Security Digest archive
April 2025
3 editorial briefs, 15 known exploited (cisa kev) additions and 34 critical advisories across 21 digest days.
Wednesday, April 30, 2025
- Critical 1 advisory: org.xwiki.contrib.markdown:syntax-markd…
Tuesday, April 29, 2025
- KEV CVE-2025-31324 SAP NetWeaver
- Critical 5 advisories: org.xwiki.platform:xwiki-platform-compo…, yeswiki/yeswiki, org.xwiki.platform:xwiki-platform-secur…, vllm, showdoc/showdoc
Monday, April 28, 2025
- KEV CVE-2025-42599 Qualitia Active! Mail
- KEV CVE-2025-3928 Commvault Web Server
- KEV CVE-2025-1976 Broadcom Brocade Fabric OS
Friday, April 25, 2025
- Critical 1 advisory: craftcms/cms
Thursday, April 24, 2025
- Check exposure SAP NetWeaver Visual Composer: Unauthenticated Upload RCE
- Critical 1 advisory: h11
Wednesday, April 23, 2025
- Critical 2 advisories: org.xwiki.platform:xwiki-platform-rest…, YoutubeDLSharp
Tuesday, April 22, 2025
- Critical 3 advisories: github.com/wazuh/wazuh, vllm, xrpl
Monday, April 21, 2025
- Critical 1 advisory: net.mingsoft:ms-mcms
Friday, April 18, 2025
- Critical 3 advisories: Apache.NMS.ActiveMQ, github.com/traefik/traefik/v2, torch
Thursday, April 17, 2025
- KEV CVE-2025-31201 Apple Multiple Products
- KEV CVE-2025-31200 Apple Multiple Products
- KEV CVE-2025-24054 Microsoft Windows
Wednesday, April 16, 2025
- Check exposure Erlang/OTP SSH: Unauthenticated RCE (CVE-2025-32433)
- KEV CVE-2021-20035 SonicWall SMA100 Appliances
Tuesday, April 15, 2025
- Critical 2 advisories: github.com/donknap/dpanel, github.com/nats-io/nats-server/v2
Monday, April 14, 2025
- Critical 2 advisories: tcg/voyager, github.com/argoproj/argo-events
Friday, April 11, 2025
- Critical 2 advisories: jupyter-remote-desktop-proxy, surrealdb
Wednesday, April 9, 2025
- KEV CVE-2024-53197 Linux Kernel
- KEV CVE-2024-53150 Linux Kernel
- Critical 2 advisories: yiisoft/yii2, bentoml
Tuesday, April 8, 2025
- KEV CVE-2025-30406 Gladinet CentreStack
- KEV CVE-2025-29824 Microsoft Windows
- Critical 1 advisory: spiral/roadrunner
Monday, April 7, 2025
- Check exposure Langflow Unauthenticated Code Execution (CVE-2025-3248)
- KEV CVE-2025-31161 CrushFTP CrushFTP
- Critical 1 advisory: lnbits
Friday, April 4, 2025
- KEV CVE-2025-22457 Ivanti Connect Secure, Policy Secure, and ZTA Gateways
- Critical 1 advisory: bentoml
Thursday, April 3, 2025
Wednesday, April 2, 2025
- Critical 1 advisory: tauri-plugin-shell
Tuesday, April 1, 2025
- KEV CVE-2025-24813 Apache Tomcat
- Critical 3 advisories: github.com/rancher/rancher, org.apache.pinot:pinot-broker, org.apache.parquet:parquet-avro