CVEs published in April 2025
4,149 vulnerabilities, 323 critical, 16 exploited.
- openatom openharmonyLiteos_A has an integer overflow vulnerability6.5 Medium
- openatom openharmonyarkcompiler_ets_runtime has an out-of-bounds read vulnerability3.3 Low
- openatom openharmonyarkcompiler_ets_runtime has an out-of-bounds read vulnerability3.3 Low
- openatom openharmonyarkcompiler_ets_runtime has an out-of-bounds read vulnerability3.3 Low
- code-projects online restaurant management systemcodeprojects Online Restaurant Management System menu_save.php sql injection6.9 Medium
- code-projects online restaurant management systemcodeprojects Online Restaurant Management System payment_save.php sql injection6.9 Medium
- code-projects online restaurant management systemcodeprojects Online Restaurant Management System reservation_save.php sql injection6.9 Medium
- consumer comanda mobileConsumer Comanda Mobile Restaurant Order cleartext transmission2.3 Low
- tenda ac1206, ac1206 firmware +1 moreTenda AC1206 fast_setting_wifi_set form_fast_setting_wifi_set buffer overflow8.7 High
liblouisOSS-FuzzUNKNOWN WRITE in _lou_handlePassVariableActionNo score- iteaj iboot, iboot 物联网网关 +1 moreiteaj iboot 物联网网关 File Upload batch cross site scripting5.1 Medium
- ratta supernote a6 x2 nomadRatta SuperNote A6 X2 Nomad before December 2024 allows remote code execution because an...8.1 High
- No product listedA vulnerability exists in the errorpage.php file of the CS2-WeaponPaints-Website v2.1.7 where...6.1 Medium
- struktur libheifBuffer Overflow vulnerability in libheif 1.19.7 allows a local attacker to execute arbitrary code...6.2 Medium
- libbpf project libbpfBuffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code...6.2 Medium
- osgeo gdalBuffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service...5.5 Medium
- treasuredata fluent bitAn issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the...5.5 Medium
- sqlite, siemens ruggedcom crossbow station access controller (sac), simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreSqlite 3.49.0 is susceptible to integer overflow through the concat function.3.2 Low
- ruoyiAn issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the...9.8 Critical
- ruoyiAn issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the /editSave...9.8 Critical
- ruoyiAn issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the editSave method...9.8 Critical
- ruoyiAn issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the...9.8 Critical
- ruoyiAn issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the add method of...8.8 High
- ruoyiAn issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the selectDeptTree...9.8 Critical
- ruoyiAn issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the edit method of...8.8 High
- ruoyiAn issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the jobLogId parameter9.8 Critical
- ruoyiAn issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the changeStatus...9.8 Critical
- ruoyiAn issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the editSave method...7.2 High
- ruoyiAn issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the jobId parameter9.8 Critical
- ruoyiAn issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the menuId parameter6.7 Medium
- ruoyiAn issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the postID...6.7 Medium
- typechoA cross-site scripting (XSS) vulnerability in Typecho v1.2.1 allows attackers to execute...5.4 Medium
- iteaj iboot, iboot 物联网网关 +1 moreiteaj iboot 物联网网关 File Upload upload cross site scripting5.1 Medium
- iteaj iboot, iboot 物联网网关 +1 moreiteaj iboot 物联网网关 Admin Password pwd access control5.3 Medium
- code-projects nimrodgodcheese/code-projects Nimrod FileRestController.java unrestricted upload5.3 Medium
- code-projects nimrodgodcheese/code-projects Nimrod ViewMenuCategoryRestController.java searchAllByName sql injection5.3 Medium
- lnbitsServer-Side Request Forgery via LNURL Authentication Callback in LNbits Lightning Network Payment System9.3 Critical
- openidc mod auth openidcmod_auth_openidc allows OIDCProviderAuthRequestMethod POSTs to leak protected data8.2 High
- hex-dragon pcl2Plain Craft Launcher's custom homepage can use Internet Explorer to load web pages with the help of controls such as WebBrowser4.9 Medium
- eclipse threadx netx duo, eclipse foundation threadx +1 moreEclipse ThreadX NetX Duo component HTTP server single PUT request integer underflow5.3 Medium
- eclipse threadx netx duo, eclipse foundation threadx +1 moreEclipse ThreadX NetX Duo HTTP component server denial of service7.1 High
- eclipse threadx netx duo, eclipse foundation threadx +1 moreEclipse ThreadX NetX Duo HTTP server single PUT request integer underflow5.3 Medium
- kenj frog 肯尼基蛙 company-financial-management 公司财务管理系统, kennifrog company financial management system +1 moreKenj_Frog 肯尼基蛙 company-financial-management 公司财务管理系统 ShangpinleixingController.java page sql injection5.3 Medium
- fumiao opencmsfumiao opencms dataPage.jsp path traversal5.3 Medium
- phpgurukul men salon management systemPHPGurukul Men Salon Management System search-invoices.php sql injection6.9 Medium
- oretnom23 apartment visitor management systemSourceCodester Apartment Visitor Management System view-report.php sql injection6.9 Medium
- oretnom23 apartment visitor management systemSourceCodester Apartment Visitor Management System forgotpw.php sql injection6.9 Medium
- phpgurukul men salon management systemPHPGurukul Men Salon Management System add-customer.php sql injection6.9 Medium
- phpgurukul men salon management systemPHPGurukul Men Salon Management System add-customer-services.php sql injection6.9 Medium
- phpgurukul men salon management systemPHPGurukul Men Salon Management System about-us.php sql injection6.9 Medium
- Show moreLoading…