CVEs published April 3, 2025
177 CVEs were published on April 3, 2025: 18 critical, 52 high. 3 are now in CISA KEV.
- Published
- 177
- Critical
- 18
- High
- 52
- Medium
- 103
- Low
- 4
- Unrated
- 0
- Now in CISA KEV
- 3
- Fix available
- 32
Most affected products
- Linux
- 13
- projectworlds Online Doctor Appointment Booking System
- 9
- Project Worlds Online Lawyer Management System
- 7
- libsoup · Red Hat Enterprise Linux
- 6
- Open Asset Import Library Assimp · pyassimp
- 3
- api-platform core · api-platform/graphql +1
- 2
- HCL Software HCL Traveler
- 2
- InternLM LMDeploy · lmdeploy
- 2
- itning Student Homework Management System
- 2
- MindSpore
- 2
Critical 18
- CVE-2025-22457A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTAIvanti Connect Secure · Ivanti Policy Secure +1
- CVE-2025-31911WordPress Social Share And Social Locker plugin <= 1.4.2 - SQL Injection vulnerabilityreputeinfosystems Social Share And Social Locker
- CVE-2025-2946Cross-Site Vulnerability(XSS) due to arbitrary HTML/JavaScript gets executed while query result rendering in Query Tool and View/Edit Data Tool of pgAdmin 4pgadmin.org pgAdmin · pgadmin4
- CVE-2025-2945pgAdmin 4: Remote Code Execution in Query Tool and Cloud Deploymentpgadmin.org pgAdmin · pgadmin4
- CVE-2024-22611OpenEMR 7.0.2 is vulnerable to SQL Injection via \openemr\library\classes\Pharmacy.class.php, \controllers\C_Pharmacy.class.php and \openemr
- CVE-2025-22926An issue in OS4ED openSIS v8.0 through v9.1 allows attackers to execute a directory traversal by sending a crafted POST request to /Modules.
- CVE-2025-22927An issue in OS4ED openSIS v8.0 through v9.1 allows attackers to execute a directory traversal by sending a crafted POST request to /Modules.
- CVE-2025-22928OS4ED openSIS v7.0 to v9.1 was discovered to contain a SQL injection vulnerability via the cp_id parameter at /modules/messages/Inbox.php.
- CVE-2025-22929OS4ED openSIS v7.0 to v9.1 was discovered to contain a SQL injection vulnerability via the filter_id parameter at /students/StudentFilters.p
- CVE-2025-22930OS4ED openSIS v7.0 to v9.1 was discovered to contain a SQL injection vulnerability via the groupid parameter at /messaging/Group.php.
- CVE-2025-26817Netwrix Password Secure 9.2.0.32454 allows OS command injection.
- CVE-2025-26818Netwrix Password Secure through 9.2 allows command injection.
- CVE-2025-29064An issue in TOTOLINK x18 v.9.1.0cu.2024_B20220329 allows a remote attacker to execute arbitrary code via the sub_410E54 function of the cste
- CVE-2025-29369Code-Projects Matrimonial Site V1.0 is vulnerable to SQL Injection in /view_profile.php?id=1.
- CVE-2025-29462A buffer overflow vulnerability has been discovered in Tenda Ac15 V15.13.07.13.
- CVE-2025-29647SeaCMS v13.3 has a SQL injection vulnerability in the component admin_tempvideo.php.
- CVE-2025-30406Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack portal'Gladinet CentreStack
- CVE-2025-31161CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unless a DMZ proxy…CrushFTP
High 52
- CVE-2025-25000Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityMicrosoft Edge
- CVE-2025-30370jupyterlab-git has a command injection vulnerability in "Open Git Repository in Terminal"jupyterlab-git
- CVE-2025-31489MinIO performs incomplete signature validation for unsigned-trailer uploadsminio · github.com/minio/minio
- CVE-2025-31485GraphQL grant on a property might be cached with different objectsapi-platform core · api-platform/graphql +1
- CVE-2025-31481GraphQL query operations security can be bypassedapi-platform core · api-platform/graphql +1
- CVE-2025-31119CWE-470 in generator-jhipster-entity-audit when having Javers selected as Entity Audit Frameworkgenerator-jhipster-entity-audit
- CVE-2025-31487The XWiki JIRA extension allows data leak through an XXE attack by using a fake JIRA serverxwiki-contrib jira · org.xwiki.contrib.jira:jira-macro-defa…
- CVE-2025-31115XZ has a heap-use-after-free bug in threaded .xz decodertukaani-project xz · xz-clib
- CVE-2025-3167Tenda AC23 API Interface VerAPIMant denial of serviceTenda AC23
- CVE-2025-29987Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) versions prior to 8.3.0.15 contain an Insufficient Granularity of AcDell DD OS · Dell PowerProtect DP Series Appliance
- CVE-2024-4877OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external, lesser privileged process to create a named pipe which the OpenVPN GUI cOpenVPN
- CVE-2025-3161Tenda AC10 ShutdownSetAdd stack-based overflowTenda AC10
- CVE-2025-32049Libsoup: denial of service attack to websocket serverlibsoup · Red Hat Enterprise Linux
- CVE-2025-3155Yelp: arbitrary file readyelp · Red Hat Enterprise Linux
- CVE-2025-31909WordPress Apptivo Business Site CRM plugin <= 5.3 - Arbitrary Content Deletion vulnerabilityApptivo Business Site CRM
- CVE-2025-31907WordPress Team Builder plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerabilityLabib Ahmed Team Builder
- CVE-2025-31905WordPress Team Rosters Plugin <= 4.7 - Reflected Cross Site Scripting (XSS) vulnerabilityMark O'Donnell Team Rosters
- CVE-2025-31903WordPress XV Random Quotes plugin <= 2.0.0 - Cross Site Scripting (XSS) vulnerabilityXavi Ivars XV Random Quotes
- CVE-2025-31902WordPress Social Share And Social Locker Plugin <= 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerabilityreputeinfosystems Social Share And Social Locker
- CVE-2025-31901WordPress Digihood HTML Sitemap Plugin <= 3.1.1 - Reflected Cross Site Scripting (XSS) vulnerabilityDigihood HTML Sitemap
- CVE-2025-31900WordPress Lexicata plugin <= 1.0.16 - Reflected Cross Site Scripting (XSS) vulnerabilityLexicata
- CVE-2025-31899WordPress Awesome Logos plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerabilitywpshopee Awesome Logos
- CVE-2025-31898WordPress MediaView plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerabilitydustinscarberry MediaView
- CVE-2025-31626WordPress Support Helpdesk Ticket System Lite plugin <= 4.5.2 - Reflected Cross Site Scripting (XSS) vulnerabilityAlisaleem252 Support Helpdesk Ticket System Lite
- CVE-2025-31582WordPress Contact Form vCard Generator plugin <= 2.4 - Cross Site Scripting (XSS) vulnerabilityAshish Ajani Contact Form vCard Generator
- CVE-2025-31573WordPress PeproDev CF7 Database plugin <= 2.0.0 - Cross Site Scripting (XSS) vulnerabilityPepro Dev. Group PeproDev CF7 Database
- CVE-2025-31536WordPress CF7 Spreadsheets plugin <= 2.3.2 - Reflected Cross Site Scripting (XSS) vulnerabilitymoshensky CF7 Spreadsheets
- CVE-2025-31468WordPress WP_Identicon plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerabilityscottsm WP_Identicon
- CVE-2025-31467WordPress Flickr Photostream plugin <= 3.1.8 - Reflected Cross Site Scripting (XSS) vulnerabilitymiro.mannino Flickr Photostream
- CVE-2025-31442WordPress Search engine keywords highlighter plugin <= 0.1.3 - Reflected Cross Site Scripting (XSS) vulnerabilitye1tekoap42 Search engine keywords highlighter
- CVE-2025-31436WordPress Blubrry PowerPress Podcasting plugin MultiSite add-on plugin <= 0.1.1 - Reflected Cross Site Scripting (XSS) vulnerabilityAngelo Mandato Blubrry PowerPress Podcasting plugin MultiSi…
- CVE-2025-31098WordPress DeBounce Email Validator plugin <= 5.7 - Local File Inclusion VulnerabilityDeBounce Email Validator
- CVE-2025-30908WordPress Web Directory Free plugin <= 1.7.6 - CSRF to Cross Site Scripting (XSS) vulnerabilityShamalli Web Directory Free
- CVE-2025-30889WordPress Testimonial Slider plugin <= 2.0.13 - PHP Object Injection vulnerabilityPickPlugins Testimonial Slider
- CVE-2025-30858WordPress Snow Storm plugin <= 1.4.6 - Reflected Cross Site Scripting (XSS) vulnerabilityTribulant Software Snow Storm
- CVE-2025-30616WordPress Latest Custom Post Type Updates plugin <= 1.3.0 - Reflected Cross Site Scripting (XSS) vulnerabilityDavid Wood Latest Custom Post Type Updates
- CVE-2025-30611WordPress Wptobe-signinup plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerabilityWptobe-signinup
- CVE-2024-53868Apache Traffic Server: Malformed chunked message body allows request smugglingApache Software Foundation Apache Traffic Server
- CVE-2025-22004net: atm: fix use after free in lec_send()Linux
- CVE-2025-22001accel/qaic: Fix integer overflow in qaic_validate_req()Linux
- CVE-2025-21999proc: fix UAF in proc_get_inode()Linux
- CVE-2025-2784Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing contentlibsoup · Red Hat Enterprise Linux
- CVE-2024-45198insightsoftware Spark JDBC 2.6.21 has a remote code execution vulnerability.
- CVE-2024-45199insightsoftware Hive JDBC through 2.6.13 has a remote code execution vulnerability.
- CVE-2024-47212An issue was discovered in Iglu Server 0.13.0 and below.
- CVE-2024-47213An issue was discovered affecting Enrich 5.1.0 and below.
- CVE-2024-47214An issue was discovered in Iglu Server 0.13.0 and below.
- CVE-2024-47215An issue was discovered in Snowbridge setups sending data to Google Tag Manager Server Side.
- CVE-2024-56528This vulnerability affects Snowplow Collector 3.x before 3.3.0 (unless it’s set up behind a reverse proxy that establishes payload limits).
- CVE-2025-22931An insecure direct object reference (IDOR) in the component /assets/stafffiles of OS4ED openSIS v7.0 to v9.1 allows unauthenticated attacker
- CVE-2025-29504Insecure Permission vulnerability in student-manage 1 allows a local attacker to escalate privileges via the Unsafe permission verification.
- CVE-2025-29570An issue in Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v3.2 allows a local attacker to escalate privileges via the function tftp_ima
Medium, low and unrated 107
- CVE-2025-3186projectworlds Online Doctor Appointment Booking System invoice.php sql injectionprojectworlds Online Doctor Appointment Booking System
- CVE-2025-3185projectworlds Online Doctor Appointment Booking System patientupdateprofile.php sql injectionprojectworlds Online Doctor Appointment Booking System
- CVE-2025-3184projectworlds Online Doctor Appointment Booking System profile.php sql injectionprojectworlds Online Doctor Appointment Booking System
- CVE-2025-0278An internal path disclosure vulnerability affects HCL TravelerHCL Software HCL Traveler
- CVE-2025-3183projectworlds Online Doctor Appointment Booking System patientupdateprofile.php sql injectionprojectworlds Online Doctor Appointment Booking System
- CVE-2025-0279HCL Traveler is affected by generation of error messages containing sensitive informationHCL Software HCL Traveler
- CVE-2025-3182projectworlds Online Doctor Appointment Booking System getschedule.php sql injectionprojectworlds Online Doctor Appointment Booking System
- CVE-2025-3181projectworlds Online Doctor Appointment Booking System appointment.php sql injectionprojectworlds Online Doctor Appointment Booking System
- CVE-2025-3180projectworlds Online Doctor Appointment Booking System deleteschedule.php sql injectionprojectworlds Online Doctor Appointment Booking System
- CVE-2025-3179projectworlds Online Doctor Appointment Booking System deletepatient.php sql injectionprojectworlds Online Doctor Appointment Booking System
- CVE-2025-3178projectworlds Online Doctor Appointment Booking System deleteappointment.php sql injectionprojectworlds Online Doctor Appointment Booking System
- CVE-2025-3177FastCMS JWT hard-coded keyFastCMS
- CVE-2025-3176Project Worlds Online Lawyer Management System single_lawyer.php sql injectionProject Worlds Online Lawyer Management System
- CVE-2025-3175Project Worlds Online Lawyer Management System save_user_edit_profile.php sql injectionProject Worlds Online Lawyer Management System
- CVE-2025-3174Project Worlds Online Lawyer Management System searchLawyer.php sql injectionProject Worlds Online Lawyer Management System
- CVE-2025-3173Project Worlds Online Lawyer Management System save_booking.php sql injectionProject Worlds Online Lawyer Management System
- CVE-2025-31486Vite allows server.fs.deny to be bypassed with .svg or relative pathsvitejs vite · vite
- CVE-2025-31483Stored XSS in Miniflux Media Proxy due to improper Content-Security-Policy configurationminiflux · miniflux.app +1
- CVE-2025-3172Project Worlds Online Lawyer Management System lawyer_booking.php sql injectionProject Worlds Online Lawyer Management System
- CVE-2025-3171Project Worlds Online Lawyer Management System approve_lawyer.php sql injectionProject Worlds Online Lawyer Management System
- CVE-2025-31126Element X iOS allows the entity in control of the well-known file to break the confidentiality of embedded Element Callelement-hq element-x-ios
- CVE-2025-31127Element X Android allows the entity in control of the well-known file to break the confidentiality embedded Element Callelement-hq element-x-android
- CVE-2025-3170Project Worlds Online Lawyer Management System admin_user.php sql injectionProject Worlds Online Lawyer Management System
- CVE-2025-3169Projeqtor saveAttachment.php unrestricted uploadProjeqtor
- CVE-2025-3168PHPGurukul Time Table Generator System edit-class.php sql injectionPHPGurukul Time Table Generator System
- CVE-2025-32054In JetBrains IntelliJ IDEA before 2024.3, 2024.2.4 source code could be logged in the idea.log fileJetBrains IntelliJ IDEA
- CVE-2023-47639API Platform Core can leak exceptions message that may contain sensitive informationapi-platform core · api-platform/core
- CVE-2025-3166code-projects Product Management System Search Product Menu search_item stack-based overflowcode-projects Product Management System
- CVE-2025-3165thu-pacman chitu backend.py torch.load deserializationthu-pacman chitu
- CVE-2025-3164Tencent Music Entertainment SuperSonic H2 Database Connection testConnect code injectionTencent Music Entertainment SuperSonic
- CVE-2025-3163InternLM LMDeploy conf.py open code injectionInternLM LMDeploy · lmdeploy
- CVE-2025-3162InternLM LMDeploy PT File utils.py load_weight_ckpt deserializationInternLM LMDeploy · lmdeploy
- CVE-2025-0272HCL DevOps Deploy / HCL Launch is susceptible to an HTML injection vulnerabilityHCL Software HCL DevOps Deploy / HCL Launch
- CVE-2025-3160Open Asset Import Library Assimp File SceneCombiner.cpp AddNodeHashes out-of-boundsOpen Asset Import Library Assimp · pyassimp
- CVE-2025-3159Open Asset Import Library Assimp ASE File ASEParser.cpp ParseLV4MeshBonesVertices heap-based overflowOpen Asset Import Library Assimp · pyassimp
- CVE-2025-32053Libsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()libsoup · Red Hat Enterprise Linux
- CVE-2025-32052Libsoup: heap buffer overflow in sniff_unknown()libsoup · Red Hat Enterprise Linux
- CVE-2025-32051Libsoup: segmentation fault when parsing malformed data urilibsoup · Red Hat Enterprise Linux
- CVE-2025-32050Libsoup: integer overflow in append_param_quotedlibsoup · Red Hat Enterprise Linux
- CVE-2025-3158Open Asset Import Library Assimp LWO File LWOAnimation.cpp UpdateAnimRangeSetup heap-based overflowOpen Asset Import Library Assimp · pyassimp
- CVE-2025-3157Intelbras WRN 150 Wireless Menu cross site scriptingIntelbras WRN
- CVE-2025-31896WordPress GetBookingsWP Plugin <= 1.1.27 - Broken Access Control vulnerabilityistmoplugins GetBookingsWP
- CVE-2025-31893WordPress Botnet Attack Blocker plugin <= 2.0.0 - Stored Cross Site Scripting (XSS) vulnerabilitycheesefather Botnet Attack Blocker
- CVE-2025-31876WordPress Payday plugin <= 3.3.18 - Broken Access Control vulnerabilitygunnarpayday Payday
- CVE-2025-31858WordPress Local Magic plugin <= 2.9.0 - Broken Access Control vulnerabilitymatthewrubin Local Magic
- CVE-2025-31841WordPress FPW Category Thumbnails Plugin <= 1.9.5 - Broken Access Control vulnerabilityFrank P. Walentynowicz FPW Category Thumbnails
- CVE-2025-31827WordPress Fonto plugin <= 1.2.2 - Arbitrary File Download vulnerabilityvlad.olaru Fonto
- CVE-2025-31825WordPress Category Icon plugin <= 1.0.1 - Arbitrary File Download vulnerabilitypixelgrade Category Icon
- CVE-2025-31800WordPress Publitio plugin <= 2.2.0 - Arbitrary File Read vulnerabilityPublitio
- CVE-2025-31795WordPress Shopify to WooCommerce Migration plugin <= 1.3.0 - Settings Change vulnerabilityPlugin Devs Shopify to WooCommerce Migration
- CVE-2025-31794WordPress WR Price List Manager For Woocommerce plugin <= 1.0.8 - Arbitrary Content Deletion vulnerabilityWeb Ready Now WR Price List Manager For Woocommerce
- CVE-2025-31789WordPress TextMe SMS plugin <= 1.9.1 - Broken Access Control vulnerabilityMatat Technologies TextMe SMS
- CVE-2025-31768WordPress Widget Manager Light plugin <= 1.18 - Broken Access Control vulnerabilityOTWthemes Widget Manager Light
- CVE-2025-31758WordPress Free Woocommerce Product Table View plugin <= 1.78 - Arbitrary Content Deletion vulnerabilityBinaryCarpenter Free Woocommerce Product Table View
- CVE-2025-31746WordPress Clients plugin <= 1.1.4 - Broken Access Control vulnerabilityThink201 Clients
- CVE-2025-31739WordPress Minimalistic Event Manager plugin <= 1.1.1 - Broken Access Control vulnerabilityManuel Schmalstieg Minimalistic Event Manager
- CVE-2025-31736WordPress Rich Text Editor Plugin <= 1.0.1 - Broken Access Control vulnerabilityrichtexteditor Rich Text Editor
- CVE-2025-31729WordPress WooTumblog plugin <= 2.1.4 - Content Injection vulnerabilityjeffikus WooTumblog
- CVE-2025-31622WordPress Advanced Typekit plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilityUtkarsh Kukreti Advanced Typekit
- CVE-2025-31581WordPress WP Video Playlist plugin <= 1.1.2 - Settings Change vulnerabilitySandeep Kumar WP Video Playlist
- CVE-2025-31558WordPress TailPress plugin <= 0.4.4 - Sensitive Data Exposure vulnerabilityGreg TailPress
- CVE-2025-31554WordPress Docxpresso plugin <= 2.6 - Arbitrary File Download vulnerabilityDocxpresso
- CVE-2025-31541WordPress TuriTop Booking System plugin <= 1.0.10 - Broken Access Control vulnerabilityTuriTop Booking System
- CVE-2025-31091WordPress CM Header and Footer plugin <= 1.2.4 - Cross Site Scripting (XSS) VulnerabilityCreativeMindsSolutions CM Header and Footer
- CVE-2025-30916WordPress Residential Address Detection plugin <= 2.5.4 - Broken Access Control vulnerabilityenituretechnology Residential Address Detection
- CVE-2025-30915WordPress Small Package Quotes – Worldwide Express Edition plugin <= 5.2.19 - Broken Access Control vulnerabilityenituretechnology Small Package Quotes – Worldwide Express…
- CVE-2025-30596WordPress include-file plugin <= 1 - Arbitrary File Download Vulnerabilitytstafford include-file
- CVE-2024-9416Modula Image Gallery <= 2.10.1 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox 5 JavaScript Librarywpchill Modula Image Gallery – Photo Grid & Video Gallery
- CVE-2025-2299LuckyWP Table of Contents <= 2.1.10 - Cross-Site Request Forgery to Reflected Cross-Site Scriptingtheluckywp LuckyWP Table of Contents
- CVE-2025-3152caipeichao ThinkOX Search search.html cross site scriptingcaipeichao ThinkOX
- CVE-2025-3151SourceCodester Gym Management System signup.php sql injectionSourceCodester Gym Management System
- CVE-2025-3150itning Student Homework Management System cross-site request forgeryitning Student Homework Management System
- CVE-2025-3149itning Student Homework Management System Edit Job Page fileupload cross site scriptingitning Student Homework Management System
- CVE-2025-1663Unlimited Elements For Elementor <= 1.5.142 - Authenticated (Contributor+) Stored Cross-Site Scriptingunitecms Unlimited Elements For Elementor
- CVE-2025-2874User Submitted Posts <= 20241026 - Authenticated (Admin+) Stored Cross-Site Scriptingspecialk User Submitted Posts – Enable Users to Submit Post…
- CVE-2024-13673Big Boom Directory <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scriptingbigboomdesign Big Boom Directory
- CVE-2025-22007Bluetooth: Fix error code in chan_alloc_skb_cb()Linux
- CVE-2025-22006net: ethernet: ti: am65-cpsw: Fix NAPI registration sequenceLinux
- CVE-2025-22005ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().Linux
- CVE-2025-22003can: ucan: fix out of bound read in strscpy() sourceLinux
- CVE-2025-22002netfs: Call `invalidate_cache` only if implementedLinux
- CVE-2025-22000mm/huge_memory: drop beyond-EOF folios with the right number of refsLinux
- CVE-2025-21998firmware: qcom: uefisecapp: fix efivars registration raceLinux
- CVE-2025-21997xsk: fix an integer overflow in xp_create_and_assign_umem()Linux
- CVE-2025-21996drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()Linux
- CVE-2025-21995drm/sched: Fix fence reference count leakLinux
- CVE-2025-3148codeprojects Product Management System Login buffer overflowcodeprojects Product Management System
- CVE-2025-3147PHPGurukul Boat Booking System add-subadmin.php sql injectionPHPGurukul Boat Booking System
- CVE-2025-3146PHPGurukul Bus Pass Management System view-pass-detail.php sql injectionPHPGurukul Bus Pass Management System
- CVE-2025-3145MindSpore mindspore.numpy.fft.rfft2 memory corruptionMindSpore
- CVE-2025-30485UNIX symbolic link (Symlink) following issue exists in FutureNet NXR series, VXR series and WXR series routers.Century Systems Co. FutureNet NXR-1420 · Century System… +30
- CVE-2025-3144MindSpore mindspore.numpy.fft.hfftn memory corruptionMindSpore
- CVE-2025-3143SourceCodester Apartment Visitor Management System visitor-entry.php sql injectionSourceCodester Apartment Visitor Management System
- CVE-2025-2055MapPress Maps for WordPress < 2.94.9 - Contributor+ Stored XSSMapPress Maps for WordPress
- CVE-2025-3142SourceCodester Apartment Visitor Management System add-apartment.php sql injectionSourceCodester Apartment Visitor Management System
- CVE-2025-31334Issue that bypasses the "Mark of the Web" security warning function for files when opening a symbolic link that points to an executable fileRARLAB WinRAR
- CVE-2025-3141SourceCodester Online Medicine Ordering System manage_category.php sql injectionSourceCodester Online Medicine Ordering System
- CVE-2025-3140SourceCodester Online Medicine Ordering System view_category.php sql injectionSourceCodester Online Medicine Ordering System
- CVE-2025-3139code-projects Bus Reservation System Login Form login buffer overflowcode-projects Bus Reservation System
- CVE-2025-3138PHPGurukul Online Security Guards Hiring System edit-guard-detail.php sql injectionPHPGurukul Online Security Guards Hiring System
- CVE-2025-3137PHPGurukul Online Security Guards Hiring System changeimage.php sql injectionPHPGurukul Online Security Guards Hiring System
- CVE-2025-3136PyTorch CUDACachingAllocator.cpp torch.cuda.memory.caching_allocator_delete memory corruptionPyTorch · torch
- CVE-2025-3135fcba_zzm ics-park Smart Park Management System update sql injectionfcba_zzm ics-park Smart Park Management System
- CVE-2025-3134code-projects Payroll Management System add_overtime.php sql injectioncode-projects Payroll Management System
- CVE-2025-3153Concrete CMS version 9 below 9.4.0RC2 and versions below 8.5.20 - CSRF and XSS in Concrete CMS Custom Address attributeConcrete CMS · concrete5/concrete5
- CVE-2024-47217An issue was discovered in Iglu Server 0.13.0 and below.
- CVE-2025-29991Yubico YubiKey 5.4.1 through 5.7.3 before 5.7.4 has an incorrect FIDO CTAP PIN/UV Auth Protocol Two implementation.Yubico YubiKey