CVEs published in April 2025
4,149 vulnerabilities, 323 critical, 16 exploited.
- netgear ex6200, ex6200 firmware +1 more Netgear EX6200 sub_3C8EC buffer overflow 8.7 High
- netgear ex6200, ex6200 firmware +1 more Netgear EX6200 sub_3C03C buffer overflow 8.7 High
- netgear ex6120, ex6120 firmware +1 more Netgear EX6120 sub_30394 buffer overflow 8.7 High
- hcl software domino leap HCL Domino Leap is affected by improper access control 4.1 Medium
- hcl software domino leap HCL Domino Volt and Domino Leap are affected by a cross-site scripting (XSS) vulnerability 6.5 Medium
- hcl software domino leap HCL Domino Volt and Domino Leap are affected by a cross-site scripting (XSS) vulnerability 6.3 Medium
- hcl software domino leap HCL Domino Volt and Domino Leap are affected by a disclosure of private personal information vulnerability 5.3 Medium
- hcl software domino leap HCL Domino Volt and Domino Leap are affected by a Cross-site scripting (XSS) vulnerability 7.1 High
- hcl software domino leap HCL Domino Volt and Domino Leap are affected by missing "no cache" headers 3.2 Low
- hcl software domino volt, hcltech domino leap +1 more HCL Domino Volt is affected by Cross-site scripting (XSS) 4.6 Medium
- hcl software domino volt, hcltech domino leap +1 more HCL Domino Volt is affected by an unrestricted upload of a dangerous file type 4.6 Medium
- hcl software domino volt, hcltech domino leap +1 more HCL Domino Volt is affected by an unrestricted upload of a dangerous file type 4.6 Medium
- apple airplay audio sdk, airplay video sdk, airplay audio software development kit +2 more +4 more A buffer overflow was addressed with improved input validation. This issue is fixed in AirPlay... 6.5 Medium
- apple airplay audio sdk, airplay video sdk, airplay audio software development kit +2 more +4 more The issue was addressed with improved memory handling. This issue is fixed in AirPlay audio SDK 2... 6.5 Medium
- netgear ex6120, ex6120 firmware +1 more Netgear EX6120 fwAcosCgiInbound buffer overflow 8.7 High
- tesla model 3, model 3 firmware +1 more Tesla Model 3 VCSEC Integer Overflow Remote Code Execution Vulnerability 7.5 High
- tesla model s, model s firmware +1 more Tesla Model S Iris Modem ql_atfwd Command Injection Code Execution Vulnerability 7.8 High
- tesla model s, model s firmware +1 more Tesla Model S oFono Unnecessary Privileges Sandbox Escape Vulnerability 7.0 High
- tesla model s, model s firmware +1 more Tesla Model S Iris Modem QCMAP_ConnectionManager Improper Input Validation Sandbox Escape Vulnerability 7.8 High
- tesla model s, model s firmware +1 more Tesla Model S oFono AT Command Heap-based Buffer Overflow Code Execution Vulnerability 7.8 High
- tesla model s, model s firmware +1 more Tesla Model S Iris Modem Race Condition Firewall Bypass Vulnerability 5.0 Medium
- macrozheng mall Weitong Mall Sale Endpoint improper authorization 5.3 Medium
- sonicwall sma1000, sma1000 firmware +1 more A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance... 7.2 High
- abb anc, anc-l, anc-mini +2 more Sensitive information submitted using GET method 5.3 Medium
- abb anc, anc-l, anc-mini +2 more Application is vulnerable to Privilege escalation 8.5 High
- citeum opencti OpenCTI bypass of protected attribute update 6.3 Medium
- abb anc, anc-l, anc-mini +2 more Unverified Password Change 2.1 Low
- vitejs vite Vite's server.fs.deny bypassed with /. for files under project root 6.0 Medium
- netgear wg302v2, wg302v2 firmware +1 more Netgear WG302v2 ui_get_input_value command injection 5.3 Medium
- apple ipados, ios and ipados, iphone os +2 more An app could impersonate system notifications. Sensitive notifications now require restricted... 5.5 Medium
- david gwyer simple sitemap – create a responsive html sitemap, wpgoplugins simple sitemap +1 more WordPress Simple Sitemap – Create a Responsive HTML Sitemap plugin <= 3.6.0 - Broken Access Control vulnerability 4.3 Medium
- microsoft azure virtual desktop Azure Virtual Desktop Elevation of Privilege Vulnerability 8.5 High
- microsoft azure ai bot service Azure AI Bot Elevation of Privilege Vulnerability 9.8 Critical
- microsoft azure functions Azure Functions Remote Code Execution Vulnerability 7.5 High
- microsoft azure machine learning Azure ML Compute Elevation of Privilege Vulnerability 9.9 Critical
- microsoft azure ai bot service Azure Bot Framework SDK Elevation of Privilege Vulnerability 8.7 High
- microsoft dynamics 365 customer service Microsoft Dynamics Information Disclosure Vulnerability 8.1 High
- xwiki, xwiki-contrib syntax-markdown +1 more org.xwiki.contrib.markdown:syntax-markdown-commonmark12 vulnerable to XSS via Markdown content 9.1 Critical
- xwiki, xwiki xwiki-platform +1 more Any user with view access to the XWiki space can change the authenticator 8.4 High
- xwiki, xwiki xwiki-platform +1 more XWiki missing authorization when accessing the wiki level attachments list and metadata via REST API 5.3 Medium
- symantec endpoint protection, broadcom symantec eraser engine +1 more Symantec Endpoint Protection Elevation of Privilege 6.5 Medium
- openfga, openfga helm charts +1 more OpenFGA Authorization Bypass 5.8 Medium
- volcano-sh volcano Volcano Scheduler Denial of Service via Unbounded Response from Elastic Service/extender Plugin 8.2 High
- cryptocoinjs base-x base-x homograph attack allows Unicode lookalike characters to bypass validation. 8.7 High
- mozilla firefox focus, focus +1 more Firefox Focus elide URL allows address bar spoofing 6.1 Medium
- discourse Discourse DM limits aren’t always properly enforced 4.8 Medium
- joplin project joplin Privilege escalation in Joplin server via user patch endpoint 8.8 High
- joplin project joplin Joplin Server Vulnerable to Path Traversal 7.5 High
- netgear jwnr2000v2, jwnr2000v2 firmware +1 more Netgear JWNR2000v2 sub_435E04 command injection 5.3 Medium
- netgear jwnr2000v2, jwnr2000v2 firmware +1 more Netgear JWNR2000v2 cmd_wireless command injection 5.3 Medium
- Show olderLoading…