CVEs published in April 2025
4,149 vulnerabilities, 323 critical, 16 exploited.
- linux, linux kernel +1 moreBluetooth: Fix error code in chan_alloc_skb_cb()5.5 Medium
- linux, linux kernel +1 morenet: ethernet: ti: am65-cpsw: Fix NAPI registration sequence5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().5.5 Medium
- linux, linux kernel +1 morenet: atm: fix use after free in lec_send()8.6 High
- linux, linux kernel +1 morecan: ucan: fix out of bound read in strscpy() source5.5 Medium
- linux, linux kernel +1 morenetfs: Call `invalidate_cache` only if implemented5.5 Medium
- linux, linux kernel +1 moreaccel/qaic: Fix integer overflow in qaic_validate_req()7.8 High
- linux, linux kernel +1 moremm/huge_memory: drop beyond-EOF folios with the right number of refs5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreproc: fix UAF in proc_get_inode()7.8 High
- linux, linux kernel +1 morefirmware: qcom: uefisecapp: fix efivars registration race4.7 Medium
- linux, linux kernel +1 morexsk: fix an integer overflow in xp_create_and_assign_umem()5.5 Medium
- linux, linux kernel +1 moredrm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()5.5 Medium
- linux, linux kernel +1 moredrm/sched: Fix fence reference count leak5.5 Medium
- code-projects product management systemcodeprojects Product Management System Login buffer overflow4.8 Medium
- phpgurukul boat booking systemPHPGurukul Boat Booking System add-subadmin.php sql injection6.9 Medium
- phpgurukul bus pass management systemPHPGurukul Bus Pass Management System view-pass-detail.php sql injection6.9 Medium
- No product listedMindSpore mindspore.numpy.fft.rfft2 memory corruption4.8 Medium
- century systems co., ltd. futurenet nxr-120/c, futurenet nxr-1200, futurenet nxr-125/cx +29 more +31 moreUNIX symbolic link (Symlink) following issue exists in FutureNet NXR series, VXR series and WXR...6.2 Medium
- No product listedMindSpore mindspore.numpy.fft.hfftn memory corruption4.8 Medium
- oretnom23 apartment visitor management systemSourceCodester Apartment Visitor Management System visitor-entry.php sql injection5.3 Medium
- mappresspro mappress, unknown mappress maps for wordpress +1 moreMapPress Maps for WordPress < 2.94.9 - Contributor+ Stored XSS6.8 Medium
- oretnom23 apartment visitor management systemSourceCodester Apartment Visitor Management System add-apartment.php sql injection5.3 Medium
- rarlab winrarIssue that bypasses the "Mark of the Web" security warning function for files when opening a...6.8 Medium
- oretnom23 online medicine ordering systemSourceCodester Online Medicine Ordering System manage_category.php sql injection5.3 Medium
- oretnom23 online medicine ordering systemSourceCodester Online Medicine Ordering System view_category.php sql injection5.3 Medium
- code-projects bus reservation systemcode-projects Bus Reservation System Login Form login buffer overflow4.8 Medium
- phpgurukul online security guards hiring systemPHPGurukul Online Security Guards Hiring System edit-guard-detail.php sql injection6.9 Medium
- phpgurukul online security guards hiring systemPHPGurukul Online Security Guards Hiring System changeimage.php sql injection6.9 Medium
- linuxfoundation pytorchPyTorch CUDACachingAllocator.cpp torch.cuda.memory.caching_allocator_delete memory corruption4.8 Medium
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +32 more +34 moreLibsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content7.0 High
- fcba zzm ics-park smart park management system, smart park management system +1 morefcba_zzm ics-park Smart Park Management System update sql injection5.3 Medium
- code-projects payroll management systemcode-projects Payroll Management System add_overtime.php sql injection5.3 Medium
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS version 9 below 9.4.0RC2 and versions below 8.5.20 - CSRF and XSS in Concrete CMS Custom Address attribute5.1 Medium
php-horde-editorDebianphp-horde-editor - switch to CKEditor 4No score- crushftpCrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the...9.8 Critical
- gladinet centrestackGladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization...9.0 Critical
- yubico yubikeyYubico YubiKey 5.4.1 through 5.7.3 before 5.7.4 has an incorrect FIDO CTAP PIN/UV Auth Protocol...2.2 Low
- seacmsSeaCMS v13.3 has a SQL injection vulnerability in the component admin_tempvideo.php.9.8 Critical
- szlbt lbt-t300-t400 firmwareAn issue in Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v3.2 allows a local attacker to...7.8 High
- huang-yk student-manageInsecure Permission vulnerability in student-manage 1 allows a local attacker to escalate...7.8 High
- tenda ac15 firmwareA buffer overflow vulnerability has been discovered in Tenda Ac15 V15.13.07.13. The vulnerability...9.8 Critical
- carmelogarcia matrimonial siteCode-Projects Matrimonial Site V1.0 is vulnerable to SQL Injection in /view_profile.php?id=1.9.8 Critical
- totolink x18 firmwareAn issue in TOTOLINK x18 v.9.1.0cu.2024_B20220329 allows a remote attacker to execute arbitrary...9.8 Critical
- netwrix password secureNetwrix Password Secure through 9.2 allows command injection.9.8 Critical
- netwrix password secureNetwrix Password Secure 9.2.0.32454 allows OS command injection.9.8 Critical
- os4ed opensisAn insecure direct object reference (IDOR) in the component /assets/stafffiles of OS4ED openSIS...7.5 High
- os4ed opensisOS4ED openSIS v7.0 to v9.1 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- os4ed opensisOS4ED openSIS v7.0 to v9.1 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- os4ed opensisOS4ED openSIS v7.0 to v9.1 was discovered to contain a SQL injection vulnerability via the cp_id...9.8 Critical
- os4ed opensisAn issue in OS4ED openSIS v8.0 through v9.1 allows attackers to execute a directory traversal by...9.1 Critical
- Show moreLoading…