2025 CVE Vulnerabilities
45,153 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-59008 | HIGH | 7.6 | 0.3% | Sep 9, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PressTigers ZIP Co... |
| CVE-2025-58993 | HIGH | 7.6 | 0.3% | Sep 9, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor LMS ... |
| CVE-2025-58991 | HIGH | 7.1 | 0.1% | Sep 9, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Cristiano Zanca WooCommerce Booking Bundle Hours allows Stored XSS. T... |
| CVE-2025-58215 | HIGH | 8.1 | 0.4% | Sep 9, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-57087 | HIGH | 7.5 | 0.5% | Sep 9, 2025 | Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the countryCode parameter in the werlessAdva... |
| CVE-2025-57072 | HIGH | 7.5 | 0.5% | Sep 9, 2025 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the staticRouteGateway parameter in the formSe... |
| CVE-2025-57071 | HIGH | 7.5 | 0.5% | Sep 9, 2025 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the vpnUsers parameter in the formAddVpnUsers ... |
| CVE-2025-57070 | HIGH | 7.5 | 0.5% | Sep 9, 2025 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the gstUp parameter in the guestWifiRuleRefres... |
| CVE-2025-57069 | HIGH | 7.5 | 0.5% | Sep 9, 2025 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the pPppUser parameter in the getsinglepppuser... |
| CVE-2025-57064 | HIGH | 7.5 | 0.5% | Sep 9, 2025 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the bindDhcpIndex parameter in the modifyDhcpR... |
| CVE-2025-57063 | HIGH | 7.5 | 0.5% | Sep 9, 2025 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the portMappingIndex parameter in the formDelP... |
| CVE-2025-57062 | HIGH | 7.5 | 0.5% | Sep 9, 2025 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the delDhcpIndex parameter in the formDelDhcpR... |
| CVE-2025-57061 | HIGH | 7.5 | 0.5% | Sep 9, 2025 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain multiple stack overflows in the formIPMacBindModify function via t... |
| CVE-2025-57059 | HIGH | 7.5 | 0.5% | Sep 9, 2025 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the dhcpIndex parameter in the addDhcpRule fun... |
| CVE-2025-57058 | HIGH | 7.5 | 0.5% | Sep 9, 2025 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain multiple stack overflows in the formSetDebugCfg function via the p... |
| CVE-2025-57057 | HIGH | 7.5 | 0.5% | Sep 9, 2025 | Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the listStr parameter in the ipMacBindListStor... |
| CVE-2025-55317 | HIGH | 7.8 | 0.4% | Sep 9, 2025 | Improper link resolution before file access ('link following') in Microsoft AutoUpdate (MAU) allows an authorized attack... |
| CVE-2025-55316 | HIGH | 7.8 | 0.3% | Sep 9, 2025 | External control of file name or path in Azure Arc allows an authorized attacker to elevate privileges locally. |
| CVE-2025-55245 | HIGH | 7.8 | 0.4% | Sep 9, 2025 | Improper link resolution before file access ('link following') in Xbox allows an authorized attacker to elevate privileg... |
| CVE-2025-55243 | HIGH | 7.5 | 1.0% | Sep 9, 2025 | Exposure of sensitive information to an unauthorized actor in Microsoft Office Plus allows an unauthorized attacker to p... |
| CVE-2025-55236 | HIGH | 7.8 | 0.4% | Sep 9, 2025 | Time-of-check time-of-use (toctou) race condition in Graphics Kernel allows an authorized attacker to execute code local... |
| CVE-2025-55228 | HIGH | 7.8 | 0.3% | Sep 9, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX all... |
| CVE-2025-55227 | HIGH | 8.8 | 1.2% | Sep 9, 2025 | Improper neutralization of special elements used in a command ('command injection') in SQL Server allows an authorized a... |
| CVE-2025-55224 | HIGH | 7.8 | 0.3% | Sep 9, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX all... |
| CVE-2025-55223 | HIGH | 7 | 0.3% | Sep 9, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now