2025 CVE Vulnerabilities
45,150 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-68454 | HIGH | 8.8 | 0.8% | Jan 5, 2026 | Craft is a platform for creating digital experiences. Versions 5.0.0-RC1 through 5.8.20 and 4.0.0-RC1 through 4.16.16 ar... |
| CVE-2025-68437 | MEDIUM | 6.8 | 0.4% | Jan 5, 2026 | Craft is a platform for creating digital experiences. In versions 5.0.0-RC1 through 5.8.20 and 4.0.0-RC1 through 4.16.16... |
| CVE-2025-68436 | MEDIUM | 6.5 | 0.2% | Jan 5, 2026 | Craft is a platform for creating digital experiences. In versions 5.0.0-RC1 through 5.8.20 and 4.0.0-RC1 through 4.16.16... |
| CVE-2025-68428 | HIGH | 7.5 | 2.1% | Jan 5, 2026 | jsPDF is a library to generate PDFs in JavaScript. Prior to version 4.0.0, user control of the first argument of the loa... |
| CVE-2025-67732 | MEDIUM | 6.5 | 0.3% | Jan 5, 2026 | Dify is an open-source LLM app development platform. Prior to version 1.11.0, the API key is exposed in plaintext to the... |
| CVE-2025-66648 | MEDIUM | 6.1 | 0.2% | Jan 5, 2026 | vega-functions provides function implementations for the Vega expression language. Prior to version 6.1.1, for sites tha... |
| CVE-2025-65110 | CRITICAL | 9.3 | 0.5% | Jan 5, 2026 | Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization design... |
| CVE-2025-61916 | MEDIUM | 6.6 | 0.2% | Jan 5, 2026 | Spinnaker is an open source, multi-cloud continuous delivery platform. Versions prior to 2025.1.6, 2025.2.3, and 2025.3.... |
| CVE-2025-64425 | HIGH | 8.1 | 0.4% | Jan 5, 2026 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In Coolify versions ... |
| CVE-2025-64424 | HIGH | 8.8 | 1.9% | Jan 5, 2026 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In Coolify versions ... |
| CVE-2025-64423 | HIGH | 8.8 | 0.3% | Jan 5, 2026 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In Coolify versions ... |
| CVE-2025-64422 | MEDIUM | 4.3 | 0.3% | Jan 5, 2026 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In Coolify vstarting... |
| CVE-2025-67427 | MEDIUM | 6.5 | 0.2% | Jan 5, 2026 | A Blind Server-Side Request Forgery (SSRF) vulnerability in evershop 2.1.0 and prior allows unauthenticated attackers to... |
| CVE-2025-67419 | HIGH | 7.5 | 0.3% | Jan 5, 2026 | A Denial of Service (DoS) vulnerability in evershop 2.1.0 and prior allows unauthenticated attackers to exhaust the appl... |
| CVE-2025-64421 | HIGH | 8 | 0.3% | Jan 5, 2026 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In Coolify versions ... |
| CVE-2025-64420 | HIGH | 8.8 | 0.5% | Jan 5, 2026 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In Coolify versions ... |
| CVE-2025-64419 | HIGH | 8.8 | 0.6% | Jan 5, 2026 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0... |
| CVE-2025-69291 | — | — | — | Jan 5, 2026 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2025-69290 | — | — | — | Jan 5, 2026 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2025-67397 | CRITICAL | 9.1 | 0.7% | Jan 5, 2026 | An issue in Passy v.1.6.3 allows a remote authenticated attacker to execute arbitrary commands via a crafted HTTP reques... |
| CVE-2025-53966 | HIGH | 8.4 | 0.1% | Jan 5, 2026 | An issue was discovered in Samsung Mobile Processor Exynos 1380, 1480, 2400, and 1580. Incorrect Handling of the NL80211... |
| CVE-2025-52517 | MEDIUM | 5.9 | 0.1% | Jan 5, 2026 | An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, ... |
| CVE-2025-52516 | MEDIUM | 6.2 | 0.1% | Jan 5, 2026 | An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, ... |
| CVE-2025-52515 | MEDIUM | 5.1 | 0.1% | Jan 5, 2026 | An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, ... |
| CVE-2025-49495 | HIGH | 8.4 | 0.1% | Jan 5, 2026 | An issue was discovered in the WiFi driver in Samsung Mobile Processor Exynos 1380, 1480, 2400, 1580. Mishandling of an ... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now