2025 CVE Vulnerabilities

45,146 CVEs published in 2025.

Filter:CRITICALClear
CVE IDSeverityCVSSDescription
CVE-2025-0563CRITICAL9.8A vulnerability was found in code-projects Fantasy-Cricket 1.0. It has been classified as critical. Affected is an unkno...
CVE-2025-0562CRITICAL9.8A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unkn...
CVE-2025-0561CRITICAL9.8A vulnerability has been found in itsourcecode Farm Management System 1.0 and classified as critical. This vulnerability...
CVE-2025-0558CRITICAL9.8A vulnerability classified as critical was found in TDuckCloud tduck-platform up to 4.0. This vulnerability affects the ...
CVE-2025-0541CRITICAL9.8A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unkn...
CVE-2025-23202CRITICAL10Bible Module is a tool designed for ROBLOX developers to integrate Bible functionality into their games. The `FetchVerse...
CVE-2025-0540CRITICAL9.8A vulnerability has been found in itsourcecode Tailoring Management System 1.0 and classified as critical. This vulnerab...
CVE-2025-0536CRITICAL9.8A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. This vulner...
CVE-2025-0535CRITICAL9.8A vulnerability classified as critical has been found in Codezips Gym Management System 1.0. This affects an unknown par...
CVE-2025-0534CRITICAL9.8A vulnerability was found in 1000 Projects Campaign Management System Platform for Women 1.0. It has been rated as criti...
CVE-2025-0533CRITICAL9.8A vulnerability was found in 1000 Projects Campaign Management System Platform for Women 1.0. It has been declared as cr...
CVE-2025-0532CRITICAL9.8A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unkn...
CVE-2025-0527CRITICAL9.8A vulnerability classified as critical was found in code-projects Admission Management System 1.0. Affected by this vuln...
CVE-2025-23922CRITICAL10Cross-Site Request Forgery (CSRF) vulnerability in Harsh iSpring Embedder embed-ispring allows Upload a Web Shell to a W...
CVE-2025-23797CRITICAL9.8Cross-Site Request Forgery (CSRF) vulnerability in Mike Selander WP Options Editor wp-options-editor allows Privilege Es...
CVE-2025-0471CRITICAL9.8Unrestricted file upload vulnerability in the PMB platform, affecting versions 4.0.10 and above. This vulnerability coul...
CVE-2025-22916CRITICAL9.8RE11S v1.11 was discovered to contain a stack overflow via the pppUserName parameter in the formPPPoESetup function.
CVE-2025-22913CRITICAL9.8RE11S v1.11 was discovered to contain a stack overflow via the rootAPmac parameter in the formStaDrvSetup function.
CVE-2025-22912CRITICAL9.8RE11S v1.11 was discovered to contain a command injection vulnerability via the component /goform/formAccept.
CVE-2025-22907CRITICAL9.8RE11S v1.11 was discovered to contain a stack overflow via the selSSID parameter in the formWlSiteSurvey function.
CVE-2025-22906CRITICAL9.8RE11S v1.11 was discovered to contain a command injection vulnerability via the L2TPUserName parameter at /goform/setWAN...
CVE-2025-22905CRITICAL9.8RE11S v1.11 was discovered to contain a command injection vulnerability via the command parameter at /goform/mp.
CVE-2025-22904CRITICAL9.8RE11S v1.11 was discovered to contain a stack overflow via the pptpUserName parameter in the setWAN function.
CVE-2025-0456CRITICAL9.8The airPASS from NetVision Information has a Missing Authentication vulnerability, allowing unauthenticated remote attac...
CVE-2025-0455CRITICAL9.8The airPASS from NetVision Information has a SQL Injection vulnerability, allowing unauthenticated remote attackers to i...

Check if your code is affected by 2025 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now