2025 CVE Vulnerabilities

45,527 CVEs published in 2025.

Filter:CRITICALClear
CVE IDSeverityCVSSDescription
CVE-2025-30404CRITICAL9.8An integer overflow vulnerability in the loading of ExecuTorch models can cause overlapping allocations, potentially res...
CVE-2025-53792CRITICAL9.1Azure Portal Elevation of Privilege Vulnerability
CVE-2025-53767CRITICAL10Azure OpenAI Elevation of Privilege Vulnerability
CVE-2025-45765CRITICAL9.1ruby-jwt v3.0.0.beta1 was discovered to contain weak encryption. NOTE: the Supplier's perspective is "keysize is not som...
CVE-2025-50692CRITICAL9.8FoxCMS <=v1.2.5 is vulnerable to Code Execution in admin/template_file/editFile.html.
CVE-2025-34152CRITICAL9.4An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model ...
CVE-2025-34151CRITICAL9.4A command injection vulnerability exists in the 'passwd' parameter of the PPPoE setup process on the Shenzhen Aitemi M30...
CVE-2025-34150CRITICAL9.4The PPPoE configuration interface of the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) is vulnerable to comm...
CVE-2025-34149CRITICAL9.4A command injection vulnerability affects the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) during WPA2 conf...
CVE-2025-34148CRITICAL9.4An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model ...
CVE-2025-7768CRITICAL9.3Tigo Energy's Cloud Connect Advanced (CCA) device contains hard-coded credentials that allow unauthorized users to gain ...
CVE-2025-30127CRITICAL9.8An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. Once access is gained either by default, common, or c...
CVE-2025-3354CRITICAL9.8IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 20 is vulnerable to a heap-based buffer overflow, caused by i...
CVE-2025-3320CRITICAL9.8IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 20 is vulnerable to a heap-based buffer overflow, caused by i...
CVE-2025-23327CRITICAL9.1NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause an integer o...
CVE-2025-23319CRITICAL9.8NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker c...
CVE-2025-23318CRITICAL9.8NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker c...
CVE-2025-23317CRITICAL9.8NVIDIA Triton Inference Server contains a vulnerability in the HTTP server, where an attacker could start a reverse shel...
CVE-2025-23311CRITICAL9.8NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a stack overflow through specially...
CVE-2025-23310CRITICAL9.8NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause stack buffer...
CVE-2025-22470CRITICAL9.8CL4/6NX Plus and CL4/6NX-J Plus (Japan model) with the firmware versions prior to 1.15.5-r1 allow crafted dangerous file...
CVE-2025-27071CRITICAL9.8Memory corruption while processing specific files in Powerline Communication Firmware.
CVE-2025-6994CRITICAL9.8The Reveal Listing plugin by smartdatasoft for WordPress is vulnerable to privilege escalation in versions up to, and in...
CVE-2025-54617CRITICAL9.8Stack-based buffer overflow vulnerability in the dms_fwk module. Impact: Successful exploitation of this vulnerability c...
CVE-2025-54883CRITICAL9.3Vision UI is a collection of enterprise-grade, dependency-free modules for modern web projects. In versions 1.4.0 and be...

Check if your code is affected by 2025 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now