CVEs published in April 2025
4,149 vulnerabilities, 323 critical, 16 exploited.
- dell powerscale onefsDell PowerScale OneFS, versions 9.4.0.0 through 9.10.0.1, contains an integer overflow or...6.5 Medium
- dell powerscale onefsDell PowerScale OneFS, versions 9.4.0.0 through 9.10.0.1, contains an incorrect authorization...7.0 High
- dell powerscale onefsDell PowerScale OneFS, versions 9.5.0.0 through 9.10.1.0, contains a use of default password...9.8 Critical
- dell client platform bios, precision 5820 tower firmware, precision 7820 tower firmware +2 more +4 moreDell Client Platform BIOS contains a Security Version Number Mutable to Older Versions...3.1 Low
- fusiondirectoryA path traversal vulnerability in FusionDirectory before 1.5 allows remote attackers to read...5.3 Medium
- connmanIn ConnMan through 1.44, the lookup string in ns_resolv in dnsproxy.c can be NULL or an empty...9.0 Critical
- openbsd openssh, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the...4.3 Medium
- bluecms project bluecmsBlueCMS 1.6 suffers from Arbitrary File Deletion via the id parameter in an /publish.php?act=del...4.3 Medium
- sqlite, siemens ruggedcom crossbow station access controller (sac), simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreAn issue in sqlite v.3.49.0 allows an attacker to cause a denial of service via the...5.6 Medium
- codeastro internet banking systemA Remote Code Execution (RCE) vulnerability exists in Code Astro Internet Banking System 2.0.0...8.8 High
- msi centerMSI Center before 2.0.52.0 has Missing PE Signature Validation.8.1 High
- msi centerMSI Center before 2.0.52.0 allows TOCTOU Local Privilege Escalation.8.1 High
- yiiframework yiiyiisoft/yii2 Mishandles the Attaching of Behavior Defined by a `__class` Array Key9.0 Critical
- helmHelm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination6.5 Medium
- helmHelm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow6.5 Medium
- canonical mysql-k8s-operatorMySQL K8s charm could leak credentials for root-level user `serverconfig`5.0 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Decapsulation of specific GRE packets leads to PFE reset8.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: A device configured for vector routing crashes when receiving malformed traffic8.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: On devices with Anti-Virus enabled, malicious server responses will cause memory to leak ultimately causing forwarding to stop8.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Processing of a specific BGP update causes the SRRD process to crash6.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series, SRX Series: Processing of specific SIP INVITE messages by the SIP ALG will lead to an FPC crash8.7 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A specific CLI command will cause an RPD crash when rib-sharding and update-threading is enabled6.8 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A local, low privileged user can access sensitive information6.8 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: LSP flap in a specific MPLS scenario leads to rpd crash6.0 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Executing a specific CLI command when asregex-optimized is configured causes an rpd crash6.8 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Receipt of a specific ICMPv6 packet causes a memory overrun leading to an rpd crash8.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX240, MX480, MX960 with SPC3: An attacker sending specific packets will cause a CPU utilization DoS.8.7 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Receipt of a specifically malformed DHCP packet causes jdhcpd process to crash7.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Subscriber login/logout activity will lead to a memory leak7.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Receipt of a malformed LLDP TLV results in l2cpd crash7.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Transmission of specific control traffic sent out of a DS-Lite tunnel results in flowd crash8.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: EX2300, EX3400, EX4000 Series, QFX5k Series: Receipt of a specific DHCP packet causes FPC crash when DHCP Option 82 is enabled7.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX and EX Series, MX240, MX480, MX960, QFX5120 Series: When web management is enabled for specific services an attacker may cause a CPU spike by sending genuine packets to the device8.7 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: When BGP rib-sharding and update-threading are configured and a peer flaps, an rpd core is observed6.0 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In an EVPN-VXLAN scenario specific ARP or NDP packets cause FPC to crash7.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: In DS-lite and NAT scenario receipt of crafted IPv6 traffic causes port block8.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: An unauthenticated adjacent attacker sending a malformed DHCP packet causes jdhcpd to crash7.1 High
- amir helzer woocommerce multilingual & multicurrencyWordPress WooCommerce Multilingual & Multicurrency plugin <= 5.3.8 - Broken Access Control vulnerability5.3 Medium
- brizy, brizy pro +1 moreWordPress Brizy Pro plugin <= 2.6.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- brizy, brizy pro +1 moreWordPress Brizy Pro plugin <= 2.6.1 - Broken Access Control vulnerability4.3 Medium
- ni labviewOut of Bounds Write Vulnerability in NI LabVIEW reading CPU info from cache8.5 High
- ni labviewOut of Bounds Write Vulnerability in NI LabVIEW in InitCPUInformation()8.5 High
- ni labviewDLL Hijacking Vulnerability in NI LabVIEW7.0 High
- ni labviewDLL Hijacking Vulnerability in NI LabVIEW When Loading NI Error Reporting7.0 High
- spotfire deployment kit used in spotfire server, analyst, desktop +11 more +13 moreSpotfire Data Function Vulnerability9.4 Critical
- spotfire deployment kit used in spotfire server, analyst, desktop +4 more +6 moreSpotfire Code Execution Vulnerability9.4 Critical
linux-cloud-tools-genericTuxCare,linux-cloud-tools-lowlatencyTuxCare,linux-crashdumpTuxCare +9 more +11 moreUpdate of linux-metaNo score- drupal panelsPanels - Critical - Access bypass - SA-CONTRIB-2025-0336.5 Medium
- drupal eca: event - condition - action, eca\ +1 moreECA: Event - Condition - Action - Critical - Cross site request forgery - SA-CONTRIB-2025-0315.4 Medium
- drupal web-tWEB-T - Moderately critical - Access bypass, Denial of service - SA-CONTRIB-2025-0306.5 Medium
- Show moreLoading…