2025 CVE Vulnerabilities
45,324 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-61684 | HIGH | 7.5 | 0.3% | Jan 19, 2026 | Quicly, an IETF QUIC protocol implementation, is susceptible to a denial-of-service attack prior to commit d9d3df6a8530a... |
| CVE-2025-11044 | HIGH | 8.9 | 0.3% | Jan 19, 2026 | An Allocation of Resources Without Limits or Throttling vulnerability in the ANSL-Server component of B&R Automation Run... |
| CVE-2025-11043 | CRITICAL | 9.1 | 0.2% | Jan 19, 2026 | An Improper Certificate Validation vulnerability in the OPC-UA client and ANSL over TLS client used in Automation Studio... |
| CVE-2025-59355 | MEDIUM | 6.5 | 0.4% | Jan 19, 2026 | A vulnerability. When org.apache.linkis.metadata.util.HiveUtils.decode() fails to perform Base64 decoding, it records t... |
| CVE-2025-29847 | HIGH | 7.5 | 0.7% | Jan 19, 2026 | A vulnerability in Apache Linkis. Problem Description When using the JDBC engine and da When using the JDBC engine and ... |
| CVE-2025-15539 | HIGH | 7.5 | 0.7% | Jan 19, 2026 | A vulnerability was determined in Open5GS up to 2.7.6. Impacted is the function sgwc_s11_handle_downlink_data_notificati... |
| CVE-2025-15538 | HIGH | 7.8 | 0.2% | Jan 18, 2026 | A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. Affected by this vulnerabili... |
| CVE-2025-15537 | MEDIUM | 5.5 | 0.2% | Jan 18, 2026 | A security vulnerability has been detected in Mapnik up to 4.2.0. This issue affects the function mapnik::dbf_file::stri... |
| CVE-2025-15536 | MEDIUM | 5.5 | 0.2% | Jan 18, 2026 | A weakness has been identified in BYVoid OpenCC up to 1.1.9. This vulnerability affects the function opencc::MaxMatchSeg... |
| CVE-2025-15535 | LOW | 3.3 | 0.1% | Jan 18, 2026 | A security flaw has been discovered in nicbarker clay up to 0.14. This affects the function Clay__MeasureTextCached in t... |
| CVE-2025-15534 | HIGH | 7.8 | 0.2% | Jan 18, 2026 | A vulnerability was identified in raysan5 raylib up to 909f040. Affected by this issue is the function LoadFontData of t... |
| CVE-2025-15533 | HIGH | 7.8 | 0.3% | Jan 18, 2026 | A vulnerability was determined in raysan5 raylib up to 909f040. Affected by this vulnerability is the function GenImageF... |
| CVE-2025-15532 | HIGH | 7.5 | 1.0% | Jan 17, 2026 | A security flaw has been discovered in Open5GS up to 2.7.5. This issue affects some unknown processing of the component ... |
| CVE-2025-15531 | MEDIUM | 5.5 | 0.7% | Jan 17, 2026 | A vulnerability was identified in Open5GS up to 2.7.5. This vulnerability affects the function sgwc_bearer_add of the fi... |
| CVE-2025-15530 | HIGH | 7.5 | 0.7% | Jan 17, 2026 | A vulnerability was determined in Open5GS up to 2.7.6. This affects the function sgwc_s11_handle_create_indirect_data_fo... |
| CVE-2025-8615 | MEDIUM | 6.4 | 0.2% | Jan 17, 2026 | The CubeWP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's cubewp_shortcode_taxonomy ... |
| CVE-2025-14078 | MEDIUM | 5.3 | 0.3% | Jan 17, 2026 | The PAYGENT for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and inclu... |
| CVE-2025-10484 | CRITICAL | 9.8 | 0.4% | Jan 17, 2026 | The Registration & Login with Mobile Phone Number for WooCommerce plugin for WordPress is vulnerable to Authentication B... |
| CVE-2025-14478 | HIGH | 7.5 | 0.4% | Jan 17, 2026 | The Demo Importer Plus plugin for WordPress is vulnerable to XML External Entity Injection (XXE) in all versions up to, ... |
| CVE-2025-12129 | MEDIUM | 5.3 | 0.2% | Jan 17, 2026 | The CubeWP – All-in-One Dynamic Content Framework plugin for WordPress is vulnerable to Information Exposure in all vers... |
| CVE-2025-12984 | MEDIUM | 4.9 | 0.3% | Jan 17, 2026 | The Advanced Ads – Ad Manager & AdSense plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter in... |
| CVE-2025-14029 | MEDIUM | 5.3 | 0.2% | Jan 17, 2026 | The Community Events plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability... |
| CVE-2025-12825 | MEDIUM | 5.3 | 0.5% | Jan 17, 2026 | The User Registration Using Contact Form 7 plugin for WordPress is vulnerable to unauthorized access of data due to a mi... |
| CVE-2025-12168 | MEDIUM | 4.3 | 0.2% | Jan 17, 2026 | The Phrase TMS Integration for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to ... |
| CVE-2025-14463 | MEDIUM | 5.3 | 0.3% | Jan 17, 2026 | The Payment Button for PayPal plugin for WordPress is vulnerable to unauthorized order creation in all versions up to, a... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now