2025 CVE Vulnerabilities
45,296 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-2841 | MEDIUM | 5.3 | 0.3% | Apr 12, 2025 | The Cart66 Cloud plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includi... |
| CVE-2025-32726 | MEDIUM | 6.8 | 0.4% | Apr 12, 2025 | Improper access control in Visual Studio Code allows an authorized attacker to elevate privileges locally. |
| CVE-2025-29834 | HIGH | 7.5 | 0.5% | Apr 12, 2025 | Out-of-bounds read in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
| CVE-2025-29803 | HIGH | 7.3 | 0.6% | Apr 12, 2025 | Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an auth... |
| CVE-2025-2269 | MEDIUM | 6.1 | 0.2% | Apr 12, 2025 | The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Sc... |
| CVE-2025-0129 | CRITICAL | 9.3 | 0.2% | Apr 11, 2025 | An improper exception check in Palo Alto Networks Prisma Access Browser allows a low privileged user to prevent Prisma A... |
| CVE-2025-0123 | MEDIUM | 5.9 | 0.1% | Apr 11, 2025 | A vulnerability in the Palo Alto Networks PAN-OS® software enables unlicensed administrators to view clear-text data cap... |
| CVE-2025-0119 | MEDIUM | 6.3 | 0.5% | Apr 11, 2025 | A command injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execut... |
| CVE-2025-32367 | HIGH | 8.6 | 0.4% | Apr 11, 2025 | The Oz Forensics face recognition application before 4.0.8 late 2023 allows PII retrieval via /statistic/list Insecure D... |
| CVE-2025-32080 | MEDIUM | 6.9 | 0.4% | Apr 11, 2025 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in The Wikimedia Foundation Mediawiki - Mobile ... |
| CVE-2025-32079 | MEDIUM | 6.5 | 0.3% | Apr 11, 2025 | Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - GrowthExperiments allows HTTP DoS.This i... |
| CVE-2025-32078 | MEDIUM | 6.9 | 0.3% | Apr 11, 2025 | Improper Encoding or Escaping of Output vulnerability in The Wikimedia Foundation Mediawiki - Version Compare Extension ... |
| CVE-2025-32077 | MEDIUM | 6.9 | 0.3% | Apr 11, 2025 | Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Extension:SimpleCalendar allows Cross-Si... |
| CVE-2025-32076 | MEDIUM | 6.9 | 0.3% | Apr 11, 2025 | Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Visual Data Extension allows HTTP DoS.Th... |
| CVE-2025-32075 | MEDIUM | 6.9 | 0.3% | Apr 11, 2025 | Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Tabs Extension allows Code Injection.Thi... |
| CVE-2025-32074 | MEDIUM | 5.4 | 0.2% | Apr 11, 2025 | Improper Encoding or Escaping of Output vulnerability in The Wikimedia Foundation Mediawiki - Confirm Account Extension ... |
| CVE-2025-32073 | MEDIUM | 5.4 | 0.2% | Apr 11, 2025 | Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - HTML Tags allows Cross-Site Scripting (X... |
| CVE-2025-32072 | MEDIUM | 6.9 | 0.4% | Apr 11, 2025 | Improper Encoding or Escaping of Output vulnerability in The Wikimedia Foundation Mediawiki Core - Feed Utils allows Web... |
| CVE-2025-32071 | MEDIUM | 5.4 | 0.2% | Apr 11, 2025 | Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Wikidata Extension allows Cross-Site Scr... |
| CVE-2025-32070 | MEDIUM | 5.4 | 0.2% | Apr 11, 2025 | Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - AJAX Poll Extension allows Cross-Site Sc... |
| CVE-2025-32069 | MEDIUM | 5.4 | 0.2% | Apr 11, 2025 | Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Wikibase Media Info Extension allows Cro... |
| CVE-2025-32068 | MEDIUM | 5.4 | 0.2% | Apr 11, 2025 | Incorrect Authorization vulnerability in The Wikimedia Foundation Mediawiki - OAuth Extension allows Authentication Bypa... |
| CVE-2025-32067 | MEDIUM | 5.4 | 0.2% | Apr 11, 2025 | Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Growth Experiments Extension allows Cros... |
| CVE-2025-31935 | MEDIUM | 6.9 | 0.2% | Apr 11, 2025 | Subnet Solutions PowerSYSTEM Center is affected by a mishandling of exceptional conditions vulnerability. Crafted data... |
| CVE-2025-31354 | MEDIUM | 5.3 | 0.1% | Apr 11, 2025 | Subnet Solutions PowerSYSTEM Center's SMTPS notification service can be affected by importing an EC certificate with cra... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now