2025 CVE Vulnerabilities
45,146 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-0491 | CRITICAL | 9.8 | 0.6% | Jan 15, 2025 | A vulnerability, which was classified as critical, was found in Fanli2012 native-php-cms 1.0. Affected is an unknown fun... |
| CVE-2025-0487 | CRITICAL | 9.8 | 0.5% | Jan 15, 2025 | A vulnerability was found in Fanli2012 native-php-cms 1.0. It has been rated as critical. Affected by this issue is some... |
| CVE-2025-0486 | CRITICAL | 9.8 | 0.5% | Jan 15, 2025 | A vulnerability was found in Fanli2012 native-php-cms 1.0. It has been declared as critical. Affected by this vulnerabil... |
| CVE-2025-22146 | CRITICAL | 9.1 | 0.6% | Jan 15, 2025 | Sentry is a developer-first error tracking and performance monitoring tool. A critical vulnerability was discovered in t... |
| CVE-2025-0502 | CRITICAL | 9.1 | 0.4% | Jan 15, 2025 | Transmission of Private Resources into a New Sphere ('Resource Leak') vulnerability in CrafterCMS Engine on Linux, MacOS... |
| CVE-2025-22968 | CRITICAL | 9.8 | 2.5% | Jan 15, 2025 | An issue in D-Link DWR-M972V 1.05SSG allows a remote attacker to execute arbitrary code via SSH using root account witho... |
| CVE-2025-22785 | CRITICAL | 9.3 | 2.8% | Jan 15, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ComMotion Course B... |
| CVE-2025-22782 | CRITICAL | 9.9 | 0.5% | Jan 15, 2025 | Unrestricted Upload of File with Dangerous Type vulnerability in Web Ready Now WR Price List Manager For Woocommerce wr-... |
| CVE-2025-23061 | CRITICAL | 9.8 | 7.0% | Jan 15, 2025 | Mongoose before 8.9.5 can improperly use a nested $where filter with a populate() match, leading to search injection. NO... |
| CVE-2025-21311 | CRITICAL | 9.8 | 2.3% | Jan 14, 2025 | Windows NTLM V1 Elevation of Privilege Vulnerability |
| CVE-2025-21307 | CRITICAL | 9.8 | 1.8% | Jan 14, 2025 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability |
| CVE-2025-21298 | CRITICAL | 9.8 | 80.9% | Jan 14, 2025 | Windows OLE Remote Code Execution Vulnerability |
| CVE-2025-0463 | CRITICAL | 9.8 | 0.4% | Jan 14, 2025 | A vulnerability was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.0.0. It has been classified... |
| CVE-2025-0462 | CRITICAL | 9.8 | 0.5% | Jan 14, 2025 | A vulnerability was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.0.0 and classified as criti... |
| CVE-2025-20055 | CRITICAL | 9.8 | 1.1% | Jan 14, 2025 | OS command injection vulnerability exists in network storage servers STEALTHONE D220/D340 provided by Y'S corporation. A... |
| CVE-2025-0070 | CRITICAL | 9.9 | 0.7% | Jan 14, 2025 | SAP NetWeaver Application Server for ABAP and ABAP Platform allows an authenticated attacker to obtain illegitimate acce... |
| CVE-2025-0061 | CRITICAL | 9.1 | 0.5% | Jan 14, 2025 | SAP BusinessObjects Business Intelligence Platform allows an unauthenticated attacker to perform session hijacking over ... |
| CVE-2025-22144 | CRITICAL | 9.8 | 0.7% | Jan 13, 2025 | NamelessMC is a free, easy to use & powerful website software for Minecraft servers. A user with admincp.core.emails or ... |
| CVE-2025-22777 | CRITICAL | 9.8 | 0.9% | Jan 13, 2025 | Deserialization of Untrusted Data vulnerability in StellarWP GiveWP give allows Object Injection.This issue affects Give... |
| CVE-2025-0107 | CRITICAL | 9.8 | 77.7% | Jan 11, 2025 | An OS command injection vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to run arbitr... |
| CVE-2025-0105 | CRITICAL | 9.1 | 13.0% | Jan 11, 2025 | An arbitrary file deletion vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to delete ... |
| CVE-2025-22949 | CRITICAL | 9.8 | 1.9% | Jan 10, 2025 | Tenda ac9 v1.0 firmware v15.03.05.19 is vulnerable to command injection in /goform/SetSambaCfg, which may lead to remote... |
| CVE-2025-22152 | CRITICAL | 9.4 | 0.6% | Jan 10, 2025 | Atheos is a self-hosted browser-based cloud IDE. Prior to v600, the $path and $target parameters are not properly valida... |
| CVE-2025-22946 | CRITICAL | 9.8 | 0.9% | Jan 10, 2025 | Tenda ac9 v1.0 firmware v15.03.05.19 contains a stack overflow vulnerability in /goform/SetOnlineDevName, which may lead... |
| CVE-2025-23016 | CRITICAL | 9.3 | 0.6% | Jan 10, 2025 | FastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an integer overflow (and resultant heap-based buffer overflow) via crafte... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now