2025 CVE Vulnerabilities
45,324 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-20767 | HIGH | 7.8 | 0.1% | Dec 2, 2025 | In display, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of p... |
| CVE-2025-20766 | HIGH | 7.8 | 0.1% | Dec 2, 2025 | In display, there is a possible memory corruption due to improper input validation. This could lead to local escalation ... |
| CVE-2025-20764 | HIGH | 7.8 | 0.1% | Dec 2, 2025 | In smi, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr... |
| CVE-2025-20763 | HIGH | 7.8 | 0.1% | Dec 2, 2025 | In mmdvfs, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of... |
| CVE-2025-12529 | HIGH | 8.8 | 0.5% | Dec 2, 2025 | The Cost Calculator Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path ... |
| CVE-2025-58482 | HIGH | 7.3 | 0.1% | Dec 2, 2025 | Improper access control in MPLocalService of MotionPhoto prior to version 4.1.51 allows local attackers to start privile... |
| CVE-2025-58481 | HIGH | 7.8 | 0.1% | Dec 2, 2025 | Improper access control in MPRemoteService of MotionPhoto prior to version 4.1.51 allows local attackers to start privil... |
| CVE-2025-58480 | HIGH | 7.5 | 0.2% | Dec 2, 2025 | Heap-based buffer overflow in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access o... |
| CVE-2025-58479 | HIGH | 7.5 | 0.3% | Dec 2, 2025 | Out-of-bounds read in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bo... |
| CVE-2025-58478 | HIGH | 7.5 | 0.3% | Dec 2, 2025 | Out-of-bounds write in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-b... |
| CVE-2025-21080 | HIGH | 7.1 | 0.1% | Dec 2, 2025 | Improper export of android application components in Dynamic Lockscreen prior to SMR Dec-2025 Release 1 allows local att... |
| CVE-2025-66448 | HIGH | 8.8 | 0.6% | Dec 1, 2025 | vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.11.1, vllm has a critical remote co... |
| CVE-2025-66313 | HIGH | 7.2 | 0.3% | Dec 1, 2025 | ChurchCRM is an open-source church management system. In ChurchCRM 6.2.0 and earlier, there is a time-based blind SQL in... |
| CVE-2025-66304 | HIGH | 7.2 | 0.4% | Dec 1, 2025 | Grav is a file-based Web platform. Prior to 1.8.0-beta.27, users with read access on the user account management section... |
| CVE-2025-66300 | HIGH | 8.5 | 0.5% | Dec 1, 2025 | Grav is a file-based Web platform. Prior to 1.8.0-beta.27, A low privilege user account with page editing privilege can ... |
| CVE-2025-66299 | HIGH | 8.8 | 0.6% | Dec 1, 2025 | Grav is a file-based Web platform. Prior to 1.8.0-beta.27, Grav CMS is vulnerable to a Server-Side Template Injection (S... |
| CVE-2025-66298 | HIGH | 7.5 | 0.4% | Dec 1, 2025 | Grav is a file-based Web platform. Prior to 1.8.0-beta.27, having a simple form on site can reveal the whole Grav config... |
| CVE-2025-66297 | HIGH | 8.8 | 0.8% | Dec 1, 2025 | Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a user with admin panel access and permissions to create or e... |
| CVE-2025-66296 | HIGH | 8.8 | 0.3% | Dec 1, 2025 | Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a privilege escalation vulnerability exists in Grav’s Admin p... |
| CVE-2025-66295 | HIGH | 8.8 | 0.6% | Dec 1, 2025 | Grav is a file-based Web platform. Prior to 1.8.0-beta.27, when a user with privilege of user creation creates a new use... |
| CVE-2025-66294 | HIGH | 8.8 | 2.8% | Dec 1, 2025 | Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a Server-Side Template Injection (SSTI) vulnerability exists ... |
| CVE-2025-66206 | HIGH | 8.6 | 0.3% | Dec 1, 2025 | Frappe is a full-stack web application framework. Prior to 15.86.0 and 14.99.2, certain requests were vulnerable to path... |
| CVE-2025-65840 | HIGH | 8.8 | 0.1% | Dec 1, 2025 | PublicCMS V5.202506.b is vulnerable to Cross Site Request Forgery (CSRF) in the CkEditorAdminController. |
| CVE-2025-55749 | HIGH | 7.5 | 1.5% | Dec 1, 2025 | XWiki is an open-source wiki software platform. From 16.7.0 to 16.10.11, 17.4.4, or 17.7.0, in an instance which is usin... |
| CVE-2025-65838 | HIGH | 7.5 | 0.4% | Dec 1, 2025 | PublicCMS V5.202506.b is vulnerable to path traversal via the doUploadSitefile method. |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now