CVEs published in April 2025
4,149 vulnerabilities, 323 critical, 16 exploited.
- yeswikiYeswiki Vulnerable to Unauthenticated Reflected Cross-site Scripting4.3 Medium
- yeswikiYeswiki Vulnerable to Unauthenticated Reflected Cross-site Scripting4.3 Medium
- scriptandtools online-travling-system, online traveling system +1 moreScriptAndTools Online-Travling-System addpackage.php access control6.9 Medium
- scriptandtools online-travling-system, online traveling system +1 moreScriptAndTools Online-Travling-System addadvertisement.php access control6.9 Medium
- xwiki, xwiki xwiki-platform +1 moreorg.xwiki.platform:xwiki-platform-security-requiredrights-default required rights analysis doesn't consider TextAreas with default content type9.1 Critical
- xwiki, xwiki xwiki-platform +1 moreorg.xwiki.platform:xwiki-platform-component-wiki provides no warning when granting XWiki.ComponentClass programming right9.1 Critical
- xwiki, xwiki xwiki-platform +1 moreThe lesscss script service allows cache clearing without programming right2.7 Low
- scriptandtools online-travling-system, online traveling system +1 moreScriptAndTools Online-Travling-System viewenquiry.php access control6.9 Medium
- xwiki, xwiki xwiki-platform +1 moreXWiki Solr script service doesn't take dropped programming right into account3.8 Low
- xwiki, xwiki xwiki-platform +1 moreorg.xwiki.platform:xwiki-platform-wysiwyg-api Open Redirect vulnerability6.1 Medium
- silabs.com series 2 socs and associated modulesDPA Countermeasures Unavailable for Certain Cryptographic Operations on Series 2 Devices1.0 Low
- code-projects student information management systemcode-projects Student Information Management System cancel stack-based overflow4.8 Medium
- code-projects theater seat booking systemcode-projects Theater Seat Booking System cancel stack-based overflow4.8 Medium
- mozilla firefox, thunderbird +1 moreMemory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.108.1 High
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox 138 and Thunderbird 1386.5 Medium
- mozilla firefox, thunderbird +1 moreMemory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.108.1 High
- mozilla firefox, thunderbird +1 moreLeaked library paths in Thunderbird for Android5.3 Medium
- mozilla firefox, thunderbird +1 morePotential local code execution in "copy as cURL" command5.1 Medium
- mozilla firefox, thunderbird +1 moreCross-site request forgery via storage access API redirects6.5 Medium
- mozilla firefox, thunderbird +1 moreUnsafe attribute access during XPath parsing4.8 Medium
- mozilla firefox, thunderbird +1 moreSpecially crafted filename could be used to obscure download type6.5 Medium
- mozilla firefox, thunderbird +1 morePotential information leakage and privilege escalation in UITour actor7.1 High
- mozilla firefox, thunderbird +1 morePotential local code execution in "copy as cURL" command5.7 Medium
- mozilla firefox, thunderbird +1 moreProcess isolation bypass using "javascript:" URI links in cross-origin frames9.1 Critical
- mozilla firefox, thunderbird +1 moreWebGL shader attribute memory corruption in Thunderbird for macOS5.9 Medium
- mozilla firefox, thunderbird +1 morePrivilege escalation in Thunderbird Updater8.8 High
- code-projects clothing store management systemcode-projects Clothing Store Management System add_item stack-based overflow4.8 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: cookie domain validation bypass via uppercase characters in libsoup4.3 Medium
- anujk305 notice board systemPHPGurukul Notice Board System category.php sql injection6.9 Medium
- code-projects prison management systemcode-projects Prison Management System Prison_Mgmt_Sys addrecord stack-based overflow4.8 Medium
- apache http server, debian linux, red hat enterprise linux 10 +14 more +16 moreMod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabled7.5 High
- linux, linux kernel +1 morevmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame8.6 High
- mdaemon email serverStored XSS vulnerability in MDaemon Email Server5.3 Medium
- code-projects online examination systemProjectworlds Online Examination System Bloodgroop_process.php sql injection6.9 Medium
- huggingface huggingface/transformers, transformers +1 moreRegular Expression Denial of Service (ReDoS) in huggingface/transformers4.3 Medium
- powerdns dnsdistDenial of service via crafted DoH exchange7.5 High
- secupress, secupress with simple ssl – simple and performant security +1 moreSecuPress Free <= 2.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation4.3 Medium
- jegstudio gutenverse, gutenverse – ultimate wordpress fse blocks addons & ecosystem +1 moreGutenverse <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via countdown Block6.4 Medium
- codepeople calculated fields formCalculated Fields Form < 5.2.62 - Admin+ Stored XSS3.5 Low
- gnome glib, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreGlib: glib crash after long command line7.5 High
- snowflakedb libsnowflakeclient, snowflake connector for c\/c\+\+ +1 moreSnowflake Connector for C/C++ inserts client-side encryption key in DEBUG logs3.3 Low
- advplyr audiobookshelfAudiobookshelf Vulnerable to Cross-Site-Scripting Reflected via POST Request in /api/upload6.9 Medium
- snowflakedb libsnowflakeclient, snowflake connector for c\/c\+\+ +1 moreSnowflake Connector for C/C++ retries malformed requests3.3 Low
- apple ipados, macos, tvos +3 more +5 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...8.8 High
- apple ipados, macos, tvos +3 more +5 moreThe issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, tvOS 18...5.7 Medium
- apple ipados, macos, tvos +3 more +5 moreA null pointer dereference was addressed with improved input validation. This issue is fixed in...5.7 Medium
- apple ipados, macos, tvos +3 more +5 moreThis issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15...5.7 Medium
- apple ipados, macos, tvos +3 more +5 moreAn access issue was addressed with improved access restrictions. This issue is fixed in macOS...5.4 Medium
- apple ipados, macos, tvos +3 more +5 moreAn authentication issue was addressed with improved state management. This issue is fixed in...7.7 High
- apple ipados, macos, tvos +3 more +5 moreA null pointer dereference was addressed with improved input validation. This issue is fixed in...5.5 Medium
- Show moreLoading…