2025 CVE Vulnerabilities
45,153 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-63005 | MEDIUM | 6.5 | 0.1% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tomas WordPress To... |
| CVE-2025-63000 | MEDIUM | 6.5 | 0.1% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpforchurch Sermon... |
| CVE-2025-62992 | HIGH | 8.1 | 0.2% | Dec 31, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in everestthemes Everest Backup everest-backup allows Path Traversal.Thi... |
| CVE-2025-62761 | MEDIUM | 6.5 | 0.1% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BasePress Knowledg... |
| CVE-2025-62760 | MEDIUM | 6.5 | 0.1% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BuddyDev BuddyPres... |
| CVE-2025-62759 | MEDIUM | 6.5 | 0.1% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Justin Tadlock Ser... |
| CVE-2025-62758 | MEDIUM | 6.5 | 0.1% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Funnelforms Funnel... |
| CVE-2025-62146 | MEDIUM | 6.5 | 0.1% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Maksym Marko MX Ti... |
| CVE-2025-62137 | MEDIUM | 6.5 | 0.1% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in shuttlethemes Shut... |
| CVE-2025-62136 | MEDIUM | 6.5 | 0.1% | Dec 31, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in thinkupthemes Melo... |
| CVE-2025-49028 | HIGH | 7.1 | 0.1% | Dec 31, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Zoho Mail Zoho ZeptoMail transmail allows Stored XSS.This issue affec... |
| CVE-2025-15388 | HIGH | 8.8 | 0.9% | Dec 31, 2025 | VPN Firewall developed by QNO Technology has an OS Command Injection vulnerability, allowing authenticated remote attack... |
| CVE-2025-15387 | HIGH | 8.8 | 0.3% | Dec 31, 2025 | VPN Firewall developed by QNO Technology has a Insufficient Entropy vulnerability, allowing unauthenticated remote attac... |
| CVE-2025-2026 | HIGH | 7.1 | 0.4% | Dec 31, 2025 | The NPort 6100-G2/6200-G2 Series is affected by a high-severity vulnerability (CVE-2025-2026) that allows remote attacke... |
| CVE-2025-1977 | HIGH | 7.7 | 0.3% | Dec 31, 2025 | The NPort 6100-G2/6200-G2 Series is affected by an execution with unnecessary privileges vulnerability (CVE-2025-1977) t... |
| CVE-2025-15017 | HIGH | 7 | 0.2% | Dec 31, 2025 | A vulnerability exists in serial device servers where active debug code remains enabled in the UART interface. An attack... |
| CVE-2025-15280 | HIGH | 8.8 | 0.5% | Dec 31, 2025 | FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attacker... |
| CVE-2025-15279 | HIGH | 7.8 | 0.3% | Dec 31, 2025 | FontForge GUtils BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability all... |
| CVE-2025-15278 | HIGH | 7.8 | 0.3% | Dec 31, 2025 | FontForge GUtils XBM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote... |
| CVE-2025-15277 | HIGH | 7.8 | 0.3% | Dec 31, 2025 | FontForge GUtils SGI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability all... |
| CVE-2025-15276 | HIGH | 7.8 | 0.3% | Dec 31, 2025 | FontForge SFD File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability all... |
| CVE-2025-15275 | HIGH | 8.8 | 0.6% | Dec 31, 2025 | FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows rem... |
| CVE-2025-15274 | HIGH | 8.8 | 0.6% | Dec 31, 2025 | FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows rem... |
| CVE-2025-15273 | HIGH | 8.8 | 0.6% | Dec 31, 2025 | FontForge PFB File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows re... |
| CVE-2025-15272 | HIGH | 8.8 | 0.6% | Dec 31, 2025 | FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows rem... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now