2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-62839 | HIGH | 8.7 | 0.2% | Oct 29, 2026 | An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Bac... |
| CVE-2025-14260 | HIGH | 8.3 | 0.3% | Oct 28, 2026 | Due to the improper implementation of access control rules, malicious actors could perform a Server Side Request Forgery... |
| CVE-2025-30414 | HIGH | 7.1 | 0.2% | Oct 28, 2026 | Local privilege escalation due to improper authentication. The following products are affected: Acronis Cyber Protect Cl... |
| CVE-2025-13833 | HIGH | 7.7 | 0.1% | Oct 26, 2026 | A vulnerability exists in SecureConnector for Windows when the “Additional Appliance Connections” setting is enabled and... |
| CVE-2025-45528 | HIGH | 7.3 | 0.2% | Oct 23, 2026 | An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local attacker to execute arbitrary code via a c... |
| CVE-2025-30052 | HIGH | 8.8 | 0.3% | Oct 23, 2026 | The rsyncd service of the CGM CLININET is vulnerable to Authentication Bypass via IP spoofing. Access is granted based s... |
| CVE-2025-30049 | HIGH | 8.2 | 0.2% | Oct 23, 2026 | The CGM CLININET application stores user passwords as unsalted MD5 hashes. This issue was fixed in versions 2026.MS1 a... |
| CVE-2025-30045 | HIGH | 8.6 | 0.2% | Oct 23, 2026 | CGM CLININET is vulnerable to Code Injection in the ConvExpr function, which processes Perl expressions into RTF documen... |
| CVE-2025-30043 | HIGH | 7.1 | 0.2% | Oct 23, 2026 | CGM CLININET is vulnerable to Missing Authentication for Critical Function in the /DocManagment path. The endpoint is ac... |
| CVE-2025-71434 | HIGH | 8.2 | 0.3% | Oct 22, 2026 | Weaver E-cology 8.0, 9.0, and 10.0 prior to 10.76 contains an unauthenticated SQL injection vulnerability in the /api/do... |
| CVE-2025-55702 | HIGH | 8.7 | 0.3% | Oct 21, 2026 | When a client sends a POST with Expect: 100-continue and the origin answers before reading the body, Apache Traffic Serv... |
| CVE-2025-31699 | HIGH | 8.9 | 0.3% | Oct 21, 2026 | Apache Traffic Server can return an origin connection to the shared pool while the origin is still waiting on a request ... |
| CVE-2025-0326 | HIGH | 7.4 | 0.1% | Oct 21, 2026 | The system fails to invalidate existing access tokens associated with sub-organization users during sensitive account ma... |
| CVE-2025-71436 | HIGH | 7.1 | 0.5% | Oct 20, 2026 | Raptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-based buffer overflow vulnerability in raptor_new_t... |
| CVE-2025-52290 | HIGH | 7.5 | 0.6% | Oct 19, 2026 | A NULL pointer dereference in the avpriv_h264_has_num_reorder_frames function of Ffmpeg version N-119856-gbe46370941 all... |
| CVE-2025-10149 | HIGH | 8.2 | 0.2% | Oct 19, 2026 | The SCIM endpoint does not sufficiently validate authorization for federated users when performing operations against th... |
| CVE-2025-66969 | HIGH | 7.5 | 0.3% | Oct 16, 2026 | Integer overflow in OpenModSim (<=1.11.0), leading to denial of service |
| CVE-2025-68404 | HIGH | 7.5 | 0.2% | Oct 15, 2026 | A time-of-check time-of-use (toctou) race condition vulnerability has been reported to affect QuRouter. If exploited, th... |
| CVE-2025-71433 | HIGH | 7.5 | 0.6% | Oct 14, 2026 | Kaneo before 2.1.6 contains a missing authorization vulnerability that allows authenticated users to access other worksp... |
| CVE-2025-57739 | HIGH | 8.8 | 0.3% | Oct 13, 2026 | An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] vulnerabi... |
| CVE-2025-46773 | HIGH | 8.8 | 0.3% | Oct 13, 2026 | An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerabi... |
| CVE-2025-58774 | HIGH | 8.3 | 0.1% | Oct 13, 2026 | AMI APTIOV contains vulnerabilities in BIOS where users may cause “Buffer Access with Incorrect Length Value” by local a... |
| CVE-2025-58773 | HIGH | 7.1 | 0.1% | Oct 13, 2026 | AMI APTIOV contains vulnerabilities in BIOS where users may cause "Out-of-bounds Write” by local access. Successful exp... |
| CVE-2025-58772 | HIGH | 8.2 | 0.1% | Oct 13, 2026 | AMI APTIOV contains vulnerabilities in BIOS where users may cause “Classic Buffer Overflow” by local access. Successful... |
| CVE-2025-58771 | HIGH | 7.1 | 0.1% | Oct 13, 2026 | AMI APTIOV contains vulnerabilities in BIOS where users may cause “Integer Overflow or Wraparound” by local access. Succ... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now