2025 CVE Vulnerabilities
45,325 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-62584 | HIGH | 7.5 | 0.2% | Oct 16, 2025 | Whale browser before 4.33.325.17 allows an attacker to bypass the Same-Origin Policy in a dual-tab environment. |
| CVE-2025-10706 | HIGH | 8.8 | 0.6% | Oct 16, 2025 | The Classified Pro theme for WordPress is vulnerable to unauthorized plugin installation due to a missing capability che... |
| CVE-2025-58778 | HIGH | 8.6 | 0.5% | Oct 16, 2025 | Multiple versions of RG-EST300 provided by Ruijie Networks provide SSH server functionality. It is not documented in the... |
| CVE-2025-62580 | HIGH | 7.8 | 0.2% | Oct 16, 2025 | ASDA-Soft Stack-based Buffer Overflow Vulnerability |
| CVE-2025-62579 | HIGH | 7.8 | 0.2% | Oct 16, 2025 | ASDA-Soft Stack-based Buffer Overflow Vulnerability |
| CVE-2025-43281 | HIGH | 7.8 | 0.1% | Oct 15, 2025 | The issue was addressed with improved authentication. This issue is fixed in macOS Sequoia 15.6. A local attacker may be... |
| CVE-2025-11619 | HIGH | 8.8 | 0.2% | Oct 15, 2025 | Improper certificate validation when connecting to gateways in Devolutions Server 2025.3.2 and earlier allows attackers ... |
| CVE-2025-62382 | HIGH | 7.7 | 0.3% | Oct 15, 2025 | Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. Prior to 0.16.2, Frigate'... |
| CVE-2025-62381 | HIGH | 8.3 | 0.5% | Oct 15, 2025 | sveltekit-superforms makes SvelteKit forms a pleasure to use. sveltekit-superforms v2.27.3 and prior are susceptible to ... |
| CVE-2025-62371 | HIGH | 7.4 | 0.2% | Oct 15, 2025 | OpenSearch Data Prepper as an open source data collector for observability data. In versions prior to 2.12.2, the OpenSe... |
| CVE-2025-58133 | HIGH | 7.5 | 0.3% | Oct 15, 2025 | Authentication bypass in some Zoom Rooms Clients before version 6.5.1 may allow an unauthenticated user to conduct a dis... |
| CVE-2025-20350 | HIGH | 7.5 | 0.4% | Oct 15, 2025 | A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phon... |
| CVE-2025-10577 | HIGH | 8.5 | 0.1% | Oct 15, 2025 | Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research ... |
| CVE-2025-10576 | HIGH | 8.5 | 0.1% | Oct 15, 2025 | Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research ... |
| CVE-2025-62370 | HIGH | 7.5 | 0.4% | Oct 15, 2025 | Alloy Core libraries at the root of the Rust Ethereum ecosystem. Prior to 0.8.26 and 1.4.1, an uncaught panic triggered ... |
| CVE-2025-61990 | HIGH | 8.7 | 0.3% | Oct 15, 2025 | When using a multi-bladed platform with more than one blade, undisclosed traffic can cause the Traffic Management Microk... |
| CVE-2025-61935 | HIGH | 8.7 | 0.3% | Oct 15, 2025 | When a BIG IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests can cause the ... |
| CVE-2025-58071 | HIGH | 8.7 | 0.3% | Oct 15, 2025 | When IPsec is configured on the BIG-IP system, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to... |
| CVE-2025-57780 | HIGH | 8.8 | 0.2% | Oct 15, 2025 | A vulnerability exists in F5OS-A and F5OS-C system that may allow an authenticated attacker with local access to escalat... |
| CVE-2025-8486 | HIGH | 8.5 | 0.1% | Oct 15, 2025 | A potential vulnerability was reported in PC Manager that could allow a local authenticated user to execute code with el... |
| CVE-2025-10581 | HIGH | 8.5 | 0.1% | Oct 15, 2025 | A potential DLL hijacking vulnerability was discovered in the Lenovo PC Manager during an internal security assessment t... |
| CVE-2025-61974 | HIGH | 8.7 | 0.4% | Oct 15, 2025 | When a client SSL profile is configured on a virtual server, undisclosed requests can cause an increase in memory resour... |
| CVE-2025-61960 | HIGH | 8.7 | 0.3% | Oct 15, 2025 | When a per-request policy is configured on a BIG-IP APM portal access virtual server, undisclosed traffic can cause the ... |
| CVE-2025-61958 | HIGH | 8.7 | 0.4% | Oct 15, 2025 | A vulnerability exists in the iHealth command that may allow an authenticated attacker with at least a resource administ... |
| CVE-2025-61955 | HIGH | 8.8 | 0.2% | Oct 15, 2025 | A vulnerability exists in F5OS-A and F5OS-C systems that may allow an authenticated attacker with local access to escala... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now