2025 CVE Vulnerabilities
45,150 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-10746 | MEDIUM | 6.5 | 0.2% | Oct 4, 2025 | The Integrate Dynamics 365 CRM plugin for WordPress is vulnerable to unauthorized access in all versions up to, and incl... |
| CVE-2025-61685 | MEDIUM | 6.5 | 0.5% | Oct 3, 2025 | Mastra is a Typescript framework for building AI agents and assistants. Versions 0.13.8 through 0.13.20-alpha.0 are vuln... |
| CVE-2025-61681 | MEDIUM | 5.4 | 0.2% | Oct 3, 2025 | KUNO CMS is a fully deployable full-stack blog application. Versions 1.3.13 and below contain validation flaws in its fi... |
| CVE-2025-61680 | MEDIUM | 6.6 | 0.3% | Oct 3, 2025 | Minecraft RCON Terminal is a VS Code extension that streamlines Minecraft server management. Versions 0.1.0 through 2.0.... |
| CVE-2025-43825 | MEDIUM | 6.5 | 0.3% | Oct 3, 2025 | A vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4, 2024.Q4.0 throug... |
| CVE-2025-10696 | MEDIUM | 5.4 | 0.2% | Oct 3, 2025 | OpenSupports exposes an endpoint that allows the list of 'supervised users' for any account to be edited, but it does no... |
| CVE-2025-10695 | MEDIUM | 5.3 | 0.3% | Oct 3, 2025 | Two unauthenticated diagnostic endpoints allow arbitrary backend-initiated network connections to an attacker‑supplied d... |
| CVE-2025-59829 | MEDIUM | 6.5 | 0.4% | Oct 3, 2025 | Claude Code is an agentic coding tool. Versions below 1.0.120 failed to account for symlinks when checking permission de... |
| CVE-2025-53354 | MEDIUM | 6.1 | 0.2% | Oct 3, 2025 | NiceGUI is a Python-based UI framework. Versions 2.24.2 and below are at risk for Cross-Site Scripting (XSS) when develo... |
| CVE-2025-54154 | MEDIUM | 6.8 | 0.2% | Oct 3, 2025 | An improper authentication vulnerability has been reported to affect QNAP Authenticator. If an attacker gains physical a... |
| CVE-2025-53407 | MEDIUM | 6.5 | 0.3% | Oct 3, 2025 | A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system ver... |
| CVE-2025-53406 | MEDIUM | 6.5 | 0.3% | Oct 3, 2025 | A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system ver... |
| CVE-2025-52867 | MEDIUM | 6.5 | 0.4% | Oct 3, 2025 | An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a remote attacker gains... |
| CVE-2025-52866 | MEDIUM | 4.9 | 0.3% | Oct 3, 2025 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote... |
| CVE-2025-52862 | MEDIUM | 4.9 | 0.3% | Oct 3, 2025 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote... |
| CVE-2025-52860 | MEDIUM | 4.9 | 0.3% | Oct 3, 2025 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote... |
| CVE-2025-52859 | MEDIUM | 4.9 | 0.3% | Oct 3, 2025 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote... |
| CVE-2025-52858 | MEDIUM | 4.9 | 0.3% | Oct 3, 2025 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote... |
| CVE-2025-52857 | MEDIUM | 4.9 | 0.3% | Oct 3, 2025 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote... |
| CVE-2025-52855 | MEDIUM | 4.9 | 0.3% | Oct 3, 2025 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote... |
| CVE-2025-52854 | MEDIUM | 4.9 | 0.3% | Oct 3, 2025 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote... |
| CVE-2025-52853 | MEDIUM | 4.9 | 0.3% | Oct 3, 2025 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote... |
| CVE-2025-52658 | MEDIUM | 4.8 | 0.2% | Oct 3, 2025 | HCL MyXalytics is affected by the use of vulnerable/outdated versions which can expose the application to known security... |
| CVE-2025-52654 | MEDIUM | 4.6 | 0.2% | Oct 3, 2025 | HCL MyXalytics v6.6 is affected by an HTML Injection. This issue occurs when untrusted input is included in the output w... |
| CVE-2025-52433 | MEDIUM | 4.9 | 0.3% | Oct 3, 2025 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now