2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-66909 | HIGH | 7.5 | 0.5% | Dec 19, 2025 | Turms AI-Serving module v0.10.0-SNAPSHOT and earlier contains an image decompression bomb denial of service vulnerabilit... |
| CVE-2025-50681 | HIGH | 7.5 | 0.5% | Dec 19, 2025 | igmpproxy 0.4 before commit 2b30c36 allows remote attackers to cause a denial of service (application crash) via a craft... |
| CVE-2025-1927 | HIGH | 7.1 | 0.1% | Dec 19, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Restajet Information Technologies Inc. Online Food Delivery System al... |
| CVE-2025-14847 | HIGH | 8.7 | 83.0% | Dec 19, 2025 | Mismatched length fields in Zlib compressed protocol headers may allow a read of uninitialized heap memory by an unauthe... |
| CVE-2025-66524 | HIGH | 8.8 | 0.4% | Dec 19, 2025 | Apache NiFi 1.20.0 through 2.6.0 include the GetAsanaObject Processor, which requires integration with a configurable Di... |
| CVE-2025-14151 | HIGH | 7.2 | 0.4% | Dec 19, 2025 | The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'outbound_resource' par... |
| CVE-2025-66499 | HIGH | 7.8 | 0.3% | Dec 19, 2025 | A heap-based buffer overflow vulnerability exists in the PDF parsing of Foxit PDF Reader when processing specially craft... |
| CVE-2025-66498 | HIGH | 7.8 | 0.2% | Dec 19, 2025 | A memory corruption vulnerability exists in the 3D annotation handling of Foxit PDF Reader due to insufficient bounds ch... |
| CVE-2025-66497 | HIGH | 7.8 | 0.2% | Dec 19, 2025 | A memory corruption vulnerability exists in the 3D annotation handling of Foxit PDF Reader due to insufficient bounds ch... |
| CVE-2025-66496 | HIGH | 7.8 | 0.2% | Dec 19, 2025 | A memory corruption vulnerability exists in the 3D annotation handling of Foxit PDF Reader due to insufficient bounds ch... |
| CVE-2025-66495 | HIGH | 7.8 | 0.3% | Dec 19, 2025 | A use-after-free vulnerability exists in the annotation handling of Foxit PDF Reader before 2025.2.1, 14.0.1, and 13.2.1... |
| CVE-2025-66494 | HIGH | 7.8 | 0.3% | Dec 19, 2025 | A use-after-free vulnerability exists in the PDF file parsing of Foxit PDF Reader before 2025.2.1, 14.0.1, and 13.2.1 on... |
| CVE-2025-66493 | HIGH | 7.8 | 0.3% | Dec 19, 2025 | A use-after-free vulnerability exists in the AcroForm handling of Foxit PDF Reader and Foxit PDF Editor before 2025.2.1,... |
| CVE-2025-13999 | HIGH | 7.2 | 0.2% | Dec 19, 2025 | The HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player plugin for WordPress is vulnerable to Server-S... |
| CVE-2025-13008 | HIGH | 8.6 | 0.5% | Dec 19, 2025 | An information disclosure vulnerability in M-Files Server before versions 25.12.15491.7, 25.8 LTS SR3, 25.2 LTS SR3 and ... |
| CVE-2025-13307 | HIGH | 7.2 | 0.5% | Dec 19, 2025 | The Ocean Modal Window WordPress plugin before 2.3.3 is vulnerable to Remote Code Execution via the modal display logic.... |
| CVE-2025-14939 | HIGH | 7.2 | 0.3% | Dec 19, 2025 | A vulnerability was found in code-projects Online Appointment Booking System 1.0. Impacted is an unknown function of the... |
| CVE-2025-52692 | HIGH | 8.8 | 6.4% | Dec 19, 2025 | Successful exploitation of the vulnerability could allow an attacker with local network access to send a specially craft... |
| CVE-2025-14909 | HIGH | 8.1 | 0.5% | Dec 19, 2025 | A weakness has been identified in JeecgBoot up to 3.9.0. The impacted element is the function SysUserOnlineController of... |
| CVE-2025-13941 | HIGH | 8.8 | 0.2% | Dec 19, 2025 | A local privilege escalation vulnerability exists in the Foxit PDF Reader/Editor Update Service. During plugin installat... |
| CVE-2025-14908 | HIGH | 8.1 | 0.3% | Dec 19, 2025 | A security flaw has been discovered in JeecgBoot up to 3.9.0. The affected element is an unknown function of the file je... |
| CVE-2025-14900 | HIGH | 7.2 | 0.4% | Dec 19, 2025 | A security vulnerability has been detected in CodeAstro Real Estate Management System 1.0. Affected is an unknown functi... |
| CVE-2025-14899 | HIGH | 7.2 | 0.3% | Dec 19, 2025 | A weakness has been identified in CodeAstro Real Estate Management System 1.0. This impacts an unknown function of the f... |
| CVE-2025-11774 | HIGH | 8.2 | 0.6% | Dec 19, 2025 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the software... |
| CVE-2025-14898 | HIGH | 7.2 | 0.3% | Dec 19, 2025 | A security flaw has been discovered in CodeAstro Real Estate Management System 1.0. This affects an unknown function of ... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now