2025 CVE Vulnerabilities
45,325 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-46494 | HIGH | 7.1 | 0.2% | Jan 7, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themesgrove Widget... |
| CVE-2025-46434 | MEDIUM | 6.5 | 0.2% | Jan 7, 2026 | Missing Authorization vulnerability in POSIMYTH Innovation The Plus Addons for Elementor Pro theplus_elementor_addon all... |
| CVE-2025-46256 | MEDIUM | 6.4 | 0.3% | Jan 7, 2026 | Path Traversal: '.../...//' vulnerability in SigmaPlugin Advanced Database Cleaner PRO allows Path Traversal.This issue ... |
| CVE-2025-32303 | CRITICAL | 9.3 | 0.3% | Jan 7, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mojoomla WPCHURCH ... |
| CVE-2025-9611 | HIGH | 7.2 | 1.2% | Jan 7, 2026 | Microsoft Playwright MCP Server versions prior to 0.0.40 fails to validate the Origin header on incoming connections. Th... |
| CVE-2025-69344 | MEDIUM | 4.3 | 0.2% | Jan 7, 2026 | Missing Authorization vulnerability in themehunk Oneline Lite oneline-lite allows Exploiting Incorrectly Configured Acce... |
| CVE-2025-69333 | MEDIUM | 4.3 | 0.2% | Jan 7, 2026 | Missing Authorization vulnerability in Crocoblock JetEngine jet-engine allows Exploiting Incorrectly Configured Access C... |
| CVE-2025-69082 | HIGH | 7.1 | 0.2% | Jan 7, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Frenify Arlo arlo ... |
| CVE-2025-69081 | HIGH | 8.1 | 0.5% | Jan 7, 2026 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-69080 | HIGH | 8.1 | 0.5% | Jan 7, 2026 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-68637 | CRITICAL | 9.1 | 0.2% | Jan 7, 2026 | The Uniffle HTTP client is configured to trust all SSL certificates and disables hostname verification by default. This... |
| CVE-2025-47396 | HIGH | 7.8 | 0.1% | Jan 7, 2026 | Memory corruption occurs when a secure application is launched on a device with insufficient memory. |
| CVE-2025-47395 | MEDIUM | 6.5 | 0.1% | Jan 7, 2026 | Transient DOS while parsing a WLAN management frame with a Vendor Specific Information Element. |
| CVE-2025-47394 | HIGH | 7.8 | 0.1% | Jan 7, 2026 | Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations. |
| CVE-2025-47393 | HIGH | 7.8 | 0.1% | Jan 7, 2026 | Memory corruption when accessing resources in kernel driver. |
| CVE-2025-47388 | HIGH | 7.8 | 0.1% | Jan 7, 2026 | Memory corruption while passing pages to DSP with an unaligned starting address. |
| CVE-2025-47380 | HIGH | 7.8 | 0.1% | Jan 7, 2026 | Memory corruption while preprocessing IOCTLs in sensors. |
| CVE-2025-47369 | MEDIUM | 5.5 | 0.1% | Jan 7, 2026 | Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a ses... |
| CVE-2025-47356 | HIGH | 7.8 | 0.1% | Jan 7, 2026 | Memory Corruption when multiple threads concurrently access and modify shared resources. |
| CVE-2025-47348 | HIGH | 7.8 | 0.1% | Jan 7, 2026 | Memory corruption while processing identity credential operations in the trusted application. |
| CVE-2025-47346 | HIGH | 7.8 | 0.1% | Jan 7, 2026 | Memory corruption while processing a secure logging command in the trusted application. |
| CVE-2025-47345 | HIGH | 8.4 | 0.1% | Jan 7, 2026 | Cryptographic issue may occur while encrypting license data. |
| CVE-2025-47344 | MEDIUM | 6.4 | 0.1% | Jan 7, 2026 | Memory corruption while handling sensor utility operations. |
| CVE-2025-47343 | HIGH | 7.8 | 0.1% | Jan 7, 2026 | Memory corruption while processing a video session to set video parameters. |
| CVE-2025-47339 | HIGH | 7.8 | 0.1% | Jan 7, 2026 | Memory corruption while deinitializing a HDCP session. |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now