2025 CVE Vulnerabilities

45,522 CVEs published in 2025.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2025-65561HIGH7.5An issue was discovered in function LocalNode.Sess in free5GC 4.1.0 allowing attackers to cause a denial of service or o...
CVE-2025-65559HIGH7.5An issue was discovered in Open5GS 2.7.5-49-g465e90f, when processing a PFCP Session Establishment Request (type=50), th...
CVE-2025-14885HIGH8.8A flaw has been found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file ...
CVE-2025-14738HIGH7.5Improper authentication vulnerability in TP-Link WA850RE (httpd modules) allows unauthenticated attackers to download th...
CVE-2025-14737HIGH8Command Injection vulnerability in TP-Link WA850RE (httpd modules) allows authenticated adjacent attacker to inject arbi...
CVE-2025-14896HIGH8.7due to insufficient sanitazation in Vega’s `convert()` function when `safeMode` is enabled and the spec variable is an a...
CVE-2025-14884HIGH7.2A vulnerability was detected in D-Link DIR-605 202WWB03. Affected by this issue is some unknown functionality of the com...
CVE-2025-68278HIGH8.8Tina is a headless content management system. In tinacms prior to version 3.1.1, tinacms uses the gray-matter package in...
CVE-2025-64724HIGH7.3Arduino IDE is an integrated development environment. Prior to version 2.3.7, Arduino IDE for macOS is installed with wo...
CVE-2025-65011HIGH7.1In WODESYS WD-R608U router (also known as WDR122B V2.0 and WDR28) an unauthorised user can view configuration files by d...
CVE-2025-65010HIGH7.1WODESYS WD-R608U router (also known as WDR122B V2.0 and WDR28) is vulnerable to Broken Access Control in initial configu...
CVE-2025-65009HIGH7.1In WODESYS WD-R608U router (also known as WDR122B V2.0 and WDR28) admin password is stored in configuration file as plai...
CVE-2025-65007HIGH8.7In WODESYS WD-R608U router (also known as WDR122B V2.0 and WDR28) due to lack of authentication in the configuration cha...
CVE-2025-64469HIGH7.8There is a stack-based buffer overflow vulnerability in NI LabVIEW in LVResFile::FindRsrcListEntry() when parsing a corr...
CVE-2025-64468HIGH8.5There is a use-after-free vulnerability in sentry!sentry_span_set_data() when parsing a corrupted VI file. This vulnera...
CVE-2025-64467HIGH7.8There is an out of bounds read vulnerability in NI LabVIEW in LVResFile::FindRsrcListEntry() when parsing a corrupted VI...
CVE-2025-64466HIGH8.5There is an out of bounds read vulnerability in NI LabVIEW in lvre!ExecPostedProcRecPost() when parsing a corrupted VI f...
CVE-2025-64465HIGH8.5There is an out of bounds read vulnerability in NI LabVIEW in lvre!DataSizeTDR() when parsing a corrupted VI file. This...
CVE-2025-64464HIGH8.5There is an out of bounds read vulnerability in NI LabVIEW in lvre!VisaWriteFromFile() when parsing a corrupted VI file....
CVE-2025-64463HIGH8.5There is an out of bounds read vulnerability in NI LabVIEW in LVResource::DetachResource() when parsing a corrupted VI f...
CVE-2025-64462HIGH7.8There is an out of bounds read vulnerability in NI LabVIEW in LVResFile::RGetMemFileHandle() when parsing a corrupted VI...
CVE-2025-64461HIGH8.5There is an out of bounds write vulnerability in NI LabVIEW in mgocre_SH_25_3!RevBL() when parsing a corrupted VI file. ...
CVE-2025-63757HIGH7.5Integer overflow vulnerability in the yuv2ya16_X_c_template function in libswscale/output.c in FFmpeg 8.0.
CVE-2025-1031HIGH7.5Authorization Bypass Through User-Controlled Key vulnerability in Utarit Informatics Services Inc. SoliClub allows Funct...
CVE-2025-1030HIGH7.5Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Utarit Informatics Services Inc. Soli...

Check if your code is affected by 2025 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now