CVEs published in April 2025
4,149 vulnerabilities, 323 critical, 16 exploited.
- haproxyHAProxy 2.2 through 3.1.6, in certain uncommon configurations, has a sample_conv_regsub heap...6.8 Medium
- tikiwikiplugin_includetpl in lib/wiki-plugins/wikiplugin_includetpl.php in Tiki before 28.3...9.9 Critical
- graphicsmagickGraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c,...4.0 Medium
- No product listedAn insecure permissions vulnerability in verydows v2.0 allows a remote attacker to execute...8.1 High
- horvey library-managerhorvey Library-Manager v1.0 is vulnerable to SQL Injection in Admin/Controller/BookController...7.2 High
- jerryhanjj erpjerryhanjj ERP 1.0 is vulnerable to SQL Injection in the set_password function in application...8.8 High
- pbootcmsPbootCMS v3.2.9 contains a XSS vulnerability in admin.php?p=/Content/index/mcode/2#tab=t2.6.1 Medium
- flowiseai flowiseFlowise Vulnerable to SQL Injection via `tableName` Parameter7.6 High
- codeastro internet banking systemA Stored Cross-Site Scripting (XSS) vulnerability exists in the name parameter of...4.8 Medium
- totvs framework \(linha protheus\)An issue in TOTVS Framework (Linha Protheus) 12.1.2310 allows attackers to bypass multi-factor...9.8 Critical
- elastic defendElastic Defend Insertion of Sensitive Information into Log Files6.5 Medium
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Access Control (CWE-284)5.3 Medium
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Access Control (CWE-284)5.3 Medium
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Insufficiently Protected Credentials (CWE-522)2.7 Low
- adobe commerce, commerce b2b +1 moreAdobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)4.3 Medium
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Incorrect Authorization (CWE-863)4.3 Medium
- elastic kibanaKibana Prototype Pollution can lead to code injection8.7 High
- adobe coldfusionColdFusion | Improper Authentication (CWE-287)8.2 High
- adobe coldfusionColdFusion | Improper Input Validation (CWE-20)6.8 Medium
- adobe coldfusionColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)6.1 Medium
- adobe coldfusionColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)8.7 High
- adobe coldfusionColdFusion | Improper Authentication (CWE-287)9.1 Critical
- adobe coldfusionColdFusion | Deserialization of Untrusted Data (CWE-502)8.4 High
- adobe coldfusionColdFusion | Improper Input Validation (CWE-20)6.8 Medium
- adobe coldfusionColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)8.2 High
- adobe coldfusionColdFusion | Improper Access Control (CWE-284)8.2 High
- adobe coldfusionColdFusion | Improper Input Validation (CWE-20)9.1 Critical
- adobe coldfusionColdFusion | Deserialization of Untrusted Data (CWE-502)9.1 Critical
- adobe coldfusionColdFusion | Improper Access Control (CWE-284)9.1 Critical
- adobe coldfusionColdFusion | Information Exposure (CWE-200)5.5 Medium
- adobe coldfusionColdFusion | Deserialization of Untrusted Data (CWE-502)8.4 High
- adobe coldfusionColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)8.4 High
- red hat directory server 11, directory server 12, enterprise linux 10 +7 more +9 moreRust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch`3.7 Low
- adobe xmpworker, xmp toolkit software development kit +1 moreXMPWorker | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe xmpworker, xmp toolkit software development kit +1 moreXMPWorker | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe xmpworker, xmp toolkit software development kit +1 moreXMPWorker | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe xmpworker, xmp toolkit software development kit +1 moreXMPWorker | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe xmpworker, xmp toolkit software development kit +1 moreXMPWorker | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe framemakerAdobe Framemaker | NULL Pointer Dereference (CWE-476)5.5 Medium
- adobe framemakerAdobe Framemaker | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe framemakerAdobe Framemaker | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe framemakerAdobe Framemaker | Out-of-bounds Write (CWE-787)7.8 High
- adobe framemakerAdobe Framemaker | Out-of-bounds Write (CWE-787)7.8 High
- adobe framemakerAdobe Framemaker | NULL Pointer Dereference (CWE-476)5.5 Medium
- adobe framemakerAdobe Framemaker | Out-of-bounds Read (CWE-125)5.5 Medium
- adobe framemakerAdobe Framemaker | Heap-based Buffer Overflow (CWE-122)7.8 High
- adobe framemakerAdobe Framemaker | Integer Underflow (Wrap or Wraparound) (CWE-191)7.8 High
- adobe framemakerAdobe Framemaker | Stack-based Buffer Overflow (CWE-121)7.8 High
- adobe experience manager, experience manager screens +1 moreAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- dnnsoftware dotnetnuke, dnn.platform +1 moreDNN allows the possibility of bypassing Captcha4.2 Medium
- Show moreLoading…