CVE-2025 list

CVE-2025 records published in April 2025

Page three of four: records 2,001 to 3,000 of the 3,694 published in April 2025, newest first. The first page carries the figures for April 2025.

CVE-2025 records published in April 2025, newest first: records 2,001 to 3,000 of 3,694
CVE Summary CVSS EPSS Published Signals
CVE-2025-0129Prisma Access Browser: Inappropriate control behavior in Prisma Access Browser9.3CNA v4.00.2%2025-04-11Fix
CVE-2025-0128PAN-OS: Firewall denial of service (DoS) using a Specially Crafted Packet8.7CNA v4.00.3%2025-04-11Fix
CVE-2025-0127PAN-OS: Authenticated admin command injection vulnerability in PAN-OS VM-Series7.1CNA v4.00.6%2025-04-11Fix
CVE-2025-0126PAN-OS: Session fixation vulnerability in GlobalProtect SAML Login8.3CNA v4.00.4%2025-04-11Fix
CVE-2025-0125PAN-OS: Improper neutralization of Input in the Management Web interface6.9CNA v4.00.4%2025-04-11Fix
CVE-2025-0124PAN-OS: Authenticated file deletion vulnerability on the Management Web interface5.1CNA v4.00.3%2025-04-11Fix
CVE-2025-0123PAN-OS: Information disclosure vulnerability in HTTP/2 Packet Captures5.9CNA v4.00.1%2025-04-11Fix
CVE-2025-0122Prisma SD-WAN: Denial of service (DoS) vulnerability through Burst of Crafted Packets5.1CNA v4.00.3%2025-04-11Fix
CVE-2025-0121Cortex XDR Agent: Local Windows User can crash the Agent6.8CNA v4.00.2%2025-04-11Fix
CVE-2025-0120GlobalProtect App: Local privilege escalation (PE)7.1CNA v4.00.2%2025-04-11Fix
CVE-2025-0119Cortex XDR Broker VM: Authenticated command injection vulnerability in Broker VM6.3CNA v4.00.6%2025-04-11Fix
CVE-2025-32755Jenkins jenkins/ssh-slave Docker images weak random number generator9.1CISA ADP v3.10.5%2025-04-10Fix
CVE-2025-32754Jenkins jenkins/ssh-agent Docker images weak random number generator9.1CISA ADP v3.10.5%2025-04-10Fix
CVE-2025-32743ConnMan denial of service9.0CNA v3.10.5%2025-04-10Fix
CVE-2025-32728OpenBSD OpenSSH expected behavior violation3.8NVD v3.10.2%2025-04-10Fix
CVE-2025-32700Wikimedia Foundation MediaWiki information disclosure2.3CNA v4.00.4%2025-04-10Fix
CVE-2025-32699Wikimedia Foundation MediaWiki and Parsoid Action API Unicode normalization injection2.1CNA v4.00.4%2025-04-10Fix
CVE-2025-32698Wikimedia Foundation MediaWiki information disclosure2.1CNA v4.00.4%2025-04-10Fix
CVE-2025-32697Wikimedia Foundation MediaWiki cascading protection is not preventing file reversions0.0CNA v4.00.4%2025-04-10Fix
CVE-2025-32696Wikimedia Foundation MediaWiki reupload-own restriction can be bypassed by reverting file0.0CNA v4.00.4%2025-04-10Fix
CVE-2025-32687Review Stars Count For WooCommerce WordPress plugin SQL injection8.5CNA v3.10.3%2025-04-10
CVE-2025-32668Real Estate Manager WordPress plugin local file inclusion8.1CNA v3.10.7%2025-04-10
CVE-2025-32395Vite has an `server.fs.deny` bypass with an invalid `request-target`6.0CNA v4.01.7%2025-04-10NucleiExploit codeFix
CVE-2025-32391HedgeDoc allows XSS possibility through malicious SVG uploads6.4CNA v3.10.3%2025-04-10Fix
CVE-2025-32383MaxKB has a reverse shell vulnerability in function library4.3CNA v3.10.3%2025-04-10Fix
CVE-2025-32382Snowflake credentials logged by the Metabase backend1.8CNA v4.00.4%2025-04-10Fix
CVE-2025-32282ShareThis Dashboard for Google Analytics WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-10Fix
CVE-2025-32275Survey Maker WordPress plugin bypass vulnerability5.3v3.10.3%2025-04-10Fix
CVE-2025-32260DethemeKit For Elementor WordPress plugin broken access control5.3CNA v3.10.3%2025-04-10
CVE-2025-32259WP ULike WordPress plugin content spoofing5.3CNA v3.10.3%2025-04-10Exploit codeFix
CVE-2025-32244SEO Help WordPress plugin broken access control6.5CNA v3.10.3%2025-04-10Fix
CVE-2025-32243Internal Link Optimiser WordPress plugin settings Change vulnerability6.5CNA v3.10.3%2025-04-10Fix
CVE-2025-32242Hive Support WordPress plugin broken access control6.5CNA v3.10.3%2025-04-10Fix
CVE-2025-32240Site Notify WordPress plugin broken access control6.5CNA v3.10.3%2025-04-10
CVE-2025-32236Woocommerce Products Reorder Drag Drop Multiple Sort WordPress plugin broken access control4.3CNA v3.10.2%2025-04-10
CVE-2025-32230Tutor LMS WordPress plugin HTML injection4.3CNA v3.10.3%2025-04-10Fix
CVE-2025-32228Ai Image Alt Text Generator for WP WordPress plugin sensitive data exposure4.3CNA v3.10.3%2025-04-10
CVE-2025-32227Asgaros Forum WordPress plugin file upload Numbers bypass4.3CNA v3.10.3%2025-04-10Fix
CVE-2025-32221EazyDocs WordPress plugin broken access control5.4CNA v3.10.3%2025-04-10Fix
CVE-2025-32216Spider Elements Addons for Elementor WordPress plugin broken access control6.4CNA v3.10.3%2025-04-10Fix
CVE-2025-32215Accessibility Suite WordPress plugin arbitrary file upload6.5CNA v3.10.2%2025-04-10Fix
CVE-2025-32214Hive Support WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-04-10Fix
CVE-2025-32213Flo Forms WordPress plugin broken access control6.5CNA v3.10.3%2025-04-10
CVE-2025-32212Specia Companion WordPress plugin broken access control6.5CNA v3.10.3%2025-04-10
CVE-2025-32210CM Registration and Invitation Codes WordPress plugin broken access control6.5CNA v3.10.3%2025-04-10Fix
CVE-2025-32209Total processing card payments for WooCommerce WordPress plugin arbitrary file download6.5CNA v3.10.5%2025-04-10Fix
CVE-2025-32208Hive Support WordPress plugin broken access control6.5CNA v3.10.3%2025-04-10Fix
CVE-2025-32206Processing Projects WordPress plugin arbitrary file upload9.1CNA v3.10.6%2025-04-10Exploit code
CVE-2025-32205Piotnet Forms WordPress plugin path traversal2.7CNA v3.10.4%2025-04-10
CVE-2025-32202Insert or Embed Articulate Content into WordPress plugin arbitrary file upload9.1CNA v3.10.4%2025-04-10Fix
CVE-2025-32199Contact Form Builder by vcita WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-10Fix
CVE-2025-32198Brizy WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2025-04-10Fix
CVE-2025-32160EventON WordPress plugin local file inclusion7.5CNA v3.10.8%2025-04-10Fix
CVE-2025-32158aThemes Addons for Elementor WordPress plugin local file inclusion8.8v3.10.7%2025-04-10Fix
CVE-2025-32145WpEvently WordPress plugin PHP object injection8.8CNA v3.10.5%2025-04-10Fix
CVE-2025-32140WP Remote Thumbnail WordPress plugin arbitrary file upload9.9CNA v3.10.5%2025-04-10Exploit code
CVE-2025-32139Lightbox and Modal Popup WordPress Plugin FooBox cross-site scripting (XSS)5.9CNA v3.10.3%2025-04-10Fix
CVE-2025-32128Nearby Locations WordPress plugin SQL injection7.6CNA v3.10.4%2025-04-10
CVE-2025-32119CardGate Payments for WooCommerce WordPress plugin SQL injection8.2CNA v3.10.3%2025-04-10Fix
CVE-2025-32116QR Master WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-10
CVE-2025-32115Popping Content Light WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-10
CVE-2025-321145sterrenspecialist WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-10Fix
CVE-2025-32027Yii does not prevent XSS in scenarios where fallback error renderer is used6.1CNA v3.10.2%2025-04-10Fix
CVE-2025-31524WP User Profiles WordPress plugin privilege escalation8.8CNA v3.10.4%2025-04-10
CVE-2025-31411Linet ERP-Woocommerce Integration WordPress plugin arbitrary file read/Deletion5.9CNA v3.10.4%2025-04-10Fix
CVE-2025-30582DyaPress ERP/CRM WordPress plugin local file inclusion8.1CNA v3.10.7%2025-04-10
CVE-2025-30148Silverstripe Framework has a XSS vulnerability in HTML editor5.4CNA v3.10.3%2025-04-10Fix
CVE-2025-29989Dell Client Platform BIOS contains a Security Version Number Mutable to Older Versions vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to BIOS upgrade denial.3.1CNA v3.10.1%2025-04-10Fix
CVE-2025-29918Suricata pcre: Negated pcr can cause infinite loop6.2CNA v3.10.3%2025-04-10Fix
CVE-2025-29917Suricata decode_base64: Signature can do large memory allocation6.2CNA v3.10.3%2025-04-10Fix
CVE-2025-29916Suricata datasets: Ruleset declared settings can lead to resource starvation6.2CNA v3.10.3%2025-04-10Fix
CVE-2025-29915Suricata af-packet: Defrag option can lead to truncated packets affecting visibility7.5CNA v3.10.3%2025-04-10Fix
CVE-2025-29150Bluecms arbitrary file deletion4.3CISA ADP v3.10.4%2025-04-10
CVE-2025-29088SQLite integer overflow5.5NVD v3.10.2%2025-04-10Fix
CVE-2025-29017CodeAstro Internet Banking System remote code execution8.8CISA ADP v3.10.9%2025-04-10Exploit code
CVE-2025-27813MSI Center improper signature verification8.1CNA v3.10.1%2025-04-10Fix
CVE-2025-27812MSI Center time-of-check time-of-use race condition8.1CNA v3.10.1%2025-04-10Fix
CVE-2025-27690Dell PowerScale OneFS default password9.8CNA v3.10.5%2025-04-10Fix
CVE-2025-27350Vice Versa WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-04-10
CVE-2025-27081HPE NonStop OSM Service Connection Suite, denial of service6.8CNA v3.10.2%2025-04-10Fix
CVE-2025-26480Dell PowerScale OneFS resource exhaustion5.3CNA v3.10.5%2025-04-10Fix
CVE-2025-26479Dell PowerScale OneFS out-of-bounds write3.1CNA v3.10.3%2025-04-10Fix
CVE-2025-26330Dell PowerScale OneFS incorrect authorization7.0CNA v3.10.2%2025-04-10Fix
CVE-2025-25197Silverstripe Elemental enables XSS attacks in elemental Content blocks in use reports5.4CNA v3.10.3%2025-04-10Fix
CVE-2025-24866Mattermost unauthorized access to User Activity Logs API by delegated granular administration roles2.7CNA v3.10.3%2025-04-10Fix
CVE-2025-23386SUSE openSUSE Tumbleweed A incorrect default permissions7.8CNA v3.10.2%2025-04-10Fix
CVE-2025-23378Dell PowerScale OneFS directory listing3.3CNA v3.10.2%2025-04-10Fix
CVE-2025-23010SonicWall NetExtender link following7.2CISA ADP v3.10.4%2025-04-10Fix
CVE-2025-23009SonicWall NetExtender local privilege escalation7.2CISA ADP v3.10.4%2025-04-10Fix
CVE-2025-23008SonicWall NetExtender improper privilege management7.2CISA ADP v3.10.4%2025-04-10Fix
CVE-2025-22471Dell PowerScale OneFS integer overflow6.5CNA v3.10.4%2025-04-10Fix
CVE-2025-22375Authentication bypass in CyberAudit-Web9.3CNA v4.00.5%2025-04-10
CVE-2025-22374SSRF in CyberAudit-Web videx-legacy-ssl6.0CNA v4.00.4%2025-04-10
CVE-2025-22279JetCompareWishlist WordPress plugin local file inclusion7.5CNA v3.10.6%2025-04-10Fix
CVE-2025-22232Spring Cloud Config Server may not Use Vault Token Sent by Clients5.3CNA v3.10.3%2025-04-10
CVE-2025-3489Nababur Simple-User-Management-System register.php cross-site scripting6.1v3.10.5%2025-04-10
CVE-2025-3469Wikimedia Foundation MediaWiki i18n XSS vulnerability in HTMLMultiSelectField when sections are used0.0CNA v4.00.4%2025-04-10Fix
CVE-2025-3417Embedder - Authenticated (Subscriber+) arbitrary Options Update8.8CNA v3.10.4%2025-04-10
CVE-2025-3102SureTriggers: All-in-One Automation Platform WordPress plugin authentication bypass8.1CNA v3.176.2%2025-04-10Reported exploitedNucleiMetasploitExploit codeFix
CVE-2025-2809azurecurve Shortcodes in Comments WordPress plugin unauthenticated arbitrary shortcode execution7.3CNA v3.10.5%2025-04-10
CVE-2025-2805ORDER POST WordPress plugin unauthenticated arbitrary shortcode execution7.3CNA v3.10.5%2025-04-10
CVE-2025-2719Swatchly WordPress plugin unauthorized access6.5CNA v3.10.3%2025-04-10Fix
CVE-2025-2469Debug Messages Revealing Unnecessary Information in GitLab3.7CNA v3.10.4%2025-04-10Fix
CVE-2025-2408Insufficient granularity of access control in GitLab5.3CNA v3.10.3%2025-04-10Fix
CVE-2025-1677Allocation of resources without limits or throttling in GitLab6.5CNA v3.10.4%2025-04-10Fix
CVE-2025-1073Panasonic IR Control Hub firmware loading vulnerability7.5CNA v3.10.2%2025-04-10
CVE-2025-0539Octopus Deploy Octopus Server server-side request forgery5.9CNA v4.00.4%2025-04-10Fix
CVE-2025-0362Improper restriction of rendered UI layers or frames in GitLab6.4CNA v3.10.3%2025-04-10Fix
CVE-2025-32695Checkout Mestres WP WordPress plugin privilege escalation9.8CNA v3.10.6%2025-04-09
CVE-2025-32694Ultimate WP Mail WordPress plugin open redirection4.7CNA v3.10.3%2025-04-09Fix
CVE-2025-32693WebinarPress WordPress plugin open redirection4.7CNA v3.10.4%2025-04-09
CVE-2025-32692WP Subscription Forms WordPress plugin local file inclusion7.5CNA v3.10.9%2025-04-09Fix
CVE-2025-32691PowerPress Podcasting WordPress plugin server side request forgery (SSRF)4.9CNA v3.10.3%2025-04-09Fix
CVE-2025-32690PowerPress Podcasting WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-09Fix
CVE-2025-32685WP Inquiries WordPress plugin SQL injection7.6CNA v3.10.5%2025-04-09
CVE-2025-32684MapSVG Lite WordPress plugin broken access control5.0CNA v3.10.4%2025-04-09Fix
CVE-2025-32683MapSVG Lite WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2025-04-09Fix
CVE-2025-32680Review Stream WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.3%2025-04-09Fix
CVE-2025-32679User Registration Using Contact Form 7 WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.2%2025-04-09Fix
CVE-2025-32678WP Show Stats WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-09
CVE-2025-32677WP Social Stream Designer WordPress plugin SQL injection7.6CNA v3.10.5%2025-04-09
CVE-2025-32676Verowa Connect WordPress plugin SQL injection7.6CNA v3.10.5%2025-04-09Fix
CVE-2025-32675SEO Help WordPress plugin server side request forgery (SSRF)6.8CNA v3.10.5%2025-04-09
CVE-2025-32673Epeken All Kurir WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.2%2025-04-09Fix
CVE-2025-32669Mergado Pack WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.2%2025-04-09
CVE-2025-32667Doppler Forms WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09Fix
CVE-2025-32664Nepali Date Utilities WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09
CVE-2025-32661Interactive US Map WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09
CVE-2025-32659FraudLabs Pro for WooCommerce WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09Fix
CVE-2025-32645Custom Posts Order WordPress plugin CSRF to stored cross-site scripting (XSS)7.1CNA v3.10.2%2025-04-09Fix
CVE-2025-32644IP2Location World Clock WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09Fix
CVE-2025-32642Vite Coupon WordPress plugin CSRF to remote code execution (RCE)9.6CNA v3.10.3%2025-04-09Fix
CVE-2025-32641Anant Addons for Elementor WordPress plugin CSRF to arbitrary plugin installation9.6CNA v3.10.3%2025-04-09Exploit codeFix
CVE-2025-32640Elementor Ally stored cross-site scripting5.9CNA v3.10.4%2025-04-09Fix
CVE-2025-32624Czater.pl live chat i telefon WordPress plugin CSRF to stored cross-site scripting (XSS)7.1CNA v3.10.4%2025-04-09
CVE-2025-32623PlainInventory WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09Fix
CVE-2025-32621WP Map Route Planner WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09
CVE-2025-32619KeyCAPTCHA WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09
CVE-2025-32617Multiple Location Google Map WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09
CVE-2025-32616Nimbata Call Tracking WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.2%2025-04-09
CVE-2025-32612User Session Synchronizer WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09
CVE-2025-32610Foliopress WYSIWYG WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09Fix
CVE-2025-32597WordPress Events Calendar Plugin connectDaily CSRF to cross-site scripting7.1CNA v3.10.2%2025-04-09Fix
CVE-2025-32591WP Abstracts WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09
CVE-2025-32584Chat2 WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09Fix
CVE-2025-32581WordPress Spam Blocker plugin CSRF to stored XSS7.1CNA v3.10.4%2025-04-09
CVE-2025-32580DeBounce Email Validator WordPress plugin CSRF to stored XSS7.1CNA v3.10.4%2025-04-09Fix
CVE-2025-32576WP shop WordPress plugin CSRF to arbitrary file upload9.6CNA v3.10.3%2025-04-09
CVE-2025-32575WP w3all phpBB WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09Fix
CVE-2025-32570ChillPay WooCommerce WordPress plugin CSRF to stored XSS7.1CNA v3.10.4%2025-04-09Fix
CVE-2025-32563WP Calais Auto Tagger WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09
CVE-2025-32559REVE Chat WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.2%2025-04-09
CVE-2025-32556Simple Post Meta Manager WordPress plugin CSRF to reflected cross-site scripting7.1CNA v3.10.2%2025-04-09
CVE-2025-32555SEO, Nutrition and Print for Recipes by Edamam WordPress plugin CSRF to cross-site scripting7.1CNA v3.10.2%2025-04-09
CVE-2025-32550Click and Pledge Connect WordPress plugin SQL injection7.2CNA v3.10.5%2025-04-09Fix
CVE-2025-32547All push notification for WP WordPress plugin CSRF to SQL injection8.2CNA v3.10.2%2025-04-09
CVE-2025-32543Canonical Attachments WordPress plugin stored cross-site scripting (XSS)7.1CNA v3.10.4%2025-04-09
CVE-2025-32518ALD Login Page WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09Fix
CVE-2025-32505MultiMailer WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09
CVE-2025-32503Link Shield WordPress plugin CSRF to stored cross-site scripting (XSS)7.1CNA v3.10.4%2025-04-09
CVE-2025-32502ePaper Lister for Yumpu WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09
CVE-2025-32501RentSyst WordPress plugin cross-site request forgery (CSRF) to stored XSS7.1CNA v3.10.2%2025-04-09Fix
CVE-2025-32500Codescar Radio Widget WordPress plugin CSRF to stored cross-site scripting (XSS)7.1CNA v3.10.2%2025-04-09
CVE-2025-32499Logo Showcase Ultimate WordPress plugin local file inclusion6.5CNA v3.10.7%2025-04-09Emerging ThreatsFix
CVE-2025-32498VKontakte Cross-Post WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09
CVE-2025-32497Spoiler Block WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09
CVE-2025-32496Ultra Demo Importer WordPress plugin CSRF to RCE9.6CNA v3.10.3%2025-04-09
CVE-2025-32495Waymark WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-09Fix
CVE-2025-32494reCAPTCHA Jetpack WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-09
CVE-2025-32493BP Social Connect WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2025-04-09
CVE-2025-32492Admin Menu Post List WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2025-04-09
CVE-2025-32489Wetterwarner WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2025-04-09Fix
CVE-2025-32488Aria Font WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2025-04-09
CVE-2025-32487Waymark WordPress plugin server side request forgery (SSRF)4.9CNA v3.10.3%2025-04-09Fix
CVE-2025-32485WP Performance Pack WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-09
CVE-2025-32484WP-Planification WP-Planning WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09
CVE-2025-32483Request Call Back WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2025-04-09
CVE-2025-32482Custom Smilies WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09
CVE-2025-32481Nino Social Connect WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09
CVE-2025-32480Windows Live Writer WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09
CVE-2025-32479Flags Widget WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09
CVE-2025-32478WP SexyLightBox WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09
CVE-2025-32477WP-Easy Menu WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09
CVE-2025-32476Advanced Tag Lists WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09
CVE-2025-32464HAProxy heap-based buffer overflow6.8CNA v3.10.8%2025-04-09Fix
CVE-2025-32461Tiki server-side template injection9.9CNA v3.10.9%2025-04-09Fix
CVE-2025-32460GraphicsMagick out-of-bounds read9.1v3.10.3%2025-04-09Fix
CVE-2025-32387Helm allows A Specially Crafted JSON Schema to cause A stack overflow6.5CNA v3.10.5%2025-04-09Fix
CVE-2025-32386Helm allows A Specially Crafted Chart Archive to cause Out of Memory Termination6.5CNA v3.10.4%2025-04-09Fix
CVE-2025-32381Denial of service by abusing xgrammar unbounded cache in memory6.5CNA v3.10.5%2025-04-09Fix
CVE-2025-32380Apollo Router Query Validation vulnerable to Excessive resource consumption7.5CNA v3.10.6%2025-04-09Fix
CVE-2025-32379XSS at ctx.redirect function in Koajs5.0CNA v3.10.3%2025-04-09Fix
CVE-2025-32378Shopware's default newsletter opt-in settings allow for mass sign-up abuse6.9CNA v4.00.3%2025-04-09Fix
CVE-2025-32375Insecure deserialization leads to RCE in BentoML's runner server9.8CNA v3.152.4%2025-04-09MetasploitExploit codeFix
CVE-2025-32374Possible denial of service (DoS) in Dnn.Platform registration5.9CNA v3.10.4%2025-04-09Fix
CVE-2025-32373DNN Software DotNetNuke portal file access insecure direct object reference6.5CNA v3.10.4%2025-04-09Fix
CVE-2025-32372dnnsoftware Dnn.Platform server-side request forgery (SSRF) in DotNetNuke.Core6.5CNA v3.10.4%2025-04-09Fix
CVE-2025-32371dnnsoftware Dnn.Platform unexpected external content may be displayed in DNN ImageHandler4.3CNA v3.10.3%2025-04-09Fix
CVE-2025-32016Microsoft Identity Web service logs information disclosure4.7CNA v3.10.1%2025-04-09Fix
CVE-2025-31672Apache Poi OOXML vulnerable to improper input validation in OOXML File Parsing5.3CISA ADP v3.11.3%2025-04-09Fix
CVE-2025-31404AF Tell a Friend WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09
CVE-2025-31402NewsBoard Post and RSS Scroller WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09
CVE-2025-31401MMX Make Me Christmas WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09
CVE-2025-31400WS Audio Player WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09
CVE-2025-31399CG Scroll To Top WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09
CVE-2025-31395Easy Custom CSS WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09
CVE-2025-31394More Mime Type Filters WordPress plugin CSRF to stored XSS7.1CNA v3.10.4%2025-04-09
CVE-2025-31393Social Bookmarking RELOADED WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09
CVE-2025-31392Smart Product Gallery Slider WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09
CVE-2025-31391Script Compressor WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09
CVE-2025-31390Social Crowd WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09
CVE-2025-31388The World WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09
CVE-2025-31385Site Table of Contents WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09
CVE-2025-31383FrescoChat Live Chat WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09
CVE-2025-31382Language Field WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09
CVE-2025-31377Woo Product Feed For Marketing Channels WordPress plugin broken access control7.5CNA v3.10.7%2025-04-09
CVE-2025-31375Scheduled WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09
CVE-2025-31042Sandwich Adsense WordPress plugin broken access control5.3CNA v3.10.5%2025-04-09
CVE-2025-31038Essential Breadcrumbs WordPress plugin CSRF to privilege escalation8.8CNA v3.10.3%2025-04-09
CVE-2025-31036WPSolr WordPress plugin CSRF to privilege escalation8.8CNA v3.10.3%2025-04-09Fix
CVE-2025-31035WP Editor.md The Perfect Markdown Editor WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2025-04-09
CVE-2025-31034Customize Login Page WordPress plugin cross-site request forgery (CSRF) to settings Change4.3CNA v3.10.2%2025-04-09
CVE-2025-31033Buddypress Humanity WordPress plugin CSRF to privilege escalation9.8CNA v3.10.4%2025-04-09Exploit code
CVE-2025-31032Pagopar WooCommerce Gateway WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09Fix
CVE-2025-31026Comment Validation Reloaded WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-09
CVE-2025-31023Seo Meta Tags WordPress plugin CSRF to privilege escalation8.8CNA v3.10.3%2025-04-09
CVE-2025-31020Simple Spoiler WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-09Fix
CVE-2025-31017Nav Menu Manager WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-09Fix
CVE-2025-31012Age Gate WordPress plugin broken access control5.3CNA v3.10.5%2025-04-09Fix
CVE-2025-31009IndieBlocks WordPress plugin server side request forgery (SSRF)5.4CNA v3.10.4%2025-04-09Fix
CVE-2025-31008YouTube Embed WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2025-04-09Fix
CVE-2025-31005Easyfonts WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-09Fix
CVE-2025-31004Rich Table of Contents WordPress plugin broken access control4.3CNA v3.10.4%2025-04-09Fix
CVE-2025-31003Squeeze WordPress plugin full path disclosure (FPD)2.7CNA v3.10.5%2025-04-09Fix
CVE-2025-31002Squeeze WordPress plugin arbitrary file upload9.1CNA v3.10.7%2025-04-09Fix
CVE-2025-30677Apache Pulsar Kafka Connector logs sensitive information in Application Logs6.3CNA v4.00.7%2025-04-09Fix
CVE-2025-30660Junos OS: MX Series: Decapsulation of specific GRE packets leads to PFE reset8.7CNA v4.00.4%2025-04-09Fix
CVE-2025-30659Juniper Networks Junos OS Packet Forwarding Engine improper length parameter handling8.7CNA v4.00.4%2025-04-09Fix
CVE-2025-30658Juniper Networks Junos OS Anti-Virus processing memory leak8.7CNA v4.00.4%2025-04-09Fix
CVE-2025-30657Junos OS: Processing of a specific BGP update causes the SRRD process to crash6.9CNA v4.00.4%2025-04-09Fix
CVE-2025-30656Juniper Networks Junos OS SIP ALG denial of service8.7CNA v4.00.4%2025-04-09Fix
CVE-2025-30655Juniper Networks Junos OS Routing protocol daemon improper check for exceptional conditions6.8CNA v4.00.1%2025-04-09Fix
CVE-2025-30654Junos OS and Junos OS Evolved: A local, low privileged user can access sensitive information6.8CNA v4.00.2%2025-04-09Fix
CVE-2025-30653Junos OS and Junos OS Evolved: LSP flap in a specific MPLS scenario leads to rpd crash6.0CNA v4.00.2%2025-04-09Fix
CVE-2025-30652Juniper Networks Junos OS routing protocol daemon improper exception handling6.8CNA v4.00.2%2025-04-09Fix
CVE-2025-30651Juniper Networks Junos OS routing protocol daemon buffer access with incorrect length8.7CNA v4.00.4%2025-04-09Fix
CVE-2025-30649Juniper Networks Junos OS syslog stream TCP transport improper input validation8.7CNA v4.00.4%2025-04-09Fix
CVE-2025-30648Juniper Networks Junos OS An improper input validation7.1CNA v4.00.2%2025-04-09Fix
CVE-2025-30647Junos OS: MX Series: Subscriber login/logout activity will lead to a memory leak7.1CNA v4.00.2%2025-04-09Fix
CVE-2025-30646Junos OS and Junos OS Evolved: Receipt of a malformed LLDP TLV results in l2cpd crash7.1CNA v4.00.2%2025-04-09Fix
CVE-2025-30645Juniper Networks Junos OS flow daemon null pointer dereference8.7CNA v4.00.4%2025-04-09Fix
CVE-2025-30644Juniper Networks Junos OS flexible PIC concentrator heap-based buffer overflow7.7CNA v4.00.3%2025-04-09Fix
CVE-2025-29988Dell Client Platform BIOS stack-based buffer overflow6.9CNA v3.10.2%2025-04-09Fix
CVE-2025-29870Inaba Denki Sangyo AC-WPS-11ac Wi-Fi AP UNIT ' missing authentication7.5CNA v3.10.6%2025-04-09
CVE-2025-29394verydows v2.0 An insecure permissions8.1CISA ADP v3.10.7%2025-04-09
CVE-2025-29391Horvey Library-manager SQL injection7.2CISA ADP v3.10.5%2025-04-09
CVE-2025-29390jerryhanjj ERP SQL injection8.8CISA ADP v3.10.5%2025-04-09
CVE-2025-29389PbootCMS cross-site scripting6.1CISA ADP v3.10.3%2025-04-09
CVE-2025-29189Flowise vulnerable to SQL injection via `tableName` parameter7.6CISA ADP v3.10.3%2025-04-09Fix
CVE-2025-29018CodeAstro Internet Banking System stored cross-site scripting4.8CISA ADP v3.10.3%2025-04-09
CVE-2025-27934Inaba Denki Sangyo AC-WPS-11ac system information disclosure7.5CNA v3.10.6%2025-04-09
CVE-2025-27797Inaba Denki Sangyo AC-WPS-11ac OS command injection9.8CNA v3.11.0%2025-04-09
CVE-2025-27722Inaba Denki Sangyo AC-WPS-11ac Wi-Fi AP UNIT ' cleartext transmission of sensitive information5.9CNA v3.10.3%2025-04-09
CVE-2025-27391Apache ActiveMQ Artemis: Passwords leaking from broker properties in the debug log6.8CNA v4.00.4%2025-04-09Fix
CVE-2025-26902Brizy Pro WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2025-04-09Fix
CVE-2025-26901Brizy Pro WordPress plugin broken access control8.8v3.10.3%2025-04-09Fix
CVE-2025-26888WooCommerce Multilingual and Multicurrency WordPress plugin broken access control5.3CNA v3.10.3%2025-04-09Fix
CVE-2025-25213Inaba Denki Sangyo AC-WPS-11ac Wi-Fi AP UNIT ' clickjacking6.5CNA v3.10.3%2025-04-09
CVE-2025-25056Inaba Denki Sangyo AC-WPS-11ac Wi-Fi AP UNIT ' cross-site request forgery4.3CNA v3.10.2%2025-04-09
CVE-2025-25053Inaba Denki Sangyo AC-WPS-11ac WEB UI OS command injection8.8CNA v3.11.0%2025-04-09
CVE-2025-25023IBM Security Guardium information disclosure4.9CNA v3.10.4%2025-04-09Fix
CVE-2025-24375Canonical MySQL K8s Operator temporary script files information disclosure5.0CNA v3.10.2%2025-04-09
CVE-2025-23407Inaba Denki Sangyo AC-WPS-11ac WEB UI incorrect privilege assignment4.3CNA v3.10.4%2025-04-09
CVE-2025-21601Juniper Networks Junos OS web management denial of service8.7CNA v4.00.4%2025-04-09Fix
CVE-2025-21597Juniper Networks Junos OS routing protocol daemon improper check for exceptional conditions6.0CNA v4.00.2%2025-04-09Fix
CVE-2025-21595Juniper Networks Junos OS Packet Forwarding Engine memory leak7.1CNA v4.00.3%2025-04-09Fix
CVE-2025-21594Junos OS: MX Series: In DS-lite and NAT scenario receipt of crafted IPv6 traffic causes port block8.7CNA v4.00.4%2025-04-09Fix
CVE-2025-21591Juniper Networks Junos OS jdhcpd daemon buffer access with incorrect length7.1CNA v4.00.3%2025-04-09Fix
CVE-2025-20952Samsung Mobile Devices Mdecservice improper access control5.5CNA v3.10.1%2025-04-09Fix
CVE-2025-3475Web-T Moderately critical Access bypass, denial of service SA-CONTRIB-2025-0306.5CISA ADP v3.10.4%2025-04-09Fix
CVE-2025-3474Panels Critical Access bypass SA-CONTRIB-2025-0336.5CISA ADP v3.10.4%2025-04-09Fix
CVE-2025-3442Information disclosure vulnerability in TP-Link Tapo IoT Smart Hub4.4CNA v4.00.1%2025-04-09Fix
CVE-2025-3131Eca: Event Condition Action Critical cross-site request forgery SA-CONTRIB-2025-0315.4CISA ADP v3.10.2%2025-04-09Fix
CVE-2025-3115TIBCO Spotfire data functions code injection9.4CNA v4.00.7%2025-04-09Fix
CVE-2025-3114Spotfire code execution9.4CNA v4.00.6%2025-04-09
CVE-2025-3100WP Project Manager WordPress plugin stored cross-site scripting5.4v3.10.3%2025-04-09Fix
CVE-2025-2632Out-of-bounds write vulnerability in NI LabVIEW reading CPU info from cache8.5CNA v4.00.2%2025-04-09Fix
CVE-2025-2631Out-of-bounds write vulnerability in NI LabVIEW in InitCPUInformation8.5CNA v4.00.2%2025-04-09Fix
CVE-2025-2630DLL hijacking vulnerability in NI LabVIEW7.0CNA v4.00.2%2025-04-09Fix
CVE-2025-2629DLL hijacking vulnerability in NI LabVIEW when Loading NI Error Reporting7.0CNA v4.00.2%2025-04-09Fix
CVE-2025-2442Schneider Electric Trio Q Licensed Data Radio insecure default initialization5.4CNA v4.00.2%2025-04-09Fix
CVE-2025-2441Schneider Electric Trio Q Licensed Data Radio insecure default initialization4.1CNA v4.00.2%2025-04-09Fix
CVE-2025-2440Schneider Electric Trio Q Licensed Data Radio insecure storage of sensitive information4.1CNA v4.00.2%2025-04-09Fix
CVE-2025-2223Schneider Electric ConneXium Network Manager improper input validation8.4CNA v4.00.2%2025-04-09
CVE-2025-2222Schneider Electric ConneXium Network Manager files accessible to external parties8.2CNA v4.00.3%2025-04-09
CVE-2025-1968Progress Software Sitefinity insufficient session expiration7.7CNA v3.10.3%2025-04-09Fix
CVE-2025-32414libxml2 out-of-bounds access7.5v3.10.4%2025-04-08Fix
CVE-2025-32413CIRCL vulnerability-Lookup cross-site scripting6.4CNA v3.10.2%2025-04-08Fix
CVE-2025-32406NAKIVO Backup and Replication Director Director NBR component XML external entity injection8.6CNA v3.10.5%2025-04-08Fix
CVE-2025-32279Live Forms WordPress plugin broken access control4.3CNA v3.10.2%2025-04-08
CVE-2025-32211Broadstreet WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2025-04-08Fix
CVE-2025-32164m1.DownloadList WordPress plugin sensitive data exposure6.5CNA v3.10.4%2025-04-08
CVE-2025-32117Widgetize Pages Light WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-04-08
CVE-2025-32036dnnsoftware Dnn.Platform DNN allows the possibility of bypassing Captcha4.2CNA v3.10.3%2025-04-08Fix
CVE-2025-32035dnnsoftware Dnn.Platform DNN does not check the contents of a file when uploading files2.6CNA v3.10.2%2025-04-08Fix
CVE-2025-32028haxtheweb issues HAX CMS PHP allows insecure file upload to lead to remote code execution10.0CNA v3.12.0%2025-04-08Fix
CVE-2025-32026Element Web Element Call integration information disclosure3.8CNA v3.10.2%2025-04-08Fix
CVE-2025-32025Bep/imagemeta allows a potentially large memory allocation in PNG and WebP parsing6.9CNA v4.00.2%2025-04-08Fix
CVE-2025-32024Bep/imagemeta allows excessively large EXIF data structures6.9CNA v4.00.2%2025-04-08Fix
CVE-2025-32020Improper neutralization of special elements used in an SQL command in crud-query-parser9.3CNA v4.00.4%2025-04-08Fix
CVE-2025-32018Arbitrary file write from Cursor agent through a prompt injection from malicious @Docs8.1CNA v3.10.4%2025-04-08Fix
CVE-2025-32017Umbraco has a Management API vulnerability to path traversal with Authenticated Users8.8CNA v3.10.6%2025-04-08Fix
CVE-2025-31498c-ares has a use-after-free in read_answers8.3CNA v4.00.6%2025-04-08Fix
CVE-2025-31333Odata meta-data tampering in SAP S4CORE entity4.3CNA v3.10.3%2025-04-08Fix
CVE-2025-31332Insecure file permissions vulnerability in SAP BusinessObjects Business Intelligence Platform6.6CNA v3.10.2%2025-04-08Fix
CVE-2025-31331Authorization bypass vulnerability in SAP NetWeaver4.3CNA v3.10.4%2025-04-08Fix
CVE-2025-31330Code injection vulnerability in SAP Landscape Transformation (Analysis Platform)9.9CNA v3.10.7%2025-04-08Fix
CVE-2025-30671Zoom Workplace Apps for Windows null pointer6.5CNA v3.10.4%2025-04-08Fix
CVE-2025-30670Zoom Workplace Apps for Windows null pointer6.5CNA v3.10.4%2025-04-08Fix
CVE-2025-30309Adobe XMPWorker out-of-bounds read5.5CNA v3.10.2%2025-04-08Fix
CVE-2025-30308Adobe XMPWorker out-of-bounds read5.5CNA v3.10.2%2025-04-08Fix
CVE-2025-30307Adobe XMPWorker out-of-bounds read5.5CNA v3.10.2%2025-04-08Fix
CVE-2025-30306Adobe XMPWorker out-of-bounds read5.5CNA v3.10.2%2025-04-08Fix
CVE-2025-30305Adobe XMPWorker out-of-bounds read5.5CNA v3.10.2%2025-04-08Fix
CVE-2025-30304Adobe FrameMaker out-of-bounds write7.8CNA v3.10.2%2025-04-08Fix
CVE-2025-30303Adobe FrameMaker out-of-bounds read5.5CNA v3.10.2%2025-04-08Fix
CVE-2025-30302Adobe FrameMaker out-of-bounds read5.5CNA v3.10.2%2025-04-08Fix
CVE-2025-30301Adobe FrameMaker null pointer dereference5.5CNA v3.10.2%2025-04-08Fix
CVE-2025-30300Adobe FrameMaker null pointer dereference5.5CNA v3.10.2%2025-04-08Fix
CVE-2025-30299Adobe FrameMaker heap-based buffer overflow7.8CNA v3.10.3%2025-04-08Fix
CVE-2025-30298Adobe FrameMaker stack-based buffer overflow7.8CNA v3.10.3%2025-04-08Fix
CVE-2025-30297Adobe FrameMaker out-of-bounds write7.8CNA v3.10.2%2025-04-08Fix
CVE-2025-30296Adobe FrameMaker integer underflow (wrap or wraparound)7.8CNA v3.10.2%2025-04-08Fix
CVE-2025-30295Adobe FrameMaker heap-based buffer overflow7.8CNA v3.10.3%2025-04-08Fix
CVE-2025-30294Adobe ColdFusion improper input validation6.8CNA v3.117.2%2025-04-08Fix
CVE-2025-30293Adobe ColdFusion improper input validation6.8CNA v3.10.8%2025-04-08Fix
CVE-2025-30292Adobe ColdFusion cross-site scripting (reflected XSS)6.1CNA v3.115.5%2025-04-08Fix
CVE-2025-30291Adobe ColdFusion information exposure5.5CNA v3.10.2%2025-04-08Fix
CVE-2025-30290Adobe ColdFusion improper limitation of a pathname to a restricted directory (path traversal)8.7CNA v3.119.5%2025-04-08Fix
CVE-2025-30289Adobe ColdFusion improper neutralization of special elements used in an OS command8.2CNA v3.15.3%2025-04-08Fix
CVE-2025-30288Adobe ColdFusion improper access control8.2CNA v3.10.3%2025-04-08Fix
CVE-2025-30287Adobe ColdFusion improper authentication8.2CNA v3.12.9%2025-04-08Fix
CVE-2025-30286Adobe ColdFusion improper neutralization of special elements used in an OS command8.4CNA v3.12.6%2025-04-08Fix
CVE-2025-30285Adobe ColdFusion deserialization of untrusted data8.4CNA v3.130.9%2025-04-08Fix
CVE-2025-30284Adobe ColdFusion deserialization of untrusted data8.4CNA v3.12.1%2025-04-08Fix
CVE-2025-30282Adobe ColdFusion improper authentication9.1CNA v3.11.8%2025-04-08Fix
CVE-2025-30281Adobe ColdFusion improper access control9.1CNA v3.123.6%2025-04-08Fix
CVE-2025-30280Siemens Mendix Runtime V10 response discrepancy6.9CNA v4.00.5%2025-04-08Fix
CVE-2025-30166Pimcore's Admin Classic Bundle allows HTML injection1.8CNA v4.00.2%2025-04-08Fix
CVE-2025-30151Shopware allows denial of service via password length7.5CNA v3.10.4%2025-04-08Fix
CVE-2025-30150Shopware 6 allows attackers to check for registered accounts through the store-api5.5CNA v4.00.4%2025-04-08Fix
CVE-2025-30017Missing authorization check in SAP Solution Manager4.4CNA v3.10.1%2025-04-08Fix
CVE-2025-30016Authentication bypass vulnerability in SAP Financial Consolidation9.8CNA v3.10.6%2025-04-08Fix
CVE-2025-30015Memory corruption vulnerability in SAP NetWeaver and ABAP Platform (Application Server ABAP)4.1CNA v3.10.3%2025-04-08Fix
CVE-2025-30014Directory traversal vulnerability in SAP Capital Yield Tax Management7.7CNA v3.10.8%2025-04-08Fix
CVE-2025-30013Code injection vulnerability in SAP ERP BW Business Content6.7CNA v3.10.8%2025-04-08Fix
CVE-2025-30000Siemens License Server (SLS) improper certificate validation5.4CNA v4.00.1%2025-04-08Fix
CVE-2025-29999Siemens License Server (SLS) improper privilege management5.4CNA v4.00.2%2025-04-08Fix
CVE-2025-29986Dell Common Event Enabler improper channel restriction8.3CNA v3.10.3%2025-04-08Fix
CVE-2025-29985Dell Common Event Enabler insecure default initialization6.5CNA v3.10.3%2025-04-08Fix
CVE-2025-29824Microsoft Windows Common Log File System (CLFS) driver use-after-free7.8CNA v3.113.9%2025-04-08KEVExploit codeFix
CVE-2025-29823Microsoft Excel remote code execution7.8CNA v3.10.7%2025-04-08Fix
CVE-2025-29822Microsoft OneNote security feature bypass7.8CNA v3.10.8%2025-04-08Fix
CVE-2025-29821Microsoft Dynamics Business Central information disclosure5.5CNA v3.10.7%2025-04-08Fix
CVE-2025-29820Microsoft Word remote code execution7.8CNA v3.10.8%2025-04-08Fix
CVE-2025-29819Microsoft Windows Admin Center in Azure Portal information disclosure6.2CNA v3.11.1%2025-04-08Fix
CVE-2025-29816Microsoft Word security feature bypass7.5CNA v3.10.5%2025-04-08Fix
CVE-2025-29812Microsoft Windows DirectX Graphics Kernel elevation of privilege7.8CNA v3.10.9%2025-04-08Fix
CVE-2025-29811Microsoft Windows Mobile Broadband driver elevation of privilege7.8CNA v3.10.6%2025-04-08Fix
CVE-2025-29810Microsoft Windows active Directory Domain services elevation of privilege7.5CNA v3.12.6%2025-04-08Fix
CVE-2025-29809Microsoft Windows Kerberos security feature bypass7.1CNA v3.14.2%2025-04-08Fix
CVE-2025-29808Microsoft Windows Cryptographic services information disclosure5.5CNA v3.10.5%2025-04-08Fix
CVE-2025-29805Outlook for Android information disclosure7.5CNA v3.11.5%2025-04-08Fix
CVE-2025-29804Visual Studio elevation of privilege7.3CNA v3.11.3%2025-04-08Fix
CVE-2025-29802Visual Studio elevation of privilege7.3CNA v3.11.0%2025-04-08Fix
CVE-2025-29801Microsoft AutoUpdate (MAU) elevation of privilege7.8CNA v3.11.1%2025-04-08Fix
CVE-2025-29800Microsoft AutoUpdate (MAU) elevation of privilege7.8CNA v3.11.1%2025-04-08Fix
CVE-2025-29794Microsoft SharePoint remote code execution8.8CNA v3.15.1%2025-04-08Fix
CVE-2025-29793Microsoft SharePoint remote code execution7.2CNA v3.123.6%2025-04-08Fix
CVE-2025-29792Microsoft Office elevation of privilege7.3CNA v3.11.1%2025-04-08Fix
CVE-2025-29791Microsoft Excel remote code execution7.8CNA v3.11.0%2025-04-08Fix
CVE-2025-27752Microsoft Excel remote code execution7.8CNA v3.11.0%2025-04-08Fix
CVE-2025-27751Microsoft Excel remote code execution7.8CNA v3.12.5%2025-04-08Exploit codeFix
CVE-2025-27750Microsoft Excel remote code execution7.8CNA v3.10.9%2025-04-08Fix
CVE-2025-27749Microsoft Office remote code execution7.8CNA v3.11.1%2025-04-08Fix
CVE-2025-27748Microsoft Office remote code execution7.8CNA v3.11.1%2025-04-08Fix
CVE-2025-27747Microsoft Word remote code execution7.8CNA v3.10.8%2025-04-08Fix
CVE-2025-27746Microsoft Office remote code execution7.8CNA v3.10.9%2025-04-08Fix
CVE-2025-27745Microsoft Office remote code execution7.8CNA v3.11.1%2025-04-08Fix
CVE-2025-27744Microsoft Office elevation of privilege7.8CNA v3.11.2%2025-04-08Fix
CVE-2025-27743Microsoft System Center elevation of privilege7.8CNA v3.10.9%2025-04-08Fix
CVE-2025-27742Microsoft Windows NTFS information disclosure5.5CNA v3.10.9%2025-04-08Fix
CVE-2025-27741Microsoft Windows NTFS elevation of privilege7.8CNA v3.10.8%2025-04-08Fix
CVE-2025-27740Microsoft Windows active Directory Certificate services elevation of privilege8.8CNA v3.13.4%2025-04-08Fix
CVE-2025-27739Microsoft Windows Kernel elevation of privilege7.8CNA v3.10.6%2025-04-08Fix
CVE-2025-27738Microsoft Windows Resilient File System (ReFS) information disclosure6.5CNA v3.13.4%2025-04-08Fix
CVE-2025-27737Microsoft Windows Security Zone Mapping security feature bypass8.6CNA v3.10.8%2025-04-08Fix
CVE-2025-27736Microsoft Windows Power Dependency Coordinator information disclosure5.5CNA v3.10.9%2025-04-08Fix
CVE-2025-27735Microsoft Windows Virtualization-Based Security (VBS) security feature bypass6.0CNA v3.10.4%2025-04-08Fix
CVE-2025-27733Microsoft Windows NTFS elevation of privilege7.8CNA v3.10.7%2025-04-08Fix
CVE-2025-27732Microsoft Windows Graphics component elevation of privilege7.0CNA v3.10.3%2025-04-08Fix
CVE-2025-27731Microsoft OpenSSH for Windows elevation of privilege7.8CNA v3.10.6%2025-04-08Fix
CVE-2025-27730Microsoft Windows Digital Media elevation of privilege7.8CNA v3.10.6%2025-04-08Fix
CVE-2025-27729Microsoft Windows Shell remote code execution7.8CNA v3.10.8%2025-04-08Fix
CVE-2025-27728Microsoft Windows Kernel-Mode driver elevation of privilege7.8CNA v3.10.6%2025-04-08Fix
CVE-2025-27727Microsoft Windows Installer elevation of privilege7.8CNA v3.11.0%2025-04-08Fix
CVE-2025-27492Microsoft Windows Secure Channel elevation of privilege7.0CNA v3.10.3%2025-04-08Fix
CVE-2025-27491Microsoft Windows Hyper-V remote code execution7.1CNA v3.11.5%2025-04-08Fix
CVE-2025-27490Microsoft Windows Bluetooth service elevation of privilege7.8CNA v3.10.6%2025-04-08Fix
CVE-2025-27489Microsoft Azure Local elevation of privilege7.8CNA v3.10.6%2025-04-08Fix
CVE-2025-27487Microsoft Remote Desktop client remote code execution8.0CNA v3.11.5%2025-04-08Fix
CVE-2025-27486Microsoft Windows Standards-Based Storage Management service denial of service7.5CNA v3.12.1%2025-04-08Fix
CVE-2025-27485Microsoft Windows Standards-Based Storage Management service denial of service7.5CNA v3.12.1%2025-04-08Fix
CVE-2025-27484Microsoft Windows Universal Plug and Play (UPnP) device host elevation of privilege7.5CNA v3.10.8%2025-04-08Fix
CVE-2025-27483Microsoft Windows NTFS elevation of privilege7.8CNA v3.10.8%2025-04-08Fix
CVE-2025-27482Microsoft Windows Remote Desktop services remote code execution8.1CNA v3.11.7%2025-04-08Fix
CVE-2025-27481Microsoft Windows Telephony service remote code execution8.8CNA v3.11.2%2025-04-08Fix
CVE-2025-27480Microsoft Windows Remote Desktop services remote code execution8.1CNA v3.112.6%2025-04-08Exploit codeFix
CVE-2025-27479Microsoft Windows kerberos Key Distribution Proxy service denial of service7.5CNA v3.12.2%2025-04-08Fix
CVE-2025-27478Microsoft Windows Local Security Authority (LSA) elevation of privilege7.0CNA v3.10.5%2025-04-08Fix
CVE-2025-27477Microsoft Windows Telephony service remote code execution8.8CNA v3.11.5%2025-04-08Fix
CVE-2025-27476Microsoft Windows Digital Media elevation of privilege7.8CNA v3.10.6%2025-04-08Fix
CVE-2025-27475Microsoft Windows Update Stack elevation of privilege7.0CNA v3.10.4%2025-04-08Fix
CVE-2025-27474Microsoft Windows Routing and Remote Access Service (RRAS) information disclosure6.5CNA v3.11.8%2025-04-08Fix
CVE-2025-27473Microsoft Windows HTTP.sys denial of service7.5CNA v3.12.2%2025-04-08Fix
CVE-2025-27472Microsoft Windows Mark of the web security feature bypass5.4CNA v3.11.6%2025-04-08Fix
CVE-2025-27471Microsoft Streaming service denial of service5.9CNA v3.11.3%2025-04-08Fix
CVE-2025-27470Microsoft Windows Standards-Based Storage Management service denial of service7.5CNA v3.12.3%2025-04-08Fix
CVE-2025-27469Microsoft Windows Lightweight Directory Access Protocol (LDAP) denial of service7.5CNA v3.12.5%2025-04-08Fix
CVE-2025-27467Microsoft Windows Digital Media elevation of privilege7.8CNA v3.10.6%2025-04-08Fix
CVE-2025-27443Zoom Workplace Apps for Windows insecure default Variable Initialization2.8CNA v3.10.2%2025-04-08Fix
CVE-2025-27442Zoom Workplace Apps cross-site scripting4.6CNA v3.10.2%2025-04-08Fix
CVE-2025-27441Zoom Workplace Apps cross-site scripting4.6CNA v3.10.3%2025-04-08Fix
CVE-2025-27437Missing authorization check in SAP NetWeaver Application Server ABAP (Virus Scan interface)4.3CNA v3.10.3%2025-04-08Fix
CVE-2025-27435Information disclosure vulnerability in SAP Commerce Cloud4.2CNA v3.10.2%2025-04-08Fix
CVE-2025-27429Code injection vulnerability in SAP S/4HANA (Private Cloud or On-Premise)9.9CNA v3.10.8%2025-04-08Fix
CVE-2025-27428Directory traversal vulnerability in SAP NetWeaver and ABAP Platform (Service Data Collection)7.7CNA v3.10.6%2025-04-08Fix
CVE-2025-27205Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.5%2025-04-08Fix
CVE-2025-27204Adobe After Effects out-of-bounds read5.5CNA v3.10.3%2025-04-08Fix
CVE-2025-27202Adobe Animate out-of-bounds read5.5CNA v3.10.3%2025-04-08Fix
CVE-2025-27201Adobe Animate out-of-bounds read5.5CNA v3.10.3%2025-04-08Fix
CVE-2025-27200Adobe Animate use-after-free7.8CNA v3.10.4%2025-04-08Fix
CVE-2025-27199Adobe Animate heap-based buffer overflow7.8CNA v3.10.4%2025-04-08Fix
CVE-2025-27198Adobe Photoshop Desktop heap-based buffer overflow7.8CNA v3.10.4%2025-04-08Fix
CVE-2025-27196Adobe Premiere Pro heap-based buffer overflow7.8CNA v3.10.4%2025-04-08Fix
CVE-2025-27195Adobe Media Encoder heap-based buffer overflow7.8CNA v3.10.4%2025-04-08Fix
CVE-2025-27194Adobe Media Encoder out-of-bounds write7.8CNA v3.10.3%2025-04-08Fix
CVE-2025-27193Adobe Bridge heap-based buffer overflow7.8CNA v3.10.4%2025-04-08Fix
CVE-2025-27192Adobe Commerce insufficiently protected credentials2.7CNA v3.10.5%2025-04-08Fix
CVE-2025-27191Adobe Commerce improper access control5.3CNA v3.10.5%2025-04-08Fix
CVE-2025-27190Adobe Commerce improper access control5.3CNA v3.10.5%2025-04-08Fix
CVE-2025-27189Adobe Commerce cross-site request forgery (CSRF)4.3CNA v3.11.0%2025-04-08Fix
CVE-2025-27188Adobe Commerce incorrect authorization4.3CNA v3.10.6%2025-04-08Fix
CVE-2025-27187Adobe After Effects out-of-bounds read5.5CNA v3.10.3%2025-04-08Fix
CVE-2025-27186Adobe After Effects out-of-bounds read5.5CNA v3.10.3%2025-04-08Fix
CVE-2025-27185Adobe After Effects null pointer dereference5.5CNA v3.10.3%2025-04-08Fix
CVE-2025-27184Adobe After Effects out-of-bounds read5.5CNA v3.10.3%2025-04-08Fix
CVE-2025-27183Adobe After Effects out-of-bounds write7.8CNA v3.10.3%2025-04-08Fix
CVE-2025-27182Adobe After Effects out-of-bounds write7.8CNA v3.10.3%2025-04-08Fix
CVE-2025-27085HPE Aruba Networking AOS web management interface path traversal4.9CNA v3.10.6%2025-04-08Fix
CVE-2025-27084HPE Aruba Networking AOS captive portal reflected cross-site scripting5.4CNA v3.10.3%2025-04-08Fix
CVE-2025-27083HPE Aruba Networking AOS Authenticated command injection7.2CNA v3.11.2%2025-04-08Fix
CVE-2025-27082HPE Aruba Networking AOS arbitrary file write7.2CNA v3.10.5%2025-04-08Fix
CVE-2025-27079HPE AOS-10 AP CLI OS command injection6.0CNA v3.10.2%2025-04-08
CVE-2025-27078HPE AOS-10 AP CLI OS command injection6.5CNA v3.10.4%2025-04-08
CVE-2025-26688Microsoft Virtual Hard Disk elevation of privilege7.8CNA v3.10.6%2025-04-08Fix
CVE-2025-26687Microsoft Office win32k elevation of privilege7.5CNA v3.11.1%2025-04-08Fix
CVE-2025-26686Microsoft Windows TCP/IP remote code execution7.5CNA v3.11.5%2025-04-08Exploit codeFix
CVE-2025-26682Microsoft ASP.NET Core and Visual Studio denial of service7.5CNA v3.11.7%2025-04-08Fix
CVE-2025-26681Microsoft Windows win32k elevation of privilege6.7CNA v3.10.6%2025-04-08Fix
CVE-2025-26680Microsoft Windows Standards-Based Storage Management service denial of service7.5CNA v3.12.0%2025-04-08Fix
CVE-2025-26679Microsoft Windows RPC Endpoint Mapper service elevation of privilege7.8CNA v3.10.6%2025-04-08Fix
CVE-2025-26678Microsoft Windows Defender Application Control security feature bypass8.4CNA v3.10.5%2025-04-08Fix
CVE-2025-26676Microsoft Windows Routing and Remote Access Service (RRAS) information disclosure6.5CNA v3.11.6%2025-04-08Fix
CVE-2025-26675Microsoft Windows subsystem for Linux elevation of privilege7.8CNA v3.10.6%2025-04-08Fix
CVE-2025-26674Microsoft Windows Media remote code execution7.8CNA v3.10.6%2025-04-08Fix
CVE-2025-26673Microsoft Windows Lightweight Directory Access Protocol (LDAP) denial of service7.5CNA v3.12.6%2025-04-08Fix
CVE-2025-26672Microsoft Windows Routing and Remote Access Service (RRAS) information disclosure6.5CNA v3.11.8%2025-04-08Fix
CVE-2025-26671Microsoft Windows Remote Desktop services remote code execution8.1CNA v3.11.3%2025-04-08Fix
CVE-2025-26670Microsoft Windows lightweight Directory Access Protocol (LDAP) client remote code execution8.1CNA v3.111.1%2025-04-08Fix
CVE-2025-26669Microsoft Windows Routing and Remote Access Service (RRAS) information disclosure8.8CNA v3.11.5%2025-04-08Fix
CVE-2025-26668Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution7.5CNA v3.11.2%2025-04-08Fix
CVE-2025-26667Microsoft Windows Routing and Remote Access Service (RRAS) information disclosure6.5CNA v3.11.8%2025-04-08Fix
CVE-2025-26666Microsoft Windows Media remote code execution7.8CNA v3.10.6%2025-04-08Fix
CVE-2025-26665Microsoft Windows upnphost.dll elevation of privilege7.0CNA v3.10.3%2025-04-08Fix
CVE-2025-26664Microsoft Windows Routing and Remote Access Service (RRAS) information disclosure6.5CNA v3.11.8%2025-04-08Fix
CVE-2025-26663Microsoft Windows Lightweight Directory Access Protocol (LDAP) remote code execution8.1CNA v3.11.9%2025-04-08Fix
CVE-2025-26657Information disclosure vulnerability in SAP KMC WPC5.3CNA v3.10.3%2025-04-08Fix
CVE-2025-26654Potential information disclosure vulnerability in SAP Commerce Cloud (Public Cloud)6.8CNA v3.10.2%2025-04-08Fix
CVE-2025-26653Cross-site scripting vulnerability in SAP NetWeaver Application Server ABAP4.7CNA v3.10.2%2025-04-08Fix
CVE-2025-26652Microsoft Windows Standards-Based Storage Management service denial of service7.5CNA v3.12.3%2025-04-08Fix
CVE-2025-26651Microsoft Windows Local Session Manager (LSM) denial of service6.5CNA v3.12.5%2025-04-08Fix
CVE-2025-26649Microsoft Windows Secure Channel elevation of privilege7.0CNA v3.10.4%2025-04-08Fix
CVE-2025-26648Microsoft Windows Kernel elevation of privilege7.8CNA v3.10.5%2025-04-08Fix
CVE-2025-26647Microsoft Windows Kerberos elevation of privilege8.8CNA v3.12.2%2025-04-08Fix
CVE-2025-26644Microsoft Windows Hello spoofing5.1CNA v3.10.5%2025-04-08Fix
CVE-2025-26642Microsoft Office remote code execution7.8CNA v3.10.8%2025-04-08Fix
CVE-2025-26641Microsoft Message Queuing (MSMQ) denial of service7.5CNA v3.12.2%2025-04-08Fix
CVE-2025-26640Microsoft Windows Digital Media elevation of privilege7.0CNA v3.10.5%2025-04-08Fix
CVE-2025-26639Microsoft Windows USB Print driver elevation of privilege7.8CNA v3.10.6%2025-04-08Fix
CVE-2025-26637Microsoft Windows BitLocker security feature bypass6.8CNA v3.10.8%2025-04-08Fix
CVE-2025-26635Microsoft Windows Hello security feature bypass6.5CNA v3.11.5%2025-04-08Fix
CVE-2025-26628Microsoft Azure Local Cluster information disclosure7.3CNA v3.11.4%2025-04-08Fix
CVE-2025-25254Fortinet FortiWeb path traversal6.8CNA v3.117.1%2025-04-08Fix
CVE-2025-25227Joomla Core MFA authentication bypass7.5CISA ADP v3.10.4%2025-04-08Exploit codeKCVFix
CVE-2025-25226Joomla Framework SQL injection vulnerability in quoteNameStr method of Database package9.8CISA ADP v3.10.5%2025-04-08Fix
CVE-2025-25013Elastic Defend Insertion of Sensitive Information into Log files6.5CNA v3.10.4%2025-04-08Fix
CVE-2025-25002Microsoft Azure Local Cluster information disclosure6.8CNA v3.11.1%2025-04-08Fix
CVE-2025-24447Adobe ColdFusion deserialization of untrusted data9.1CNA v3.12.1%2025-04-08Fix
CVE-2025-24446Adobe ColdFusion improper input validation9.1CNA v3.11.8%2025-04-08Fix
CVE-2025-24074Microsoft DWM Core library elevation of privilege7.8CNA v3.10.6%2025-04-08Fix
CVE-2025-24073Microsoft DWM Core library elevation of privilege7.8CNA v3.10.6%2025-04-08Fix
CVE-2025-24062Microsoft DWM Core library elevation of privilege7.8CNA v3.10.6%2025-04-08Fix
CVE-2025-24060Microsoft DWM Core library elevation of privilege7.8CNA v3.10.6%2025-04-08Fix
CVE-2025-24058Microsoft Windows DWM Core library elevation of privilege7.8CNA v3.10.6%2025-04-08Fix
CVE-2025-23186SAP NetWeaver Application Server ABAP RFC destination restriction information disclosure8.5CNA v3.10.5%2025-04-08Fix
CVE-2025-22871Request smuggling due to acceptance of invalid chunked data in net/http9.1CISA ADP v3.10.8%2025-04-08Fix
CVE-2025-22855Fortinet FortiClientEMS cross-site scripting2.6CNA v3.10.4%2025-04-08Fix
CVE-2025-22466Ivanti Endpoint Manager reflected cross-site scripting8.2CNA v3.11.1%2025-04-08Fix
CVE-2025-22465Ivanti Endpoint Manager reflected cross-site scripting6.1CNA v3.10.6%2025-04-08Fix
CVE-2025-22464Ivanti Endpoint Manager untrusted pointer dereference6.1CNA v3.10.2%2025-04-08Fix
CVE-2025-22461Ivanti Endpoint Manager SQL injection7.2CNA v3.11.3%2025-04-08Fix
CVE-2025-22459Ivanti Endpoint Manager improper certificate validation4.8CNA v3.10.3%2025-04-08Fix
CVE-2025-22458Ivanti Endpoint Manager DLL hijacking7.8CNA v3.10.4%2025-04-08Fix
CVE-2025-22017Linux kernel devlink resource allocation null pointer dereference5.5v3.10.2%2025-04-08Fix
CVE-2025-22016Linux kernel DPLL pin allocation null pointer dereference5.5v3.10.2%2025-04-08Fix
CVE-2025-22015Linux kernel shmem folio migration null pointer dereference7.8CNA v3.10.2%2025-04-08Fix
CVE-2025-22014Linux kernel pdr deadlock5.5v3.10.2%2025-04-08Fix
CVE-2025-22013Linux kernel KVM arm64 FPSIMD/SVE/SME state handling denial of service7.3CNA v3.10.2%2025-04-08Fix
CVE-2025-22012Linux kernel SDM845 SMMU pagetable walker configuration denial of service8.8CNA v3.10.1%2025-04-08Fix
CVE-2025-22011Linux kernel BCM2711 xHCI power domain denial of service5.5v3.10.2%2025-04-08Fix
CVE-2025-22010Linux kernel HNS RoCE driver page table allocation denial of service5.5v3.10.2%2025-04-08Fix
CVE-2025-22009Linux kernel dummy regulator driver null pointer dereference5.5v3.10.2%2025-04-08Fix
CVE-2025-22008Linux kernel dummy regulator driver vulnerability5.5v3.10.2%2025-04-08Fix
CVE-2025-21222Microsoft Windows Telephony service remote code execution8.8CNA v3.11.3%2025-04-08Fix
CVE-2025-21221Microsoft Windows Telephony service remote code execution8.8CNA v3.11.3%2025-04-08Fix
CVE-2025-21205Microsoft Windows Telephony service remote code execution8.8CNA v3.11.3%2025-04-08Fix
CVE-2025-21204Microsoft Windows Process Activation elevation of privilege7.8CNA v3.17.0%2025-04-08Fix
CVE-2025-21203Microsoft Windows Routing and Remote Access Service (RRAS) information disclosure6.5CNA v3.11.6%2025-04-08Fix
CVE-2025-21197Microsoft Windows NTFS information disclosure6.5CNA v3.13.2%2025-04-08Fix
CVE-2025-21191Microsoft Windows Local Security Authority (LSA) elevation of privilege7.0CNA v3.10.3%2025-04-08Fix
CVE-2025-21174Microsoft Windows Standards-Based Storage Management service denial of service7.5CNA v3.12.1%2025-04-08Fix
CVE-2025-20951Samsung Mobile Galaxy Store improper intent verification5.1CNA v3.10.1%2025-04-08Fix
CVE-2025-20950Samsung Mobile Samsung Notes implicit intent for sensitive communication4.0CNA v3.10.1%2025-04-08Fix
CVE-2025-20948Samsung Mobile Devices enrollment out-of-bounds read5.5CNA v3.10.2%2025-04-08Fix
CVE-2025-20947Samsung Mobile Devices improper permissions5.5CNA v3.10.2%2025-04-08Fix
CVE-2025-20946Samsung Galaxy Watch pairing specific bluetooth devices improper exception handling8.8CNA v3.10.3%2025-04-08Fix
CVE-2025-20945Samsung Galaxy Watch improper access control4.0CNA v3.10.2%2025-04-08Fix
CVE-2025-20944Samsung Mobile Devices parsing audio data in libsavsac.so out-of-bounds read6.2CNA v3.10.2%2025-04-08Fix
CVE-2025-20943Samsung Mobile Devices secfr trustlet out-of-bounds write6.4CNA v3.10.1%2025-04-08Fix
CVE-2025-20942Samsung Mobile Devices DeviceIdService improper intent verification4.4CNA v3.10.1%2025-04-08Fix
CVE-2025-20941Samsung Mobile Devices InputManager to SMR Apr-2025 Release improper access control6.2CNA v3.10.1%2025-04-08Fix
CVE-2025-20940Samsung Mobile Devices Samsung Device Health Manager service improper permissions4.0CNA v3.10.2%2025-04-08
CVE-2025-20939Samsung Galaxy Watch wireless download protocol improper authorization5.4CNA v3.10.2%2025-04-08Fix
CVE-2025-20938Samsung Mobile Devices improper access control5.5CNA v3.10.1%2025-04-08Fix
CVE-2025-20936Samsung Mobile Devices HDCP trustlet improper access control8.8CNA v3.10.2%2025-04-08Fix
CVE-2025-20935Samsung Mobile Devices improper permissions5.5CNA v3.10.2%2025-04-08
CVE-2025-20934Samsung Mobile Devices Sticker Center improper access control5.5CNA v3.10.1%2025-04-08Fix
CVE-2025-3437Motors WordPress plugin unauthorized access4.3CNA v3.10.3%2025-04-08Fix
CVE-2025-3436coreActivity: Activity Logging for WordPress plugin authenticated (Subscriber+) SQL injection6.5CNA v3.10.4%2025-04-08Fix
CVE-2025-3433Advanced Advertising System WordPress plugin open redirect6.1CNA v3.10.2%2025-04-08
CVE-2025-3432AAWEP Obfuscator WordPress plugin authenticated (Author+) stored cross-site scripting6.4CNA v3.10.2%2025-04-08
CVE-2025-3431ZoomSounds WordPress plugin arbitrary file read7.5CNA v3.10.4%2025-04-08
CVE-2025-34303DPrint Lite WordPress plugin authenticated (Admin+) SQL injection via printer_text4.9CNA v3.10.4%2025-04-08Fix
CVE-2025-34293DPrint Lite WordPress plugin authenticated (Admin+) SQL injection via material_text4.9CNA v3.10.4%2025-04-08Fix
CVE-2025-34283DPrint Lite WordPress plugin authenticated (Admin+) SQL injection via coating_text4.9CNA v3.10.4%2025-04-08Fix
CVE-2025-34273DPrint Lite WordPress plugin authenticated (Admin+) SQL injection via infill_text4.9CNA v3.10.4%2025-04-08Fix
CVE-2025-3416rust-openssl property parsing use-after-free3.7CNA v3.10.5%2025-04-08Fix
CVE-2025-3413opplus springboot-admin SysGeneratorController.java code deserialization8.8v3.10.5%2025-04-08
CVE-2025-3412mymagicpower Aias InferController.java server-side request forgery5.3CNA v4.00.4%2025-04-08
CVE-2025-3411mymagicpower Aias AsrController.java server-side request forgery5.3CNA v4.00.4%2025-04-08
CVE-2025-3410mymagicpower Aias LocalStorageController.java unrestricted upload8.8v3.10.5%2025-04-08
CVE-2025-3409Nothings stb stb_include_string stack-based overflow8.8v3.10.5%2025-04-08
CVE-2025-3408Nothings stb stb_dupreplace integer overflow8.8v3.10.5%2025-04-08
CVE-2025-3407stb stbhw_build_tileset_from_image function out-of-bounds read8.8v3.10.5%2025-04-08
CVE-2025-3406Nothings stb Header Array stbhw_build_tileset_from_image out-of-bounds6.5v3.10.6%2025-04-08
CVE-2025-3405FCJ Venture Builder appclientefiel HTTP GET Request ObterPedido resource injection5.3CNA v4.00.4%2025-04-08
CVE-2025-3403Vivotek NVR ND8422P/NVR ND9525P/NVR ND9541P HTML form sensitive information in source5.1CNA v4.00.4%2025-04-08
CVE-2025-3402Seeyon Zhiyuan Interconnect FE Collaborative Office Platform check.js%70 SQL injection7.5v3.10.5%2025-04-08
CVE-2025-3401ESAFENET CDG getLimitIPList.jsp SQL injection9.8v3.10.7%2025-04-08
CVE-2025-3400ESAFENET CDG UnChkMailApplication.jsp SQL injection9.8v3.10.7%2025-04-08
CVE-2025-3399ESAFENET CDG updateNotice.jsp SQL injection9.8v3.10.7%2025-04-08
CVE-2025-3398lenve VBlog WebSecurityConfig.java configure access control9.8v3.10.5%2025-04-08
CVE-2025-3397YzmCMS message.tpl cross-site scripting6.1v3.10.5%2025-04-08
CVE-2025-3393mrcen springboot-ucan-admin Personal settings interface index cross-site scripting5.1CNA v4.00.3%2025-04-08
CVE-2025-3392hailey888 oa_system Backend MailController.java save cross-site scripting6.1v3.10.3%2025-04-08
CVE-2025-3391hailey888 oa_system Backend AddrController. java outAddress cross-site scripting6.1v3.10.3%2025-04-08
CVE-2025-3390hailey888 oa_system Backend DaymanageController.java addandchangeday cross-site scripting6.1v3.10.3%2025-04-08
CVE-2025-3389hailey888 oa_system Backend InformManageController.java testMess cross-site scripting6.1v3.10.3%2025-04-08
CVE-2025-3364HGiga PowerStation SSH service vulnerability6.7CNA v3.10.2%2025-04-08Fix
CVE-2025-3363HGiga iSherlock OS command injection9.8CNA v3.11.3%2025-04-08Fix
CVE-2025-3362HGiga iSherlock OS command injection9.8CNA v3.11.3%2025-04-08Fix
CVE-2025-3361HGiga iSherlock OS command injection9.8CNA v3.11.3%2025-04-08Fix
CVE-2025-3289Local code execution vulnerability in Arena®8.5CNA v4.00.3%2025-04-08Fix
CVE-2025-3288Local code execution vulnerability in Arena®8.5CNA v4.00.3%2025-04-08Fix
CVE-2025-3287Local code execution vulnerability in Arena®8.5CNA v4.00.3%2025-04-08Fix
CVE-2025-3286Local code execution vulnerability in Arena®8.5CNA v4.00.3%2025-04-08Fix
CVE-2025-3285Local code execution vulnerability in Arena®8.5CNA v4.00.3%2025-04-08Fix
CVE-2025-3064WPFront User Role Editor WordPress plugin cross-site request forgery to privilege escalation8.8CNA v3.10.2%2025-04-08Fix
CVE-2025-2883Accept SagePay Payments Using Contact Form 7 WordPress plugin unauthenticated information exposure5.3CNA v3.10.4%2025-04-08Fix
CVE-2025-2882GreenPay(tm) by Green.Money - unauthenticated information exposure5.3CNA v3.10.4%2025-04-08Fix
CVE-2025-2876MelaPress Login Security monitor_admin_actions function missing authorization8.2v3.10.4%2025-04-08Fix
CVE-2025-2829Local code execution vulnerability in Arena®8.5CNA v4.00.3%2025-04-08Fix
CVE-2025-2808Motors Car Dealership and Classified Listings WordPress plugin stored cross-site scripting5.4CNA v3.10.2%2025-04-08Fix
CVE-2025-2807StylemixThemes Motors setup wizard plugin installer missing authorization8.8CNA v3.10.9%2025-04-08Exploit codeFix
CVE-2025-2568Vayu Blocks WordPress plugin unauthorized access5.3CNA v3.10.4%2025-04-08Exploit codeFix
CVE-2025-2526Streamit WordPress theme privilege escalation8.8CNA v3.10.5%2025-04-08Fix
CVE-2025-2525Streamit WordPress theme authenticated (Subscriber+) arbitrary file upload8.8CNA v3.11.0%2025-04-08Fix
CVE-2025-2519Streamit WordPress theme authenticated (Subscriber+) arbitrary file download6.5CNA v3.10.5%2025-04-08Fix
CVE-2025-2293Local code execution vulnerability in Arena®8.5CNA v4.00.3%2025-04-08Fix
CVE-2025-2288Local code execution vulnerability in Arena®8.5CNA v4.00.3%2025-04-08Fix
CVE-2025-2287Local code execution vulnerability in Arena®8.5CNA v4.00.3%2025-04-08Fix
CVE-2025-2286Local code execution vulnerability in Arena®8.5CNA v4.00.3%2025-04-08Fix
CVE-2025-2285Local code execution vulnerability in Arena®8.5CNA v4.00.3%2025-04-08Fix
CVE-2025-2004Simple WP Events WordPress plugin unauthenticated arbitrary file deletion9.1CNA v3.10.9%2025-04-08Fix
CVE-2025-1095IBM Personal Communications command execution8.8CNA v3.10.1%2025-04-08Fix
CVE-2025-0361Axis Communications AXIS OS observable discrepancy4.3CNA v3.10.3%2025-04-08Fix
CVE-2025-32409Ratta SuperNote A6 X2 Nomad relative path traversal8.1CNA v3.11.1%2025-04-07Fix
CVE-2025-32034Apollo Router Query Planner vulnerable to Excessive resource consumption7.5CNA v3.10.5%2025-04-07Fix
CVE-2025-32033Apollo Router Operation Limits vulnerable to Bypass via integer overflow7.5CNA v3.10.6%2025-04-07Fix
CVE-2025-32032Apollo Router Query Planner vulnerable to Excessive resource consumption via Optimization Bypass7.5CNA v3.10.6%2025-04-07Fix
CVE-2025-32031Apollo Gateway Query Planner vulnerable to Excessive resource consumption via Optimization Bypass7.5CNA v3.10.6%2025-04-07Fix
CVE-2025-32030Apollo Gateway Query Planner vulnerable to Excessive resource consumption7.5CNA v3.10.5%2025-04-07Fix
CVE-2025-32029ApelegHQ ts-asn1-der DER integer decoding infinite loop6.9CNA v4.00.2%2025-04-07Fix
CVE-2025-32014estree-util-value-to-estree allows prototype pollution in generated ESTree6.9CNA v4.00.4%2025-04-07Fix
CVE-2025-31496apollographql apollo-rs apollo-compiler Named Fragment Processing vulnerability7.5CNA v3.10.4%2025-04-07Fix
CVE-2025-31476tarteaucitron.js allows URL scheme injection via unfiltered inputs4.8CNA v3.10.4%2025-04-07Fix
CVE-2025-31475tarteaucitron.js allows prototype pollution via custom text injection5.5CNA v3.10.3%2025-04-07Fix
CVE-2025-31175Huawei HarmonyOS deserialization mismatch vulnerability in the DSoftBus module8.4CNA v3.10.2%2025-04-07Fix
CVE-2025-31174Huawei HarmonyOS path traversal vulnerability in the DFS module6.8CNA v3.10.4%2025-04-07Fix
CVE-2025-31173Huawei HarmonyOS memory write permission bypass vulnerability in the kernel futex module8.8CNA v3.10.1%2025-04-07Fix
CVE-2025-31172Huawei HarmonyOS memory write permission bypass vulnerability in the kernel futex module7.8CNA v3.10.1%2025-04-07Fix
CVE-2025-31171Huawei HarmonyOS file read permission bypass vulnerability in the kernel file system module6.8CNA v3.10.1%2025-04-07Fix
CVE-2025-31170Huawei HarmonyOS access control vulnerability in the security verification module8.4CNA v3.10.2%2025-04-07Fix
CVE-2025-31138tarteaucitron.js allows UI manipulation via unrestricted CSS injection5.5CNA v3.10.3%2025-04-07Fix
CVE-2025-30473Apache Airflow Common SQL Provider: Remote code execution via SQL injection8.8CISA ADP v3.10.9%2025-04-07Fix
CVE-2025-30373Graylog HTTP input authentication improper authorization6.5CNA v3.10.3%2025-04-07Fix
CVE-2025-30195A crafted zone can lead to an illegal memory access in the PowerDNS Recursor7.5CNA v3.10.8%2025-04-07Fix
CVE-2025-29769libvips heifsave operation heap-based buffer overflow8.5CNA v4.00.3%2025-04-07Fix
CVE-2025-29594CS2-WeaponPaints-Website errorpage.php cross-site scripting6.1CISA ADP v3.10.2%2025-04-07
CVE-2025-29482struktur libheif buffer overflow6.2CISA ADP v3.10.2%2025-04-07Fix
CVE-2025-29481Libbpf buffer overflow6.2CISA ADP v3.10.2%2025-04-07Fix
CVE-2025-29480OSGeo gdal buffer overflow5.5CISA ADP v3.10.2%2025-04-07Fix
CVE-2025-29478treasure-data Fluent Bit denial of service5.5CISA ADP v3.10.2%2025-04-07
CVE-2025-29087SQLite integer overflow7.5NVD v3.10.5%2025-04-07Fix
CVE-2025-28413RuoYi privilege escalation9.8CISA ADP v3.10.6%2025-04-07
CVE-2025-28412RuoYi privilege escalation9.8CISA ADP v3.10.6%2025-04-07
CVE-2025-28411RuoYi privilege escalation9.8CISA ADP v3.10.6%2025-04-07
CVE-2025-28410RuoYi privilege escalation9.8CISA ADP v3.10.6%2025-04-07
CVE-2025-28409RuoYi privilege escalation8.8CISA ADP v3.10.6%2025-04-07
CVE-2025-28408RuoYi privilege escalation9.8CISA ADP v3.10.6%2025-04-07
CVE-2025-28407RuoYi privilege escalation8.8CISA ADP v3.10.6%2025-04-07
CVE-2025-28406RuoYi privilege escalation9.8CISA ADP v3.10.6%2025-04-07
CVE-2025-28405RuoYi privilege escalation9.8CISA ADP v3.10.6%2025-04-07
CVE-2025-28403RuoYi privilege escalation7.2CISA ADP v3.10.6%2025-04-07
CVE-2025-28402RuoYi privilege escalation9.8CISA ADP v3.10.6%2025-04-07
CVE-2025-28401RuoYi improper privilege management6.7CISA ADP v3.10.3%2025-04-07
CVE-2025-28400RuoYi improper privilege management6.7CISA ADP v3.10.4%2025-04-07
CVE-2025-27686Dell Unisphere for PowerMax LDAP injection2.7CNA v3.10.3%2025-04-07Fix
CVE-2025-27534OpenHarmony arkcompiler_ets_runtime has an out-of-bounds read3.3CNA v3.10.1%2025-04-07Fix
CVE-2025-25057OpenHarmony third_party_NuttX has a memory leak3.3CNA v3.10.1%2025-04-07Fix
CVE-2025-24304OpenHarmony arkcompiler_ets_runtime has an out-of-bounds write3.3CNA v3.10.1%2025-04-07Fix
CVE-2025-22851OpenHarmony Liteos_A has an integer overflow6.5CNA v3.10.2%2025-04-07Fix
CVE-2025-22842OpenHarmony arkcompiler_ets_runtime has an out-of-bounds read3.3CNA v3.10.1%2025-04-07Fix
CVE-2025-22452OpenHarmony arkcompiler_ets_runtime has an out-of-bounds read3.3CNA v3.10.1%2025-04-07Fix
CVE-2025-21448Qualcomm Snapdragon buffer over-read in WLAN firmware7.5CNA v3.10.3%2025-04-07Fix
CVE-2025-21447Qualcomm Snapdragon improper validation of array index in Computer Vision7.8CNA v3.10.1%2025-04-07Fix
CVE-2025-21443Qualcomm Snapdragon buffer copy without checking size of input in Automotive Vehicle Networks7.8CNA v3.10.1%2025-04-07Fix
CVE-2025-21442Qualcomm Snapdragon integer overflow to buffer overflow in Automotive Vehicle Networks7.8CNA v3.10.1%2025-04-07Fix
CVE-2025-21441Qualcomm Snapdragon out-of-bounds read in Windows WLAN host7.8CNA v3.10.1%2025-04-07Fix
CVE-2025-21440Qualcomm Snapdragon out-of-bounds read in Windows WLAN host7.8CNA v3.10.1%2025-04-07Fix
CVE-2025-21439Qualcomm Snapdragon out-of-bounds read in Windows WLAN host7.8CNA v3.10.1%2025-04-07Fix
CVE-2025-21438Qualcomm Snapdragon out-of-bounds read in Windows WLAN host7.8CNA v3.10.1%2025-04-07Fix
CVE-2025-21437Qualcomm Snapdragon use-after-free in Automotive Linux OS7.8CNA v3.10.1%2025-04-07Fix
CVE-2025-21436Qualcomm Snapdragon use-after-free in DSP service7.8CNA v3.10.1%2025-04-07Fix
CVE-2025-21435Qualcomm Snapdragon buffer over-read in WLAN Host Communication7.5CNA v3.10.3%2025-04-07Fix
CVE-2025-21434Qualcomm Snapdragon buffer over-read in WLAN host7.5CNA v3.10.3%2025-04-07Fix
CVE-2025-21431Qualcomm Snapdragon time-of-check time-of-use (TOCTOU) race condition in Automotive OS Platform5.5CNA v3.10.1%2025-04-07Fix
CVE-2025-21430Qualcomm Snapdragon buffer over-read in WLAN host7.5CNA v3.10.3%2025-04-07Fix
CVE-2025-21429Qualcomm Snapdragon buffer over-read in WLAN host7.5CNA v3.10.3%2025-04-07Fix
CVE-2025-21428Qualcomm Snapdragon buffer over-read in WLAN host7.5CNA v3.10.3%2025-04-07Fix
CVE-2025-21425Qualcomm Snapdragon improper access control in Automotive Linux OS7.3CNA v3.10.1%2025-04-07Fix
CVE-2025-21423Qualcomm Snapdragon improper validation of array index in Display7.8CNA v3.10.1%2025-04-07Fix
CVE-2025-21421Qualcomm Snapdragon buffer over-read in Display7.8CNA v3.10.1%2025-04-07Fix
CVE-2025-20664MediaTek chipsets uncaught exception in wlan7.5CISA ADP v3.10.5%2025-04-07Fix
CVE-2025-20663MediaTek chipsets uncaught exception in wlan7.5CISA ADP v3.10.5%2025-04-07Fix
CVE-2025-20662MediaTek MT9972 out-of-bounds read in drmserver6.7CISA ADP v3.10.1%2025-04-07Fix
CVE-2025-20661MediaTek MT9972 out-of-bounds read in drmserver6.7CISA ADP v3.10.1%2025-04-07Fix
CVE-2025-20660MediaTek MT9972 out-of-bounds read in drmserver6.7CISA ADP v3.10.1%2025-04-07Fix
CVE-2025-20659MediaTek chipsets out-of-bounds read in Modem6.5CISA ADP v3.10.4%2025-04-07Fix
CVE-2025-20658MediaTek chipsets out-of-bounds write in DA6.0CISA ADP v3.10.1%2025-04-07Fix
CVE-2025-20657MediaTek chipsets out-of-bounds write in vdec6.7CISA ADP v3.10.1%2025-04-07Fix
CVE-2025-20656MediaTek chipsets out-of-bounds write in DA6.8CISA ADP v3.10.1%2025-04-07Fix
CVE-2025-20655MediaTek MT9972 out-of-bounds read in keymaster5.3CISA ADP v3.10.1%2025-04-07Fix
CVE-2025-20654MediaTek chipsets out-of-bounds write in wlan9.8CISA ADP v3.10.8%2025-04-07Fix
CVE-2025-20102OpenHarmony arkcompiler_ets_runtime has an out-of-bounds read3.3CNA v3.10.1%2025-04-07Fix
CVE-2025-3426Philips IntelliSpace Portal use of default hard-coded credentials7.2CNA v4.00.2%2025-04-07
CVE-2025-3425Philips IntelliSpace Portal unauthenticated remote code execution via .NET deserialization7.3CNA v4.00.3%2025-04-07
CVE-2025-3424Philips IntelliSpace Portal arbitrary file read in insecure .NET Remoting TCP Channel7.7CNA v4.00.2%2025-04-07
CVE-2025-3388hailey888 oa_system Frontend LoginsController.java loginCheck cross-site scripting6.1v3.10.4%2025-04-07
CVE-2025-3387renrenio renren-security JSON cross-site scripting5.4v3.10.3%2025-04-07
CVE-2025-3386LinZhaoguan pb-cms Friendship Link admin#links cross-site scripting4.8v3.10.3%2025-04-07
CVE-2025-3385LinZhaoguan pb-cms Classification Management page cross-site scripting4.8v3.10.3%2025-04-07
CVE-2025-33841000 Projects Human Resource Management System employee.php SQL injection9.8v3.10.6%2025-04-07
CVE-2025-3383SourceCodester Web-based Pharmacy Product Management System search_sales.php SQL injection9.8v3.10.6%2025-04-07
CVE-2025-3382joey-zhou xiaozhi-esp32-server-java update SQL injection5.3CNA v4.00.3%2025-04-07
CVE-2025-3381zhangyanbo2007 youkefu file upload WebIMController.java path traversal9.8v3.11.1%2025-04-07
CVE-2025-3380PCMan FTP Server FEAT command buffer overflow9.8v3.10.8%2025-04-07
CVE-2025-3379PCMan FTP Server EPSV command buffer overflow9.8v3.10.8%2025-04-07
CVE-2025-3378PCMan FTP Server EPRT command buffer overflow9.8v3.10.8%2025-04-07
CVE-2025-3377PCMan FTP Server ENC command buffer overflow9.8v3.10.8%2025-04-07
CVE-2025-3376PCMan FTP Server CONF command buffer overflow9.8v3.10.8%2025-04-07
CVE-2025-3375PCMan FTP Server CDUP command buffer overflow9.8v3.10.8%2025-04-07
CVE-2025-3374PCMan FTP Server CCC command buffer overflow9.8v3.10.8%2025-04-07
CVE-2025-3373PCMan FTP Server site CHMOD command buffer overflow9.8v3.10.8%2025-04-07
CVE-2025-3372PCMan FTP Server MKDIR command buffer overflow9.8v3.10.8%2025-04-07
CVE-2025-3371PCMan FTP Server delete command buffer overflow9.8v3.10.8%2025-04-07
CVE-2025-3370PHPGurukul Men Salon Management System admin-profile.php SQL injection9.8v3.10.6%2025-04-07
CVE-2025-3369xxyopen Novel-Plus list SQL injection9.8v3.10.6%2025-04-07
CVE-2025-3360GLib ISO 8601 timestamp parsing integer overflow3.7CNA v3.10.5%2025-04-07Fix
CVE-2025-3359Red Hat Enterprise Linux 6 gnuplot: Segmentation fault via io_str_init_static_internal function6.2CNA v3.10.2%2025-04-07Fix
CVE-2025-3353PHPGurukul Men Salon Management System add-services.php SQL injection6.9CNA v4.00.5%2025-04-07
CVE-2025-3352PHPGurukul Old Age Home Management System edit-scdetails.php SQL injection9.8v3.10.5%2025-04-07
CVE-2025-3351PHPGurukul Old Age Home Management System login.php SQL injection9.8v3.10.5%2025-04-07
CVE-2025-3350PHPGurukul Old Age Home Management System view-enquiry.php SQL injection9.8v3.10.6%2025-04-07
CVE-2025-3349PCMan FTP Server SYST command buffer overflow9.8v3.10.8%2025-04-07
CVE-2025-3348code-projects Patient Record Management System edit_dpatient.php SQL injection8.8v3.10.5%2025-04-07
CVE-2025-3347code-projects Patient Record Management System dental_pending.php SQL injection8.8v3.10.5%2025-04-07
CVE-2025-3346Tenda AC7 SetPptpServerCfg formSetPPTPServer buffer overflow8.7CNA v4.07.7%2025-04-07Emerging Threats
CVE-2025-3345codeprojects Online Restaurant Management System combo.php SQL injection9.8v3.10.6%2025-04-07
CVE-2025-3344codeprojects Online Restaurant Management System assign_save.php SQL injection9.8v3.10.6%2025-04-07
CVE-2025-3343codeprojects Online Restaurant Management System reservation_update.php SQL injection9.8v3.10.6%2025-04-07
CVE-2025-3342codeprojects Online Restaurant Management System payment_save.php SQL injection9.8v3.10.6%2025-04-07
CVE-2025-3341codeprojects Online Restaurant Management System reservation_view.php SQL injection9.8v3.10.6%2025-04-07
CVE-2025-3340codeprojects Online Restaurant Management System combo_update.php SQL injection9.8v3.10.6%2025-04-07
CVE-2025-3339codeprojects Online Restaurant Management System user_update.php SQL injection9.8v3.10.6%2025-04-07
CVE-2025-3338codeprojects Online Restaurant Management System user_save.php SQL injection9.8v3.10.6%2025-04-07
CVE-2025-3337codeprojects Online Restaurant Management System member_update.php SQL injection6.9CNA v4.00.5%2025-04-07
CVE-2025-3336codeprojects Online Restaurant Management System member_save.php SQL injection6.9CNA v4.00.5%2025-04-07
CVE-2025-3335codeprojects Online Restaurant Management System category_update.php SQL injection6.9CNA v4.00.5%2025-04-07
CVE-2025-3334codeprojects Online Restaurant Management System category_save.php SQL injection9.8v3.10.6%2025-04-07
CVE-2025-3333codeprojects Online Restaurant Management System menu_update.php SQL injection9.8v3.10.6%2025-04-07
CVE-2025-3332codeprojects Online Restaurant Management System menu_save.php SQL injection9.8v3.10.6%2025-04-07
CVE-2025-3331codeprojects Online Restaurant Management System payment_save.php SQL injection9.8v3.10.6%2025-04-07
CVE-2025-3330codeprojects Online Restaurant Management System reservation_save.php SQL injection9.8v3.10.6%2025-04-07
CVE-2025-3329Consumer Comanda Mobile Restaurant Order cleartext transmission2.3CNA v4.00.3%2025-04-07
CVE-2025-3328Tenda AC1206 fast_setting_wifi_set form_fast_setting_wifi_set buffer overflow8.7CNA v4.07.6%2025-04-07Emerging Threats
CVE-2025-3327iteaj iboot 物联网网关 file upload batch cross-site scripting6.1v3.10.4%2025-04-07
CVE-2025-3326iteaj iboot 物联网网关 file upload upload cross-site scripting5.1CNA v4.00.4%2025-04-07
CVE-2025-3248Langflow missing authentication9.8NVD v3.1100.0%2025-04-07KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix
CVE-2025-2251Red Hat JBoss Enterprise Application Platform JBoss Marshalling deserialization of untrusted data6.2CNA v3.11.0%2025-04-07Fix
CVE-2025-0942Jalios JPlatform 10 SP6 Record Chooser SQL injection8.6CNA v3.10.4%2025-04-07Fix
CVE-2025-0050Mali GPU Userspace Driver allows an out-of-bounds access5.9CISA ADP v3.10.2%2025-04-07Fix
CVE-2025-32370Kentico Xperience hidden functionality9.8v3.11.5%2025-04-06Exploit codeFix
CVE-2025-32369Kentico Xperience cross-site scripting5.4v3.10.3%2025-04-06Fix
CVE-2025-32013LNbits Lightning Network Payment System vulnerable to server-side request forgery9.3CNA v4.00.6%2025-04-06Exploit codeFix
CVE-2025-31492mod_auth_openidc allows OIDCProviderAuthRequestMethod POSTs to leak protected data8.2CNA v4.00.6%2025-04-06Fix
CVE-2025-31488Hex-Dragon Plain Craft Launcher custom homepage improper input validation4.9CNA v4.00.2%2025-04-06Fix
CVE-2025-3325iteaj iboot 物联网网关 Admin Password pwd access control5.3CNA v4.00.4%2025-04-06
CVE-2025-3324Godcheese/code-projects Nimrod FileRestController.java unrestricted upload8.8v3.10.5%2025-04-06
CVE-2025-3323Godcheese/code-projects Nimrod ViewMenuCategoryRestController.java searchAllByName SQL injection8.8v3.10.6%2025-04-06
CVE-2025-3318Kenj_Frog 肯尼基蛙 company-financial-management 公司财务管理系统 SQL injection5.3CNA v4.00.3%2025-04-06
CVE-2025-3317fumiao opencms dataPage.jsp path traversal5.3v3.10.6%2025-04-06
CVE-2025-3316PHPGurukul Men Salon Management System search-invoices.php SQL injection9.8v3.10.6%2025-04-06
CVE-2025-3315SourceCodester Apartment Visitor Management System view-report.php SQL injection9.8v3.10.6%2025-04-06
CVE-2025-3314SourceCodester Apartment Visitor Management System forgotpw.php SQL injection9.8v3.10.6%2025-04-06
CVE-2025-3313PHPGurukul Men Salon Management System add-customer.php SQL injection9.8v3.10.6%2025-04-06
CVE-2025-3312PHPGurukul Men Salon Management System add-customer-services.php SQL injection9.8v3.10.6%2025-04-06
CVE-2025-3311PHPGurukul Men Salon Management System about-us.php SQL injection9.8v3.10.6%2025-04-06
CVE-2025-3310code-projects Blood Bank Management System delete.php SQL injection9.8v3.10.6%2025-04-06
CVE-2025-3309code-projects Blood Bank Management System campsdetails.php SQL injection9.8v3.10.6%2025-04-06
CVE-2025-3308code-projects Blood Bank Management System viewrequest.php SQL injection9.8v3.10.6%2025-04-06
CVE-2025-3307code-projects Blood Bank Management System reset.php SQL injection9.8v3.10.6%2025-04-06
CVE-2025-3306code-projects Blood Bank Management System don.php SQL injection9.8v3.10.6%2025-04-06
CVE-2025-2260Eclipse ThreadX NetX Duo HTTP component server denial of service7.1CNA v4.00.9%2025-04-06Fix
CVE-2025-2259Eclipse ThreadX NetX Duo component HTTP server single PUT request integer underflow5.3CNA v4.00.9%2025-04-06Fix
CVE-2025-2258Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflow5.3CNA v4.00.9%2025-04-06Fix
CVE-2025-1264Broken Link Checker by AIOSEO WordPress plugin authenticated (Contributor+) SQL injection6.5CNA v3.10.5%2025-04-06Fix
CVE-2025-32366ConnMan improper length parameter handling4.8CNA v3.10.4%2025-04-05Fix
CVE-2025-32365Freedesktop Poppler out-of-bounds read7.1v3.10.2%2025-04-05Fix
CVE-2025-32364Freedesktop Poppler integer overflow5.5v3.10.3%2025-04-05Fix
CVE-2025-32360zammad resource leak8.1v3.10.2%2025-04-05Fix
CVE-2025-32359zammad client-side enforcement of server-side security8.8v3.10.3%2025-04-05Fix
CVE-2025-32358zammad server-side request forgery4.1v3.10.3%2025-04-05Fix
CVE-2025-32357zammad authentication bypass4.3v3.10.3%2025-04-05Fix
CVE-2025-32352ZendTo lib/NSSAuthenticator.php type confusion4.8CNA v3.10.3%2025-04-05Fix
CVE-2025-30401Facebook WhatsApp Desktop spoofing6.7CISA ADP v3.121.0%2025-04-05Fix
CVE-2025-33051902756969/code-projects IKUN_Library Borrow MvcConfig.java addInterceptors access control5.3CNA v4.00.4%2025-04-05
CVE-2025-3304code-projects Patient Record Management System dental_not.php SQL injection8.8v3.10.4%2025-04-05
CVE-2025-3303code-projects Patient Record Management System birthing_record.php SQL injection7.5v3.10.5%2025-04-05
CVE-2025-3299PHPGurukul Men Salon Management System appointment.php SQL injection6.9CNA v4.00.5%2025-04-05
CVE-2025-3298SourceCodester Online Eyewear Shop Registration Master.php access control5.3CNA v4.00.4%2025-04-05
CVE-2025-3297SourceCodester Online Eyewear Shop Master.php cross-site scripting5.1CNA v4.00.4%2025-04-05
CVE-2025-3296SourceCodester Online Eyewear Shop Users.php SQL injection5.3CNA v4.00.4%2025-04-05
CVE-2025-2941glenwpcoder Drag and Drop Multiple File Upload for WooCommerce path traversal9.8CNA v3.11.7%2025-04-05Fix
CVE-2025-2933Email Notifications for Updates WordPress plugin unauthorized access8.8CNA v3.10.4%2025-04-05Fix
CVE-2025-2889Link Library WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-04-05Fix
CVE-2025-2789MultiVendorX table rate shipping deletion missing authorization6.5v3.10.4%2025-04-05Fix
CVE-2025-2544AI Content Pipelines WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2025-04-05
CVE-2025-1500IBM Maximo Application Suite file upload5.5CNA v3.10.3%2025-04-05Fix
CVE-2025-1233Lafka WordPress plugin missing authorization to authenticated (Subscriber+) theme option update4.3CNA v3.10.2%2025-04-05
CVE-2025-0839ZoomSounds WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode5.4v3.10.2%2025-04-05
CVE-2025-0810Read More and Accordion WordPress plugin cross-site request forgery to local file inclusion7.5CNA v3.10.2%2025-04-05Fix
CVE-2025-32280WP Project Manager WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2025-04-04Fix
CVE-2025-32278Table Block by RioVizual WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-04Fix
CVE-2025-32277RepairBuddy WordPress plugin broken access control4.3CNA v3.10.2%2025-04-04Fix
CVE-2025-32276Administrator Z WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-04Fix
CVE-2025-32274WP w3all phpBB WordPress plugin axew3 cross-site request forgery4.3CNA v3.10.2%2025-04-04Fix
CVE-2025-32273Freetobook Responsive Widget WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-04Fix
CVE-2025-32272Wishlist WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-04
CVE-2025-32271Woocommerce Role Pricing WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-04
CVE-2025-32270Broadstreet WordPress plugin cross-site request forgery (CSRF) to settings Change4.3CNA v3.10.2%2025-04-04Fix
CVE-2025-32269CRM Perks WP Zendesk for Contact Form 7 cross-site request forgery4.3CNA v3.10.2%2025-04-04Fix
CVE-2025-32268QR Code Tag for WC WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-04
CVE-2025-32267WP to Hootsuite WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-04Fix
CVE-2025-32266404 Image Redirection (Replace Broken Images) WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-04Fix
CVE-2025-32265JobWP WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-04Fix
CVE-2025-32264UltraAddons Elementor Addons WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-04
CVE-2025-32263Sequential Order Numbers for WooCommerce WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-04Fix
CVE-2025-32262RDP Wiki Embed WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-04
CVE-2025-32261Advanced All in One Admin Search by WP Spotlight WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2025-04-04Fix
CVE-2025-32258Simple Website Logo WordPress plugin broken access control5.3CNA v3.10.3%2025-04-04
CVE-2025-322571 Click WordPress Migration plugin sensitive data exposure5.3CNA v3.10.8%2025-04-04NucleiFix
CVE-2025-32256SurveyJS WordPress plugin broken access control5.3CNA v3.10.4%2025-04-04Fix
CVE-2025-32255StaffList WordPress plugin sensitive data exposure5.3CNA v3.10.5%2025-04-04
CVE-2025-32254WPBookit WordPress plugin broken access control5.3v3.10.4%2025-04-04Fix
CVE-2025-32253Course Booking System WordPress plugin broken access control5.3CNA v3.10.6%2025-04-04Fix
CVE-2025-32252WP Genealogy WordPress plugin broken access control5.3CNA v3.10.5%2025-04-04
CVE-2025-32251Jetpack Feedback Exporter WordPress plugin sensitive data exposure5.3CNA v3.10.5%2025-04-04
CVE-2025-32250Rollbar WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.2%2025-04-04Fix
CVE-2025-32249DirectoryPress WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.2%2025-04-04Fix
CVE-2025-32248SwiftXR (3D/AR/VR) Viewer WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.2%2025-04-04Fix
CVE-2025-32247AI Content Creator WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.2%2025-04-04Fix
CVE-2025-322461-Click Backup and Restore Database WordPress plugin broken access control5.4CNA v3.10.5%2025-04-04
CVE-2025-32241Official CleverReach WooCommerce Integration WordPress plugin CSRF to settings Change6.5CNA v3.10.3%2025-04-04Fix
CVE-2025-32239Social Share Buttons and Analytics WordPress plugin broken access control4.3CNA v3.10.4%2025-04-04
CVE-2025-32238Online Booking and Scheduling Calendar for WordPress by vcita plugin sensitive data exposure4.3CNA v3.10.5%2025-04-04Fix
CVE-2025-32237MasterStudy LMS WordPress plugin broken access control4.3CNA v3.10.4%2025-04-04Fix
CVE-2025-32235MP3 Audio Player for Music, Radio and Podcast by Sonaar WordPress plugin missing authorization4.3CNA v3.10.4%2025-04-04Fix
CVE-2025-32234AdMail WordPress plugin broken access control4.3CNA v3.10.4%2025-04-04
CVE-2025-32233Revive.so WordPress plugin broken access control4.3CNA v3.10.4%2025-04-04Fix
CVE-2025-32232StaffList WordPress plugin broken access control4.3CNA v3.10.4%2025-04-04
CVE-2025-32231Bookingor WordPress plugin broken access control4.3CNA v3.10.4%2025-04-04Fix
CVE-2025-32229Variable Inspector WordPress plugin broken access control4.3CNA v3.10.4%2025-04-04Fix
CVE-2025-32226Display product variations dropdown on shop page WordPress plugin broken access control4.3CNA v3.10.4%2025-04-04Fix
CVE-2025-32225WP Event Manager WordPress plugin broken access control5.3CNA v3.10.5%2025-04-04Fix
CVE-2025-32224Privyr CRM WordPress plugin broken access control5.4CNA v3.10.5%2025-04-04Fix
CVE-2025-32220Salon booking system WordPress plugin broken access control8.8NVD v3.10.5%2025-04-04
CVE-2025-32219eaSYNC WordPress plugin broken access control5.4CNA v3.10.5%2025-04-04Fix
CVE-2025-32218TableOn WordPress plugin broken access control5.4CNA v3.10.5%2025-04-04Fix
CVE-2025-32217Ai Image Alt Text Generator for WP WordPress plugin broken access control5.4CNA v3.10.5%2025-04-04Fix
CVE-2025-32207Ni WooCommerce Cost Of Goods WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-04Fix
CVE-2025-32204Split Test For Elementor WordPress plugin SQL injection7.6CNA v3.10.6%2025-04-04Fix
CVE-2025-32203Falling things WordPress plugin SQL injection7.6CNA v3.10.6%2025-04-04Fix
CVE-2025-32201Xpro Theme Builder WordPress plugin broken access control4.3CNA v3.10.5%2025-04-04Fix
CVE-2025-32197Piotnet Addons For Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-04
CVE-2025-32196News Kit Elementor Addons WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-04
CVE-2025-32195Ecwid Shopping Cart WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-04Fix
CVE-2025-32194LA-Studio Element Kit for Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-04Fix
CVE-2025-32193Simple WP Events WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-04Fix
CVE-2025-32192Ultra Addons Lite for Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-04Fix
CVE-2025-32191News Element Elementor Blog Magazine WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-04
CVE-2025-32190Musician's Pack For Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-04
CVE-2025-32189BWD Elementor Addons WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-04
CVE-2025-32188Advanced Woo Labels WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-04Fix
CVE-2025-32187Administrator Z WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-04
CVE-2025-32186Turbo Addons for Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-04Fix
CVE-2025-32185Colibri Page Builder WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2025-04-04Fix
CVE-2025-32184Ultimate Store Kit Elementor Addons WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-04Fix
CVE-2025-32183Video Playlist For YouTube WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-04
CVE-2025-32182Spider Elements Addons for Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-04Fix
CVE-2025-32181Search, Filters and Merchandising for WooCommerce WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-04Fix
CVE-2025-32179Maps for WP WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-04Fix
CVE-2025-321786Storage Rentals WordPress plugin broken access control5.4CNA v3.10.5%2025-04-04
CVE-2025-32177Embed Chessboard WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-04
CVE-2025-32176Gallery Blocks with Lightbox WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-04Fix
CVE-2025-32175VK Filter Search WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-04Fix
CVE-2025-32174Tockify Events Calendar WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-04Fix
CVE-2025-32173B Blocks WordPress plugin stored cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-04Fix
CVE-2025-32172YaMaps for WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-04Fix
CVE-2025-32171Table Block by Tableberg WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-04Fix
CVE-2025-32170Motors WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-04Fix
CVE-2025-32169Showeblogin Social WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-04
CVE-2025-32168Gutenify WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-04Fix
CVE-2025-32167SurveyJS WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-04Fix
CVE-2025-32166Emma for WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-04
CVE-2025-32165Doppler Forms WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-04Fix
CVE-2025-32163Xpro Elementor Addons WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-04Fix
CVE-2025-32162Chamber Dashboard Business Directory WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-04
CVE-2025-32161Arkhe Blocks WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.4%2025-04-04
CVE-2025-32159Radius Blocks WordPress plugin local file inclusion7.5CNA v3.11.0%2025-04-04
CVE-2025-32157Sparkle Elementor Kit WordPress plugin local file inclusion7.5CNA v3.11.1%2025-04-04
CVE-2025-32156Just Post Preview Widget WordPress plugin local file inclusion7.5CNA v3.11.1%2025-04-04
CVE-2025-32155Beds24 Online Booking WordPress plugin local file inclusion7.5CNA v3.10.9%2025-04-04Fix
CVE-2025-32154Catch Dark Mode WordPress plugin local file inclusion8.8v3.11.0%2025-04-04Fix
CVE-2025-32153VG WooCarousel WordPress plugin local file inclusion7.5CNA v3.11.1%2025-04-04
CVE-2025-32152Slider a SlidersPack WordPress plugin local file inclusion7.5CNA v3.11.1%2025-04-04Fix
CVE-2025-32151BuddyForms WordPress plugin local file inclusion8.8NVD v3.11.0%2025-04-04Fix
CVE-2025-32150Real Estate Manager WordPress plugin local file inclusion7.5CNA v3.11.1%2025-04-04
CVE-2025-32149teachPress WordPress plugin SQL injection8.8v3.10.5%2025-04-04Fix
CVE-2025-32148Daisycon prijsvergelijkers WordPress plugin SQL injection8.5CNA v3.10.5%2025-04-04Fix
CVE-2025-32147Easy WP Optimizer WordPress plugin broken access control8.8CNA v3.10.5%2025-04-04
CVE-2025-32146JS Job Manager WordPress plugin local file inclusion8.8CNA v3.10.8%2025-04-04
CVE-2025-32142Motors WordPress plugin local file inclusion8.8CNA v3.10.8%2025-04-04Fix
CVE-2025-32141MasterStudy LMS WordPress plugin local file inclusion8.8CNA v3.10.7%2025-04-04Fix
CVE-2025-32138Easy Google Maps WordPress plugin XML external entity6.6CNA v3.10.5%2025-04-04Fix
CVE-2025-32137s2Member WordPress plugin local file inclusion4.9CNA v3.10.8%2025-04-04Fix
CVE-2025-32136ActiveCampaign WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2025-04-04Fix
CVE-2025-32135Split Test For Elementor WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2025-04-04Fix
CVE-2025-32134URL Shortify WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2025-04-04Fix
CVE-2025-32133Secure Copy Content Protection and Content Locking WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2025-04-04Fix
CVE-2025-32132FunnelCockpit WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2025-04-04Fix
CVE-2025-32131Social Intents WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2025-04-04
CVE-2025-32130Posts Footer Manager WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2025-04-04Fix
CVE-2025-32129Welcome Bar WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.4%2025-04-04Fix
CVE-2025-32127onOffice for WP-Websites WordPress plugin SQL injection7.6CNA v3.10.6%2025-04-04Fix
CVE-2025-32126Pay with Contact Form 7 WordPress plugin SQL injection7.6CNA v3.10.6%2025-04-04
CVE-2025-32125Silvasoft boekhouden WordPress plugin SQL injection7.6CNA v3.10.6%2025-04-04Fix
CVE-2025-32124Behance Portfolio Manager WordPress plugin SQL injection7.6CNA v3.10.6%2025-04-04Fix
CVE-2025-32122uListing WordPress plugin SQL injection7.6CNA v3.10.6%2025-04-04
CVE-2025-32121Video and Photo Gallery for Ultimate Member WordPress plugin SQL injection7.6CNA v3.10.6%2025-04-04
CVE-2025-32120Easy Query WP Query Builder WordPress plugin SQL injection7.6CNA v3.10.6%2025-04-04
CVE-2025-32118CMP Coming Soon and Maintenance WordPress plugin remote code execution (RCE)9.1CNA v3.10.7%2025-04-04Exploit codeFix
CVE-2025-32113Libro de Reclamaciones y Quejas WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-04
CVE-2025-32112Sidebar Manager Light WordPress plugin CSRF to stored XSS7.1CNA v3.10.2%2025-04-04
CVE-2025-32111acme.sh Docker image GitHub Actions workflow vulnerability8.7CNA v3.10.4%2025-04-04
CVE-2025-31480aiven-extras allows PostgreSQL privilege escalation through format function9.1CNA v3.10.5%2025-04-04Fix
CVE-2025-31421Srbtranslatin WordPress plugin sensitive data exposure5.8CNA v3.10.3%2025-04-04
CVE-2025-31420wpForo Forum WordPress plugin privilege escalation7.6CNA v3.10.3%2025-04-04Fix
CVE-2025-31418Gravel WordPress theme reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-04
CVE-2025-31416Awesome Event Booking WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-04Fix
CVE-2025-31407Tiger WordPress theme cross-site scripting (XSS)6.5CNA v3.10.2%2025-04-04
CVE-2025-31405Fami WooCommerce Compare WordPress plugin local file inclusion7.5CNA v3.10.6%2025-04-04
CVE-2025-31403Booking Calendar and Notification WordPress plugin SQL injection9.3CNA v3.10.4%2025-04-04
CVE-2025-31389Sequel WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-04Fix
CVE-2025-31384Videos WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2025-04-04
CVE-2025-31381Booking Calendar and Notification WordPress plugin broken authentication6.5CNA v3.10.3%2025-04-04
CVE-2025-31130gitoxide does not detect SHA-1 collision attacks6.8CNA v3.10.3%2025-04-04Fix
CVE-2025-29815Microsoft Edge (Chromium-based) remote code execution7.6CNA v3.10.8%2025-04-04Fix
CVE-2025-29796Microsoft Edge for iOS spoofing4.7CNA v3.10.6%2025-04-04Fix
CVE-2025-29477treasure-data Fluent Bit denial of service5.5CISA ADP v3.10.2%2025-04-04
CVE-2025-29476compress_chunk_fuzzer buffer overflow5.5CISA ADP v3.10.2%2025-04-04Fix
CVE-2025-28146Edimax BR-6478AC V3 code injection9.8CISA ADP v3.111.5%2025-04-04
CVE-2025-27520BentoML allows remote code execution (RCE) via insecure deserialization9.8CNA v3.140.6%2025-04-04MetasploitEmerging ThreatsExploit codeFix
CVE-2025-26401JTEKT ELECTRONICS HMI ViewJet C-more series weak password encoding6.5CNA v3.00.2%2025-04-04
CVE-2025-25178GPU DDK PhysmemWrapExtMem uiSize=0 corrupts kernel memory7.8CISA ADP v3.10.3%2025-04-04Fix
CVE-2025-25061JTEKT ELECTRONICS HMI ViewJet C-more series confused deputy5.8CNA v3.00.5%2025-04-04
CVE-2025-25001Microsoft Edge for iOS spoofing4.3CNA v3.10.8%2025-04-04Fix
CVE-2025-24317JTEKT ELECTRONICS HMI ViewJet C-more series resource exhaustion5.3CNA v3.00.6%2025-04-04
CVE-2025-24310JTEKT ELECTRONICS HMI ViewJet C-more series clickjacking4.3CNA v3.00.4%2025-04-04
CVE-2025-22285Pallet Packaging for WooCommerce WordPress plugin broken access control6.5CNA v3.00.3%2025-04-04Fix
CVE-2025-22282ez Form Calculator Premouium WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.2%2025-04-04
CVE-2025-22281Simplish WordPress theme stored cross-site scripting (XSS)6.5CNA v3.10.2%2025-04-04
CVE-2025-3268qinguoyi TinyWebServer http_conn.cpp improper authentication9.8v3.10.8%2025-04-04
CVE-2025-3267qinguoyi TinyWebServer http_conn.cpp SQL injection8.8v3.10.5%2025-04-04
CVE-2025-3266qinguoyi TinyWebServer http_conn.cpp stack-based overflow9.8v3.10.8%2025-04-04
CVE-2025-3265PHPGurukul e-Diary Management System add-category.php SQL injection9.8v3.10.6%2025-04-04
CVE-2025-3259Tenda RX3 SetOnlineDevName formSetDeviceName stack-based overflow8.8v3.11.1%2025-04-04
CVE-2025-3258PHPGurukul Old Age Home Management System search.php SQL injection9.8v3.10.6%2025-04-04
CVE-2025-3257xujiangfei admintwo updateSet cross-site request forgery5.3CNA v4.00.3%2025-04-04
CVE-2025-3256xujiangfei admintwo updateSet access control7.5v3.10.4%2025-04-04
CVE-2025-3255xujiangfei admintwo home access control7.5v3.10.5%2025-04-04
CVE-2025-3254xujiangfei admintwo add server-side request forgery9.8v3.10.5%2025-04-04
CVE-2025-3253xujiangfei admintwo insertTree cross-site scripting6.1v3.10.4%2025-04-04
CVE-2025-3252xujiangfei admintwo add cross-site scripting6.1v3.10.4%2025-04-04
CVE-2025-3251xujiangfei admintwo updateSet cross-site scripting6.1v3.10.4%2025-04-04
CVE-2025-3250elunez Eladmin Maintenance Management module testConnect deserialization6.5v3.10.5%2025-04-04
CVE-2025-3249TOTOLINK A6000R mtkwifi.lua apcli_cancel_wps command injection9.8v3.12.8%2025-04-04
CVE-2025-3245itsourcecode Library Management System Forgot.java search SQL injection9.8v3.10.5%2025-04-04
CVE-2025-3244SourceCodester Web-based Pharmacy Product Management System unrestricted file upload8.8v3.10.6%2025-04-04
CVE-2025-3243code-projects Patient Record Management System dental_form.php SQL injection8.8v3.10.6%2025-04-04Exploit code
CVE-2025-3242PHPGurukul e-Diary Management System search-result.php SQL injection9.8v3.10.5%2025-04-04
CVE-2025-3241zhangyanbo2007 youkefu XML Document CallCenterRouterController.java XML external entity reference9.8v3.10.6%2025-04-04
CVE-2025-3240PHPGurukul Online Fire Reporting System search.php SQL injection9.8v3.10.6%2025-04-04
CVE-2025-3239PHPGurukul Online Fire Reporting System edit-guard-detail.php SQL injection9.8v3.10.6%2025-04-04
CVE-2025-3238PHPGurukul Online Fire Reporting System search-request.php SQL injection9.8v3.10.6%2025-04-04
CVE-2025-3237Tenda FH1202 wrlwpsset access control6.9CNA v4.00.6%2025-04-04
CVE-2025-3236Tenda FH1202 Web Management Interface VirSerDMZ access control6.9CNA v4.00.7%2025-04-04
CVE-2025-3235PHPGurukul Old Age Home Management System profile.php SQL injection9.8v3.10.5%2025-04-04
CVE-2025-3231PHPGurukul Zoo Management System aboutus.php SQL injection9.8v3.10.6%2025-04-04
CVE-2025-3229PHPGurukul Restaurant Table Booking System edit-subadmin.php SQL injection7.2v3.10.5%2025-04-04
CVE-2025-3220PHPGurukul e-Diary Management System dashboard.php SQL injection9.8v3.10.6%2025-04-04
CVE-2025-3219CodeCanyon Perfex CRM Project Discussions module 2 cross-site scripting5.4v3.10.4%2025-04-04
CVE-2025-3217PHPGurukul e-Diary Management System registration.php SQL injection9.8v3.10.6%2025-04-04
CVE-2025-3216PHPGurukul e-Diary Management System password-recovery.php SQL injection9.8v3.10.6%2025-04-04
CVE-2025-3215PHPGurukul Restaurant Table Booking System add-subadmin.php SQL injection8.8v3.10.5%2025-04-04
CVE-2025-3214JFinal CMS readTemplate engine.getTemplate path traversal5.3CNA v4.00.5%2025-04-04
CVE-2025-3213PHPGurukul e-Diary Management System view-note.php SQL injection9.8v3.10.6%2025-04-04
CVE-2025-3211code-projects Patient Record Management System birthing_print.php SQL injection7.5v3.10.5%2025-04-04
CVE-2025-3210code-projects Patient Record Management System birthing_pending.php SQL injection7.5v3.10.5%2025-04-04
CVE-2025-3209code-projects Patient Record Management System add_patient.php SQL injection9.8v3.10.6%2025-04-04
CVE-2025-3208code-projects Patient Record Management System xray_print.php SQL injection7.5v3.10.5%2025-04-04
CVE-2025-3207code-projects Patient Record Management System birthing_form.php SQL injection7.5v3.10.5%2025-04-04
CVE-2025-3206code-projects Hospital Management System doctor-specilization.php SQL injection7.5v3.10.5%2025-04-04
CVE-2025-3205CodeAstro Student Grading System studentsubject.php SQL injection8.8v3.10.5%2025-04-04
CVE-2025-3204CodeAstro Car Rental System returncar.php SQL injection9.8v3.10.5%2025-04-04
CVE-2025-3203Tenda W18E setModules formSetAccountList stack-based overflow5.3CNA v4.00.6%2025-04-04
CVE-2025-3202ageerle ruoyi-ai SysNoticeController.java improper authorization9.1v3.10.5%2025-04-04Fix
CVE-2025-3199ageerle ruoyi-ai API Interface SysModelController.java improper authorization9.8v3.10.6%2025-04-04Fix
CVE-2025-3198GNU Binutils objdump bucomm.c display_info memory leak5.5NVD v3.10.3%2025-04-04Fix