2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-68851 | HIGH | 7.1 | 0.2% | Jun 15, 2026 | Unauthenticated Cross Site Scripting (XSS) in Okay Toolkit <= 2.3 versions. |
| CVE-2025-68840 | HIGH | 7.1 | 0.2% | Jun 15, 2026 | Unauthenticated Cross Site Scripting (XSS) in iRobots.txt SEO <= 1.1.2 versions. |
| CVE-2025-59133 | HIGH | 7.5 | 0.3% | Jun 15, 2026 | Custom role Insecure Direct Object References (IDOR) in Projectopia <= 5.1.25.2 versions. |
| CVE-2025-68713 | HIGH | 8 | 0.3% | Jun 15, 2026 | An issue was discovered in Rakuten Send Anywhere (File Transfer) for Android (com.estmob.android.sendanywhere) 23.2.9. T... |
| CVE-2025-56814 | HIGH | 7.8 | 0.2% | Jun 15, 2026 | A code injection vulnerability in the wxExecute() function of OpenCPN v5.12.0 allows attackers to execute arbitrary code... |
| CVE-2025-9033 | HIGH | 7.8 | 0.1% | Jun 12, 2026 | Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow Loca... |
| CVE-2025-9032 | HIGH | 7.8 | 0.1% | Jun 12, 2026 | Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed Windows PE file may all... |
| CVE-2025-14098 | HIGH | 7.8 | 0.1% | Jun 12, 2026 | Heap buffer out-of-bounds write vulnerability due to integer overflow in Avira Antivirus engine when scanning a malforme... |
| CVE-2025-7017 | HIGH | 7.8 | 0.1% | Jun 12, 2026 | Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed Windows MSI file may al... |
| CVE-2025-7011 | HIGH | 7.8 | 0.1% | Jun 12, 2026 | Heap out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed zip file containing XML may allow Loc... |
| CVE-2025-7009 | HIGH | 7.8 | 0.1% | Jun 12, 2026 | Heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Loca... |
| CVE-2025-7008 | HIGH | 7.8 | 0.1% | Jun 12, 2026 | Heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Windows PE file with .NET meta... |
| CVE-2025-7004 | HIGH | 7.8 | 0.1% | Jun 12, 2026 | Heap buffer out-of-bounds write vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Loc... |
| CVE-2025-7003 | HIGH | 7.8 | 0.1% | Jun 12, 2026 | Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow Loca... |
| CVE-2025-7002 | HIGH | 7.8 | 0.1% | Jun 12, 2026 | Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow Loca... |
| CVE-2025-46315 | HIGH | 7.5 | 0.3% | Jun 11, 2026 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.1. An app may be a... |
| CVE-2025-31272 | HIGH | 7.8 | 0.1% | Jun 11, 2026 | The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4. An app may be able to bypass la... |
| CVE-2025-24284 | HIGH | 8.8 | 0.1% | Jun 11, 2026 | This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in macOS Sequoia 15.4... |
| CVE-2025-71330 | HIGH | 7.5 | 0.4% | Jun 10, 2026 | image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block th... |
| CVE-2025-71329 | HIGH | 7.5 | 0.4% | Jun 10, 2026 | image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block th... |
| CVE-2025-66281 | HIGH | 7.2 | 0.5% | Jun 10, 2026 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. The remote ... |
| CVE-2025-66280 | HIGH | 7.2 | 0.4% | Jun 10, 2026 | An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions. If a... |
| CVE-2025-66279 | HIGH | 7.2 | 1.0% | Jun 10, 2026 | A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attack... |
| CVE-2025-66273 | HIGH | 7.2 | 1.0% | Jun 10, 2026 | A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attack... |
| CVE-2025-62850 | HIGH | 7.2 | 0.3% | Jun 10, 2026 | A NULL pointer dereference vulnerability has been reported to affect QTS, QVP, QuTS cloud and QuTS hero. If a remote att... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now