2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-71292 | MEDIUM | 5.5 | 0.3% | May 6, 2026 | In the Linux kernel, the following vulnerability has been resolved: jfs: nlink overflow in jfs_rename If nlink is maxi... |
| CVE-2025-71291 | MEDIUM | 5.5 | 0.1% | May 6, 2026 | In the Linux kernel, the following vulnerability has been resolved: misc: bcm_vk: Fix possible null-pointer dereference... |
| CVE-2025-71290 | MEDIUM | 5.5 | 0.1% | May 6, 2026 | In the Linux kernel, the following vulnerability has been resolved: misc: ti_fpc202: fix a potential memory leak in pro... |
| CVE-2025-71289 | MEDIUM | 5.5 | 0.3% | May 6, 2026 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: handle attr_set_size() errors when trunca... |
| CVE-2025-71288 | MEDIUM | 5.5 | 0.1% | May 6, 2026 | In the Linux kernel, the following vulnerability has been resolved: memory: mtk-smi: fix device leaks on common probe ... |
| CVE-2025-71287 | MEDIUM | 5.5 | 0.1% | May 6, 2026 | In the Linux kernel, the following vulnerability has been resolved: memory: mtk-smi: fix device leak on larb probe Mak... |
| CVE-2025-71286 | MEDIUM | 5.5 | 0.1% | May 6, 2026 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Correct the allocation si... |
| CVE-2025-71285 | MEDIUM | 5.5 | 0.2% | May 6, 2026 | In the Linux kernel, the following vulnerability has been resolved: net: qrtr: Drop the MHI auto_queue feature for IPCR... |
| CVE-2025-71274 | MEDIUM | 4.7 | 0.1% | May 6, 2026 | In the Linux kernel, the following vulnerability has been resolved: rpmsg: core: fix race in driver_override_show() and... |
| CVE-2025-71273 | MEDIUM | 5.5 | 0.2% | May 6, 2026 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: Use devm_kmemdup() in rtw_set_supporte... |
| CVE-2025-71272 | MEDIUM | 5.5 | 0.1% | May 6, 2026 | In the Linux kernel, the following vulnerability has been resolved: most: core: fix resource leak in most_register_inte... |
| CVE-2025-71271 | MEDIUM | 5.5 | 0.1% | May 6, 2026 | In the Linux kernel, the following vulnerability has been resolved: hfsplus: ensure sb->s_fs_info is always cleaned up ... |
| CVE-2025-59854 | MEDIUM | 6.1 | 0.1% | May 6, 2026 | HCL DFXAnalytics is affected by an Insecure Security Header Configuration vulnerability where the application utilizes t... |
| CVE-2025-59853 | MEDIUM | 5.3 | 0.2% | May 6, 2026 | HCL DFXAnalytics is affected by an Improper Error Handling vulnerability where the application exposes detailed stack tr... |
| CVE-2025-31970 | MEDIUM | 6.1 | 0.1% | May 6, 2026 | HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerability where the Content-Security-Polic... |
| CVE-2025-61669 | MEDIUM | 6.1 | 0.2% | May 5, 2026 | Jupyter Server is the backend for Jupyter web applications. In jupyter_server versions through 2.17.0, the next query pa... |
| CVE-2025-52206 | MEDIUM | 4.7 | 0.2% | May 5, 2026 | ISPConfig 3.3.0 is vulnerable to Cross Site Scripting (XSS) via the system status webpage. |
| CVE-2025-42611 | MEDIUM | 6.5 | 0.2% | May 5, 2026 | RouterOS provides various services that rely on correct verification of client and server certificates to secure confide... |
| CVE-2025-47406 | MEDIUM | 5.5 | 0.1% | May 4, 2026 | Information Disclosure while processing IOCTL handler callbacks without verifying buffer size. |
| CVE-2025-70071 | MEDIUM | 5.9 | 0.5% | May 4, 2026 | An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXParser.cpp, ParseVectorDataA... |
| CVE-2025-70072 | MEDIUM | 6.5 | 0.2% | May 4, 2026 | An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXConverter.cpp, FBXConverter:... |
| CVE-2025-70070 | MEDIUM | 6.5 | 0.2% | May 4, 2026 | An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXMeshGeometry.cpp, MeshGeomet... |
| CVE-2025-14726 | MEDIUM | 6.5 | 0.8% | May 2, 2026 | The Widgets for Social Photo Feed plugin for WordPress is vulnerable to unauthorized access of data and modification of ... |
| CVE-2025-69606 | MEDIUM | 6.1 | 0.4% | May 1, 2026 | Cross-Site Scripting (XSS) vulnerability was discovered in the GSVoIP web panel version 2.0.90. The `msg` parameter in t... |
| CVE-2025-36335 | MEDIUM | 5.5 | 0.1% | Apr 30, 2026 | IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.3.0, 5.3.1 stores user credentials in plain text which can be read by a lo... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now