CVEs published in April 2025
4,149 vulnerabilities, 323 critical, 16 exploited.
- siemens telecontrol server basicA vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The...8.7 High
- siemens telecontrol server basicA vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The...8.7 High
- siemens telecontrol server basicA vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The...8.7 High
- siemens telecontrol server basicA vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The...8.7 High
- siemens telecontrol server basicA vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The...8.7 High
- siemens telecontrol server basicA vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The...8.7 High
- siemens telecontrol server basicA vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The...8.7 High
- siemens telecontrol server basicA vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The...8.7 High
- siemens telecontrol server basicA vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The...8.7 High
- siemens telecontrol server basicA vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The...8.7 High
- siemens telecontrol server basicA vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The...8.7 High
- siemens telecontrol server basicA vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The...9.3 Critical
- siemens telecontrol server basicA vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The...9.3 Critical
- siemens telecontrol server basicA vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The...9.3 Critical
- wpweb woocommerce social loginWordPress WooCommerce Social Login plugin < 2.8.3 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- golang.org/x/net golang.org/x/net/htmlIncorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net6.5 Medium
- drupal 8 google optimize hide pageDrupal 8 Google Optimize Hide Page - Critical - Unsupported - SA-CONTRIB-2025-0405.9 Medium
- drupal google optimize, google optimize project optimize +1 moreGoogle Optimize - Critical - Unsupported - SA-CONTRIB-2025-0395.9 Medium
- drupal google maps: store locator, google maps\ store locator project +1 moreGoogle Maps: Store Locator - Critical - Unsupported - SA-CONTRIB-2025-0385.9 Medium
- drupal simple gtm, simple gtm project gtm +1 moreSimple GTM - Critical - Unsupported - SA-CONTRIB-2025-0375.9 Medium
- drupal panelizer (obsolete), panelizer \(obsolete\) project \(obsolete\) +1 morePanelizer (obsolete) - Critical - Unsupported - SA-CONTRIB-2025-0365.9 Medium
- drupal stage file proxy, stage file proxy project file proxy +1 moreStage File Proxy - Moderately critical - Denial of Service - SA-CONTRIB-2025-0355.9 Medium
- baguettebox.js project baguettebox.jsbaguetteBox.js - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-0346.5 Medium
- ibm storage defender - resiliency service, storage defender resiliency service +1 moreIBM Storage Defender - Resiliency Service information disclosure5.9 Medium
- cisco webex teamsCisco Webex App Client-Side Remote Code Execution Vulnerability8.8 High
- mattermost, mattermost server +1 moreUnauthorized View Access to Archived Channel Member Info4.3 Medium
- cisco secure network analyticsCisco Secure Network Analytics Privilege Escalation Vulnerability6.0 Medium
- cisco nexus dashboardCisco Nexus Dashboard Username Enumeration Vulnerability5.3 Medium
- apache hertzbeatApache HertzBeat: Server-Side Request Forgery (SSRF) in Api Config Oss6.5 Medium
- backstagePermission policy information leakage in Backstage permission system4.3 Medium
- xwiki, xwiki xwiki-platform +1 moreXWiki allows unregistered users to see "public" messages from a closed wiki via notifications from a different wiki4.7 Medium
- senior-walter web-based pharmacy product management systemSourceCodester Web-based Pharmacy Product Management System edit-product.php sql injection5.3 Medium
- senior-walter web-based pharmacy product management systemSourceCodester Web-based Pharmacy Product Management System search_stock. php sql injection5.3 Medium
- senior-walter web-based pharmacy product management systemSourceCodester Web-based Pharmacy Product Management System Login sql injection6.9 Medium
- debian linux, linux kernel +1 morewatch_queue: fix pipe accounting mismatch5.5 Medium
- linux, linux kernel +1 morecpufreq/amd-pstate: Add missing NULL ptr check in amd_pstate_update5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morethermal: int340x: Add NULL check for adev5.5 Medium
- linux, linux kernel +1 moreRISC-V: KVM: Teardown riscv specific bits after kvm_exit5.5 Medium
- linux, linux kernel +1 moreALSA: timer: Don't take register_mutex with copy_from/to_user()5.5 Medium
- linux, linux kernel +1 morewifi: ath11k: update channel list in reg notifier instead reg worker8.8 High
- linux, linux kernel +1 moref2fs: quota: fix to avoid warning in dquot_writeback_dquots()7.0 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moredlm: prevent NPD when writing a positive value to event_done5.5 Medium
- linux, linux kernel +1 moref2fs: fix to avoid panic once fallocation fails for pinfile5.5 Medium
- linux, linux kernel +1 morewifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path5.5 Medium
- linux, linux kernel +1 morewifi: ath12k: Clear affinity hint before calling ath12k_pci_free_irq() in error path5.5 Medium
- linux, linux kernel +1 moref2fs: fix potential deadloop in prepare_compress_overwrite()5.5 Medium
- linux, linux kernel +1 moremd: fix mddev uaf while iterating all_mddevs list7.8 High
- linux, linux kernel +1 moremd/raid1,raid10: don't ignore IO flags5.5 Medium
- linux, linux kernel +1 moremd/md-bitmap: fix wrong bitmap_limit for clustermd when write sb7.8 High
- linux, linux kernel +1 moref2fs: fix to avoid accessing uninitialized curseg5.5 Medium
- Show moreLoading…