2025 CVE Vulnerabilities
45,324 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-65730 | HIGH | 8.8 | 0.5% | Dec 5, 2025 | Authentication Bypass via Hardcoded Credentials GoAway up to v0.62.18, fixed in 0.62.19, uses a hardcoded secret for sig... |
| CVE-2025-64053 | HIGH | 7.5 | 2.9% | Dec 5, 2025 | A Buffer overflow vulnerability on Fanvil x210 2.12.20 devices allows attackers to cause a denial of service or potentia... |
| CVE-2025-14092 | HIGH | 7.2 | 14.7% | Dec 5, 2025 | A security vulnerability has been detected in Edimax BR-6478AC V3 1.0.15. This issue affects the function sub_416898 of ... |
| CVE-2025-14091 | HIGH | 7.3 | 0.3% | Dec 5, 2025 | A weakness has been identified in TrippWasTaken PHP-Guitar-Shop up to 6ce0868889617c1975982aae6df8e49555d0d555. This vul... |
| CVE-2025-14090 | HIGH | 7.2 | 0.3% | Dec 5, 2025 | A security flaw has been discovered in AMTT Hotel Broadband Operation System 1.0. This affects an unknown part of the fi... |
| CVE-2025-64057 | HIGH | 8.3 | 0.8% | Dec 5, 2025 | Directory traversal vulnerability in Fanvil x210 V2 2.12.20 allows unauthenticated attackers on the local network to sto... |
| CVE-2025-58098 | HIGH | 8.3 | 1.4% | Dec 5, 2025 | Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabled and mod_cgid (but not mod_cgi) passes the ... |
| CVE-2025-14086 | HIGH | 8.8 | 0.3% | Dec 5, 2025 | A vulnerability was found in youlaitech youlai-mall 1.0.0/2.0.0. Affected is an unknown function of the file /app-api/v1... |
| CVE-2025-14085 | HIGH | 8.8 | 0.3% | Dec 5, 2025 | A vulnerability has been found in youlaitech youlai-mall 1.0.0/2.0.0. This impacts an unknown function of the file /app-... |
| CVE-2025-13654 | HIGH | 7.5 | 0.9% | Dec 5, 2025 | A stack buffer overflow vulnerability exists in the buffer_get function of duc, a disk management tool, where a conditio... |
| CVE-2025-59775 | HIGH | 7.5 | 0.8% | Dec 5, 2025 | Server-Side Request Forgery (SSRF) vulnerability in Apache HTTP Server on Windows with AllowEncodedSlashes On and M... |
| CVE-2025-55753 | HIGH | 7.5 | 0.4% | Dec 5, 2025 | An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures (~30 days in defaul... |
| CVE-2025-13614 | HIGH | 8.1 | 0.3% | Dec 5, 2025 | The Cool Tag Cloud plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cool_tag_cloud' s... |
| CVE-2025-12879 | HIGH | 8.8 | 0.2% | Dec 5, 2025 | The User Generator and Importer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and i... |
| CVE-2025-12851 | HIGH | 8.1 | 0.8% | Dec 5, 2025 | The My auctions allegro plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including,... |
| CVE-2025-12850 | HIGH | 7.5 | 0.3% | Dec 5, 2025 | The My auctions allegro plugin for WordPress is vulnerable to SQL Injection via the ‘auction_id’ parameter in all versio... |
| CVE-2025-12189 | HIGH | 8.8 | 0.3% | Dec 5, 2025 | The Bread & Butter: Gate content + Capture leads + Collect first-party data + Nurture with Ai agents plugin for WordPres... |
| CVE-2025-12181 | HIGH | 8.8 | 0.5% | Dec 5, 2025 | The ContentStudio plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in th... |
| CVE-2025-12154 | HIGH | 8.8 | 0.4% | Dec 5, 2025 | The Auto Thumbnailer plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in... |
| CVE-2025-12153 | HIGH | 8.8 | 0.5% | Dec 5, 2025 | The Featured Image via URL plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validat... |
| CVE-2025-13066 | HIGH | 8.8 | 0.6% | Dec 5, 2025 | The Demo Importer Plus plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including,... |
| CVE-2025-66564 | HIGH | 7.5 | 0.4% | Dec 4, 2025 | Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Prior to 2.0.3, Function api.ParseJSONRequest... |
| CVE-2025-66559 | HIGH | 8 | 0.3% | Dec 4, 2025 | Taiko Alethia is an Ethereum-equivalent, permissionless, based rollup designed to scale Ethereum without compromising it... |
| CVE-2025-14051 | HIGH | 8.8 | 0.4% | Dec 4, 2025 | A flaw has been found in youlaitech youlai-mall 1.0.0/2.0.0. Affected is the function getById/updateAddress/deleteAddres... |
| CVE-2025-13373 | HIGH | 8.7 | 0.4% | Dec 4, 2025 | Advantech iView versions 5.7.05.7057 and prior do not properly sanitize SNMP v1 trap (Port 162) requests, which could al... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now