CVE Tools
Sign in
month report

April 2025

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

April 2025 closed with 4,282 published CVEs — +13.6% YoY . 330 criticals, 15 added to CISA KEV (4 ransomware-linked). сообщество свободного программного обеспечения led volume, mostly via linux. Biggest breakout: ао «сбертех» at ×11.1 their 12-month median. Top weakness class — CWE-79 (796 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
4,282
— MoM+13.6% YoY
Severity mix
330 / 1,564
critical / high
KEV added
15
4 ransomware-linked
Nuclei coverage
32.2%
1,379 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
330.5
n=1,379
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
5
n=16
Detection gap

KEV pressure, no Nuclei coverage

April 2025 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in April 2025

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS89SQL Injection352CSRF862Missing Authorization74Injection284CWE-28494Code Injection119Memory Buffer Bounds476NULL Pointer Dereference787Out-of-bounds Writeсообщество свободного программного обеспечения423121117111ооо «русбитех-астра»21113547linux628ооо «ред софт»51331337274ао «нппкт»1413378microsoft corp1812microsoft1172ао «сбертех»3305red hat inc.24235ао «ивк»11113103canonical ltd.2156phpgurukul274691

Most discussed CVEs — April 2025

No CVE mentions in the news this month yet.

Breakout vendors

CVE count ≥3× their own 12-period median.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1сообщество свободного программного обеспечения—
    390 CVE16 critCVSS 6.1
    KEV 2Nuclei 5PoC 27
    linux (268) · debian gnu/linux (142) · xwiki platform (10)
  • 2ооо «русбитех-астра»—
    283 CVE4 critCVSS 6.0
    KEV 1Nuclei 1PoC 10
    astra linux special edition (282) · astra linux common edition (48) · пк "ald pro" (1)
  • 3linux—
    280 CVECVSS 5.9
    PoC 1
    linux (280) · linux kernel (280)
  • 4ооо «ред софт»—
    239 CVE7 critCVSS 6.1
    KEV 1Nuclei 2PoC 16
    ред ос (239)
  • 5ао "нппкт"—
    222 CVE5 critCVSS 6.2
    KEV 1Nuclei 1PoC 11
    осон основа оnyx (222)
  • 6microsoft—
    146 CVE2 critCVSS 7.5
    KEV 1PoC 2
    windows server 2025 (83) · windows server 2025 (server core installation) (82) · windows server 2022 (76)
  • 7redhat—
    130 CVE3 critCVSS 6.5
    PoC 12
    red hat enterprise linux (115) · red hat enterprise linux 8 (28) · red hat enterprise linux 9 (28)
  • 8ао «сбертех»—
    122 CVE2 critCVSS 6.0
    ×11.1PoC 4
    platform v sberlinux os server (122)
  • 9ао «ивк»—
    104 CVE3 critCVSS 6.0
    PoC 3
    альт сп 10 (94) · альт 8 сп (22)
  • 10canonical—
    95 CVECVSS 6.0
    PoC 5
    ubuntu (92) · mysql-k8s-operator (1) · ubuntu linux (1)
  • 11phpgurukul—
    83 CVE5 critCVSS 7.1
    ×6.4PoC 72
    men salon management system (14) · covid19 testing management system (10) · park ticketing management system (8)
  • 12siemens—
    81 CVE8 critCVSS 8.7
    ×3.4
    telecontrol server basic (68) · sentron 7kt pac1260 (9) · sentron 7kt pac1260 data manager (9)
  • 13oracle—
    73 CVE1 critCVSS 5.9
    PoC 1
    mysql server (27) · mysql cluster (6) · e-business suite (5)
  • 14code-projects—
    63 CVECVSS 6.1
    ×9.0PoC 63
    patient record management system (13) · online restaurant management system (13) · blood bank management system (5)
  • 15packagist—
    59 CVE8 critCVSS 6.2
    KEV 2Nuclei 7PoC 10
    moodle/moodle (16) · yeswiki/yeswiki (8) · shopware/platform (5)
  • 16go—
    56 CVE7 critCVSS 6.3
    Nuclei 1PoC 2
    github.com/mattermost/mattermost/server/v8 (13) · github.com/rancher/rancher (9) · github.com/osrg/gobgp/v3 (4)
  • 17maven—
    56 CVE10 critCVSS 6.7
    Nuclei 5PoC 10
    org.keycloak:keycloak-services (4) · org.opencms:opencms-core (3) · org.elasticsearch:elasticsearch (2)
  • 18adobe—
    52 CVE4 critCVSS 6.5
    coldfusion (15) · framemaker (10) · adobe framemaker (10)
  • 19novell inc.—
    52 CVE2 critCVSS 6.4
    PoC 9
    suse linux enterprise server (46) · suse linux enterprise server for sap applications (45) · opensuse leap (44)
  • 20npm—
    47 CVE2 critCVSS 6.3
    Nuclei 2PoC 4
    tarteaucitronjs (3) · react-router (2) · mathlive (2)
  • 21totolink—
    47 CVE11 critCVSS 7.6
    PoC 33
    a810r firmware (12) · a810r (12) · a3100r (11)
  • 22ibm—
    36 CVE1 critCVSS 5.6
    aspera console (6) · txseries for multiplatforms (4) · infosphere information server (3)
  • 23pypi—
    36 CVE11 critCVSS 7.4
    KEV 1Nuclei 1PoC 5
    vllm (5) · picklescan (4) · langflow (2)
  • 24sourcecodester—
    35 CVECVSS 5.5
    PoC 34
    web-based pharmacy product management system (15) · online eyewear shop (5) · apartment visitor management system (5)
  • 25qualcomm—
    34 CVECVSS 7.1
    wcd9380 firmware (28) · fastconnect 6900 firmware (28) · fastconnect 7800 firmware (26)
  • 26qualcomm, inc.—
    34 CVECVSS 7.4
    snapdragon (34)
  • 27unknown—
    32 CVE1 critCVSS 5.5
    Nuclei 31PoC 32
    ultimate dashboard (3) · wp multitasking (2) · user registration & membership (2)
  • 28growatt—
    30 CVE2 critCVSS 5.9
    NEW
    cloud portal (30)
  • 29hcl software—
    30 CVECVSS 5.0
    ×3.5
    hcl leap (10) · hcl domino leap (6) · hcl bigfix platform (3)
  • 30hcltech—
    28 CVECVSS 5.0
    ×4.7
    hcl leap (10) · domino leap (9) · bigfix platform (3)
  • 31oretnom23—
    28 CVE5 critCVSS 6.7
    PoC 24
    online id generator system (7) · online eyewear shop (5) · apartment visitor management system (5)
  • 32google—
    27 CVECVSS 7.2
    PoC 3
    chrome (13) · google chrome (11) · chrome os (8)
  • 33apple—
    26 CVE2 critCVSS 6.9
    KEV 2PoC 4
    macos (22) · iphone os (20) · ipados (20)
  • 34dell—
    26 CVE1 critCVSS 6.7
    powerscale onefs (6) · wyse management suite (5) · powerprotect data manager (3)
  • 35mozilla—
    26 CVE1 critCVSS 6.9
    thunderbird (24) · firefox (22) · firefox esr (10)
  • 36crates.io—
    24 CVE1 critCVSS 6.9
    surrealdb (8) · apollo-router (4) · gix-config (1)
  • 37pcman—
    24 CVECVSS 7.3
    NEWPoC 23
    ftp server (24)
  • 38tenda—
    24 CVE5 critCVSS 8.0
    PoC 17
    ac10 firmware (7) · w12 firmware (5) · w12 (5)
  • 39juniper—
    21 CVECVSS 6.6
    PoC 21
    junos (21) · junos os evolved (9)
  • 40juniper networks—
    21 CVECVSS 6.6
    PoC 21
    junos (21) · junos os (21) · junos os evolved (9)
  • 41codeprojects—
    20 CVECVSS 7.0
    NEWPoC 20
    online restaurant management system (16) · news publishing site dashboard (2) · patient record management system (1)
  • 42huawei—
    20 CVECVSS 7.1
    harmonyos (20) · emui (6)
  • 43sap—
    20 CVE4 critCVSS 6.5
    KEV 1Nuclei 1
    sap netweaver (3) · sap s/4 hana (2) · sap commerce cloud (2)
  • 44sap_se—
    20 CVE4 critCVSS 6.4
    KEV 1Nuclei 1
    sap businessobjects business intelligence platform (1) · sap capital yield tax management (1) · sap commerce cloud (1)
  • 45apache—
    19 CVE4 critCVSS 7.5
    Nuclei 1PoC 2
    tomcat (2) · activemq artemis (2) · http server (1)
  • 46apache software foundation—
    19 CVE4 critCVSS 7.6
    Nuclei 1PoC 2
    apache tomcat (2) · apache activemq artemis (2) · pinot (2)
  • 47larry gritz—
    19 CVE3 critCVSS 7.4
    NEW
    openimageio (19)
  • 48drupal—
    18 CVECVSS 6.0
    sportsleague (1) · stage file proxy (1) · ueditor - 百度编辑器 (1)
  • 49gnome foundation—
    18 CVE1 critCVSS 6.6
    NEWPoC 1
    libsoup (18)
  • 50moodle—
    17 CVECVSS 5.5
    moodle (17)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79796—
2CWE-89392—
3CWE-352250—
4CWE-862241—
5CWE-74202—
6CWE-284139—
7CWE-94129—
8CWE-11999—
9CWE-47694—
10CWE-78791—
11CWE-12590—
12CWE-2288—
13CWE-12085—
14CWE-41682—
15CWE-2067—
16CWE-43466—
17CWE-50265—
18CWE-9864—
19CWE-91857—
20CWE-20056—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Web & CMS Plugins1,321 CVE
    124 crit3 KEV770 vendorsCVSS 7.3
    webinarpress (6) · front end users (5) · royal elementor addons (5)
  • Operating Systems779 CVE
    100 crit66 KEV39 vendorsCVSS 7.5
    linux (548) · astra linux special edition (282) · linux kernel (280)
  • Enterprise Software581 CVE
    126 crit11 KEV146 vendorsCVSS 8.4
    hcl leap (20) · zabbix (10) · domino leap (9)
  • OSS Libraries466 CVE
    75 crit8 KEV109 vendorsCVSS 8.7
    openimageio (19) · libsoup (18) · assimp (12)
  • Networking Infrastructure234 CVE
    131 crit24 KEV61 vendorsCVSS 8.2
    junos (42) · junos os evolved (27) · junos os (21)
  • Consumer Software140 CVE
    13 crit46 vendorsCVSS 7.7
    coldfusion (30) · adobe framemaker (20) · adobe commerce (10)
  • Cloud & SaaS137 CVE
    10 crit5 KEV67 vendorsCVSS 7.4
    cloud portal (30) · chainmaker-go (2) · libsnowflakeclient (2)
  • Databases128 CVE
    15 crit31 vendorsCVSS 8.6
    mysql server (70) · mysql cluster (16) · jd edwards enterpriseone tools (9)
  • Hardware Firmware123 CVE
    13 crit33 vendorsCVSS 8.1
    fastconnect 6900 firmware (28) · wcd9380 firmware (28) · fastconnect 7800 firmware (26)
  • ICS / OT / IoT101 CVE
    50 crit3 KEV42 vendorsCVSS 7.5
    ctrlx os (13) · ctrlx os - device admin (12) · arena (11)
  • Security Products99 CVE
    16 crit6 KEV53 vendorsCVSS 7.7
    endpoint manager (6) · fortios (4) · fortiweb (4)
  • Mobile Apps92 CVE
    25 crit23 KEV11 vendorsCVSS 8.0
    android (24) · harmonyos (20) · chrome (13)
  • Communications89 CVE
    8 crit3 KEV34 vendorsCVSS 8.1
    ftp server (24) · crushftp (3) · gnu mailman (2)
  • DevTools & CI64 CVE
    7 crit26 vendorsCVSS 6.9
    gitlab (16) · github enterprise server (4) · enterprise server (3)
  • AI / ML43 CVE
    10 crit2 KEV30 vendorsCVSS 8.5
    vllm (7) · dify (6) · bentoml (2)
  • Unclassified381 CVE
    29 crit267 vendorsCVSS 6.5
    novel-plus (13) · iksoris (11) · jsite (8)
Weakness × Sector

Which weaknesses hit which solution categories in April 2025

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS89SQL Injection352CSRF862Missing Authorization74Injection284CWE-28494Code Injection119Memory Buffer Bounds476NULL Pointer Dereference787Out-of-bounds WriteWeb & CMS Plugins5361701801778635601610Operating Systems61451155117725Enterprise Software8814016151082333310OSS Libraries571514116281523179Networking Infrastructure94161083247Consumer Software18105561043527ICS / OT / IoT3682122329Cloud & SaaS286510141Hardware Firmware12431111Security Products2142334212