2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-56752 | CRITICAL | 9.4 | 0.5% | Sep 3, 2025 | A vulnerability in the Ruijie RG-ES series switch firmware ESW_1.0(1)B1P39 enables remote attackers to fully bypass auth... |
| CVE-2025-9919 | CRITICAL | 9.8 | 0.4% | Sep 3, 2025 | A vulnerability was identified in 1000projects Beauty Parlour Management System 1.0. This affects an unknown function of... |
| CVE-2025-57148 | CRITICAL | 9.1 | 0.5% | Sep 3, 2025 | phpgurukul Online Shopping Portal 2.0 is vulnerable to Arbitrary File Upload in /admin/insert-product.php, due to the la... |
| CVE-2025-57052 | CRITICAL | 9.8 | 0.7% | Sep 3, 2025 | cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c... |
| CVE-2025-53693 | CRITICAL | 9.8 | 19.9% | Sep 3, 2025 | Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Sitecore Sitecore Ex... |
| CVE-2025-1740 | CRITICAL | 9.8 | 0.4% | Sep 3, 2025 | Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft MyRezzta allows Authentication Bypas... |
| CVE-2025-58210 | CRITICAL | 9.8 | 0.2% | Sep 3, 2025 | Missing Authorization vulnerability in ThemeMove Makeaholic makeaholic allows Exploiting Incorrectly Configured Access C... |
| CVE-2025-9847 | CRITICAL | 9.8 | 0.4% | Sep 3, 2025 | A weakness has been identified in ScriptAndTools Real Estate Management System 1.0. Impacted is an unknown function of t... |
| CVE-2025-9840 | CRITICAL | 9.8 | 0.3% | Sep 2, 2025 | A weakness has been identified in itsourcecode Sports Management System 1.0. The impacted element is an unknown function... |
| CVE-2025-9839 | CRITICAL | 9.8 | 0.4% | Sep 2, 2025 | A security flaw has been discovered in itsourcecode Student Information Management System 1.0. The affected element is a... |
| CVE-2025-9838 | CRITICAL | 9.8 | 0.4% | Sep 2, 2025 | A vulnerability was identified in itsourcecode Student Information Management System 1.0. Impacted is an unknown functio... |
| CVE-2025-26416 | CRITICAL | 9.8 | 0.4% | Sep 2, 2025 | In initializeSwizzler of SkBmpStandardCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow. ... |
| CVE-2025-22435 | CRITICAL | 9.8 | 0.2% | Sep 2, 2025 | In avdt_msg_ind of avdt_msg.cc, there is a possible memory corruption due to type confusion. This could lead to paired d... |
| CVE-2025-22429 | CRITICAL | 9.8 | 0.2% | Sep 2, 2025 | In multiple locations, there is a possible way to execute arbitrary code due to a logic error in the code. This could le... |
| CVE-2025-9837 | CRITICAL | 9.8 | 0.4% | Sep 2, 2025 | A vulnerability was determined in itsourcecode Student Information Management System 1.0. This issue affects some unknow... |
| CVE-2025-9833 | CRITICAL | 9.8 | 0.4% | Sep 2, 2025 | A vulnerability was detected in SourceCodester Online Farm Management System 1.0. Affected by this vulnerability is an u... |
| CVE-2025-9832 | CRITICAL | 9.8 | 0.4% | Sep 2, 2025 | A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0. Affected is an unknown... |
| CVE-2025-9831 | CRITICAL | 9.8 | 0.4% | Sep 2, 2025 | A weakness has been identified in PHPGurukul Beauty Parlour Management System 1.1. This impacts an unknown function of t... |
| CVE-2025-9830 | CRITICAL | 9.8 | 0.4% | Sep 2, 2025 | A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown function... |
| CVE-2025-9276 | CRITICAL | 9.8 | 0.8% | Sep 2, 2025 | Cockroach Labs cockroach-k8s-request-cert Empty Root Password Authentication Bypass Vulnerability. This vulnerability co... |
| CVE-2025-9829 | CRITICAL | 9.8 | 0.4% | Sep 2, 2025 | A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.1. The impacted element is an unknown fu... |
| CVE-2025-9696 | CRITICAL | 9.4 | 0.2% | Sep 2, 2025 | The SunPower PVS6's BluetoothLE interface is vulnerable due to its use of hardcoded encryption parameters and publicly a... |
| CVE-2025-6519 | CRITICAL | 9.8 | 0.5% | Sep 2, 2025 | E3 Site Supervisor (firmware version < 2.31F01) has a default admin user "ONEDAY" with a daily generated password. An at... |
| CVE-2025-5662 | CRITICAL | 9.8 | 0.6% | Sep 2, 2025 | A deserialization vulnerability exists in the H2O-3 REST API (POST /99/ImportSQLTable) that affects all versions up to 3... |
| CVE-2025-57140 | CRITICAL | 9.8 | 0.4% | Sep 2, 2025 | rsbi-pom 4.7 is vulnerable to SQL Injection in the /bi/service/model/DatasetService path. |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now