2025 CVE Vulnerabilities
45,527 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-54426 | CRITICAL | 9.9 | 0.3% | Jul 28, 2025 | Polkadot Frontier is an Ethereum and EVM compatibility layer for Polkadot and Substrate. In versions prior to commit 36f... |
| CVE-2025-54419 | CRITICAL | 10 | 0.4% | Jul 28, 2025 | A SAML library not dependent on any frameworks that runs in Node. In version 5.0.1, Node-SAML loads the assertion from t... |
| CVE-2025-54299 | CRITICAL | 9.4 | 0.4% | Jul 28, 2025 | A stored XSS vulnerability in No Boss Testimonials component 1.0.0-3.0.0 and 4.0.0-4.0.2 for Joomla was discovered. |
| CVE-2025-54298 | CRITICAL | 9.4 | 0.4% | Jul 28, 2025 | A stored XSS vulnerability in CommentBox component 1.0.0-1.1.0 for Joomla was discovered. |
| CVE-2025-43023 | CRITICAL | 9.1 | 0.2% | Jul 28, 2025 | A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This... |
| CVE-2025-54531 | CRITICAL | 9.4 | 0.3% | Jul 28, 2025 | In JetBrains TeamCity before 2025.07 path traversal was possible via plugin unpacking on Windows |
| CVE-2025-54530 | CRITICAL | 9.8 | 0.2% | Jul 28, 2025 | In JetBrains TeamCity before 2025.07 privilege escalation was possible due to incorrect directory permissions |
| CVE-2025-54418 | CRITICAL | 9.8 | 1.5% | Jul 28, 2025 | CodeIgniter is a PHP full-stack web framework. A command injection vulnerability present in versions prior to 4.6.2 affe... |
| CVE-2025-53696 | CRITICAL | 9.3 | 0.1% | Jul 28, 2025 | iSTAR Ultra performs a firmware verification on boot, however the verification does not inspect certain portions of the ... |
| CVE-2025-30125 | CRITICAL | 9.8 | 0.4% | Jul 28, 2025 | An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. All dashcams were shipped with the same default crede... |
| CVE-2025-8279 | CRITICAL | 9.8 | 0.4% | Jul 28, 2025 | Insufficient input validation within GitLab Language Server 7.6.0 and later before 7.30.0 allows arbitrary GraphQL query... |
| CVE-2025-53695 | CRITICAL | 9.4 | 0.9% | Jul 28, 2025 | OS Command Injection in iSTAR Ultra products web application allows an authenticated attacker to gain even more privileg... |
| CVE-2025-30133 | CRITICAL | 9.8 | 0.5% | Jul 28, 2025 | An issue was discovered on IROAD Dashcam FX2 devices. Bypass of Device Pairing/Registration can occur. It requires devic... |
| CVE-2025-30124 | CRITICAL | 9.8 | 0.3% | Jul 28, 2025 | An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. When a new SD card is inserted into the dashcam, the ... |
| CVE-2025-27724 | CRITICAL | 9.8 | 0.5% | Jul 28, 2025 | A privilege escalation vulnerability exists in the login.php functionality of meddream MedDream PACS Premium 7.3.3.840. ... |
| CVE-2025-26469 | CRITICAL | 9.8 | 0.5% | Jul 28, 2025 | An incorrect default permissions vulnerability exists in the CServerSettings::SetRegistryValues functionality of MedDrea... |
| CVE-2025-8274 | CRITICAL | 9.8 | 0.4% | Jul 28, 2025 | A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. Affected by this... |
| CVE-2025-8273 | CRITICAL | 9.8 | 0.5% | Jul 28, 2025 | A vulnerability classified as critical has been found in code-projects Exam Form Submission 1.0. Affected is an unknown ... |
| CVE-2025-8272 | CRITICAL | 9.8 | 0.5% | Jul 28, 2025 | A vulnerability was found in code-projects Exam Form Submission 1.0. It has been rated as critical. This issue affects s... |
| CVE-2025-6918 | CRITICAL | 9.8 | 0.3% | Jul 28, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ncvav Virtual PBX ... |
| CVE-2025-8271 | CRITICAL | 9.8 | 0.5% | Jul 28, 2025 | A vulnerability was found in code-projects Exam Form Submission 1.0. It has been declared as critical. This vulnerabilit... |
| CVE-2025-8270 | CRITICAL | 9.8 | 0.5% | Jul 28, 2025 | A vulnerability was found in code-projects Exam Form Submission 1.0. It has been classified as critical. This affects an... |
| CVE-2025-8269 | CRITICAL | 9.8 | 0.6% | Jul 28, 2025 | A vulnerability was found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this issue i... |
| CVE-2025-8261 | CRITICAL | 9.8 | 0.6% | Jul 28, 2025 | A weakness has been identified in Vaelsys VaelsysV4 4.1.0. This vulnerability affects unknown code of the file /grid/vgr... |
| CVE-2025-8259 | CRITICAL | 9.8 | 3.2% | Jul 28, 2025 | A vulnerability was identified in Vaelsys VaelsysV4 up to 5.1.0/5.4.0. Affected by this issue is the function execute_Da... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now