diff --git a/advisories/unreviewed/2025/04/GHSA-2qpq-x4m7-gjf3/GHSA-2qpq-x4m7-gjf3.json b/advisories/unreviewed/2025/04/GHSA-2qpq-x4m7-gjf3/GHSA-2qpq-x4m7-gjf3.json
new file mode 100644
index 00000000000..9ea88a8ec8e
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-2qpq-x4m7-gjf3/GHSA-2qpq-x4m7-gjf3.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2qpq-x4m7-gjf3",
+  "modified": "2025-04-04T03:30:20Z",
+  "published": "2025-04-04T03:30:20Z",
+  "aliases": [
+    "CVE-2025-26401"
+  ],
+  "details": "Weak encoding for password vulnerability exists in HMI ViewJet C-more series. If this vulnerability is exploited, authentication information may be obtained by a local authenticated attacker.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26401"
+    },
+    {
+      "type": "WEB",
+      "url": "https://jvn.jp/en/jp/JVN17260367"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.electronics.jtekt.co.jp/en/topics/202503207271"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-261"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-04T02:15:18Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/04/GHSA-4m4r-j72q-7w52/GHSA-4m4r-j72q-7w52.json b/advisories/unreviewed/2025/04/GHSA-4m4r-j72q-7w52/GHSA-4m4r-j72q-7w52.json
new file mode 100644
index 00000000000..d63b9cd2a6b
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-4m4r-j72q-7w52/GHSA-4m4r-j72q-7w52.json
@@ -0,0 +1,64 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4m4r-j72q-7w52",
+  "modified": "2025-04-04T03:30:20Z",
+  "published": "2025-04-04T03:30:20Z",
+  "aliases": [
+    "CVE-2025-3198"
+  ],
+  "details": "A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as problematic. Affected by this vulnerability is the function display_info of the file binutils/bucomm.c of the component objdump. The manipulation leads to memory leak. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The patch is named ba6ad3a18cb26b79e0e3b84c39f707535bbc344d. It is recommended to apply a patch to fix this issue.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3198"
+    },
+    {
+      "type": "WEB",
+      "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=32716"
+    },
+    {
+      "type": "WEB",
+      "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=32716#c0"
+    },
+    {
+      "type": "WEB",
+      "url": "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ba6ad3a18cb26b79e0e3b84c39f707535bbc344d"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.303151"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.303151"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.545773"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.gnu.org"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-401"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-04T02:15:18Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/04/GHSA-523j-7w3w-4hch/GHSA-523j-7w3w-4hch.json b/advisories/unreviewed/2025/04/GHSA-523j-7w3w-4hch/GHSA-523j-7w3w-4hch.json
new file mode 100644
index 00000000000..100fb3f602d
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-523j-7w3w-4hch/GHSA-523j-7w3w-4hch.json
@@ -0,0 +1,56 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-523j-7w3w-4hch",
+  "modified": "2025-04-04T03:30:20Z",
+  "published": "2025-04-04T03:30:20Z",
+  "aliases": [
+    "CVE-2025-3187"
+  ],
+  "details": "A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument logindetail leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3187"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/TiggerT/MyCVE/issues/1"
+    },
+    {
+      "type": "WEB",
+      "url": "https://phpgurukul.com"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.303146"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.303146"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.544098"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-74"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-04T01:15:40Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/04/GHSA-85hh-j9mv-r2v4/GHSA-85hh-j9mv-r2v4.json b/advisories/unreviewed/2025/04/GHSA-85hh-j9mv-r2v4/GHSA-85hh-j9mv-r2v4.json
new file mode 100644
index 00000000000..25840f73b55
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-85hh-j9mv-r2v4/GHSA-85hh-j9mv-r2v4.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-85hh-j9mv-r2v4",
+  "modified": "2025-04-04T03:30:20Z",
+  "published": "2025-04-04T03:30:20Z",
+  "aliases": [
+    "CVE-2025-29796"
+  ],
+  "details": "User interface (ui) misrepresentation of critical information in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-29796"
+    },
+    {
+      "type": "WEB",
+      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29796"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-451"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-04T01:15:39Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/04/GHSA-c4x5-wm4g-3cx9/GHSA-c4x5-wm4g-3cx9.json b/advisories/unreviewed/2025/04/GHSA-c4x5-wm4g-3cx9/GHSA-c4x5-wm4g-3cx9.json
new file mode 100644
index 00000000000..5d18f2c97c0
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-c4x5-wm4g-3cx9/GHSA-c4x5-wm4g-3cx9.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-c4x5-wm4g-3cx9",
+  "modified": "2025-04-04T03:30:20Z",
+  "published": "2025-04-04T03:30:20Z",
+  "aliases": [
+    "CVE-2025-24310"
+  ],
+  "details": "Improper restriction of rendered UI layers or frames issue exists in HMI ViewJet C-more series, which may allow a remote unauthenticated attacker to trick the product user to perform operations on the product's web pages.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24310"
+    },
+    {
+      "type": "WEB",
+      "url": "https://jvn.jp/en/jp/JVN17260367"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.electronics.jtekt.co.jp/en/topics/202503207271"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-1021"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-04T02:15:17Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/04/GHSA-fjp4-jhg2-g65w/GHSA-fjp4-jhg2-g65w.json b/advisories/unreviewed/2025/04/GHSA-fjp4-jhg2-g65w/GHSA-fjp4-jhg2-g65w.json
new file mode 100644
index 00000000000..e051bde4023
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-fjp4-jhg2-g65w/GHSA-fjp4-jhg2-g65w.json
@@ -0,0 +1,56 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-fjp4-jhg2-g65w",
+  "modified": "2025-04-04T03:30:21Z",
+  "published": "2025-04-04T03:30:21Z",
+  "aliases": [
+    "CVE-2025-3204"
+  ],
+  "details": "A vulnerability, which was classified as critical, has been found in CodeAstro Car Rental System 1.0. Affected by this issue is some unknown functionality of the file /returncar.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3204"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/Lanxiy7th/lx_CVE_report-/issues/21"
+    },
+    {
+      "type": "WEB",
+      "url": "https://codeastro.com"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.303158"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.303158"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.545893"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-74"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-04T03:15:14Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/04/GHSA-h57j-9v3r-347h/GHSA-h57j-9v3r-347h.json b/advisories/unreviewed/2025/04/GHSA-h57j-9v3r-347h/GHSA-h57j-9v3r-347h.json
new file mode 100644
index 00000000000..517572dc712
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-h57j-9v3r-347h/GHSA-h57j-9v3r-347h.json
@@ -0,0 +1,56 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-h57j-9v3r-347h",
+  "modified": "2025-04-04T03:30:20Z",
+  "published": "2025-04-04T03:30:20Z",
+  "aliases": [
+    "CVE-2025-3203"
+  ],
+  "details": "A vulnerability classified as problematic was found in Tenda W18E 16.01.0.11. Affected by this vulnerability is the function formSetAccountList of the file /goform/setModules. The manipulation of the argument Password leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3203"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/ZIKH26/tmp_store_reports/blob/main/tenda-w18e.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.303157"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.303157"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.545883"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.tenda.com.cn"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-119"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-04T03:15:14Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/04/GHSA-hgp9-3v5v-223j/GHSA-hgp9-3v5v-223j.json b/advisories/unreviewed/2025/04/GHSA-hgp9-3v5v-223j/GHSA-hgp9-3v5v-223j.json
index 6e5998b8640..7f3ac509785 100644
--- a/advisories/unreviewed/2025/04/GHSA-hgp9-3v5v-223j/GHSA-hgp9-3v5v-223j.json
+++ b/advisories/unreviewed/2025/04/GHSA-hgp9-3v5v-223j/GHSA-hgp9-3v5v-223j.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-hgp9-3v5v-223j",
-  "modified": "2025-04-03T21:32:59Z",
+  "modified": "2025-04-04T03:30:19Z",
   "published": "2025-04-03T21:32:59Z",
   "aliases": [
     "CVE-2025-30406"
   ],
   "details": "Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack portal's hardcoded machineKey use, which enables threat actors (who know the machineKey) to serialize a payload for server-side deserialization to achieve remote code execution. NOTE: the CentreStack admin can manually delete the machineKey defined in portal\\web.config.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -24,8 +29,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-321"
+    ],
+    "severity": "CRITICAL",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-04-03T20:15:24Z"
diff --git a/advisories/unreviewed/2025/04/GHSA-hj96-872g-wqc5/GHSA-hj96-872g-wqc5.json b/advisories/unreviewed/2025/04/GHSA-hj96-872g-wqc5/GHSA-hj96-872g-wqc5.json
new file mode 100644
index 00000000000..48a0fbed11d
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-hj96-872g-wqc5/GHSA-hj96-872g-wqc5.json
@@ -0,0 +1,60 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-hj96-872g-wqc5",
+  "modified": "2025-04-04T03:30:20Z",
+  "published": "2025-04-04T03:30:20Z",
+  "aliases": [
+    "CVE-2025-3196"
+  ],
+  "details": "A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. Affected is the function Assimp::MD2Importer::InternReadFile in the library code/AssetLib/MD2/MD2Loader.cpp of the component Malformed File Handler. The manipulation of the argument Name leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3196"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/assimp/assimp/issues/6069"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/assimp/assimp/issues/6069#issuecomment-2763273425"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/assimp/assimp/milestone/11"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.303150"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.303150"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.545368"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-119"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-04T02:15:18Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/04/GHSA-hr75-h5m4-3xq3/GHSA-hr75-h5m4-3xq3.json b/advisories/unreviewed/2025/04/GHSA-hr75-h5m4-3xq3/GHSA-hr75-h5m4-3xq3.json
new file mode 100644
index 00000000000..cd0267cdd97
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-hr75-h5m4-3xq3/GHSA-hr75-h5m4-3xq3.json
@@ -0,0 +1,44 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-hr75-h5m4-3xq3",
+  "modified": "2025-04-04T03:30:20Z",
+  "published": "2025-04-04T03:30:20Z",
+  "aliases": [
+    "CVE-2025-24317"
+  ],
+  "details": "Allocation of resources without limits or throttling issue exists in HMI ViewJet C-more series and HMI GC-A2 series, which may allow a remote unauthenticated attacker to cause a denial-of-service (DoS) condition.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24317"
+    },
+    {
+      "type": "WEB",
+      "url": "https://jvn.jp/en/jp/JVN17260367"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.electronics.jtekt.co.jp/en/topics/202503207269"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.electronics.jtekt.co.jp/en/topics/202503207271"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-770"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-04T02:15:17Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/04/GHSA-mrrv-j79h-j3g7/GHSA-mrrv-j79h-j3g7.json b/advisories/unreviewed/2025/04/GHSA-mrrv-j79h-j3g7/GHSA-mrrv-j79h-j3g7.json
new file mode 100644
index 00000000000..106f6b86aff
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-mrrv-j79h-j3g7/GHSA-mrrv-j79h-j3g7.json
@@ -0,0 +1,56 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-mrrv-j79h-j3g7",
+  "modified": "2025-04-04T03:30:20Z",
+  "published": "2025-04-04T03:30:20Z",
+  "aliases": [
+    "CVE-2025-3188"
+  ],
+  "details": "A vulnerability classified as critical has been found in PHPGurukul e-Diary Management System 1.0. This affects an unknown part of the file /add-notes.php. The manipulation of the argument Category leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3188"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/TiggerT/MyCVE/issues/2"
+    },
+    {
+      "type": "WEB",
+      "url": "https://phpgurukul.com"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.303147"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.303147"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.544110"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-74"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-04T01:15:40Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/04/GHSA-pr6w-g472-rf39/GHSA-pr6w-g472-rf39.json b/advisories/unreviewed/2025/04/GHSA-pr6w-g472-rf39/GHSA-pr6w-g472-rf39.json
new file mode 100644
index 00000000000..a486b3602de
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-pr6w-g472-rf39/GHSA-pr6w-g472-rf39.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-pr6w-g472-rf39",
+  "modified": "2025-04-04T03:30:20Z",
+  "published": "2025-04-04T03:30:20Z",
+  "aliases": [
+    "CVE-2025-25001"
+  ],
+  "details": "Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25001"
+    },
+    {
+      "type": "WEB",
+      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-25001"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-04T01:15:39Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/04/GHSA-qf96-xw5w-6qv3/GHSA-qf96-xw5w-6qv3.json b/advisories/unreviewed/2025/04/GHSA-qf96-xw5w-6qv3/GHSA-qf96-xw5w-6qv3.json
new file mode 100644
index 00000000000..fad335677af
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-qf96-xw5w-6qv3/GHSA-qf96-xw5w-6qv3.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-qf96-xw5w-6qv3",
+  "modified": "2025-04-04T03:30:20Z",
+  "published": "2025-04-04T03:30:20Z",
+  "aliases": [
+    "CVE-2025-29815"
+  ],
+  "details": "Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-29815"
+    },
+    {
+      "type": "WEB",
+      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29815"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-416"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-04T01:15:39Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/04/GHSA-qgv4-vprj-x2fq/GHSA-qgv4-vprj-x2fq.json b/advisories/unreviewed/2025/04/GHSA-qgv4-vprj-x2fq/GHSA-qgv4-vprj-x2fq.json
index e93e5872227..cc82c78fd2b 100644
--- a/advisories/unreviewed/2025/04/GHSA-qgv4-vprj-x2fq/GHSA-qgv4-vprj-x2fq.json
+++ b/advisories/unreviewed/2025/04/GHSA-qgv4-vprj-x2fq/GHSA-qgv4-vprj-x2fq.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-qgv4-vprj-x2fq",
-  "modified": "2025-04-01T21:31:30Z",
+  "modified": "2025-04-04T03:30:19Z",
   "published": "2025-04-01T21:31:30Z",
   "aliases": [
     "CVE-2025-29070"
@@ -17,6 +17,10 @@
     {
       "type": "WEB",
       "url": "https://github.com/mm2/Little-CMS/issues/475"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/mm2/Little-CMS/issues/475#issuecomment-2696785063"
     }
   ],
   "database_specific": {
diff --git a/advisories/unreviewed/2025/04/GHSA-r5c5-58cm-fj7f/GHSA-r5c5-58cm-fj7f.json b/advisories/unreviewed/2025/04/GHSA-r5c5-58cm-fj7f/GHSA-r5c5-58cm-fj7f.json
new file mode 100644
index 00000000000..9279322c35d
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-r5c5-58cm-fj7f/GHSA-r5c5-58cm-fj7f.json
@@ -0,0 +1,56 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-r5c5-58cm-fj7f",
+  "modified": "2025-04-04T03:30:21Z",
+  "published": "2025-04-04T03:30:20Z",
+  "aliases": [
+    "CVE-2025-3195"
+  ],
+  "details": "A vulnerability, which was classified as critical, has been found in itsourcecode Online Blood Bank Management System 1.0. This issue affects some unknown processing of the file /bbms.php. The manipulation of the argument Search leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3195"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/p1026/CVE/issues/21"
+    },
+    {
+      "type": "WEB",
+      "url": "https://itsourcecode.com"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.303149"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.303149"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.544147"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-74"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-04T02:15:18Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/04/GHSA-r9w7-jrpx-hmqg/GHSA-r9w7-jrpx-hmqg.json b/advisories/unreviewed/2025/04/GHSA-r9w7-jrpx-hmqg/GHSA-r9w7-jrpx-hmqg.json
new file mode 100644
index 00000000000..c3db1c32894
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-r9w7-jrpx-hmqg/GHSA-r9w7-jrpx-hmqg.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-r9w7-jrpx-hmqg",
+  "modified": "2025-04-04T03:30:19Z",
+  "published": "2025-04-04T03:30:19Z",
+  "aliases": [
+    "CVE-2025-25000"
+  ],
+  "details": "Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25000"
+    },
+    {
+      "type": "WEB",
+      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-25000"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-843"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-04T01:15:38Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/04/GHSA-vf4w-gg7r-x8mw/GHSA-vf4w-gg7r-x8mw.json b/advisories/unreviewed/2025/04/GHSA-vf4w-gg7r-x8mw/GHSA-vf4w-gg7r-x8mw.json
new file mode 100644
index 00000000000..60034f8e5fd
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-vf4w-gg7r-x8mw/GHSA-vf4w-gg7r-x8mw.json
@@ -0,0 +1,64 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-vf4w-gg7r-x8mw",
+  "modified": "2025-04-04T03:30:21Z",
+  "published": "2025-04-04T03:30:21Z",
+  "aliases": [
+    "CVE-2025-3202"
+  ],
+  "details": "A vulnerability classified as critical has been found in ageerle ruoyi-ai up to 2.0.0. Affected is an unknown function of the file ruoyi-modules/ruoyi-system/src/main/java/org/ruoyi/system/controller/system/SysNoticeController.java. The manipulation leads to improper authorization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.0.1 is able to address this issue. The name of the patch is 6382e177bf90cc56ff70521842409e35c50df32d. It is recommended to upgrade the affected component.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3202"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/ageerle/ruoyi-ai/issues/44#issue-2957771318"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/ageerle/ruoyi-ai/commit/6382e177bf90cc56ff70521842409e35c50df32d"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/Tr0e/CVE_Hunter/blob/main/ruoyi-ai/ruoyi-ai_UnauthorizedAccess_02.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/ageerle/ruoyi-ai/releases/tag/v2.0.1"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.303156"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.303156"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.545866"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-266"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-04T03:15:13Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/04/GHSA-vfwv-3cv9-cxm2/GHSA-vfwv-3cv9-cxm2.json b/advisories/unreviewed/2025/04/GHSA-vfwv-3cv9-cxm2/GHSA-vfwv-3cv9-cxm2.json
new file mode 100644
index 00000000000..c49b1bf6e06
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-vfwv-3cv9-cxm2/GHSA-vfwv-3cv9-cxm2.json
@@ -0,0 +1,44 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-vfwv-3cv9-cxm2",
+  "modified": "2025-04-04T03:30:20Z",
+  "published": "2025-04-04T03:30:20Z",
+  "aliases": [
+    "CVE-2025-25061"
+  ],
+  "details": "Unintended proxy or intermediary ('Confused Deputy') issue exists in HMI ViewJet C-more series and HMI GC-A2 series, which may allow a remote unauthenticated attacker to use the product as an intermediary for FTP bounce attack.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25061"
+    },
+    {
+      "type": "WEB",
+      "url": "https://jvn.jp/en/jp/JVN17260367"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.electronics.jtekt.co.jp/en/topics/202503207269"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.electronics.jtekt.co.jp/en/topics/202503207271"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-441"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-04T02:15:17Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/04/GHSA-w9j2-68r5-mpp4/GHSA-w9j2-68r5-mpp4.json b/advisories/unreviewed/2025/04/GHSA-w9j2-68r5-mpp4/GHSA-w9j2-68r5-mpp4.json
new file mode 100644
index 00000000000..6ad1fa97863
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-w9j2-68r5-mpp4/GHSA-w9j2-68r5-mpp4.json
@@ -0,0 +1,68 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-w9j2-68r5-mpp4",
+  "modified": "2025-04-04T03:30:21Z",
+  "published": "2025-04-04T03:30:21Z",
+  "aliases": [
+    "CVE-2025-3199"
+  ],
+  "details": "A vulnerability was found in ageerle ruoyi-ai up to 2.0.1 and classified as critical. Affected by this issue is some unknown functionality of the file ruoyi-modules/ruoyi-system/src/main/java/org/ruoyi/system/controller/system/SysModelController.java of the component API Interface. The manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.0.2 is able to address this issue. The name of the patch is c0daf641fb25b244591b7a6c3affa35c69d321fe. It is recommended to upgrade the affected component.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3199"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/ageerle/ruoyi-ai/issues/43"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/ageerle/ruoyi-ai/issues/43#issuecomment-2763091490"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/gwozai/ruoyi-ai/commit/c0daf641fb25b244591b7a6c3affa35c69d321fe"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/Tr0e/CVE_Hunter/blob/main/ruoyi-ai/ruoyi-ai_UnauthorizedAccess_01.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/ageerle/ruoyi-ai/releases/tag/v2.0.2"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.303152"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.303152"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.545830"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-266"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-04T02:15:19Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/04/GHSA-ww9x-vjh2-hrj7/GHSA-ww9x-vjh2-hrj7.json b/advisories/unreviewed/2025/04/GHSA-ww9x-vjh2-hrj7/GHSA-ww9x-vjh2-hrj7.json
new file mode 100644
index 00000000000..12019fe35e9
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-ww9x-vjh2-hrj7/GHSA-ww9x-vjh2-hrj7.json
@@ -0,0 +1,56 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-ww9x-vjh2-hrj7",
+  "modified": "2025-04-04T03:30:21Z",
+  "published": "2025-04-04T03:30:21Z",
+  "aliases": [
+    "CVE-2025-3205"
+  ],
+  "details": "A vulnerability, which was classified as critical, was found in CodeAstro Student Grading System 1.0. This affects an unknown part of the file studentsubject.php. The manipulation of the argument studentId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3205"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/Lanxiy7th/lx_CVE_report-/issues/20"
+    },
+    {
+      "type": "WEB",
+      "url": "https://codeastro.com"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.303159"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.303159"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.545894"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-74"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-04T03:15:14Z"
+  }
+}
\ No newline at end of file