2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-14995 | HIGH | 8.8 | 0.7% | Dec 21, 2025 | A vulnerability has been found in Tenda FH1201 1.2.0.14(408). Affected is the function sprintf of the file /goform/SetIp... |
| CVE-2025-14994 | HIGH | 8.8 | 0.7% | Dec 21, 2025 | A flaw has been found in Tenda FH1201 and FH1206 1.2.0.14(408)/1.2.0.8(8155). This impacts the function strcat of the fi... |
| CVE-2025-14855 | HIGH | 7.2 | 0.4% | Dec 21, 2025 | The SureForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form field parameters in all ver... |
| CVE-2025-14800 | HIGH | 8.1 | 0.4% | Dec 21, 2025 | The Redirection for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type... |
| CVE-2025-14993 | HIGH | 8.8 | 0.8% | Dec 21, 2025 | A vulnerability was detected in Tenda AC18 15.03.05.05. This affects the function sprintf of the file /goform/SetDlnaCfg... |
| CVE-2025-9343 | HIGH | 7.2 | 0.2% | Dec 21, 2025 | The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Stored Cross-Site Scriptin... |
| CVE-2025-68644 | HIGH | 7.4 | 0.3% | Dec 21, 2025 | Yealink RPS before 2025-06-27 allows unauthorized access to information, including AutoP URL addresses. This was fixed b... |
| CVE-2025-14992 | HIGH | 8.8 | 0.7% | Dec 21, 2025 | A security vulnerability has been detected in Tenda AC18 15.03.05.05. The impacted element is the function strcpy of the... |
| CVE-2025-14071 | HIGH | 7.5 | 0.6% | Dec 21, 2025 | The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to PHP Object Injection in all ver... |
| CVE-2025-12980 | HIGH | 7.5 | 0.3% | Dec 21, 2025 | The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is vulnerable to unauthor... |
| CVE-2025-34290 | HIGH | 7.8 | 0.1% | Dec 20, 2025 | Versa SASE Client for Windows versions released between 7.8.7 and 7.9.4 contain a local privilege escalation vulnerabili... |
| CVE-2025-7782 | HIGH | 7.6 | 0.2% | Dec 20, 2025 | The WP JobHunt plugin for WordPress, used by the JobCareer theme, is vulnerable to unauthorized modification of data due... |
| CVE-2025-14591 | HIGH | 7.5 | 0.2% | Dec 20, 2025 | In Delphix Continuous Compliance version 2025.3.0 and later, following a recent bug fix to correctly handle CR+LF (Windo... |
| CVE-2025-14300 | HIGH | 8.1 | 0.4% | Dec 20, 2025 | The HTTPS service on Tapo C200 v3, v5, C425 v1.2 and C100 v5 exposes a connectAP interface without proper authenticatio... |
| CVE-2025-68613 | HIGH | 8.8 | 99.0% | Dec 19, 2025 | n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4, 1.121.1, and 1.... |
| CVE-2025-68481 | HIGH | 8.8 | 0.3% | Dec 19, 2025 | FastAPI Users allows users to quickly add a registration and authentication system to their FastAPI project. Prior to ve... |
| CVE-2025-14966 | HIGH | 7.2 | 0.4% | Dec 19, 2025 | A vulnerability was determined in FastAdmin up to 1.7.0.20250506. Affected is the function selectpage of the file applic... |
| CVE-2025-68478 | HIGH | 7.1 | 5.8% | Dec 19, 2025 | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0, if an arbitrary p... |
| CVE-2025-14958 | HIGH | 7.8 | 0.2% | Dec 19, 2025 | A security flaw has been discovered in floooh sokol up to 33e2271c431bf21de001e972f72da17a984da932. This vulnerability a... |
| CVE-2025-58052 | HIGH | 8.1 | 0.3% | Dec 19, 2025 | Galette is a membership management web application for non profit organizations. Starting in version 0.9.6 and prior to ... |
| CVE-2025-14956 | HIGH | 7.1 | 0.2% | Dec 19, 2025 | A vulnerability was determined in WebAssembly Binaryen up to 125. Affected by this issue is the function WasmBinaryReade... |
| CVE-2025-14812 | HIGH | 7.5 | 0.2% | Dec 19, 2025 | ArcSearch for iOS versions prior to 1.45.2 could display a different domain in the address bar than the content being sh... |
| CVE-2025-14809 | HIGH | 7.4 | 0.2% | Dec 19, 2025 | ArcSearch for Android versions prior to 1.12.6 could display a different domain in the address bar than the content bein... |
| CVE-2025-67442 | HIGH | 7.6 | 0.6% | Dec 19, 2025 | EVE-NG 6.4.0-13-PRO is vulnerable to Directory Traversal. The /api/export interface allows authenticated users to export... |
| CVE-2025-66905 | HIGH | 7.5 | 0.6% | Dec 19, 2025 | The Takes web framework's TkFiles take thru 2.0-SNAPSHOT fails to canonicalize HTTP request paths before resolving them ... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now