CVE Tools
Sign in
month report

May 2025

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

May 2025 closed with 4,361 published CVEs — -19.5% YoY . 376 criticals, 24 added to CISA KEV. linux led volume, mostly via linux kernel. Biggest breakout: phpgurukul at ×14.4 their 12-month median. Top weakness class — CWE-79 (607 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
4,361
— MoM-19.5% YoY
Severity mix
376 / 1,372
critical / high
KEV added
24
0 ransomware-linked
Nuclei coverage
21.9%
953 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
295.0
n=953
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
6
n=19
Detection gap

KEV pressure, no Nuclei coverage

May 2025 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in May 2025

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS89SQL Injection74Injection119Memory Buffer Bounds787Out-of-bounds Write476NULL Pointer Dereference352CSRF862Missing Authorization120Buffer Overflow284CWE-284сообщество свободного программного обеспечения922217954232linux181183ооо «русбитех-астра»161860241ооо «ред софт»213115323red hat inc.1364441canonical ltd.37422ао «нппкт»31743232ао «сбертех»29503debian832phpgurukul51151111microsoft corp1122microsoft1023

Most discussed CVEs — May 2025

No CVE mentions in the news this month yet.

Breakout vendors

CVE count ≥3× their own 12-period median.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1linux—
    550 CVECVSS 6.0
    PoC 4
    linux kernel (550) · linux (549)
  • 2сообщество свободного программного обеспечения—
    502 CVE9 critCVSS 6.2
    Nuclei 2PoC 36
    linux (397) · debian gnu/linux (226) · freescout (24)
  • 3ооо «ред софт»—
    288 CVE4 critCVSS 6.1
    Nuclei 1PoC 18
    ред ос (288)
  • 4ооо «русбитех-астра»—
    288 CVE4 critCVSS 6.2
    Nuclei 1PoC 17
    astra linux special edition (287) · astra linux common edition (46) · пк "ald pro" (1)
  • 5ао "нппкт"—
    240 CVE4 critCVSS 6.3
    PoC 13
    осон основа оnyx (240)
  • 6unknown—
    226 CVE5 critCVSS 5.4
    Nuclei 225PoC 226
    illi link party! (4) · ekc tournament manager (3) · wp maps (3)
  • 7redhat—
    218 CVE2 critCVSS 6.2
    Nuclei 1PoC 12
    red hat enterprise linux (204) · red hat enterprise linux 8 (18) · red hat enterprise linux 9 (17)
  • 8canonical—
    217 CVECVSS 6.1
    PoC 9
    ubuntu (217) · ubuntu linux (1) · apport (1)
  • 9ао «сбертех»—
    153 CVECVSS 6.1
    ×9.6PoC 7
    platform v sberlinux os server (152) · субд «platform v pangolin db» (2)
  • 10debian—
    145 CVECVSS 6.1
    ×11.2PoC 4
    debian linux (144) · trixie (1)
  • 11phpgurukul—
    122 CVE3 critCVSS 7.0
    ×14.4PoC 117
    park ticketing management system (7) · company visitor management system (6) · news portal project (6)
  • 12microsoft—
    85 CVE5 critCVSS 7.2
    KEV 5PoC 4
    windows server 2025 (server core installation) (40) · windows server 2022 23h2 (40) · windows server 2022, 23h2 edition (server core installation) (40)
  • 13apple—
    79 CVE5 critCVSS 6.5
    macos (67) · ipados (46) · ios and ipados (43)
  • 14totolink—
    68 CVE12 critCVSS 8.0
    PoC 39
    a3002r firmware (27) · a3002r (27) · a3002ru (17)
  • 15campcodes—
    61 CVECVSS 7.2
    PoC 60
    sales and inventory system (24) · online hospital management system (12) · online shopping portal (11)
  • 16ао «ивк»—
    52 CVE1 critCVSS 6.3
    PoC 4
    альт сп 10 (28) · альт 8 сп (28)
  • 17dlink—
    50 CVE2 critCVSS 7.2
    PoC 18
    di-7003g firmware (11) · di-7003gv2 (11) · dir-600l firmware (9)
  • 18go—
    50 CVE11 critCVSS 7.1
    Nuclei 2PoC 6
    github.com/mattermost/mattermost/server/v8 (9) · github.com/zitadel/zitadel (2) · github.com/gardener/gardener (2)
  • 19intel—
    49 CVECVSS 6.5
    intel iris xe graphics (15) · intel arc graphics (15) · intel data center gpu flex 170 (14)
  • 20cisco—
    48 CVE1 critCVSS 6.2
    Nuclei 1PoC 48
    cisco ios xe software (20) · ios xe (20) · cisco ios xe (11)
  • 21pypi—
    47 CVE5 critCVSS 6.5
    Nuclei 1PoC 11
    vllm (9) · langroid (3) · vyper (2)
  • 22ibm—
    45 CVE1 critCVSS 6.1
    db2 (8) · db2 for linux, unix and windows (8) · concert software (4)
  • 23sourcecodester—
    45 CVECVSS 6.3
    PoC 45
    stock management system (8) · online student clearance system (7) · client database management system (6)
  • 24d-link—
    43 CVECVSS 7.1
    PoC 15
    di-7003gv2 (11) · dir-600l (9) · dir-619l (7)
  • 25packagist—
    42 CVE5 critCVSS 6.4
    KEV 1Nuclei 1PoC 10
    mautic/core (5) · typo3/cms-core (4) · nitsan/ns-backup (3)
  • 26adobe—
    40 CVE7 critCVSS 7.6
    coldfusion (8) · substance3d - stager (6) · adobe animate 2023 (6)
  • 27tenda—
    39 CVE7 critCVSS 7.9
    PoC 18
    rx2 pro firmware (11) · fh451 firmware (4) · w20e firmware (4)
  • 28siemens—
    38 CVE5 critCVSS 7.5
    scalance lpe9403 (12) · scalance lpe9403 firmware (12) · simatic pcs neo v4.1 (4)
  • 29itsourcecode—
    36 CVECVSS 7.2
    PoC 36
    gym management system (15) · restaurant management system (9) · placement management system (6)
  • 30maven—
    35 CVE7 critCVSS 7.2
    Nuclei 1PoC 3
    org.apache.inlong:manager-pojo (3) · org.jenkins-ci.plugins:vmanager-plugin (2) · org.graylog2:graylog2-server (2)
  • 31novell inc.—
    35 CVECVSS 6.5
    PoC 5
    suse linux enterprise server (31) · suse linux enterprise server for sap applications (29) · opensuse leap (28)
  • 32qualcomm—
    35 CVECVSS 7.7
    fastconnect 7800 firmware (30) · wsa8830 firmware (28) · wsa8835 firmware (28)
  • 33qualcomm, inc.—
    35 CVECVSS 7.5
    snapdragon (35)
  • 34samsung—
    35 CVE2 critCVSS 6.9
    KEV 1Nuclei 1PoC 1
    android (12) · exynos 1480 firmware (9) · exynos 1330 firmware (8)
  • 35freefloat—
    33 CVECVSS 7.3
    NEWPoC 33
    ftp server (33) · freefloat ftp server (21)
  • 36npm—
    32 CVE1 critCVSS 6.3
    Nuclei 2PoC 4
    @cloudflare/workers-oauth-provider (4) · passport-wsfed-saml2 (2) · mcp-markdownify-server (2)
  • 37abb—
    31 CVE4 critCVSS 7.1
    NEW×5.2
    matrix series (31) · aspect-enterprise (31) · nexus series (31)
  • 38samsung mobile—
    30 CVECVSS 5.6
    samsung mobile devices (13) · samsung gallery (4) · samsung notes (2)
  • 39google—
    29 CVE1 critCVSS 7.0
    PoC 2
    chrome (14) · google chrome (14) · android (9)
  • 40crates.io—
    25 CVE1 critCVSS 4.4
    PoC 4
    sudo-rs (2) · pingora-core (2) · crossbeam-channel (2)
  • 41pcman—
    25 CVECVSS 7.3
    NEWPoC 24
    ftp server (25)
  • 42freescout—
    24 CVE2 critCVSS 6.2
    NEWPoC 4
    freescout (24)
  • 43freescout-help-desk—
    24 CVE2 critCVSS 6.2
    NEWPoC 4
    freescout (24)
  • 44code-projects—
    23 CVECVSS 5.6
    ×3.3PoC 23
    patient record management system (3) · employee record system (3) · tourism management system (2)
  • 45shenzhen tenda technology co., ltd.—
    23 CVE5 critCVSS 8.4
    PoC 11
    tenda rx2 pro (6) · tenda ac10 (3) · tenda fh451 (3)
  • 46mozilla—
    20 CVE1 critCVSS 6.8
    PoC 1
    thunderbird (17) · firefox (15) · firefox esr (11)
  • 47sap_se—
    20 CVE2 critCVSS 6.6
    KEV 1PoC 1
    sap supplier relationship management (live auction cockpit) (5) · sap service parts management (spm) (2) · sap landscape transformation (pcl basis) (1)
  • 48ооо "ивс"—
    20 CVE2 critCVSS 5.5
    NEW
    videograce (20)
  • 49schweitzer engineering laboratories—
    19 CVE1 critCVSS 5.7
    sel blueframe os (11) · sel-5056 software-defined network flow controller (4) · sel-3360-2 (1)
  • 50netgear—
    17 CVE9 critCVSS 8.8
    PoC 5
    rax50 firmware (7) · rax5 (7) · ex6200 (6)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79607—
2CWE-89414—
3CWE-74310—
4CWE-119162—
5CWE-787149—
6CWE-476144—
7CWE-352143—
8CWE-862140—
9CWE-120133—
10CWE-284109—
11CWE-416100—
12CWE-12598—
13CWE-7798—
14CWE-9497—
15CWE-40196—
16CWE-12188—
17CWE-2085—
18CWE-2279—
19CWE-50274—
20CWE-43472—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Web & CMS Plugins1,003 CVE
    111 crit3 KEV544 vendorsCVSS 7.2
    bold page builder (4) · eventon (4) · illi link party\! (4)
  • Operating Systems929 CVE
    39 crit271 KEV30 vendorsCVSS 7.2
    linux (946) · linux kernel (550) · ред ос (288)
  • Enterprise Software668 CVE
    145 crit8 KEV156 vendorsCVSS 7.6
    gym management system (15) · innovation (10) · restaurant management system (9)
  • Networking Infrastructure388 CVE
    138 crit7 KEV71 vendorsCVSS 8.1
    a3002r (27) · a3002r firmware (27) · cisco ios xe software (20)
  • OSS Libraries369 CVE
    44 crit1 KEV110 vendorsCVSS 7.2
    assimp (20) · gstreamer (6) · pspp (6)
  • ICS / OT / IoT180 CVE
    141 crit5 KEV52 vendorsCVSS 7.9
    aspect-enterprise (31) · matrix series (31) · nexus series (31)
  • Hardware Firmware167 CVE
    86 crit32 vendorsCVSS 9.5
    intel arc graphics (15) · intel iris xe graphics (15) · intel data center gpu flex 140 (14)
  • Mobile Apps157 CVE
    36 crit1 KEV10 vendorsCVSS 6.9
    macos (76) · ipados (59) · ios and ipados (43)
  • Security Products130 CVE
    25 crit12 KEV63 vendorsCVSS 9.2
    big-ip (9) · pan-os (9) · big-ip access policy manager (8)
  • Cloud & SaaS115 CVE
    33 crit6 KEV66 vendorsCVSS 6.9
    service (7) · mautic (6) · nextcloud server (6)
  • Communications91 CVE
    7 crit33 vendorsCVSS 7.4
    ftp server (25) · communigate pro (4) · icewarp mail server (3)
  • Consumer Software88 CVE
    23 crit30 vendorsCVSS 8.1
    coldfusion (16) · substance 3d stager (11) · adobe connect (8)
  • DevTools & CI65 CVE
    6 crit27 vendorsCVSS 7.0
    gitlab (21) · opkssh (2) · eclipse jgit (1)
  • AI / ML53 CVE
    22 crit32 vendorsCVSS 9.7
    vllm (21) · introspect (2) · llamaindex (2)
  • Databases43 CVE
    5 crit17 vendorsCVSS 7.4
    ibm db2 (5) · ibm db2 connect server (5) · ibm guardium data protection (3)
  • Unclassified363 CVE
    46 crit1 KEV224 vendorsCVSS 6.7
    di-7003gv2 (11) · gim (10) · p-net (10)
Weakness × Sector

Which weaknesses hit which solution categories in May 2025

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS89SQL Injection74Injection119Memory Buffer Bounds787Out-of-bounds Write476NULL Pointer Dereference352CSRF862Missing Authorization120Buffer Overflow284CWE-284Web & CMS Plugins3851901251399488317Operating Systems41144512932615Enterprise Software782231883101519120OSS Libraries36853774114219Networking Infrastructure1632193294119123ICS / OT / IoT1314312122322Consumer Software265272163224Hardware Firmware51232311210Security Products11125435Cloud & SaaS184317915