2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-41721 | LOW | 2.7 | 0.2% | Oct 22, 2025 | A high privileged remote attacker can influence the parameters passed to the openssl command due to improper neutralizat... |
| CVE-2025-62774 | LOW | 3.1 | 0.2% | Oct 22, 2025 | On Mercku M6a devices through 2.1.0, the authentication system uses predictable session tokens based on timestamps. |
| CVE-2025-62773 | LOW | 2.4 | 0.2% | Oct 22, 2025 | Mercku M6a devices through 2.1.0 allow TELNET sessions via a router.telnet.enabled.update request by an administrator. |
| CVE-2025-62772 | LOW | 3.1 | 0.2% | Oct 22, 2025 | On Mercku M6a devices through 2.1.0, session tokens remain valid for at least months in some cases. |
| CVE-2025-62480 | LOW | 2.7 | 0.3% | Oct 21, 2025 | Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Naming Subsystem). The sup... |
| CVE-2025-62479 | LOW | 2.7 | 0.3% | Oct 21, 2025 | Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Block Storage). The suppor... |
| CVE-2025-61755 | LOW | 3.7 | 0.3% | Oct 21, 2025 | Vulnerability in the Oracle GraalVM for JDK product of Oracle Java SE (component: Compiler). Supported versions that ar... |
| CVE-2025-61749 | LOW | 2.7 | 0.3% | Oct 21, 2025 | Vulnerability in the Unified Audit component of Oracle Database Server. Supported versions that are affected are 23.4-2... |
| CVE-2025-61748 | LOW | 3.7 | 0.4% | Oct 21, 2025 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE... |
| CVE-2025-53051 | LOW | 2.7 | 0.3% | Oct 21, 2025 | Vulnerability in the RDBMS Functional Index component of Oracle Database Server. Supported versions that are affected a... |
| CVE-2025-5496 | LOW | 3.3 | 0.3% | Oct 21, 2025 | ZohoCorp ManageEngine Endpoint Central versions earlier than 11.4.2508.14, 11.4.2516.06, and 11.4.2518.01 are affected b... |
| CVE-2025-57837 | LOW | 2.9 | 0.2% | Oct 20, 2025 | Tileservice module is affected by information leak vulnerability, successful exploitation of this vulnerability may affe... |
| CVE-2025-11945 | LOW | 3.5 | 0.3% | Oct 19, 2025 | A vulnerability was identified in toeverything AFFiNE up to 0.24.1. This vulnerability affects unknown code of the compo... |
| CVE-2025-62655 | LOW | 2.1 | 0.3% | Oct 17, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in The Wikimedia Foun... |
| CVE-2025-62654 | LOW | 2 | 0.3% | Oct 17, 2025 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimed... |
| CVE-2025-62653 | LOW | 2 | 0.3% | Oct 17, 2025 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimed... |
| CVE-2025-62505 | LOW | 3 | 0.3% | Oct 17, 2025 | LobeChat is an open source chat application platform. The web-crawler package in LobeChat version 1.136.1 allows server-... |
| CVE-2025-60361 | LOW | 3.3 | 0.2% | Oct 17, 2025 | radare2 v5.9.8 and before contains a memory leak in the function bochs_open. |
| CVE-2025-11896 | LOW | 2.1 | 0.2% | Oct 16, 2025 | In Xpdf 4.05 (and earlier), a PDF object loop in a CMap, via the "UseCMap" entry, leads to infinite recursion and a stac... |
| CVE-2025-61924 | LOW | 3.8 | 0.3% | Oct 16, 2025 | PrestaShop Checkout is the PrestaShop official payment module in partnership with PayPal. In versions prior to 4.4.1 and... |
| CVE-2025-11851 | LOW | 3.5 | 0.3% | Oct 16, 2025 | A vulnerability has been found in Apeman ID71 EN75.8.53.20. The affected element is an unknown function of the file /set... |
| CVE-2025-54499 | LOW | 3.7 | 0.3% | Oct 16, 2025 | Mattermost versions 10.5.x <= 10.5.10, 10.11.x <= 10.11.2 fail to use constant-time comparison for sensitive string comp... |
| CVE-2025-62380 | LOW | 2.9 | 0.5% | Oct 15, 2025 | mailgen is a Node.js package that generates responsive HTML e-mails for sending transactional mail. Mailgen versions thr... |
| CVE-2025-62379 | LOW | 3.1 | 0.3% | Oct 15, 2025 | Reflex is a library to build full-stack web apps in pure Python. In versions 0.5.4 through 0.8.14, the /auth-codespace e... |
| CVE-2025-2529 | LOW | 3.7 | 0.2% | Oct 15, 2025 | Applications using affected versions of Ehcache 3.x can experience degraded cache-write performance if the application u... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now