Skip to content
OpenAdvisories

Archive

April 2025

Vulnerabilities first published in this month (UTC), newest first.

4 results · Clear filters · Feed

  • High 8.1
    CVE-2025-3935 Exploited

    ScreenConnect Exposure to ASP.NET ViewState Code Injection

    ScreenConnect versions 25.2.3 and earlier versions may be susceptible to a ViewState code injection attack. ASP.NET Web Forms use ViewState to preserve page and control state, with data encoded using Base64 protected by machine keys.  It is important to note …

    KEV Jun 2, 2025
  • High 8.8
    CVE-2025-3928 Exploited

    Commvault Web Server unspecified vulnerability

    Commvault Web Server has an unspecified vulnerability that can be exploited by a remote, authenticated attacker. According to the Commvault advisory: "Webservers can be compromised through bad actors creating and executing webshells." Fixed in version 11.36.4…

    KEV Apr 28, 2025
  • High 8.6
    CVE-2025-1976 Exploited

    Code injection exposure in Fabric OS 9.1.0 through 9.1.1d6

    Brocade Fabric OS versions starting with 9.1.0 have root access removed, however, a local user with admin privilege can potentially execute arbitrary code with full root privileges on Fabric OS versions 9.1.0 through 9.1.1d6.

    KEV Apr 28, 2025
  • High 7.8
    CVE-2025-29824 Exploited · Ransomware Public exploit EPSS 19%

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

    KEV Apr 8, 2025