CVEs published in April 2025
4,149 vulnerabilities, 323 critical, 16 exploited.
- pimcore admin classic bundle, admin-ui-classic-bundle +1 morePimcore's Admin Classic Bundle allows HTML Injection1.8 Low
- dell common event enablerDell Common Event Enabler, version(s) CEE 9.0.0.0, contain(s) an Initialization of a Resource...6.5 Medium
- dell common event enablerDell Common Event Enabler, version(s) CEE 9.0.0.0, contain(s) an Improper Restriction of...8.3 High
- apache tomcatApache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame7.5 High
- zealopensource accept sagepay payments using contact form 7Accept SagePay Payments Using Contact Form 7 <= 2.0 - Unauthenticated Information Exposure5.3 Medium
- stylemix motors – car dealership & classified listings plugin, stylemixthemes motors - car dealer\, classifieds \& listing +1 moreMotors – Car Dealership & Classified Listings Plugin <= 1.4.66 - Missing Authorization to Authenticated (Subscriber+) Wizard Set-up4.3 Medium
- stylemix motors – car dealership & classified listings plugin, stylemixthemes motors - car dealer\, classifieds \& listing +1 moreMotors – Car Dealership & Classified Listings Plugin <= 1.4.63 - Authenticated (Subscriber+) Stored Cross-Site Scripting5.4 Medium
- stylemix motors – car dealership & classified listings plugin, stylemixthemes motors - car dealer\, classifieds \& listing +1 moreMotors – Car Dealership & Classified Listings Plugin <= 1.4.64 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation8.8 High
- siemens mendix runtime v10, mendix runtime v10.12, mendix runtime v10.18 +3 more +5 moreA vulnerability has been identified in Mendix Runtime V10 (All versions < V10.21.0), Mendix...6.9 Medium
- siemens license server (sls)A vulnerability has been identified in Siemens License Server (SLS) (All versions < V4.3). The...5.4 Medium
- siemens license server (sls)A vulnerability has been identified in Siemens License Server (SLS) (All versions < V4.3). The...5.4 Medium
- siemens industrial edge device kit - arm64 v1.17, industrial edge device kit - arm64 v1.18, industrial edge device kit - arm64 v1.19 +16 more +18 moreA vulnerability has been identified in Industrial Edge Device Kit - arm64 V1.17 (All versions),...9.3 Critical
- siemens sentron 7kt pac1260 data manager, 7kt pac1260 data manager firmware +1 moreA vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web...6.9 Medium
- siemens sentron 7kt pac1260 data manager, 7kt pac1260 data manager firmware +1 moreA vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web...6.9 Medium
- siemens sentron 7kt pac1260 data manager, 7kt pac1260 data manager firmware +1 moreA vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). Affected...10.0 Critical
- gdragon coreactivity: activity logging for wordpresscoreActivity: Activity Logging for WordPress <= 2.7 - Authenticated (Subscriber+) SQL Injection6.5 Medium
- syam mohan wpfront user role editorWPFront User Role Editor <= 4.2.1 - Cross-Site Request Forgery to Privilege Escalation via whitelist_options Function8.8 High
- siemens sentron 7kt pac1260 data manager, 7kt pac1260 data manager firmware +1 moreA vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web...7.7 High
- smartdevth advanced advertising systemAdvanced Advertising System <= 1.3.1 - Open Redirect6.1 Medium
- elpix aawp obfuscatorAAWEP Obfuscator <= 1.0 - Authenticated (Author+) Stored Cross-Site Scripting6.4 Medium
- siemens sentron 7kt pac1260 data manager, 7kt pac1260 data manager firmware +1 moreA vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web...9.2 Critical
- siemens sentron 7kt pac1260 data manager, 7kt pac1260 data manager firmware +1 moreA vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web...6.9 Medium
- siemens sentron 7kt pac1260 data manager, 7kt pac1260 data manager firmware +1 moreA vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web...9.4 Critical
- siemens sentron 7kt pac1260 data manager, 7kt pac1260 data manager firmware +1 moreA vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web...9.4 Critical
- siemens sentron 7kt pac1260 data manager, 7kt pac1260 data manager firmware +1 moreA vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web...9.4 Critical
- linux, linux kernel +1 moredevlink: fix xa_alloc_cyclic() error handling5.5 Medium
- linux, linux kernel +1 moredpll: fix xa_alloc_cyclic() error handling5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moremm/migrate: fix shmem xarray update during migration7.8 High
- linux, linux kernel +1 moresoc: qcom: pdr: Fix the potential deadlock5.5 Medium
- linux, linux kernel +1 moreRevert "arm64: dts: qcom: sdm845: Affirm IDR0.CCTW on apps_smmu"8.8 High
- linux, linux kernel +1 moreARM: dts: bcm2711: Fix xHCI power-domain5.5 Medium
- linux, linux kernel +1 moreRDMA/hns: Fix soft lockup during bt pages loop5.5 Medium
- linux, linux kernel +1 moreregulator: dummy: force synchronous probing5.5 Medium
- linux, linux kernel +1 moreregulator: check that dummy regulator has been probed before using it5.5 Medium
- greenmoney greenpay(tm) by green.moneyGreenPay(tm) by Green.Money 3.0.0 - 3.0.9 - Unauthenticated Information Exposure5.3 Medium
- digitalzoomstudio zoomsounds, zoomit zoomsounds - wordpress wave audio player with playlist +1 moreZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated Arbitrary File Download7.5 High
- sap se s4core entityOdata meta-data tampering in SAP S4CORE entity4.3 Medium
- sap businessobjects business intelligence platformInsecure File permissions vulnerability in SAP BusinessObjects Business Intelligence Platform6.6 Medium
- sap se netweaverAuthorization Bypass vulnerability in SAP NetWeaver4.3 Medium
- sap se landscape transformation (analysis platform)Code Injection Vulnerability in SAP Landscape Transformation (Analysis Platform)9.9 Critical
- sap se solution managerMissing Authorization check in SAP Solution Manager4.4 Medium
- sap se financial consolidationAuthentication Bypass Vulnerability in SAP Financial Consolidation9.8 Critical
- sap se netweaver and abap platform (application server abap)Memory Corruption vulnerability in SAP NetWeaver and ABAP Platform (Application Server ABAP)4.1 Medium
- sap se capital yield tax managementDirectory Traversal vulnerability in SAP Capital Yield Tax Management7.7 High
- sap se erp bw business contentCode Injection vulnerability in SAP ERP BW Business Content6.7 Medium
- sap se netweaver application server abap (virus scan interface)Missing Authorization check in SAP NetWeaver Application Server ABAP (Virus Scan Interface)4.3 Medium
- sap se commerce cloudInformation Disclosure Vulnerability in SAP Commerce Cloud4.2 Medium
- sap se s/4hana (private cloud)Code Injection Vulnerability in SAP S/4HANA (Private Cloud or On-Premise)9.9 Critical
- sap se netweaver and abap platform (service data collection)Directory Traversal vulnerability in SAP NetWeaver and ABAP Platform (Service Data Collection)7.7 High
- sap se kmc wpcInformation Disclosure vulnerability in SAP KMC WPC5.3 Medium
- Show moreLoading…