2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-43442 | LOW | 3.3 | 0.2% | Nov 4, 2025 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS... |
| CVE-2025-43423 | LOW | 2 | 0.2% | Nov 4, 2025 | A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.... |
| CVE-2025-43408 | LOW | 2.4 | 0.3% | Nov 4, 2025 | This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sequoia 15.7.2,... |
| CVE-2025-43395 | LOW | 3.3 | 0.2% | Nov 4, 2025 | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 1... |
| CVE-2025-43365 | LOW | 2.8 | 0.1% | Nov 4, 2025 | A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 18.7.2 and iPadOS 18.... |
| CVE-2025-43350 | LOW | 2.4 | 0.2% | Nov 4, 2025 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.1 and iPadOS 26.1. An atta... |
| CVE-2025-43309 | LOW | 2.4 | 0.2% | Nov 4, 2025 | A logic issue was addressed with improved checks. This issue is fixed in iOS 26 and iPadOS 26. An attacker with physical... |
| CVE-2025-12623 | LOW | 3.1 | 0.3% | Nov 3, 2025 | A vulnerability was identified in fushengqian fuint up to 41e26be8a2c609413a0feaa69bdad33a71ae8032. Affected by this iss... |
| CVE-2025-64352 | LOW | 2.7 | 0.2% | Oct 31, 2025 | Missing Authorization vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite al... |
| CVE-2025-64350 | LOW | 3.8 | 0.2% | Oct 31, 2025 | Missing Authorization vulnerability in Rank Math SEO Rank Math SEO seo-by-rank-math allows Exploiting Incorrectly Config... |
| CVE-2025-23050 | LOW | 3.1 | 0.2% | Oct 31, 2025 | QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (o... |
| CVE-2025-10636 | LOW | 3.5 | 0.2% | Oct 30, 2025 | The NS Maintenance Mode for WP WordPress plugin through 1.3.1 does not sanitise and escape some of its settings, which c... |
| CVE-2025-10931 | LOW | 3.8 | 0.2% | Oct 30, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Umami Analy... |
| CVE-2025-11203 | LOW | 3.5 | 0.3% | Oct 29, 2025 | LiteLLM Information health API_KEY Information Disclosure Vulnerability. This vulnerability allows remote attackers to d... |
| CVE-2025-56558 | LOW | 3 | 0.4% | Oct 29, 2025 | The Dyson MQTT server (2022 and possibly later) allows publications and subscriptions by a client that has the correct v... |
| CVE-2025-62794 | LOW | 3.8 | 0.1% | Oct 28, 2025 | GitHub Workflow Updater is a VS Code extension that automatically pins GitHub Actions to specific commits for enhanced s... |
| CVE-2025-10939 | LOW | 3.7 | 0.4% | Oct 28, 2025 | A flaw was found in Keycloak. The Keycloak guides recommend to not expose /admin path to the outside in case the install... |
| CVE-2025-12264 | LOW | 3.5 | 0.2% | Oct 27, 2025 | A security flaw has been discovered in Wisencode up to 20251012. Affected by this vulnerability is an unknown functional... |
| CVE-2025-12251 | LOW | 3.5 | 0.3% | Oct 27, 2025 | A vulnerability has been found in OpenWGA 7.11.12 Build 737. This impacts an unknown function of the component Admin UI.... |
| CVE-2025-12224 | LOW | 3.5 | 0.3% | Oct 27, 2025 | A flaw has been found in Iqbolshoh php-business-website up to 10677743a8dfc281f85291a27cf63a0bce043c24. This vulnerabili... |
| CVE-2025-11888 | LOW | 2.7 | 0.2% | Oct 25, 2025 | The ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution plugin for WordPress is vulnerable ... |
| CVE-2025-11244 | LOW | 3.7 | 0.3% | Oct 25, 2025 | The Password Protected plugin for WordPress is vulnerable to authorization bypass via IP address spoofing in all version... |
| CVE-2025-62711 | LOW | 3.1 | 0.4% | Oct 24, 2025 | Wasmtime is a runtime for WebAssembly. In versions from 38.0.0 to before 38.0.3, the implementation of component-model r... |
| CVE-2025-10723 | LOW | 2.7 | 0.3% | Oct 24, 2025 | The PixelYourSite WordPress plugin before 11.1.2 does not validate some URL parameters before using them to generate pa... |
| CVE-2025-62659 | LOW | 2.1 | 0.3% | Oct 22, 2025 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimed... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now