2025 CVE Vulnerabilities
45,324 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-26488 | HIGH | 7.5 | 0.3% | Dec 8, 2025 | Improper Input Validation vulnerability in Infinera MTC-9 allows remote unauthenticated users to crash the service and c... |
| CVE-2025-26487 | HIGH | 8.6 | 0.3% | Dec 8, 2025 | Server-Side Request Forgery (SSRF) vulnerability in Infinera MTC-9 version allows remote unauthenticated users to gain ... |
| CVE-2025-14255 | HIGH | 7.1 | 0.3% | Dec 8, 2025 | Vitals ESP developed by Galaxy Software Services has a SQL Injection vulnerability, allowing authenticated remote attack... |
| CVE-2025-14222 | HIGH | 8.8 | 0.3% | Dec 8, 2025 | A flaw has been found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the fi... |
| CVE-2025-14219 | HIGH | 7.2 | 0.3% | Dec 8, 2025 | A weakness has been identified in Campcodes Retro Basketball Shoes Online Store 1.0. The impacted element is an unknown ... |
| CVE-2025-14214 | HIGH | 8.8 | 0.3% | Dec 8, 2025 | A vulnerability has been found in itsourcecode Student Information System 1.0. This affects an unknown part of the file ... |
| CVE-2025-40326 | HIGH | 7.5 | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Define actions for the new time_deleg FATTR4 ... |
| CVE-2025-40324 | HIGH | 7.5 | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix crash in nfsd4_read_release() When traci... |
| CVE-2025-40323 | HIGH | 7.8 | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: fbcon: Set fb_display[i]->mode to NULL when the mod... |
| CVE-2025-40322 | HIGH | 7.1 | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: fbdev: bitblit: bound-check glyph index in bit_putc... |
| CVE-2025-40319 | HIGH | 7.8 | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: bpf: Sync pending IRQ work before freeing ring buff... |
| CVE-2025-40318 | HIGH | 8.8 | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix race in hci_cmd_sync_deque... |
| CVE-2025-40317 | HIGH | 7.8 | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: regmap: slimbus: fix bus_context pointer in regmap ... |
| CVE-2025-40309 | HIGH | 8 | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix UAF on sco_conn_free BUG: KASA... |
| CVE-2025-40307 | HIGH | 7.8 | 0.1% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: exfat: validate cluster allocation bits of the allo... |
| CVE-2025-40306 | HIGH | 7.8 | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: orangefs: fix xattr related buffer overflow... Wil... |
| CVE-2025-40304 | HIGH | 7.8 | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: fbdev: Add bounds checking in bit_putcs to fix vmal... |
| CVE-2025-40303 | HIGH | 7.8 | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: btrfs: ensure no dirty metadata is written back for... |
| CVE-2025-40302 | HIGH | 7.8 | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: media: videobuf2: forbid remove_bufs when legacy fi... |
| CVE-2025-40301 | HIGH | 7.6 | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: validate skb length for unkno... |
| CVE-2025-40297 | HIGH | 7.8 | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: fix use-after-free due to MST port sta... |
| CVE-2025-40292 | HIGH | 8.4 | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix received length check in big packet... |
| CVE-2025-40291 | HIGH | 7.8 | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: io_uring: fix regbuf vector size truncation There ... |
| CVE-2025-40290 | HIGH | 7.8 | 0.2% | Dec 8, 2025 | In the Linux kernel, the following vulnerability has been resolved: xsk: avoid data corruption on cq descriptor number ... |
| CVE-2025-14207 | HIGH | 7.3 | 0.3% | Dec 8, 2025 | A vulnerability was identified in tushar-2223 Hotel-Management-System up to bb1f3b3666124b888f1e4bcf51b6fba9fbb01d15. Th... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now