2025 CVE Vulnerabilities
45,325 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-13020 | HIGH | 8.8 | 0.2% | Nov 11, 2025 | Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thu... |
| CVE-2025-13019 | HIGH | 8.1 | 0.2% | Nov 11, 2025 | Same-origin policy bypass in the DOM: Workers component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5,... |
| CVE-2025-13018 | HIGH | 8.1 | 0.2% | Nov 11, 2025 | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunde... |
| CVE-2025-13017 | HIGH | 8.1 | 0.2% | Nov 11, 2025 | Same-origin policy bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 145, Firefox ESR ... |
| CVE-2025-13016 | HIGH | 7.5 | 0.4% | Nov 11, 2025 | Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 145, Fir... |
| CVE-2025-13014 | HIGH | 8.8 | 0.2% | Nov 11, 2025 | Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR... |
| CVE-2025-13012 | HIGH | 7.5 | 0.2% | Nov 11, 2025 | Race condition in the Graphics component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 11... |
| CVE-2025-10918 | HIGH | 7.1 | 0.2% | Nov 11, 2025 | Insecure default permissions in the agent of Ivanti Endpoint Manager before version 2024 SU4 allows a local authenticate... |
| CVE-2025-11959 | HIGH | 8.1 | 0.2% | Nov 11, 2025 | Files or Directories Accessible to External Parties, Exposure of Private Personal Information to an Unauthorized Actor v... |
| CVE-2025-9223 | HIGH | 8.8 | 4.2% | Nov 11, 2025 | Zohocorp ManageEngine Applications Manager versions 178100 and below are vulnerable to authenticated command injection v... |
| CVE-2025-11862 | HIGH | 8.4 | 0.3% | Nov 11, 2025 | A security issue was discovered within Verve Asset Manager allowing unauthorized read-only users to read, update, and de... |
| CVE-2025-11697 | HIGH | 8.9 | 0.1% | Nov 11, 2025 | A local code execution security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability a... |
| CVE-2025-11696 | HIGH | 8.9 | 0.1% | Nov 11, 2025 | A local server-side request forgery (SSRF) security issue exists within Studio 5000® Simulation Interface™ via the API. ... |
| CVE-2025-11085 | HIGH | 8.6 | 0.3% | Nov 11, 2025 | A security issue exists within DataMosaix™ Private Cloud allowing for Persistent XSS. This vulnerability can result in t... |
| CVE-2025-11084 | HIGH | 7.6 | 0.1% | Nov 11, 2025 | A security issue exists within DataMosaix™ Private Cloud, allowing attackers to bypass MFA during setup and obtain a val... |
| CVE-2025-10161 | HIGH | 7.3 | 0.2% | Nov 11, 2025 | Improper Restriction of Excessive Authentication Attempts, Client-Side Enforcement of Server-Side Security, Reliance on ... |
| CVE-2025-12846 | HIGH | 8.8 | 0.6% | Nov 11, 2025 | The Blocksy Companion plugin for WordPress is vulnerable to authenticated arbitrary file upload in all versions up to, a... |
| CVE-2025-10714 | HIGH | 8.4 | 0.1% | Nov 11, 2025 | AXIS Optimizer was vulnerable to an unquoted search path vulnerability, which could potentially lead to privilege escala... |
| CVE-2025-11855 | HIGH | 7.5 | 0.2% | Nov 11, 2025 | The age-restriction WordPress plugin through 3.0.2 does not have authorisation in the age_restrictionRemoteSupportReques... |
| CVE-2025-11307 | HIGH | 8.8 | 1.9% | Nov 11, 2025 | The WP Go Maps (formerly WP Google Maps) WordPress plugin before 9.0.48 does not sanitize user input provided via an AJA... |
| CVE-2025-12637 | HIGH | 8.8 | 0.5% | Nov 11, 2025 | The Elastic Theme Editor plugin for WordPress is vulnerable to arbitrary file uploads due to a dynamic code generation f... |
| CVE-2025-11521 | HIGH | 8.1 | 0.4% | Nov 11, 2025 | The Astra Security Suite – Firewall & Malware Scan plugin for WordPress is vulnerable to arbitrary file uploads due to i... |
| CVE-2025-11451 | HIGH | 7.5 | 0.4% | Nov 11, 2025 | The Auto Amazon Links – Amazon Associates Affiliate Plugin plugin for WordPress is vulnerable to arbitrary files reads i... |
| CVE-2025-11168 | HIGH | 8.8 | 0.3% | Nov 11, 2025 | The Mementor Core plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.2.5... |
| CVE-2025-42940 | HIGH | 7.5 | 0.4% | Nov 11, 2025 | SAP CommonCryptoLib does not perform necessary boundary checks during pre-authentication parsing of manipulated ASN.1 da... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now