# CVEs published 2025-04-29

92 CVEs were published on April 29, 2025: 8 critical, 19 high. Days are UTC.

- [CVE-2025-29906](https://cve.now/CVE-2025-29906.md): Finit bundled getty can bypass /bin/login (CVSS 8.6, troglobit finit)
- [CVE-2025-46552](https://cve.now/CVE-2025-46552.md): KHC-INVITATION-AUTOMATION Sensitive User Information Leakage in Invitation Automation (CVSS 6.3, Krypto-Hashers-Community KHC-INVITATION-AUTOMATION)
- [CVE-2025-3910](https://cve.now/CVE-2025-3910.md): Org.keycloak.authentication: two factor authentication bypass (CVSS 5.4, keycloak · Red Hat Build of Keycloak +1)
- [CVE-2025-3501](https://cve.now/CVE-2025-3501.md): Org.keycloak.protocol.services: keycloak hostname verification (CVSS 8.2, keycloak · Red Hat Build of Keycloak +2)
- [CVE-2025-46344](https://cve.now/CVE-2025-46344.md): Auth0 NextJS SDK v4 Missing Session Invalidation (CVSS 4.9, nextjs-auth0 · @auth0/nextjs-auth0)
- [CVE-2025-46550](https://cve.now/CVE-2025-46550.md): Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scripting (CVSS 4.3, yeswiki · yeswiki/yeswiki)
- [CVE-2025-46549](https://cve.now/CVE-2025-46549.md): Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scripting (CVSS 4.3, yeswiki · yeswiki/yeswiki)
- [CVE-2025-46348](https://cve.now/CVE-2025-46348.md): YesWiki Vulnerable to Unauthenticated Site Backup Creation and Download (CVSS 10.0, yeswiki · yeswiki/yeswiki)
- [CVE-2025-4078](https://cve.now/CVE-2025-4078.md): Wangshen SecGate 3600 g=log\_export\_file path traversal (CVSS 5.3, Wangshen SecGate)
- [CVE-2025-0520](https://cve.now/CVE-2025-0520.md): ShowDoc \< 2.8.7 Unauthenticated File Upload Remote Code Execution (CVSS 9.4, ShowDoc · showdoc/showdoc)
- [CVE-2025-4080](https://cve.now/CVE-2025-4080.md): PHPGurukul Online Nurse Hiring System view-request.php sql injection (CVSS 5.3, PHPGurukul Online Nurse Hiring System)
- [CVE-2025-4079](https://cve.now/CVE-2025-4079.md): PCMan FTP Server RENAME Command buffer overflow (CVSS 6.9, PCMan FTP Server)
- [CVE-2025-4077](https://cve.now/CVE-2025-4077.md): code-projects School Billing System searchrec stack-based overflow (CVSS 4.8, code-projects School Billing System)
- [CVE-2025-4076](https://cve.now/CVE-2025-4076.md): LB-LINK BL-AC3600 Password lighttpd.cgi easy\_uci\_set\_option\_string\_0 command injection (CVSS 5.3, LB-LINK BL-AC3600)
- [CVE-2025-4075](https://cve.now/CVE-2025-4075.md): VMSMan login.php cross site scripting (CVSS 5.3, VMSMan)
- [CVE-2025-4074](https://cve.now/CVE-2025-4074.md): PHPGurukul Curfew e-Pass Management System pass-bwdates-report.php sql injection (CVSS 6.9, PHPGurukul Curfew e-Pass Management System)
- [CVE-2025-3911](https://cve.now/CVE-2025-3911.md): Exposure in Docker Desktop logs of environment variables configured for running containers (CVSS 5.2, Docker Desktop)
- [CVE-2025-4095](https://cve.now/CVE-2025-4095.md): Registry Access Management (RAM) policies not applied when sign-in enforcement is configured via a configuration profile (CVSS 4.3, Docker Desktop)
- [CVE-2025-46350](https://cve.now/CVE-2025-46350.md): Yeswiki Vulnerable to Authenticated Reflected Cross-site Scripting (CVSS 3.5, yeswiki · yeswiki/yeswiki)
- [CVE-2025-46349](https://cve.now/CVE-2025-46349.md): YesWiki Vulnerable to Unauthenticated Reflected Cross-site Scripting (CVSS 7.6, yeswiki · yeswiki/yeswiki)
- [CVE-2025-46347](https://cve.now/CVE-2025-46347.md): YesWiki Remote Code Execution via Arbitrary PHP File Write and Execution (CVSS 5.8, yeswiki · yeswiki/yeswiki)
- [CVE-2025-4073](https://cve.now/CVE-2025-4073.md): PHPGurukul Student Record System change-password.php sql injection (CVSS 6.9, PHPGurukul Student Record System)
- [CVE-2025-4072](https://cve.now/CVE-2025-4072.md): PHPGurukul Online Nurse Hiring System edit-nurse.php sql injection (CVSS 5.3, PHPGurukul Online Nurse Hiring System)
- [CVE-2025-0716](https://cve.now/CVE-2025-0716.md): AngularJS improper sanitization in SVG '\<image\>' element (CVSS 4.8, Google AngularJS · angular)
- [CVE-2025-23181](https://cve.now/CVE-2025-23181.md): Ribbon Communications - CWE-250: Execution with Unnecessary Privileges (CVSS 8.0, Ribbon Communications Apollo)
- [CVE-2025-23180](https://cve.now/CVE-2025-23180.md): Ribbon Communications - CWE-250: Execution with Unnecessary Privileges (CVSS 8.0, Ribbon Communications Apollo)
- [CVE-2025-23179](https://cve.now/CVE-2025-23179.md): Ribbon Communications - CWE-798: Use of Hard-coded Credentials (CVSS 5.5, Ribbon Communications Apollo)
- [CVE-2025-23178](https://cve.now/CVE-2025-23178.md): Ribbon Communications - CWE-923: Improper Restriction of Communication Channel to Intended Endpoints (CVSS 7.6, Ribbon Communications Apollo)
- [CVE-2025-23177](https://cve.now/CVE-2025-23177.md): Ribbon Communications - CWE-427: Uncontrolled Search Path Element (CVSS 7.6, Ribbon Communications Apollo)
- [CVE-2025-4071](https://cve.now/CVE-2025-4071.md): PHPGurukul COVID19 Testing Management System test-details.php sql injection (CVSS 6.9, PHPGurukul COVID19 Testing Management System)
- [CVE-2025-4070](https://cve.now/CVE-2025-4070.md): PHPGurukul Rail Pass Management System changeimage.php sql injection (CVSS 6.9, PHPGurukul Rail Pass Management System)
- [CVE-2025-40619](https://cve.now/CVE-2025-40619.md): Improper access control vulnerability in Bookgy (CVSS 9.3, Bookgy)
- [CVE-2025-40618](https://cve.now/CVE-2025-40618.md): SQL injection vulnerability in Bookgy (CVSS 9.3, Bookgy)
- [CVE-2025-40617](https://cve.now/CVE-2025-40617.md): SQL injection vulnerability in Bookgy (CVSS 9.3, Bookgy)
- [CVE-2025-1551](https://cve.now/CVE-2025-1551.md): IBM Operational Decision Manager cross-site scripting (CVSS 6.1, IBM Operational Decision Manager)
- [CVE-2025-40616](https://cve.now/CVE-2025-40616.md): Reflected Cross-Site Scripting (XSS) vulnerability in Bookgy (CVSS 5.1, Bookgy)
- [CVE-2025-40615](https://cve.now/CVE-2025-40615.md): Reflected Cross-Site Scripting (XSS) vulnerability in Bookgy (CVSS 5.1, Bookgy)
- [CVE-2025-46346](https://cve.now/CVE-2025-46346.md): YesWiki Vulnerable to Stored XSS in Comments (CVSS 6.3, yeswiki · yeswiki/yeswiki)
- [CVE-2025-4069](https://cve.now/CVE-2025-4069.md): code-projects Product Management System add\_item stack-based overflow (CVSS 4.8, code-projects Product Management System)
- [CVE-2025-4068](https://cve.now/CVE-2025-4068.md): code-projects Simple Movie Ticket Booking System changeprize stack-based overflow (CVSS 4.8, code-projects Simple Movie Ticket Booking System)
- [CVE-2025-4067](https://cve.now/CVE-2025-4067.md): ScriptAndTools Online-Travling-System viewpackage.php access control (CVSS 6.9, ScriptAndTools Online-Travling-System)
- [CVE-2025-4066](https://cve.now/CVE-2025-4066.md): ScriptAndTools Online-Travling-System addpackage.php access control (CVSS 6.9, ScriptAndTools Online-Travling-System)
- [CVE-2025-4065](https://cve.now/CVE-2025-4065.md): ScriptAndTools Online-Travling-System addadvertisement.php access control (CVSS 6.9, ScriptAndTools Online-Travling-System)
- [CVE-2025-4064](https://cve.now/CVE-2025-4064.md): ScriptAndTools Online-Travling-System viewenquiry.php access control (CVSS 6.9, ScriptAndTools Online-Travling-System)
- [CVE-2025-3301](https://cve.now/CVE-2025-3301.md): DPA Countermeasures Unavailable for Certain Cryptographic Operations on Series 2 Devices (CVSS 1.0, silabs.com Series 2 SoCs and associated modules)
- [CVE-2025-4063](https://cve.now/CVE-2025-4063.md): code-projects Student Information Management System cancel stack-based overflow (CVSS 4.8, code-projects Student Information Management System)
- [CVE-2025-4062](https://cve.now/CVE-2025-4062.md): code-projects Theater Seat Booking System cancel stack-based overflow (CVSS 4.8, code-projects Theater Seat Booking System)
- [CVE-2025-4093](https://cve.now/CVE-2025-4093.md): Memory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.10 (CVSS 8.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-4092](https://cve.now/CVE-2025-4092.md): Memory safety bugs fixed in Firefox 138 and Thunderbird 138 (CVSS 6.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-4091](https://cve.now/CVE-2025-4091.md): Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10 (CVSS 8.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-4090](https://cve.now/CVE-2025-4090.md): Leaked library paths in Thunderbird for Android (CVSS 5.3, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-4089](https://cve.now/CVE-2025-4089.md): Potential local code execution in "copy as cURL" command (CVSS 5.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-4088](https://cve.now/CVE-2025-4088.md): Cross-site request forgery via storage access API redirects (CVSS 6.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-4087](https://cve.now/CVE-2025-4087.md): Unsafe attribute access during XPath parsing (CVSS 4.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-4086](https://cve.now/CVE-2025-4086.md): Specially crafted filename could be used to obscure download type (CVSS 6.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-4085](https://cve.now/CVE-2025-4085.md): Potential information leakage and privilege escalation in UITour actor (CVSS 7.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-4084](https://cve.now/CVE-2025-4084.md): Potential local code execution in "copy as cURL" command (CVSS 5.7, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-4083](https://cve.now/CVE-2025-4083.md): Process isolation bypass using "javascript:" URI links in cross-origin frames (CVSS 9.1, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-4082](https://cve.now/CVE-2025-4082.md): WebGL shader attribute memory corruption in Thunderbird for macOS (CVSS 5.9, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-2817](https://cve.now/CVE-2025-2817.md): Privilege escalation in Thunderbird Updater (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2025-4061](https://cve.now/CVE-2025-4061.md): code-projects Clothing Store Management System add\_item stack-based overflow (CVSS 4.8, code-projects Clothing Store Management System)
- [CVE-2025-4035](https://cve.now/CVE-2025-4035.md): Libsoup: cookie domain validation bypass via uppercase characters in libsoup (CVSS 4.3, Red Hat Enterprise Linux)
- [CVE-2025-4060](https://cve.now/CVE-2025-4060.md): PHPGurukul Notice Board System category.php sql injection (CVSS 6.9, PHPGurukul Notice Board System)
- [CVE-2025-4059](https://cve.now/CVE-2025-4059.md): code-projects Prison Management System Prison\_Mgmt\_Sys addrecord stack-based overflow (CVSS 4.8, code-projects Prison Management System)
- [CVE-2025-3891](https://cve.now/CVE-2025-3891.md): Mod\_auth\_openidc: dos via empty post in mod\_auth\_openidc with oidcpreservepost enabled (CVSS 7.5, mod\_auth\_openidc · Red Hat Enterprise Linux)
- [CVE-2024-58099](https://cve.now/CVE-2024-58099.md): vmxnet3: Fix packet corruption in vmxnet3\_xdp\_xmit\_frame (CVSS 8.6, Linux)
- [CVE-2025-3929](https://cve.now/CVE-2025-3929.md): Stored XSS vulnerability in MDaemon Email Server (CVSS 5.3, MDaemon Email Server)
- [CVE-2025-4058](https://cve.now/CVE-2025-4058.md): Projectworlds Online Examination System Bloodgroop\_process.php sql injection (CVSS 6.9, Projectworlds Online Examination System)
- [CVE-2025-1194](https://cve.now/CVE-2025-1194.md): Regular Expression Denial of Service (ReDoS) in huggingface/transformers (CVSS 4.3, huggingface/transformers · transformers)
- [CVE-2025-30194](https://cve.now/CVE-2025-30194.md): Denial of service via crafted DoH exchange (CVSS 7.5, PowerDNS DNSdist)
- [CVE-2025-3452](https://cve.now/CVE-2025-3452.md): SecuPress Free \<= 2.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation (CVSS 4.3, SecuPress with Simple SSL – Simple and Performant Security)
- [CVE-2025-2893](https://cve.now/CVE-2025-2893.md): Gutenverse \<= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via countdown Block (CVSS 6.4, jegstudio Gutenverse – Ultimate WordPress FSE Blocks Addons…)
- [CVE-2024-12273](https://cve.now/CVE-2024-12273.md): Calculated Fields Form \< 5.2.62 - Admin+ Stored XSS (CVSS 3.5, Calculated Fields Form)
- [CVE-2025-46329](https://cve.now/CVE-2025-46329.md): Snowflake Connector for C/C++ inserts client-side encryption key in DEBUG logs (CVSS 3.3, snowflakedb libsnowflakeclient)
- [CVE-2025-46343](https://cve.now/CVE-2025-46343.md): n8n Vulnerable to Stored XSS through Attachments View Endpoint (CVSS 5.0, n8n-io n8n · n8n)
- [CVE-2025-46338](https://cve.now/CVE-2025-46338.md): Audiobookshelf Vulnerable to Cross-Site-Scripting Reflected via POST Request in /api/upload (CVSS 6.9, advplyr audiobookshelf)
- [CVE-2025-46330](https://cve.now/CVE-2025-46330.md): Snowflake Connector for C/C++ retries malformed requests (CVSS 3.3, snowflakedb libsnowflakeclient)
- [CVE-2025-24252](https://cve.now/CVE-2025-24252.md): A use-after-free issue was addressed with improved memory management. (CVSS 8.8, Apple iOS and iPadOS · Apple iPadOS +3)
- [CVE-2025-31197](https://cve.now/CVE-2025-31197.md): The issue was addressed with improved checks. (CVSS 5.7, Apple iOS and iPadOS · Apple iPadOS +3)
- [CVE-2025-24179](https://cve.now/CVE-2025-24179.md): A null pointer dereference was addressed with improved input validation. (CVSS 5.7, Apple iOS and iPadOS · Apple iPadOS +3)
- [CVE-2025-24270](https://cve.now/CVE-2025-24270.md): This issue was addressed by removing the vulnerable code. (CVSS 5.7, Apple iOS and iPadOS · Apple iPadOS +3)
- [CVE-2025-24271](https://cve.now/CVE-2025-24271.md): An access issue was addressed with improved access restrictions. (CVSS 5.4, Apple iOS and iPadOS · Apple iPadOS +3)
- [CVE-2025-24206](https://cve.now/CVE-2025-24206.md): An authentication issue was addressed with improved state management. (CVSS 7.7, Apple iOS and iPadOS · Apple iPadOS +3)
- [CVE-2025-24251](https://cve.now/CVE-2025-24251.md): The issue was addressed with improved checks. (CVSS 6.5, Apple iOS and iPadOS · Apple iPadOS +4)
- [CVE-2025-31202](https://cve.now/CVE-2025-31202.md): A null pointer dereference was addressed with improved input validation. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS +2)
- [CVE-2025-31203](https://cve.now/CVE-2025-31203.md): An integer overflow was addressed with improved input validation. (CVSS 6.5, Apple iOS and iPadOS · Apple iPadOS +4)
- [CVE-2025-30445](https://cve.now/CVE-2025-30445.md): A type confusion issue was addressed with improved checks. (CVSS 6.5, Apple iOS and iPadOS · Apple iPadOS +3)
- [CVE-2024-57698](https://cve.now/CVE-2024-57698.md): An issue in modernwms v.1.0 allows an attacker view the MD5 hash of the administrator password and other attributes without authentication, (CVSS 7.5)
- [CVE-2025-25403](https://cve.now/CVE-2025-25403.md): Slims (Senayan Library Management Systems) 9 Bulian V9.6.1 is vulnerable to SQL Injection in admin/modules/master\_file/coll\_type.php. (CVSS 9.8)
- [CVE-2025-25962](https://cve.now/CVE-2025-25962.md): An issue in Coresmartcontracts Uniswap v.3.0 and fixed in v.4.0 allows a remote attacker to escalate privileges via the \_modifyPosition func (CVSS 9.8)
- [CVE-2025-32354](https://cve.now/CVE-2025-32354.md): In Zimbra Collaboration (ZCS) 9.0 through 10.1, a Cross-Site Request Forgery (CSRF) vulnerability exists in the GraphQL endpoint (/service/e (CVSS 8.8)
- [CVE-2025-45956](https://cve.now/CVE-2025-45956.md): A SQL injection vulnerability in manage\_damage.php in Sourcecodester Computer Laboratory Management System v1.0 allows an authenticated atta (CVSS 8.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-04-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.