CVEs published April 28 to May 4, 2025
877 CVEs were published Apr 28 to May 4, 2025, 49 of them critical. CISA added 8 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 877
- Critical
- 49
- Added to CISA KEV
- 8
- Busiest day
- Thu, May 1 (372)
- Quietest day
- Sun, May 4 (8)
- April 28, 202588 CVEs · 7 critical
- April 29, 202592 CVEs · 8 critical
- April 30, 2025110 CVEs · 10 critical
- May 1, 2025372 CVEs · 10 critical
- May 2, 2025176 CVEs · 13 critical
- May 3, 202531 CVEs · 1 critical
- May 4, 20258 CVEs
Added to CISA KEV 8
- CVE-2025-1976Code injection exposure in Fabric OS 9.1.0 through 9.1.1d6Brocade Fabric OS
- CVE-2025-3928Commvault Web Server unspecified vulnerabilityCommvault Web Server
- CVE-2025-42599Active! mail 6 BuildInfo: 6.60.05008561 and earlier contains a stack-based buffer overflow vulnerability.QUALITIA CO. Active! mail
- CVE-2025-31324Missing Authorization check in SAP NetWeaver (Visual Composer development server)SAP_SE SAP NetWeaver
- CVE-2023-44221Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrSonicWall SMA100
- CVE-2024-38475Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.Apache Software Foundation Apache HTTP Server
- CVE-2024-58136Yii 2 before 2.0.52 mishandles the attaching of behavior that is defined by an __class array key, a CVE-2024-4990 regression, as exploited iyiiframework Yii · yiisoft/yii2
- CVE-2025-34028Commvault Command Center Innovation Release <= 11.38.25 Unathenticated Install Package Path TraversalCommvault Command Center Innovation Release