2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-64757 | LOW | 3.5 | 0.4% | Nov 19, 2025 | Astro is a web framework. Prior to version 5.14.3, a vulnerability has been identified in the Astro framework's developm... |
| CVE-2025-65014 | LOW | 3.7 | 0.3% | Nov 18, 2025 | LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Prior to version 25.11.0, a weak password ... |
| CVE-2025-12119 | LOW | 3.3 | 0.2% | Nov 18, 2025 | A mongoc_bulk_operation_t may read invalid memory if large options are passed. |
| CVE-2025-13083 | LOW | 3.7 | 0.3% | Nov 18, 2025 | Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Drupal core allows Exploiting Incorrec... |
| CVE-2025-12761 | LOW | 3.5 | 0.2% | Nov 18, 2025 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Simple mult... |
| CVE-2025-55074 | LOW | 3.5 | 0.2% | Nov 18, 2025 | Mattermost versions 10.11.x <= 10.11.3, 10.5.x <= 10.5.11 fail to enforce access permissions on the Agents plugin which ... |
| CVE-2025-64734 | LOW | 2.4 | 0.2% | Nov 18, 2025 | Missing Release of Resource after Effective Lifetime (CWE-772) in the T21 Reader allows an attacker with physical access... |
| CVE-2025-12792 | LOW | 3.2 | 0.1% | Nov 18, 2025 | The Mac App Store distribution of the Canva for Mac desktop app before 1.117.1 was built without Hardened Runtime. A loc... |
| CVE-2025-63292 | LOW | 3.5 | 0.1% | Nov 17, 2025 | Freebox v5 HD (firmware = 1.7.20), Freebox v5 Crystal (firmware = 1.7.20), Freebox v6 Révolution r1–r3 (firmware = 4.7.x... |
| CVE-2025-65083 | LOW | 3.2 | 0.1% | Nov 17, 2025 | GoSign Desktop through 2.4.1 disables TLS certificate validation when configured to use a proxy server. This can be prob... |
| CVE-2025-60022 | LOW | 2.3 | 0.1% | Nov 17, 2025 | Improper certificate validation vulnerability exists in 'デジラアプリ' App for iOS prior to ver.80.10.00. If this vulnerabilit... |
| CVE-2025-13232 | LOW | 3.5 | 0.2% | Nov 16, 2025 | A flaw has been found in projectsend up to r1720. Impacted is an unknown function of the component File Editor/Custom Do... |
| CVE-2025-6945 | LOW | 3.5 | 0.3% | Nov 15, 2025 | GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 18.3.6, 18.4 before 18.4.4, and 18.5... |
| CVE-2025-11990 | LOW | 3.5 | 0.3% | Nov 15, 2025 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.4, and 18.5 before 18.5.2 that ... |
| CVE-2025-54560 | LOW | 3.8 | 0.2% | Nov 14, 2025 | A Server-side Request Forgery vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0... |
| CVE-2025-54559 | LOW | 3.7 | 0.3% | Nov 14, 2025 | An issue was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows remote ... |
| CVE-2025-54342 | LOW | 3.3 | 0.1% | Nov 14, 2025 | A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. There is Exp... |
| CVE-2025-4617 | LOW | 1.1 | 0.1% | Nov 14, 2025 | An insufficient policy enforcement vulnerability in Palo Alto Networks Prisma® Browser on Windows allows a locally authe... |
| CVE-2025-4616 | LOW | 1.1 | 0.1% | Nov 14, 2025 | An insufficient validation of an untrusted input vulnerability in Palo Alto Networks Prisma® Browser allows a locally au... |
| CVE-2025-64754 | LOW | 2.7 | 0.4% | Nov 13, 2025 | Jitsi Meet is an open source video conferencing application. A vulnerability present in versions prior to 2.0.10532 allo... |
| CVE-2025-64744 | LOW | 3.5 | 0.2% | Nov 13, 2025 | OpenObserve is a cloud-native observability platform. In versions up to and including 0.16.1, when creating or renaming ... |
| CVE-2025-12817 | LOW | 3.1 | 0.2% | Nov 13, 2025 | Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against ... |
| CVE-2025-64503 | LOW | 3.3 | 0.2% | Nov 12, 2025 | cups-filters contains backends, filters, and other software required to get the cups printing service working on operati... |
| CVE-2025-64345 | LOW | 1.8 | 0.1% | Nov 12, 2025 | Wasmtime is a runtime for WebAssembly. Prior to version 38.0.4, 37.0.3, 36.0.3, and 24.0.5, Wasmtime's Rust embedder API... |
| CVE-2025-64170 | LOW | 3.8 | 0.1% | Nov 12, 2025 | sudo-rs is a memory safe implementation of sudo and su written in Rust. Starting in version 0.2.7 and prior to version 0... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now