2025 CVE Vulnerabilities
45,325 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-11981 | MEDIUM | 4.9 | 0.3% | Nov 14, 2025 | The School Management System – WPSchoolPress plugin for WordPress is vulnerable to SQL Injection via the 'SCodes' parame... |
| CVE-2025-11794 | MEDIUM | 4.9 | 0.2% | Nov 14, 2025 | Mattermost versions 10.11.x <= 10.11.3, 10.5.x <= 10.5.11, 10.12.x <= 10.12.0 fail to sanitize user data which allows sy... |
| CVE-2025-55073 | MEDIUM | 5.3 | 0.2% | Nov 14, 2025 | Mattermost versions 10.11.x <= 10.11.3, 10.5.x <= 10.5.11, 10.12.x <= 10.12.0 fail to validate the relationship between ... |
| CVE-2025-41436 | MEDIUM | 4.3 | 0.1% | Nov 14, 2025 | Mattermost versions <11.0 fail to properly enforce the "Allow users to view archived channels" setting which allows regu... |
| CVE-2025-11776 | MEDIUM | 4.3 | 0.2% | Nov 14, 2025 | Mattermost versions <11 fail to properly restrict access to archived channel search API which allows guest users to disc... |
| CVE-2025-13160 | MEDIUM | 6.9 | 0.3% | Nov 14, 2025 | IQ-Support developed by IQ Service International has a Exposure of Sensitive Information vulnerability, allowing unauthe... |
| CVE-2025-9479 | MEDIUM | 4.3 | 0.2% | Nov 14, 2025 | Out of bounds read in V8 in Google Chrome prior to 133.0.6943.141 allowed a remote attacker to potentially exploit heap ... |
| CVE-2025-13107 | MEDIUM | 4.3 | 0.2% | Nov 14, 2025 | Inappropriate implementation in Compositing in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to perform... |
| CVE-2025-13102 | MEDIUM | 4.3 | 0.2% | Nov 14, 2025 | Inappropriate implementation in WebApp Installs in Google Chrome on Android prior to 134.0.6998.35 allowed a remote atta... |
| CVE-2025-13097 | MEDIUM | 5.4 | 0.2% | Nov 14, 2025 | Inappropriate implementation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker to potentiall... |
| CVE-2025-64753 | MEDIUM | 6.5 | 0.2% | Nov 13, 2025 | grist-core is a spreadsheet hosting server. Prior to version 1.7.7, a user with only partial read access to a document c... |
| CVE-2025-64752 | MEDIUM | 6.5 | 0.2% | Nov 13, 2025 | grist-core is a spreadsheet hosting server. Prior to version 1.7.7, a user with access to any document on a Grist instal... |
| CVE-2025-64749 | MEDIUM | 4.3 | 0.3% | Nov 13, 2025 | Directus is a real-time API and App dashboard for managing SQL database content. An observable difference in error messa... |
| CVE-2025-64748 | MEDIUM | 6.5 | 0.2% | Nov 13, 2025 | Directus is a real-time API and App dashboard for managing SQL database content. A vulnerability in versions prior to 11... |
| CVE-2025-64747 | MEDIUM | 5.5 | 0.2% | Nov 13, 2025 | Directus is a real-time API and App dashboard for managing SQL database content. A stored cross-site scripting (XSS) vul... |
| CVE-2025-64746 | MEDIUM | 5.4 | 0.2% | Nov 13, 2025 | Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 11.13.0, Directus does... |
| CVE-2025-64745 | MEDIUM | 6.1 | 0.2% | Nov 13, 2025 | Astro is a web framework. Starting in version 5.2.0 and prior to version 5.15.6, a Reflected Cross-Site Scripting (XSS) ... |
| CVE-2025-4619 | MEDIUM | 6.6 | 0.5% | Nov 13, 2025 | A denial-of-service (DoS) vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to reb... |
| CVE-2025-47222 | MEDIUM | 6.5 | 0.3% | Nov 13, 2025 | A class name enumeration was found in Keyfactor SignServer versions prior to 7.3.2. Setting any chosen class name to any... |
| CVE-2025-47221 | MEDIUM | 5.3 | 0.2% | Nov 13, 2025 | An arbitrary file write was found in Keyfactor SignServer versions prior to 7.3.2. The properties ARCHIVETODISK_FILENAME... |
| CVE-2025-47220 | MEDIUM | 5.3 | 0.2% | Nov 13, 2025 | A local file enumeration was found in Keyfactor SignServer versions prior to 7.3.2 .The property VISIBLE_SIGNATURE_CUSTO... |
| CVE-2025-60702 | MEDIUM | 6.5 | 2.3% | Nov 13, 2025 | A command injection vulnerability exists in the TOTOLINK A950RG Router firmware V5.9c.4592_B20191022_ALL within the `sys... |
| CVE-2025-60699 | MEDIUM | 6.5 | 0.8% | Nov 13, 2025 | A buffer overflow vulnerability exists in the TOTOLINK A950RG Router firmware V5.9c.4592_B20191022_ALL within the `globa... |
| CVE-2025-55810 | MEDIUM | 6.8 | 0.2% | Nov 13, 2025 | A vulnerability was found in Alaga Home Security WiFi Camera 3K (model S-CW2503C-H) with hardware version V03 and firmwa... |
| CVE-2025-46370 | MEDIUM | 5.5 | 0.1% | Nov 13, 2025 | Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain a Process Control vulnerability. A low pr... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now