diff --git a/advisories/unreviewed/2024/01/GHSA-h33j-9q95-27j4/GHSA-h33j-9q95-27j4.json b/advisories/unreviewed/2024/01/GHSA-h33j-9q95-27j4/GHSA-h33j-9q95-27j4.json
index ce6edfdeed5..24dfc9ce5f8 100644
--- a/advisories/unreviewed/2024/01/GHSA-h33j-9q95-27j4/GHSA-h33j-9q95-27j4.json
+++ b/advisories/unreviewed/2024/01/GHSA-h33j-9q95-27j4/GHSA-h33j-9q95-27j4.json
@@ -29,7 +29,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-400"
+    ],
     "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/01/GHSA-hjgh-vh3c-8rg8/GHSA-hjgh-vh3c-8rg8.json b/advisories/unreviewed/2024/01/GHSA-hjgh-vh3c-8rg8/GHSA-hjgh-vh3c-8rg8.json
index 05781f42ff5..a6c476c1a89 100644
--- a/advisories/unreviewed/2024/01/GHSA-hjgh-vh3c-8rg8/GHSA-hjgh-vh3c-8rg8.json
+++ b/advisories/unreviewed/2024/01/GHSA-hjgh-vh3c-8rg8/GHSA-hjgh-vh3c-8rg8.json
@@ -29,7 +29,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-94"
+    ],
     "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/05/GHSA-vr88-2hv2-5jvf/GHSA-vr88-2hv2-5jvf.json b/advisories/unreviewed/2024/05/GHSA-vr88-2hv2-5jvf/GHSA-vr88-2hv2-5jvf.json
index a3873aa2643..2aa068cf1d0 100644
--- a/advisories/unreviewed/2024/05/GHSA-vr88-2hv2-5jvf/GHSA-vr88-2hv2-5jvf.json
+++ b/advisories/unreviewed/2024/05/GHSA-vr88-2hv2-5jvf/GHSA-vr88-2hv2-5jvf.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-vr88-2hv2-5jvf",
-  "modified": "2025-03-14T18:30:39Z",
+  "modified": "2025-05-12T18:31:20Z",
   "published": "2024-05-22T00:30:34Z",
   "aliases": [
     "CVE-2024-21683"
@@ -33,7 +33,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-94"
+    ],
     "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
diff --git a/advisories/unreviewed/2025/03/GHSA-g3hm-j3wc-jcg9/GHSA-g3hm-j3wc-jcg9.json b/advisories/unreviewed/2025/03/GHSA-g3hm-j3wc-jcg9/GHSA-g3hm-j3wc-jcg9.json
index 32a723b1f4b..357f0527306 100644
--- a/advisories/unreviewed/2025/03/GHSA-g3hm-j3wc-jcg9/GHSA-g3hm-j3wc-jcg9.json
+++ b/advisories/unreviewed/2025/03/GHSA-g3hm-j3wc-jcg9/GHSA-g3hm-j3wc-jcg9.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-g3hm-j3wc-jcg9",
-  "modified": "2025-04-03T00:31:31Z",
+  "modified": "2025-05-12T18:31:20Z",
   "published": "2025-03-28T03:30:24Z",
   "aliases": [
     "CVE-2025-1860"
   ],
   "details": "Data::Entropy for Perl 0.007 and earlier use the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -31,7 +36,7 @@
     "cwe_ids": [
       "CWE-338"
     ],
-    "severity": null,
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-03-28T01:15:16Z"
diff --git a/advisories/unreviewed/2025/04/GHSA-4jh7-c2vv-7qf2/GHSA-4jh7-c2vv-7qf2.json b/advisories/unreviewed/2025/04/GHSA-4jh7-c2vv-7qf2/GHSA-4jh7-c2vv-7qf2.json
index 7384bdaa791..317991f16b2 100644
--- a/advisories/unreviewed/2025/04/GHSA-4jh7-c2vv-7qf2/GHSA-4jh7-c2vv-7qf2.json
+++ b/advisories/unreviewed/2025/04/GHSA-4jh7-c2vv-7qf2/GHSA-4jh7-c2vv-7qf2.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-4jh7-c2vv-7qf2",
-  "modified": "2025-04-30T18:31:55Z",
+  "modified": "2025-05-12T18:31:20Z",
   "published": "2025-04-30T18:31:55Z",
   "aliases": [
     "CVE-2025-3859"
   ],
   "details": "Websites directing users to long URLs that caused eliding to occur in the location view could leverage the truncating behavior to potentially trick users into thinking they were on a different webpage This vulnerability affects Focus < 138.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -24,8 +29,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-451"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-04-30T17:15:50Z"
diff --git a/advisories/unreviewed/2025/04/GHSA-6935-g2xg-qvf4/GHSA-6935-g2xg-qvf4.json b/advisories/unreviewed/2025/04/GHSA-6935-g2xg-qvf4/GHSA-6935-g2xg-qvf4.json
index b5d33be6940..1849caf1512 100644
--- a/advisories/unreviewed/2025/04/GHSA-6935-g2xg-qvf4/GHSA-6935-g2xg-qvf4.json
+++ b/advisories/unreviewed/2025/04/GHSA-6935-g2xg-qvf4/GHSA-6935-g2xg-qvf4.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-6935-g2xg-qvf4",
-  "modified": "2025-04-22T09:30:35Z",
+  "modified": "2025-05-12T18:31:20Z",
   "published": "2025-04-22T09:30:35Z",
   "aliases": [
     "CVE-2025-26413"
   ],
   "details": "Improper Input Validation vulnerability in Apache Kvrocks.\n\nThe SETRANGE command didn't check if the `offset` input is a positive integer and use it as an index\nof a string. So it will cause the server to crash due to its index is  out of range.\nThis issue affects Apache Kvrocks: through 2.11.1.\n\nUsers are recommended to upgrade to version 2.12.0, which fixes the issue.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -27,7 +32,7 @@
     "cwe_ids": [
       "CWE-20"
     ],
-    "severity": null,
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-04-22T08:15:28Z"
diff --git a/advisories/unreviewed/2025/04/GHSA-rfhg-52gw-r6hv/GHSA-rfhg-52gw-r6hv.json b/advisories/unreviewed/2025/04/GHSA-rfhg-52gw-r6hv/GHSA-rfhg-52gw-r6hv.json
index b34a58c14c6..f43441ce6c6 100644
--- a/advisories/unreviewed/2025/04/GHSA-rfhg-52gw-r6hv/GHSA-rfhg-52gw-r6hv.json
+++ b/advisories/unreviewed/2025/04/GHSA-rfhg-52gw-r6hv/GHSA-rfhg-52gw-r6hv.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-rfhg-52gw-r6hv",
-  "modified": "2025-04-21T18:32:09Z",
+  "modified": "2025-05-12T18:31:20Z",
   "published": "2025-04-21T18:32:09Z",
   "aliases": [
     "CVE-2025-28104"
   ],
   "details": "Incorrect access control in laskBlog v2.6.1 allows attackers to access all usernames via a crafted input.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -24,8 +29,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-284"
+    ],
+    "severity": "CRITICAL",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-04-21T18:15:22Z"
diff --git a/advisories/unreviewed/2025/05/GHSA-27f3-wjfj-399m/GHSA-27f3-wjfj-399m.json b/advisories/unreviewed/2025/05/GHSA-27f3-wjfj-399m/GHSA-27f3-wjfj-399m.json
new file mode 100644
index 00000000000..11ffa74d825
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-27f3-wjfj-399m/GHSA-27f3-wjfj-399m.json
@@ -0,0 +1,33 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-27f3-wjfj-399m",
+  "modified": "2025-05-12T18:31:46Z",
+  "published": "2025-05-12T18:31:46Z",
+  "aliases": [
+    "CVE-2025-45779"
+  ],
+  "details": "Tenda AC10 V1.0re_V15.03.06.46 is vulnerable to Buffer Overflow in the formSetPPTPUserList handler via the list POST parameter.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-45779"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/sunyou-iot/iot-vul/blob/main/TendaAC10/CVE-2025-45779/README.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.tendacn.com/us/download/detail-3782.html"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-12T17:15:47Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-2jfq-w82p-5wx6/GHSA-2jfq-w82p-5wx6.json b/advisories/unreviewed/2025/05/GHSA-2jfq-w82p-5wx6/GHSA-2jfq-w82p-5wx6.json
new file mode 100644
index 00000000000..ac36f77b0eb
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-2jfq-w82p-5wx6/GHSA-2jfq-w82p-5wx6.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2jfq-w82p-5wx6",
+  "modified": "2025-05-12T18:31:45Z",
+  "published": "2025-05-12T18:31:45Z",
+  "aliases": [
+    "CVE-2025-46737"
+  ],
+  "details": "SEL-5037 Grid Configurator contains an overly permissive Cross Origin Resource Sharing (CORS) configuration for a data gateway service in the application. This gateway service includes an API which is not properly configured to reject requests from unexpected sources.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-46737"
+    },
+    {
+      "type": "WEB",
+      "url": "https://selinc.com/products/software/latest-software-versions"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-346"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-12T16:15:25Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-2qv6-fvj9-j23p/GHSA-2qv6-fvj9-j23p.json b/advisories/unreviewed/2025/05/GHSA-2qv6-fvj9-j23p/GHSA-2qv6-fvj9-j23p.json
index 5daabdd7b33..4cce84a46a9 100644
--- a/advisories/unreviewed/2025/05/GHSA-2qv6-fvj9-j23p/GHSA-2qv6-fvj9-j23p.json
+++ b/advisories/unreviewed/2025/05/GHSA-2qv6-fvj9-j23p/GHSA-2qv6-fvj9-j23p.json
@@ -46,7 +46,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-119"
+      "CWE-119",
+      "CWE-120"
     ],
     "severity": "HIGH",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2025/05/GHSA-2wvq-34x3-5vhj/GHSA-2wvq-34x3-5vhj.json b/advisories/unreviewed/2025/05/GHSA-2wvq-34x3-5vhj/GHSA-2wvq-34x3-5vhj.json
new file mode 100644
index 00000000000..f205185de03
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-2wvq-34x3-5vhj/GHSA-2wvq-34x3-5vhj.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2wvq-34x3-5vhj",
+  "modified": "2025-05-12T18:31:47Z",
+  "published": "2025-05-12T18:31:47Z",
+  "aliases": [
+    "CVE-2025-46742"
+  ],
+  "details": "Users who were required to change their password could still access system information before changing their password",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-46742"
+    },
+    {
+      "type": "WEB",
+      "url": "https://selinc.com/products/software/latest-software-versions"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-284"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-12T17:15:47Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-2xwv-25cq-66xr/GHSA-2xwv-25cq-66xr.json b/advisories/unreviewed/2025/05/GHSA-2xwv-25cq-66xr/GHSA-2xwv-25cq-66xr.json
new file mode 100644
index 00000000000..1e6ead8def8
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-2xwv-25cq-66xr/GHSA-2xwv-25cq-66xr.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2xwv-25cq-66xr",
+  "modified": "2025-05-12T18:31:48Z",
+  "published": "2025-05-12T18:31:48Z",
+  "aliases": [
+    "CVE-2023-34732"
+  ],
+  "details": "An issue in the userId parameter in the change password function of Flytxt NEON-dX v0.0.1-SNAPSHOT-6.9-qa-2-9-g5502a0c allows attackers to execute brute force attacks to discover user passwords.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-34732"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/saykino/CVE-2023-34732"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-12T18:15:43Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-3g23-7g3r-898j/GHSA-3g23-7g3r-898j.json b/advisories/unreviewed/2025/05/GHSA-3g23-7g3r-898j/GHSA-3g23-7g3r-898j.json
index bca1f88ef76..57ab45a49ac 100644
--- a/advisories/unreviewed/2025/05/GHSA-3g23-7g3r-898j/GHSA-3g23-7g3r-898j.json
+++ b/advisories/unreviewed/2025/05/GHSA-3g23-7g3r-898j/GHSA-3g23-7g3r-898j.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-3g23-7g3r-898j",
-  "modified": "2025-05-03T18:30:29Z",
+  "modified": "2025-05-12T18:31:20Z",
   "published": "2025-05-03T18:30:29Z",
   "aliases": [
     "CVE-2024-58134"
   ],
   "details": "Mojolicious versions from 0.999922 through 9.39 for Perl uses a hard coded string, or the application's class name, as a HMAC session secret by default.\n\nThese predictable default secrets can be exploited to forge session cookies. An attacker who knows or guesses the secret could compute valid HMAC signatures for the session cookie, allowing them to tamper with or hijack another user’s session.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -43,7 +48,7 @@
     "cwe_ids": [
       "CWE-321"
     ],
-    "severity": null,
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-05-03T16:15:19Z"
diff --git a/advisories/unreviewed/2025/05/GHSA-4hrx-7c6v-v9v5/GHSA-4hrx-7c6v-v9v5.json b/advisories/unreviewed/2025/05/GHSA-4hrx-7c6v-v9v5/GHSA-4hrx-7c6v-v9v5.json
index ba92bf2b6fc..532a1e7459d 100644
--- a/advisories/unreviewed/2025/05/GHSA-4hrx-7c6v-v9v5/GHSA-4hrx-7c6v-v9v5.json
+++ b/advisories/unreviewed/2025/05/GHSA-4hrx-7c6v-v9v5/GHSA-4hrx-7c6v-v9v5.json
@@ -26,6 +26,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-284",
       "CWE-94"
     ],
     "severity": "MODERATE",
diff --git a/advisories/unreviewed/2025/05/GHSA-56gh-5cpc-w3cc/GHSA-56gh-5cpc-w3cc.json b/advisories/unreviewed/2025/05/GHSA-56gh-5cpc-w3cc/GHSA-56gh-5cpc-w3cc.json
index 2403449f1a7..1ec094474e9 100644
--- a/advisories/unreviewed/2025/05/GHSA-56gh-5cpc-w3cc/GHSA-56gh-5cpc-w3cc.json
+++ b/advisories/unreviewed/2025/05/GHSA-56gh-5cpc-w3cc/GHSA-56gh-5cpc-w3cc.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-56gh-5cpc-w3cc",
-  "modified": "2025-05-02T18:31:38Z",
+  "modified": "2025-05-12T18:31:21Z",
   "published": "2025-05-02T18:31:38Z",
   "aliases": [
     "CVE-2025-45800"
   ],
   "details": "TOTOLINK A950RG V4.1.2cu.5204_B20210112 contains a command execution vulnerability in the setDeviceName interface of the /lib/cste_modules/global.so library, specifically in the processing of the deviceMac parameter.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-77"
+    ],
+    "severity": "CRITICAL",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-05-02T17:15:52Z"
diff --git a/advisories/unreviewed/2025/05/GHSA-5cxg-299x-c7pc/GHSA-5cxg-299x-c7pc.json b/advisories/unreviewed/2025/05/GHSA-5cxg-299x-c7pc/GHSA-5cxg-299x-c7pc.json
new file mode 100644
index 00000000000..b85c12c5945
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-5cxg-299x-c7pc/GHSA-5cxg-299x-c7pc.json
@@ -0,0 +1,37 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-5cxg-299x-c7pc",
+  "modified": "2025-05-12T18:31:45Z",
+  "published": "2025-05-12T18:31:45Z",
+  "aliases": [
+    "CVE-2025-44022"
+  ],
+  "details": "An issue in vvveb CMS v.1.0.6 allows a remote attacker to execute arbitrary code via the Plugin mechanism.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-44022"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/givanz/Vvveb/issues/289"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/givanz/Vvveb/commit/dd74abcae88f658779f61338b9f4c123884eef0d"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/chimmeee/vulnerability-research/blob/main/CVE-2025-44022"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-12T16:15:25Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-5r2c-m983-f53w/GHSA-5r2c-m983-f53w.json b/advisories/unreviewed/2025/05/GHSA-5r2c-m983-f53w/GHSA-5r2c-m983-f53w.json
index 150416eb706..efe82cf483d 100644
--- a/advisories/unreviewed/2025/05/GHSA-5r2c-m983-f53w/GHSA-5r2c-m983-f53w.json
+++ b/advisories/unreviewed/2025/05/GHSA-5r2c-m983-f53w/GHSA-5r2c-m983-f53w.json
@@ -46,7 +46,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-74"
+      "CWE-74",
+      "CWE-77"
     ],
     "severity": "HIGH",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2025/05/GHSA-6q9m-6mf7-r8rx/GHSA-6q9m-6mf7-r8rx.json b/advisories/unreviewed/2025/05/GHSA-6q9m-6mf7-r8rx/GHSA-6q9m-6mf7-r8rx.json
new file mode 100644
index 00000000000..95286cda2bf
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-6q9m-6mf7-r8rx/GHSA-6q9m-6mf7-r8rx.json
@@ -0,0 +1,33 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-6q9m-6mf7-r8rx",
+  "modified": "2025-05-12T18:31:45Z",
+  "published": "2025-05-12T18:31:45Z",
+  "aliases": [
+    "CVE-2025-44830"
+  ],
+  "details": "EngineerCMS v1.02 through v.2.0.5 has a SQL injection vulnerability in the /project/addprojtemplet interface.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-44830"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/3xxx/engineercms/issues/90"
+    },
+    {
+      "type": "WEB",
+      "url": "https://gist.github.com/LTLTLXEY/e00ec21b730742ef432a7a560cd9b70a"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-12T16:15:25Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-7497-r7g9-h259/GHSA-7497-r7g9-h259.json b/advisories/unreviewed/2025/05/GHSA-7497-r7g9-h259/GHSA-7497-r7g9-h259.json
new file mode 100644
index 00000000000..719e171a812
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-7497-r7g9-h259/GHSA-7497-r7g9-h259.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-7497-r7g9-h259",
+  "modified": "2025-05-12T18:31:48Z",
+  "published": "2025-05-12T18:31:48Z",
+  "aliases": [
+    "CVE-2025-46745"
+  ],
+  "details": "An authenticated user without user-management permissions could view other users' account information.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-46745"
+    },
+    {
+      "type": "WEB",
+      "url": "https://selinc.com/products/software/latest-software-versions"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-269"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-12T17:15:48Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-7g85-qmcp-h33f/GHSA-7g85-qmcp-h33f.json b/advisories/unreviewed/2025/05/GHSA-7g85-qmcp-h33f/GHSA-7g85-qmcp-h33f.json
index 7ccc0e47311..0c9f1ce05b9 100644
--- a/advisories/unreviewed/2025/05/GHSA-7g85-qmcp-h33f/GHSA-7g85-qmcp-h33f.json
+++ b/advisories/unreviewed/2025/05/GHSA-7g85-qmcp-h33f/GHSA-7g85-qmcp-h33f.json
@@ -46,7 +46,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-119"
+      "CWE-119",
+      "CWE-120"
     ],
     "severity": "HIGH",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2025/05/GHSA-7mfj-jf8f-qjm7/GHSA-7mfj-jf8f-qjm7.json b/advisories/unreviewed/2025/05/GHSA-7mfj-jf8f-qjm7/GHSA-7mfj-jf8f-qjm7.json
new file mode 100644
index 00000000000..f568ce3eeda
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-7mfj-jf8f-qjm7/GHSA-7mfj-jf8f-qjm7.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-7mfj-jf8f-qjm7",
+  "modified": "2025-05-12T18:31:48Z",
+  "published": "2025-05-12T18:31:48Z",
+  "aliases": [
+    "CVE-2025-46747"
+  ],
+  "details": "An authenticated user without user-management permissions could identify other user accounts.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-46747"
+    },
+    {
+      "type": "WEB",
+      "url": "https://selinc.com/products/software/latest-software-versions"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-497"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-12T17:15:48Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-8ch3-84qh-pfj4/GHSA-8ch3-84qh-pfj4.json b/advisories/unreviewed/2025/05/GHSA-8ch3-84qh-pfj4/GHSA-8ch3-84qh-pfj4.json
new file mode 100644
index 00000000000..9deaa48db5a
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-8ch3-84qh-pfj4/GHSA-8ch3-84qh-pfj4.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-8ch3-84qh-pfj4",
+  "modified": "2025-05-12T18:31:47Z",
+  "published": "2025-05-12T18:31:47Z",
+  "aliases": [
+    "CVE-2025-46743"
+  ],
+  "details": "An authenticated user's token could be used by another source after the user had logged out prior to the token expiring.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-46743"
+    },
+    {
+      "type": "WEB",
+      "url": "https://selinc.com/products/software/latest-software-versions"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-352"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-12T17:15:47Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-9566-65pp-ghqg/GHSA-9566-65pp-ghqg.json b/advisories/unreviewed/2025/05/GHSA-9566-65pp-ghqg/GHSA-9566-65pp-ghqg.json
new file mode 100644
index 00000000000..caa7bc06032
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-9566-65pp-ghqg/GHSA-9566-65pp-ghqg.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-9566-65pp-ghqg",
+  "modified": "2025-05-12T18:31:46Z",
+  "published": "2025-05-12T18:31:46Z",
+  "aliases": [
+    "CVE-2025-3632"
+  ],
+  "details": "IBM 4769 Developers Toolkit 7.0.0 through 7.5.52 could allow a remote attacker to cause a denial of service in the Hardware Security Module (HSM) due to improper memory allocation of an excessive size.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3632"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.ibm.com/support/pages/node/7233139"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-789"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-12T17:15:46Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-9j22-g5g3-cw39/GHSA-9j22-g5g3-cw39.json b/advisories/unreviewed/2025/05/GHSA-9j22-g5g3-cw39/GHSA-9j22-g5g3-cw39.json
new file mode 100644
index 00000000000..10c3abf9282
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-9j22-g5g3-cw39/GHSA-9j22-g5g3-cw39.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-9j22-g5g3-cw39",
+  "modified": "2025-05-12T18:31:48Z",
+  "published": "2025-05-12T18:31:48Z",
+  "aliases": [
+    "CVE-2025-46750"
+  ],
+  "details": "SEL BIOS packages prior to 1.3.49152.117 or 2.6.49152.98 allow a local attacker to bypass password authentication and change password-protected  BIOS settings by importing a BIOS settings file with no password set.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-46750"
+    },
+    {
+      "type": "WEB",
+      "url": "https://selinc.com/products/software/latest-software-versions"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-305"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-12T17:15:48Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-f49q-7v8h-xwxv/GHSA-f49q-7v8h-xwxv.json b/advisories/unreviewed/2025/05/GHSA-f49q-7v8h-xwxv/GHSA-f49q-7v8h-xwxv.json
new file mode 100644
index 00000000000..308a55b56cb
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-f49q-7v8h-xwxv/GHSA-f49q-7v8h-xwxv.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-f49q-7v8h-xwxv",
+  "modified": "2025-05-12T18:31:47Z",
+  "published": "2025-05-12T18:31:47Z",
+  "aliases": [
+    "CVE-2025-46744"
+  ],
+  "details": "An authenticated administrator could modify the Created By username for a user account",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-46744"
+    },
+    {
+      "type": "WEB",
+      "url": "https://selinc.com/products/software/latest-software-versions"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-269"
+    ],
+    "severity": "LOW",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-12T17:15:48Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-f7g9-mhw7-w4wj/GHSA-f7g9-mhw7-w4wj.json b/advisories/unreviewed/2025/05/GHSA-f7g9-mhw7-w4wj/GHSA-f7g9-mhw7-w4wj.json
index 3209a20773d..a8fbfe91353 100644
--- a/advisories/unreviewed/2025/05/GHSA-f7g9-mhw7-w4wj/GHSA-f7g9-mhw7-w4wj.json
+++ b/advisories/unreviewed/2025/05/GHSA-f7g9-mhw7-w4wj/GHSA-f7g9-mhw7-w4wj.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-f7g9-mhw7-w4wj",
-  "modified": "2025-05-12T06:30:32Z",
+  "modified": "2025-05-12T18:31:44Z",
   "published": "2025-05-12T06:30:32Z",
   "aliases": [
     "CVE-2025-3649"
   ],
   "details": "The LightPress Lightbox WordPress plugin before 2.3.4 does not check download links point to valid, non-Javascript URLs, allowing users with at least the contributor role to conduct Stored XSS attacks.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -21,7 +26,7 @@
   ],
   "database_specific": {
     "cwe_ids": [],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-05-12T06:15:40Z"
diff --git a/advisories/unreviewed/2025/05/GHSA-fmqh-2m79-343w/GHSA-fmqh-2m79-343w.json b/advisories/unreviewed/2025/05/GHSA-fmqh-2m79-343w/GHSA-fmqh-2m79-343w.json
new file mode 100644
index 00000000000..6835f2e3194
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-fmqh-2m79-343w/GHSA-fmqh-2m79-343w.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-fmqh-2m79-343w",
+  "modified": "2025-05-12T18:31:47Z",
+  "published": "2025-05-12T18:31:47Z",
+  "aliases": [
+    "CVE-2025-46741"
+  ],
+  "details": "A suspended or recently logged-out user could continue to interact with Blueframe until the time-out period occurred.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-46741"
+    },
+    {
+      "type": "WEB",
+      "url": "https://selinc.com/products/software/latest-software-versions"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-269"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-12T17:15:47Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-fr65-4fvj-c9rf/GHSA-fr65-4fvj-c9rf.json b/advisories/unreviewed/2025/05/GHSA-fr65-4fvj-c9rf/GHSA-fr65-4fvj-c9rf.json
new file mode 100644
index 00000000000..5be996645b8
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-fr65-4fvj-c9rf/GHSA-fr65-4fvj-c9rf.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-fr65-4fvj-c9rf",
+  "modified": "2025-05-12T18:31:48Z",
+  "published": "2025-05-12T18:31:48Z",
+  "aliases": [
+    "CVE-2025-46749"
+  ],
+  "details": "An authenticated user could submit scripting to fields that lack proper input and output sanitization leading to subsequent client-side script execution.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-46749"
+    },
+    {
+      "type": "WEB",
+      "url": "https://selinc.com/products/software/latest-software-versions"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-12T17:15:48Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-g44x-q74r-h82x/GHSA-g44x-q74r-h82x.json b/advisories/unreviewed/2025/05/GHSA-g44x-q74r-h82x/GHSA-g44x-q74r-h82x.json
new file mode 100644
index 00000000000..aa42e747a56
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-g44x-q74r-h82x/GHSA-g44x-q74r-h82x.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-g44x-q74r-h82x",
+  "modified": "2025-05-12T18:31:48Z",
+  "published": "2025-05-12T18:31:48Z",
+  "aliases": [
+    "CVE-2025-46746"
+  ],
+  "details": "An administrator could discover another account's credentials.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-46746"
+    },
+    {
+      "type": "WEB",
+      "url": "https://selinc.com/products/software/latest-software-versions"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-209"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-12T17:15:48Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-gfj4-xfm6-jh2c/GHSA-gfj4-xfm6-jh2c.json b/advisories/unreviewed/2025/05/GHSA-gfj4-xfm6-jh2c/GHSA-gfj4-xfm6-jh2c.json
index b3a436fc0f2..2667de40f79 100644
--- a/advisories/unreviewed/2025/05/GHSA-gfj4-xfm6-jh2c/GHSA-gfj4-xfm6-jh2c.json
+++ b/advisories/unreviewed/2025/05/GHSA-gfj4-xfm6-jh2c/GHSA-gfj4-xfm6-jh2c.json
@@ -46,7 +46,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-119"
+      "CWE-119",
+      "CWE-120"
     ],
     "severity": "HIGH",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2025/05/GHSA-ggw4-9fpp-hfv4/GHSA-ggw4-9fpp-hfv4.json b/advisories/unreviewed/2025/05/GHSA-ggw4-9fpp-hfv4/GHSA-ggw4-9fpp-hfv4.json
new file mode 100644
index 00000000000..978e950226b
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-ggw4-9fpp-hfv4/GHSA-ggw4-9fpp-hfv4.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-ggw4-9fpp-hfv4",
+  "modified": "2025-05-12T18:31:48Z",
+  "published": "2025-05-12T18:31:48Z",
+  "aliases": [
+    "CVE-2025-44175"
+  ],
+  "details": "Tenda AC10 v4 V16.03.10.13 is vulnerable to Buffer Overflow in the GetParentControlInfo function.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-44175"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/xubeining/Cve_report/blob/main/The%20router%20Tenda%20AC10%20v4%20V16.03.10.13%20of%20Shenzhen%20Jixiang%20Tenda%20Technology%20Co.%2C%20Ltd.%20has%20a%20heap%20overflow%20vulnerability.md"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-12T18:15:45Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-h758-52xf-f99c/GHSA-h758-52xf-f99c.json b/advisories/unreviewed/2025/05/GHSA-h758-52xf-f99c/GHSA-h758-52xf-f99c.json
new file mode 100644
index 00000000000..41af0800eec
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-h758-52xf-f99c/GHSA-h758-52xf-f99c.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-h758-52xf-f99c",
+  "modified": "2025-05-12T18:31:47Z",
+  "published": "2025-05-12T18:31:47Z",
+  "aliases": [
+    "CVE-2025-46740"
+  ],
+  "details": "An authenticated user without user administrative permissions could  change the administrator Account Name.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-46740"
+    },
+    {
+      "type": "WEB",
+      "url": "https://selinc.com/products/software/latest-software-versions"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-280"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-12T17:15:47Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-hfm5-wxc2-vrfw/GHSA-hfm5-wxc2-vrfw.json b/advisories/unreviewed/2025/05/GHSA-hfm5-wxc2-vrfw/GHSA-hfm5-wxc2-vrfw.json
new file mode 100644
index 00000000000..1ccb03bd97b
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-hfm5-wxc2-vrfw/GHSA-hfm5-wxc2-vrfw.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-hfm5-wxc2-vrfw",
+  "modified": "2025-05-12T18:31:46Z",
+  "published": "2025-05-12T18:31:46Z",
+  "aliases": [
+    "CVE-2025-46738"
+  ],
+  "details": "An authenticated attacker can maliciously modify layout data files in the SEL-5033 installation directory to execute arbitrary code.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-46738"
+    },
+    {
+      "type": "WEB",
+      "url": "https://selinc.com/products/software/latest-software-versions"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-502"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-12T16:15:25Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-hhrx-pjm2-54m9/GHSA-hhrx-pjm2-54m9.json b/advisories/unreviewed/2025/05/GHSA-hhrx-pjm2-54m9/GHSA-hhrx-pjm2-54m9.json
index 9ee99dddbe2..64610d744bc 100644
--- a/advisories/unreviewed/2025/05/GHSA-hhrx-pjm2-54m9/GHSA-hhrx-pjm2-54m9.json
+++ b/advisories/unreviewed/2025/05/GHSA-hhrx-pjm2-54m9/GHSA-hhrx-pjm2-54m9.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-hhrx-pjm2-54m9",
-  "modified": "2025-05-12T06:30:32Z",
+  "modified": "2025-05-12T18:31:44Z",
   "published": "2025-05-12T06:30:32Z",
   "aliases": [
     "CVE-2025-3597"
   ],
   "details": "The Firelight Lightbox WordPress plugin before 2.3.15 does not prevent users with post writing capabilities from executing arbitrary Javascript when the jQuery Metadata library is enabled. While this feature is meant to only be available to Pro version users, it can be activated in the free version too, making it theoretically exploitable there as well.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -21,7 +26,7 @@
   ],
   "database_specific": {
     "cwe_ids": [],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-05-12T06:15:39Z"
diff --git a/advisories/unreviewed/2025/05/GHSA-jr9c-2vm6-7fqv/GHSA-jr9c-2vm6-7fqv.json b/advisories/unreviewed/2025/05/GHSA-jr9c-2vm6-7fqv/GHSA-jr9c-2vm6-7fqv.json
new file mode 100644
index 00000000000..bf789f9e78f
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-jr9c-2vm6-7fqv/GHSA-jr9c-2vm6-7fqv.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-jr9c-2vm6-7fqv",
+  "modified": "2025-05-12T18:31:46Z",
+  "published": "2025-05-12T18:31:46Z",
+  "aliases": [
+    "CVE-2025-47578"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Edward Caissie BNS Twitter Follow Button allows DOM-Based XSS.This issue affects BNS Twitter Follow Button: from n/a through 0.3.8.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47578"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/bns-twitter-follow-button/vulnerability/wordpress-bns-twitter-follow-button-plugin-0-3-8-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-12T16:15:25Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-p46h-3wp6-m43r/GHSA-p46h-3wp6-m43r.json b/advisories/unreviewed/2025/05/GHSA-p46h-3wp6-m43r/GHSA-p46h-3wp6-m43r.json
index 0d05f9483f5..4744c57a1f2 100644
--- a/advisories/unreviewed/2025/05/GHSA-p46h-3wp6-m43r/GHSA-p46h-3wp6-m43r.json
+++ b/advisories/unreviewed/2025/05/GHSA-p46h-3wp6-m43r/GHSA-p46h-3wp6-m43r.json
@@ -46,7 +46,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-119"
+      "CWE-119",
+      "CWE-120"
     ],
     "severity": "HIGH",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2025/05/GHSA-p797-f93r-qxjf/GHSA-p797-f93r-qxjf.json b/advisories/unreviewed/2025/05/GHSA-p797-f93r-qxjf/GHSA-p797-f93r-qxjf.json
index 2fd98149e9a..7a283401e9b 100644
--- a/advisories/unreviewed/2025/05/GHSA-p797-f93r-qxjf/GHSA-p797-f93r-qxjf.json
+++ b/advisories/unreviewed/2025/05/GHSA-p797-f93r-qxjf/GHSA-p797-f93r-qxjf.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-p797-f93r-qxjf",
-  "modified": "2025-05-08T21:32:56Z",
+  "modified": "2025-05-12T18:31:25Z",
   "published": "2025-05-08T21:32:56Z",
   "aliases": [
     "CVE-2025-45798"
   ],
   "details": "A command execution vulnerability exists in the TOTOLINK A950RG V4.1.2cu.5204_B20210112. The vulnerability is located in the setNoticeCfg interface within the /lib/cste_modules/system.so library, specifically in the processing of the IpTo parameter.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-77"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-05-08T20:15:30Z"
diff --git a/advisories/unreviewed/2025/05/GHSA-q752-7x5m-gqgm/GHSA-q752-7x5m-gqgm.json b/advisories/unreviewed/2025/05/GHSA-q752-7x5m-gqgm/GHSA-q752-7x5m-gqgm.json
new file mode 100644
index 00000000000..df63f514103
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-q752-7x5m-gqgm/GHSA-q752-7x5m-gqgm.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-q752-7x5m-gqgm",
+  "modified": "2025-05-12T18:31:48Z",
+  "published": "2025-05-12T18:31:48Z",
+  "aliases": [
+    "CVE-2025-44176"
+  ],
+  "details": "Tenda FH451 V1.0.0.9 is vulnerable to Remote Code Execution in the formSafeEmailFilter function.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-44176"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/xubeining/Cve_report/blob/main/Notification%20of%20Remote%20Code%20Execution%20Vulnerability%20in%20Tenda%20FH451%20Router%20%28Version%20V1.0.0.9%29%20by%20Shenzhen%20Jixiang%20Tenda%20Technology.md"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-12T18:15:45Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-q8f4-3c5x-8gv3/GHSA-q8f4-3c5x-8gv3.json b/advisories/unreviewed/2025/05/GHSA-q8f4-3c5x-8gv3/GHSA-q8f4-3c5x-8gv3.json
new file mode 100644
index 00000000000..3c34b393fd9
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-q8f4-3c5x-8gv3/GHSA-q8f4-3c5x-8gv3.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-q8f4-3c5x-8gv3",
+  "modified": "2025-05-12T18:31:48Z",
+  "published": "2025-05-12T18:31:48Z",
+  "aliases": [
+    "CVE-2025-46748"
+  ],
+  "details": "An authenticated user attempting to change their password could do so without using the current password.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-46748"
+    },
+    {
+      "type": "WEB",
+      "url": "https://selinc.com/products/software/latest-software-versions"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-620"
+    ],
+    "severity": "LOW",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-12T17:15:48Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-qph7-xc8r-fqmj/GHSA-qph7-xc8r-fqmj.json b/advisories/unreviewed/2025/05/GHSA-qph7-xc8r-fqmj/GHSA-qph7-xc8r-fqmj.json
index 31676c9c607..baa2ff08782 100644
--- a/advisories/unreviewed/2025/05/GHSA-qph7-xc8r-fqmj/GHSA-qph7-xc8r-fqmj.json
+++ b/advisories/unreviewed/2025/05/GHSA-qph7-xc8r-fqmj/GHSA-qph7-xc8r-fqmj.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-qph7-xc8r-fqmj",
-  "modified": "2025-05-02T18:31:32Z",
+  "modified": "2025-05-12T18:31:20Z",
   "published": "2025-05-02T15:31:48Z",
   "aliases": [
     "CVE-2025-3927"
   ],
   "details": "Digigram's PYKO-OUT audio-over-IP (AoIP) web-server does not require a password by default, allowing any attacker with the target IP address to connect and compromise the device, potentially pivoting to connected network or hardware devices.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -25,7 +30,7 @@
   ],
   "database_specific": {
     "cwe_ids": [],
-    "severity": null,
+    "severity": "CRITICAL",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-05-02T15:15:49Z"
diff --git a/advisories/unreviewed/2025/05/GHSA-r7w2-px2g-jxj7/GHSA-r7w2-px2g-jxj7.json b/advisories/unreviewed/2025/05/GHSA-r7w2-px2g-jxj7/GHSA-r7w2-px2g-jxj7.json
index 13aa9a546b4..97979fb6028 100644
--- a/advisories/unreviewed/2025/05/GHSA-r7w2-px2g-jxj7/GHSA-r7w2-px2g-jxj7.json
+++ b/advisories/unreviewed/2025/05/GHSA-r7w2-px2g-jxj7/GHSA-r7w2-px2g-jxj7.json
@@ -46,7 +46,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-119"
+      "CWE-119",
+      "CWE-120"
     ],
     "severity": "HIGH",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2025/05/GHSA-w8pq-wqhw-ch5q/GHSA-w8pq-wqhw-ch5q.json b/advisories/unreviewed/2025/05/GHSA-w8pq-wqhw-ch5q/GHSA-w8pq-wqhw-ch5q.json
new file mode 100644
index 00000000000..904c0dd2726
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-w8pq-wqhw-ch5q/GHSA-w8pq-wqhw-ch5q.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-w8pq-wqhw-ch5q",
+  "modified": "2025-05-12T18:31:46Z",
+  "published": "2025-05-12T18:31:46Z",
+  "aliases": [
+    "CVE-2025-46739"
+  ],
+  "details": "An unauthenticated user could discover account credentials via a brute-force attack without rate limiting",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-46739"
+    },
+    {
+      "type": "WEB",
+      "url": "https://selinc.com/products/software/latest-software-versions"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-307"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-12T17:15:47Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-xvf2-2w45-wg4p/GHSA-xvf2-2w45-wg4p.json b/advisories/unreviewed/2025/05/GHSA-xvf2-2w45-wg4p/GHSA-xvf2-2w45-wg4p.json
index 0a45e64a603..865abd35a4b 100644
--- a/advisories/unreviewed/2025/05/GHSA-xvf2-2w45-wg4p/GHSA-xvf2-2w45-wg4p.json
+++ b/advisories/unreviewed/2025/05/GHSA-xvf2-2w45-wg4p/GHSA-xvf2-2w45-wg4p.json
@@ -46,7 +46,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-74"
+      "CWE-74",
+      "CWE-77"
     ],
     "severity": "HIGH",
     "github_reviewed": false,