2025 CVE Vulnerabilities
45,279 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-4574 | MEDIUM | 6.5 | 0.4% | May 13, 2025 | In crossbeam-channel rust crate, the internal `Channel` type's `Drop` method has a race condition which could, in some c... |
| CVE-2025-47905 | MEDIUM | 5.4 | 0.3% | May 13, 2025 | Varnish Cache before 7.6.3 and 7.7 before 7.7.1, and Varnish Enterprise before 6.0.13r14, allow client-side desync via H... |
| CVE-2025-26646 | HIGH | 8 | 1.1% | May 13, 2025 | External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized att... |
| CVE-2025-4668 | — | — | — | May 13, 2025 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All r... |
| CVE-2025-43572 | HIGH | 7.8 | 0.2% | May 13, 2025 | Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary... |
| CVE-2025-43571 | HIGH | 7.8 | 0.2% | May 13, 2025 | Substance3D - Stager versions 3.1.1 and earlier are affected by a Use After Free vulnerability that could result in arbi... |
| CVE-2025-43570 | HIGH | 7.8 | 0.2% | May 13, 2025 | Substance3D - Stager versions 3.1.1 and earlier are affected by a Use After Free vulnerability that could result in arbi... |
| CVE-2025-43569 | HIGH | 7.8 | 0.2% | May 13, 2025 | Substance3D - Stager versions 3.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result i... |
| CVE-2025-43568 | HIGH | 7.8 | 0.2% | May 13, 2025 | Substance3D - Stager versions 3.1.1 and earlier are affected by a Use After Free vulnerability that could result in arbi... |
| CVE-2025-43567 | CRITICAL | 9.3 | 0.4% | May 13, 2025 | Adobe Connect versions 12.8 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability that could ... |
| CVE-2025-43566 | MEDIUM | 6.8 | 37.7% | May 13, 2025 | ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Limitation of a Pathname to a Restr... |
| CVE-2025-43565 | HIGH | 8.4 | 9.2% | May 13, 2025 | ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Incorrect Authorization vulnerability that c... |
| CVE-2025-43564 | CRITICAL | 9.1 | 9.3% | May 13, 2025 | ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Access Control vulnerability that c... |
| CVE-2025-43563 | CRITICAL | 9.1 | 9.3% | May 13, 2025 | ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Access Control vulnerability that c... |
| CVE-2025-43562 | CRITICAL | 9.1 | 33.2% | May 13, 2025 | ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Neutralization of Special Elements ... |
| CVE-2025-43561 | CRITICAL | 9.1 | 12.6% | May 13, 2025 | ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Incorrect Authorization vulnerability that c... |
| CVE-2025-43560 | CRITICAL | 9.1 | 11.5% | May 13, 2025 | ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Input Validation vulnerability that... |
| CVE-2025-43559 | CRITICAL | 9.1 | 1.2% | May 13, 2025 | ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Input Validation vulnerability that... |
| CVE-2025-43554 | HIGH | 7.8 | 0.2% | May 13, 2025 | Substance3D - Modeler versions 1.21.0 and earlier are affected by an out-of-bounds write vulnerability that could result... |
| CVE-2025-43553 | HIGH | 7.8 | 0.2% | May 13, 2025 | Substance3D - Modeler versions 1.21.0 and earlier are affected by an Uncontrolled Search Path Element vulnerability that... |
| CVE-2025-43551 | MEDIUM | 5.5 | 0.2% | May 13, 2025 | Substance3D - Stager versions 3.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to d... |
| CVE-2025-43549 | HIGH | 7.8 | 0.2% | May 13, 2025 | Substance3D - Stager versions 3.1.1 and earlier are affected by a Use After Free vulnerability that could result in arbi... |
| CVE-2025-43548 | HIGH | 7.8 | 0.2% | May 13, 2025 | Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary... |
| CVE-2025-30316 | MEDIUM | 5.4 | 0.2% | May 13, 2025 | Adobe Connect versions 12.8 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be ... |
| CVE-2025-30315 | MEDIUM | 6.1 | 0.2% | May 13, 2025 | Adobe Connect versions 12.8 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be ... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now