# CVEs published 2025-04-18

99 CVEs were published on April 18, 2025: 19 critical, 31 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2025-3796](https://cve.now/CVE-2025-3796.md): PHPGurukul Men Salon Management System contact-us.php sql injection (CVSS 5.3, PHPGurukul Men Salon Management System)
- [CVE-2025-32953](https://cve.now/CVE-2025-32953.md): z80pack Vulnerable to Exposure of the GITHUB\_TOKEN in Workflow Run Artifact (CVSS 8.7, udo-munk z80pack)
- [CVE-2025-3795](https://cve.now/CVE-2025-3795.md): DaiCuo SEO Optimization Settings Section cross site scripting (CVSS 4.8, DaiCuo)
- [CVE-2025-32377](https://cve.now/CVE-2025-32377.md): Rasa Pro Missing Authentication For Voice Connector APIs (CVSS 6.5, RasaHQ rasa-pro-security-advisories · rasa-pro)
- [CVE-2025-36625](https://cve.now/CVE-2025-36625.md): Log Poisoning in Nessus (CVSS 4.3, Tenable Nessus)
- [CVE-2025-24914](https://cve.now/CVE-2025-24914.md): Local Priviledge Escalation (CVSS 7.8, Tenable Nessus)
- [CVE-2025-1697](https://cve.now/CVE-2025-1697.md): HP Touchpoint Analytics Service – Potential Escalation of Privilege (CVSS 6.9, HP Touchpoint Analytics Service)
- [CVE-2025-32796](https://cve.now/CVE-2025-32796.md): Dify Allows Unauthorized APP Enable/Disable via API (CVSS 6.5, langgenius dify)
- [CVE-2025-32795](https://cve.now/CVE-2025-32795.md): Dify Allows Insecure User Role Access Control for APP Editing (CVSS 6.5, langgenius dify)
- [CVE-2025-32792](https://cve.now/CVE-2025-32792.md): ses's global contour bindings leak into Compartment lexical scope (CVSS 8.7, endojs endo · ses)
- [CVE-2025-32442](https://cve.now/CVE-2025-32442.md): Fastify vulnerable to invalid content-type parsing, which could lead to validation bypass (CVSS 7.5, fastify)
- [CVE-2025-32389](https://cve.now/CVE-2025-32389.md): NamelessMC Vulnerable to SQL Injections in /user/messaging and /panel/users/reports Pages (CVSS 8.6, NamelessMC Nameless)
- [CVE-2025-31120](https://cve.now/CVE-2025-31120.md): NamelessMC Vulnerable to Cookie-Based View Count Manipulation (CVSS 5.3, NamelessMC Nameless)
- [CVE-2025-31118](https://cve.now/CVE-2025-31118.md): NamelessMC Has Forum Reply Submission Time Limit Bypass (CVSS 7.1, NamelessMC Nameless)
- [CVE-2025-30357](https://cve.now/CVE-2025-30357.md): NamelessMC Forum Topic Deletion Triggered by Unrelated User Deletion (CVSS 7.3, NamelessMC Nameless)
- [CVE-2025-30158](https://cve.now/CVE-2025-30158.md): NamelessMC Forum iframe width/height abuse causing UI-based Denial of Service (CVSS 7.1, NamelessMC Nameless)
- [CVE-2025-29784](https://cve.now/CVE-2025-29784.md): NamelessMC Has Lack of Length Validation for s Parameter in GET Requests (CVSS 7.5, NamelessMC Nameless)
- [CVE-2025-27599](https://cve.now/CVE-2025-27599.md): Element X Android vulnerable to loading malicious web pages via received intent (CVSS 6.5, element-hq element-x-android)
- [CVE-2025-32434](https://cve.now/CVE-2025-32434.md): PyTorch: \`torch.load\` with \`weights\_only=True\` leads to remote code execution (CVSS 9.3, pytorch · torch)
- [CVE-2025-29953](https://cve.now/CVE-2025-29953.md): Apache ActiveMQ NMS OpenWire Client: deserialization allowlist bypass (CVSS 9.8, Apache Software Foundation Apache ActiveMQ NMS OpenWire Cli…)
- [CVE-2025-3792](https://cve.now/CVE-2025-3792.md): SeaCMS admin\_link.php sql injection (CVSS 5.1, SeaCMS)
- [CVE-2025-2950](https://cve.now/CVE-2025-2950.md): IBM i improper HTTP header neutralization (CVSS 5.4, IBM i)
- [CVE-2025-3791](https://cve.now/CVE-2025-3791.md): symisc UnQLite unqlite.c jx9MemObjStore heap-based overflow (CVSS 4.8, symisc UnQLite)
- [CVE-2025-37838](https://cve.now/CVE-2025-37838.md): HSI: ssi\_protocol: Fix use after free vulnerability in ssi\_protocol Driver Due to Race Condition (CVSS 7.8, Linux)
- [CVE-2025-40364](https://cve.now/CVE-2025-40364.md): io\_uring: fix io\_req\_prep\_async with provided buffers (CVSS 7.8, Linux)
- [CVE-2025-3790](https://cve.now/CVE-2025-3790.md): baseweb JSite Apache Druid Monitoring Console index.html access control (CVSS 6.9, baseweb JSite)
- [CVE-2025-3789](https://cve.now/CVE-2025-3789.md): baseweb JSite save cross site scripting (CVSS 5.1, baseweb JSite)
- [CVE-2025-32790](https://cve.now/CVE-2025-32790.md): Dify Allows Insecure User Role Access Control for APP DSL Exporting (CVSS 6.3, langgenius dify)
- [CVE-2024-45651](https://cve.now/CVE-2024-45651.md): IBM Sterling Connect:Direct Web Services session fixation (CVSS 6.3, IBM Sterling Connect:Direct Web Services)
- [CVE-2024-49808](https://cve.now/CVE-2024-49808.md): IBM Sterling Connect:Direct Web Services improper authorization (CVSS 6.3, IBM Sterling Connect:Direct Web Services)
- [CVE-2025-3788](https://cve.now/CVE-2025-3788.md): baseweb JSite save cross site scripting (CVSS 5.1, baseweb JSite)
- [CVE-2025-3787](https://cve.now/CVE-2025-3787.md): PbootCMS Image server-side request forgery (CVSS 5.1, PbootCMS)
- [CVE-2025-3106](https://cve.now/CVE-2025-3106.md): LA-Studio Element Kit for Elementor \<= 1.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Table of Contents Widget (CVSS 6.4, choijun LA-Studio Element Kit for Elementor)
- [CVE-2025-3786](https://cve.now/CVE-2025-3786.md): Tenda AC15 WifiExtraSet fromSetWirelessRepeat buffer overflow (CVSS 8.7, Tenda AC15)
- [CVE-2025-2492](https://cve.now/CVE-2025-2492.md): An improper authentication control vulnerability exists in AiCloud. (CVSS 9.2, ASUS Router)
- [CVE-2025-3785](https://cve.now/CVE-2025-3785.md): D-Link DWR-M961 Authorization Interface formStaticDHCP stack-based overflow (CVSS 8.7, D-Link DWR-M961)
- [CVE-2025-3056](https://cve.now/CVE-2025-3056.md): Download Manager \<= 3.3.12 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload (CVSS 5.4, codename065 Download Manager)
- [CVE-2025-40325](https://cve.now/CVE-2025-40325.md): md/raid10: wait barrier before returning discard request with REQ\_NOWAIT (no CVSS, Linux)
- [CVE-2025-40114](https://cve.now/CVE-2025-40114.md): iio: light: Add check for array bounds in veml6075\_read\_int\_time\_ms (CVSS 7.8, Linux)
- [CVE-2025-40014](https://cve.now/CVE-2025-40014.md): objtool, spi: amd: Fix out-of-bounds stack access in amd\_set\_spi\_freq() (CVSS 7.8, Linux)
- [CVE-2025-39989](https://cve.now/CVE-2025-39989.md): x86/mce: use is\_copy\_from\_user() to determine copy-from-user context (no CVSS, Linux)
- [CVE-2025-39930](https://cve.now/CVE-2025-39930.md): ASoC: simple-card-utils: Don't use \_\_free(device\_node) at graph\_util\_parse\_dai() (CVSS 8.4, Linux)
- [CVE-2025-39778](https://cve.now/CVE-2025-39778.md): objtool, nvmet: Fix out-of-bounds stack access in nvmet\_ctrl\_state\_show() (CVSS 7.1, Linux)
- [CVE-2025-39755](https://cve.now/CVE-2025-39755.md): staging: gpib: Fix cb7210 pcmcia Oops (CVSS 5.5, Linux)
- [CVE-2025-39735](https://cve.now/CVE-2025-39735.md): jfs: fix slab-out-of-bounds read in ea\_get() (CVSS 7.1, Linux)
- [CVE-2025-39728](https://cve.now/CVE-2025-39728.md): clk: samsung: Fix UBSAN panic in samsung\_clk\_init() (CVSS 5.5, Linux)
- [CVE-2025-39688](https://cve.now/CVE-2025-39688.md): nfsd: allow SC\_STATUS\_FREEABLE when searching via nfs4\_lookup\_stateid() (CVSS 7.5, Linux)
- [CVE-2025-38637](https://cve.now/CVE-2025-38637.md): net\_sched: skbprio: Remove overly strict queue assertions (no CVSS, Linux)
- [CVE-2025-38575](https://cve.now/CVE-2025-38575.md): ksmbd: use aead\_request\_free to match aead\_request\_alloc (no CVSS, Linux)
- [CVE-2025-38479](https://cve.now/CVE-2025-38479.md): dmaengine: fsl-edma: free irq correctly in remove path (no CVSS, Linux)
- [CVE-2025-38240](https://cve.now/CVE-2025-38240.md): drm/mediatek: dp: drm\_err =\> dev\_err in HPD path to avoid NULL ptr (no CVSS, Linux)
- [CVE-2025-38152](https://cve.now/CVE-2025-38152.md): remoteproc: core: Clear table\_sz when rproc\_shutdown (CVSS 5.5, Linux)
- [CVE-2025-38104](https://cve.now/CVE-2025-38104.md): drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV (no CVSS, Linux)
- [CVE-2025-38049](https://cve.now/CVE-2025-38049.md): x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors (CVSS 5.5, Linux)
- [CVE-2025-37925](https://cve.now/CVE-2025-37925.md): jfs: reject on-disk inodes of an unsupported type (no CVSS, Linux)
- [CVE-2025-37893](https://cve.now/CVE-2025-37893.md): LoongArch: BPF: Fix off-by-one error in build\_prologue() (CVSS 7.8, Linux)
- [CVE-2025-37860](https://cve.now/CVE-2025-37860.md): sfc: fix NULL dereferences in ef100\_process\_design\_param() (CVSS 5.5, Linux)
- [CVE-2025-37785](https://cve.now/CVE-2025-37785.md): ext4: fix OOB read when checking dotdot dir (CVSS 7.8, Linux)
- [CVE-2025-2162](https://cve.now/CVE-2025-2162.md): MapPress Maps for WordPress \< 2.94.10 - Admin+ Stored XSS (CVSS 4.8, MapPress Maps for WordPress)
- [CVE-2025-1863](https://cve.now/CVE-2025-1863.md): Insecure default settings for recorder products (CVSS 9.8, Yokogawa Electric GX10 / GX20 / GP10 / GP20 Paperless Re… +6)
- [CVE-2025-3783](https://cve.now/CVE-2025-3783.md): SourceCodester Web-based Pharmacy Product Management System add-product.php unrestricted upload (CVSS 5.3, SourceCodester Web-based Pharmacy Product Management System)
- [CVE-2025-3598](https://cve.now/CVE-2025-3598.md): Coupon Affiliates – Affiliate Plugin for WooCommerce \<= 6.3.0 - Reflected Cross-Site Scripting via 'commission\_summary' Parameter (CVSS 6.1, elliotvs Coupon Affiliates – Affiliate Plugin for WooCommer…)
- [CVE-2025-39469](https://cve.now/CVE-2025-39469.md): WordPress Modal Survey plugin \<= 2.0.2.0.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, pantherius Modal Survey)
- [CVE-2025-39470](https://cve.now/CVE-2025-39470.md): WordPress Ivy School theme \<= 1.6.0 - Local File Inclusion Vulnerability (CVSS 8.1, ThimPress Ivy School)
- [CVE-2025-39471](https://cve.now/CVE-2025-39471.md): WordPress Modal Survey plugin \<= 2.0.2.0.1 - SQL Injection vulnerability (CVSS 9.3, pantherius Modal Survey)
- [CVE-2025-42599](https://cve.now/CVE-2025-42599.md): Active! mail 6 BuildInfo: 6.60.05008561 and earlier contains a stack-based buffer overflow vulnerability. (CVSS 9.8, KEV, QUALITIA CO. Active! mail)
- [CVE-2025-2613](https://cve.now/CVE-2025-2613.md): Login Manager – Design Login Page, View Login Activity, Limit Login Attempts \<= 2.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via Custom URL (CVSS 4.4, mehrazmorshed Login Manager – Design Login Page, View Login…)
- [CVE-2024-13650](https://cve.now/CVE-2024-13650.md): Piotnet Addons For Elementor \<= 2.4.36 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, piotnetdotcom Piotnet Addons For Elementor)
- [CVE-2025-3520](https://cve.now/CVE-2025-3520.md): Avatar \<= 0.1.4 - Authenticated (Subscriber+) Arbitrary File Deletion (CVSS 8.1, wonderboymusic Avatar)
- [CVE-2025-0467](https://cve.now/CVE-2025-0467.md): GPU DDK - rgxfw\_hwperf\_get\_packet\_buffer OOB write (CVSS 8.2, Imagination Technologies Graphics DDK)
- [CVE-2025-25427](https://cve.now/CVE-2025-25427.md): XSS in TP-Link TL-WR841N v14/v14.6/v14.8 Upnp page (CVSS 8.6, TP-Link Systems TL-WR841N v14/v14.6/v14.8)
- [CVE-2024-29643](https://cve.now/CVE-2024-29643.md): An issue in croogo v.3.0.2 allows an attacker to perform Host header injection via the feed.rss component. (CVSS 9.1, croogo/croogo)
- [CVE-2024-41447](https://cve.now/CVE-2024-41447.md): A stored cross-site scripting (XSS) vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a c (CVSS 5.4, org.opencms:opencms-core)
- [CVE-2024-46089](https://cve.now/CVE-2024-46089.md): 74cms \<=3.33 is vulnerable to remote code execution (RCE) in the background interface apiadmin. (CVSS 6.3)
- [CVE-2024-53591](https://cve.now/CVE-2024-53591.md): An issue in the login page of Seclore v3.27.5.0 allows attackers to bypass authentication via a brute force attack. (CVSS 9.8)
- [CVE-2024-57493](https://cve.now/CVE-2024-57493.md): An issue in redoxOS relibc before commit 98aa4ea5 allows a local attacker to cause a denial of service via the setsockopt function. (CVSS 5.5)
- [CVE-2025-25983](https://cve.now/CVE-2025-25983.md): An issue in Macro-video Technologies Co.,Ltd V380 Pro android application 2.1.44 and V380 Pro android application 2.1.64 allows an attacker (CVSS 3.4)
- [CVE-2025-25984](https://cve.now/CVE-2025-25984.md): An issue in Macro-video Technologies Co.,Ltd V380E6\_C1 IP camera (Hw\_HsAKPIQp\_WF\_XHR) 1020302 allows a physically proximate attacker to exec (CVSS 6.8)
- [CVE-2025-25985](https://cve.now/CVE-2025-25985.md): An issue in Macro-video Technologies Co.,Ltd V380E6\_C1 IP camera (Hw\_HsAKPIQp\_WF\_XHR) 1020302 allows a physically proximate attacker to exec (CVSS 2.6)
- [CVE-2025-28059](https://cve.now/CVE-2025-28059.md): An access control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows deleted users to retain access to system resources due to impro (CVSS 7.5)
- [CVE-2025-28197](https://cve.now/CVE-2025-28197.md): Crawl4AI \<=0.4.247 is vulnerable to SSRF in /crawl4ai/async\_dispatcher.py. (CVSS 9.1, crawl4ai)
- [CVE-2025-28228](https://cve.now/CVE-2025-28228.md): A credential exposure vulnerability in Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Web v01.09, v01.08, v01.07, and Display v1.4, v1.2 (CVSS 7.5)
- [CVE-2025-28229](https://cve.now/CVE-2025-28229.md): Incorrect access control in Orban OPTIMOD 5950 Firmware v1.0.0.2 and System v2.2.15 allows attackers to bypass authentication and gain Admin (CVSS 9.8)
- [CVE-2025-28230](https://cve.now/CVE-2025-28230.md): Incorrect access control in JMBroadcast JMB0150 Firmware v1.0 allows attackers to access hardcoded administrator credentials. (CVSS 9.1)
- [CVE-2025-28231](https://cve.now/CVE-2025-28231.md): Incorrect access control in Itel Electronics IP Stream v1.7.0.6 allows unauthorized attackers to execute arbitrary commands with Administrat (CVSS 9.1)
- [CVE-2025-28232](https://cve.now/CVE-2025-28232.md): Incorrect access control in the HOME.php endpoint of JMBroadcast JMB0150 Firmware v1.0 allows attackers to access the Admin panel without au (CVSS 9.1)
- [CVE-2025-28233](https://cve.now/CVE-2025-28233.md): Incorrect access control in BW Broadcast TX600 (14980), TX300 (32990) (31448), TX150, TX1000, TX30, and TX50 Hardware Version: 2, Software V (CVSS 9.1)
- [CVE-2025-28235](https://cve.now/CVE-2025-28235.md): An information disclosure vulnerability in the component /socket.io/1/websocket/ of Soundcraft Ui Series Model(s) Ui12 and Ui16 Firmware v1. (CVSS 7.5)
- [CVE-2025-28236](https://cve.now/CVE-2025-28236.md): Nautel VX Series transmitters VX SW v6.4.0 and below was discovered to contain a remote code execution (RCE) vulnerability in the firmware u (CVSS 9.8)
- [CVE-2025-28237](https://cve.now/CVE-2025-28237.md): An issue in WorldCast Systems ECRESO FM/DAB/TV Transmitter v1.10.1 allows authenticated attackers to escalate privileges via a crafted JSON (CVSS 8.8)
- [CVE-2025-28238](https://cve.now/CVE-2025-28238.md): Improper session management in Elber REBLE310 Firmware v5.5.1.R , Equipment Model: REBLE310/RX10/4ASI allows attackers to execute a session (CVSS 9.8)
- [CVE-2025-28242](https://cve.now/CVE-2025-28242.md): Improper session management in the /login\_ok.htm endpoint of DAEnetIP4 METO v1.25 allows attackers to execute a session hijacking attack. (CVSS 9.8)
- [CVE-2025-28355](https://cve.now/CVE-2025-28355.md): Volmarg Personal Management System 1.4.65 is vulnerable to Cross Site Request Forgery (CSRF) allowing attackers to execute arbitrary code an (CVSS 4.7)
- [CVE-2025-29058](https://cve.now/CVE-2025-29058.md): An issue in Qimou CMS v.3.34.0 allows a remote attacker to execute arbitrary code via the upgrade.php component. (CVSS 9.8)
- [CVE-2025-29209](https://cve.now/CVE-2025-29209.md): TOTOLINK X18 v9.1.0cu.2024\_B20220329 has an unauthorized arbitrary command execution in the enable parameter' of the sub\_41105C function of (CVSS 9.8)
- [CVE-2025-29512](https://cve.now/CVE-2025-29512.md): Cross-Site Scripting (XSS) vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code and potentially render (CVSS 6.1)
- [CVE-2025-29513](https://cve.now/CVE-2025-29513.md): Cross-Site Scripting (XSS) vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code in the admin API Access (CVSS 6.1)
- [CVE-2025-29625](https://cve.now/CVE-2025-29625.md): A buffer overflow vulnerability in Astrolog v7.70 allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via an overl (CVSS 7.8)
- [CVE-2025-43903](https://cve.now/CVE-2025-43903.md): NSSCryptoSignBackend.cc in Poppler before 25.04.0 does not verify the adbe.pkcs7.sha1 signatures on documents, resulting in potential signat (CVSS 4.3, freedesktop Poppler)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-04-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.