CVEs published in April 2025
4,149 vulnerabilities, 323 critical, 16 exploited.
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, tvOS 18...6.5 Medium
- apple ipados, macos, tvos +4 more +6 moreAn integer overflow was addressed with improved input validation. This issue is fixed in macOS...6.5 Medium
- apple ipados, macos, tvos +3 more +5 moreA type confusion issue was addressed with improved checks. This issue is fixed in macOS Sequoia...6.5 Medium
- oretnom23 computer laboratory management systemA SQL injection vulnerability in manage_damage.php in Sourcecodester Computer Laboratory...8.8 High
- synacor zimbra collaboration suiteIn Zimbra Collaboration (ZCS) 9.0 through 10.1, a Cross-Site Request Forgery (CSRF) vulnerability...8.8 High
- No product listedAn issue in Coresmartcontracts Uniswap v.3.0 and fixed in v.4.0 allows a remote attacker to...9.8 Critical
- No product listedSlims (Senayan Library Management Systems) 9 Bulian V9.6.1 is vulnerable to SQL Injection in...9.8 Critical
- suse opensuse tumbleweeddaily-backup.sh script in cyrus-imapd allows escalation from cyrus to root9.8 Critical
- modernwmsAn issue in modernwms v.1.0 allows an attacker view the MD5 hash of the administrator password...7.5 High
- phpgurukul rail pass management systemPHPGurukul Rail Pass Management System search-pass.php sql injection6.9 Medium
- n8nn8n Vulnerable to Stored XSS through Attachments View Endpoint5.0 Medium
- code-projects train ticket reservation systemcode-projects Train Ticket Reservation System reservation stack-based overflow4.8 Medium
- fortra goanywhere mft, goanywhere managed file transfer +1 moreInput Validation vulnerability in Web Client emails that do not go through Secure Mail6.3 Medium
- fortra goanywhere, goanywhere managed file transfer +1 moreDisclosure of sensitive information in an error message in GoAnywhere prior to version 7.8.03.5 Low
- proofpoint enterprise protectionEnterprise Protection S/MIME Opaque Signature Attachment Scanning Bypass6.1 Medium
- code-projects atm bankingcode-projects ATM Banking moneyWithdraw logic error4.8 Medium
- snowflake connector, snowflakedb snowflake-connector-nodejs +1 moreNodeJS Driver for Snowflake has race condition when checking access to Easy Logging configuration file3.3 Low
- snowflake gosnowflakeGo Snowflake Driver has race condition when checking access to Easy Logging configuration file3.3 Low
- snowflake connector, snowflakedb snowflake-connector-net +1 moreSnowflake Connector for .NET has race condition when checking access to Easy Logging configuration file3.3 Low
- 201206030 novel201206030 Novel Chapter AuthorController.java updateBookChapter access control5.3 Medium
- code-projects online examination systemprojectworlds Online Examination System inser_doc_process.php sql injection6.9 Medium
- docker desktopElevation of Privilege in Docker Desktop for Windows during Upgrade due to Insecure Directory Deletion7.3 High
- gfi mailessentialsGFI MailEssentials < 21.8 MultiNode Insecure Deserialization8.8 High
- apache tomcatApache Tomcat: Bypass of rules in Rewrite Valve9.8 Critical
- gfi mailessentialsGFI MailEssentials < 21.8 XXE Arbitrary File Read6.5 Medium
- phpgurukul nipah virus testing management systemPHPGurukul Nipah Virus Testing Management System patient-search-report.php sql injection6.9 Medium
- gfi mailessentialsGFI MailEssentials < 21.8 Local Privilege Escalation7.8 High
- inclusionai aworldinclusionAI AWorld shell_tool.py subprocess.Popen os command injection2.3 Low
- phpgurukul pre-school enrollment systemPHPGurukul Pre-School Enrollment System aboutus.php sql injection6.9 Medium
- opentext™ digital asset management.SQL Injection vulnerability discovered in OpenText™ Digital Asset Management.2.1 Low
- phpgurukul covid19 testing management systemPHPGurukul COVID19 Testing Management System search-report-result.php sql injection6.9 Medium
- code-projects personal diary management systemcode-projects Personal Diary Management System New Record addrecord stack-based overflow4.8 Medium
- phpgurukul covid19 testing management systemPHPGurukul COVID19 Testing Management System profile.php sql injection6.9 Medium
- phpgurukul old age home management systemPHPGurukul Old Age Home Management System rules.php sql injection6.9 Medium
- langgenius difyDIFY vulnerable to Clickjacking Attack2.3 Low
- phpgurukul nipah virus testing management systemPHPGurukul Nipah Virus Testing Management System profile.php sql injection6.9 Medium
- angeljudesuarez placement management systemitsourcecode Placement Management System registration.php sql injection6.9 Medium
- dell powerprotect data managerDell PowerProtect Data Manager Reporting, version(s) 19.17, 19.18 contain(s) an Improper Encoding...4.2 Medium
- dell powerprotect data manager reporting, powerprotect data manager +1 moreDell PowerProtect Data Manager Reporting, version(s) 19.16, 19.17, 19.18, contain(s) an Improper...2.3 Low
- angeljudesuarez placement management systemitsourcecode Placement Management System add_drive.php sql injection6.9 Medium
- dell powerprotect data managerDell PowerProtect Data Manager Reporting, version(s) 19.17, contain(s) an Incorrect Use of...7.8 High
- ruby net-imap, ruby-lang net\ +1 morenet-imap rubygem vulnerable to possible DoS by memory exhaustion6.0 Medium
- angeljudesuarez placement management systemitsourcecode Placement Management System add_company.php sql injection6.9 Medium
- web-arena-x webarenaweb-arena-x webarena evaluators.py HTMLContentEvaluator code injection5.3 Medium
- code-projects patient record management systemcode-projects Patient Record Management System edit_spatient.php sql injection5.3 Medium
- phpgurukul old age home management systemPHPGurukul Old Age Home Management System contact.php sql injection6.9 Medium
- sick ag multiscan1xx, picoscan1xx +1 moreDoS attack by conducting a slowloris-type attack5.3 Medium
- 201206030 novel-plus20120630 Novel-Plus GeneratorController.java genCode missing authentication6.9 Medium
rustc-serializecrates.iorustc-serialize is unmaintainedNo scoremp3-metadatacrates.ioPanic in mp3-metadata due to the lack of bounds checking5.5 Medium- Show moreLoading…