2025 CVE Vulnerabilities
45,322 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-54802 | CRITICAL | 9.8 | 1.1% | Aug 5, 2025 | pyLoad is the free and open-source Download Manager written in pure Python. In versions 0.5.0b3.dev89 and below, there i... |
| CVE-2025-54795 | CRITICAL | 9.8 | 0.9% | Aug 5, 2025 | Claude Code is an agentic coding tool. In versions below 1.0.20, an error in command parsing makes it possible to bypass... |
| CVE-2025-54794 | CRITICAL | 9.1 | 0.9% | Aug 5, 2025 | Claude Code is an agentic coding tool. In versions below 0.2.111, a path validation flaw using prefix matching instead o... |
| CVE-2025-54387 | CRITICAL | 9.8 | 0.6% | Aug 5, 2025 | IPX is an image optimizer powered by sharp and svgo. In versions 1.3.1 and below, 2.0.0-0 through 2.1.0, and 3.0.0 throu... |
| CVE-2025-54135 | CRITICAL | 9.8 | 1.7% | Aug 5, 2025 | Cursor is a code editor built for programming with AI. Cursor allows writing in-workspace files with no user approval in... |
| CVE-2025-54130 | CRITICAL | 9.8 | 0.3% | Aug 5, 2025 | Cursor is a code editor built for programming with AI. Cursor allows writing in-workspace files with no user approval in... |
| CVE-2025-54119 | CRITICAL | 10 | 0.5% | Aug 5, 2025 | ADOdb is a PHP database class library that provides abstractions for performing queries and managing databases. In versi... |
| CVE-2025-27212 | CRITICAL | 9.8 | 1.2% | Aug 4, 2025 | An Improper Input Validation in certain UniFi Access devices could allow a Command Injection by a malicious actor with a... |
| CVE-2025-8526 | CRITICAL | 9.8 | 0.3% | Aug 4, 2025 | A vulnerability was found in Exrick xboot up to 3.3.4. It has been declared as critical. This vulnerability affects the ... |
| CVE-2025-51387 | CRITICAL | 9.8 | 0.5% | Aug 4, 2025 | The GitKraken Desktop 10.8.0 and 11.1.0 is susceptible to code injection due to misconfigured Electron Fuses. Specifical... |
| CVE-2025-50754 | CRITICAL | 9.6 | 0.5% | Aug 4, 2025 | Unisite CMS version 5.0 contains a stored Cross-Site Scripting (XSS) vulnerability in the "Report" functionality. A mali... |
| CVE-2025-50341 | CRITICAL | 9.8 | 0.4% | Aug 4, 2025 | A Boolean-based SQL injection vulnerability was discovered in Axelor 5.2.4 via the _domain parameter. An attacker can ma... |
| CVE-2025-52239 | CRITICAL | 9.8 | 0.4% | Aug 4, 2025 | An arbitrary file upload vulnerability in ZKEACMS v4.1 allows attackers to execute arbitrary code via a crafted file. |
| CVE-2025-51390 | CRITICAL | 9.8 | 2.2% | Aug 4, 2025 | TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a command injection vulnerability via the pin parameter... |
| CVE-2025-34147 | CRITICAL | 9.4 | 1.1% | Aug 4, 2025 | An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model ... |
| CVE-2025-51535 | CRITICAL | 9.1 | 0.4% | Aug 4, 2025 | Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 as discovered to contain a SQL injection vulnerability. |
| CVE-2025-44954 | CRITICAL | 9.8 | 0.7% | Aug 4, 2025 | RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account. |
| CVE-2025-51536 | CRITICAL | 9.8 | 0.5% | Aug 4, 2025 | Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 as discovered to contain a hardcoded Administrator password. |
| CVE-2025-36594 | CRITICAL | 9.8 | 0.4% | Aug 4, 2025 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.... |
| CVE-2025-36604 | CRITICAL | 9.8 | 61.9% | Aug 4, 2025 | Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('... |
| CVE-2025-6205 | CRITICAL | 9.1 | 69.2% | Aug 4, 2025 | A missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an atta... |
| CVE-2025-8504 | CRITICAL | 9.8 | 0.4% | Aug 3, 2025 | A vulnerability, which was classified as critical, was found in code-projects Kitchen Treasure 1.0. This affects an unkn... |
| CVE-2025-8503 | CRITICAL | 9.8 | 0.5% | Aug 3, 2025 | A vulnerability, which was classified as critical, has been found in code-projects Online Medicine Guide 1.0. Affected b... |
| CVE-2025-8502 | CRITICAL | 9.8 | 0.5% | Aug 3, 2025 | A vulnerability classified as critical was found in code-projects Online Medicine Guide 1.0. Affected by this vulnerabil... |
| CVE-2025-8499 | CRITICAL | 9.8 | 0.6% | Aug 3, 2025 | A vulnerability was found in code-projects Online Medicine Guide 1.0. It has been declared as critical. This vulnerabili... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now