2025 CVE Vulnerabilities
45,324 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-14134 | HIGH | 8.8 | 0.7% | Dec 6, 2025 | A vulnerability was determined in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.0... |
| CVE-2025-14133 | HIGH | 8.8 | 0.9% | Dec 6, 2025 | A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002... |
| CVE-2025-14126 | HIGH | 8.8 | 0.4% | Dec 6, 2025 | A vulnerability has been found in TOZED ZLT M30S and ZLT M30S PRO 1.47/3.09.06. Affected is an unknown function of the c... |
| CVE-2025-13065 | HIGH | 8.8 | 7.1% | Dec 6, 2025 | The Starter Templates plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, ... |
| CVE-2025-12966 | HIGH | 8.8 | 0.4% | Dec 6, 2025 | The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type valid... |
| CVE-2025-12499 | HIGH | 7.2 | 0.3% | Dec 6, 2025 | The Rich Shortcodes for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the content... |
| CVE-2025-13377 | HIGH | 8.1 | 0.5% | Dec 6, 2025 | The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to arbit... |
| CVE-2025-13292 | HIGH | 7.6 | 0.2% | Dec 6, 2025 | A vulnerability in Apigee-X allowed an attacker to gain unauthorized read and write access to Apigee Analytics (AX) data... |
| CVE-2025-12510 | HIGH | 7.2 | 0.4% | Dec 6, 2025 | The Widgets for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, ... |
| CVE-2025-34291 | HIGH | 8.8 | 78.9% | Dec 5, 2025 | Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote cod... |
| CVE-2025-14111 | HIGH | 8.1 | 0.5% | Dec 5, 2025 | A security vulnerability has been detected in Rarlab RAR App up to 7.11 Build 127 on Android. This affects an unknown pa... |
| CVE-2025-14108 | HIGH | 8.8 | 10.5% | Dec 5, 2025 | A weakness has been identified in ZSPACE Q2C NAS up to 1.1.0210050. Affected by this issue is the function zfilev2_api.O... |
| CVE-2025-14107 | HIGH | 8.8 | 12.2% | Dec 5, 2025 | A security flaw has been discovered in ZSPACE Q2C NAS up to 1.1.0210050. Affected by this vulnerability is the function ... |
| CVE-2025-14106 | HIGH | 8.8 | 12.1% | Dec 5, 2025 | A vulnerability was identified in ZSPACE Q2C NAS up to 1.1.0210050. Affected is the function zfilev2_api.CloseSafe of th... |
| CVE-2025-13426 | HIGH | 8.7 | 0.4% | Dec 5, 2025 | A vulnerability exists in Google Apigee's JavaCallout policy https://docs.apigee.com/api-platform/reference/policies/ja... |
| CVE-2025-66624 | HIGH | 7.5 | 0.4% | Dec 5, 2025 | BACnet Protocol Stack library provides a BACnet application layer, network layer and media access (MAC) layer communicat... |
| CVE-2025-66623 | HIGH | 7.4 | 0.2% | Dec 5, 2025 | Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. F... |
| CVE-2025-46603 | HIGH | 7.5 | 0.2% | Dec 5, 2025 | Dell CloudBoost Virtual Appliance, versions 19.13.0.0 and prior, contains an Improper Restriction of Excessive Authentic... |
| CVE-2025-66566 | HIGH | 8.2 | 0.6% | Dec 5, 2025 | yawkat LZ4 Java provides LZ4 compression for Java. Insufficient clearing of the output buffer in Java-based decompressor... |
| CVE-2025-66471 | HIGH | 7.5 | 0.7% | Dec 5, 2025 | urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.0 and prior to 2.6.0, the Streaming API... |
| CVE-2025-65879 | HIGH | 8.1 | 0.8% | Dec 5, 2025 | Warehouse Management System 1.2 contains an authenticated arbitrary file deletion vulnerability. The /goods/deleteGoods ... |
| CVE-2025-65878 | HIGH | 7.5 | 0.7% | Dec 5, 2025 | The warehouse management system version 1.2 contains an arbitrary file read vulnerability. The endpoint `/file/showImage... |
| CVE-2025-65036 | HIGH | 8.3 | 0.4% | Dec 5, 2025 | XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Prior to 1.2... |
| CVE-2025-66418 | HIGH | 7.5 | 0.7% | Dec 5, 2025 | urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of li... |
| CVE-2025-65897 | HIGH | 8.8 | 0.8% | Dec 5, 2025 | zdh_web is a data collection, processing, monitoring, scheduling, and management platform. In zdh_web thru 5.6.17, insuf... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now