CVEs published April 16, 2025
373 CVEs were published on April 16, 2025: 23 critical, 147 high. 3 are now in CISA KEV.
- Published
- 373
- Critical
- 23
- High
- 147
- Medium
- 145
- Low
- 7
- Unrated
- 51
- Now in CISA KEV
- 3
- Fix available
- 162
Most affected products
- Linux
- 127
- Siemens TeleControl Server Basic
- 67
- PCMan FTP Server
- 11
- TOTOLINK A3700R
- 8
- Hitachi Vantara Pentaho Business Analytics Server
- 5
- Google ChromeOS
- 4
- Mattermost · github.com/mattermost/mattermost-server +3
- 4
- SourceCodester Web-based Pharmacy Product Management System
- 4
- Symfonia Ready_
- 4
- Hitachi Vantara Pentaho Data Integration & Analytics
- 3
Critical 23
- CVE-2025-0756Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection')Hitachi Vantara Pentaho Data Integration & Analytics
- CVE-2025-32433Erlang/OTP SSH Vulnerable to Pre-Authentication RCEerlang otp
- CVE-2025-31200A memory corruption issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2025-31201This issue was addressed by removing the vulnerable code.Apple iOS and iPadOS · Apple macOS +2
- CVE-2025-27540A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-27539A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-27495A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-22110netfilter: nfnetlink_queue: Initialize ctx to avoid memory allocation errorLinux
- CVE-2025-22088RDMA/erdma: Prevent use-after-free in erdma_accept_newconn()Linux
- CVE-2025-22077Revert "smb: client: fix TCP timers deadlock after rmmod"Linux
- CVE-2025-39557WordPress Kadence WooCommerce Email Designer plugin <= 1.5.14 - Arbitrary File Upload vulnerabilityStellarWP Kadence WooCommerce Email Designer
- CVE-2025-39601WordPress Custom CSS, JS & PHP plugin <= 2.4.1 - CSRF to RCE vulnerabilityWPFactory Custom CSS, JS & PHP
- CVE-2025-1981SQL Injection in Ready_Symfonia Ready_
- CVE-2025-22021netfilter: socket: Lookup orig tuple for IPv6 SNATLinux
- CVE-2024-22036Rancher Remote Code Execution via Cluster/Node DriversSUSE rancher · github.com/rancher/rancher
- CVE-2025-3495COMMGR - Insufficient Randomization Authentication BypassDelta Electronics COMMGR
- CVE-2024-40071Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via id_generator/classes/Syst
- CVE-2024-40072Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at id_generator/a
- CVE-2024-40073Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the template parameter at id_gener
- CVE-2024-55371Wallos <= 2.38.2 has a file upload vulnerability in the restore backup function, which allows authenticated users to restore backups by uplo
- CVE-2024-55372Wallos <=2.38.2 has a file upload vulnerability in the restore database function, which allows unauthenticated users to restore database by
- CVE-2025-29708SourceCodester Company Website CMS 1.0 contains a file upload vulnerability via the "Create Services" file /dashboard/Services.
- CVE-2025-29709SourceCodester Company Website CMS 1.0 has a File upload vulnerability via the "Create portfolio" file /dashboard/portfolio.
High 147
- CVE-2025-1568Access Control Vulnerability in Gerrit chromiumos project configuration in Google ChromeOS 16063.87.0 allows an attacker with a registered GGoogle ChromeOS
- CVE-2025-2073Out-of-Bounds Read in netfilter/ipset in Linux Kernel ChromeOS [6.1, 5.15, 5.10, 5.4, 4.19] allows a local attacker with low privileges to tGoogle ChromeOS
- CVE-2025-1566DNS Leak in Native System VPN in Google ChromeOS Dev Channel on ChromeOS 16002.23.0 allows network observers to expose plaintext DNS queriesGoogle ChromeOS
- CVE-2025-25230Omnissa Horizon Client for Windows contains an LPE Vulnerability.Omnissa Horizon Client for Windows
- CVE-2025-31478Zulip Authentication Backend Configuration Bypasszulip
- CVE-2025-3620Use after free in USB in Google Chrome prior to 135.0.7049.95 allowed a remote attacker to potentially exploit heap corruption via a craftedGoogle Chrome
- CVE-2025-3619Heap buffer overflow in Codecs in Google Chrome on Windows prior to 135.0.7049.95 allowed a remote attacker to potentially exploit heap corrGoogle Chrome
- CVE-2025-2291PgBouncer default auth_query does not take Postgres password expiry into accountPgBouncer
- CVE-2025-32872A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32871A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32870A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32869A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32868A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32867A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32866A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32865A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32864A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32863A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32862A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32861A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32860A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32859A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32858A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32857A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32856A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32855A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32854A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32853A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32852A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32851A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32850A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32849A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32848A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32847A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32846A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32845A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32844A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32843A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32842A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32841A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32840A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32839A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32838A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32837A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32836A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32835A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32834A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32833A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32832A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32831A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32830A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32829A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32828A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32827A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32826A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32825A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32824A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32823A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32822A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-32475A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-31353A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-31352A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-31351A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-31350A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-31349A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-31343A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-30032A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-30031A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-30030A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-30003A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-30002A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-29905A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Siemens TeleControl Server Basic
- CVE-2025-20236Cisco Webex App Client-Side Remote Code Execution VulnerabilityCisco Webex Teams
- CVE-2025-23133wifi: ath11k: update channel list in reg notifier instead reg workerLinux
- CVE-2025-23132f2fs: quota: fix to avoid warning in dquot_writeback_dquots()Linux
- CVE-2025-22124md/md-bitmap: fix wrong bitmap_limit for clustermd when write sbLinux
- CVE-2025-22121ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()Linux
- CVE-2025-22118ice: validate queue quanta parameters to prevent OOB accessLinux
- CVE-2025-22117ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw()Linux
- CVE-2025-22115btrfs: fix block group refcount race in btrfs_create_pending_block_groups()Linux
- CVE-2025-22114btrfs: don't clobber ret in btrfs_validate_super()Linux
- CVE-2025-22109ax25: Remove broken autobindLinux
- CVE-2025-22108bnxt_en: Mask the bd_cnt field in the TX BD properlyLinux
- CVE-2025-22102Bluetooth: btnxpuart: Fix kernel panic during FW releaseLinux
- CVE-2025-22100drm/panthor: Fix race condition when gathering fdinfo group samplesLinux
- CVE-2025-22097drm/vkms: Fix use after free and double free on init errorLinux
- CVE-2025-22094powerpc/perf: Fix ref-counting on the PMU 'vpa_pmu'Linux
- CVE-2025-22090x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range()Linux
- CVE-2025-22089RDMA/core: Don't expose hw_counters outside of init net namespaceLinux
- CVE-2025-22087bpf: Fix array bounds error with may_gotoLinux
- CVE-2025-22086RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flowLinux
- CVE-2025-22085RDMA/core: Fix use-after-free when rename device nameLinux
- CVE-2025-22083vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpointLinux
- CVE-2025-22081fs/ntfs3: Fix a couple integer overflows on 32bit systemsLinux
- CVE-2025-22080fs/ntfs3: Prevent integer overflow in hdr_first_de()Linux
- CVE-2025-22079ocfs2: validate l_tree_depth to avoid out-of-bounds accessLinux
- CVE-2025-22074ksmbd: fix r_count dec/increment mismatchLinux
- CVE-2025-22072spufs: fix gang directory lifetimesLinux
- CVE-2025-22069riscv: fgraph: Fix stack layout to match __arch_ftrace_regs argument of ftrace_return_to_handlerLinux
- CVE-2025-22068ublk: make sure ubq->canceling is set when queue is frozenLinux
- CVE-2025-22067spi: cadence: Fix out-of-bounds array access in cdns_mrvl_xspi_setup_clock()Linux
- CVE-2025-22062sctp: add mutual exclusion in proc_sctp_do_udp_port()Linux
- CVE-2025-22061net: airoha: Fix qid report in airoha_tc_get_htb_get_leaf_queue()Linux
- CVE-2025-22059udp: Fix multiple wraparounds of sk->sk_rmem_alloc.Linux
- CVE-2025-22057net: decrease cached dst counters in dst_releaseLinux
- CVE-2025-22056netfilter: nft_tunnel: fix geneve_opt type confusion additionLinux
- CVE-2025-22055net: fix geneve_opt length integer overflowLinux
- CVE-2025-22049LoongArch: Increase ARCH_DMA_MINALIGN up to 16Linux
- CVE-2025-22048LoongArch: BPF: Don't override subprog's return valueLinux
- CVE-2025-22047x86/microcode/AMD: Fix __apply_microcode_amd()'s return valueLinux
- CVE-2025-22045x86/mm: Fix flush_tlb_range() when used for zapping normal PMDsLinux
- CVE-2025-22044acpi: nfit: fix narrowing conversion in acpi_nfit_ctlLinux
- CVE-2025-22043ksmbd: add bounds check for durable handle contextLinux
- CVE-2025-22042ksmbd: add bounds check for create lease contextLinux
- CVE-2025-22041ksmbd: fix use-after-free in ksmbd_sessions_deregister()Linux
- CVE-2025-22040ksmbd: fix session use-after-free in multichannel connectionLinux
- CVE-2025-22039ksmbd: fix overflow in dacloffset bounds checkLinux
- CVE-2025-22038ksmbd: validate zero num_subauth before sub_auth is accessedLinux
- CVE-2025-22037ksmbd: fix null pointer dereference in alloc_preauth_hash()Linux
- CVE-2025-22036exfat: fix random stack corruption after get_blockLinux
- CVE-2025-22035tracing: Fix use-after-free in print_graph_function_flags during tracer switchingLinux
- CVE-2025-22034mm/gup: reject FOLL_SPLIT_PMD with hugetlb VMAsLinux
- CVE-2025-22025nfsd: put dl_stid if fail to queue dl_recallLinux
- CVE-2024-58096wifi: ath11k: add srng->lock for ath11k_hal_srng_ in monitor modeLinux
- CVE-2024-58094jfs: add check read-only before truncation in jfs_truncate_nolock()Linux
- CVE-2023-53034ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_transLinux
- CVE-2025-3693Tenda W12 httpd cgiWifiRadioSet stack-based overflowTenda W12
- CVE-2025-39518WordPress BMA Lite plugin <= 1.4.2 - SQL Injection vulnerabilityRedefiningTheWeb BMA Lite
- CVE-2025-39530WordPress Site Search 360 plugin <= 2.1.8 - Cross Site Request Forgery (CSRF) to stored XSS vulnerabilitydsky Site Search
- CVE-2025-39544WordPress WP Tools plugin <= 5.18 - CSRF to Arbitrary File Deletion vulnerabilitysminozzi WP Tools
- CVE-2025-39547WordPress Internal Link Optimiser plugin <= 5.1.3 - CSRF to XSS vulnerabilityToast Plugins Internal Link Optimiser
- CVE-2025-39548WordPress Right Click Disable OR Ban plugin <= 1.1.17 - CSRF to Stored XSS vulnerabilityA WP Life Right Click Disable OR Ban
- CVE-2025-39566WordPress Hostel plugin <= 1.1.5.6 - SQL Injection VulnerabilityBob Hostel
- CVE-2025-39570WordPress WPCOM Member plugin <= 1.7.7 - Local File Inclusion VulnerabilityLomu WPCOM Member
- CVE-2025-39584WordPress Eventin plugin <= 4.0.25 - Local File Inclusion VulnerabilityArraytics Eventin
- CVE-2025-39592WordPress Subscribe to Unlock Lite plugin <= 1.3.0 - Local File Inclusion VulnerabilityWP Shuffle Subscribe to Unlock Lite
- CVE-2025-1982Local File Inclusion in Ready_Symfonia Ready_
- CVE-2025-1980Remote Code Execution via Unrestricted File Upload in Ready_Symfonia Ready_
- CVE-2025-30960WordPress FS Poster plugin <= 6.5.8 - Subscriber+ Site Wide Broken Access Control vulnerabilityfs-code FS Poster
- CVE-2025-22022usb: xhci: Apply the link chain quirk on NEC isoc endpointsLinux
- CVE-2025-22020memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_removeLinux
- CVE-2025-22019bcachefs: bch2_ioctl_subvolume_destroy() fixesLinux
- CVE-2024-52281Stored Cross-site Scripting vulnerability in Rancher UISUSE rancher · github.com/rancher/rancher
- CVE-2025-3698Interface exposure vulnerability in the mobile application (com.transsion.carlcare) may lead to information leakage risk.TECNO com.transsion.carlcare
- CVE-2024-53303A remote code execution (RCE) vulnerability in the upload_file function of LRQA Nettitude PoshC2 after commit 123db87 allows authenticated a
- CVE-2024-53305An issue in the component /models/config.py of Whoogle search v0.9.0 allows attackers to execute arbitrary code via supplying a crafted searwhoogle-search
- CVE-2025-28072PHPGurukul Pre-School Enrollment System is vulnerable to Directory Traversal in manage-teachers.php.
Medium, low and unrated 203
- CVE-2025-1704ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users with local access tGoogle ChromeOS
- CVE-2025-24907Hitachi Vantara Pentaho Data Integration & Analytics – Path TraversalHitachi Vantara Pentaho Data Integration & Analytics
- CVE-2025-24911Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity ReferenceHitachi Vantara Pentaho Business Analytics Server
- CVE-2025-24910Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity ReferenceHitachi Vantara Pentaho Business Analytics Server
- CVE-2025-24909Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Hitachi Vantara Pentaho Business Analytics Server
- CVE-2025-24908Hitachi Vantara Pentaho Data Integration & Analytics – Path TraversalHitachi Vantara Pentaho Data Integration & Analytics
- CVE-2025-0757Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Hitachi Vantara Pentaho Business Analytics Server
- CVE-2025-0758Hitachi Vantara Pentaho Business Analytics Server - Incorrect Permission Assignment for Critical ResourceHitachi Vantara Pentaho Business Analytics Server
- CVE-2025-32791Permission policy information leakage in Backstage permission systembackstage · @backstage/plugin-permission-backend
- CVE-2025-32789EspoCRM Allows Potential Disclosure of Sensitive Information in the User Sorting Functionespocrm
- CVE-2025-32787SoftEtherVPN Affected by NULL dereference in DeleteIPv6DefaultRouterInRASoftEtherVPN
- CVE-2025-32783XWiki allows unregistered users to see "public" messages from a closed wiki via notifications from a different wikixwiki-platform · org.xwiki.platform:xwiki-platform-messages…
- CVE-2025-3730PyTorch LossCTC.cpp torch.nn.functional.ctc_loss denial of servicePyTorch · torch
- CVE-2025-3729SourceCodester Web-based Pharmacy Product Management System Database Backup backup.php os command injectionSourceCodester Web-based Pharmacy Product Management System
- CVE-2025-3728SourceCodester Simple Hotel Booking System login buffer overflowSourceCodester Simple Hotel Booking System
- CVE-2025-3727PCMan FTP Server STATUS Command buffer overflowPCMan FTP Server
- CVE-2025-3726PCMan FTP Server CD Command buffer overflowPCMan FTP Server
- CVE-2025-3725PCMan FTP Server MIC Command buffer overflowPCMan FTP Server
- CVE-2025-3724PCMan FTP Server DIR Command buffer overflowPCMan FTP Server
- CVE-2025-3723PCMan FTP Server MDTM Command buffer overflowPCMan FTP Server
- CVE-2025-32817A Improper Link Resolution vulnerability (CWE-59) in the SonicWall Connect Tunnel Windows (32 and 64 bit) client, this results in unauthorizSonicWall Connect Tunnel
- CVE-2025-39472WordPress WooCommerce Social Login plugin < 2.8.3 - Cross Site Request Forgery (CSRF) vulnerabilitywpweb WooCommerce Social Login
- CVE-2025-22872Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/netgolang.org/x/net/html · golang.org/x/net
- CVE-2025-3739Drupal 8 Google Optimize Hide Page - Critical - Unsupported - SA-CONTRIB-2025-040Drupal 8 Google Optimize Hide Page · drupal/d8_google_optim…
- CVE-2025-3738Google Optimize - Critical - Unsupported - SA-CONTRIB-2025-039Drupal Google Optimize · drupal/google_optimize
- CVE-2025-3737Google Maps: Store Locator - Critical - Unsupported - SA-CONTRIB-2025-038Drupal Google Maps: Store Locator · drupal/gmap_store_locat…
- CVE-2025-3736Simple GTM - Critical - Unsupported - SA-CONTRIB-2025-037Drupal Simple GTM · drupal/simple_gtm
- CVE-2025-3735Panelizer (obsolete) - Critical - Unsupported - SA-CONTRIB-2025-036Drupal Panelizer · drupal/panelizer
- CVE-2025-3734Stage File Proxy - Moderately critical - Denial of Service - SA-CONTRIB-2025-035Drupal Stage File Proxy · drupal/stage_file_proxy
- CVE-2025-3733baguetteBox.js - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-034Drupal baguetteBox.js · drupal/baguettebox
- CVE-2024-22314IBM Storage Defender - Resiliency Service information disclosureIBM Storage Defender - Resiliency Service
- CVE-2025-2564Unauthorized View Access to Archived Channel Member InfoMattermost · github.com/mattermost/mattermost/server/v8 +3
- CVE-2025-20150Cisco Nexus Dashboard Username Enumeration VulnerabilityCisco Nexus Dashboard
- CVE-2025-20178Cisco Secure Network Analytics Privilege Escalation VulnerabilityCisco Secure Network Analytics
- CVE-2024-56736Apache HertzBeat: Server-Side Request Forgery (SSRF) in Api Config OssApache Software Foundation Apache HertzBeat
- CVE-2025-3697SourceCodester Web-based Pharmacy Product Management System edit-product.php sql injectionSourceCodester Web-based Pharmacy Product Management System
- CVE-2025-3696SourceCodester Web-based Pharmacy Product Management System search_stock. php sql injectionSourceCodester Web-based Pharmacy Product Management System
- CVE-2025-3694SourceCodester Web-based Pharmacy Product Management System Login sql injectionSourceCodester Web-based Pharmacy Product Management System
- CVE-2025-23138watch_queue: fix pipe accounting mismatchLinux
- CVE-2025-23137cpufreq/amd-pstate: Add missing NULL ptr check in amd_pstate_updateLinux
- CVE-2025-23136thermal: int340x: Add NULL check for adevLinux
- CVE-2025-23135RISC-V: KVM: Teardown riscv specific bits after kvm_exitLinux
- CVE-2025-23134ALSA: timer: Don't take register_mutex with copy_from/to_user()Linux
- CVE-2025-23131dlm: prevent NPD when writing a positive value to event_doneLinux
- CVE-2025-23130f2fs: fix to avoid panic once fallocation fails for pinfileLinux
- CVE-2025-23129wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error pathLinux
- CVE-2025-22128wifi: ath12k: Clear affinity hint before calling ath12k_pci_free_irq() in error pathLinux
- CVE-2025-22127f2fs: fix potential deadloop in prepare_compress_overwrite()Linux
- CVE-2025-22126md: fix mddev uaf while iterating all_mddevs listLinux
- CVE-2025-22125md/raid1,raid10: don't ignore IO flagsLinux
- CVE-2025-22123f2fs: fix to avoid accessing uninitialized cursegLinux
- CVE-2025-22122block: fix adding folio to bioLinux
- CVE-2025-22120ext4: goto right label 'out_mmap_sem' in ext4_setattr()Linux
- CVE-2025-22119wifi: cfg80211: init wiphy_work before allocating rfkill failsLinux
- CVE-2025-22116idpf: check error for register_netdev() on initLinux
- CVE-2025-22113ext4: avoid journaling sb update on error if journal is destroyingLinux
- CVE-2025-22112eth: bnxt: fix out-of-range access of vnic_info arrayLinux
- CVE-2025-22111net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF.Linux
- CVE-2025-22107net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()Linux
- CVE-2025-22106vmxnet3: unregister xdp rxq info in the reset pathLinux
- CVE-2025-22105bonding: check xdp prog when set bond modeLinux
- CVE-2025-22104ibmvnic: Use kernel helpers for hex dumpsLinux
- CVE-2025-22103net: fix NULL pointer dereference in l3mdev_l3_rcvLinux
- CVE-2025-22101net: libwx: fix Tx L4 checksumLinux
- CVE-2025-22099drm: xlnx: zynqmp_dpsub: Add NULL check in zynqmp_audio_initLinux
- CVE-2025-22098drm: zynqmp_dp: Fix a deadlock in zynqmp_dp_ignore_hpd_set()Linux
- CVE-2025-22096drm/msm/gem: Fix error code msm_parse_deps()Linux
- CVE-2025-22095PCI: brcmstb: Fix error path after a call to regulator_bulk_get()Linux
- CVE-2025-22093drm/amd/display: avoid NPD when ASIC does not support DMUBLinux
- CVE-2025-22092PCI: Fix NULL dereference in SR-IOV VF creation error pathLinux
- CVE-2025-22091RDMA/mlx5: Fix page_size variable overflowLinux
- CVE-2025-22084w1: fix NULL pointer dereference in probeLinux
- CVE-2025-22082iio: backend: make sure to NULL terminate stack bufferLinux
- CVE-2025-22078staging: vchiq_arm: Fix possible NPR of keep-alive threadLinux
- CVE-2025-22076exfat: fix missing shutdown checkLinux
- CVE-2025-22075rtnetlink: Allocate vfinfo size for VF GUIDs when supportedLinux
- CVE-2025-22073spufs: fix a leak on spufs_new_file() failureLinux
- CVE-2025-22071spufs: fix a leak in spufs_create_context()Linux
- CVE-2025-22070fs/9p: fix NULL pointer dereference on mkdirLinux
- CVE-2025-22066ASoC: imx-card: Add NULL check in imx_card_probe()Linux
- CVE-2025-22065idpf: fix adapter NULL pointer dereference on rebootLinux
- CVE-2025-22064netfilter: nf_tables: don't unregister hook when table is dormantLinux
- CVE-2025-22063netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 socketsLinux
- CVE-2025-22060net: mvpp2: Prevent parser TCAM memory corruptionLinux
- CVE-2025-22058udp: Fix memory accounting leak.Linux
- CVE-2025-22054arcnet: Add NULL check in com20020pci_probe()Linux
- CVE-2025-22053net: ibmveth: make veth_pool_store stop hangingLinux
- CVE-2025-22052staging: gpib: Fix Oops after disconnect in ni_usbLinux
- CVE-2025-22051staging: gpib: Fix Oops after disconnect in agilent usbLinux
- CVE-2025-22050usbnet:fix NPE during rx_completeLinux
- CVE-2025-22046uprobes/x86: Harden uretprobe syscall trampoline checkLinux
- CVE-2025-22033arm64: Don't call NULL in do_compat_alignment_fixup()Linux
- CVE-2025-22032wifi: mt76: mt7921: fix kernel panic due to null pointer dereferenceLinux
- CVE-2025-22031PCI/bwctrl: Fix NULL pointer dereference on bus number exhaustionLinux
- CVE-2025-22030mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead()Linux
- CVE-2025-22028media: vimc: skip .s_stream() for stopped entitiesLinux
- CVE-2025-22027media: streamzap: fix race between device disconnection and urb callbackLinux
- CVE-2025-22026nfsd: don't ignore the return code of svc_proc_register()Linux
- CVE-2025-22024nfsd: fix management of listener transportsLinux
- CVE-2024-58097wifi: ath11k: fix RCU stall while reaping monitor destination ringLinux
- CVE-2024-58095jfs: add check read-only before txBeginAnon() callLinux
- CVE-2024-58093PCI/ASPM: Fix link state exit during switch upstream function removalLinux
- CVE-2025-3692SourceCodester Online Eyewear Shop Master.php cross site scriptingSourceCodester Online Eyewear Shop
- CVE-2025-3691mirweiye Seven Bears Library CMS Add Link server-side request forgerymirweiye Seven Bears Library CMS
- CVE-2025-3690PHPGurukul Men Salon Management System edit-services.php sql injectionPHPGurukul Men Salon Management System
- CVE-2025-39512WordPress Bulk Term Editor plugin <= 1.1.4 - Cross Site Request Forgery (CSRF) VulnerabilityYuya Hoshino Bulk Term Editor
- CVE-2025-39513WordPress ActiveDEMAND plugin <= 0.2.46 - Broken Access Control vulnerabilityActiveDEMAND Online Agency Marketing Automation ActiveDEMAND
- CVE-2025-39514WordPress Asgaros Forum plugin <= 3.2.1 - Cross Site Scripting (XSS) vulnerabilityAsgaros Forum
- CVE-2025-39515WordPress Attendance Manager plugin <= 0.6.2 - Cross Site Scripting (XSS) Vulnerabilitytnomi Attendance Manager
- CVE-2025-39516WordPress Author WIP Progress Bar plugin <= 1.0 - Cross Site Scripting (XSS) VulnerabilityAlan Petersen Author WIP Progress Bar
- CVE-2025-39517WordPress Basic Interactive World Map plugin <= 2.7 - Cross Site Request Forgery (CSRF) to Settings Change vulnerabilityWP Map Plugins Basic Interactive World Map
- CVE-2025-39520WordPress Checkout Files Upload for WooCommerce plugin <= 2.2.0 - Cross Site Scripting (XSS) VulnerabilityWP Wham Checkout Files Upload for WooCommerce
- CVE-2025-39522WordPress Dynamic Post plugin <= 5.03 - Settings Change vulnerabilityService2Client Dynamic Post
- CVE-2025-39524WordPress Html5 Audio Player plugin <= 2.2.28 - Cross Site Scripting (XSS) VulnerabilitybPlugins Html5 Audio Player
- CVE-2025-39525WordPress Logo Carousel Slider plugin <= 2.1.3 - Cross Site Scripting (XSS) VulnerabilitywpWax Logo Carousel Slider
- CVE-2025-39528WordPress Rescue Shortcodes plugin <= 3.1 - Cross Site Scripting (XSS) vulnerabilityRescue Themes Rescue Shortcodes
- CVE-2025-39529WordPress Scriptless Social Sharing plugin <= 3.3.0 - Cross Site Scripting (XSS) VulnerabilityRobin Cornett Scriptless Social Sharing
- CVE-2025-39531WordPress Slazzer Background Changer plugin <= 3.14 - Broken Access Control Vulnerabilityslazzercom Slazzer Background Changer
- CVE-2025-39538WordPress WP-Advanced-Search plugin <= 3.3.9.4 - Arbitrary File Upload VulnerabilityMathieu Chartier WP-Advanced-Search
- CVE-2025-39540WordPress WP Flipclock plugin <= 1.9.1 - Cross Site Scripting (XSS) vulnerabilityRhys Wynne WP Flipclock
- CVE-2025-39543WordPress Royal Elementor Addons plugin <= 1.3.977 - Cross Site Scripting (XSS) vulnerabilityWP Royal Royal Elementor Addons
- CVE-2025-39545WordPress REST API Authentication plugin <= 3.6.3 - Settings Change VulnerabilityminiOrange WordPress REST API Authentication
- CVE-2025-39546WordPress ElementsReady Addons for Elementor plugin <= 6.6.2 - Cross Site Request Forgery (CSRF) Vulnerabilityquomodosoft ElementsReady Addons for Elementor
- CVE-2025-39549WordPress Most And Least Read Posts Widget plugin <= 2.5.20 - Cross Site Scripting (XSS) Vulnerabilitywhiletrue Most And Least Read Posts Widget
- CVE-2025-39552WordPress Zephyr Project Manager plugin <= 3.3.200 - Broken Access Control VulnerabilityDylan James Zephyr Project Manager
- CVE-2025-39555WordPress Church Admin plugin <= 5.0.23 - Cross Site Scripting (XSS) vulnerabilityandy_moyle Church Admin
- CVE-2025-39556WordPress Mediavine Control Panel plugin <= 2.10.6 - Sensitive Data Exposure vulnerabilityMediavine Control Panel
- CVE-2025-39560WordPress Live Forms plugin <= 4.8.4 - Broken Access Control vulnerabilityShahjada Live Forms
- CVE-2025-39563WordPress Conditional Payments for WooCommerce plugin <= 3.3.0 - Cross Site Request Forgery (CSRF) VulnerabilityWP Trio Conditional Payments for WooCommerce
- CVE-2025-39564WordPress Conditional Shipping for WooCommerce plugin <= 3.4.0 - Cross Site Request Forgery (CSRF) VulnerabilityWP Trio Conditional Shipping for WooCommerce
- CVE-2025-39565WordPress MelaPress Login Security plugin <= 2.1.0 - PHP Object Injection VulnerabilityMelaPress Login Security
- CVE-2025-39571WordPress WowStore plugin <= 4.2.4 - Broken Access Control VulnerabilityWPXPO WowStore
- CVE-2025-39572WordPress Checkout for PayPal plugin <= 1.0.38 - Cross Site Scripting (XSS) VulnerabilityNoor Alam Checkout for PayPal
- CVE-2025-39573WordPress WP Posts Carousel plugin <= 1.3.10 - Cross Site Scripting (XSS) Vulnerabilityteastudio.pl WP Posts Carousel
- CVE-2025-39574WordPress Uix Shortcodes plugin <= 2.0.4 - Cross Site Scripting (XSS) VulnerabilityUIUX Lab Uix Shortcodes
- CVE-2025-39575WordPress WPCasa plugin <= 1.3.2 - Cross Site Scripting (XSS) VulnerabilityWPSight WPCasa
- CVE-2025-39576WordPress WPAdverts plugin <= 2.2.1 - Cross Site Scripting (XSS) VulnerabilityGreg Winiarski WPAdverts
- CVE-2025-39577WordPress PropertyHive plugin <= 2.1.2 - Cross Site Scripting (XSS) VulnerabilityProperty Hive PropertyHive
- CVE-2025-39578WordPress Responsive Blocks plugin <= 2.0.2 - Cross Site Scripting (XSS) VulnerabilityCyberChimps Responsive Blocks
- CVE-2025-39579WordPress Membership For WooCommerce plugin <= 2.8.0 - Cross Site Scripting (XSS) VulnerabilityWP Swings Membership For WooCommerce
- CVE-2025-39581WordPress Themify Shortcodes plugin <= 2.1.3 - Cross Site Scripting (XSS) Vulnerabilitythemifyme Themify Shortcodes
- CVE-2025-39582WordPress WP Data Access plugin <= 5.5.36 - Cross Site Scripting (XSS) VulnerabilityPassionate Programmer Peter WP Data Access
- CVE-2025-39585WordPress Travelfic Toolkit plugin <= 1.2.1 - Cross Site Scripting (XSS) VulnerabilityThemefic Travelfic Toolkit
- CVE-2025-39589WordPress Essential Addons for Elementor plugin <= 6.1.9 - Sensitive Data Exposure VulnerabilityWPDeveloper Essential Addons for Elementor
- CVE-2025-39590WordPress Essential Addons for Elementor plugin <= 6.1.9 - Cross Site Scripting (XSS) VulnerabilityWPDeveloper Essential Addons for Elementor
- CVE-2025-39591WordPress WP Subscription Forms plugin <= 1.2.3 - Broken Access Control VulnerabilityWP Shuffle WP Subscription Forms
- CVE-2025-39593WordPress Ever Accounting plugin <= 2.1.5 - Cross Site Request Forgery (CSRF) VulnerabilityEverAccounting Ever Accounting
- CVE-2025-39597WordPress Fast eBay Listings plugin <= 2.12.15 - Open Redirection VulnerabilityArthur Yarwood Fast eBay Listings
- CVE-2025-39598WordPress Administrator Z plugin <= 2025.03.28 - Directory Traversal VulnerabilityQuý Lê 91 Administrator Z
- CVE-2025-39599WordPress Listdom plugin <= 4.0.0 - Open Redirection VulnerabilityWebilia Listdom
- CVE-2025-39600WordPress Integration for WooCommerce and QuickBooks plugin <= 1.3.1 - Cross Site Request Forgery (CSRF) VulnerabilityCRM Perks Integration for WooCommerce and QuickBooks
- CVE-2025-39602WordPress WooCommerce Product Table Lite plugin <= 3.9.5 - Broken Access Control vulnerabilityWC Product Table WooCommerce Product Table Lite
- CVE-2025-1983Stored Cross-Site Scripting in Ready_Symfonia Ready_
- CVE-2025-3689PHPGurukul Men Salon Management System edit-customer-detailed.php sql injectionPHPGurukul Men Salon Management System
- CVE-2025-3688mirweiye Seven Bears Library CMS Background Management Page cross site scriptingmirweiye Seven Bears Library CMS
- CVE-2025-3687misstt123 oasys Sticky Notes cross-site request forgerymisstt123 oasys
- CVE-2025-3686misstt123 oasys show image path traversalmisstt123 oasys
- CVE-2025-3685code-projects Patient Record Management System edit_fpatient.php sql injectioncode-projects Patient Record Management System
- CVE-2025-3684Xianqi Kindergarten Management System Child Management stu_list.php sql injectionXianqi Kindergarten Management System
- CVE-2025-3683PCMan FTP Server SIZE Command buffer overflowPCMan FTP Server
- CVE-2025-3682PCMan FTP Server PASV Command buffer overflowPCMan FTP Server
- CVE-2024-58092nfsd: fix legacy client tracking initializationLinux
- CVE-2025-22023usb: xhci: Don't skip on Stopped - Length InvalidLinux
- CVE-2025-3681PCMan FTP Server MODE Command buffer overflowPCMan FTP Server
- CVE-2025-3680PCMan FTP Server LANG Command buffer overflowPCMan FTP Server
- CVE-2025-3679PCMan FTP Server HOST Command buffer overflowPCMan FTP Server
- CVE-2025-27936Webhook Secret Exposure via Timing attack in MSteams pluginMattermost · github.com/mattermost/mattermost/server/v8 +4
- CVE-2025-31363Data exfiltration via AI plugin Jira toolMattermost · github.com/mattermost/mattermost-server +3
- CVE-2025-3678PCMan FTP Server HELP Command buffer overflowPCMan FTP Server
- CVE-2023-32197Rancher's External RoleTemplates can lead to privilege escalationSUSE rancher · github.com/rancher/rancher
- CVE-2025-3677lm-sys fastchat apply_delta.py apply_delta_low_cpu_mem deserializationlm-sys fastchat
- CVE-2025-3104WP Staging Pro <= 6.1.2 - Unauthenticated Information Exposure via getOutdatedPluginsRequest FunctionWPStaging WP STAGING Pro WordPress Backup Plugin
- CVE-2025-3676xxyopen Novel-Plus books sql injectionxxyopen Novel-Plus
- CVE-2025-27571Channel metadata visible in archived channels despite configuration settingMattermost · github.com/mattermost/mattermost-server +3
- CVE-2025-27538MFA Enforcement Bypass Allows Unauthorized Removal of MFA for Other UsersMattermost · github.com/mattermost/mattermost-server +3
- CVE-2025-24839Unauthorized AI bot activation via Wrangler pluginMattermost · github.com/mattermost/mattermost-server +3
- CVE-2025-3077Betheme <= 28.0.3 - Authenticated (Contributor+) Stored Cross-Site ScriptingMuffinGroup Betheme
- CVE-2025-0101WAGO: Year 2038 problemWAGO CC100 0751-9x01 · WAGO PFC100 G1 0750-810x/xxxx-xx… +10
- CVE-2025-3675TOTOLINK A3700R cstecgi.cgi setL2tpServerCfg access controlTOTOLINK A3700R
- CVE-2025-3674TOTOLINK A3700R cstecgi.cgi setUrlFilterRules access controlTOTOLINK A3700R
- CVE-2024-10680Form Maker by 10Web < 1.15.32 - Admin+ Stored XSSForm Maker by 10Web
- CVE-2025-3247Contact Form 7 <= 6.0.5 - Order Replay Vulnerabilityrocklobsterinc Contact Form
- CVE-2025-22018atm: Fix NULL pointer dereferenceLinux
- CVE-2025-3668TOTOLINK A3700R cstecgi.cgi setScheduleCfg access controlTOTOLINK A3700R
- CVE-2025-3667TOTOLINK A3700R cstecgi.cgi setUPnPCfg access controlTOTOLINK A3700R
- CVE-2025-3666TOTOLINK A3700R cstecgi.cgi setDdnsCfg access controlTOTOLINK A3700R
- CVE-2025-3665TOTOLINK A3700R cstecgi.cgi setSmartQosCfg access controlTOTOLINK A3700R
- CVE-2025-3664TOTOLINK A3700R cstecgi.cgi setWiFiEasyGuestCfg access controlTOTOLINK A3700R
- CVE-2025-3663TOTOLINK A3700R Password cstecgi.cgi setWiFiEasyGuestCfg access controlTOTOLINK A3700R
- CVE-2024-13452Contact Form by Supsystic <= 1.7.29 - Cross-Site Request Forgery to Stored Cross-Site Scripting via saveAsCopy AJAX Actionsupsysticcom Contact Form by Supsystic
- CVE-2025-2314User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodecozmoslabs User Profile Builder – Beautiful User Registrati…
- CVE-2025-30100Dell Alienware Command Center 6.x, versions prior to 6.7.37.0 contain an Improper Access Control Vulnerability.Dell Alienware Command Center
- CVE-2024-40068Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at id_generator/a
- CVE-2024-40069Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting (XSS) via id_generator/classes/Users.php
- CVE-2024-40070Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via id_generator/classes/User
- CVE-2024-40074Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting (XSS) via id_generator/classes/SystemSet
- CVE-2024-53304An issue in LRQA Nettitude PoshC2 after commit 09ee2cf allows unauthenticated attackers to connect to the C2 server and execute arbitrary co
- CVE-2024-58248nopCommerce through 4.90.1 does not offer locking for order placement.nopCommerce
- CVE-2024-58249In wxWidgets before 3.2.7, a crash can be triggered in wxWidgets apps when connections are refused in wxWebRequestCURL.wxWidgets
- CVE-2025-26153A Stored XSS vulnerability exists in the message compose feature of Chamilo LMS 1.11.28.
- CVE-2025-29710SourceCodester Company Website CMS 1.0 is vulnerable to Cross Site Scripting (XSS) via /dashboard/Services.
- CVE-2025-43703An issue was discovered in Ankitects Anki through 25.02.Ankitects Anki
- CVE-2025-43704Arctera/Veritas Data Insight before 7.1.2 can send cleartext credentials when configured to use HTTP Basic Authentication to a Dell Isilon OVeritas Data Insight