2025 CVE Vulnerabilities
45,321 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-27904 | MEDIUM | 6.5 | 0.1% | Feb 17, 2026 | IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 IBM Db2 Recovery Expert for Linux, UNIX and Windows is vulnerable to... |
| CVE-2025-27903 | MEDIUM | 5.9 | 0.1% | Feb 17, 2026 | IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 IBM Db2 Recovery Expert for Linux, UNIX and Windows transmits data i... |
| CVE-2025-27901 | MEDIUM | 6.5 | 0.2% | Feb 17, 2026 | IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 IBM Db2 Recovery Expert for Linux, UNIX and Windows is vulnerable to... |
| CVE-2025-27900 | MEDIUM | 6.1 | 0.1% | Feb 17, 2026 | IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 could allow a remote attacker to conduct phishing attacks, using an ... |
| CVE-2025-27899 | MEDIUM | 5.3 | 0.2% | Feb 17, 2026 | IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 discloses sensitive information in an environment variable that coul... |
| CVE-2025-27898 | MEDIUM | 6.3 | 0.2% | Feb 17, 2026 | IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 does not invalidate session after a timeout which could allow an aut... |
| CVE-2025-13108 | HIGH | 7.5 | 0.2% | Feb 17, 2026 | IBM DB2 Merge Backup for Linux, UNIX and Windows 12.1.0.0 could allow an attacker to access sensitive information in mem... |
| CVE-2025-66614 | CRITICAL | 9.1 | 0.2% | Feb 17, 2026 | Improper Input Validation vulnerability. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.14, from 10.1.0-... |
| CVE-2025-59793 | CRITICAL | 9.9 | 1.0% | Feb 17, 2026 | Rocket TRUfusion Enterprise through 7.10.5 exposes the endpoint at /axis2/services/WsPortalV6UpDwAxis2Impl to authentica... |
| CVE-2025-36019 | MEDIUM | 6.1 | 0.2% | Feb 17, 2026 | IBM Concert 1.0.0 through 2.1.0 for Z hub framework is vulnerable to cross-site scripting. This vulnerability allows an ... |
| CVE-2025-36018 | MEDIUM | 6.5 | 0.1% | Feb 17, 2026 | IBM Concert 1.0.0 through 2.1.0 for Z hub component is vulnerable to cross-site request forgery which could allow an att... |
| CVE-2025-12755 | MEDIUM | 4 | 0.1% | Feb 17, 2026 | IBM MQ Operator (SC2 v3.2.0–3.8.1, LTS v2.0.0–2.0.29) and IBM‑supplied MQ Advanced container images (across affected SC2... |
| CVE-2025-36425 | MEDIUM | 6.5 | 0.2% | Feb 17, 2026 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.3 could ... |
| CVE-2025-36247 | HIGH | 8.2 | 0.3% | Feb 17, 2026 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.3 is vul... |
| CVE-2025-14689 | MEDIUM | 6.5 | 0.2% | Feb 17, 2026 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 12.1.0 through 12.1.3 could allow an authenticated use... |
| CVE-2025-13867 | MEDIUM | 6.5 | 0.2% | Feb 17, 2026 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.3 could ... |
| CVE-2025-67905 | HIGH | 8.7 | 0.1% | Feb 17, 2026 | Malwarebytes AdwCleaner before v.8.7.0 runs as Administrator and performs an insecure log file delete operation in which... |
| CVE-2025-70830 | CRITICAL | 9.9 | 1.0% | Feb 17, 2026 | A Server-Side Template Injection (SSTI) vulnerability in the Freemarker template engine of Datart v1.0.0-rc.3 allows aut... |
| CVE-2025-70828 | HIGH | 8.8 | 0.5% | Feb 17, 2026 | An issue in Datart v1.0.0-rc.3 allows attackers to execute arbitrary code via the url parameter in the JDBC configuratio... |
| CVE-2025-70397 | HIGH | 7.2 | 0.3% | Feb 17, 2026 | jizhicms 2.5.6 is vulnerable to SQL Injection in Article/deleteAll and Extmolds/deleteAll via the data parameter. |
| CVE-2025-65753 | HIGH | 7.5 | 0.4% | Feb 17, 2026 | An issue in the TLS certification mechanism of Guardian Gryphon v01.06.0006.22 allows attackers to execute commands as r... |
| CVE-2025-70829 | MEDIUM | 5.7 | 0.4% | Feb 17, 2026 | An information exposure vulnerability in Datart v1.0.0-rc.3 allows authenticated attackers to access sensitive data via ... |
| CVE-2025-7706 | MEDIUM | 6.1 | 0.2% | Feb 17, 2026 | Missing Authentication for Critical Function vulnerability in TUBITAK BILGEM Software Technologies Research Institute Li... |
| CVE-2025-8303 | MEDIUM | 6.5 | 0.3% | Feb 17, 2026 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in EKA Softwar... |
| CVE-2025-7631 | HIGH | 8.6 | 0.3% | Feb 17, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tumeva Internet Te... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now