# CVEs published 2025-04-23

77 CVEs were published on April 23, 2025: 5 critical, 41 high. Days are UTC.

- [CVE-2025-25046](https://cve.now/CVE-2025-25046.md): IBM InfoSphere Information Server information disclosure (CVSS 3.7, IBM InfoSphere Information Server)
- [CVE-2025-25045](https://cve.now/CVE-2025-25045.md): IBM InfoSphere Information Server information disclosure (CVSS 4.3, IBM InfoSphere Information Server)
- [CVE-2024-22351](https://cve.now/CVE-2024-22351.md): IBM InfoSphere Information Server session fixation (CVSS 6.3, IBM InfoSphere Information Server)
- [CVE-2025-46400](https://cve.now/CVE-2025-46400.md): Xfig: fig2dev segmentation fault in read\_arcobject (CVSS 5.5, xfig · Red Hat Enterprise Linux)
- [CVE-2025-46399](https://cve.now/CVE-2025-46399.md): Xfig: transfig: fig2dev segmentation fault vulnerability (CVSS 5.5, xfig · Red Hat Enterprise Linux)
- [CVE-2025-46398](https://cve.now/CVE-2025-46398.md): Xfig: fig2dev stack-overflow via read\_objects (CVSS 5.5, xfig · Red Hat Enterprise Linux)
- [CVE-2025-46397](https://cve.now/CVE-2025-46397.md): Xfig: xfig: stack-overflow allows possible code execution via local input manipulation (CVSS 7.8, xfig · Red Hat Enterprise Linux)
- [CVE-2025-32818](https://cve.now/CVE-2025-32818.md): A Null Pointer Dereference vulnerability in the SonicOS SSLVPN Virtual office interface allows a remote, unauthenticated attacker to crash t (CVSS 7.5, SonicWall SonicOS)
- [CVE-2025-3907](https://cve.now/CVE-2025-3907.md): Search API Solr - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-046 (CVSS 4.3, Drupal Search API Solr · drupal/search\_api\_solr)
- [CVE-2025-3904](https://cve.now/CVE-2025-3904.md): Sportsleague - Critical - Unsupported - SA-CONTRIB-2025-045 (CVSS 7.3, Drupal Sportsleague)
- [CVE-2025-3903](https://cve.now/CVE-2025-3903.md): UEditor - 百度编辑器 - Critical - Unsupported - SA-CONTRIB-2025-044 (CVSS 7.3, Drupal UEditor - 百度编辑器 · drupal/ueditor)
- [CVE-2025-3902](https://cve.now/CVE-2025-3902.md): Block Class - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-043 (CVSS 6.1, Drupal Block Class · drupal/block\_class)
- [CVE-2025-3901](https://cve.now/CVE-2025-3901.md): Bootstrap Site Alert - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-042 (CVSS 6.1, Drupal Bootstrap Site Alert · drupal/bootstrap\_site\_alert)
- [CVE-2025-3900](https://cve.now/CVE-2025-3900.md): Colorbox - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-041 (CVSS 6.1, Drupal Colorbox · drupal/colorbox)
- [CVE-2025-2773](https://cve.now/CVE-2025-2773.md): BEC Technologies Multiple Routers sys ping Command Injection Remote Code Execution Vulnerability (CVSS 7.2, BEC Technologies Multiple Routers)
- [CVE-2025-2772](https://cve.now/CVE-2025-2772.md): BEC Technologies Multiple Routers Insufficiently Protected Credentials Information Disclosure Vulnerability (CVSS 5.3, BEC Technologies Multiple Routers)
- [CVE-2025-2771](https://cve.now/CVE-2025-2771.md): BEC Technologies Multiple Routers Authentication Bypass Vulnerability (CVSS 5.3, BEC Technologies Multiple Routers)
- [CVE-2025-2770](https://cve.now/CVE-2025-2770.md): BEC Technologies Multiple Routers Cleartext Password Storage Information Disclosure Vulnerability (CVSS 4.9, BEC Technologies Multiple Routers)
- [CVE-2025-2769](https://cve.now/CVE-2025-2769.md): Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability (CVSS 7.8, Bdrive NetDrive)
- [CVE-2025-2768](https://cve.now/CVE-2025-2768.md): Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability (CVSS 7.8, Bdrive NetDrive)
- [CVE-2025-2767](https://cve.now/CVE-2025-2767.md): Arista NG Firewall User-Agent Cross-Site Scripting Remote Code Execution Vulnerability (CVSS 8.8, Arista NG Firewall)
- [CVE-2025-2765](https://cve.now/CVE-2025-2765.md): CarlinKit CPC200-CCPA Wireless Hotspot Hard-Coded Credentials Authentication Bypass Vulnerability (CVSS 7.6, CarlinKit CPC200-CCPA)
- [CVE-2025-2764](https://cve.now/CVE-2025-2764.md): CarlinKit CPC200-CCPA update.cgi Improper Verification of Cryptographic Signature Code Execution Vulnerability (CVSS 8.0, CarlinKit CPC200-CCPA)
- [CVE-2025-2763](https://cve.now/CVE-2025-2763.md): CarlinKit CPC200-CCPA Improper Verification of Cryptographic Signature Code Execution Vulnerability (CVSS 6.8, CarlinKit CPC200-CCPA)
- [CVE-2025-2762](https://cve.now/CVE-2025-2762.md): CarlinKit CPC200-CCPA Missing Root of Trust Local Privilege Escalation Vulnerability (CVSS 7.8, CarlinKit CPC200-CCPA)
- [CVE-2025-2761](https://cve.now/CVE-2025-2761.md): GIMP FLI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, GIMP)
- [CVE-2025-2760](https://cve.now/CVE-2025-2760.md): GIMP XWD File Parsing Integer Overflow Remote Code Execution Vulnerability (CVSS 7.8, GIMP)
- [CVE-2025-1522](https://cve.now/CVE-2025-1522.md): PostHog database\_schema Server-Side Request Forgery Information Disclosure Vulnerability (CVSS 7.1, PostHog)
- [CVE-2025-1521](https://cve.now/CVE-2025-1521.md): PostHog slack\_incoming\_webhook Server-Side Request Forgery Information Disclosure Vulnerability (CVSS 7.1, PostHog)
- [CVE-2025-1520](https://cve.now/CVE-2025-1520.md): PostHog ClickHouse Table Functions SQL Injection Remote Code Execution Vulnerability (CVSS 7.1, PostHog · @posthog/plugin-server)
- [CVE-2025-1050](https://cve.now/CVE-2025-1050.md): Sonos Era 300 Out-of-Bounds Write Remote Code Execution Vulnerability (CVSS 8.8, Sonos Era)
- [CVE-2025-1049](https://cve.now/CVE-2025-1049.md): Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8, Sonos Era)
- [CVE-2025-1048](https://cve.now/CVE-2025-1048.md): Sonos Era 300 Speaker libsmb2 Use-After-Free Remote Code Execution Vulnerability (CVSS 8.8, Sonos Era)
- [CVE-2025-1047](https://cve.now/CVE-2025-1047.md): Luxion KeyShot PVS File Parsing Access of Uninitialized Pointer Remote Code Execution Vulnerability (CVSS 7.8, Luxion KeyShot)
- [CVE-2025-1046](https://cve.now/CVE-2025-1046.md): Luxion KeyShot SKP File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Luxion KeyShot)
- [CVE-2025-1045](https://cve.now/CVE-2025-1045.md): Luxion KeyShot Viewer KSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Luxion KeyShot Viewer)
- [CVE-2024-47829](https://cve.now/CVE-2024-47829.md): pnpm uses the md5 path shortening function causes packet paths to coincide, which causes indirect packet overwriting (CVSS 6.5, pnpm)
- [CVE-2025-21605](https://cve.now/CVE-2025-21605.md): Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client (CVSS 7.5, redis)
- [CVE-2025-32969](https://cve.now/CVE-2025-32969.md): org.xwiki.platform:xwiki-platform-rest-server allows SQL injection in query endpoint of REST API (CVSS 9.3, xwiki-platform · org.xwiki.platform:xwiki-platform-rest-ser…)
- [CVE-2025-32968](https://cve.now/CVE-2025-32968.md): org.xwiki.platform:xwiki-platform-oldcore allows SQL injection in short form select requests through the script query API (CVSS 8.6, xwiki-platform · org.xwiki.platform:xwiki-platform-oldcore)
- [CVE-2025-32966](https://cve.now/CVE-2025-32966.md): Dataease H2 JDBC Connection Remote Code Execution (CVSS 8.2, dataease)
- [CVE-2025-2703](https://cve.now/CVE-2025-2703.md): The built-in XY Chart plugin is vulnerable to a DOM XSS vulnerability. (CVSS 6.8, Grafana)
- [CVE-2025-42605](https://cve.now/CVE-2025-42605.md): Improper Access Control Vulnerability in Meon Bidding Solutions (CVSS 9.3, Meon Bidding Solutions)
- [CVE-2025-42604](https://cve.now/CVE-2025-42604.md): Detailed Error Response Vulnerability in Meon KYC solutions (CVSS 6.9, Meon KYC solutions)
- [CVE-2025-42603](https://cve.now/CVE-2025-42603.md): Information Disclosure Vulnerability in Meon KYC solutions (CVSS 8.7, Meon KYC solutions)
- [CVE-2025-42602](https://cve.now/CVE-2025-42602.md): Improper Authentication Vulnerability in Meon KYC solutions (CVSS 8.2, Meon KYC solutions)
- [CVE-2025-42601](https://cve.now/CVE-2025-42601.md): Captcha Bypass Vulnerability in Meon KYC solutions (CVSS 8.2, Meon KYC solutions)
- [CVE-2025-42600](https://cve.now/CVE-2025-42600.md): Brute Force Attack Vulnerability in Meon KYC solutions (CVSS 8.2, Meon KYC solutions)
- [CVE-2024-10306](https://cve.now/CVE-2024-10306.md): Mod\_proxy\_cluster: mod\_proxy\_cluster unauthorized mcmp requests (CVSS 5.4, mod\_proxy\_cluster · Red Hat Enterprise Linux +1)
- [CVE-2025-1054](https://cve.now/CVE-2025-1054.md): UiCore Elements – Free Elementor widgets and templates \<= 1.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets (CVSS 6.4, UiCore Elements – Free widgets and templates for Elementor)
- [CVE-2025-2595](https://cve.now/CVE-2025-2595.md): Forced Browsing Vulnerability in CODESYS Visualization (CVSS 5.3, CODESYS Visualization)
- [CVE-2025-3530](https://cve.now/CVE-2025-3530.md): WordPress Simple PayPal Shopping Cart \<= 5.1.2 - Unauthenticated Product Price Manipulation (CVSS 7.5, mra13 Simple Shopping Cart)
- [CVE-2025-3529](https://cve.now/CVE-2025-3529.md): WordPress Simple PayPal Shopping Cart \<= 5.1.2 - Unauthenticated Information Exposure via file\_url Parameter (CVSS 8.2, mra13 Simple Shopping Cart)
- [CVE-2025-0618](https://cve.now/CVE-2025-0618.md): A malicious third party could invoke a persistent denial of service vulnerability in FireEye EDR agent by sending a specially-crafted tamper (CVSS 6.5, Trellix FireEye EDR HX)
- [CVE-2025-0926](https://cve.now/CVE-2025-0926.md): Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible for a non-admin user to remove system files (CVSS 5.9, Axis Communications AB AXIS Camera Station Pro)
- [CVE-2025-1056](https://cve.now/CVE-2025-1056.md): Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has identified an issue with a specific file that the server is using. (CVSS 6.1, Axis Communications AB AXIS Camera Station Pro)
- [CVE-2025-1021](https://cve.now/CVE-2025-1021.md): Missing authorization vulnerability in synocopy in Synology DiskStation Manager (DSM) before 7.1.1-42962-8, 7.2.1-69057-7 and 7.2.2-72806-3 (CVSS 7.5, Synology DiskStation Manager)
- [CVE-2024-58251](https://cve.now/CVE-2024-58251.md): In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv\[0\] containing an ANSI terminal escape seque (CVSS 2.5, BusyBox)
- [CVE-2025-27580](https://cve.now/CVE-2025-27580.md): NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 generates predictable tokens (that depend on username, ti (CVSS 7.5, NIH BRICS)
- [CVE-2025-27581](https://cve.now/CVE-2025-27581.md): NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 allows users who lack the InET role to access the InET mo (CVSS 4.3, NIH BRICS)
- [CVE-2025-28017](https://cve.now/CVE-2025-28017.md): TOTOLINK A800R V4.1.2cu.5032\_B20200408 is vulnerable to Command Injection in downloadFile.cgi via the QUERY\_STRING parameter. (CVSS 6.5)
- [CVE-2025-28018](https://cve.now/CVE-2025-28018.md): TOTOLINK A800R V4.1.2cu.5137\_B20200730 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v14 parameter. (CVSS 7.3)
- [CVE-2025-28019](https://cve.now/CVE-2025-28019.md): TOTOLINK A800R V4.1.2cu.5137\_B20200730 was found to contain a buffer overflow vulnerability in the downloadFile.cgi component (CVSS 7.3)
- [CVE-2025-28020](https://cve.now/CVE-2025-28020.md): TOTOLINK A800R V4.1.2cu.5137\_B20200730 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v25 parameter. (CVSS 7.3)
- [CVE-2025-28021](https://cve.now/CVE-2025-28021.md): TOTOLINK A810R V4.1.2cu.5182\_B20201026 was found to contain a buffer overflow vulnerability in the downloadFile.cgi through the v14 and v3 p (CVSS 7.3)
- [CVE-2025-28022](https://cve.now/CVE-2025-28022.md): TOTOLINK A810R V4.1.2cu.5182\_B20201026 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v25 parameter. (CVSS 7.3)
- [CVE-2025-28025](https://cve.now/CVE-2025-28025.md): TOTOLINK A830R V4.1.2cu.5182\_B20201102, A950RG V4.1.2cu.5161\_B20200903, A3000RU V5.9c.5185\_B20201128, and A3100R V4.1.2cu.5247\_B20211129 wer (CVSS 7.3)
- [CVE-2025-28028](https://cve.now/CVE-2025-28028.md): TOTOLINK A830R V4.1.2cu.5182\_B20201102, A950RG V4.1.2cu.5161\_B20200903, A3000RU V5.9c.5185\_B20201128, and A3100R V4.1.2cu.5247\_B20211129 wer (CVSS 7.3)
- [CVE-2025-28169](https://cve.now/CVE-2025-28169.md): BYD QIN PLUS DM-i Dilink OS v3.0\_13.1.7.2204050.1 to v3.0\_13.1.7.2312290.1\_0 was discovered to cend broadcasts to the manufacturer's cloud s (CVSS 8.1)
- [CVE-2025-29526](https://cve.now/CVE-2025-29526.md): A Cross-Site Scripting (XSS) vulnerability in the search function of Q4 Inc Investor Relations Platform v5.147.1.2 allows attackers to execu (CVSS 6.1)
- [CVE-2025-43716](https://cve.now/CVE-2025-43716.md): A directory traversal vulnerability exists in Ivanti LANDesk Management Gateway through 4.2-1.9. (CVSS 5.8, Ivanti LANDesk Management Suite)
- [CVE-2025-43965](https://cve.now/CVE-2025-43965.md): In MIFF image processing in ImageMagick before 7.1.1-44, image depth is mishandled after SetQuantumFormat is used. (CVSS 2.9, ImageMagick)
- [CVE-2025-45427](https://cve.now/CVE-2025-45427.md): In Tenda AC9 v1.0 with firmware V15.03.05.14\_multi, the security parameter of /goform/WifiBasicSet has a stack overflow vulnerability, which (CVSS 9.8)
- [CVE-2025-45428](https://cve.now/CVE-2025-45428.md): In Tenda ac9 v1.0 with firmware V15.03.05.14\_multi, the rebootTime parameter of /goform/SetSysAutoRebbotCfg has a stack overflow vulnerabili (CVSS 9.8)
- [CVE-2025-45429](https://cve.now/CVE-2025-45429.md): In the Tenda ac9 v1.0 router with firmware V15.03.05.14\_multi, there is a stack overflow vulnerability in /goform/WifiWpsStart, which may le (CVSS 9.8)
- [CVE-2025-46393](https://cve.now/CVE-2025-46393.md): In multispectral MIFF image processing in ImageMagick before 7.1.1-44, packet\_size is mishandled (related to the rendering of all channels i (CVSS 2.9, ImageMagick)
- [CVE-2025-46394](https://cve.now/CVE-2025-46394.md): In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences. (CVSS 3.2, BusyBox)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-04-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.