CVEs published April 18, 2025
99 CVEs were published on April 18, 2025: 19 critical, 31 high. 1 is now in CISA KEV.
- Published
- 99
- Critical
- 19
- High
- 31
- Medium
- 39
- Low
- 2
- Unrated
- 8
- Now in CISA KEV
- 1
- Fix available
- 31
Most affected products
- Linux
- 23
- NamelessMC Nameless
- 6
- baseweb JSite
- 3
- langgenius dify
- 3
- IBM Sterling Connect:Direct Web Services
- 2
- pantherius Modal Survey
- 2
- Tenable Nessus
- 2
- Apache Software Foundation Apache ActiveMQ NMS OpenWire Cli…
- 1
- ASUS Router
- 1
- choijun LA-Studio Element Kit for Elementor
- 1
Critical 19
- CVE-2025-32434PyTorch: `torch.load` with `weights_only=True` leads to remote code executionpytorch · torch
- CVE-2025-29953Apache ActiveMQ NMS OpenWire Client: deserialization allowlist bypassApache Software Foundation Apache ActiveMQ NMS OpenWire Cli…
- CVE-2025-2492An improper authentication control vulnerability exists in AiCloud.ASUS Router
- CVE-2025-1863Insecure default settings for recorder productsYokogawa Electric GX10 / GX20 / GP10 / GP20 Paperless Re… +6
- CVE-2025-39471WordPress Modal Survey plugin <= 2.0.2.0.1 - SQL Injection vulnerabilitypantherius Modal Survey
- CVE-2025-42599Active! mail 6 BuildInfo: 6.60.05008561 and earlier contains a stack-based buffer overflow vulnerability.QUALITIA CO. Active! mail
- CVE-2024-29643An issue in croogo v.3.0.2 allows an attacker to perform Host header injection via the feed.rss component.croogo/croogo
- CVE-2024-53591An issue in the login page of Seclore v3.27.5.0 allows attackers to bypass authentication via a brute force attack.
- CVE-2025-28197Crawl4AI <=0.4.247 is vulnerable to SSRF in /crawl4ai/async_dispatcher.py.crawl4ai
- CVE-2025-28229Incorrect access control in Orban OPTIMOD 5950 Firmware v1.0.0.2 and System v2.2.15 allows attackers to bypass authentication and gain Admin
- CVE-2025-28230Incorrect access control in JMBroadcast JMB0150 Firmware v1.0 allows attackers to access hardcoded administrator credentials.
- CVE-2025-28231Incorrect access control in Itel Electronics IP Stream v1.7.0.6 allows unauthorized attackers to execute arbitrary commands with Administrat
- CVE-2025-28232Incorrect access control in the HOME.php endpoint of JMBroadcast JMB0150 Firmware v1.0 allows attackers to access the Admin panel without au
- CVE-2025-28233Incorrect access control in BW Broadcast TX600 (14980), TX300 (32990) (31448), TX150, TX1000, TX30, and TX50 Hardware Version: 2, Software V
- CVE-2025-28236Nautel VX Series transmitters VX SW v6.4.0 and below was discovered to contain a remote code execution (RCE) vulnerability in the firmware u
- CVE-2025-28238Improper session management in Elber REBLE310 Firmware v5.5.1.R , Equipment Model: REBLE310/RX10/4ASI allows attackers to execute a session
- CVE-2025-28242Improper session management in the /login_ok.htm endpoint of DAEnetIP4 METO v1.25 allows attackers to execute a session hijacking attack.
- CVE-2025-29058An issue in Qimou CMS v.3.34.0 allows a remote attacker to execute arbitrary code via the upgrade.php component.
- CVE-2025-29209TOTOLINK X18 v9.1.0cu.2024_B20220329 has an unauthorized arbitrary command execution in the enable parameter' of the sub_41105C function of
High 31
- CVE-2025-32953z80pack Vulnerable to Exposure of the GITHUB_TOKEN in Workflow Run Artifactudo-munk z80pack
- CVE-2025-24914Local Priviledge EscalationTenable Nessus
- CVE-2025-32792ses's global contour bindings leak into Compartment lexical scopeendojs endo · ses
- CVE-2025-32442Fastify vulnerable to invalid content-type parsing, which could lead to validation bypassfastify
- CVE-2025-32389NamelessMC Vulnerable to SQL Injections in /user/messaging and /panel/users/reports PagesNamelessMC Nameless
- CVE-2025-31118NamelessMC Has Forum Reply Submission Time Limit BypassNamelessMC Nameless
- CVE-2025-30357NamelessMC Forum Topic Deletion Triggered by Unrelated User DeletionNamelessMC Nameless
- CVE-2025-30158NamelessMC Forum iframe width/height abuse causing UI-based Denial of ServiceNamelessMC Nameless
- CVE-2025-29784NamelessMC Has Lack of Length Validation for s Parameter in GET RequestsNamelessMC Nameless
- CVE-2025-37838HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race ConditionLinux
- CVE-2025-40364io_uring: fix io_req_prep_async with provided buffersLinux
- CVE-2025-3786Tenda AC15 WifiExtraSet fromSetWirelessRepeat buffer overflowTenda AC15
- CVE-2025-3785D-Link DWR-M961 Authorization Interface formStaticDHCP stack-based overflowD-Link DWR-M961
- CVE-2025-40114iio: light: Add check for array bounds in veml6075_read_int_time_msLinux
- CVE-2025-40014objtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq()Linux
- CVE-2025-39930ASoC: simple-card-utils: Don't use __free(device_node) at graph_util_parse_dai()Linux
- CVE-2025-39778objtool, nvmet: Fix out-of-bounds stack access in nvmet_ctrl_state_show()Linux
- CVE-2025-39735jfs: fix slab-out-of-bounds read in ea_get()Linux
- CVE-2025-39688nfsd: allow SC_STATUS_FREEABLE when searching via nfs4_lookup_stateid()Linux
- CVE-2025-37893LoongArch: BPF: Fix off-by-one error in build_prologue()Linux
- CVE-2025-37785ext4: fix OOB read when checking dotdot dirLinux
- CVE-2025-39469WordPress Modal Survey plugin <= 2.0.2.0.1 - Cross Site Scripting (XSS) vulnerabilitypantherius Modal Survey
- CVE-2025-39470WordPress Ivy School theme <= 1.6.0 - Local File Inclusion VulnerabilityThimPress Ivy School
- CVE-2025-3520Avatar <= 0.1.4 - Authenticated (Subscriber+) Arbitrary File Deletionwonderboymusic Avatar
- CVE-2025-0467GPU DDK - rgxfw_hwperf_get_packet_buffer OOB writeImagination Technologies Graphics DDK
- CVE-2025-25427XSS in TP-Link TL-WR841N v14/v14.6/v14.8 Upnp pageTP-Link Systems TL-WR841N v14/v14.6/v14.8
- CVE-2025-28059An access control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows deleted users to retain access to system resources due to impro
- CVE-2025-28228A credential exposure vulnerability in Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Web v01.09, v01.08, v01.07, and Display v1.4, v1.2
- CVE-2025-28235An information disclosure vulnerability in the component /socket.io/1/websocket/ of Soundcraft Ui Series Model(s) Ui12 and Ui16 Firmware v1.
- CVE-2025-28237An issue in WorldCast Systems ECRESO FM/DAB/TV Transmitter v1.10.1 allows authenticated attackers to escalate privileges via a crafted JSON
- CVE-2025-29625A buffer overflow vulnerability in Astrolog v7.70 allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via an overl
Medium, low and unrated 49
- CVE-2025-3796PHPGurukul Men Salon Management System contact-us.php sql injectionPHPGurukul Men Salon Management System
- CVE-2025-3795DaiCuo SEO Optimization Settings Section cross site scriptingDaiCuo
- CVE-2025-32377Rasa Pro Missing Authentication For Voice Connector APIsRasaHQ rasa-pro-security-advisories · rasa-pro
- CVE-2025-36625Log Poisoning in NessusTenable Nessus
- CVE-2025-1697HP Touchpoint Analytics Service – Potential Escalation of PrivilegeHP Touchpoint Analytics Service
- CVE-2025-32796Dify Allows Unauthorized APP Enable/Disable via APIlanggenius dify
- CVE-2025-32795Dify Allows Insecure User Role Access Control for APP Editinglanggenius dify
- CVE-2025-31120NamelessMC Vulnerable to Cookie-Based View Count ManipulationNamelessMC Nameless
- CVE-2025-27599Element X Android vulnerable to loading malicious web pages via received intentelement-hq element-x-android
- CVE-2025-3792SeaCMS admin_link.php sql injectionSeaCMS
- CVE-2025-2950IBM i improper HTTP header neutralizationIBM i
- CVE-2025-3791symisc UnQLite unqlite.c jx9MemObjStore heap-based overflowsymisc UnQLite
- CVE-2025-3790baseweb JSite Apache Druid Monitoring Console index.html access controlbaseweb JSite
- CVE-2025-3789baseweb JSite save cross site scriptingbaseweb JSite
- CVE-2025-32790Dify Allows Insecure User Role Access Control for APP DSL Exportinglanggenius dify
- CVE-2024-45651IBM Sterling Connect:Direct Web Services session fixationIBM Sterling Connect:Direct Web Services
- CVE-2024-49808IBM Sterling Connect:Direct Web Services improper authorizationIBM Sterling Connect:Direct Web Services
- CVE-2025-3788baseweb JSite save cross site scriptingbaseweb JSite
- CVE-2025-3787PbootCMS Image server-side request forgeryPbootCMS
- CVE-2025-3106LA-Studio Element Kit for Elementor <= 1.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Table of Contents Widgetchoijun LA-Studio Element Kit for Elementor
- CVE-2025-3056Download Manager <= 3.3.12 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadcodename065 Download Manager
- CVE-2025-40325md/raid10: wait barrier before returning discard request with REQ_NOWAITLinux
- CVE-2025-39989x86/mce: use is_copy_from_user() to determine copy-from-user contextLinux
- CVE-2025-39755staging: gpib: Fix cb7210 pcmcia OopsLinux
- CVE-2025-39728clk: samsung: Fix UBSAN panic in samsung_clk_init()Linux
- CVE-2025-38637net_sched: skbprio: Remove overly strict queue assertionsLinux
- CVE-2025-38575ksmbd: use aead_request_free to match aead_request_allocLinux
- CVE-2025-38479dmaengine: fsl-edma: free irq correctly in remove pathLinux
- CVE-2025-38240drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptrLinux
- CVE-2025-38152remoteproc: core: Clear table_sz when rproc_shutdownLinux
- CVE-2025-38104drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOVLinux
- CVE-2025-38049x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitorsLinux
- CVE-2025-37925jfs: reject on-disk inodes of an unsupported typeLinux
- CVE-2025-37860sfc: fix NULL dereferences in ef100_process_design_param()Linux
- CVE-2025-2162MapPress Maps for WordPress < 2.94.10 - Admin+ Stored XSSMapPress Maps for WordPress
- CVE-2025-3783SourceCodester Web-based Pharmacy Product Management System add-product.php unrestricted uploadSourceCodester Web-based Pharmacy Product Management System
- CVE-2025-3598Coupon Affiliates – Affiliate Plugin for WooCommerce <= 6.3.0 - Reflected Cross-Site Scripting via 'commission_summary' Parameterelliotvs Coupon Affiliates – Affiliate Plugin for WooCommer…
- CVE-2025-2613Login Manager – Design Login Page, View Login Activity, Limit Login Attempts <= 2.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via Custom URLmehrazmorshed Login Manager – Design Login Page, View Login…
- CVE-2024-13650Piotnet Addons For Elementor <= 2.4.36 - Authenticated (Contributor+) Stored Cross-Site Scriptingpiotnetdotcom Piotnet Addons For Elementor
- CVE-2024-41447A stored cross-site scripting (XSS) vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a corg.opencms:opencms-core
- CVE-2024-4608974cms <=3.33 is vulnerable to remote code execution (RCE) in the background interface apiadmin.
- CVE-2024-57493An issue in redoxOS relibc before commit 98aa4ea5 allows a local attacker to cause a denial of service via the setsockopt function.
- CVE-2025-25983An issue in Macro-video Technologies Co.,Ltd V380 Pro android application 2.1.44 and V380 Pro android application 2.1.64 allows an attacker
- CVE-2025-25984An issue in Macro-video Technologies Co.,Ltd V380E6_C1 IP camera (Hw_HsAKPIQp_WF_XHR) 1020302 allows a physically proximate attacker to exec
- CVE-2025-25985An issue in Macro-video Technologies Co.,Ltd V380E6_C1 IP camera (Hw_HsAKPIQp_WF_XHR) 1020302 allows a physically proximate attacker to exec
- CVE-2025-28355Volmarg Personal Management System 1.4.65 is vulnerable to Cross Site Request Forgery (CSRF) allowing attackers to execute arbitrary code an
- CVE-2025-29512Cross-Site Scripting (XSS) vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code and potentially render
- CVE-2025-29513Cross-Site Scripting (XSS) vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code in the admin API Access
- CVE-2025-43903NSSCryptoSignBackend.cc in Poppler before 25.04.0 does not verify the adbe.pkcs7.sha1 signatures on documents, resulting in potential signatfreedesktop Poppler