Browse CVEs
28,837 critical severity vulnerabilities
| CVE ID | Title | Severity | CVSS | Risk | Patch | Published |
|---|---|---|---|---|---|---|
| CVE-2025-48187 | RAGFlow through 0.18.1 allows account takeover because it... | Critical | 9.1 | Low Risk | Patched | 17-May-25 |
| CVE-2025-47945 | Donetick an open-source app for managing tasks and chores... | Critical | 9.1 | Low Risk | Patched | 17-May-25 |
| CVE-2025-47916 | Invision Community 5.0.0 before 5.0.7 allows remote code ... | Critical | 10.0 | High Risk | Patched | 16-May-25 |
| CVE-2025-40906 | BSON::XS versions 0.8.4 and earlier for Perl includes a b... | Critical | 9.8 | Low Risk | Patched | 16-May-25 |
| CVE-2025-32643 | Improper Neutralization of Special Elements used in an SQ... | Critical | 9.3 | Low Risk | Patched | 16-May-25 |
| CVE-2025-39481 | CVE-2025-39481 | Critical | 9.3 | Low Risk | Unpatched (251d) | 16-May-25 |
| CVE-2025-3917 | The 百度站长SEO合集(支持百度/神马/Bing/头条推送) plugin for WordPress is ... | Critical | 9.8 | Low Risk | 15-May-25 | |
| CVE-2025-32002 | Improper neutralization of special elements used in an OS... | Critical | 9.8 | Low Risk | Patched | 15-May-25 |
| CVE-2025-4564 | The TicketBAI Facturas para WooCommerce plugin for WordPr... | Critical | 9.8 | Low Risk | 15-May-25 | |
| CVE-2025-46052 | An error-based SQL Injection (SQLi) vulnerability in WebE... | Critical | 9.8 | Low Risk | 15-May-25 |