2025 CVE Vulnerabilities
45,527 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-10884 | HIGH | 7.8 | 0.3% | Dec 16, 2025 | AA maliciously crafted CATPART file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vul... |
| CVE-2025-10883 | HIGH | 7.8 | 0.3% | Dec 16, 2025 | A maliciously crafted CATPRODUCT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read v... |
| CVE-2025-10882 | HIGH | 7.8 | 0.3% | Dec 16, 2025 | A maliciously crafted X_T file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerab... |
| CVE-2025-10881 | HIGH | 7.8 | 0.3% | Dec 16, 2025 | A maliciously crafted CATPRODUCT file, when parsed through certain Autodesk products, can force a Heap-Based Overflow vu... |
| CVE-2025-9121 | HIGH | 8.8 | 0.4% | Dec 15, 2025 | Pentaho Data Integration and Analytics Community Dashboard Editor plugin versions before 10.2.0.4, including 9.3.0.x and... |
| CVE-2025-14730 | HIGH | 7.2 | 0.5% | Dec 15, 2025 | A security flaw has been discovered in CTCMS Content Management System up to 2.1.2. The impacted element is an unknown f... |
| CVE-2025-14729 | HIGH | 7.2 | 0.5% | Dec 15, 2025 | A vulnerability was identified in CTCMS Content Management System up to 2.1.2. The affected element is the function Save... |
| CVE-2025-14503 | HIGH | 7.2 | 0.5% | Dec 15, 2025 | An overly-permissive IAM trust policy in the Harmonix on AWS framework may allow IAM principals in the same AWS account ... |
| CVE-2025-65176 | HIGH | 7.5 | 0.4% | Dec 15, 2025 | An issue was discovered in Dynatrace OneAgent before 1.325.47. When attempting to access a remote network share from a m... |
| CVE-2025-66440 | HIGH | 8.8 | 0.4% | Dec 15, 2025 | An issue was discovered in Frappe ERPNext through 15.89.0. Function get_outstanding_reference_documents() at erpnext/acc... |
| CVE-2025-66439 | HIGH | 8.8 | 0.4% | Dec 15, 2025 | An issue was discovered in Frappe ERPNext through 15.89.0. Function get_outstanding_reference_documents() at erpnext.acc... |
| CVE-2025-66438 | HIGH | 8.8 | 0.5% | Dec 15, 2025 | A Server-Side Template Injection (SSTI) vulnerability exists in the Frappe ERPNext through 15.89.0 Print Format renderin... |
| CVE-2025-66437 | HIGH | 8.8 | 0.6% | Dec 15, 2025 | An SSTI (Server-Side Template Injection) vulnerability exists in the get_address_display method of Frappe ERPNext throug... |
| CVE-2025-14038 | HIGH | 7 | 0.2% | Dec 15, 2025 | EDB Hybrid Manager contains a flaw that allows an unauthenticated attacker to directly access certain gRPC endpoints. Th... |
| CVE-2025-66434 | HIGH | 8.8 | 0.6% | Dec 15, 2025 | An SSTI (Server-Side Template Injection) vulnerability exists in the get_dunning_letter_text method of Frappe ERPNext th... |
| CVE-2025-65742 | HIGH | 8.2 | 0.3% | Dec 15, 2025 | An unauthenticated Broken Function Level Authorization (BFLA) vulnerability in Newgen OmniDocs v11.0 allows attackers to... |
| CVE-2025-11393 | HIGH | 8.7 | 0.2% | Dec 15, 2025 | A flaw was found in runtimes-inventory-rhel8-operator. An internal proxy component is incorrectly configured. Because of... |
| CVE-2025-60786 | HIGH | 8.8 | 0.6% | Dec 15, 2025 | A Zip Slip vulnerability in the import a Project component of iceScrum v7.54 Pro On-prem allows attackers to execute arb... |
| CVE-2025-13824 | HIGH | 8.7 | 0.3% | Dec 15, 2025 | A security issue exists due to improper handling of malformed CIP packets during fuzzing. The controller enters a hard f... |
| CVE-2025-13823 | HIGH | 7.1 | 0.2% | Dec 15, 2025 | A security issue was found in the IPv6 stack in the Micro850 and Micro870 controllers when the controllers received mult... |
| CVE-2025-34181 | HIGH | 8.7 | 1.0% | Dec 15, 2025 | NetSupport Manager < 14.12.0001 contains an arbitrary file write vulnerability in its Connectivity Server/Gateway PUTFIL... |
| CVE-2025-34180 | HIGH | 8.4 | 0.2% | Dec 15, 2025 | NetSupport Manager < 14.12.0001 relies on a shared Gateway Key for authentication between Manager/Control, Client, and ... |
| CVE-2025-34179 | HIGH | 8.7 | 0.4% | Dec 15, 2025 | NetSupport Manager < 14.12.0001 contains an unauthenticated SQL injection vulnerability in its Connectivity Server/Gatew... |
| CVE-2025-14383 | HIGH | 7.5 | 0.4% | Dec 15, 2025 | The Booking Calendar plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'dates_to_check' param... |
| CVE-2025-65781 | HIGH | 8.2 | 0.3% | Dec 15, 2025 | An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16. Attachment upl... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now