2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-48504 | MEDIUM | 6.8 | 0.3% | Nov 10, 2026 | Operation on a resource after expiration or release in the Secure Encrypted Virtualization (SEV) firmware could allow a ... |
| CVE-2025-29941 | MEDIUM | 6 | 0.1% | Nov 10, 2026 | Incorrect usage of seeds in pseudo-random number generator in the Secure Encrypted Virtualization (SEV) firmware could a... |
| CVE-2025-0008 | HIGH | 8.4 | 0.1% | Nov 10, 2026 | Insufficient verification of data authenticity may allow a local attacker to bypass Secure Debug Unlock (SDU), potential... |
| CVE-2025-62621 | MEDIUM | 5.9 | 0.2% | Nov 10, 2026 | Expected behavior violation in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to ... |
| CVE-2025-62620 | MEDIUM | 5.9 | 0.2% | Nov 10, 2026 | Improper validation of unsafe equivalence in input could allow an attacker with high privileges to reclaim the ring buff... |
| CVE-2025-54508 | MEDIUM | 4 | 0.2% | Nov 10, 2026 | Improper validation of Reverse Map Table (RMP) entries in the Secure Encrypted Virtualization (SEV) firmware could allow... |
| CVE-2025-54506 | MEDIUM | 4 | 0.1% | Nov 10, 2026 | A time-of-check to time-of-use (TOCTOU) race condition in the AMD SEV Secure Encrypted Virtualization (SEV) firmware cou... |
| CVE-2025-54504 | MEDIUM | 5.9 | 0.2% | Nov 10, 2026 | Insufficient Granularity of Access Control in AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker... |
| CVE-2025-54503 | MEDIUM | 5.9 | 0.2% | Nov 10, 2026 | Improper handling of overlap between protected memory ranges in the Secure Encrypted Virtualization (SEV) firmware could... |
| CVE-2025-52537 | MEDIUM | 4 | 0.1% | Nov 10, 2026 | Improper access control within the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with admin... |
| CVE-2025-52535 | MEDIUM | 5.9 | 0.3% | Nov 10, 2026 | Improper resource reuse in the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with hyperviso... |
| CVE-2025-29940 | MEDIUM | 5.9 | 0.2% | Nov 10, 2026 | Unverified ownership in Secure Encrypted Virtualization (SEV) firmware could allow a privileged attacker with access to ... |
| CVE-2025-0027 | MEDIUM | 5.9 | 0.2% | Nov 10, 2026 | Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypa... |
| CVE-2025-61625 | HIGH | 8.1 | 0.7% | Nov 10, 2026 | An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyze... |
| CVE-2025-10248 | HIGH | 7.2 | 0.3% | Nov 9, 2026 | XSS Vulnerability in OpenText Filr Appliance versions upto 25.1.2 could allow an authenticated user to upload a maliciou... |
| CVE-2025-36075 | MEDIUM | 5.3 | 0.2% | Nov 8, 2026 | IBM Safer Payments 6.4.0.00 through 6.4.2.11, 6.5.0.00 through 6.5.0.09, 6.6.0.00 through 6.6.0.07, 6.7.0.00 through 6.7... |
| CVE-2025-1837 | MEDIUM | 5.4 | 0.2% | Nov 8, 2026 | IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 could allow an aut... |
| CVE-2025-0166 | LOW | 2.7 | 0.2% | Nov 8, 2026 | IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 could disclose sen... |
| CVE-2025-15708 | LOW | 3.5 | 0.2% | Nov 7, 2026 | The Live Composer WordPress plugin before 2.1.23 does not sanitise and escape some of its custom post type slug setting... |
| CVE-2025-55002 | MEDIUM | 5.5 | 0.2% | Nov 6, 2026 | JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6.2-1, JupyterLab Desktop for ma... |
| CVE-2025-54991 | MEDIUM | 5.5 | 0.2% | Nov 6, 2026 | JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6.2-1, JupyterLab Desktop for ma... |
| CVE-2025-64798 | — | — | — | Nov 6, 2026 | Rejected reason: Unused reservation with no CVE record; removed from tickets/pool during the 2026-11-06 stale-CVE remedi... |
| CVE-2025-46896 | — | — | — | Nov 6, 2026 | Rejected reason: Unused reservation with no CVE record; removed from tickets/pool during the 2026-11-06 stale-CVE remedi... |
| CVE-2025-66621 | — | — | 0.1% | Nov 6, 2026 | Apache James SASL OAuthBearer/XOAUTH2 prior versions 3.9.1 fails to validate correctly AUD claim of JWT payloads when in... |
| CVE-2025-71458 | HIGH | 7.5 | 0.4% | Nov 6, 2026 | FTS3 Web Monitoring (fts-monitoring) versions 3.12.0 through 3.13.2 and 3.14.0 contain an unauthenticated sql injection ... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now