gen…

    Craft CMS craftcms/cms Packagist
    KEV Jun 2, 2025
  • Critical 9.3
    CVE-2025-2776 Exploited Public exploit Scanner template EPSS 65%

    SysAid On-Prem <= 23.3.40 serverurl Proceessing XML External Entity Injection

    SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Server URL processing functionality, allowing for administrator account takeover and file read primitives.

    SysAid SysAid On-Prem
    KEV Jul 22, 2025
  • Critical 9.3
    CVE-2025-2775 Exploited Public exploit Scanner template EPSS 43%

    SysAid On-Prem <= 23.3.40 Checkin Proceessing XML External Entity Injection

    SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Checkin processing functionality, allowing for administrator account takeover and file read primitives.

    SysAid SysAid On-Prem
    KEV Jul 22, 2025
  • High 7.2
    CVE-2025-27920 Exploited

    Output Messenger before 2.0.63 was vulnerable to a directory traversal attack through improper file path handling. By u…

    Srimax Output Messenger
    KEV May 19, 2025