2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-14785 | MEDIUM | 6.4 | 0.3% | Jul 8, 2026 | The Website Builder by SeedProd - Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode plugin for Wor... |
| CVE-2025-12799 | MEDIUM | 6.5 | 0.4% | Jul 7, 2026 | A flaw was found in Jastow. Jastow is vulnerable to Cross-Site Scripting (XSS) attack. If using a set of combined config... |
| CVE-2025-59617 | HIGH | 7.3 | 0.1% | Jul 6, 2026 | Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input. |
| CVE-2025-59616 | HIGH | 7.8 | 0.1% | Jul 6, 2026 | Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input due to accessing alrea... |
| CVE-2025-59615 | HIGH | 7.8 | 0.1% | Jul 6, 2026 | Memory Corruption when invoking device input/output control operations for mapping and unmapping persistent memory buffe... |
| CVE-2025-53831 | HIGH | 8.2 | 0.3% | Jul 6, 2026 | DrawIO for ownCloud is an application for using DrawIO with the file storage, synchronization, and sharing application o... |
| CVE-2025-53830 | CRITICAL | 9.1 | 0.5% | Jul 6, 2026 | Anti-Virus for ownCloud is an anti-virus application for file storage, synchronization, and sharing application ownCloud... |
| CVE-2025-53829 | HIGH | 8 | 0.5% | Jul 6, 2026 | ownCloud is a file storage, synchronization, and sharing application. In ownCloud 10 prior to version 10.15.3, an attack... |
| CVE-2025-53828 | HIGH | 8.5 | 0.4% | Jul 6, 2026 | SharePoint for ownCloud is an application for using SharePoint with the file storage, synchronization, and sharing appli... |
| CVE-2025-53827 | CRITICAL | 9.1 | 0.6% | Jul 6, 2026 | ownCloud Core is the server-side component of the file storage, synchronization, and sharing application ownCloud Classi... |
| CVE-2025-15668 | LOW | 3.3 | 0.2% | Jul 6, 2026 | A vulnerability was identified in GPAC up to b40ce70f5. This issue affects the function sgpd_del_entry of the file src/i... |
| CVE-2025-15667 | LOW | 3.3 | 0.2% | Jul 6, 2026 | A vulnerability was determined in GPAC up to 2.5-DEV. This vulnerability affects the function gf_isom_nalu_sample_rewrit... |
| CVE-2025-8591 | MEDIUM | 6.1 | 0.3% | Jul 6, 2026 | The software accepts user-supplied input via a URL parameter without adequate output encoding before reflecting it back ... |
| CVE-2025-13475 | HIGH | 7.3 | 0.3% | Jul 4, 2026 | In multi-tenanted deployments, the application consent management mechanism fails to correctly isolate consent scopes be... |
| CVE-2025-71380 | HIGH | 8.8 | 0.6% | Jul 4, 2026 | The Execute Command node in n8n allows authenticated users to execute arbitrary commands on the host system where n8n ru... |
| CVE-2025-71375 | HIGH | 8.1 | 0.5% | Jul 4, 2026 | picklescan before 0.0.34 fails to detect the _operator.methodcaller built-in function when scanning pickle files for mal... |
| CVE-2025-71373 | HIGH | 8.1 | 0.6% | Jul 4, 2026 | picklescan before 0.0.33 fails to detect operator.methodcaller function calls in pickle files, allowing attackers to byp... |
| CVE-2025-71372 | HIGH | 8.1 | 0.5% | Jul 4, 2026 | Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran.getlincoef gadget in pickle __reduce__ methods, all... |
| CVE-2025-71369 | HIGH | 8.1 | 0.6% | Jul 4, 2026 | picklescan before 0.0.28 fails to detect malicious pickle files that use torch.utils.data.datapipes.utils.decoder.basich... |
| CVE-2025-71367 | HIGH | 8.1 | 0.6% | Jul 4, 2026 | picklescan before 0.0.34 fails to detect _operator.attrgetter function calls in pickle payloads, allowing attackers to b... |
| CVE-2025-71366 | HIGH | 8.1 | 0.6% | Jul 4, 2026 | picklescan before 0.0.28 fails to detect malicious torch.utils.bottleneck.__main__.run_cprofile function calls in pickle... |
| CVE-2025-71364 | HIGH | 8.1 | 0.7% | Jul 4, 2026 | picklescan before 0.0.30 fails to detect the asyncio.unix_events._UnixSubprocessTransport._start function in pickle redu... |
| CVE-2025-71362 | HIGH | 8.1 | 0.4% | Jul 4, 2026 | picklescan before 0.0.33 fails to detect unsafe deserialization when numpy.f2py.crackfortran functions call eval on arbi... |
| CVE-2025-71360 | HIGH | 8.1 | 0.4% | Jul 4, 2026 | picklescan before 0.0.29 fails to detect malicious pickle files using idlelib.calltip.get_entity function in reduce meth... |
| CVE-2025-71359 | HIGH | 8.1 | 0.6% | Jul 4, 2026 | picklescan before 0.0.29 fails to detect malicious pickle payloads that utilize lib2to3.pgen2.grammar.Grammar.loads in t... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now