CVEs published in April 2025
4,149 vulnerabilities, 323 critical, 16 exploited.
expand-objectnpmexpand-object Vulnerable to Prototype Pollution via the expand() Function6.9 Mediumbigint-buffernpm,@rootio/bigint-bufferRoot +1 morebigint-buffer Vulnerable to Buffer Overflow via toBigIntLE() Function8.7 High- code-projects patient record management systemcode-projects Patient Record Management System xray_print.php sql injection5.3 Medium
- uncannyowl uncanny automator – easy automation, integration, webhooks & workflow builder plugin, uncanny automator +1 moreUncanny Automator <= 6.3.0.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation8.8 High
- booster for woocommerce, pluggabl booster for woocommerce +1 moreBooster for WooCommerce 4.0.1 - 7.2.4 - Unauthenticated Arbitrary File Upload8.1 High
- code-projects patient record management systemcode-projects Patient Record Management System birthing_form.php sql injection5.3 Medium
- code-projects hospital management systemcode-projects Hospital Management System doctor-specilization.php sql injection5.3 Medium
- codeastro student grading systemCodeAstro Student Grading System studentsubject.php sql injection5.3 Medium
- codeastro car rental systemCodeAstro Car Rental System returncar.php sql injection5.3 Medium
- tenda w18e, w18e firmware +1 moreTenda W18E setModules formSetAccountList stack-based overflow5.3 Medium
- ageerle ruoyi-aiageerle ruoyi-ai SysNoticeController.java improper authorization6.9 Medium
- jtekt electronics corporation hmi viewjet c-more seriesWeak encoding for password vulnerability exists in HMI ViewJet C-more series. If this...6.5 Medium
- jtekt electronics corporation hmi gc-a2 series, hmi viewjet c-more series +1 moreUnintended proxy or intermediary ('Confused Deputy') issue exists in HMI ViewJet C-more series...5.8 Medium
- jtekt electronics corporation hmi gc-a2 series, hmi viewjet c-more series +1 moreAllocation of resources without limits or throttling issue exists in HMI ViewJet C-more series...5.3 Medium
- jtekt electronics corporation hmi viewjet c-more seriesImproper restriction of rendered UI layers or frames issue exists in HMI ViewJet C-more series,...4.3 Medium
- ageerle ruoyi-ai, pandarobot ruoyi ai +1 moreageerle ruoyi-ai API Interface SysModelController.java improper authorization6.9 Medium
- gnu binutils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +2 more +4 moreGNU Binutils objdump bucomm.c display_info memory leak4.8 Medium
- assimpOpen Asset Import Library Assimp Malformed File MD2Loader.cpp InternReadFile stack-based overflow4.8 Medium
- adonesevangelista online blood bank management systemitsourcecode Online Blood Bank Management System bbms.php sql injection6.9 Medium
- phpgurukul e-diary management systemPHPGurukul e-Diary Management System add-notes.php sql injection6.9 Medium
- phpgurukul e-diary management systemPHPGurukul e-Diary Management System login.php sql injection6.9 Medium
- microsoft edge, edge for ios +1 moreMicrosoft Edge for iOS Spoofing Vulnerability4.7 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability7.6 High
- microsoft edge, edge for ios +1 moreMicrosoft Edge for iOS Spoofing Vulnerability4.3 Medium
- acme.sh project acme.shThe Docker image from acme.sh before 40b6db6 is based on a .github/workflows/dockerhub.yml file...8.7 High
- treasuredata fluent bitAn issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the...5.5 Medium
c-blosc2DebianBuffer Overflow vulnerability in compress_chunk_fuzzer with oss-fuzz on commit...5.5 Medium- edimax br-6478ac v3 firmwareEdimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a...9.8 Critical
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability8.8 High
- projectworlds online doctor appointment booking system, online doctor appointment booking system php and mysql +1 moreprojectworlds Online Doctor Appointment Booking System invoice.php sql injection6.9 Medium
- projectworlds online doctor appointment booking system, online doctor appointment booking system php and mysql +1 moreprojectworlds Online Doctor Appointment Booking System patientupdateprofile.php sql injection6.9 Medium
- projectworlds online doctor appointment booking system, online doctor appointment booking system php and mysql +1 moreprojectworlds Online Doctor Appointment Booking System profile.php sql injection6.9 Medium
- hcl software travelerAn internal path disclosure vulnerability affects HCL Traveler4.3 Medium
- jupyterlab jupyterlab-gitjupyterlab-git has a command injection vulnerability in "Open Git Repository in Terminal"7.4 High
- projectworlds online doctor appointment booking system, online doctor appointment booking system php and mysql +1 moreprojectworlds Online Doctor Appointment Booking System patientupdateprofile.php sql injection6.9 Medium
- hcl software travelerHCL Traveler is affected by generation of error messages containing sensitive information4.3 Medium
- projectworlds online doctor appointment booking system, online doctor appointment booking system php and mysql +1 moreprojectworlds Online Doctor Appointment Booking System getschedule.php sql injection6.9 Medium
- projectworlds online doctor appointment booking system, online doctor appointment booking system php and mysql +1 moreprojectworlds Online Doctor Appointment Booking System appointment.php sql injection6.9 Medium
- projectworlds online doctor appointment booking system, doctor appointment system +1 moreprojectworlds Online Doctor Appointment Booking System deleteschedule.php sql injection6.9 Medium
- projectworlds online doctor appointment booking system, doctor appointment system +1 moreprojectworlds Online Doctor Appointment Booking System deletepatient.php sql injection6.9 Medium
- projectworlds online doctor appointment booking system, doctor appointment system +1 moreprojectworlds Online Doctor Appointment Booking System deleteappointment.php sql injection6.9 Medium
- fastcms project fastcmsFastCMS JWT hard-coded key2.3 Low
- minioMinIO performs incomplete signature validation for unsigned-trailer uploads8.7 High
- api-platform coreGraphQL grant on a property might be cached with different objects7.5 High
- project worlds online lawyer management systemProject Worlds Online Lawyer Management System single_lawyer.php sql injection6.9 Medium
- api-platform coreGraphQL query operations security can be bypassed7.5 High
- jhipster generator-jhipster-entity-auditCWE-470 in generator-jhipster-entity-audit when having Javers selected as Entity Audit Framework7.7 High
- project worlds online lawyer management systemProject Worlds Online Lawyer Management System save_user_edit_profile.php sql injection6.9 Medium
- project worlds online lawyer management systemProject Worlds Online Lawyer Management System searchLawyer.php sql injection6.9 Medium
- atlassian jiraThe XWiki JIRA extension allows data leak through an XXE attack by using a fake JIRA server7.7 High
- Show moreLoading…