April 2025
Published in April 2025
- criticalexploitedCVE-2025-42599: Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerabilitycisa-kev
- known exploitedCVE-2021-20035
- unknownexploitedVulnerability in SAP NetWeaver (April 28, 2025)cert-fr-alerte
- known exploitedpublic exploitCVE-2022-42475
- criticalGitLab Patch Release: 17.11.1, 17.10.5, 17.9.7gitlab
- known exploitedpublic exploitCVE-2023-27997
- criticalGitLab Patch Release: 17.11.1, 17.10.5, 17.9.7gitlab
- known exploitedpublic exploitCVE-2024-21762
- criticalexploitedCVE-2021-20035: SonicWall SMA100 Appliances OS Command Injection Vulnerabilitycisa-kev
- known exploitedCVE-2024-53150
- unknownexploitedPost-exploitation activities in Fortinet FortiGate (April 11, 2025)cert-fr-alerte
- known exploitedCVE-2024-53197
- unknownJenkins Security Advisory 2025-04-10jenkins
- known exploitedpublic exploitCVE-2025-0282
- criticalGitLab Patch Release: 17.10.4, 17.9.6, 17.8.7gitlab
- known exploitedCVE-2025-1976
- criticalGitLab Patch Release: 17.10.4, 17.9.6, 17.8.7gitlab
- known exploitedpublic exploitCVE-2025-22457
- criticalexploitedCVE-2024-53197: Linux Kernel Out-of-Bounds Access Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-24054
- criticalexploitedCVE-2025-30406: Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-24813
- criticalexploitedCVE-2025-31161: CrushFTP Authentication Bypass Vulnerabilitycisa-kev
- known exploitedpublic exploitCVE-2025-29824
- unknownexploited[Update] Vulnerability in Ivanti products (April 3, 2025)cert-fr-alerte
- known exploitedpublic exploitCVE-2025-30406
- unknownJenkins Security Advisory 2025-04-02jenkins
- known exploitedpublic exploitCVE-2025-31161
- unknownGitLab Patch Release: 17.9.5gitlab
- known exploitedpublic exploitCVE-2025-31200
- unknownGitLab Patch Release: 17.10.3gitlab
- known exploitedpublic exploitCVE-2025-31201
- unknownGitLab Patch Release: 17.9.5gitlab
- known exploitedpublic exploitCVE-2025-31324
- unknownGitLab Patch Release: 17.10.3gitlab
- known exploitedCVE-2025-3928
- criticalexploitedCVE-2025-24813: Apache Tomcat Path Equivalence Vulnerabilitycisa-kev
- known exploitedCVE-2025-42599