Skip to content
OpenAdvisories

Archive

13 April 2025

Vulnerabilities first published on this day (UTC), newest first.

← March 2025 2025 / April /13 May 2025 →
  1. 1429
  2. 2110
  3. 3177
  4. 4232
  5. 532
  6. 629
  7. 7172
  8. 8349
  9. 9196
  10. 10111
  11. 11127
  12. 1216
  13. 1315
  14. 1486
  15. 15264
  16. 16373
  17. 17314
  18. 18102
  19. 1936
  20. 2025
  21. 2145
  22. 22113
  23. 2379
  24. 24174
  25. 2579
  26. 2622
  27. 2760
  28. 2889
  29. 2993
  30. 30111
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.0
    CVE-2025-3542

    H3C Magic NX15/Magic NX400/Magic R3010 HTTP POST Request getsyncpppoecfg FCGI_WizardProtoProcess command injection

    A vulnerability, which was classified as critical, was found in H3C Magic NX15, Magic NX400 and Magic R3010 up to V100R014. This affects the function FCGI_WizardProtoProcess of the file /api/wizard/getsyncpppoecfg of the component HTTP POST Request Handler. T…

    H3C Magic NX15 Magic NX400 Magic R3010
  • High 8.0
    CVE-2025-3541

    H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request getSpecs FCGI_WizardProtoProcess command injection

    A vulnerability, which was classified as critical, has been found in H3C Magic NX15, Magic NX30 Pro, Magic NX400 and Magic R3010 up to V100R014. Affected by this issue is the function FCGI_WizardProtoProcess of the file /api/wizard/getSpecs of the component H…

    H3C Magic NX15 Magic NX30 Pro Magic NX400
  • High 8.0
    CVE-2025-3540

    H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 HTTP POST Request getCapability FCGI_WizardProtoProcess command injection

    A vulnerability classified as critical was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400 and Magic R3010 up to V100R014. Affected by this vulnerability is the function FCGI_WizardProtoProcess of the file /api/wizard/getCapability of the component HTTP …

    H3C Magic NX15 Magic NX400 Magic NX30 Pro
  • High 8.1
    CVE-2025-3445

    mholt/archiver Vulnerable to Path Traversal via Crafted ZIP File

    A Path Traversal "Zip Slip" vulnerability has been identified in mholt/archiver in Go. This vulnerability allows using a crafted ZIP file containing path traversal symlinks to create or overwrite files with the user's privileges or application utilizing the l…

    github.com/mholt/archiver/v3 github.com/mholt/archiver/v3 kots filebrowser Wolfi Go
  • High 8.0
    CVE-2025-3539

    H3C Magic BE18000 HTTP POST Request getBasicInfo FCGI_CheckStringIfContainsSemicolon command injection

    A vulnerability classified as critical has been found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. Affected is the function FCGI_CheckStringIfContainsSemicolon of the file /api/wizard/getBasicInfo of the compon…

    H3C Magic NX15 Magic NX30 Pro Magic NX400
  • High 8.8
    CVE-2025-3538 EPSS 13%

    D-Link DI-8100 jhttpd auth.asp auth_asp stack-based overflow

    A vulnerability was found in D-Link DI-8100 16.07.26A1. It has been rated as critical. This issue affects the function auth_asp of the file /auth.asp of the component jhttpd. The manipulation of the argument callback leads to stack-based buffer overflow. The …

    D-Link DI-8100 Network devices
  • High 8.4
    CVE-2024-56406

    Perl is vulnerable to a heap buffer overflow when transliterating non-ASCII bytes

    A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes in the left-hand-side of the `tr` operator, `S_do_…

    perl perl perl perl Debian Ubuntu Azure Linux Alpine