2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-40356 | HIGH | 7.8 | 0.1% | Dec 16, 2025 | In the Linux kernel, the following vulnerability has been resolved: spi: rockchip-sfc: Fix DMA-API usage Use DMA-API d... |
| CVE-2025-40354 | HIGH | 7.8 | 0.2% | Dec 16, 2025 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: increase max link count and fix li... |
| CVE-2025-40349 | HIGH | 7.8 | 0.2% | Dec 16, 2025 | In the Linux kernel, the following vulnerability has been resolved: hfs: validate record offset in hfsplus_bmap_alloc ... |
| CVE-2025-40347 | HIGH | 7.5 | 0.5% | Dec 16, 2025 | In the Linux kernel, the following vulnerability has been resolved: net: enetc: fix the deadlock of enetc_mdio_lock Af... |
| CVE-2025-65074 | HIGH | 7.2 | 0.4% | Dec 16, 2025 | WaveView client allows users to execute restricted set of predefined commands and scripts on the connected WaveStore Ser... |
| CVE-2025-13474 | HIGH | 7.5 | 0.3% | Dec 16, 2025 | Authorization Bypass Through User-Controlled Key vulnerability in Menulux Software Inc. Mobile App allows Exploitation o... |
| CVE-2025-14002 | HIGH | 8.1 | 0.4% | Dec 16, 2025 | The WPCOM Member plugin for WordPress is vulnerable to authentication bypass via brute force in all versions up to, and ... |
| CVE-2025-68068 | HIGH | 7.5 | 0.3% | Dec 16, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-68067 | HIGH | 7.5 | 0.3% | Dec 16, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-68066 | HIGH | 7.5 | 0.3% | Dec 16, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-68065 | HIGH | 7.5 | 0.3% | Dec 16, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-68062 | HIGH | 7.5 | 0.4% | Dec 16, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-68061 | HIGH | 7.5 | 0.3% | Dec 16, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-68056 | HIGH | 8.5 | 0.2% | Dec 16, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup LBG Z... |
| CVE-2025-68055 | HIGH | 8.5 | 0.3% | Dec 16, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themefic Hydra Boo... |
| CVE-2025-68054 | HIGH | 8.5 | 0.2% | Dec 16, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Count... |
| CVE-2025-68053 | HIGH | 8.5 | 0.2% | Dec 16, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup xProm... |
| CVE-2025-67999 | HIGH | 7.6 | 0.4% | Dec 16, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stefano Lissa News... |
| CVE-2025-67962 | HIGH | 7.6 | 0.3% | Dec 16, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AIOSEO Plugin Team... |
| CVE-2025-67950 | HIGH | 8.5 | 0.3% | Dec 16, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Syed Balkhi All In... |
| CVE-2025-66635 | HIGH | 8.6 | 0.5% | Dec 16, 2025 | Stack-based buffer overflow vulnerability exists in SEIKO EPSON Web Config. Specially crafted data input by a logged-in ... |
| CVE-2025-14252 | HIGH | 7.8 | 0.1% | Dec 16, 2025 | An Improper Access Control vulnerability in Advantech SUSI driver (susi.sys) allows attackers to read/write arbitrary me... |
| CVE-2025-61976 | HIGH | 8.7 | 0.4% | Dec 16, 2025 | CHOCO TEI WATCHER mini (IB-MCT001) contains an issue with improper check for unusual or exceptional conditions. If a rem... |
| CVE-2025-62848 | HIGH | 7.5 | 0.9% | Dec 16, 2025 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. The remote ... |
| CVE-2025-62847 | HIGH | 7.5 | 0.8% | Dec 16, 2025 | An improper neutralization of argument delimiters in a command vulnerability has been reported to affect several QNAP op... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now