2025 CVE Vulnerabilities
45,322 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-8238 | CRITICAL | 9.8 | 0.5% | Jul 27, 2025 | A vulnerability classified as critical has been found in code-projects Exam Form Submission 1.0. Affected is an unknown ... |
| CVE-2025-8237 | CRITICAL | 9.8 | 0.5% | Jul 27, 2025 | A vulnerability was found in code-projects Exam Form Submission 1.0. It has been rated as critical. This issue affects s... |
| CVE-2025-8236 | CRITICAL | 9.8 | 0.5% | Jul 27, 2025 | A vulnerability was found in code-projects Online Ordering System 1.0. It has been declared as critical. This vulnerabil... |
| CVE-2025-8235 | CRITICAL | 9.8 | 0.5% | Jul 27, 2025 | A vulnerability was found in code-projects Online Ordering System 1.0. It has been classified as critical. This affects ... |
| CVE-2025-8234 | CRITICAL | 9.8 | 0.5% | Jul 27, 2025 | A vulnerability was found in code-projects Online Ordering System 1.0 and classified as critical. Affected by this issue... |
| CVE-2025-8233 | CRITICAL | 9.8 | 0.5% | Jul 27, 2025 | A vulnerability has been found in code-projects Online Ordering System 1.0 and classified as critical. Affected by this ... |
| CVE-2025-8232 | CRITICAL | 9.8 | 0.5% | Jul 27, 2025 | A vulnerability, which was classified as critical, was found in code-projects Online Ordering System 1.0. Affected is an... |
| CVE-2025-8227 | CRITICAL | 9.8 | 0.6% | Jul 27, 2025 | A vulnerability was found in yanyutao0402 ChanCMS up to 3.1.2. It has been declared as critical. Affected by this vulner... |
| CVE-2025-8226 | CRITICAL | 9.8 | 0.6% | Jul 27, 2025 | A vulnerability was found in yanyutao0402 ChanCMS up to 3.1.2. It has been classified as problematic. Affected is an unk... |
| CVE-2025-5120 | CRITICAL | 10 | 18.7% | Jul 27, 2025 | A sandbox escape vulnerability was identified in huggingface/smolagents version 1.14.0, allowing attackers to bypass the... |
| CVE-2025-8220 | CRITICAL | 9.4 | 0.6% | Jul 27, 2025 | A vulnerability has been found in Engeman Web up to 12.0.0.2. The affected element is an unknown function of the file /L... |
| CVE-2025-8219 | CRITICAL | 9.8 | 0.4% | Jul 27, 2025 | A vulnerability was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.4.7. It has been rated as c... |
| CVE-2025-8203 | CRITICAL | 9.8 | 0.4% | Jul 26, 2025 | A vulnerability classified as critical has been found in Jingmen Zeyou Large File Upload Control up to 6.3. Affected is ... |
| CVE-2025-8185 | CRITICAL | 9.8 | 0.5% | Jul 26, 2025 | A vulnerability was found in 1000 Projects ABC Courier Management System 1.0. It has been classified as critical. Affect... |
| CVE-2025-8184 | CRITICAL | 9.8 | 8.7% | Jul 26, 2025 | A vulnerability was found in D-Link DIR-513 up to 1.10 and classified as critical. This issue affects the function formS... |
| CVE-2025-8179 | CRITICAL | 9.8 | 0.5% | Jul 26, 2025 | A vulnerability classified as critical was found in PHPGurukul Local Services Search Engine Management System 2.1. Affec... |
| CVE-2025-6895 | CRITICAL | 9.8 | 0.7% | Jul 26, 2025 | The Melapress Login Security plugin for WordPress is vulnerable to Authentication Bypass due to missing authorization wi... |
| CVE-2025-54416 | CRITICAL | 9.1 | 0.5% | Jul 26, 2025 | tj-actions/branch-names is a Github actions repository that contains workflows to retrieve branch or tag names with supp... |
| CVE-2025-54415 | CRITICAL | 9.1 | 0.6% | Jul 26, 2025 | dag-factory is a library for Apache Airflow® to construct DAGs declaratively via configuration files. In versions 0.23.0... |
| CVE-2025-54385 | CRITICAL | 9.8 | 0.6% | Jul 26, 2025 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions bet... |
| CVE-2025-8173 | CRITICAL | 9.8 | 0.5% | Jul 25, 2025 | A vulnerability has been found in 1000 Projects ABC Courier Management System 1.0 and classified as critical. Affected b... |
| CVE-2025-8169 | CRITICAL | 9.8 | 1.5% | Jul 25, 2025 | A vulnerability classified as critical has been found in D-Link DIR-513 1.10. This affects the function formSetWanPPTPca... |
| CVE-2025-8168 | CRITICAL | 9.8 | 1.5% | Jul 25, 2025 | A vulnerability was found in D-Link DIR-513 1.10. It has been rated as critical. Affected by this issue is the function ... |
| CVE-2025-30135 | CRITICAL | 9.4 | 0.5% | Jul 25, 2025 | An issue was discovered on IROAD Dashcam FX2 devices. Dumping Files Over HTTP and RTSP Without Authentication can occur.... |
| CVE-2025-8166 | CRITICAL | 9.8 | 0.5% | Jul 25, 2025 | A vulnerability was found in code-projects Church Donation System 1.0. It has been classified as critical. Affected is a... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now