2025 CVE Vulnerabilities
45,325 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-34312 | HIGH | 8.8 | 2.3% | Oct 28, 2025 | IPFire versions prior to 2.29 (Core Update 198) contain a command injection vulnerability that allows an authenticated a... |
| CVE-2025-34311 | HIGH | 8.8 | 13.8% | Oct 28, 2025 | IPFire versions prior to 2.29 (Core Update 198) contain a command injection vulnerability that allows an authenticated a... |
| CVE-2025-53855 | HIGH | 7.8 | 0.3% | Oct 28, 2025 | An out-of-bounds write vulnerability exists in the XML parser functionality of GCC Productions Inc. Fade In 4.2.0. A spe... |
| CVE-2025-53814 | HIGH | 7.8 | 0.3% | Oct 28, 2025 | A use-after-free vulnerability exists in the XML parser functionality of GCC Productions Inc. Fade In 4.2.0. A specially... |
| CVE-2025-1038 | HIGH | 7.5 | 0.3% | Oct 28, 2025 | The “Diagnostics Tools” page of the web-based configuration utility does not properly validate user-controlled input, al... |
| CVE-2025-1037 | HIGH | 7.5 | 0.1% | Oct 28, 2025 | By making minor configuration changes to the TropOS 4th Gen device, an authenticated user with the ability to run user l... |
| CVE-2025-1036 | HIGH | 8.7 | 1.1% | Oct 28, 2025 | Command injection vulnerability exists in the “Logging” page of the web-based configuration utility. An authenticated us... |
| CVE-2025-40082 | HIGH | 7.1 | 0.2% | Oct 28, 2025 | In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix slab-out-of-bounds read in hfsplus_uni... |
| CVE-2025-40081 | HIGH | 7.8 | 0.2% | Oct 28, 2025 | In the Linux kernel, the following vulnerability has been resolved: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() ... |
| CVE-2025-40079 | HIGH | 7.8 | 0.2% | Oct 28, 2025 | In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Sign extend struct ops return values pr... |
| CVE-2025-40075 | HIGH | 8.1 | 0.2% | Oct 28, 2025 | In the Linux kernel, the following vulnerability has been resolved: tcp_metrics: use dst_dev_net_rcu() Replace three d... |
| CVE-2025-40069 | HIGH | 7.8 | 0.2% | Oct 28, 2025 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix obj leak in VM_BIND error path If we ... |
| CVE-2025-40068 | HIGH | 8.4 | 0.2% | Oct 28, 2025 | In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: Fix integer overflow in run_unpack() Th... |
| CVE-2025-40067 | HIGH | 7.8 | 0.2% | Oct 28, 2025 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject index allocation if $BITMAP is emp... |
| CVE-2025-40064 | HIGH | 7.8 | 0.1% | Oct 28, 2025 | In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in __pnet_find_base_ndev().... |
| CVE-2025-40063 | HIGH | 7 | 0.2% | Oct 28, 2025 | In the Linux kernel, the following vulnerability has been resolved: crypto: comp - Use same definition of context alloc... |
| CVE-2025-40061 | HIGH | 7.8 | 0.2% | Oct 28, 2025 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix race in do_task() when draining When... |
| CVE-2025-40058 | HIGH | 8.8 | 0.2% | Oct 28, 2025 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Disallow dirty tracking if incoherent p... |
| CVE-2025-40054 | HIGH | 7.8 | 0.1% | Oct 28, 2025 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix UAF issue in f2fs_merge_page_bio() As JY... |
| CVE-2025-40053 | HIGH | 7.5 | 0.2% | Oct 28, 2025 | In the Linux kernel, the following vulnerability has been resolved: net: dlink: handle copy_thresh allocation failure ... |
| CVE-2025-40051 | HIGH | 7.8 | 0.2% | Oct 28, 2025 | In the Linux kernel, the following vulnerability has been resolved: vhost: vringh: Modify the return value check The r... |
| CVE-2025-40048 | HIGH | 7.5 | 0.2% | Oct 28, 2025 | In the Linux kernel, the following vulnerability has been resolved: uio_hv_generic: Let userspace take care of interrup... |
| CVE-2025-40047 | HIGH | 7.8 | 0.2% | Oct 28, 2025 | In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: always prune wait queue entry in i... |
| CVE-2025-40046 | HIGH | 8.6 | 0.2% | Oct 28, 2025 | In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix overshooting recv limit It's re... |
| CVE-2025-40045 | HIGH | 7.8 | 0.2% | Oct 28, 2025 | In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd937x: set the comp soundwire port ... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now