2025 CVE Vulnerabilities
45,143 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-12528 | HIGH | 8.1 | 0.6% | Nov 18, 2025 | The Pie Forms for WP plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1... |
| CVE-2025-12411 | HIGH | 7.1 | 0.2% | Nov 18, 2025 | The Premmerce Wholesale Pricing for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'ID' paramet... |
| CVE-2025-11620 | HIGH | 7.2 | 0.3% | Nov 18, 2025 | The Multiple Roles per User plugin for WordPress is vulnerable to unauthorized modification of data due to a missing cap... |
| CVE-2025-8727 | HIGH | 7.2 | 0.3% | Nov 18, 2025 | There is a vulnerability in the Supermicro BMC web function at Supermicro MBD-X13SEDW-F. After logging into the BMC Web ... |
| CVE-2025-8076 | HIGH | 7.2 | 0.3% | Nov 18, 2025 | There is a vulnerability in the Supermicro BMC web function at Supermicro MBD-X13SEDW-F. After logging into the BMC Web ... |
| CVE-2025-10089 | HIGH | 7.7 | 0.1% | Nov 18, 2025 | Uncontrolled Search Path Element Vulnerability in Setting and Operation Application for Lighting Control System MILCO.S ... |
| CVE-2025-48593 | HIGH | 8 | 0.9% | Nov 18, 2025 | In bta_hf_client_cb_init of bta_hf_client_main.cc, there is a possible remote code execution due to a use after free. Th... |
| CVE-2025-12974 | HIGH | 8.1 | 0.6% | Nov 18, 2025 | The Gravity Forms plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in th... |
| CVE-2025-8693 | HIGH | 8.8 | 1.0% | Nov 18, 2025 | A post-authentication command injection vulnerability in the "priv" parameter of Zyxel DX3300-T0 firmware version 5.50(A... |
| CVE-2025-6599 | HIGH | 7.5 | 0.3% | Nov 18, 2025 | An uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware version 5.50(ABVY.6.3)C... |
| CVE-2025-13325 | HIGH | 8.8 | 0.3% | Nov 18, 2025 | A vulnerability was determined in itsourcecode Student Information System 1.0. The affected element is an unknown functi... |
| CVE-2025-13306 | HIGH | 8.8 | 7.2% | Nov 18, 2025 | A security vulnerability has been detected in D-Link DWR-M920, DWR-M921, DIR-822K and DIR-825M 1.1.5. Impacted is the fu... |
| CVE-2025-13230 | HIGH | 8.8 | 0.2% | Nov 18, 2025 | Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corru... |
| CVE-2025-13229 | HIGH | 8.8 | 0.2% | Nov 18, 2025 | Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corru... |
| CVE-2025-13228 | HIGH | 8.8 | 0.2% | Nov 18, 2025 | Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corru... |
| CVE-2025-13227 | HIGH | 8.8 | 0.2% | Nov 18, 2025 | Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corru... |
| CVE-2025-13226 | HIGH | 8.8 | 0.2% | Nov 18, 2025 | Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corru... |
| CVE-2025-36553 | HIGH | 8.8 | 0.2% | Nov 17, 2025 | A buffer overflow vulnerability exists in the CvManager functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell... |
| CVE-2025-36463 | HIGH | 7.3 | 0.1% | Nov 17, 2025 | Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter fun... |
| CVE-2025-36462 | HIGH | 7.3 | 0.1% | Nov 17, 2025 | Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter fun... |
| CVE-2025-36461 | HIGH | 7.3 | 0.1% | Nov 17, 2025 | Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter fun... |
| CVE-2025-36460 | HIGH | 7.3 | 0.1% | Nov 17, 2025 | Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter fun... |
| CVE-2025-32089 | HIGH | 8.8 | 0.2% | Nov 17, 2025 | A buffer overflow vulnerability exists in the CvManager_SBI functionality of Dell ControlVault3 prior to 5.15.14.19 and ... |
| CVE-2025-31649 | HIGH | 8.7 | 0.2% | Nov 17, 2025 | A hard-coded password vulnerability exists in the ControlVault WBDI Driver functionality of Dell ControlVault3 prior to ... |
| CVE-2025-31361 | HIGH | 8.7 | 0.2% | Nov 17, 2025 | A privilege escalation vulnerability exists in the ControlVault WBDI Driver WBIO_USH_ADD_RECORD functionality of Dell Co... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now