2025 CVE Vulnerabilities
45,324 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-34055 | CRITICAL | 9.4 | 1.5% | Jul 1, 2025 | An OS command injection vulnerability exists in AVTECH DVR, NVR, and IP camera devices within the adcommand.cgi endpoint... |
| CVE-2025-34054 | CRITICAL | 10 | 2.7% | Jul 1, 2025 | An unauthenticated command injection vulnerability exists in AVTECH DVR devices via Search.cgi?action=cgi_query. The use... |
| CVE-2025-6956 | CRITICAL | 9.8 | 0.4% | Jul 1, 2025 | A vulnerability was found in Campcodes Employee Management System 1.0. It has been classified as critical. This affects ... |
| CVE-2025-6955 | CRITICAL | 9.8 | 0.4% | Jul 1, 2025 | A vulnerability was found in Campcodes Employee Management System 1.0 and classified as critical. Affected by this issue... |
| CVE-2025-6954 | CRITICAL | 9.8 | 0.4% | Jul 1, 2025 | A vulnerability has been found in Campcodes Employee Management System 1.0 and classified as critical. Affected by this ... |
| CVE-2025-49029 | CRITICAL | 9.1 | 2.1% | Jul 1, 2025 | Improper Control of Generation of Code ('Code Injection') vulnerability in bitto.kazi Custom Login And Signup Widget cus... |
| CVE-2025-45872 | CRITICAL | 9.8 | 0.4% | Jul 1, 2025 | zrlog v3.1.5 was discovered to contain a Server-Side Request Forgery (SSRF) via the downloadUrl parameter. |
| CVE-2025-49480 | CRITICAL | 9.1 | 0.2% | Jul 1, 2025 | Out-of-bounds access in ASR180x 、ASR190x in lte-telephony, This vulnerability is associated with program files apps/lz... |
| CVE-2025-49492 | CRITICAL | 9.8 | 0.3% | Jul 1, 2025 | Out-of-bounds write in ASR180x in lte-telephony, May cause a buffer underrun. This vulnerability is associated with pr... |
| CVE-2025-41656 | CRITICAL | 10 | 10.0% | Jul 1, 2025 | An unauthenticated remote attacker can run arbitrary commands on the affected devices with high privileges because the a... |
| CVE-2025-41648 | CRITICAL | 9.8 | 0.7% | Jul 1, 2025 | An unauthenticated remote attacker can bypass the login to the web application of the affected devices making it possibl... |
| CVE-2025-6934 | CRITICAL | 9.8 | 22.3% | Jul 1, 2025 | The Opal Estate Pro – Property Management and Submission plugin for WordPress, used by the FullHouse - Real Estate Respo... |
| CVE-2025-6938 | CRITICAL | 9.8 | 0.4% | Jul 1, 2025 | A vulnerability was found in code-projects Simple Pizza Ordering System 1.0. It has been rated as critical. This issue a... |
| CVE-2025-6937 | CRITICAL | 9.8 | 0.4% | Jul 1, 2025 | A vulnerability was found in code-projects Simple Pizza Ordering System 1.0. It has been declared as critical. This vuln... |
| CVE-2025-53005 | CRITICAL | 9.8 | 0.5% | Jul 1, 2025 | DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.11, there is a bypas... |
| CVE-2025-6936 | CRITICAL | 9.8 | 0.4% | Jul 1, 2025 | A vulnerability was found in code-projects Simple Pizza Ordering System 1.0. It has been classified as critical. This af... |
| CVE-2025-6935 | CRITICAL | 9.8 | 0.4% | Jul 1, 2025 | A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this issue... |
| CVE-2025-53004 | CRITICAL | 9.8 | 0.5% | Jun 30, 2025 | DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.11, there is a bypas... |
| CVE-2025-6925 | CRITICAL | 9.1 | 0.9% | Jun 30, 2025 | A vulnerability has been found in Dromara RuoYi-Vue-Plus 5.4.0 and classified as critical. Affected by this vulnerabilit... |
| CVE-2025-6917 | CRITICAL | 9.8 | 0.4% | Jun 30, 2025 | A vulnerability has been found in code-projects Online Hotel Booking 1.0 and classified as critical. This vulnerability ... |
| CVE-2025-45931 | CRITICAL | 9.8 | 1.3% | Jun 30, 2025 | An issue D-Link DIR-816-A2 DIR-816A2_FWv1.10CNB05_R1B011D88210 allows a remote attacker to execute arbitrary code via sy... |
| CVE-2025-26074 | CRITICAL | 9.8 | 0.6% | Jun 30, 2025 | Orkes Conductor v3.21.11 allows remote attackers to execute arbitrary OS commands through unrestricted access to Java cl... |
| CVE-2025-6907 | CRITICAL | 9.8 | 0.4% | Jun 30, 2025 | A vulnerability classified as critical was found in code-projects Car Rental System 1.0. This vulnerability affects unkn... |
| CVE-2025-6906 | CRITICAL | 9.8 | 0.4% | Jun 30, 2025 | A vulnerability classified as critical has been found in code-projects Car Rental System 1.0. This affects an unknown pa... |
| CVE-2025-6905 | CRITICAL | 9.8 | 0.4% | Jun 30, 2025 | A vulnerability, which was classified as critical, has been found in code-projects Car Rental System 1.0. This issue aff... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now