2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-15659 | MEDIUM | 6.5 | 0.1% | Jun 15, 2026 | Contributor Cross Site Scripting (XSS) in Elizaibots <= 1.0.2 versions. |
| CVE-2025-15658 | MEDIUM | 5.9 | 0.1% | Jun 15, 2026 | Administrator Cross Site Scripting (XSS) in WP Emmet <= 0.3.4 versions. |
| CVE-2025-64215 | MEDIUM | 6.5 | 0.2% | Jun 15, 2026 | Missing Authorization vulnerability in StylemixThemes MasterStudy LMS Pro allows Accessing Functionality Not Properly Co... |
| CVE-2025-15546 | MEDIUM | 5.4 | 0.2% | Jun 14, 2026 | The Iptanus File Upload WordPress plugin before 5.1.7 does not implement proper file handling when the duplicatepolicy s... |
| CVE-2025-7019 | MEDIUM | 5.5 | 0.1% | Jun 12, 2026 | Stack overflow vulnerability in Avast Antivirus when scanning a malformed Office Open XML file may allow Denial-of-Servi... |
| CVE-2025-7018 | MEDIUM | 5.5 | 0.1% | Jun 12, 2026 | Null pointer dereference vulnerability in Avira Antivirus engine when scanning a malformed Windows PE file may allow Den... |
| CVE-2025-7010 | MEDIUM | 5.5 | 0.1% | Jun 12, 2026 | Stack overflow vulnerability due to uncontrolled recursion in Avast Antivirus when scanning a malformed PDF file may all... |
| CVE-2025-7006 | MEDIUM | 5.5 | 0.1% | Jun 12, 2026 | Use of stack memory after free vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Deni... |
| CVE-2025-7005 | MEDIUM | 5.5 | 0.1% | Jun 12, 2026 | Uncontrolled recursion vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Denial-of-Se... |
| CVE-2025-46313 | MEDIUM | 5.5 | 0.1% | Jun 11, 2026 | A logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26.1. An app may be able ... |
| CVE-2025-46308 | MEDIUM | 5.3 | 0.2% | Jun 11, 2026 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, ma... |
| CVE-2025-46293 | MEDIUM | 5.5 | 0.1% | Jun 11, 2026 | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.4. An app may be ab... |
| CVE-2025-43339 | MEDIUM | 5.5 | 0.1% | Jun 11, 2026 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.1. A malicious... |
| CVE-2025-43278 | MEDIUM | 5.5 | 0.2% | Jun 11, 2026 | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.4. An app may be ab... |
| CVE-2025-30459 | MEDIUM | 5.5 | 0.1% | Jun 11, 2026 | A privacy issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.4. An app may be ... |
| CVE-2025-30431 | MEDIUM | 5.5 | 0.1% | Jun 11, 2026 | The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Vent... |
| CVE-2025-24268 | MEDIUM | 5.5 | 0.1% | Jun 11, 2026 | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in m... |
| CVE-2025-24165 | MEDIUM | 5.5 | 0.1% | Jun 11, 2026 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma ... |
| CVE-2025-7064 | MEDIUM | 6.6 | 0.1% | Jun 11, 2026 | Authentication bypass by primary weakness vulnerability in ABB Freelance. This issue affects Freelance: through 2013, 2... |
| CVE-2025-10238 | MEDIUM | 6.7 | 0.1% | Jun 10, 2026 | During an internal security assessment, a potential out-of-bounds write vulnerability was discovered in the BIOS of some... |
| CVE-2025-10237 | MEDIUM | 6.7 | 0.1% | Jun 10, 2026 | During an internal security assessment, a potential vulnerability was discovered in some ThinkPad embedded controller fi... |
| CVE-2025-8444 | MEDIUM | 6.4 | 0.2% | Jun 10, 2026 | The Animation Addons for Elementor – GSAP Powered Elementor Addons & Website Templates plugin for WordPress is vulnerabl... |
| CVE-2025-62851 | MEDIUM | 4.4 | 0.3% | Jun 10, 2026 | A path traversal vulnerability has been reported to affect License Center. If a local attacker gains an administrator ac... |
| CVE-2025-55659 | MEDIUM | 6.5 | 0.3% | Jun 9, 2026 | A NULL pointer dereference in the ctts_box_write function (isomedia/box_code_base.c) of GPAC MP4Box v2.4 allows attacker... |
| CVE-2025-55658 | MEDIUM | 6.5 | 0.3% | Jun 9, 2026 | GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gf_opus_parse_packet_header function (media... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now