2025 CVE Vulnerabilities
45,325 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-12839 | HIGH | 7.8 | 0.2% | Dec 23, 2025 | Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. Thi... |
| CVE-2025-12838 | HIGH | 7.3 | 0.1% | Dec 23, 2025 | MSP360 Free Backup Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to... |
| CVE-2025-12495 | HIGH | 7.8 | 0.2% | Dec 23, 2025 | Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. Thi... |
| CVE-2025-12491 | HIGH | 7.5 | 0.5% | Dec 23, 2025 | Senstar Symphony FetchStoredLicense Information Disclosure Vulnerability. This vulnerability allows remote attackers to ... |
| CVE-2025-15045 | CRITICAL | 9.8 | 1.0% | Dec 23, 2025 | A flaw has been found in Tenda WH450 1.0.0.18. The affected element is an unknown function of the file /goform/Natlimit ... |
| CVE-2025-15044 | CRITICAL | 9.8 | 1.0% | Dec 23, 2025 | A vulnerability was detected in Tenda WH450 1.0.0.18. Impacted is an unknown function of the file /goform/NatStaticSetti... |
| CVE-2025-14936 | HIGH | 7.8 | 0.3% | Dec 23, 2025 | NSF Unidata NetCDF-C Attribute Name Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability ... |
| CVE-2025-14935 | HIGH | 7.8 | 0.3% | Dec 23, 2025 | NSF Unidata NetCDF-C Dimension Name Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability a... |
| CVE-2025-14934 | HIGH | 7.8 | 0.3% | Dec 23, 2025 | NSF Unidata NetCDF-C Variable Name Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability a... |
| CVE-2025-14933 | HIGH | 7.8 | 0.3% | Dec 23, 2025 | NSF Unidata NetCDF-C NC Variable Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote ... |
| CVE-2025-14932 | HIGH | 7.8 | 0.3% | Dec 23, 2025 | NSF Unidata NetCDF-C Time Unit Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allow... |
| CVE-2025-14931 | CRITICAL | 10 | 0.8% | Dec 23, 2025 | Hugging Face smolagents Remote Python Executor Deserialization of Untrusted Data Remote Code Execution Vulnerability. Th... |
| CVE-2025-14930 | HIGH | 7.8 | 0.3% | Dec 23, 2025 | Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability... |
| CVE-2025-14929 | HIGH | 7.8 | 0.3% | Dec 23, 2025 | Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerabi... |
| CVE-2025-14928 | HIGH | 7.8 | 0.3% | Dec 23, 2025 | Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability a... |
| CVE-2025-14927 | HIGH | 7.8 | 0.3% | Dec 23, 2025 | Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability al... |
| CVE-2025-14926 | HIGH | 7.8 | 0.3% | Dec 23, 2025 | Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allo... |
| CVE-2025-14925 | HIGH | 7.8 | 0.3% | Dec 23, 2025 | Hugging Face Accelerate Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows... |
| CVE-2025-14924 | HIGH | 7.8 | 0.3% | Dec 23, 2025 | Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vuln... |
| CVE-2025-14922 | HIGH | 7.8 | 0.3% | Dec 23, 2025 | Hugging Face Diffusers CogView4 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerabilit... |
| CVE-2025-14921 | HIGH | 7.8 | 0.3% | Dec 23, 2025 | Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. Th... |
| CVE-2025-14920 | HIGH | 7.8 | 0.3% | Dec 23, 2025 | Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vu... |
| CVE-2025-11419 | HIGH | 7.5 | 0.7% | Dec 23, 2025 | A flaw was found in Keycloak. This vulnerability allows an unauthenticated remote attacker to cause a denial of service ... |
| CVE-2025-65354 | CRITICAL | 9.8 | 0.5% | Dec 23, 2025 | Improper input handling in /Grocery/search_products_itname.php inPuneethReddyHC event-management 1.0 permits SQL injecti... |
| CVE-2025-25364 | HIGH | 8.4 | 0.8% | Dec 23, 2025 | A command injection vulnerability in the me.connectify.SMJobBlessHelper XPC service of Speedify VPN up to v15.0.0 allows... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now