2025 CVE Vulnerabilities
45,325 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-61101 | HIGH | 7.5 | 0.5% | Oct 27, 2025 | FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_r... |
| CVE-2025-59151 | HIGH | 8.2 | 0.4% | Oct 27, 2025 | Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level advertisement and internet tracker bloc... |
| CVE-2025-58356 | HIGH | 8.3 | 0.1% | Oct 27, 2025 | Constellation is the first Confidential Kubernetes. The Constellation CVM image uses LUKS2-encrypted volumes for persist... |
| CVE-2025-61100 | HIGH | 7.5 | 0.5% | Oct 27, 2025 | FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the ospf_opaque_lsa_dum... |
| CVE-2025-61099 | HIGH | 7.5 | 0.5% | Oct 27, 2025 | FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the opaque_info_detail ... |
| CVE-2025-36007 | HIGH | 7.8 | 0.1% | Oct 27, 2025 | IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to privilege escalation due to imprope... |
| CVE-2025-55752 | HIGH | 7.5 | 66.5% | Oct 27, 2025 | Relative Path Traversal vulnerability in Apache Tomcat. The fix for bug 60013 introduced a regression where the r... |
| CVE-2025-12363 | HIGH | 7.5 | 0.3% | Oct 27, 2025 | Email Password Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. |
| CVE-2025-54968 | HIGH | 8.8 | 0.4% | Oct 27, 2025 | An issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Service does not require authentication. In s... |
| CVE-2025-27225 | HIGH | 7.5 | 17.6% | Oct 27, 2025 | TRUfusion Enterprise through 7.10.4.0 exposes the /trufusionPortal/jsp/internal_admin_contact_login.jsp endpoint to unau... |
| CVE-2025-27223 | HIGH | 7.5 | 2.1% | Oct 27, 2025 | TRUfusion Enterprise through 7.10.4.0 exposes the encrypted COOKIEID as an authentication mechanism for some endpoints s... |
| CVE-2025-27222 | HIGH | 8.6 | 1.9% | Oct 27, 2025 | TRUfusion Enterprise through 7.10.4.0 uses the /trufusionPortal/getCobrandingData endpoint to retrieve files. However, t... |
| CVE-2025-12295 | HIGH | 8.1 | 0.4% | Oct 27, 2025 | A weakness has been identified in D-Link DAP-2695 2.00RC13. The affected element is the function sub_40C6B8 of the compo... |
| CVE-2025-61247 | HIGH | 8.2 | 0.2% | Oct 27, 2025 | indieka900 online-shopping-system-php 1.0 is vulnerable to SQL Injection in the password parameter of login.php. |
| CVE-2025-60425 | HIGH | 8.6 | 0.9% | Oct 27, 2025 | Nagios Fusion v2024R1.2 and v2024R2 does not invalidate already existing session tokens when the two-factor authenticati... |
| CVE-2025-60424 | HIGH | 7.6 | 0.7% | Oct 27, 2025 | A lack of rate limiting in the OTP verification component of Nagios Fusion v2024R1.2 and v2024R2 allows attackers to byp... |
| CVE-2025-34133 | HIGH | 7 | 0.2% | Oct 27, 2025 | Wimi Teamwork versions prior to 7.38.17 contains a cross-site request forgery (CSRF) vulnerability in its API. The API a... |
| CVE-2025-61482 | HIGH | 7.2 | 0.1% | Oct 27, 2025 | Improper handling of OTP/TOTP/HOTP values in NetKnights GmbH privacyIDEA Authenticator v.4.3.0 on Android allows local a... |
| CVE-2025-52268 | HIGH | 7.5 | 0.3% | Oct 27, 2025 | StarCharge Artemis AC Charger 7-22 kW v1.0.4 was discovered to contain a hardcoded AES key which allows attackers to for... |
| CVE-2025-52264 | HIGH | 8 | 0.3% | Oct 27, 2025 | StarCharge Artemis AC Charger 7-22 kW v1.0.4 was discovered to contain a stack overflow via the cgiMain function at down... |
| CVE-2025-12288 | HIGH | 8.8 | 0.4% | Oct 27, 2025 | A vulnerability was detected in Bdtask Pharmacy Management System up to 9.4. Affected is an unknown function of the file... |
| CVE-2025-12287 | HIGH | 7.2 | 0.4% | Oct 27, 2025 | A security vulnerability has been detected in Bdtask Wholesale Inventory Control and Inventory Management System up to 2... |
| CVE-2025-9164 | HIGH | 8.8 | 0.1% | Oct 27, 2025 | Docker Desktop Installer.exe is vulnerable to DLL hijacking due to insecure DLL search order. The installer searches for... |
| CVE-2025-52263 | HIGH | 8 | 0.2% | Oct 27, 2025 | An issue in the Web Configuration module of Startcharge Artemis AC Charger 7-22 kW v1.0.4 allows authenticated network-a... |
| CVE-2025-12286 | HIGH | 7.3 | 0.2% | Oct 27, 2025 | A weakness has been identified in VeePN up to 1.6.2. This affects an unknown function of the file C:\Program Files (x86)... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now