2025 CVE Vulnerabilities

45,522 CVEs published in 2025.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2025-15657MEDIUM5.3Unauthenticated Insecure Direct Object References (IDOR) in School Management <= 93.1.0 versions.
CVE-2025-69137MEDIUM6.5Subscriber Broken Access Control in Genemy <= 1.6.6 versions.
CVE-2025-62340MEDIUM5.3HCL iControl was affected by Inadequate Session Timeout vulnerability. The vulnerability involves a security risk where ...
CVE-2025-48571MEDIUM4.3In multiple functions of btm_sec.cc, there is a possible way for an attacker to intercept SMS messages due to a logic er...
CVE-2025-15642MEDIUM6.8Netskope is notified about a potential gap in its Netskoped Client for Windows systems where a malicious insider with ad...
CVE-2025-15641MEDIUM6.8Netskope was notified about a potential gap in its Netskope Client for Windows systems where a malicious insider with ad...
CVE-2025-9912MEDIUM6.3Nokia SR Linux is vulnerable to a local privilege escalation vulnerability. Successful exploitation of this vulnerabilit...
CVE-2025-10262MEDIUM6.3Nokia SR Linux is vulnerable to local privilege escalation vulnerability due to unsanitized format validation. Successfu...
CVE-2025-69332MEDIUM6.5Subscriber Broken Access Control in Bookify <= 1.1.1 versions.
CVE-2025-68049MEDIUM6.3Subscriber Broken Access Control in bunny.net <= 2.3.6 versions.
CVE-2025-60175MEDIUM4.4Administrator Server Side Request Forgery (SSRF) in PopAd <= 1.0.4 versions.
CVE-2025-70102MEDIUM6.3A NULL pointer dereference occurs in Roy Marples NetworkConfiguration/dhcpcd 10.3.0 while parsing configuration options....
CVE-2025-55663MEDIUM5.5A segmentation violation in the Track_SetStreamDescriptor function (isomedia/track.c) of GPAC MP4Box v2.4 allows attacke...
CVE-2025-55661MEDIUM5.5A heap buffer overflow in the Opus audio stream parser component of GPAC MP4Box v2.4 allows attackers to cause a Denial ...
CVE-2025-55660MEDIUM5.5A stack overflow in the gf_opus_read_length function (media_tools/av_parsers.c) of GPAC MP4Box v2.4 allows attackers to ...
CVE-2025-55652MEDIUM5.5A heap buffer overflow in the gf_isom_vp_config_new function (isomedia/avc_ext.c) of GPAC MP4Box v2.4 allows attackers t...
CVE-2025-55650MEDIUM5.5A heap use-after-free in the gf_node_get_tag function (scenegraph/base_scenegraph.c) of GPAC MP4Box v2.4 allows attacker...
CVE-2025-55649MEDIUM5.5A NULL pointer dereference in the gf_media_map_esd function (media_tools/isom_tools.c) of GPAC MP4Box v2.4 allows attack...
CVE-2025-55648MEDIUM5.5A heap buffer overflow in the gf_opus_parse_packet_header function (media_tools/av_parsers.c) of GPAC MP4Box v2.4 allows...
CVE-2025-55647MEDIUM5.5An Out-of-Memory in the mp4_mux_cenc_insert_pssh function (filters/mux_isom.c) of GPAC MP4Box v2.4 allows attackers to c...
CVE-2025-55645MEDIUM5.5A heap buffer overflow in the gf_cenc_set_pssh function (isomedia/drm_sample.c) of GPAC MP4Box v2.4 allows attackers to ...
CVE-2025-55644MEDIUM5.5A heap use-after-free in the gf_node_get_tag function (scenegraph/base_scenegraph.c) of GPAC MP4Box v2.4 allows attacker...
CVE-2025-55643MEDIUM5.5A NULL pointer dereference in the TrackWriter handling component (filters/mux_isom.c) of GPAC MP4Box v2.4 allows attacke...
CVE-2025-55642MEDIUM6.5GPAC MP4Box v2.4 was discovered to contain a floating point exception in the avidmx_process function (isomedia/isom_writ...
CVE-2025-55641MEDIUM5.5A NULL pointer dereference in the gf_isom_copy_sample_info function (isomedia/isom_write.c) of GPAC MP4Box v2.4 allows a...

Check if your code is affected by 2025 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now