2025 CVE Vulnerabilities
45,145 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-52881 | HIGH | 7.5 | 0.5% | Nov 6, 2025 | runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7, 1.3.2 and ... |
| CVE-2025-12790 | HIGH | 7.4 | 0.3% | Nov 6, 2025 | A flaw was found in Rubygem MQTT. By default, the package used to not have hostname validation, resulting in possible Ma... |
| CVE-2025-12489 | HIGH | 7.8 | 1.3% | Nov 6, 2025 | evernote-mcp-server openBrowser Command Injection Privilege Escalation Vulnerability. This vulnerability allows local at... |
| CVE-2025-12486 | HIGH | 8.8 | 0.4% | Nov 6, 2025 | Heimdall Data Database Proxy Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote ... |
| CVE-2025-52565 | HIGH | 7.5 | 0.5% | Nov 6, 2025 | runc is a CLI tool for spawning and running containers according to the OCI specification. Versions 1.0.0-rc3 through 1.... |
| CVE-2025-34239 | HIGH | 7.2 | 1.6% | Nov 6, 2025 | Advantech WebAccess/VPN versions prior to 1.1.5 contain a command injection vulnerability in AppManagementController.app... |
| CVE-2025-12490 | HIGH | 8.8 | 18.7% | Nov 6, 2025 | Netgate pfSense CE Suricata Path Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attacke... |
| CVE-2025-63551 | HIGH | 7.5 | 0.4% | Nov 6, 2025 | A Server-Side Request Forgery (SSRF) vulnerability, achievable through an XML External Entity (XXE) injection, exists in... |
| CVE-2025-60541 | HIGH | 7.3 | 0.2% | Nov 6, 2025 | A Server-Side Request Forgery (SSRF) in the /api/proxy/ component of linshenkx prompt-optimizer v1.3.0 to v1.4.2 allows ... |
| CVE-2025-31133 | HIGH | 7.8 | 0.7% | Nov 6, 2025 | runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7 and below, ... |
| CVE-2025-27919 | HIGH | 8.2 | 0.3% | Nov 6, 2025 | An issue was discovered in AnyDesk through 9.0.4. A remotely connected user with the "Control my device" permission can ... |
| CVE-2025-27917 | HIGH | 7.5 | 0.4% | Nov 6, 2025 | An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.... |
| CVE-2025-27916 | HIGH | 7.5 | 0.3% | Nov 6, 2025 | An issue was discovered in AnyDesk for Windows before 9.0.6 and AnyDesk for Android before 8.0.0. When the connection be... |
| CVE-2025-63589 | HIGH | 7.1 | 0.3% | Nov 6, 2025 | A reflected XSS vulnerability exists in CMSimple_XH 1.8's index.php router when attacker-controlled path segments are no... |
| CVE-2025-63588 | HIGH | 7.1 | 0.3% | Nov 6, 2025 | An unauthenticated reflected cross-site scripting vulnerability in the query handling of CMSimpleXH allows remote attack... |
| CVE-2025-63560 | HIGH | 7.5 | 0.6% | Nov 6, 2025 | An issue in KiloView Dual Channel 4k HDMI & 3G-SDI HEVC Video Encoder Firmware v.1.20.0006 allows a remote attacker to c... |
| CVE-2025-12485 | HIGH | 8.8 | 0.6% | Nov 6, 2025 | Improper privilege management during pre-MFA cookie handling in Devolutions Server allows a low-privileged authenticated... |
| CVE-2025-10885 | HIGH | 7.8 | 0.1% | Nov 6, 2025 | A maliciously crafted file, when executed on the victim's machine, can lead to privilege escalation to NT AUTHORITY/SYST... |
| CVE-2025-64287 | HIGH | 8.1 | 0.4% | Nov 6, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-64232 | HIGH | 7.1 | 0.2% | Nov 6, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in icopydoc Import fr... |
| CVE-2025-64224 | HIGH | 7.1 | 0.2% | Nov 6, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand C... |
| CVE-2025-64198 | HIGH | 7.1 | 0.2% | Nov 6, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in appscreo Easy Soci... |
| CVE-2025-64196 | HIGH | 7.1 | 0.2% | Nov 6, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pluggabl Booster f... |
| CVE-2025-63307 | HIGH | 8.1 | 0.3% | Nov 6, 2025 | alexusmai laravel-file-manager 3.3.1 is vulnerable to Cross Site Scripting (XSS). The application permits user-controlle... |
| CVE-2025-62076 | HIGH | 7.1 | 0.2% | Nov 6, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ido Kobelkowsky Si... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now