2025 CVE Vulnerabilities
45,142 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-48565 | HIGH | 7.8 | 0.1% | Dec 8, 2025 | In multiple locations, there is a possible way to bypass the cross profile intent filter due to a logic error in the cod... |
| CVE-2025-48564 | HIGH | 7 | 0.1% | Dec 8, 2025 | In multiple locations, there is a possible intent filter bypass due to a race condition. This could lead to local escala... |
| CVE-2025-48555 | HIGH | 7.8 | 0.1% | Dec 8, 2025 | In multiple functions of NotificationStation.java, there is a possible cross-profile information disclosure due to a con... |
| CVE-2025-48536 | HIGH | 7.8 | 0.1% | Dec 8, 2025 | In grantAllowlistedPackagePermissions of SettingsSliceProvider.java, there is a possible way for a third party app to mo... |
| CVE-2025-48525 | HIGH | 7.8 | 0.1% | Dec 8, 2025 | In disassociate of DisassociationProcessor.java, there is a possible way for an app to continue reading notifications wh... |
| CVE-2025-32329 | HIGH | 7.8 | 0.1% | Dec 8, 2025 | In multiple functions of Session.java, there is a possible way to view images belonging to a different user of the devic... |
| CVE-2025-32328 | HIGH | 7.8 | 0.1% | Dec 8, 2025 | In multiple functions of Session.java, there is a possible way to view images belonging to a different user of the devic... |
| CVE-2025-22420 | HIGH | 7.8 | 0.1% | Dec 8, 2025 | In multiple locations, there is a possible way to leak audio files across user profiles due to a confused deputy. This c... |
| CVE-2025-42620 | HIGH | 8.3 | 0.2% | Dec 8, 2025 | In affected versions, vulnerability-lookup handled user-controlled content in comments and bundles in an unsafe way, wh... |
| CVE-2025-42616 | HIGH | 7 | 0.1% | Dec 8, 2025 | Some endpoints in vulnerability-lookup that modified application state (e.g. changing database entries, user data, con... |
| CVE-2025-42615 | HIGH | 8.1 | 0.3% | Dec 8, 2025 | In affected versions, vulnerability-lookup did not track or limit failed One-Time Password (OTP) attempts during Two-Fa... |
| CVE-2025-14230 | HIGH | 8.8 | 0.3% | Dec 8, 2025 | A vulnerability was detected in code-projects Daily Time Recording System 4.5.0. The impacted element is an unknown func... |
| CVE-2025-14229 | HIGH | 8 | 0.3% | Dec 8, 2025 | A security vulnerability has been detected in SourceCodester Inventory Management System 1.0. The affected element is an... |
| CVE-2025-66461 | HIGH | 8.4 | 0.1% | Dec 8, 2025 | FULLBACK Manager Pro provided by GS Yuasa International Ltd. registers two Windows services with unquoted file paths. A... |
| CVE-2025-14225 | HIGH | 8.8 | 7.4% | Dec 8, 2025 | A vulnerability was determined in D-Link DCS-930L 1.15.04. This affects an unknown part of the file /setSystemAdmin of t... |
| CVE-2025-26488 | HIGH | 7.5 | 0.3% | Dec 8, 2025 | Improper Input Validation vulnerability in Infinera MTC-9 allows remote unauthenticated users to crash the service and c... |
| CVE-2025-26487 | HIGH | 8.6 | 0.3% | Dec 8, 2025 | Server-Side Request Forgery (SSRF) vulnerability in Infinera MTC-9 version allows remote unauthenticated users to gain ... |
| CVE-2025-14255 | HIGH | 7.1 | 0.3% | Dec 8, 2025 | Vitals ESP developed by Galaxy Software Services has a SQL Injection vulnerability, allowing authenticated remote attack... |
| CVE-2025-14254 | HIGH | 7.1 | 0.3% | Dec 8, 2025 | Vitals ESP developed by Galaxy Software Services has a SQL Injection vulnerability, allowing authenticated remote attack... |
| CVE-2025-14222 | HIGH | 8.8 | 0.3% | Dec 8, 2025 | A flaw has been found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the fi... |
| CVE-2025-14219 | HIGH | 7.2 | 0.3% | Dec 8, 2025 | A weakness has been identified in Campcodes Retro Basketball Shoes Online Store 1.0. The impacted element is an unknown ... |
| CVE-2025-14214 | HIGH | 8.8 | 0.3% | Dec 8, 2025 | A vulnerability has been found in itsourcecode Student Information System 1.0. This affects an unknown part of the file ... |
| CVE-2025-40326 | HIGH | 7.5 | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Define actions for the new time_deleg FATTR4 ... |
| CVE-2025-40324 | HIGH | 7.5 | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix crash in nfsd4_read_release() When traci... |
| CVE-2025-40323 | HIGH | 7.8 | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: fbcon: Set fb_display[i]->mode to NULL when the mod... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now