| CVE-2025-2775 | CVE-2025-2775: Critical Vulnerability in SysAid On-Prem | CRITICAL | XXE | Sysaid | Yes | May 7, 2025 |
| CVE-2025-25014 | CVE-2025-25014: Critical Vulnerability in Elastic Kibana | CRITICAL | Other | Kibana | Yes | May 6, 2025 |
| CVE-2025-1909 | CVE-2025-1909: Critical Vulnerability in BuddyBoss BuddyBoss Platform | CRITICAL | Other | Buddyboss Platform | -- | May 5, 2025 |
| CVE-2025-4052 | CVE-2025-4052: Critical Vulnerability in Google Chrome | CRITICAL | Other | Chrome | -- | May 5, 2025 |
| CVE-2025-3746 | CVE-2025-3746: Critical Vulnerability in WordPress OTP-less One Tap Sign In Plugin | CRITICAL | Missing Authorization | — | -- | May 2, 2025 |
| CVE-2025-46337 | CVE-2025-46337: Critical Vulnerability in ADOdb | CRITICAL | SQL Injection | — | -- | May 1, 2025 |
| CVE-2025-27007 | CVE-2025-27007: Critical Vulnerability in Brainstorm Force SureTriggers | CRITICAL | Other | — | Yes | May 1, 2025 |
| CVE-2025-32444 | CVE-2025-32444: Critical Vulnerability in vllm | CRITICAL | Insecure Deserialization | Vllm | -- | Apr 30, 2025 |
| CVE-2025-31651 | CVE-2025-31651: Critical Vulnerability in Apache Tomcat | CRITICAL | Improper Encoding | Tomcat | Yes | Apr 28, 2025 |
| CVE-2025-32432 | CVE-2025-32432: Critical Vulnerability in CraftCMS | CRITICAL | Code Injection | Craft Cms | Yes | Apr 25, 2025 |
| CVE-2025-43859 | CVE-2025-43859: Critical Vulnerability in h11 HTTP/1.1 Implementation | CRITICAL | Other | — | -- | Apr 24, 2025 |
| CVE-2025-31324 | CVE-2025-31324: Critical Vulnerability in SAP NetWeaver | CRITICAL | Unrestricted File Upload | Netweaver | Yes | Apr 24, 2025 |
| CVE-2025-3604 | CVE-2025-3604: Critical Vulnerability in Flynax Flynax Bridge | CRITICAL | Missing Authorization | Flynax Bridge | Yes | Apr 24, 2025 |
| CVE-2025-3603 | CVE-2025-3603: Critical Vulnerability in Flynax Flynax Bridge | CRITICAL | Other | Flynax Bridge | -- | Apr 24, 2025 |
| CVE-2025-34028 | CVE-2025-34028: Critical Vulnerability in Commvault Command Center | CRITICAL | Path Traversal | Commvault | Yes | Apr 22, 2025 |
| CVE-2025-1093 | CVE-2025-1093: Critical Vulnerability in AIHub Theme for WordPress | CRITICAL | Unrestricted File Upload | — | -- | Apr 19, 2025 |
| CVE-2025-32434 | CVE-2025-32434: Critical Vulnerability in Linux PyTorch | CRITICAL | Insecure Deserialization | Pytorch | Yes | Apr 18, 2025 |
| CVE-2025-42599 | CVE-2025-42599: Critical Vulnerability in Qualitia Active! Mail | CRITICAL | Stack Buffer Overflow | Active\! Mail | -- | Apr 18, 2025 |
| CVE-2025-32433 | CVE-2025-32433: Critical Vulnerability in Cisco Erlang/OTP SSH Server | CRITICAL | Missing Authentication | Cloud Native Broadband Network Gateway | Yes | Apr 16, 2025 |
| CVE-2025-31201 | CVE-2025-31201: Critical Vulnerability in Apple Multiple Products | CRITICAL | Other | Ipados | Yes | Apr 16, 2025 |