Security Digest archive
May 2025
24 known exploited (cisa kev) additions and 26 critical advisories across 17 digest days.
Thursday, May 29, 2025
- Critical 1 advisory: github.com/fabiolb/fabio
Wednesday, May 28, 2025
- Critical 2 advisories: broadinstitute/cromwell, github.com/argoproj/argo-cd
Thursday, May 22, 2025
- KEV CVE-2025-4632 Samsung MagicINFO 9 Server
Wednesday, May 21, 2025
- Critical 2 advisories: sjbr/sr-feuser-register, org.springframework.security:spring-sec…
Tuesday, May 20, 2025
Monday, May 19, 2025
- KEV CVE-2025-4428 Ivanti Endpoint Manager Mobile (EPMM)
- KEV CVE-2025-4427 Ivanti Endpoint Manager Mobile (EPMM)
- KEV CVE-2025-27920 Srimax Output Messenger
- KEV CVE-2024-27443 Synacor Zimbra Collaboration Suite (ZCS)
- KEV CVE-2024-11182 MDaemon Email Server
- KEV CVE-2023-38950 ZKTeco BioTime
- Critical 4 advisories: github.com/gardener/external-dns-manage…, samlify, github.com/gardener/gardener, github.com/gardener/gardener
Saturday, May 17, 2025
- Critical 3 advisories: auth0/symfony, auth0/login, auth0/wordpress
Friday, May 16, 2025
- Critical 1 advisory: auth0/auth0-php
Thursday, May 15, 2025
- KEV CVE-2025-42999 SAP NetWeaver
- KEV CVE-2024-12987 DrayTek Vigor Routers
Wednesday, May 14, 2025
- KEV CVE-2025-32756 Fortinet Multiple Products
- Critical 3 advisories: io.jenkins.plugins:oidc-provider, io.github.bonigarcia:webdrivermanager, org.apache.iotdb:iotdb-core
Tuesday, May 13, 2025
- KEV CVE-2025-32709 Microsoft Windows
- KEV CVE-2025-32706 Microsoft Windows
- KEV CVE-2025-32701 Microsoft Windows
- KEV CVE-2025-30400 Microsoft Windows
- KEV CVE-2025-30397 Microsoft Windows
- Critical 2 advisories: github.com/openpubkey/opkssh, github.com/openpubkey/openpubkey
Monday, May 12, 2025
- KEV CVE-2025-47729 TeleMessage TM SGNL
Wednesday, May 7, 2025
- KEV CVE-2024-6047 GeoVision Multiple Devices
- KEV CVE-2024-11120 GeoVision Multiple Devices
Tuesday, May 6, 2025
- KEV CVE-2025-27363 FreeType FreeType
- Critical 2 advisories: passport-wsfed-saml2, github.com/patrickhener/goshs
Monday, May 5, 2025
- KEV CVE-2025-3248 Langflow Langflow
- Critical 3 advisories: browser-use, com.baidu.mapp:brcc-core, org.wso2.am:am-distribution-parent
Friday, May 2, 2025
- KEV CVE-2025-34028 Commvault Command Center
- KEV CVE-2024-58136 Yiiframework Yii
Thursday, May 1, 2025
- KEV CVE-2024-38475 Apache HTTP Server
- KEV CVE-2023-44221 SonicWall SMA100 Appliances
- Critical 1 advisory: adodb/adodb-php