May 2025
Published in May 2025
- criticalGitLab Patch Release: 18.0.1, 17.11.3, 17.10.7gitlab
- known exploitedpublic exploitCVE-2023-38950
- criticalGitLab Patch Release: 18.0.1, 17.11.3, 17.10.7gitlab
- known exploitedCVE-2023-44221
- criticalexploitedCVE-2025-4427: Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerabilitycisa-kev
- known exploitedCVE-2024-11120
- criticalexploitedCVE-2025-4428: Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerabilitycisa-kev
- known exploitedCVE-2024-11182
- criticalexploitedCVE-2025-27920: Srimax Output Messenger Directory Traversal Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2024-12987
- criticalexploitedCVE-2024-27443: Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2024-27443
- criticalexploitedCVE-2024-12987: DrayTek Vigor Routers OS Command Injection Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2024-38475
- criticalexploitedCVE-2025-42999: SAP NetWeaver Deserialization Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2024-58136
- unknownJenkins Security Advisory 2025-05-14jenkins
- known exploitedCVE-2024-6047
- criticalexploitedCVE-2025-32756: Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-27363
- unknownexploitedMultiple vulnerabilities in Ivanti Endpoint Manager Mobile (EPMM) (May 14, 2025)cert-fr-alerte
- known exploitedCVE-2025-27920
- unknownexploitedVulnerability in Fortinet products (May 13, 2025)cert-fr-alerte
- known exploitedpublic exploitCVE-2025-30397
- criticalGitLab Patch Release: 17.11.2, 17.10.6, 17.9.8gitlab
- known exploitedpublic exploitCVE-2025-30400
- criticalGitLab Patch Release: 17.11.2, 17.10.6, 17.9.8gitlab
- known exploitedpublic exploitCVE-2025-3248
- criticalexploitedCVE-2024-6047: GeoVision Devices OS Command Injection Vulnerabilitycisa-kev
- known exploitedCVE-2025-32701
- criticalexploitedCVE-2024-11120: GeoVision Devices OS Command Injection Vulnerabilitycisa-kev
- known exploitedCVE-2025-32706
- criticalexploitedCVE-2024-58136: Yiiframework Yii Improper Protection of Alternate Path Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-32709
- criticalexploitedCVE-2023-44221: SonicWall SMA100 Appliances OS Command Injection Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-32756
- criticalexploitedCVE-2024-38475: Apache HTTP Server Improper Escaping of Output Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-34028
- known exploitedCVE-2025-42999
- known exploitedpublic exploitCVE-2025-4427
- known exploitedpublic exploitCVE-2025-4428
- known exploitedpublic exploitCVE-2025-4632
- known exploitedCVE-2025-47729