2025 CVE Vulnerabilities
45,325 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-36160 | HIGH | 7.5 | 0.2% | Nov 20, 2025 | IBM Concert 1.0.0 through 2.0.0 could disclose sensitive server information from HTTP response headers that could aid in... |
| CVE-2025-13087 | HIGH | 7.5 | 6.3% | Nov 20, 2025 | A vulnerability exists in the Opto22 Groov Manage REST API on GRV-EPIC and groov RIO Products that allows remote code ex... |
| CVE-2025-64770 | HIGH | 7 | 0.2% | Nov 20, 2025 | The affected products allow unauthenticated access to Open Network Video Interface Forum (ONVIF) services, which may all... |
| CVE-2025-62674 | HIGH | 7 | 0.2% | Nov 20, 2025 | The affected product allows unauthenticated access to Real Time Streaming Protocol (RTSP) services, which may allow an a... |
| CVE-2025-25613 | HIGH | 7.5 | 0.2% | Nov 20, 2025 | FS Inc S3150-8T2F 8-Port Gigabit Ethernet L2+ Switch, 8 x Gigabit RJ45, with 2 x 1Gb SFP, Fanless. All versions before 2... |
| CVE-2025-48986 | HIGH | 8.8 | 0.6% | Nov 20, 2025 | Authorization bypass in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes an logged in attacker to change othe... |
| CVE-2025-63889 | HIGH | 7.5 | 0.3% | Nov 20, 2025 | The fetch function in file thinkphp\library\think\Template.php in ThinkPHP 5.0.24 allows attackers to read arbitrary fil... |
| CVE-2025-62709 | HIGH | 8.8 | 0.3% | Nov 20, 2025 | ClipBucket v5 is an open source video sharing platform. In ClipBucket version 5.5.2, a change to network.class.php cause... |
| CVE-2025-12121 | HIGH | 7.3 | 0.3% | Nov 20, 2025 | Lite XL versions 2.1.8 and prior contain a vulnerability in the system.exec function, which allowed arbitrary command ex... |
| CVE-2025-12120 | HIGH | 7.3 | 0.3% | Nov 20, 2025 | Lite XL versions 2.1.8 and prior automatically execute the .lite_project.lua file when opening a project directory, with... |
| CVE-2025-62730 | HIGH | 8.8 | 0.3% | Nov 20, 2025 | SOPlanning is vulnerable to Privilege Escalation in user management tab. Users with user_manage_team role are allowed to... |
| CVE-2025-62294 | HIGH | 7.5 | 0.3% | Nov 20, 2025 | SOPlanning is vulnerable to Predictable Generation of Password Recovery Token. Due to weak mechanism of generating recov... |
| CVE-2025-41075 | HIGH | 7.5 | 0.3% | Nov 20, 2025 | Vulnerability in LimeSurvey 6.13.0 in the endpoint /optin that causes infinite HTTP redirects when accessed directly. Th... |
| CVE-2025-41074 | HIGH | 7.5 | 0.3% | Nov 20, 2025 | Vulnerability in LimeSurvey 6.13.0 in the endpoint /optout that causes infinite HTTP redirects when accessed directly. ... |
| CVE-2025-40601 | HIGH | 7.5 | 1.1% | Nov 20, 2025 | A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to ca... |
| CVE-2025-13468 | HIGH | 8.1 | 0.3% | Nov 20, 2025 | A weakness has been identified in SourceCodester Alumni Management System 1.0. This issue affects the function delete_fo... |
| CVE-2025-13435 | HIGH | 8.1 | 0.6% | Nov 20, 2025 | A security vulnerability has been detected in Dreampie Resty up to 1.3.1.SNAPSHOT. This affects the function Request of ... |
| CVE-2025-13434 | HIGH | 7.5 | 0.4% | Nov 20, 2025 | A weakness has been identified in jameschz Hush Framework 2.0. The impacted element is an unknown function of the file H... |
| CVE-2025-13433 | HIGH | 7.3 | 0.1% | Nov 20, 2025 | A security flaw has been discovered in Muse Group MuseHub 2.1.0.1567. The affected element is an unknown function of the... |
| CVE-2025-11676 | HIGH | 7.1 | 0.2% | Nov 20, 2025 | Improper input validation vulnerability in TP-Link System Inc. TL-WR940N V6 (UPnP modules), which allows unauthenticated... |
| CVE-2025-0645 | HIGH | 7.2 | 0.3% | Nov 20, 2025 | Unrestricted Upload of File with Dangerous Type vulnerability in Narkom Communication and Software Technologies Trade Lt... |
| CVE-2025-0643 | HIGH | 7.2 | 0.3% | Nov 20, 2025 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Narkom Comm... |
| CVE-2025-13423 | HIGH | 7.2 | 0.3% | Nov 20, 2025 | A flaw has been found in Campcodes Retro Basketball Shoes Online Store 1.0. The impacted element is an unknown function ... |
| CVE-2025-11001 | HIGH | 7.8 | 27.0% | Nov 19, 2025 | 7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attacke... |
| CVE-2025-63719 | HIGH | 7.3 | 0.2% | Nov 19, 2025 | Campcodes Online Hospital Management System 1.0 is vulnerable to SQL Injection in /admin/index.php via the parameter use... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now