CVEs published in April 2025
4,149 vulnerabilities, 323 critical, 16 exploited.
- netgear jwnr2000v2, jwnr2000v2 firmware +1 moreNetgear JWNR2000v2 sub_4238E8 buffer overflow8.7 High
- macrozheng mallWeitong Mall Product Statistics queryTotal access control6.9 Medium
- macrozheng mallWeitong Mall Product History historyList access control6.9 Medium
- netgear jwnr2000v2, jwnr2000 firmware +1 moreNetgear JWNR2000v2 sub_41A914 buffer overflow5.1 Medium
- abb automation builderIncorrect Permission Assignment for Critical Resource, Cleartext Storage of Sensitive Information...8.4 High
- abb automation builderVulnerability in user management of Automation Builder8.5 High
- netgear jwnr2000v2, jwnr2000 firmware +1 moreNetgear JWNR2000v2 get_cur_lang_ver buffer overflow8.7 High
- netgear jwnr2000v2, jwnr2000 firmware +1 moreNetgear JWNR2000v2 default_version_is_new buffer overflow8.7 High
- netgear jwnr2000v2, jwnr2000 firmware +1 moreNetgear JWNR2000v2 check_language_file buffer overflow8.7 High
- bosch rexroth ag ctrlx os - device adminA vulnerability in the “Backup & Restore” functionality of the web application of ctrlX OS allows...6.5 Medium
- bosch rexroth ag ctrlx os - device adminA vulnerability in the “Remote Logging” functionality of the web application of ctrlX OS allows a...8.8 High
- bosch rexroth ag ctrlx os - device adminA vulnerability in the “Certificates and Keys” functionality of the web application of ctrlX OS...7.1 High
- bosch rexroth ag ctrlx os - device adminA vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS...7.1 High
- bosch rexroth ag ctrlx os - device adminA vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS...5.4 Medium
- bosch rexroth ag ctrlx os - device adminA vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS...6.5 Medium
- bosch rexroth ag ctrlx os - device adminA vulnerability in the “Proxy” functionality of the web application of ctrlX OS allows a remote...7.5 High
- bosch rexroth ag ctrlx os - device adminA vulnerability in the “Hosts” functionality of the web application of ctrlX OS allows a remote...6.3 Medium
- bosch rexroth ag ctrlx os - solutionsA vulnerability in the error notification messages of the web application of ctrlX OS allows a...6.3 Medium
- bosch rexroth ag ctrlx os - solutionsA vulnerability in the “Manages app data” functionality of the web application of ctrlX OS allows...5.4 Medium
- bosch rexroth ag ctrlx os - device adminA vulnerability in the login functionality of the web application of ctrlX OS allows a remote...5.3 Medium
- bosch rexroth ag ctrlx os - device adminA vulnerability in the web application of ctrlX OS allows a remote authenticated (low-privileged)...6.5 Medium
- phpgurukul curfew e-pass management systemPHPGurukul Curfew e-Pass Management System edit-pass-detail.php sql injection5.3 Medium
- phpgurukul student record systemPHPGurukul Student Record System add-course.php sql injection6.9 Medium
- bosch rexroth ag ctrlx os - device adminA vulnerability in the users configuration file of ctrlX OS may allow a remote authenticated (low...6.5 Medium
- bosch rexroth ag ctrlx os - device adminA vulnerability in the web application of ctrlX OS allows a remote unauthenticated attacker to...5.0 Medium
- bosch rexroth ag ctrlx os - solutionsA vulnerability in the “Manages app data” functionality of the web application of ctrlX OS allows...7.1 High
- phpgurukul pre-school enrollment systemPHPGurukul Pre-School Enrollment System visitor-details.php sql injection5.3 Medium
- phpgurukul pre-school enrollment systemPHPGurukul Pre-School Enrollment System edit-teacher.php sql injection5.3 Medium
- phpgurukul pre-school enrollment systemPHPGurukul Pre-School Enrollment System edit-subadmin.php sql injection5.3 Medium
- phpgurukul student record systemPHPGurukul Student Record System add-subject.php sql injection6.9 Medium
- tagdiv opt-in buildertagDiv Opt-In Builder <= 1.7 - Authenticated (Subscriber+) SQL Injection via subscriptionCouponId Parameter6.5 Medium
- delta electronics ispsoftISPSoft File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- delta electronics ispsoftISPSoft File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- delta electronics ispsoftISPSoft File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- delta electronics ispsoftISPSoft File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- delta electronics ispsoftISPSoft File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- brainstormforce sureformsSureForms < 1.4.4 - Contributor+ Settings Update4.9 Medium
- veronalabs wp statistics – simple, privacy-friendly google analytics alternativeWP Statistics – The Most Popular Privacy-Friendly Analytics Plugin <= 14.13.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Update5.4 Medium
jinja2Debianjinja2 - regression updateNo score- couchbase serverA security issue has been discovered in Couchbase Server before 7.6.4 and fixed in v.7.6.4 and v...7.6 High
- phpgurukul directory management systemA SQL Injection vulnerability was identified in the admin/edit-directory.php file of the...5.3 Medium
- phpgurukul park ticketing management systemA SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of...7.2 High
- phpgurukul park ticketing management systemA SQL injection vulnerability was discovered in /add-foreigners-ticket.php file of PHPGurukul...5.4 Medium
- phpgurukul park ticketing management systemA SQL Injection vulnerability was discovered in the foreigner-bwdates-reports-details.php file of...9.8 Critical
- phpgurukul park ticketing management systemA SQL injection vulnerability was discovered in edit-ticket.php of PHPGurukul Park Ticketing...9.8 Critical
- phpgurukul park ticketing management systemA Cross-Site Scripting (XSS) vulnerability was discovered in the foreigner-bwdates-reports...6.1 Medium
- phpgurukul park ticketing management systemA HTML Injection vulnerability was discovered in the foreigner-search.php file of PHPGurukul Park...5.3 Medium
- phpgurukul park ticketing management systemA HTML Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of...5.3 Medium
- phpgurukul park ticketing management systemA HTML Injection vulnerability was discovered in the normal-search.php file of PHPGurukul Park...5.3 Medium
- phpgurukul time table generator systemA Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the profile.php file of...4.8 Medium
- Show moreLoading…