2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-71465 | MEDIUM | 6.1 | — | Nov 14, 2026 | @kolkov/angular-editor before 3.0.3 contains a cross-site scripting vulnerability in refreshView() that writes HTML from... |
| CVE-2025-71464 | MEDIUM | 6.1 | — | Nov 14, 2026 | @kolkov/angular-editor before 3.0.4 contains a cross-site scripting vulnerability in toggleEditorMode() that assigns sou... |
| CVE-2025-53700 | MEDIUM | 6.3 | — | Nov 13, 2026 | CWE‑922 Insecure Storage of Sensitive Information vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR ... |
| CVE-2025-41725 | MEDIUM | 6.5 | — | Nov 13, 2026 | Affected devices running firmware versions prior to 4.1.0 may crash and become unavailable when receiving specific malfo... |
| CVE-2025-71463 | MEDIUM | 6.7 | 0.3% | Nov 13, 2026 | Scapy before 2.7.0 contains an insecure deserialization vulnerability in the load_session function that allows attackers... |
| CVE-2025-71462 | MEDIUM | 6.1 | 0.3% | Nov 13, 2026 | Zipline before 3.7.12 contains a cross-site scripting vulnerability in the login page that allows attackers to execute J... |
| CVE-2025-71461 | MEDIUM | 5.3 | 0.3% | Nov 13, 2026 | Zipline before 4.0.2 contains a predictable filename vulnerability that allows attackers to infer other users' upload fi... |
| CVE-2025-71460 | MEDIUM | 4.2 | 0.3% | Nov 13, 2026 | Zipline before 4.2.1 contains a missing authorization vulnerability in the /api/user/files/transaction endpoint that all... |
| CVE-2025-54507 | MEDIUM | 5.9 | 0.2% | Nov 12, 2026 | Improper validation of consistency within input in AMD SEV (Secure Encrypted Virtualization) firmware could allow an att... |
| CVE-2025-54501 | MEDIUM | 5.9 | 0.2% | Nov 12, 2026 | Improper access control on an internal debug interface could allow a high privileged attacker to bypass memory access co... |
| CVE-2025-10698 | MEDIUM | 6 | 0.1% | Nov 12, 2026 | Incorrect default permissions and Product released in Non-Release configuration vulnerability in OpenText Identity Conso... |
| CVE-2025-59848 | MEDIUM | 6.8 | 0.4% | Nov 11, 2026 | HCL Leap is vulnerable to Stored XSS through malicious application titles in the Manage page dialogs, allowing an attack... |
| CVE-2025-59847 | MEDIUM | 6.8 | 0.4% | Nov 11, 2026 | HCL Domino Leap is vulnerable to Stored XSS through malicious application titles in Manage page dialogs, allowing an att... |
| CVE-2025-48504 | MEDIUM | 6.8 | 0.3% | Nov 10, 2026 | Operation on a resource after expiration or release in the Secure Encrypted Virtualization (SEV) firmware could allow a ... |
| CVE-2025-29941 | MEDIUM | 6 | 0.1% | Nov 10, 2026 | Incorrect usage of seeds in pseudo-random number generator in the Secure Encrypted Virtualization (SEV) firmware could a... |
| CVE-2025-62621 | MEDIUM | 5.9 | 0.2% | Nov 10, 2026 | Expected behavior violation in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to ... |
| CVE-2025-62620 | MEDIUM | 5.9 | 0.2% | Nov 10, 2026 | Improper validation of unsafe equivalence in input could allow an attacker with high privileges to reclaim the ring buff... |
| CVE-2025-54508 | MEDIUM | 4 | 0.2% | Nov 10, 2026 | Improper validation of Reverse Map Table (RMP) entries in the Secure Encrypted Virtualization (SEV) firmware could allow... |
| CVE-2025-54506 | MEDIUM | 4 | 0.1% | Nov 10, 2026 | A time-of-check to time-of-use (TOCTOU) race condition in the AMD SEV Secure Encrypted Virtualization (SEV) firmware cou... |
| CVE-2025-54504 | MEDIUM | 5.9 | 0.2% | Nov 10, 2026 | Insufficient Granularity of Access Control in AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker... |
| CVE-2025-54503 | MEDIUM | 5.9 | 0.2% | Nov 10, 2026 | Improper handling of overlap between protected memory ranges in the Secure Encrypted Virtualization (SEV) firmware could... |
| CVE-2025-52537 | MEDIUM | 4 | 0.1% | Nov 10, 2026 | Improper access control within the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with admin... |
| CVE-2025-52535 | MEDIUM | 5.9 | 0.3% | Nov 10, 2026 | Improper resource reuse in the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with hyperviso... |
| CVE-2025-29940 | MEDIUM | 5.9 | 0.2% | Nov 10, 2026 | Unverified ownership in Secure Encrypted Virtualization (SEV) firmware could allow a privileged attacker with access to ... |
| CVE-2025-0027 | MEDIUM | 5.9 | 0.2% | Nov 10, 2026 | Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypa... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now