2025 CVE Vulnerabilities
45,527 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-6715 | CRITICAL | 9.8 | 0.5% | Aug 13, 2025 | The LatePoint WordPress plugin before 5.1.94 is vulnerable to Local File Inclusion via the layout parameter. This makes... |
| CVE-2025-7384 | CRITICAL | 9.8 | 1.6% | Aug 13, 2025 | The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to PHP Object Injection in ... |
| CVE-2025-55168 | CRITICAL | 9.8 | 0.4% | Aug 12, 2025 | WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Prior to versio... |
| CVE-2025-25256 | CRITICAL | 9.8 | 60.3% | Aug 12, 2025 | An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] vul... |
| CVE-2025-53766 | CRITICAL | 9.8 | 6.7% | Aug 12, 2025 | Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network. |
| CVE-2025-50171 | CRITICAL | 9.1 | 0.9% | Aug 12, 2025 | Missing authorization in Remote Desktop Server allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2025-50165 | CRITICAL | 9.8 | 3.5% | Aug 12, 2025 | Untrusted pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to execute code over a net... |
| CVE-2025-55167 | CRITICAL | 9.8 | 0.5% | Aug 12, 2025 | WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Prior to versio... |
| CVE-2025-24325 | CRITICAL | 9.3 | 0.1% | Aug 12, 2025 | Improper input validation in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.17.2 ma... |
| CVE-2025-3831 | CRITICAL | 9.8 | 0.4% | Aug 12, 2025 | Log files uploaded during troubleshooting by the Harmony SASE agent may have been accessible to unauthorized parties. |
| CVE-2025-8059 | CRITICAL | 9.8 | 0.4% | Aug 12, 2025 | The B Blocks plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization and improper input ... |
| CVE-2025-42957 | CRITICAL | 9.9 | 1.5% | Aug 12, 2025 | SAP S/4HANA allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. T... |
| CVE-2025-42950 | CRITICAL | 9.9 | 0.6% | Aug 12, 2025 | SAP Landscape Transformation (SLT) allows an attacker with user privileges to exploit a vulnerability in the function mo... |
| CVE-2025-55161 | CRITICAL | 9.8 | 1.9% | Aug 11, 2025 | Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0, ... |
| CVE-2025-55151 | CRITICAL | 9.8 | 0.3% | Aug 11, 2025 | Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0, ... |
| CVE-2025-55150 | CRITICAL | 9.8 | 1.6% | Aug 11, 2025 | Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0, ... |
| CVE-2025-7679 | CRITICAL | 9.2 | 0.4% | Aug 11, 2025 | The ASPECT system allows users to bypass authentication. This issue affects all versions of ASPECT |
| CVE-2025-54063 | CRITICAL | 9.6 | 0.7% | Aug 11, 2025 | Cherry Studio is a desktop client that supports for multiple LLM providers. From versions 1.4.8 to 1.5.0, there is a one... |
| CVE-2025-53187 | CRITICAL | 9.8 | 0.6% | Aug 11, 2025 | Due to an issue in configuration, code that was intended for debugging purposes was included in the market release of th... |
| CVE-2025-45146 | CRITICAL | 9.8 | 0.7% | Aug 11, 2025 | ModelCache for LLM through v0.2.0 was discovered to contain an deserialization vulnerability via the component /manager/... |
| CVE-2025-8853 | CRITICAL | 9.8 | 0.6% | Aug 11, 2025 | Official Document Management System developed by 2100 Technology has an Authentication Bypass vulnerability, allowing un... |
| CVE-2025-8838 | CRITICAL | 9.8 | 0.5% | Aug 11, 2025 | A vulnerability has been found in WinterChenS my-site up to 1f7525f15934d9d6a278de967f6ec9f1757738d8. This vulnerability... |
| CVE-2025-8660 | CRITICAL | 9.8 | 0.3% | Aug 11, 2025 | Privilege escalation occurs when a user gets access to more resources or functionality than they are normally allowed. |
| CVE-2025-8854 | CRITICAL | 9.8 | 0.5% | Aug 11, 2025 | Stack-based buffer overflow in LoadOFF in bulletphysics bullet3 before 3.26 on all platforms allows remote attackers to ... |
| CVE-2025-8815 | CRITICAL | 9.8 | 0.6% | Aug 10, 2025 | A vulnerability was found in 猫宁i Morning up to bc782730c74ff080494f145cc363a0b4f43f7d3e. It has been classified as criti... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now