2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-63396 | LOW | 3.3 | 0.1% | Nov 12, 2025 | An issue was discovered in PyTorch v2.5 and v2.7.1. Omission of profiler.stop() can cause torch.profiler.profile (Python... |
| CVE-2025-57812 | LOW | 3.7 | 0.5% | Nov 12, 2025 | CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters of the for... |
| CVE-2025-20379 | LOW | 3.5 | 0.3% | Nov 12, 2025 | In Splunk Enterprise versions below 10.0.1, 9.4.5, 9.3.7, and 9.2.9 and Splunk Cloud Platform versions below 9.3.2411.11... |
| CVE-2025-41116 | LOW | 2.1 | 0.3% | Nov 11, 2025 | When using the Grafana Databricks Datasource Plugin, if Oauth passthrough is enabled on the datasource, and multiple use... |
| CVE-2025-3717 | LOW | 2.1 | 0.3% | Nov 11, 2025 | When using the Grafana Snowflake Datasource Plugin, if Oauth passthrough is enabled on the datasource, and multiple user... |
| CVE-2025-32088 | LOW | 3.3 | 0.1% | Nov 11, 2025 | Improper conditions check for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications ... |
| CVE-2025-32037 | LOW | 2 | 0.1% | Nov 11, 2025 | Improper access control for some Intel(R) PresentMon before version 2.3.1 within Ring 3: User Applications may allow a d... |
| CVE-2025-31948 | LOW | 3.3 | 0.1% | Nov 11, 2025 | Improper input validation for some Intel(R) oneAPI Math Kernel Library before version 2025.2 within Ring 3: User Applica... |
| CVE-2025-30509 | LOW | 3.3 | 0.1% | Nov 11, 2025 | Improper input validation for some Intel QuickAssist Technology software before version 2.6.0 within Ring 3: User Applic... |
| CVE-2025-25216 | LOW | 3.3 | 0.1% | Nov 11, 2025 | Improper input validation in some firmware for some Intel(R) Graphics Drivers and Intel LTS kernels within Ring 1: Devic... |
| CVE-2025-24862 | LOW | 2 | 0.2% | Nov 11, 2025 | Unrestricted upload of file with dangerous type for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within... |
| CVE-2025-24307 | LOW | 2 | 0.2% | Nov 11, 2025 | Improper privilege management for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Appl... |
| CVE-2025-20622 | LOW | 3.8 | 0.1% | Nov 11, 2025 | Sensitive information uncleared in resource before release for reuse for some Intel(R) NPU Drivers for Windows before ve... |
| CVE-2025-64773 | LOW | 3.7 | 0.2% | Nov 11, 2025 | In JetBrains YouTrack before 2025.3.104432 a race condition allowed bypass of helpdesk Agent limit |
| CVE-2025-13015 | LOW | 3.4 | 0.2% | Nov 11, 2025 | Spoofing issue in Firefox. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, and Firefox ESR 115.30. |
| CVE-2025-8998 | LOW | 3.1 | 0.2% | Nov 11, 2025 | It was possible to upload files with a specific name to a temporary directory, which may result in process crashes and i... |
| CVE-2025-42883 | LOW | 2.7 | 0.3% | Nov 11, 2025 | Migration Workbench (DX Workbench) in SAP NetWeaver Application Server for ABAP fails to trigger a malware scan when an ... |
| CVE-2025-64682 | LOW | 3.7 | 0.1% | Nov 10, 2025 | In JetBrains Hub before 2025.3.104432 a race condition allowed bypass of the Agent-user limit |
| CVE-2025-64681 | LOW | 3.7 | 0.2% | Nov 10, 2025 | In JetBrains Hub before 2025.3.104992 a race condition allowed bypass of the user limit via invitations |
| CVE-2025-12919 | LOW | 3.7 | 0.5% | Nov 9, 2025 | A vulnerability was detected in EverShop up to 2.0.1. Affected is an unknown function of the file /src/modules/oms/graph... |
| CVE-2025-64481 | LOW | 2.7 | 0.4% | Nov 7, 2025 | Datasette is an open source multi-tool for exploring and publishing data. In versions 0.65.1 and below and 1.0a0 through... |
| CVE-2025-12854 | LOW | 3.7 | 0.5% | Nov 7, 2025 | A vulnerability was identified in newbee-mall-plus up to 2.4.1. This vulnerability affects the function executeSeckill o... |
| CVE-2025-11219 | LOW | 3.1 | 0.3% | Nov 6, 2025 | Use after free in V8 in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to potentially perform out of bou... |
| CVE-2025-64326 | LOW | 3.5 | 0.2% | Nov 6, 2025 | Weblate is a web based localization tool. In versions 5.14 and below, Weblate leaks the IP address of the project membe... |
| CVE-2025-21077 | LOW | 3.3 | 0.1% | Nov 5, 2025 | Improper input validation in Samsung Email prior to version 6.2.06.0 allows local attackers to launch arbitrary activity... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now