# CVEs published 2025-04-22

113 CVEs were published on April 22, 2025: 19 critical, 34 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2025-37088](https://cve.now/CVE-2025-37088.md): A security vulnerability has been identified in HPE Cray Data Virtualization Service (DVS). (CVSS 6.8, Hewlett Packard Enterprise (HPE) HPE Cray Data Virtualizati…)
- [CVE-2025-27087](https://cve.now/CVE-2025-27087.md): A vulnerability in the kernel of the Cray Operating System (COS) could allow an attacker to perform a local Denial of Service (DoS) attack. (CVSS 5.5, Hewlett Packard Enterprise (HPE) HPE Cray Operating System)
- [CVE-2025-37087](https://cve.now/CVE-2025-37087.md): A vulnerability in the cmdb service of the HPE Performance Cluster Manager (HPCM) could allow an attacker to gain access to an arbitrary fil (CVSS 9.8, Hewlett Packard Enterprise (HPE) HPE Performance Cluster Ma…)
- [CVE-2025-32965](https://cve.now/CVE-2025-32965.md): Compromised xrpl.js versions 4.2.1, 4.2.2, 4.2.3, 4.2.4, and 2.14.2 (CVSS 9.3, XRPLF xrpl.js · xrpl)
- [CVE-2025-23253](https://cve.now/CVE-2025-23253.md): NVIDIA NvContainer service for Windows contains a vulnerability in its usage of OpenSSL, where an attacker could exploit a hard-coded consta (CVSS 2.5, NVIDIA App)
- [CVE-2025-31328](https://cve.now/CVE-2025-31328.md): Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4 HANA (Learning Solution) (CVSS 4.6, SAP\_SE SAP S/4 HANA)
- [CVE-2025-31327](https://cve.now/CVE-2025-31327.md): OData meta-data property entity tampering in SAP Field Logistics (CVSS 4.3, SAP\_SE SAP Field Logistics)
- [CVE-2025-32961](https://cve.now/CVE-2025-32961.md): CUBA JPA Web API Vulnerable to Cross-Site Scripting (XSS) in the /download Endpoint (CVSS 6.4, cuba-platform jpawebapi · com.haulmont.addon.jpawebapi:jpaw…)
- [CVE-2025-32960](https://cve.now/CVE-2025-32960.md): CUBA Generic REST API Vulnerable to Cross-Site Scripting (XSS) in the /files Endpoint (CVSS 6.4, cuba-platform restapi · com.haulmont.addon.restapi:restapi-…)
- [CVE-2025-32959](https://cve.now/CVE-2025-32959.md): CUBA Vulnerable to Denial of Service (DoS) in the File Storage (CVSS 6.5, cuba-platform cuba · com.haulmont.cuba:cuba-core)
- [CVE-2025-32951](https://cve.now/CVE-2025-32951.md): io.jmix.rest:jmix-rest allows XSS in the /files Endpoint of the Generic REST API (CVSS 6.4, jmix-framework jmix · io.jmix.rest:jmix-rest)
- [CVE-2025-32952](https://cve.now/CVE-2025-32952.md): io.jmix.localfs:jmix-localfs affected by DoS in the Local File Storage (CVSS 6.5, jmix-framework jmix · io.jmix.localfs:jmix-localfs)
- [CVE-2025-32964](https://cve.now/CVE-2025-32964.md): ManageWiki vulnerable to permission bypass when disabling extensions requiring certain permissions in Special:ManageWiki/extensions (CVSS 4.6, miraheze ManageWiki)
- [CVE-2025-32963](https://cve.now/CVE-2025-32963.md): Minio Operator uses Kubernetes apiserver audience for AssumeRoleWithWebIdentity STS (CVSS 6.9, minio operator · github.com/minio/operator)
- [CVE-2025-32950](https://cve.now/CVE-2025-32950.md): io.jmix.localfs:jmix-localfs has a Path Traversal in Local File Storage (CVSS 6.5, jmix-framework jmix · io.jmix.localfs:jmix-localfs)
- [CVE-2025-32788](https://cve.now/CVE-2025-32788.md): OctoPrint Authenticated Reverse Proxy Page Authentication Bypass (CVSS 4.3, OctoPrint)
- [CVE-2025-34028](https://cve.now/CVE-2025-34028.md): Commvault Command Center Innovation Release \<= 11.38.25 Unathenticated Install Package Path Traversal (CVSS 9.3, KEV, Commvault Command Center Innovation Release)
- [CVE-2025-27907](https://cve.now/CVE-2025-27907.md): IBM WebSphere Application Server server-side request forgery (CVSS 4.1, IBM WebSphere Application Server)
- [CVE-2025-23251](https://cve.now/CVE-2025-23251.md): NVIDIA NeMo Framework contains a vulnerability where a user could cause an improper control of generation of code by remote code execution. (CVSS 7.6, NVIDIA NeMo Framework)
- [CVE-2025-23250](https://cve.now/CVE-2025-23250.md): NVIDIA NeMo Framework contains a vulnerability where an attacker could cause an improper limitation of a pathname to a restricted directory (CVSS 7.6, NVIDIA NeMo Framework)
- [CVE-2025-23249](https://cve.now/CVE-2025-23249.md): NVIDIA NeMo Framework contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. (CVSS 7.6, NVIDIA NeMo Framework)
- [CVE-2025-3767](https://cve.now/CVE-2025-3767.md): SQL Injection in Centreon BAM boolean KPI listing (CVSS 7.2, Centreon BAM)
- [CVE-2025-1951](https://cve.now/CVE-2025-1951.md): IBM Hardware Management Console - Power Systems command execution (CVSS 8.4, IBM Hardware Management Console - Power Systems)
- [CVE-2025-1950](https://cve.now/CVE-2025-1950.md): IBM Hardware Management Console - Power Systems command execution (CVSS 9.3, IBM Hardware Management Console - Power Systems)
- [CVE-2025-23176](https://cve.now/CVE-2025-23176.md): Tecnick – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CVSS 8.8, Tecnick TCExam)
- [CVE-2025-23175](https://cve.now/CVE-2025-23175.md): Tecnick - Multiple XSS (CWE-79) (CVSS 6.1, Tecnick TCExam)
- [CVE-2025-2092](https://cve.now/CVE-2025-2092.md): Remote site authentication secrets written to web log (CVSS 7.1, Checkmk)
- [CVE-2024-11299](https://cve.now/CVE-2024-11299.md): Memberpress \<= 1.11.37 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure (CVSS 5.3, Memberpress)
- [CVE-2025-3458](https://cve.now/CVE-2025-3458.md): Ocean Extra \<= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ocean\_gallery\_id' (CVSS 6.4, oceanwp Ocean Extra)
- [CVE-2025-3472](https://cve.now/CVE-2025-3472.md): Ocean Extra \<= 2.4.6 - Unauthenticated Arbitrary Shortcode Execution (CVSS 6.5, oceanwp Ocean Extra)
- [CVE-2025-3457](https://cve.now/CVE-2025-3457.md): Ocean Extra \<= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, oceanwp Ocean Extra)
- [CVE-2025-46254](https://cve.now/CVE-2025-46254.md): WordPress Visual Composer Website Builder plugin \<= 45.10.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Visual Composer Website Builder)
- [CVE-2025-46253](https://cve.now/CVE-2025-46253.md): WordPress GutenKit plugin \<= 2.2.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Ataur R GutenKit)
- [CVE-2025-46252](https://cve.now/CVE-2025-46252.md): WordPress Message Filter for Contact Form 7 plugin \<= 1.6.3.2 - SQL Injection vulnerability (CVSS 7.6, Kofi Mokome Message Filter for Contact Form)
- [CVE-2025-46251](https://cve.now/CVE-2025-46251.md): WordPress VikRestaurants Table Reservations and Take-Away plugin \<= 1.3.3 - CSRF to Stored XSS vulnerability (CVSS 7.1, e4jvikwp VikRestaurants)
- [CVE-2025-46250](https://cve.now/CVE-2025-46250.md): WordPress VForm plugin \<= 3.1.14 - Cross Site Scripting (XSS) Vulnerability (CVSS 5.9, Vikas Ratudi VPSUForm)
- [CVE-2025-46249](https://cve.now/CVE-2025-46249.md): WordPress Simple calendar for Elementor plugin \<= 1.6.4 - Cross Site Request Forgery (CSRF) Vulnerability (CVSS 4.3, Michael Simple calendar for Elementor)
- [CVE-2025-46247](https://cve.now/CVE-2025-46247.md): WordPress Appointment Booking Calendar plugin \<= 1.3.92 - Broken Access Control Vulnerability (CVSS 5.3, codepeople Appointment Booking Calendar)
- [CVE-2025-46246](https://cve.now/CVE-2025-46246.md): WordPress CM Answers plugin \<= 3.3.3 - Cross Site Request Forgery (CSRF) Vulnerability (CVSS 4.3, CreativeMindsSolutions CM Answers)
- [CVE-2025-46245](https://cve.now/CVE-2025-46245.md): WordPress CM Ad Changer plugin \<= 2.0.5 - Cross Site Request Forgery (CSRF) Vulnerability (CVSS 4.3, CreativeMindsSolutions CM Ad Changer)
- [CVE-2025-46244](https://cve.now/CVE-2025-46244.md): WordPress Advanced Linked Variations for Woocommerce plugin \<= 1.0.3 - Broken Access Control Vulnerability (CVSS 5.3, Dotstore Advanced Linked Variations for Woocommerce)
- [CVE-2025-46243](https://cve.now/CVE-2025-46243.md): WordPress Recover abandoned cart for WooCommerce plugin \<= 2.2 - Cross Site Request Forgery (CSRF) Vulnerability (CVSS 4.3, sonalsinha21 Recover abandoned cart for WooCommerce)
- [CVE-2025-46242](https://cve.now/CVE-2025-46242.md): WordPress Watu Quiz plugin \<= 3.4.3 - SQL Injection Vulnerability (CVSS 7.6, Bob Watu Quiz)
- [CVE-2025-46241](https://cve.now/CVE-2025-46241.md): WordPress Appointment Booking Calendar plugin \<= 1.3.92 - CSRF to SQL Injection vulnerability (CVSS 8.2, codepeople Appointment Booking Calendar)
- [CVE-2025-46240](https://cve.now/CVE-2025-46240.md): WordPress Simple Download Counter plugin \<= 2.2 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5, Jeff Starr Simple Download Counter)
- [CVE-2025-46239](https://cve.now/CVE-2025-46239.md): WordPress Theme Switcha plugin \<= 3.4 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5, Jeff Starr Theme Switcha)
- [CVE-2025-46238](https://cve.now/CVE-2025-46238.md): WordPress List Last Changes plugin \<= 1.2.1 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5, rbaer List Last Changes)
- [CVE-2025-46237](https://cve.now/CVE-2025-46237.md): WordPress Link Library plugin \<= 7.8 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5, Yannick Lefebvre Link Library)
- [CVE-2025-46236](https://cve.now/CVE-2025-46236.md): WordPress HTML Forms plugin \<= 1.5.2 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5, Link Software HTML Forms)
- [CVE-2025-46235](https://cve.now/CVE-2025-46235.md): WordPress SKT Blocks – Gutenberg based Page Builder plugin \<= 2.0 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5, sonalsinha21 SKT Blocks)
- [CVE-2025-46233](https://cve.now/CVE-2025-46233.md): WordPress Sirv plugin \<= 7.5.3 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5, Sirv CDN and Image Hosting Sirv)
- [CVE-2025-46232](https://cve.now/CVE-2025-46232.md): WordPress Download Alt Text AI plugin \<= 1.9.93 - Broken Access Control Vulnerability (CVSS 4.3, alttextai Download Alt Text AI)
- [CVE-2025-46231](https://cve.now/CVE-2025-46231.md): WordPress affiliate-toolkit plugin \<= 3.7.3 - Cross Site Request Forgery (CSRF) Vulnerability (CVSS 5.4, SERVIT Software Solutions affiliate-toolkit)
- [CVE-2025-46229](https://cve.now/CVE-2025-46229.md): WordPress Textmetrics plugin \<= 3.6.2 - Cross Site Scripting (XSS) Vulnerability (CVSS 5.9, Israpil Textmetrics)
- [CVE-2025-46228](https://cve.now/CVE-2025-46228.md): WordPress Event post plugin \<= 5.9.11 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5, Bastien Ho Event post)
- [CVE-2025-46227](https://cve.now/CVE-2025-46227.md): WordPress Custom Related Posts plugin \<= 1.7.4 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5, Brecht Custom Related Posts)
- [CVE-2025-46226](https://cve.now/CVE-2025-46226.md): WordPress MPL-Publisher plugin \<= 2.18.0 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5, ferranfg MPL-Publisher)
- [CVE-2025-46225](https://cve.now/CVE-2025-46225.md): WordPress Post in page for Elementor plugin \<= 1.0.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Michael Post in page for Elementor)
- [CVE-2025-3519](https://cve.now/CVE-2025-3519.md): Replace uploaded files knowing the file upload ID (CVSS 7.0, Unblu Spark)
- [CVE-2025-3518](https://cve.now/CVE-2025-3518.md): File upload functionality possible even when disabled (CVSS 5.3, Unblu Spark)
- [CVE-2025-26413](https://cve.now/CVE-2025-26413.md): Apache Kvrocks: The server was crashed by the negative offset (CVSS 7.5, Apache Software Foundation Apache Kvrocks)
- [CVE-2025-2594](https://cve.now/CVE-2025-2594.md): User Registration & Membership \< 4.1.3 - Authentication Bypass (CVSS 8.1, User Registration & Membership)
- [CVE-2024-13569](https://cve.now/CVE-2024-13569.md): Front End Users \<= 3.2.32 - Reflected XSS (CVSS 7.1, Front End Users)
- [CVE-2025-3814](https://cve.now/CVE-2025-3814.md): Tax Switch for WooCommerce \<= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via class-name Parameter (CVSS 6.4, wijnbergdevelopments Tax Switch for WooCommerce)
- [CVE-2025-2839](https://cve.now/CVE-2025-2839.md): WP Import Export Lite \<= 3.9.27 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting (CVSS 6.4, vjinfotech WP Import Export Lite)
- [CVE-2025-3616](https://cve.now/CVE-2025-3616.md): Greenshift 11.4 - 11.4.5 - Authenticated (Subscriber+) Arbitrary File Upload (CVSS 8.8, wpsoul Greenshift – animation and page builder blocks)
- [CVE-2024-46899](https://cve.now/CVE-2024-46899.md): Authentication credentials leakage vulnerability in Hitachi Ops Center Common Services within Hitachi Ops Center Analyzer viewpoint OVF (CVSS 7.1, Hitachi Ops Center Common Services · Hitachi Ops Center Ana…)
- [CVE-2025-2300](https://cve.now/CVE-2025-2300.md): Information exposure vulnerability in Hitachi Ops Center Common Services within Hitachi Ops Center OVA (CVSS 5.5, Hitachi Ops Center Common Services)
- [CVE-2025-3577](https://cve.now/CVE-2025-3577.md): \*\*UNSUPPORTED WHEN ASSIGNED\*\* A path traversal vulnerability in the web management interface of the Zyxel AMG1302-T10B firmware version 2.00 (CVSS 4.9, Zyxel AMG1302-T10B firmware)
- [CVE-2025-1732](https://cve.now/CVE-2025-1732.md): An improper privilege management vulnerability in the recovery function of the Zyxel USG FLEX H series uOS firmware version V1.31 and earlie (CVSS 6.7, Zyxel USG FLEX H series uOS firmware)
- [CVE-2025-1731](https://cve.now/CVE-2025-1731.md): An incorrect permission assignment vulnerability in the PostgreSQL commands of the Zyxel USG FLEX H series uOS firmware versions from V1.20 (CVSS 7.8, Zyxel USG FLEX H series uOS firmware)
- [CVE-2025-3856](https://cve.now/CVE-2025-3856.md): xxyopen Novel-Plus searchByPage sql injection (CVSS 5.3, xxyopen Novel-Plus)
- [CVE-2025-3855](https://cve.now/CVE-2025-3855.md): CodeCanyon RISE Ultimate Project Manager Profile Picture save\_profile\_image resource injection (CVSS 5.3, CodeCanyon RISE Ultimate Project Manager)
- [CVE-2025-3854](https://cve.now/CVE-2025-3854.md): H3C GR-3000AX HTTP POST Request aspForm Edit\_List\_SSID buffer overflow (CVSS 8.6, H3C GR-3000AX)
- [CVE-2025-3850](https://cve.now/CVE-2025-3850.md): YXJ2018 SpringBoot-Vue-OnlineExam API improper authentication (CVSS 6.3, YXJ2018 SpringBoot-Vue-OnlineExam)
- [CVE-2023-43378](https://cve.now/CVE-2023-43378.md): A cross-site scripting (XSS) vulnerability in Hoteldruid v3.0.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payl (CVSS 6.1)
- [CVE-2023-43958](https://cve.now/CVE-2023-43958.md): An arbitrary file upload vulnerability in the component /jquery-file-upload/server/php/index.php of Hospital Management System v4.0 allows a (CVSS 9.8)
- [CVE-2023-44752](https://cve.now/CVE-2023-44752.md): An issue in Student Study Center Desk Management System v1.0 allows attackers to bypass authentication via a crafted GET request to /php-ssc (CVSS 9.8)
- [CVE-2023-44753](https://cve.now/CVE-2023-44753.md): A stored cross-site scripting (XSS) vulnerability fin Student Management System v1.0 allows attackers to execute arbitrary web scripts or HT (CVSS 6.1)
- [CVE-2023-44755](https://cve.now/CVE-2023-44755.md): Sacco Management system v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /sacco/ajax.php. (CVSS 9.8)
- [CVE-2024-33452](https://cve.now/CVE-2024-33452.md): An issue in OpenResty lua-nginx-module v.0.10.26 and before allows a remote attacker to conduct HTTP request smuggling via a crafted HEAD re (CVSS 7.7)
- [CVE-2024-40445](https://cve.now/CVE-2024-40445.md): A directory traversal vulnerability in forkosh Mime TeX before version 1.77 allows attackers on Windows systems to read or append arbitrary (CVSS 7.3)
- [CVE-2024-40446](https://cve.now/CVE-2024-40446.md): An issue in forkosh Mime Tex before v.1.77 allows an attacker to execute arbitrary code via a crafted script (CVSS 9.8)
- [CVE-2024-46546](https://cve.now/CVE-2024-46546.md): NEXTU FLETA AX1500 WIFI6 Router v1.0.3 was discovered to contain a stack overflow via the url parameter at /boafrm/formFilter. (CVSS 7.3)
- [CVE-2024-53568](https://cve.now/CVE-2024-53568.md): A stored cross-site scripting (XSS) vulnerability in the Image Upload section of Volmarg Personal Management System v1.4.65 allows authentic (CVSS 5.4)
- [CVE-2024-53569](https://cve.now/CVE-2024-53569.md): A stored cross-site scripting (XSS) vulnerability in the New Goal Creation section of Volmarg Personal Management System v1.4.65 allows auth (CVSS 5.4)
- [CVE-2024-58250](https://cve.now/CVE-2024-58250.md): The passprompt plugin in pppd in ppp before 2.5.2 mishandles privileges. (CVSS 9.3, Samba ppp)
- [CVE-2025-26159](https://cve.now/CVE-2025-26159.md): Laravel Starter 11.11.0 is vulnerable to Cross Site Scripting (XSS) in the tags feature. (CVSS 6.1, nasirkhan/laravel-starter)
- [CVE-2025-28024](https://cve.now/CVE-2025-28024.md): TOTOLINK A810R V4.1.2cu.5182\_B20201026 was found to contain a buffer overflow vulnerability in the cstecgi.cgi (CVSS 9.8)
- [CVE-2025-28026](https://cve.now/CVE-2025-28026.md): TOTOLINK A830R V4.1.2cu.5182\_B20201102, A950RG V4.1.2cu.5161\_B20200903, A3000RU V5.9c.5185\_B20201128, and A3100R V4.1.2cu.5247\_B20211129 wer (CVSS 7.3)
- [CVE-2025-28027](https://cve.now/CVE-2025-28027.md): TOTOLINK A830R V4.1.2cu.5182\_B20201102, A950RG V4.1.2cu.5161\_B20200903, A3000RU V5.9c.5185\_B20201128, and A3100R V4.1.2cu.5247\_B20211129 was (CVSS 7.3)
- [CVE-2025-28029](https://cve.now/CVE-2025-28029.md): TOTOLINK A830R V4.1.2cu.5182\_B20201102, A950RG V4.1.2cu.5161\_B20200903, A3000RU V5.9c.5185\_B20201128, and A3100R V4.1.2cu.5247\_B20211129 wer (CVSS 7.3)
- [CVE-2025-28030](https://cve.now/CVE-2025-28030.md): TOTOLINK A810R V4.1.2cu.5182\_B20201026 was discovered to contain a stack overflow via the startTime and endTime parameters in setParentalRul (CVSS 8.8)
- [CVE-2025-28031](https://cve.now/CVE-2025-28031.md): TOTOLINK A810R V4.1.2cu.5182\_B20201026 was discovered to contain a hardcoded password for the telnet service in product.ini. (CVSS 6.5)
- [CVE-2025-28032](https://cve.now/CVE-2025-28032.md): TOTOLINK A800R V4.1.2cu.5137\_B20200730, A810R V4.1.2cu.5182\_B20201026, A830R V4.1.2cu.5182\_B20201102, A950RG V4.1.2cu.5161\_B20200903, A3000R (CVSS 7.3)
- [CVE-2025-28033](https://cve.now/CVE-2025-28033.md): TOTOLINK A800R V4.1.2cu.5137\_B20200730, A810R V4.1.2cu.5182\_B20201026, A830R V4.1.2cu.5182\_B20201102, A950RG V4.1.2cu.5161\_B20200903, A3000R (CVSS 7.3)
- [CVE-2025-28034](https://cve.now/CVE-2025-28034.md): TOTOLINK A800R V4.1.2cu.5137\_B20200730, A810R V4.1.2cu.5182\_B20201026, A830R V4.1.2cu.5182\_B20201102, A950RG V4.1.2cu.5161\_B20200903, A3000R (CVSS 9.8)
- [CVE-2025-28035](https://cve.now/CVE-2025-28035.md): TOTOLINK A830R V4.1.2cu.5182\_B20201102 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function t (CVSS 9.8)
- [CVE-2025-28036](https://cve.now/CVE-2025-28036.md): TOTOLINK A950RG V4.1.2cu.5161\_B20200903 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function (CVSS 9.8)
- [CVE-2025-28037](https://cve.now/CVE-2025-28037.md): TOTOLINK A810R V4.1.2cu.5182\_B20201026 and A950RG V4.1.2cu.5161\_B20200903 were found to contain a pre-auth remote command execution vulnerab (CVSS 9.8)
- [CVE-2025-28038](https://cve.now/CVE-2025-28038.md): TOTOLINK EX1200T V4.1.2cu.5232\_B20210713 was found to contain a pre-auth remote command execution vulnerability in the setWebWlanIdx functio (CVSS 9.8)
- [CVE-2025-28039](https://cve.now/CVE-2025-28039.md): TOTOLINK EX1200T V4.1.2cu.5232\_B20210713 was found to contain a pre-auth remote command execution vulnerability in the setUpgradeFW function (CVSS 9.8)
- [CVE-2025-29339](https://cve.now/CVE-2025-29339.md): An issue in UPF in Open5GS UPF versions up to v2.7.2 results an assertion failure vulnerability in PFCP session parameter validation. (CVSS 7.5)
- [CVE-2025-29547](https://cve.now/CVE-2025-29547.md): In Rollback Rx Professional 12.8.0.0, the driver file shieldm.sys allows local users to cause a denial of service because of a null pointer (CVSS 7.0)
- [CVE-2025-29621](https://cve.now/CVE-2025-29621.md): Francois Jacquet RosarioSIS v12.0.0 was discovered to contain a content spoofing vulnerability in the Theme configuration under the My Prefe (CVSS 7.3)
- [CVE-2025-29743](https://cve.now/CVE-2025-29743.md): D-Link DIR-816 A2V1.1.0B05 was found to contain a command injection in /goform/delRouting. (CVSS 6.5)
- [CVE-2025-43946](https://cve.now/CVE-2025-43946.md): TCPWave DDI 11.34P1C2 allows Remote Code Execution via Unrestricted File Upload (combined with Path Traversal). (CVSS 9.8)
- [CVE-2025-43947](https://cve.now/CVE-2025-43947.md): Codemers KLIMS 1.6.DEV lacks a proper access control mechanism, allowing a normal KLIMS user to perform all the actions that an admin can pe (CVSS 7.3)
- [CVE-2025-43948](https://cve.now/CVE-2025-43948.md): Codemers KLIMS 1.6.DEV allows Python code injection. (CVSS 7.3)
- [CVE-2025-43949](https://cve.now/CVE-2025-43949.md): MuM (aka Mensch und Maschine) MapEdit (aka mapedit-web) 24.2.3 is vulnerable to SQL Injection that allows an attacker to execute malicious S (CVSS 9.8)
- [CVE-2025-43950](https://cve.now/CVE-2025-43950.md): DPMAdirektPro 4.1.5 is vulnerable to DLL Hijacking. (CVSS 7.8)
- [CVE-2025-43951](https://cve.now/CVE-2025-43951.md): LabVantage before LV 8.8.0.13 HF6 allows local file inclusion. (CVSS 9.8)
- [CVE-2025-43952](https://cve.now/CVE-2025-43952.md): A cross-site scripting (reflected XSS) vulnerability was found in Mettler Toledo FreeWeight.Net Web Reports Viewer 8.4.0 (440). (CVSS 6.1)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-04-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.