2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-59709 | MEDIUM | 6.8 | 0.9% | Apr 3, 2026 | An issue was discovered in Biztalk360 through 11.5. because of mishandling of user-provided input in a path to be read b... |
| CVE-2025-43238 | MEDIUM | 6.2 | 0.2% | Apr 2, 2026 | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonom... |
| CVE-2025-43210 | MEDIUM | 6.3 | 0.4% | Apr 2, 2026 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.6 and iPadOS 18... |
| CVE-2025-66487 | MEDIUM | 6.5 | 0.3% | Apr 1, 2026 | IBM Aspera Shares 1.9.9 through 1.11.0 does not properly rate limit the frequency that an authenticated user can send em... |
| CVE-2025-66486 | MEDIUM | 6.1 | 0.2% | Apr 1, 2026 | IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML co... |
| CVE-2025-66485 | MEDIUM | 5.4 | 0.2% | Apr 1, 2026 | IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to HTTP header injection, caused by improper validation of input by... |
| CVE-2025-66484 | MEDIUM | 5.4 | 0.2% | Apr 1, 2026 | IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to ... |
| CVE-2025-66483 | MEDIUM | 6.5 | 0.2% | Apr 1, 2026 | IBM Aspera Shares 1.9.9 through 1.11.0 does not invalidate session after a password reset which could allow an authentic... |
| CVE-2025-36373 | MEDIUM | 6.8 | 0.3% | Apr 1, 2026 | IBM DataPower Gateway 10.6CD 10.6.1.0 through 10.6.5.0 and IBM DataPower Gateway 10.5.0 10.5.0.0 through 10.5.0.20 and I... |
| CVE-2025-66442 | MEDIUM | 5.1 | 0.3% | Apr 1, 2026 | In Mbed TLS through 4.0.0, there is a compiler-induced timing side channel (in RSA and CBC/ECB decryption) that only occ... |
| CVE-2025-67807 | MEDIUM | 4.7 | 0.1% | Apr 1, 2026 | The login mechanism of Sage DPW 2025_06_004 displays distinct responses for valid and invalid usernames, allowing enumer... |
| CVE-2025-67806 | MEDIUM | 5.3 | 0.3% | Apr 1, 2026 | The login mechanism of Sage DPW 2021_06_004 displays distinct responses for valid and invalid usernames, allowing enumer... |
| CVE-2025-13535 | MEDIUM | 6.4 | 0.2% | Apr 1, 2026 | The King Addons for Elementor plugin for WordPress is vulnerable to multiple Contributor+ DOM-Based Stored Cross-Site Sc... |
| CVE-2025-71280 | MEDIUM | 5.5 | 0.1% | Apr 1, 2026 | XenForo before 2.3.7 allows information disclosure via local account page caching on shared systems. On systems where mu... |
| CVE-2025-41357 | MEDIUM | 6.1 | 0.2% | Mar 31, 2026 | Reflected Cross-Site Scripting (XSS) vulnerability in Anon Proxy Server v0.104. This vulnerability allows an attacker to... |
| CVE-2025-41356 | MEDIUM | 6.1 | 0.2% | Mar 31, 2026 | Reflected Cross-Site Scripting (XSS) vulnerability in Anon Proxy Server v0.104. This vulnerability allows an attacker to... |
| CVE-2025-41355 | MEDIUM | 6.1 | 0.2% | Mar 31, 2026 | Reflected Cross-Site Scripting (XSS) vulnerability in Anon Proxy Server v0.104. This vulnerability allows an attacker t... |
| CVE-2025-10553 | MEDIUM | 5.4 | 0.2% | Mar 31, 2026 | A Stored Cross-site Scripting (XSS) vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manag... |
| CVE-2025-10551 | MEDIUM | 5.4 | 0.2% | Mar 31, 2026 | A Stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovat... |
| CVE-2025-66215 | MEDIUM | 6.8 | 0.2% | Mar 30, 2026 | OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, an attacker with physical access to t... |
| CVE-2025-66038 | MEDIUM | 6.8 | 0.3% | Mar 30, 2026 | OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, sc_compacttlv_find_tag searches a com... |
| CVE-2025-66037 | MEDIUM | 6.8 | 0.3% | Mar 30, 2026 | OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, feeding a crafted input to the fuzz_p... |
| CVE-2025-49010 | MEDIUM | 6.8 | 0.1% | Mar 30, 2026 | OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, an attacker with physical access to t... |
| CVE-2025-3716 | MEDIUM | 5.3 | 0.2% | Mar 30, 2026 | User enumeration in ESET Protect (on-prem) via Response Timing. |
| CVE-2025-15445 | MEDIUM | 5.4 | 0.2% | Mar 28, 2026 | The Restaurant Cafeteria WordPress theme through 0.4.6 exposes insecure admin-ajax actions without nonce or capability c... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now