2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-60019 | LOW | 3.7 | 0.4% | Sep 25, 2025 | glib-networking's OpenSSL backend fails to properly check the return value of memory allocation routines. An out of memo... |
| CVE-2025-36857 | LOW | 3.3 | 0.1% | Sep 25, 2025 | Rapid7 Appspider Pro versions below 7.5.021, suffer from a broken access control vulnerability in the application's conf... |
| CVE-2025-10949 | LOW | 2.4 | 0.3% | Sep 25, 2025 | A vulnerability was found in Changsha Developer Technology iView Editor up to 1.1.1. This impacts an unknown function of... |
| CVE-2025-59422 | LOW | 3.1 | 0.2% | Sep 25, 2025 | Dify is an open-source LLM app development platform. In version 1.8.1, a broken access control vulnerability on the /con... |
| CVE-2025-10946 | LOW | 3.5 | 0.3% | Sep 25, 2025 | A vulnerability was detected in nuz007 smsboom up to 01b2f35bbbc23f3e0f60f38ca0e3d1b286f8d674. The affected element is a... |
| CVE-2025-10945 | LOW | 3.5 | 0.3% | Sep 25, 2025 | A security vulnerability has been detected in nuz007 smsboom up to 01b2f35bbbc23f3e0f60f38ca0e3d1b286f8d674. Impacted is... |
| CVE-2025-10944 | LOW | 3.5 | 0.3% | Sep 25, 2025 | A weakness has been identified in yi-ge get-header-ip up to 589b23d0eb0043c310a6a13ce4bbe2505d0d0b15. This issue affects... |
| CVE-2025-10943 | LOW | 3.5 | 0.3% | Sep 25, 2025 | A security flaw has been discovered in MikeCen WeChat-Face-Recognition up to 6e3f72bf8547d80b59e330f1137e4aa505f492c1. T... |
| CVE-2025-10909 | LOW | 2.4 | 0.3% | Sep 24, 2025 | A security flaw has been discovered in Mangati NovoSGA up to 2.2.9. The impacted element is an unknown function of the f... |
| CVE-2025-23346 | LOW | 3.3 | 0.1% | Sep 24, 2025 | NVIDIA CUDA Toolkit contains a vulnerability in cuobjdump, where an unprivileged user can cause a NULL pointer dereferen... |
| CVE-2025-23340 | LOW | 3.3 | 0.2% | Sep 24, 2025 | NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-b... |
| CVE-2025-23271 | LOW | 3.3 | 0.2% | Sep 24, 2025 | NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-b... |
| CVE-2025-23255 | LOW | 3.3 | 0.1% | Sep 24, 2025 | NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary where a user may cause an out-of-... |
| CVE-2025-23248 | LOW | 3.3 | 0.1% | Sep 24, 2025 | NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-b... |
| CVE-2025-0672 | LOW | 3.8 | 0.2% | Sep 23, 2025 | An authentication bypass vulnerability exists in multiple WSO2 products when FIDO authentication is enabled. When a user... |
| CVE-2025-8282 | LOW | 3.5 | 0.2% | Sep 23, 2025 | The SureForms WordPress plugin before 1.9.1 does not sanitise and escape some parameters when outputing them in the pag... |
| CVE-2025-10823 | LOW | 3.3 | 0.1% | Sep 23, 2025 | A vulnerability was found in axboe fio up to 3.41. This affects the function str_buffer_pattern_cb of the file options.c... |
| CVE-2025-59526 | LOW | 2.7 | 0.4% | Sep 22, 2025 | mailgen is a Node.js package that generates responsive HTML e-mails for sending transactional mail. Prior to version 2.0... |
| CVE-2025-58012 | LOW | 3.8 | 0.3% | Sep 22, 2025 | Authorization Bypass Through User-Controlled Key vulnerability in Alex Content Mask content-mask allows Exploiting Incor... |
| CVE-2025-58009 | LOW | 3.8 | 0.3% | Sep 22, 2025 | Missing Authorization vulnerability in codepeople CP Multi View Event Calendar cp-multi-view-calendar allows Exploiting... |
| CVE-2025-10778 | LOW | 3.1 | 0.2% | Sep 22, 2025 | A vulnerability has been found in Smartstore up to 6.2.0. The affected element is an unknown function of the file /check... |
| CVE-2025-10776 | LOW | 3.7 | 0.2% | Sep 22, 2025 | A vulnerability was detected in LionCoders SalePro POS up to 5.5.0. This issue affects some unknown processing of the co... |
| CVE-2025-10761 | LOW | 3.7 | 0.5% | Sep 21, 2025 | A vulnerability has been found in Harness 3.3.0. Affected is an unknown function of the file /api/v1/login of the compon... |
| CVE-2025-59427 | LOW | 2.9 | 0.4% | Sep 19, 2025 | The Cloudflare Vite plugin enables a full-featured integration between Vite and the Workers runtime. When utilising the ... |
| CVE-2025-59692 | LOW | 3.7 | 0.2% | Sep 18, 2025 | PureVPN client applications on Linux through September 2025 mishandle firewalling. They flush the system's existing ipta... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now