2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-59451 | LOW | 3.5 | 0.3% | Oct 6, 2025 | The YoSmart YoLink application through 2025-10-02 has session tokens with unexpectedly long lifetimes. |
| CVE-2025-59447 | LOW | 2.2 | 0.2% | Oct 6, 2025 | The YoSmart YoLink Smart Hub device 0382 exposes a UART debug interface. An attacker with direct physical access can lev... |
| CVE-2025-61985 | LOW | 3.6 | 0.1% | Oct 6, 2025 | ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a Prox... |
| CVE-2025-61984 | LOW | 3.6 | 0.5% | Oct 6, 2025 | ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources... |
| CVE-2025-11333 | LOW | 2.4 | 0.3% | Oct 6, 2025 | A vulnerability was identified in langleyfcu Online Banking System up to 57437e6400ce0ae240e692c24e6346b8d0c17d7a. This ... |
| CVE-2025-11322 | LOW | 3.7 | 0.4% | Oct 6, 2025 | A flaw has been found in Mangati NovoSGA up to 2.2.12. The impacted element is an unknown function of the file /novosga.... |
| CVE-2025-11308 | LOW | 3.5 | 0.3% | Oct 5, 2025 | A vulnerability was identified in Vanderlande Baggage 360 7.0.0. This issue affects some unknown processing of the file ... |
| CVE-2025-11283 | LOW | 2.4 | 0.4% | Oct 5, 2025 | A vulnerability was determined in Frappe LMS 2.35.0. This affects an unknown function of the component Course Handler. E... |
| CVE-2025-11280 | LOW | 3.7 | 0.5% | Oct 5, 2025 | A flaw has been found in Frappe LMS 2.35.0. Impacted is an unknown function of the file /files/ of the component Assignm... |
| CVE-2025-11276 | LOW | 3.5 | 0.3% | Oct 5, 2025 | A security flaw has been discovered in Rebuild up to 4.1.3. Affected by this issue is some unknown functionality of the ... |
| CVE-2025-61677 | LOW | 2.5 | 0.2% | Oct 3, 2025 | DataChain is a Python-based AI-data warehouse for transforming and analyzing unstructured data. Versions 0.34.1 and belo... |
| CVE-2025-10306 | LOW | 3.8 | 0.3% | Oct 3, 2025 | The Backup Bolt plugin for WordPress is vulnerable to arbitrary file downloads and backup location writes in all version... |
| CVE-2025-54089 | LOW | 3.4 | 0.2% | Oct 2, 2025 | CVE-2025-54089 is a cross-site scripting vulnerability in versions of secure access prior to 14.10. Attackers with admin... |
| CVE-2025-54087 | LOW | 2.6 | 0.2% | Oct 2, 2025 | CVE-2025-54087 is a server-side request forgery vulnerability in Secure Access prior to version 14.10. Attackers with ad... |
| CVE-2025-54086 | LOW | 3.3 | 0.2% | Oct 2, 2025 | CVE-2025-54086 is an excess permissions vulnerability in the Warehouse component of Absolute Secure Access prior to vers... |
| CVE-2025-58769 | LOW | 3.3 | 0.4% | Oct 1, 2025 | auth0-PHP is an SDK for Auth0 Authentication and Management APIs. In versions 3.3.0 through 8.16.0, the Bulk User Import... |
| CVE-2025-43718 | LOW | 2.9 | 0.1% | Oct 1, 2025 | Poppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and a SIGSEGV via deeply nested structures within t... |
| CVE-2025-56675 | LOW | 3.5 | 0.2% | Sep 30, 2025 | The EKEN video doorbell T6 BT60PLUS_MAIN_V1.0_GC1084_20230531 periodically sends debug logs to the EKEN cloud servers wi... |
| CVE-2025-23291 | LOW | 2.4 | 0.1% | Sep 30, 2025 | NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an User/Attacker may cause... |
| CVE-2025-11195 | LOW | 3.3 | 0.1% | Sep 30, 2025 | Rapid7 AppSpider Pro versions below 7.5.021 suffer from a project name validation vulnerability, whereby an attacker can... |
| CVE-2025-59163 | LOW | 2.1 | 0.4% | Sep 29, 2025 | vet is an open source software supply chain security tool. Versions 1.12.4 and below are vulnerable to a DNS rebinding a... |
| CVE-2025-55795 | LOW | 3.5 | 0.3% | Sep 29, 2025 | The openml/openml.org web application version v2.0.20241110 uses incremental user IDs and insufficient email ownership v... |
| CVE-2025-11137 | LOW | 3.5 | 0.3% | Sep 29, 2025 | A vulnerability has been found in Gstarsoft GstarCAD up to 9.4.0. This affects an unknown function of the component File... |
| CVE-2025-11134 | LOW | 2.4 | 0.3% | Sep 29, 2025 | A security vulnerability has been detected in Cudy TR1200 1.16.3-20230804-164635. Impacted is an unknown function of the... |
| CVE-2025-10173 | LOW | 2.7 | 0.2% | Sep 26, 2025 | The ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution plugin for WordPress is vulnerable ... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now