April 2025 Patch Tuesday: One Zero-Day and 11 Critical Vulnerabilities Among 121 CVEs

April 2025 Patch Tuesday: One Zero-Day and 11 Critical Vulnerabilities Among 121 CVEs

Microsoft has addressed 121 vulnerabilities in its April 2025 security update release. This month’s patches include fixes for one actively exploited zero-day vulnerability and 11 Critical vulnerabilit …
Read more

Published Date:
Apr 25, 2025 (1 day, 9 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2025-29824

CVE-2025-29791

CVE-2025-27752

CVE-2025-27749

CVE-2025-27748

CVE-2025-27745

CVE-2025-27738

CVE-2025-27491

CVE-2025-27482

CVE-2025-27480

CVE-2025-26686

CVE-2025-26670

CVE-2025-26663

CVE-2025-26647

CVE-2025-21197

Read More

CVE-2025-3956 – Novel-Cloud SQL Injection Vulnerability

CVE ID : CVE-2025-3956

Published : April 27, 2025, 4:15 a.m. | 4 hours ago

Description : A vulnerability has been found in 201206030 novel-cloud 1.4.0 and classified as critical. This vulnerability affects the function RestResp of the file novel-cloud-master/novel-book/novel-book-service/src/main/resources/mapper/BookInfoMapper.xml. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Severity: 6.3 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Read More

CVE-2025-3957 – Opplus Springboot-Admin SQL Injection Vulnerability

CVE ID : CVE-2025-3957

Published : April 27, 2025, 4:15 a.m. | 4 hours ago

Description : A vulnerability was found in opplus springboot-admin 1.0 and classified as critical. This issue affects some unknown processing of the file srcmainresourcesmappersysSysLogDao.xml. The manipulation of the argument order leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Severity: 6.3 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Read More