Security Vulnerabilities - CVEs Published In May 2025
The ns_backup extension through 13.0.0 for TYPO3 allows XSS.
CVSS Score
6.1
EPSS Score
0.0
Published
2025-05-21
An issue in Blizzard Battle.net v2.40.0.15267 allows attackers to escalate privileges via placing a crafted shell script or executable into the C:\ProgramData directory.
CVSS Score
8.4
EPSS Score
0.0
Published
2025-05-21
jq is a command-line JSON processor. In versions up to and including 1.7.1, an integer overflow arises when assigning value using an index of 2147483647, the signed integer limit. This causes a denial of service. Commit de21386681c0df0104a99d9d09db23a9b2a78b1e contains a patch for the issue.
CVSS Score
4.3
EPSS Score
0.001
Published
2025-05-21
FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the ownekey parameter in the web_rmon_alarm_post_rmon_alarm function.
CVSS Score
6.5
EPSS Score
0.001
Published
2025-05-21
FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the ipv4Aclkey parameter in the web_acl_ipv4BasedAceAdd function.
CVSS Score
6.5
EPSS Score
0.001
Published
2025-05-21
AAPanel v7.0.7 was discovered to contain an OS command injection vulnerability.
CVSS Score
6.5
EPSS Score
0.078
Published
2025-05-21
Stack overflow leading to DoS can be triggered by a malicious authenticated client in Clickhouse before 19.14.3.3.
CVSS Score
8.8
EPSS Score
0.001
Published
2025-05-21
In Eclipse JGit versions 7.2.0.202503040940-r and older, the ManifestParser class used by the repo command and the AmazonS3 class used to implement the experimental amazons3 git transport protocol allowing to store git pack files in an Amazon S3 bucket, are vulnerable to XML External Entity (XXE) attacks when parsing XML files. This vulnerability can lead to information disclosure, denial of service, and other security issues.
CVSS Score
9.8
EPSS Score
0.001
Published
2025-05-21
Yandex Browser Lite for Android prior to version 21.1.0 allows remote attackers to cause a denial of service.
CVSS Score
7.5
EPSS Score
0.002
Published
2025-05-21
Yandex Browser for Android prior to version 21.3.0 allows remote attackers to perform IDN homograph attack.
CVSS Score
5.4
EPSS Score
0.0
Published
2025-05-21