2025 CVE Vulnerabilities
45,324 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-8148 | MEDIUM | 4.2 | 0.2% | Dec 5, 2025 | An Improper Access Control in the SFTP service in Fortra's GoAnywhere MFT prior to version 7.9.0 allows Web Users with a... |
| CVE-2025-14105 | MEDIUM | 4.3 | 0.3% | Dec 5, 2025 | A vulnerability was determined in TOZED ZLT M30S and ZLT M30S PRO 1.47/3.09.06. This impacts an unknown function of the ... |
| CVE-2025-66581 | MEDIUM | 6.5 | 0.2% | Dec 5, 2025 | Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to 2.41.0, ... |
| CVE-2025-66577 | MEDIUM | 5.3 | 0.2% | Dec 5, 2025 | cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, a vulnerability allow... |
| CVE-2025-66558 | MEDIUM | 4.3 | 0.2% | Dec 5, 2025 | Nextcloud Twofactor WebAuthn is the WebAuthn Two-Factor Provider for Nextcloud. Prior to 1.4.2 and 2.4.1, a missing owne... |
| CVE-2025-66557 | MEDIUM | 4.3 | 0.3% | Dec 5, 2025 | Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integra... |
| CVE-2025-66556 | MEDIUM | 4.3 | 0.2% | Dec 5, 2025 | Nextcloud talk is a video & audio conferencing app for Nextcloud. Prior to 20.1.8 and 21.1.2, a participant with chat pe... |
| CVE-2025-66554 | MEDIUM | 5.4 | 0.2% | Dec 5, 2025 | Contacts app for Nextcloud easily syncs contacts from various devices with your Nextcloud and allows editing. Prior to 5... |
| CVE-2025-66553 | MEDIUM | 4.3 | 0.2% | Dec 5, 2025 | Nextcloud Tables allows you to create your own tables with individual columns. Prior to 0.8.7 and 0.9.4, authenticated u... |
| CVE-2025-66551 | MEDIUM | 4.3 | 0.3% | Dec 5, 2025 | Nextcloud Tables allows you to create your own tables with individual columns. Prior to 0.8.6 and 0.9.3, a malicious use... |
| CVE-2025-66548 | MEDIUM | 5.5 | 0.1% | Dec 5, 2025 | Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integra... |
| CVE-2025-66545 | MEDIUM | 4.3 | 0.2% | Dec 5, 2025 | Nextcloud Groupfolders provides admin-configured folders shared by everyone in a group or team. Prior to 14.0.11, 15.3.1... |
| CVE-2025-66514 | MEDIUM | 5.4 | 0.2% | Dec 5, 2025 | Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. Prior to 5.5.3, a stored HTML injecti... |
| CVE-2025-66513 | MEDIUM | 5.3 | 0.2% | Dec 5, 2025 | Nextcloud Tables allows you to create your own tables with individual columns. Prior to 0.8.9, 0.9.6, and 1.0.1, the inf... |
| CVE-2025-34266 | MEDIUM | 5.4 | 0.2% | Dec 5, 2025 | Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /r... |
| CVE-2025-34265 | MEDIUM | 5.4 | 0.2% | Dec 5, 2025 | Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /r... |
| CVE-2025-34264 | MEDIUM | 5.4 | 0.2% | Dec 5, 2025 | Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /r... |
| CVE-2025-34263 | MEDIUM | 5.4 | 0.2% | Dec 5, 2025 | Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /r... |
| CVE-2025-34262 | MEDIUM | 5.4 | 0.2% | Dec 5, 2025 | Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /r... |
| CVE-2025-34261 | MEDIUM | 5.4 | 0.2% | Dec 5, 2025 | Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /r... |
| CVE-2025-34260 | MEDIUM | 5.4 | 0.2% | Dec 5, 2025 | Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /r... |
| CVE-2025-34259 | MEDIUM | 5.4 | 0.2% | Dec 5, 2025 | Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /r... |
| CVE-2025-34258 | MEDIUM | 5.4 | 0.2% | Dec 5, 2025 | Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /r... |
| CVE-2025-34257 | MEDIUM | 5.4 | 0.3% | Dec 5, 2025 | Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /r... |
| CVE-2025-66552 | MEDIUM | 4.3 | 0.3% | Dec 5, 2025 | Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Enterprise Server prior to 30.0.9 and 3... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now