diff --git a/advisories/unreviewed/2024/02/GHSA-3jmf-c2v9-xc39/GHSA-3jmf-c2v9-xc39.json b/advisories/unreviewed/2024/02/GHSA-3jmf-c2v9-xc39/GHSA-3jmf-c2v9-xc39.json
index 66c01c4d46f..3fcfcad1599 100644
--- a/advisories/unreviewed/2024/02/GHSA-3jmf-c2v9-xc39/GHSA-3jmf-c2v9-xc39.json
+++ b/advisories/unreviewed/2024/02/GHSA-3jmf-c2v9-xc39/GHSA-3jmf-c2v9-xc39.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-3jmf-c2v9-xc39",
-  "modified": "2024-02-13T21:30:30Z",
+  "modified": "2025-05-08T00:31:10Z",
   "published": "2024-02-13T21:30:30Z",
   "aliases": [
     "CVE-2023-20587"
   ],
-  "details": "Improper\nAccess Control in System Management Mode (SMM) may allow an attacker access to\nthe SPI flash potentially leading to arbitrary code execution.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n",
-  "severity": [],
+  "details": "Improper\nAccess Control in System Management Mode (SMM) may allow an attacker access to\nthe SPI flash potentially leading to arbitrary code execution.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-284"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-02-13T20:15:52Z"
diff --git a/advisories/unreviewed/2024/02/GHSA-5fqp-6xx2-943w/GHSA-5fqp-6xx2-943w.json b/advisories/unreviewed/2024/02/GHSA-5fqp-6xx2-943w/GHSA-5fqp-6xx2-943w.json
index ec9a5997060..2bf5e6b89d1 100644
--- a/advisories/unreviewed/2024/02/GHSA-5fqp-6xx2-943w/GHSA-5fqp-6xx2-943w.json
+++ b/advisories/unreviewed/2024/02/GHSA-5fqp-6xx2-943w/GHSA-5fqp-6xx2-943w.json
@@ -1,12 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-5fqp-6xx2-943w",
-  "modified": "2024-10-24T15:31:06Z",
+  "modified": "2025-05-08T00:31:10Z",
   "published": "2024-02-13T21:30:29Z",
   "aliases": [
     "CVE-2021-46757"
   ],
-  "details": "Insufficient checking of memory buffer in ASP\nSecure OS may allow an attacker with a malicious TA to read/write to the ASP\nSecure OS kernel virtual address space potentially leading to privilege\nescalation.\n\n\n\n",
+  "details": "Insufficient checking of memory buffer in ASP\nSecure OS may allow an attacker with a malicious TA to read/write to the ASP\nSecure OS kernel virtual address space potentially leading to privilege\nescalation.",
   "severity": [
     {
       "type": "CVSS_V3",
@@ -25,7 +25,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-119"
+    ],
     "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/02/GHSA-ffqq-vj92-hpx8/GHSA-ffqq-vj92-hpx8.json b/advisories/unreviewed/2024/02/GHSA-ffqq-vj92-hpx8/GHSA-ffqq-vj92-hpx8.json
index 67db108b0c7..86de177a0ab 100644
--- a/advisories/unreviewed/2024/02/GHSA-ffqq-vj92-hpx8/GHSA-ffqq-vj92-hpx8.json
+++ b/advisories/unreviewed/2024/02/GHSA-ffqq-vj92-hpx8/GHSA-ffqq-vj92-hpx8.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-ffqq-vj92-hpx8",
-  "modified": "2024-09-06T15:32:55Z",
+  "modified": "2025-05-08T00:31:10Z",
   "published": "2024-02-12T06:30:33Z",
   "aliases": [
     "CVE-2024-25744"
@@ -26,10 +26,16 @@
     {
       "type": "WEB",
       "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b82a8dbd3d2f4563156f7150c6f2ecab6e960b30"
+    },
+    {
+      "type": "WEB",
+      "url": "https://security.netapp.com/advisory/ntap-20241115-0006"
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-693"
+    ],
     "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
diff --git a/advisories/unreviewed/2025/04/GHSA-6q9c-pjw5-5rjm/GHSA-6q9c-pjw5-5rjm.json b/advisories/unreviewed/2025/04/GHSA-6q9c-pjw5-5rjm/GHSA-6q9c-pjw5-5rjm.json
index f547fd6ca32..45b753eb4f9 100644
--- a/advisories/unreviewed/2025/04/GHSA-6q9c-pjw5-5rjm/GHSA-6q9c-pjw5-5rjm.json
+++ b/advisories/unreviewed/2025/04/GHSA-6q9c-pjw5-5rjm/GHSA-6q9c-pjw5-5rjm.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-6q9c-pjw5-5rjm",
-  "modified": "2025-04-22T18:32:12Z",
+  "modified": "2025-05-08T00:31:11Z",
   "published": "2025-04-22T18:32:12Z",
   "aliases": [
     "CVE-2025-34028"
@@ -22,6 +22,14 @@
     {
       "type": "WEB",
       "url": "https://documentation.commvault.com/securityadvisories/CV_2025_04_1.html"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/watchtowrlabs/watchTowr-vs-Commvault-PreAuth-RCE-CVE-2025-34028"
+    },
+    {
+      "type": "WEB",
+      "url": "https://labs.watchtowr.com/fire-in-the-hole-were-breaching-the-vault-commvault-remote-code-execution-cve-2025-34028"
     }
   ],
   "database_specific": {
diff --git a/advisories/unreviewed/2025/05/GHSA-27mv-c3gh-hv8r/GHSA-27mv-c3gh-hv8r.json b/advisories/unreviewed/2025/05/GHSA-27mv-c3gh-hv8r/GHSA-27mv-c3gh-hv8r.json
new file mode 100644
index 00000000000..d9c3bc43816
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-27mv-c3gh-hv8r/GHSA-27mv-c3gh-hv8r.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-27mv-c3gh-hv8r",
+  "modified": "2025-05-08T00:31:11Z",
+  "published": "2025-05-08T00:31:11Z",
+  "aliases": [
+    "CVE-2025-35995"
+  ],
+  "details": "When a BIG-IP PEM system is licensed with URL categorization, and the URL categorization policy or an iRule with the urlcat command is enabled on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-35995"
+    },
+    {
+      "type": "WEB",
+      "url": "https://my.f5.com/manage/s/article/K000149952"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-125"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-07T22:15:19Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-2mq5-vgx2-cq4h/GHSA-2mq5-vgx2-cq4h.json b/advisories/unreviewed/2025/05/GHSA-2mq5-vgx2-cq4h/GHSA-2mq5-vgx2-cq4h.json
new file mode 100644
index 00000000000..97636bb1bb3
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-2mq5-vgx2-cq4h/GHSA-2mq5-vgx2-cq4h.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2mq5-vgx2-cq4h",
+  "modified": "2025-05-08T00:31:11Z",
+  "published": "2025-05-08T00:31:11Z",
+  "aliases": [
+    "CVE-2025-31644"
+  ],
+  "details": "When running in Appliance mode, a command injection vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command which may allow an authenticated attacker with administrator role privileges to execute arbitrary system commands. A successful exploit can allow the attacker to cross a security boundary.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31644"
+    },
+    {
+      "type": "WEB",
+      "url": "https://my.f5.com/manage/s/article/K000148591"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-77"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-07T22:15:18Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-2ppg-9297-h3vc/GHSA-2ppg-9297-h3vc.json b/advisories/unreviewed/2025/05/GHSA-2ppg-9297-h3vc/GHSA-2ppg-9297-h3vc.json
new file mode 100644
index 00000000000..a86a2bcaae9
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-2ppg-9297-h3vc/GHSA-2ppg-9297-h3vc.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2ppg-9297-h3vc",
+  "modified": "2025-05-08T00:31:12Z",
+  "published": "2025-05-08T00:31:12Z",
+  "aliases": [
+    "CVE-2025-41399"
+  ],
+  "details": "When a Stream Control Transmission Protocol (SCTP) profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-41399"
+    },
+    {
+      "type": "WEB",
+      "url": "https://my.f5.com/manage/s/article/K000137709"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-404"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-07T22:15:20Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-56cq-c8rv-wwj9/GHSA-56cq-c8rv-wwj9.json b/advisories/unreviewed/2025/05/GHSA-56cq-c8rv-wwj9/GHSA-56cq-c8rv-wwj9.json
new file mode 100644
index 00000000000..7c896995140
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-56cq-c8rv-wwj9/GHSA-56cq-c8rv-wwj9.json
@@ -0,0 +1,60 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-56cq-c8rv-wwj9",
+  "modified": "2025-05-08T00:31:11Z",
+  "published": "2025-05-08T00:31:11Z",
+  "aliases": [
+    "CVE-2023-7303"
+  ],
+  "details": "A vulnerability, which was classified as problematic, was found in q2apro q2apro-on-site-notifications up to 1.4.6. This affects the function process_request of the file q2apro-onsitenotifications-page.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.4.8 is able to address this issue. The patch is named 0ca85ca02f8aceb661e9b71fd229c45d388ea5b5. It is recommended to upgrade the affected component.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-7303"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/q2apro/q2apro-on-site-notifications/issues/43"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/q2apro/q2apro-on-site-notifications/issues/43#issuecomment-1694357344"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/q2apro/q2apro-on-site-notifications/commit/0ca85ca02f8aceb661e9b71fd229c45d388ea5b5"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.307479"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.307479"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.564749"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-07T22:15:17Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-58w9-v93f-h76h/GHSA-58w9-v93f-h76h.json b/advisories/unreviewed/2025/05/GHSA-58w9-v93f-h76h/GHSA-58w9-v93f-h76h.json
new file mode 100644
index 00000000000..ac8e4b69d0f
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-58w9-v93f-h76h/GHSA-58w9-v93f-h76h.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-58w9-v93f-h76h",
+  "modified": "2025-05-08T00:31:11Z",
+  "published": "2025-05-08T00:31:11Z",
+  "aliases": [
+    "CVE-2025-36546"
+  ],
+  "details": "On an F5OS system, if the root user had previously configured the system to allow login via SSH key-based authentication, and then enabled Appliance Mode; access via SSH key-based authentication is still allowed. For an attacker to exploit this vulnerability they must obtain the root user's SSH private key.  \n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-36546"
+    },
+    {
+      "type": "WEB",
+      "url": "https://my.f5.com/manage/s/article/K000140574"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-863"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-07T22:15:19Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-5r29-8gxx-9wp7/GHSA-5r29-8gxx-9wp7.json b/advisories/unreviewed/2025/05/GHSA-5r29-8gxx-9wp7/GHSA-5r29-8gxx-9wp7.json
new file mode 100644
index 00000000000..854e6f45ed4
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-5r29-8gxx-9wp7/GHSA-5r29-8gxx-9wp7.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-5r29-8gxx-9wp7",
+  "modified": "2025-05-08T00:31:12Z",
+  "published": "2025-05-08T00:31:12Z",
+  "aliases": [
+    "CVE-2025-46265"
+  ],
+  "details": "On F5OS, an improper authorization vulnerability exists where remotely authenticated users (LDAP, RADIUS, TACACS+) may be authorized with higher privilege F5OS roles. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-46265"
+    },
+    {
+      "type": "WEB",
+      "url": "https://my.f5.com/manage/s/article/K000139503"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-863"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-07T22:15:21Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-7prc-7h82-9785/GHSA-7prc-7h82-9785.json b/advisories/unreviewed/2025/05/GHSA-7prc-7h82-9785/GHSA-7prc-7h82-9785.json
new file mode 100644
index 00000000000..649513a2a2c
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-7prc-7h82-9785/GHSA-7prc-7h82-9785.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-7prc-7h82-9785",
+  "modified": "2025-05-08T00:31:12Z",
+  "published": "2025-05-08T00:31:11Z",
+  "aliases": [
+    "CVE-2025-36557"
+  ],
+  "details": "When an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-36557"
+    },
+    {
+      "type": "WEB",
+      "url": "https://my.f5.com/manage/s/article/K000139571"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-120"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-07T22:15:20Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-7vrx-9684-xrf2/GHSA-7vrx-9684-xrf2.json b/advisories/unreviewed/2025/05/GHSA-7vrx-9684-xrf2/GHSA-7vrx-9684-xrf2.json
new file mode 100644
index 00000000000..e2847a07392
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-7vrx-9684-xrf2/GHSA-7vrx-9684-xrf2.json
@@ -0,0 +1,48 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-7vrx-9684-xrf2",
+  "modified": "2025-05-08T00:31:12Z",
+  "published": "2025-05-08T00:31:12Z",
+  "aliases": [
+    "CVE-2025-35939"
+  ],
+  "details": "Craft CMS stores arbitrary content provided by unauthenticated users in session files. This content could be accessed and executed, possibly using an independent vulnerability. Craft CMS redirects requests that require authentication to the login page and generates a session file on the server at `/var/lib/php/sessions`. Such session files are named `sess_[session_value]`, where `[session_value]` is provided to the client in a `Set-Cookie` response header. Craft CMS stores the return URL requested by the client without sanitizing parameters. Consequently, an unauthenticated client can introduce arbitrary values, such as PHP code, to a known local file location on the server. Craft CMS versions 5.7.5 and 4.15.3 have been released to address this issue.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-35939"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/craftcms/cms/pull/17220"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/craftcms/cms/releases/tag/4.15.3"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/craftcms/cms/releases/tag/5.7.5"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-472"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-07T23:15:54Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-f73w-739p-cc9m/GHSA-f73w-739p-cc9m.json b/advisories/unreviewed/2025/05/GHSA-f73w-739p-cc9m/GHSA-f73w-739p-cc9m.json
new file mode 100644
index 00000000000..6b65fe2f847
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-f73w-739p-cc9m/GHSA-f73w-739p-cc9m.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-f73w-739p-cc9m",
+  "modified": "2025-05-08T00:31:11Z",
+  "published": "2025-05-08T00:31:11Z",
+  "aliases": [
+    "CVE-2025-36525"
+  ],
+  "details": "When a BIG-IP APM virtual server is configured to use a PingAccess profile, undisclosed requests can cause TMM to terminate. \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-36525"
+    },
+    {
+      "type": "WEB",
+      "url": "https://my.f5.com/manage/s/article/K000150598"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-120"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-07T22:15:19Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-fgm2-7ff4-mv6h/GHSA-fgm2-7ff4-mv6h.json b/advisories/unreviewed/2025/05/GHSA-fgm2-7ff4-mv6h/GHSA-fgm2-7ff4-mv6h.json
new file mode 100644
index 00000000000..5fe5e62268c
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-fgm2-7ff4-mv6h/GHSA-fgm2-7ff4-mv6h.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-fgm2-7ff4-mv6h",
+  "modified": "2025-05-08T00:31:12Z",
+  "published": "2025-05-08T00:31:12Z",
+  "aliases": [
+    "CVE-2025-41431"
+  ],
+  "details": "When connection mirroring is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate in the standby BIG-IP systems in a traffic group. \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-41431"
+    },
+    {
+      "type": "WEB",
+      "url": "https://my.f5.com/manage/s/article/K000150668"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-787"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-07T22:15:20Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-gpmf-hwm2-x2mq/GHSA-gpmf-hwm2-x2mq.json b/advisories/unreviewed/2025/05/GHSA-gpmf-hwm2-x2mq/GHSA-gpmf-hwm2-x2mq.json
new file mode 100644
index 00000000000..e50d3a4eb34
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-gpmf-hwm2-x2mq/GHSA-gpmf-hwm2-x2mq.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-gpmf-hwm2-x2mq",
+  "modified": "2025-05-08T00:31:12Z",
+  "published": "2025-05-08T00:31:12Z",
+  "aliases": [
+    "CVE-2025-0936"
+  ],
+  "details": "On affected platforms running Arista EOS with a gNMI transport enabled, running the gNOI File TransferToRemote RPC with credentials for a remote server may cause these remote-server credentials to be logged or accounted on the local EOS device or possibly on other remote accounting servers (i.e. TACACS, RADIUS, etc).",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0936"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.arista.com/en/support/advisories-notices/security-advisory/21394-security-advisory-0117"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-256"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-07T23:15:53Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-h5pv-2m79-7p5p/GHSA-h5pv-2m79-7p5p.json b/advisories/unreviewed/2025/05/GHSA-h5pv-2m79-7p5p/GHSA-h5pv-2m79-7p5p.json
new file mode 100644
index 00000000000..9a136fa920f
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-h5pv-2m79-7p5p/GHSA-h5pv-2m79-7p5p.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-h5pv-2m79-7p5p",
+  "modified": "2025-05-08T00:31:12Z",
+  "published": "2025-05-08T00:31:12Z",
+  "aliases": [
+    "CVE-2025-41433"
+  ],
+  "details": "When a Session Initiation Protocol (SIP) message routing framework (MRF) application layer gateway (ALG) profile is configured on a Message Routing virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate.\n\n \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-41433"
+    },
+    {
+      "type": "WEB",
+      "url": "https://my.f5.com/manage/s/article/K000140937"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-476"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-07T22:15:20Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-jv2x-vg3f-2535/GHSA-jv2x-vg3f-2535.json b/advisories/unreviewed/2025/05/GHSA-jv2x-vg3f-2535/GHSA-jv2x-vg3f-2535.json
new file mode 100644
index 00000000000..2129514df16
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-jv2x-vg3f-2535/GHSA-jv2x-vg3f-2535.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-jv2x-vg3f-2535",
+  "modified": "2025-05-08T00:31:12Z",
+  "published": "2025-05-08T00:31:12Z",
+  "aliases": [
+    "CVE-2025-43878"
+  ],
+  "details": "When running in Appliance mode, an authenticated attacker assigned the Administrator or Resource Administrator role may be able to bypass Appliance mode restrictions utilizing system diagnostics tcpdump command utility on a F5OS-C/A system. \n\n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43878"
+    },
+    {
+      "type": "WEB",
+      "url": "https://my.f5.com/manage/s/article/K000139502"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-149"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-07T22:15:20Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-v537-5483-5jm6/GHSA-v537-5483-5jm6.json b/advisories/unreviewed/2025/05/GHSA-v537-5483-5jm6/GHSA-v537-5483-5jm6.json
new file mode 100644
index 00000000000..c8fdba951bf
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-v537-5483-5jm6/GHSA-v537-5483-5jm6.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-v537-5483-5jm6",
+  "modified": "2025-05-08T00:31:12Z",
+  "published": "2025-05-08T00:31:11Z",
+  "aliases": [
+    "CVE-2025-41414"
+  ],
+  "details": "When HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can cause TMM to terminate. \n\n \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-41414"
+    },
+    {
+      "type": "WEB",
+      "url": "https://my.f5.com/manage/s/article/K000140968"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-476"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-07T22:15:20Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-x2q2-p7cx-c4pf/GHSA-x2q2-p7cx-c4pf.json b/advisories/unreviewed/2025/05/GHSA-x2q2-p7cx-c4pf/GHSA-x2q2-p7cx-c4pf.json
new file mode 100644
index 00000000000..e506065763a
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-x2q2-p7cx-c4pf/GHSA-x2q2-p7cx-c4pf.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-x2q2-p7cx-c4pf",
+  "modified": "2025-05-08T00:31:11Z",
+  "published": "2025-05-08T00:31:11Z",
+  "aliases": [
+    "CVE-2025-36504"
+  ],
+  "details": "When a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, undisclosed responses can cause an increase in memory resource utilization.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-36504"
+    },
+    {
+      "type": "WEB",
+      "url": "https://my.f5.com/manage/s/article/K000140919"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-770"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-07T22:15:19Z"
+  }
+}
\ No newline at end of file