2025 CVE Vulnerabilities
45,142 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-66554 | MEDIUM | 5.4 | 0.2% | Dec 5, 2025 | Contacts app for Nextcloud easily syncs contacts from various devices with your Nextcloud and allows editing. Prior to 5... |
| CVE-2025-66553 | MEDIUM | 4.3 | 0.2% | Dec 5, 2025 | Nextcloud Tables allows you to create your own tables with individual columns. Prior to 0.8.7 and 0.9.4, authenticated u... |
| CVE-2025-66551 | MEDIUM | 4.3 | 0.2% | Dec 5, 2025 | Nextcloud Tables allows you to create your own tables with individual columns. Prior to 0.8.6 and 0.9.3, a malicious use... |
| CVE-2025-66548 | MEDIUM | 5.5 | 0.1% | Dec 5, 2025 | Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integra... |
| CVE-2025-66545 | MEDIUM | 4.3 | 0.2% | Dec 5, 2025 | Nextcloud Groupfolders provides admin-configured folders shared by everyone in a group or team. Prior to 14.0.11, 15.3.1... |
| CVE-2025-66514 | MEDIUM | 5.4 | 0.2% | Dec 5, 2025 | Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. Prior to 5.5.3, a stored HTML injecti... |
| CVE-2025-66513 | MEDIUM | 5.3 | 0.2% | Dec 5, 2025 | Nextcloud Tables allows you to create your own tables with individual columns. Prior to 0.8.9, 0.9.6, and 1.0.1, the inf... |
| CVE-2025-34266 | MEDIUM | 5.4 | 0.2% | Dec 5, 2025 | Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /r... |
| CVE-2025-34265 | MEDIUM | 5.4 | 0.2% | Dec 5, 2025 | Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /r... |
| CVE-2025-34264 | MEDIUM | 5.4 | 0.2% | Dec 5, 2025 | Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /r... |
| CVE-2025-34263 | MEDIUM | 5.4 | 0.2% | Dec 5, 2025 | Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /r... |
| CVE-2025-34262 | MEDIUM | 5.4 | 0.2% | Dec 5, 2025 | Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /r... |
| CVE-2025-34261 | MEDIUM | 5.4 | 0.2% | Dec 5, 2025 | Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /r... |
| CVE-2025-34260 | MEDIUM | 5.4 | 0.2% | Dec 5, 2025 | Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /r... |
| CVE-2025-34259 | MEDIUM | 5.4 | 0.2% | Dec 5, 2025 | Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /r... |
| CVE-2025-34258 | MEDIUM | 5.4 | 0.2% | Dec 5, 2025 | Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /r... |
| CVE-2025-34257 | MEDIUM | 5.4 | 0.2% | Dec 5, 2025 | Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /r... |
| CVE-2025-66552 | MEDIUM | 4.3 | 0.3% | Dec 5, 2025 | Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Enterprise Server prior to 30.0.9 and 3... |
| CVE-2025-66550 | MEDIUM | 5.7 | 0.3% | Dec 5, 2025 | Nextcloud Calendar is a calendar app for Nextcloud. Prior to 4.7.17 and 5.2.4, when a malicious user creates a calendar ... |
| CVE-2025-66547 | MEDIUM | 4.3 | 0.2% | Dec 5, 2025 | Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Enterprise Server prior to 31.0.1, non-... |
| CVE-2025-66512 | MEDIUM | 6.1 | 0.2% | Dec 5, 2025 | Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Server Enterprise prior to 31.0.12 and ... |
| CVE-2025-66511 | MEDIUM | 6.5 | 0.2% | Dec 5, 2025 | Nextcloud Calendar is a calendar app for Nextcloud. Prior to 6.0.3, the Calendar app generates participant tokens for me... |
| CVE-2025-66510 | MEDIUM | 4.9 | 0.3% | Dec 5, 2025 | Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server prior to 31.0.10 and 32.0.1 and Nextcloud E... |
| CVE-2025-14104 | MEDIUM | 6.1 | 0.2% | Dec 5, 2025 | A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, spe... |
| CVE-2025-64056 | MEDIUM | 4.3 | 0.2% | Dec 5, 2025 | File upload vulnerability in Fanvil x210 V2 2.12.20 allows unauthenticated attackers on the local network to store arbit... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now