CVEs published March 31 to April 6, 2025
1,378 CVEs were published Mar 31 to Apr 6, 2025, 138 of them critical. CISA added 3 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 1,378
- Critical
- 138
- Added to CISA KEV
- 3
- Busiest day
- Tue, Apr 1 (429)
- Quietest day
- Sun, Apr 6 (29)
- March 31, 2025371 CVEs · 71 critical
- April 1, 2025429 CVEs · 26 critical
- April 2, 2025109 CVEs · 10 critical
- April 3, 2025177 CVEs · 18 critical
- April 4, 2025231 CVEs · 10 critical
- April 5, 202532 CVEs · 2 critical
- April 6, 202529 CVEs · 1 critical
Added to CISA KEV 3
- CVE-2024-20439A vulnerability in Cisco Smart Licensing Utility (CSLU) could allow an unauthenticated, remote attacker to log into an affected system by usCisco Smart License Utility
- CVE-2025-24813Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUTApache Software Foundation Apache Tomcat · org.apache.to… +1
- CVE-2025-22457A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTAIvanti Connect Secure · Ivanti Policy Secure +1