2025 CVE Vulnerabilities
45,320 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-9301 | LOW | 3.3 | 0.1% | Aug 21, 2025 | A vulnerability was determined in cmake 4.1.20250725-gb5cce23. This affects the function cmForEachFunctionBlocker::Repla... |
| CVE-2025-53971 | LOW | 3.8 | 0.2% | Aug 21, 2025 | Mattermost versions 10.5.x <= 10.5.8, 9.11.x <= 9.11.17 fail to properly validate authorization for team scheme role mod... |
| CVE-2025-47700 | LOW | 3.5 | 0.2% | Aug 21, 2025 | Mattermost Server versions 10.5.x <= 10.5.9 utilizing the Agents plugin fail to reject empty request bodies which allows... |
| CVE-2025-8448 | LOW | 1 | 0.2% | Aug 20, 2025 | CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause unauthorized a... |
| CVE-2025-57733 | LOW | 3.8 | 0.3% | Aug 20, 2025 | In JetBrains TeamCity before 2025.07.1 sMTP injection was possible allowing modification of email content |
| CVE-2025-9193 | LOW | 3.5 | 0.2% | Aug 20, 2025 | A flaw has been found in TOTVS Portal Meu RH up to 12.1.17. Impacted is an unknown function of the component Password Re... |
| CVE-2025-9165 | LOW | 2.5 | 0.2% | Aug 19, 2025 | A flaw has been found in LibTIFF 4.7.0. This affects the function _TIFFmallocExt/_TIFFCheckRealloc/TIFFHashSetNew/InitCC... |
| CVE-2025-9119 | LOW | 2.4 | 0.2% | Aug 18, 2025 | A vulnerability was determined in Netis WF2419 1.2.29433. This vulnerability affects unknown code of the file /index.htm... |
| CVE-2025-54234 | LOW | 2.7 | 0.7% | Aug 18, 2025 | ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerabil... |
| CVE-2025-3639 | LOW | 2 | 0.5% | Aug 18, 2025 | Liferay Portal 7.3.0 through 7.4.3.132, and Liferay DXP 2025.Q1 through 2025.Q1.6, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.... |
| CVE-2025-43732 | LOW | 2.7 | 0.2% | Aug 18, 2025 | Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.10, 2024.Q4.0 through 2024.Q4.7, 2024.... |
| CVE-2025-9109 | LOW | 3.7 | 0.4% | Aug 18, 2025 | A security flaw has been discovered in Portabilis i-Diario up to 1.5.0. Affected by this vulnerability is an unknown fun... |
| CVE-2025-9103 | LOW | 2.4 | 0.2% | Aug 18, 2025 | A vulnerability was detected in ZenCart 2.1.0. Affected by this vulnerability is an unknown functionality of the compone... |
| CVE-2025-9100 | LOW | 3.7 | 0.6% | Aug 18, 2025 | A security flaw has been discovered in zhenfeng13 My-Blog 1.0.0. This vulnerability affects unknown code of the file /bl... |
| CVE-2025-9096 | LOW | 3.5 | 0.3% | Aug 18, 2025 | A vulnerability has been found in ExpressGateway express-gateway up to 1.16.10. Affected is an unknown function in the l... |
| CVE-2025-9095 | LOW | 3.5 | 0.2% | Aug 17, 2025 | A flaw has been found in ExpressGateway express-gateway up to 1.16.10. This issue affects some unknown processing in the... |
| CVE-2025-9092 | LOW | 1 | 0.1% | Aug 16, 2025 | Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java - BC-FJA 2.1.... |
| CVE-2025-55285 | LOW | 2.6 | 0.2% | Aug 15, 2025 | @backstage/plugin-scaffolder-backend is the backend for the default Backstage software templates. Prior to version 2.1.1... |
| CVE-2025-8013 | LOW | 3.8 | 0.3% | Aug 15, 2025 | The Quttera Web Malware Scanner plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to,... |
| CVE-2025-9005 | LOW | 3.7 | 0.5% | Aug 15, 2025 | A vulnerability was determined in mtons mblog up to 3.5.0. Affected is an unknown function of the file /register. The ma... |
| CVE-2025-8961 | LOW | 3.3 | 0.2% | Aug 14, 2025 | A weakness has been identified in LibTIFF 4.7.0. This affects the function main of the file tiffcrop.c of the component ... |
| CVE-2025-8713 | LOW | 3.1 | 0.2% | Aug 14, 2025 | PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately... |
| CVE-2025-5941 | LOW | 2 | 0.1% | Aug 14, 2025 | Netskope is notified about a potential gap in its agent (NS Client) in which a malicious actor could trigger a memory le... |
| CVE-2025-55193 | LOW | 2.7 | 0.5% | Aug 13, 2025 | Active Record connects classes to relational database tables. Prior to versions 7.1.5.2, 7.2.2.2, and 8.0.2.1, the ID pa... |
| CVE-2025-8927 | LOW | 3.7 | 0.6% | Aug 13, 2025 | A vulnerability was determined in mtons mblog up to 3.5.0. Affected by this issue is some unknown functionality of the f... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now