CVEs published April 13, 2025
15 CVEs were published on April 13, 2025: 0 critical, 7 high.
- Published
- 15
- Critical
- 0
- High
- 7
- Medium
- 8
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 6
Most affected products
- YouDianCMS
- 3
- H3C Magic NX15 · H3C Magic NX30 Pro +2
- 2
- Tutorials-Website Employee Management System
- 2
- D-Link DI-8100
- 1
- github.com/mholt/archiver/v3 · github.com/mholt/archiver
- 1
- H3C Magic NX15 · H3C Magic NX30 Pro +3
- 1
- H3C Magic NX15 · H3C Magic NX400 +1
- 1
- IBM Aspera Faspex
- 1
- perl
- 1
- PowerCreator CMS
- 1
High 7
- CVE-2025-3542H3C Magic NX15/Magic NX400/Magic R3010 HTTP POST Request getsyncpppoecfg FCGI_WizardProtoProcess command injectionH3C Magic NX15 · H3C Magic NX400 +1
- CVE-2025-3541H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request getSpecs FCGI_WizardProtoProcess command injectionH3C Magic NX15 · H3C Magic NX30 Pro +2
- CVE-2025-3540H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request getCapability FCGI_WizardProtoProcess command injectionH3C Magic NX15 · H3C Magic NX30 Pro +2
- CVE-2025-3445A Path Traversal "Zip Slip" vulnerability has been identified in mholt/archiver in Go.github.com/mholt/archiver/v3 · github.com/mholt/archiver
- CVE-2025-3539H3C Magic BE18000 HTTP POST Request getBasicInfo FCGI_CheckStringIfContainsSemicolon command injectionH3C Magic NX15 · H3C Magic NX30 Pro +3
- CVE-2025-3538D-Link DI-8100 jhttpd auth.asp auth_asp stack-based overflowD-Link DI-8100
- CVE-2024-56406Perl is vulnerable to a heap buffer overflow when transliterating non-ASCII bytesperl
Medium, low and unrated 8
- CVE-2025-3537Tutorials-Website Employee Management System update-user.php improper authorizationTutorials-Website Employee Management System
- CVE-2025-3423IBM Aspera Faspex 5 cross-site scriptingIBM Aspera Faspex
- CVE-2025-3536Tutorials-Website Employee Management System delete-user.php improper authorizationTutorials-Website Employee Management System
- CVE-2025-3535shuanx BurpAPIFinder BurpApiFinder.db denial of serviceshuanx BurpAPIFinder
- CVE-2025-3534PowerCreator CMS OpenPublicCourse.aspx sql injectionPowerCreator CMS
- CVE-2025-3533YouDianCMS index.html.Attackers cross site scriptingYouDianCMS
- CVE-2025-3532YouDianCMS index.html.Attackers cross site scriptingYouDianCMS
- CVE-2025-3531YouDianCMS index.html cross site scriptingYouDianCMS