2025 CVE Vulnerabilities
45,324 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-14058 | LOW | 3.2 | 0.1% | Jan 14, 2026 | A potential missing authentication vulnerability was reported in some Lenovo Tablets that could allow an unauthorized us... |
| CVE-2025-13455 | HIGH | 7.8 | 0.1% | Jan 14, 2026 | A vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to bypass T... |
| CVE-2025-13454 | MEDIUM | 6.8 | 0.1% | Jan 14, 2026 | A potential vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user t... |
| CVE-2025-13453 | MEDIUM | 5.1 | 0.1% | Jan 14, 2026 | A potential vulnerability was reported in some ThinkPlus USB drives that could allow a user with physical access to read... |
| CVE-2025-13154 | MEDIUM | 6.8 | 0.1% | Jan 14, 2026 | An improper link following vulnerability was reported in the SmartPerformanceAddin for Lenovo Vantage that could allow a... |
| CVE-2025-12533 | — | — | — | Jan 14, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2025-12166 | HIGH | 7.5 | 0.3% | Jan 14, 2026 | The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to bli... |
| CVE-2025-71166 | MEDIUM | 5.4 | 0.2% | Jan 14, 2026 | Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting (XSS) vulnerability in the admi... |
| CVE-2025-71165 | MEDIUM | 5.4 | 0.2% | Jan 14, 2026 | Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting (XSS) vulnerability in the admi... |
| CVE-2025-71164 | MEDIUM | 5.4 | 0.2% | Jan 14, 2026 | Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting (XSS) vulnerability in the Edit... |
| CVE-2025-33206 | HIGH | 7.8 | 0.9% | Jan 14, 2026 | NVIDIA NSIGHT Graphics for Linux contains a vulnerability where an attacker could cause command injection. A successful ... |
| CVE-2025-14557 | MEDIUM | 4.8 | 0.2% | Jan 14, 2026 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Face... |
| CVE-2025-14556 | MEDIUM | 5.4 | 0.2% | Jan 14, 2026 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Flag... |
| CVE-2025-11224 | MEDIUM | 5.4 | 0.3% | Jan 14, 2026 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 18.3.6, 18.4 before 18.4.4, and ... |
| CVE-2025-71021 | HIGH | 7.5 | 0.4% | Jan 14, 2026 | Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serverName parameter of the sub_65A28 function.... |
| CVE-2025-70747 | HIGH | 7.5 | 0.5% | Jan 14, 2026 | Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the serviceName parameter of the sub_65A28 function... |
| CVE-2025-65397 | MEDIUM | 6.8 | 0.3% | Jan 14, 2026 | An insecure authentication mechanism in the safe_exec.sh startup script of Blurams Flare Camera version 24.1114.151.929 ... |
| CVE-2025-63644 | MEDIUM | 5.4 | 0.3% | Jan 14, 2026 | A stored cross-site scripting (XSS) vulnerability exists in pH7Software pH7-Social-Dating-CMS 17.9.1 in the user profile... |
| CVE-2025-70968 | CRITICAL | 9.8 | 0.5% | Jan 14, 2026 | FreeImage 3.18.0 contains a Use After Free in PluginTARGA.cpp;loadRLE(). |
| CVE-2025-67835 | MEDIUM | 6.5 | 0.3% | Jan 14, 2026 | Paessler PRTG Network Monitor before 25.4.114 allows Denial-of-Service (DoS) by an authenticated attacker via the Notifi... |
| CVE-2025-67834 | MEDIUM | 5.4 | 0.2% | Jan 14, 2026 | Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the filter parameter. |
| CVE-2025-67833 | MEDIUM | 6.1 | 0.2% | Jan 14, 2026 | Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the tag parameter. |
| CVE-2025-65396 | MEDIUM | 6.1 | 0.2% | Jan 14, 2026 | A vulnerability in the boot process of Blurams Flare Camera version 24.1114.151.929 and earlier allows a physically prox... |
| CVE-2025-37185 | MEDIUM | 4.8 | 0.2% | Jan 14, 2026 | Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated re... |
| CVE-2025-37184 | CRITICAL | 9.8 | 0.6% | Jan 14, 2026 | A vulnerability exists in an Orchestrator service that could allow an unauthenticated remote attacker to bypass multi-fa... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now