2025 CVE Vulnerabilities
45,138 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-32436 | HIGH | 7.1 | 0.2% | Jun 18, 2026 | AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agent... |
| CVE-2025-32424 | HIGH | 8.7 | 0.3% | Jun 18, 2026 | AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agent... |
| CVE-2025-32422 | HIGH | 8.7 | 0.3% | Jun 18, 2026 | AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agent... |
| CVE-2025-32392 | HIGH | 8.7 | 0.3% | Jun 18, 2026 | AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agent... |
| CVE-2025-58175 | HIGH | 8.2 | 0.3% | Jun 18, 2026 | GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.26.4 and 2.2... |
| CVE-2025-52465 | HIGH | 7.2 | 0.4% | Jun 18, 2026 | GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.26.4 and 2.2... |
| CVE-2025-27511 | HIGH | 7.2 | 0.6% | Jun 18, 2026 | GeoServer is an open source server that allows users to share and edit geospatial data. Prior to version 2.27.0 of the G... |
| CVE-2025-10560 | CRITICAL | 9.3 | 0.4% | Jun 18, 2026 | Worksnaps before version 1.6.20260201 contains hardcoded cloud credentials and related secret material in the Worksnaps ... |
| CVE-2025-71325 | CRITICAL | 9.8 | 0.5% | Jun 17, 2026 | picklescan before 0.0.27 contains a parsing logic error in the _list_globals function when handling STACK_GLOBAL opcodes... |
| CVE-2025-71323 | CRITICAL | 9.8 | 0.8% | Jun 17, 2026 | picklescan before 0.0.33 fails to block the ctypes module, allowing attackers to achieve remote code execution by invoki... |
| CVE-2025-71322 | HIGH | 8.8 | 0.4% | Jun 17, 2026 | PickleScan before 0.0.33 fails to include the pty.spawn function in its unsafe globals list, allowing attackers to bypas... |
| CVE-2025-71321 | CRITICAL | 9.8 | 0.6% | Jun 17, 2026 | picklescan before 0.0.33 contains an arbitrary file writing vulnerability that allows attackers to bypass the dangerous ... |
| CVE-2025-71320 | CRITICAL | 9.8 | 0.6% | Jun 17, 2026 | picklescan before 0.0.33 contains an incomplete deny-list that fails to block pydoc.locate and operator.methodcaller fun... |
| CVE-2025-32748 | MEDIUM | 6.1 | 0.2% | Jun 17, 2026 | Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) a Host Header Injection vulnerability. An unauthenticate... |
| CVE-2025-26240 | HIGH | 8.4 | 0.4% | Jun 17, 2026 | In JazzCore python-pdfkit 1.0.0, the from_string method enables the execution of JavaScript code within the context of t... |
| CVE-2025-69189 | HIGH | 7.3 | 0.2% | Jun 17, 2026 | Missing Authorization vulnerability in EMV JobBank allows Exploiting Incorrectly Configured Access Control Security Leve... |
| CVE-2025-69175 | HIGH | 8.1 | 0.3% | Jun 17, 2026 | Unauthenticated Local File Inclusion in Line Agency <= 1.3.1 versions. |
| CVE-2025-69174 | HIGH | 8.1 | 0.3% | Jun 17, 2026 | Unauthenticated Local File Inclusion in Etude <= 1.6 versions. |
| CVE-2025-69170 | HIGH | 8.1 | 0.3% | Jun 17, 2026 | Unauthenticated Local File Inclusion in Eventicity <= 1.5 versions. |
| CVE-2025-69166 | HIGH | 8.1 | 0.4% | Jun 17, 2026 | Unauthenticated Local File Inclusion in Gunslinger <= 1.7 versions. |
| CVE-2025-69164 | HIGH | 8.1 | 0.3% | Jun 17, 2026 | Unauthenticated Local File Inclusion in Skyward <= 1.10 versions. |
| CVE-2025-69158 | HIGH | 8.1 | 0.3% | Jun 17, 2026 | Unauthenticated Local File Inclusion in Granola <= 1.13 versions. |
| CVE-2025-69157 | HIGH | 8.1 | 0.4% | Jun 17, 2026 | Unauthenticated Local File Inclusion in Gamic <= 1.15 versions. |
| CVE-2025-69144 | HIGH | 8.1 | 0.3% | Jun 17, 2026 | Unauthenticated Local File Inclusion in Preservation <= 1.10 versions. |
| CVE-2025-69140 | HIGH | 7.1 | 0.2% | Jun 17, 2026 | Unauthenticated Cross Site Scripting (XSS) in SweetDate Core < 1.1.5 versions. |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now