2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-15614 | LOW | 3.3 | 0.1% | Sep 5, 2026 | ugrep before 7.6.0 contains a heap buffer over-read vulnerability in the LZW decompressor when processing crafted .Z arc... |
| CVE-2025-15694 | LOW | 3.5 | 0.2% | Sep 5, 2026 | The Joli Table Of Contents WordPress plugin before 2.8.1 does not sanitise and escape some of its settings before output... |
| CVE-2025-15693 | LOW | 2.7 | 0.3% | Sep 5, 2026 | The JCH Optimize WordPress plugin before 5.0.1 does not properly restrict a directory path provided to one of its admini... |
| CVE-2025-15692 | LOW | 3.5 | 0.2% | Sep 2, 2026 | The Icegram Express WordPress plugin before 5.8.6 does not properly escape a list description setting before outputting ... |
| CVE-2025-62343 | LOW | 3.1 | 0.2% | Aug 27, 2026 | HCL IntelliOps Event Management (IEM) is affected by an Admin Session Concurrency Vulnerability. it may allows user sess... |
| CVE-2025-62341 | LOW | 3.7 | 0.1% | Aug 26, 2026 | HCL Connections is vulnerable to server-side request forgery (SSRF) when an internal server is compromised possibly allo... |
| CVE-2025-62318 | LOW | 3.7 | — | Aug 13, 2026 | HCL AION is affected by a vulnerability where JavaScript responses containing data could be referenced by external pages... |
| CVE-2025-62315 | LOW | 3.4 | — | Aug 13, 2026 | HCL AION is affected by a vulnerability where certain input fields do not enforce sufficient server-side input validatio... |
| CVE-2025-9486 | LOW | 3.3 | — | Aug 12, 2026 | GitLab has remediated an issue in GitLab EE affecting all versions from 15.6 before 19.0.6, 19.1 before 19.1.4, and 19.2... |
| CVE-2025-61970 | LOW | 1 | — | Aug 11, 2026 | Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to ... |
| CVE-2025-48505 | LOW | 1 | 0.1% | Aug 11, 2026 | Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to ... |
| CVE-2025-15680 | LOW | 2.4 | — | Aug 10, 2026 | TBEA TLogger V2.1.0.0B0.0.0.0 exposes a UART interface on the device's circuit board without sufficient protection. A ph... |
| CVE-2025-15674 | LOW | 2.7 | — | Aug 6, 2026 | The Passster WordPress plugin before 4.3.7 does not restrict low-privilege users holding the edit_posts capability from ... |
| CVE-2025-14779 | LOW | 3.8 | 0.3% | Aug 6, 2026 | The Secret Type Management REST API does not correctly isolate access controls when deleting a secret type. The on-delet... |
| CVE-2025-13736 | LOW | 3.7 | — | Aug 6, 2026 | When Multi-Attribute Login is enabled, the login interface fails to consistently mask the existence of user accounts. Fo... |
| CVE-2025-12627 | LOW | 2.4 | — | Aug 6, 2026 | The user impersonation flow in WSO2 Identity Server fails to properly manage refresh tokens associated with impersonated... |
| CVE-2025-15677 | LOW | 3.5 | — | Aug 5, 2026 | The GeoDirectory WordPress plugin before 2.8.110 does not sanitise and escape a place-category setting before outputtin... |
| CVE-2025-71402 | LOW | 2 | 0.3% | Aug 1, 2026 | better-auth versions greater than 1.3.34 and before 1.4.0 contain a vulnerability in the multi-session plugin's /sign-ou... |
| CVE-2025-14562 | LOW | 3.1 | 0.3% | Jul 29, 2026 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.6 before 19.0.5, 19.1 before 19.1.3, and 1... |
| CVE-2025-59866 | LOW | 3.3 | 0.1% | Jul 17, 2026 | The HCL DFMPro, DFXAnalytics and DFXServer installers are affected by ‘Insecure file permissions Leading to Privilege Es... |
| CVE-2025-8412 | LOW | 2 | — | Jul 14, 2026 | A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in SUSE Virtual Machine Driver Pa... |
| CVE-2025-15668 | LOW | 3.3 | 0.2% | Jul 6, 2026 | A vulnerability was identified in GPAC up to b40ce70f5. This issue affects the function sgpd_del_entry of the file src/i... |
| CVE-2025-15667 | LOW | 3.3 | 0.2% | Jul 6, 2026 | A vulnerability was determined in GPAC up to 2.5-DEV. This vulnerability affects the function gf_isom_nalu_sample_rewrit... |
| CVE-2025-0824 | LOW | 3.7 | 0.1% | Jun 29, 2026 | Lack of validation for firmware update in Hitachi Hitachi Virtual Storage Platform One Block 23, 24, 26, 28. This issue... |
| CVE-2025-15619 | LOW | 3.5 | 0.2% | Jun 23, 2026 | HCL Connections contains a broken access control vulnerability that may allow an unauthorized user to view data in a sin... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now