2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-43936 | CRITICAL | 9.1 | 0.5% | Sep 16, 2026 | Dell ObjectScale, versions prior to ObjectScale 4.4.0.0, contains an Improper Authentication vulnerability. An unauthent... |
| CVE-2025-67066 | CRITICAL | 9.8 | 0.7% | Sep 4, 2026 | SQL Injection vulnerability in oasys sysoa version 1.0 allows a remote attacker to execute arbitrary code via the outtyp... |
| CVE-2025-9314 | CRITICAL | 9.8 | 0.3% | Sep 2, 2026 | The Developer Tools WordPress plugin through 1.1.3 contains an unauthenticated arbitrary file upload vulnerability in th... |
| CVE-2025-51679 | CRITICAL | 9.1 | 0.6% | Aug 26, 2026 | An issue was discovered in openRISC OR1200 commit 83ac6b. A mismatch between the RTL and netlist can lead to unexpected ... |
| CVE-2025-70293 | CRITICAL | 9.8 | 0.8% | Aug 26, 2026 | An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fs_get_b... |
| CVE-2025-70290 | CRITICAL | 9.8 | 0.7% | Aug 26, 2026 | An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support c... |
| CVE-2025-61165 | CRITICAL | 9.8 | 0.6% | Aug 26, 2026 | An arbitrary file upload vulnerability in the /v1/my_drive/batch_upload component of cohere North AI v1.1.5 allows attac... |
| CVE-2025-61163 | CRITICAL | 9.8 | 0.5% | Aug 26, 2026 | Cohere North AI v1.1.5 was discovered to contain excessively permissive cross-domain policy with untrusted domains. This... |
| CVE-2025-15689 | CRITICAL | 9.8 | 0.5% | Aug 20, 2026 | Unauthenticated Privilege Escalation in Capella <= 2.5.5 versions. |
| CVE-2025-15688 | CRITICAL | 9.3 | 0.4% | Aug 20, 2026 | Unauthenticated SQL Injection in Capella <= 2.5.5 versions. |
| CVE-2025-14600 | CRITICAL | 9.3 | 0.5% | Aug 19, 2026 | An insecure deserialization vulnerability in vsDesk allows a remote attacker to gain unauthorized administrative access.... |
| CVE-2025-59324 | CRITICAL | 9.1 | — | Aug 12, 2026 | CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly validate LUKS encryption and, if encryption is ... |
| CVE-2025-59321 | CRITICAL | 9.8 | — | Aug 12, 2026 | CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 contains a default TPM PCR policy that fails to consider the syst... |
| CVE-2025-59326 | CRITICAL | 9.8 | — | Aug 12, 2026 | CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to enforce IMA policy protections across temporary file sys... |
| CVE-2025-41769 | CRITICAL | 9.8 | — | Aug 12, 2026 | The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. A... |
| CVE-2025-31114 | CRITICAL | 9.3 | — | Aug 11, 2026 | Fooocus is an image generating software. In versions 2.5.5 and prior, the Fooocus web UI is vulnerable to remote code ex... |
| CVE-2025-15681 | CRITICAL | 9.2 | — | Aug 10, 2026 | TBEA TLogger V2.1.0.0B0.0.0.0 contains an authentication bypass in its web server. After a user has previously authentic... |
| CVE-2025-13294 | CRITICAL | 9.3 | — | Aug 10, 2026 | An unauthenticated SQL injection vulnerability exists in the web server of TBEA TLogger V2.1.0.0B0.0.0.0. Multiple HTTP ... |
| CVE-2025-13293 | CRITICAL | 9.3 | — | Aug 10, 2026 | A hard-coded or default root account credential in TBEA TLogger V2.1.0.0B0.0.0.0 allows an unauthenticated remote attack... |
| CVE-2025-14561 | CRITICAL | 9 | — | Aug 6, 2026 | In multi-tenant deployments, the Publisher REST APIs fail to enforce tenant isolation correctly. This allows a user in o... |
| CVE-2025-15039 | CRITICAL | 9.4 | — | Aug 6, 2026 | The Conditional Authentication (Adaptive Authentication) script does not correctly enforce the completion of all require... |
| CVE-2025-63823 | CRITICAL | 9.8 | 0.8% | Aug 5, 2026 | My Safetipin Android Application 5.2.1 contains Hardcoded credentials in the authentication module, which allows remote ... |
| CVE-2025-29296 | CRITICAL | 9.8 | 2.3% | Aug 4, 2026 | H3C Magic BE18000 V200R007, H3C NX400 V100R015, H3C Magic NX30 Pro V100R0011, H3C Magic R3010 V100R009, H3C Magic NX15 V... |
| CVE-2025-69948 | CRITICAL | 9.8 | 0.5% | Jul 31, 2026 | SourceCodester Modern Loan Management System 1.0 is vulnerable to SQL Injection in /admin/delete_group.php?id=1. |
| CVE-2025-69946 | CRITICAL | 9.8 | 0.4% | Jul 31, 2026 | SourceCodester Modern Loan Management System 1.0 is vulnerable to SQL Injection in ajaxData.php via the parameters distr... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now