Skip to content
OpenAdvisories

Archive

21 April 2025

Vulnerabilities first published on this day (UTC), newest first.

← March 2025 2025 / April /21 May 2025 →
  1. 1429
  2. 2110
  3. 3177
  4. 4232
  5. 532
  6. 629
  7. 7172
  8. 8349
  9. 9196
  10. 10111
  11. 11127
  12. 1216
  13. 1315
  14. 1486
  15. 15264
  16. 16373
  17. 17314
  18. 18102
  19. 1936
  20. 2025
  21. 2145
  22. 22113
  23. 2379
  24. 24174
  25. 2579
  26. 2622
  27. 2760
  28. 2889
  29. 2993
  30. 30111
All Critical High Medium Low Exploited only Public exploit

45 results · Feed

  • Medium 6.8
    CVE-2025-43973

    GoBGP does not verify that the input length

    An issue was discovered in GoBGP before 3.35.0. pkg/packet/rtr/rtr.go does not verify that the input length corresponds to a situation in which all bytes are available for an RTR message.

    GoBGP GoBGP gobgp gobgp Debian Ubuntu Go
  • Low 3.4
    CVE-2025-43916

    Sonos api.sonos.com through 2025-04-21, when the /login/v3/oauth endpoint is used, accepts a redirect_uri containing us…

    Sonos api.sonos.com
  • High 8.6
    CVE-2025-43971

    GoBGP panics due to a zero value for softwareVersionLen

    An issue was discovered in GoBGP before 3.35.0. pkg/packet/bgp/bgp.go allows attackers to cause a panic via a zero value for softwareVersionLen.

    GoBGP GoBGP gobgp gobgp Debian Ubuntu Go
  • High 8.1
    CVE-2025-43922

    The FileWave Windows client before 16.0.0, in some non-default configurations, allows an unprivileged local user to esc…

    FileWave FileWave
  • Medium 4.3
    CVE-2025-43970

    GoBGP does not properly check the input length

    An issue was discovered in GoBGP before 3.35.0. pkg/packet/mrt/mrt.go does not properly check the input length, e.g., by ensuring that there are 12 bytes or 36 bytes (depending on the address family).

    GoBGP GoBGP gobgp gobgp Debian Ubuntu Go