2025 CVE Vulnerabilities

45,266 CVEs published in 2025.

CVE IDSeverityCVSSDescription
CVE-2025-6649LOW3.3PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows r...
CVE-2025-6648LOW3.3PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows r...
CVE-2025-6647HIGH7.8PDF-XChange Editor U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows r...
CVE-2025-6646LOW3.3PDF-XChange Editor U3D File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remot...
CVE-2025-6645HIGH7.8PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote...
CVE-2025-6644HIGH7.8PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote...
CVE-2025-6643LOW3.3PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows r...
CVE-2025-6642HIGH7.8PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows re...
CVE-2025-6641LOW3.3PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows r...
CVE-2025-6640HIGH7.8PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote...
CVE-2025-6443HIGH7.2Mikrotik RouterOS VXLAN Source IP Improper Access Control Vulnerability. This vulnerability allows remote attackers to b...
CVE-2025-6665CRITICAL9.8A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. Affected by ...
CVE-2025-6664MEDIUM4.3A vulnerability, which was classified as problematic, was found in CodeAstro Patient Record Management System 1.0. Affec...
CVE-2025-36038CRITICAL9.8IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary code on the system with ...
CVE-2025-45333HIGH7.5berkeley-abc abc 1.1 contains a Null Pointer Dereference (NPD) vulnerability in the Abc_NtkCecFraigPart function of its ...
CVE-2025-6627HIGH8.8A vulnerability has been found in TOTOLINK A702R 4.0.0-B20230721.1521 and classified as critical. This vulnerability aff...
CVE-2025-6678HIGH7.5Autel MaxiCharger AC Wallbox Commercial PIN Missing Authentication Information Disclosure Vulnerability. This vulnerabil...
CVE-2025-6621CRITICAL9.8A vulnerability classified as critical has been found in TOTOLINK CA300-PoE 6.2c.884. This affects the function QuickSet...
CVE-2025-6620CRITICAL9.8A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884. It has been rated as critical. Affected by this issue is the f...
CVE-2025-6619CRITICAL9.8A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884. It has been declared as critical. Affected by this vulnerabili...
CVE-2025-6618CRITICAL9.8A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884. It has been classified as critical. Affected is the function S...
CVE-2025-6445HIGH8.1ServiceStack FindType Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attacker...
CVE-2025-6444MEDIUM5.9ServiceStack GetErrorResponse Improper Input Validation NTLM Relay Vulnerability. This vulnerability allows remote attac...
CVE-2025-5834HIGH7.8Pioneer DMH-WT7600NEX Missing Immutable Root of Trust in Hardware Local Privilege Escalation Vulnerability. This vulnera...
CVE-2025-5833MEDIUM6.8Pioneer DMH-WT7600NEX Root Filesystem Insufficient Verification of Data Authenticity Vulnerability. This vulnerability a...

Check if your code is affected by 2025 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now