CVEs published in April 2025
4,149 vulnerabilities, 323 critical, 16 exploited.
- oretnom23 simple barangay management systemSourceCodester Simple Barangay Management System v1.0 has a SQL injection vulnerability in ...7.3 High
- oretnom23 simple barangay management systemSourceCodester Simple Barangay Management System v1.0 has a SQL injection vulnerability in ...7.6 High
- oretnom23 simple barangay management systemSourceCodester Simple Barangay Management System v1.0 has a SQL injection vulnerability in ...9.8 Critical
- bestpractical request tracker, rt +1 moreBest Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an...7.2 High
- bestpractical request tracker, rt +1 moreBest Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an...7.2 High
- bestpractical request tracker, rt +1 moreBest Practical RT (Request Tracker) 4.4 through 4.4.7 and 5.0 through 5.0.7 allows XSS via...7.2 High
- best practical solutions request trackerDeprecated 3DES cryptographic algorithm used by Request Tracker in emails encrypted with S/MIME2.3 Low
- troglobit finitFinit bundled getty can bypass /bin/login8.6 High
- krypto-hashers-community khc-invitation-automationKHC-INVITATION-AUTOMATION Sensitive User Information Leakage in Invitation Automation6.3 Medium
- red hat build of keycloak, build of keycloak 26.0 +1 moreOrg.keycloak.authentication: two factor authentication bypass5.4 Medium
- red hat build of keycloak, build of keycloak 26, build of keycloak 26.0 +2 more +4 moreOrg.keycloak.protocol.services: keycloak hostname verification8.2 High
- wangshen secgate 3600Wangshen SecGate 3600 g=log_export_file path traversal5.3 Medium
- showdocShowDoc < 2.8.7 Unauthenticated File Upload Remote Code Execution9.4 Critical
- phpgurukul online nurse hiring systemPHPGurukul Online Nurse Hiring System view-request.php sql injection5.3 Medium
- auth0 nextjs-auth0Auth0 NextJS SDK v4 Missing Session Invalidation4.9 Medium
- pcman ftp serverPCMan FTP Server RENAME Command buffer overflow6.9 Medium
- code-projects school billing systemcode-projects School Billing System searchrec stack-based overflow4.8 Medium
- lb-link bl-ac3600LB-LINK BL-AC3600 Password lighttpd.cgi easy_uci_set_option_string_0 command injection5.3 Medium
- No product listedVMSMan login.php cross site scripting5.3 Medium
- phpgurukul curfew e-pass management systemPHPGurukul Curfew e-Pass Management System pass-bwdates-report.php sql injection6.9 Medium
- docker desktopExposure in Docker Desktop logs of environment variables configured for running containers5.2 Medium
- docker desktopRegistry Access Management (RAM) policies not applied when sign-in enforcement is configured via a configuration profile4.3 Medium
- phpgurukul student record systemPHPGurukul Student Record System change-password.php sql injection6.9 Medium
- vllmvLLM phi4mm: Quadratic Time Complexity in Input Token Processing leads to denial of service6.5 Medium
- kyvernoKyverno vulnerable to bypass of policy rules that use namespace selectors in match statements8.6 High
- phpgurukul online nurse hiring systemPHPGurukul Online Nurse Hiring System edit-nurse.php sql injection5.3 Medium
- ribbon communications apollo 9608Ribbon Communications - CWE-250: Execution with Unnecessary Privileges8.0 High
- ribbon communications apollo 9608Ribbon Communications - CWE-250: Execution with Unnecessary Privileges8.0 High
- ribbon communications apollo 9608Ribbon Communications - CWE-798: Use of Hard-coded Credentials5.5 Medium
- ribbon communications apollo 9608Ribbon Communications - CWE-923: Improper Restriction of Communication Channel to Intended Endpoints7.6 High
- ribbon communications apollo 9608Ribbon Communications - CWE-427: Uncontrolled Search Path Element7.6 High
- phpgurukul covid19 testing management systemPHPGurukul COVID19 Testing Management System test-details.php sql injection6.9 Medium
- phpgurukul rail pass management systemPHPGurukul Rail Pass Management System changeimage.php sql injection6.9 Medium
- bookgyImproper access control vulnerability in Bookgy9.3 Critical
- bookgySQL injection vulnerability in Bookgy9.3 Critical
- bookgySQL injection vulnerability in Bookgy9.3 Critical
- ibm operational decision managerIBM Operational Decision Manager cross-site scripting6.1 Medium
- bookgyReflected Cross-Site Scripting (XSS) vulnerability in Bookgy5.1 Medium
- bookgyReflected Cross-Site Scripting (XSS) vulnerability in Bookgy5.1 Medium
- code-projects product management systemcode-projects Product Management System add_item stack-based overflow4.8 Medium
- code-projects simple movie ticket booking systemcode-projects Simple Movie Ticket Booking System changeprize stack-based overflow4.8 Medium
@account-kit/smart-contractsnpm@account-kit/smart-contracts Allowlist Module Bypass Vulnerability6.6 Medium- scriptandtools online-travling-system, online traveling system +1 moreScriptAndTools Online-Travling-System viewpackage.php access control6.9 Medium
- vllmvLLM Vulnerable to Remote Code Execution via Mooncake Integration10.0 Critical
- vllmData exposure via ZeroMQ on multi-node vLLM deployment7.5 High
- yeswikiYesWiki Vulnerable to Stored XSS in Comments6.3 Medium
- yeswikiYesWiki Remote Code Execution via Arbitrary PHP File Write and Execution5.8 Medium
- yeswikiYesWiki Vulnerable to Unauthenticated Site Backup Creation and Download10.0 Critical
- yeswikiYesWiki Vulnerable to Unauthenticated Reflected Cross-site Scripting7.6 High
- yeswikiYeswiki Vulnerable to Authenticated Reflected Cross-site Scripting3.5 Low
- Show moreLoading…