2025 CVE Vulnerabilities
45,321 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-13602 | — | — | — | Feb 18, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All r... |
| CVE-2025-71237 | MEDIUM | 5.5 | 0.1% | Feb 18, 2026 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: Fix potential block overflow that cause sys... |
| CVE-2025-71236 | MEDIUM | 5.5 | 0.1% | Feb 18, 2026 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Validate sp before freeing associate... |
| CVE-2025-71235 | MEDIUM | 5.5 | 0.1% | Feb 18, 2026 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Delay module unload while fabric sca... |
| CVE-2025-71234 | HIGH | 7.8 | 0.1% | Feb 18, 2026 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxu_... |
| CVE-2025-71233 | MEDIUM | 5.5 | 0.1% | Feb 18, 2026 | In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Avoid creating sub-groups asynchrono... |
| CVE-2025-71232 | MEDIUM | 5.5 | 0.1% | Feb 18, 2026 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Free sp in error path to fix system ... |
| CVE-2025-71231 | HIGH | 7.1 | 0.1% | Feb 18, 2026 | In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - Fix out-of-bounds index in find_empty... |
| CVE-2025-71230 | MEDIUM | 5.5 | 0.1% | Feb 18, 2026 | In the Linux kernel, the following vulnerability has been resolved: hfs: ensure sb->s_fs_info is always cleaned up Whe... |
| CVE-2025-71229 | MEDIUM | 5.5 | 0.1% | Feb 18, 2026 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: Fix alignment fault in rtw_core_enable... |
| CVE-2025-70998 | CRITICAL | 9.8 | 0.4% | Feb 18, 2026 | UTT HiPER 810 / nv810v4 router firmware v1.5.0-140603 was discovered to contain insecure default credentials for the tel... |
| CVE-2025-65791 | CRITICAL | 9.8 | 1.6% | Feb 18, 2026 | ZoneMinder v1.36.34 is vulnerable to Command Injection in web/views/image.php. The application passes unsanitized user i... |
| CVE-2025-65519 | MEDIUM | 6.5 | 0.3% | Feb 18, 2026 | mayswind ezbookkeeping versions 1.2.0 and earlier contain a critical vulnerability in JSON and XML file import processin... |
| CVE-2025-15579 | CRITICAL | 9.5 | 0.3% | Feb 18, 2026 | Deserialization of Untrusted Data vulnerability in OpenText™ Directory Services allows Object Injection. The vulnerabi... |
| CVE-2025-71228 | — | — | — | Feb 18, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2025-71227 | MEDIUM | 5.5 | 0.1% | Feb 18, 2026 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't WARN for connections on inval... |
| CVE-2025-71226 | — | — | — | Feb 18, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2025-71225 | MEDIUM | 5.3 | 0.1% | Feb 18, 2026 | In the Linux kernel, the following vulnerability has been resolved: md: suspend array while updating raid_disks via sys... |
| CVE-2025-61982 | HIGH | 7.8 | 0.1% | Feb 18, 2026 | An arbitrary code execution vulnerability exists in the Code Stream directive functionality of OpenCFD OpenFOAM 2506. A ... |
| CVE-2025-8308 | MEDIUM | 6.3 | 0.2% | Feb 18, 2026 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Key Softwar... |
| CVE-2025-60038 | HIGH | 8.8 | 0.3% | Feb 18, 2026 | A vulnerability has been identified in Rexroth IndraWorks. This flaw allows an attacker to execute arbitrary code on the... |
| CVE-2025-60037 | HIGH | 8.8 | 0.3% | Feb 18, 2026 | A vulnerability has been identified in Rexroth IndraWorks. This flaw allows an attacker to execute arbitrary code on the... |
| CVE-2025-60036 | HIGH | 8.8 | 0.4% | Feb 18, 2026 | A vulnerability has been identified in the UA.Testclient utility, which is included in Rexroth IndraWorks. All versions ... |
| CVE-2025-60035 | HIGH | 8.8 | 0.4% | Feb 18, 2026 | A vulnerability has been identified in the OPC.Testclient utility, which is included in Rexroth IndraWorks. All versions... |
| CVE-2025-59920 | HIGH | 8.6 | 0.3% | Feb 18, 2026 | When hours are entered in time@work, version 7.0.5, it performs a query to display the projects assigned to the user. If... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now