CVEs published in April 2025
4,149 vulnerabilities, 323 critical, 16 exploited.
- sios technology, inc. quick agent v2, quick agent v3 +1 moreQuick Agent V3 and Quick Agent V2 contain an issue with improper restriction of communication...6.9 Medium
- sios technology, inc. quick agent v2, quick agent v3 +1 moreQuick Agent V3 and Quick Agent V2 contain an issue with improper limitation of a pathname to a...7.1 High
- sios technology, inc. quick agent v2, quick agent v3 +1 moreQuick Agent V3 and Quick Agent V2 contain an issue with improper limitation of a pathname to a...9.2 Critical
- totolink n150rt, n150rt firmware +1 moreTOTOLINK N150RT formWdsEncrypt buffer overflow8.7 High
- totolink n150rt, n150rt firmware +1 moreTOTOLINK N150RT formVlan buffer overflow8.7 High
- totolink n150rt, n150rt firmware +1 moreTOTOLINK N150RT formStaticDHCP buffer overflow8.7 High
- totolink n150rt, n150rt firmware +1 moreTOTOLINK N150RT formPortFw buffer overflow8.7 High
- totolink n150rt, n150rt firmware +1 moreTOTOLINK N150RT formWsc command injection5.3 Medium
- apereo cas, central authentication service +1 moreApereo CAS CasConfigurationMetadataServerController.java redos5.3 Medium
- apereo cas, central authentication service +1 moreApereo CAS ResponseEntity redos5.1 Medium
- apereo cas, central authentication service +1 moreApereo CAS Groovy Code RegisteredServiceSimpleFormController.java saveService code injection2.3 Low
- amtt hotel broadband operation system, amttgroup hibos +1 moreAMTT Hotel Broadband Operation System nlog_down.php command injection5.1 Medium
- libreofficePDF signature forgery with adbe.pkcs7.sha1 SubFilter2.4 Low
- nortikin sverchoknortikin Sverchok Set Property Mk2 Node getsetprop_mk2.py SvSetPropNodeMK2 prototype pollution5.3 Medium
- wowjoy internet doctor workstation systemwowjoy 浙江湖州华卓信息科技有限公司 Internet Doctor Workstation System details improper authorization5.3 Medium
- wowjoy internet doctor workstation systemwowjoy 浙江湖州华卓信息科技有限公司 Internet Doctor Workstation System list improper authorization5.3 Medium
- dazhouda lecmsdazhouda lecms Password Change index.php cross-site request forgery5.3 Medium
- dazhouda lecmsdazhouda lecms user_set.htm information disclosure5.3 Medium
- iteachyou dreamer cmsiteachyou Dreamer CMS Attachment download improper authorization5.3 Medium
- phpgurukul covid19 testing management systemPHPGurukul COVID19 Testing Management System new-user-testing.php sql injection6.9 Medium
- scriptandtools ecommerce-website-in-phpScriptAndTools eCommerce-website-in-PHP subscriber-csv.php information disclosure6.9 Medium
- phpgurukul covid19 testing management systemPHPGurukul COVID19 Testing Management System edit-phlebotomist.php sql injection6.9 Medium
- phpgurukul covid19 testing management systemPHPGurukul COVID19 Testing Management System check_availability.php sql injection6.9 Medium
- phpgurukul covid19 testing management systemPHPGurukul COVID19 Testing Management System bwdates-report-result.php sql injection6.9 Medium
- phpgurukul covid19 testing management systemPHPGurukul COVID19 Testing Management System add-phlebotomist.php sql injection6.9 Medium
- baseweb jsitebaseweb JSite save cross site scripting5.1 Medium
- code-projects news publishing site dashboardcodeprojects News Publishing Site Dashboard Edit Category Page edit-category.php unrestricted upload5.3 Medium
- code-projects news publishing site dashboardcodeprojects News Publishing Site Dashboard api.php sql injection5.3 Medium
- cato networks sdp client, catonetworks cato client +1 moreCatoNetworks CatoClient up to 5.8 PrivilegedHelperTool Race Condition5.7 Medium
- itwanger paicodingitwanger paicoding Article post improper authorization5.3 Medium
- itwanger paicodingitwanger paicoding Browsing History home information disclosure5.3 Medium
- itwanger paicodingitwanger paicoding post cross site scripting5.1 Medium
- withstars books-management-systemwithstars Books-Management-System Article del cross-site request forgery5.3 Medium
- checkpoint check point mobile access, mobile access, remote access vpn +2 moreStored-XSS5.4 Medium
- checkpoint check point mobile access, mobile access, remote access vpn +2 moreSelf-XSS3.5 Low
- withstars books-management-systemwithstars Books-Management-System Background Interface list authorization6.9 Medium
- withstars books-management-systemwithstars Books-Management-System Comment add cross site scripting5.1 Medium
- withstars books-management-systemwithstars Books-Management-System do cross site scripting5.1 Medium
- withstars books-management-systemwithstars Books-Management-System Background Interface allreaders.html authorization6.9 Medium
- withstars books-management-systemwithstars Books-Management-System reader_delete.html cross-site request forgery5.3 Medium
- withstars books-management-systemwithstars Books-Management-System Book Edit Page book_edit_do.html cross site scripting5.1 Medium
- opplus springboot-adminopplus springboot-admin SysLogDao.xml sql injection5.3 Medium
- 201206030 novel-cloud201206030 novel-cloud BookInfoMapper.xml RestResp sql injection5.3 Medium
- zte goldendb, zxcloud goldendb +1 moreZTE GoldenDB Database product has a code-related vulnerability7.7 High
- zte goldendb, zxcloud goldendb +1 moreZTE GoldenDB Database product has a DDE injection vulnerability8.4 High
- zte goldendb, zxcloud goldendb +1 moreZTE GoldenDB Database product has SQL injection vulnerabilities in multiple interfaces6.5 Medium
- zte goldendb, zxcloud goldendb +1 moreZTE GoldenDB Database product has an SQL injection vulnerability6.5 Medium
- zte goldendb, zxcloud goldendb +1 moreZTE GoldenDB Database product has a privilege escalation vulnerability5.4 Medium
- zte goldendb, zxcloud goldendb +1 moreZTE GoldenDB Database product has an information disclosure vulnerability4.9 Medium
- zte goldendb, zxcloud goldendb +1 moreZTE GoldenDB Database product has an input validation vulnerability4.1 Medium
- Show moreLoading…