CVEs published in April 2025
4,149 vulnerabilities, 323 critical, 16 exploited.
- google chromeInappropriate implementation in Custom Tabs in Google Chrome prior to 135.0.7049.52 allowed a...5.4 Medium
- google chromeInappropriate implementation in Navigations in Google Chrome prior to 135.0.7049.52 allowed a...5.4 Medium
- google chromeInsufficient validation of untrusted input in Extensions in Google Chrome prior to 135.0.7049.52...6.5 Medium
- google chromeInappropriate implementation in Extensions in Google Chrome prior to 135.0.7049.52 allowed a...8.8 High
- google chromeInappropriate implementation in Intents in Google Chrome on Android prior to 135.0.7049.52...8.8 High
- google chromeInappropriate implementation in Custom Tabs in Google Chrome on Android prior to 135.0.7049.52...8.6 High
- google chromeUse after free in Navigations in Google Chrome prior to 135.0.7049.52 allowed a remote attacker...8.8 High
- dell wyse management suite, wyse management suite repository +1 moreDell Wyse Management Suite, versions prior to WMS 5.1, contains an Unrestricted Upload of File...4.7 Medium
- dell wyse management suiteDell Wyse Management Suite, versions prior to WMS 5.1, contains an Improper Neutralization of...4.9 Medium
icuOSS-FuzzHeap-buffer-overflow in icu_78::RegexMatcher::MatchChunkAtNo score- dell wyse management suiteDell Wyse Management Suite, versions prior to WMS 5.1, contains an Insufficient Resource Pool...5.3 Medium
tarantoolOSS-FuzzHeap-use-after-free in lj_strfmt_pushvfNo score- dell wyse management suiteDell Wyse Management Suite, versions prior to WMS 5.1, contains an Insecure Inherited Permissions...6.8 Medium
- dell wyse management suiteDell Wyse Management Suite, versions prior to WMS 5.1, contains an Exposure of Sensitive...7.5 High
clamavOSS-FuzzHeap-buffer-overflow in cli_bm_addpattNo score- squirrelmailmime.php in SquirrelMail through 1.4.23-svn-20250401 and 1.5.x through 1.5.2-svn-20250401 allows...7.2 High
- pexip infinitySignalling in Pexip Infinity 29 through 36.2 before 37.0 has improper input validation that...7.5 High
- remyandrade employee management systemSourceCodester (rems) Employee Management System 1.0 is vulnerable to Cross Site Scripting (XSS)...6.1 Medium
com.vip.saturn:saturn-consoleMavenVipshop Saturn Console Vulnerable to SQL Injection via ClusterKey Component9.8 Critical- lb-link bl-ac2100 firmwareAn issue in BL-AC2100 V1.0.4 and before allows a remote attacker to execute arbitrary code via...9.8 Critical
- lb-link bl-ac2100 firmwareAn issue in BL-AC2100 <=V1.0.4 allows a remote attacker to execute arbitrary code via the time1...9.8 Critical
- djangoproject djangoDjango Potential Denial of Service (DoS) on Windows5.8 Medium
- openvpnOpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to...7.5 High
- os4ed opensisOS4ED openSIS v7.0 to v9.1 was discovered to contain a SQL injection vulnerability via the table...7.5 High
- os4ed opensisOS4ED openSIS v7.0 through v9.1 contains a SQL injection vulnerability via the stu_id parameter...8.8 High
- os4ed opensisAn issue in OS4ED openSIS v8.0 through v9.1 allows attackers to execute a directory traversal and...8.8 High
- No product listedPexip Infinity Connect before 1.13.0 lacks sufficient authenticity checks during the loading of...9.1 Critical
- pexip infinityPexip Infinity before 35.0 has improper input validation that allows remote attackers to trigger...7.5 High
- nasa cryptolibHeap Buffer Overflow via Incomplete Length Check in `Crypto_TC_ApplySecurity`9.3 Critical
- phires go-guerrillaGo-Guerrilla SMTP Daemon allows the PROXY command to be sent multiple times5.3 Medium
- ouch-org ouchouch-org ouch zip.rs convert_zip_date_time memory corruption4.8 Medium
- petesheppard84 extensions for elementorWordPress Extensions for Elementor plugin <= 2.0.40 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- pixelgrade nova blocksWordPress Nova Blocks by Pixelgrade plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- slicedinvoices sliced invoicesWordPress Sliced Invoices plugin <= 3.10.0 - Insecure Direct Object References (IDOR) vulnerability5.3 Medium
- marcoingraiti actionwear products syncWordPress Actionwear products sync plugin <= 2.3.3 - SQL Injection vulnerability8.5 High
- sabuj kundu cbx pollWordPress CBX Poll plugin <= 2.0.4 - PHP Object Injection vulnerability9.8 Critical
- wpglob auto scroll for readingWordPress Auto scroll for reading plugin <= 1.1.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- anzar ahmed ni woocommerce product enquiryWordPress Ni WooCommerce Product Enquiry plugin <= 4.1.8 - Broken Access Control vulnerability7.5 High
- exeideas international wp autokeywordWordPress WP AutoKeyword plugin <= 1.0 - SQL Injection vulnerability9.3 Critical
- wisdomlogix solutions pvt. ltd. fonts manager | custom fontsWordPress Fonts Manager | Custom Fonts plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability7.1 High
- cynob it consultancy the logo sliderWordPress The Logo Slider plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- wiredmindshelp leadlab by wiredmindsWordPress LeadLab by wiredminds plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability7.1 High
- aitool ai auto tool content writing assistant (gemini writer, chatgpt ) all in oneWordPress Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One plugin <= 2.2.6 - SQL Injection vulnerability8.5 High
- vimal kava ai search barWordPress AI Search Bar plugin <= 2.1 - Cross Site Scripting (XSS) vulnerability7.1 High
- codesolz ultimate push notificationsWordPress Ultimate Push Notifications plugin <= 1.2.0 - SQL Injection vulnerability8.5 High
- dimitri grassi salon booking systemWordPress Salon booking system plugin < 10.15 - Privilege Escalation vulnerability7.2 High
- wpfactory advanced woocommerce product sales reportingWordPress Advanced WooCommerce Product Sales Reporting plugin <= 4.1.1 - SQL Injection vulnerability9.3 Critical
- davidfcarr rsvpmarkerWordPress RSVPMarker plugin <= 11.6.7 - SQL Injection vulnerability9.3 Critical
- salesmate.io salesmate add-on for gravity formsWordPress Salesmate Add-On for Gravity Forms plugin <= 2.0.3 - SQL Injection vulnerability9.3 Critical
- thom4 wp-lessWordPress WP-LESS plugin <= 1.9.6 - Sensitive Data Exposure vulnerability5.8 Medium
- Show moreLoading…