2025 CVE Vulnerabilities
45,325 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-61738 | LOW | 2.3 | 0.2% | Dec 22, 2025 | Under certain circumstances, attacker can capture the network key, read or write encrypted packets on the PowerG network... |
| CVE-2025-54890 | MEDIUM | 4.8 | 0.2% | Dec 22, 2025 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon In... |
| CVE-2025-12514 | HIGH | 7.2 | 0.3% | Dec 22, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon Infra Mon... |
| CVE-2025-62880 | MEDIUM | 4.3 | 0.1% | Dec 22, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Kunal Custom 404 Pro custom-404-pro allows Cross Site Request Forgery... |
| CVE-2025-62107 | MEDIUM | 4.3 | 0.1% | Dec 22, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in PluginOps Feather Login Page feather-login-page allows Cross Site Req... |
| CVE-2025-62094 | MEDIUM | 6.5 | 0.1% | Dec 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in voidthemes Void El... |
| CVE-2025-8305 | MEDIUM | 6.5 | 0.1% | Dec 22, 2025 | An authenticated local user can obtain information that allows claiming security policy rules of another user due to sen... |
| CVE-2025-8304 | MEDIUM | 6.5 | 0.1% | Dec 22, 2025 | An authenticated local user can obtain information that allows claiming security policy rules of another user due to sen... |
| CVE-2025-11545 | CRITICAL | 9.5 | 0.3% | Dec 22, 2025 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Sharp Display Solutions proj... |
| CVE-2025-11544 | CRITICAL | 9.5 | 0.3% | Dec 22, 2025 | Improper Validation of Integrity Check Value vulnerability in Sharp Display Solutions projectors allows a attacker may c... |
| CVE-2025-15014 | MEDIUM | 6.3 | 0.2% | Dec 22, 2025 | A security flaw has been discovered in loganhong php loganSite up to c035fb5c3edd0b2a5e32fd4051cbbc9e61a31426. This affe... |
| CVE-2025-15013 | MEDIUM | 5.3 | 0.1% | Dec 22, 2025 | A vulnerability was identified in floooh sokol up to 5d11344150973f15e16d3ec4ee7550a73fb995e0. The impacted element is t... |
| CVE-2025-15012 | CRITICAL | 9.8 | 0.4% | Dec 22, 2025 | A vulnerability was determined in code-projects Refugee Food Management System 1.0. The affected element is an unknown f... |
| CVE-2025-12049 | CRITICAL | 9.8 | 0.3% | Dec 22, 2025 | Missing Authentication for Critical Function vulnerability in Sharp Display Solutions Media Player MP-01 All Verisons al... |
| CVE-2025-11543 | CRITICAL | 9.8 | 0.2% | Dec 22, 2025 | Improper Validation of Integrity Check Value vulnerability in Sharp Display Solutions projectors allows a attacker may c... |
| CVE-2025-11542 | CRITICAL | 9.8 | 0.4% | Dec 22, 2025 | Stack-based Buffer Overflow vulnerability in Sharp Display Solutions projectors allows a attacker may execute arbitrary ... |
| CVE-2025-11541 | CRITICAL | 9.8 | 0.4% | Dec 22, 2025 | Stack-based Buffer Overflow vulnerability in Sharp Display Solutions projectors allows a attacker may execute arbitrary ... |
| CVE-2025-11540 | HIGH | 7.5 | 0.3% | Dec 22, 2025 | Path Traversal vulnerability in Sharp Display Solutions projectors allows a attacker may access and read any files withi... |
| CVE-2025-59301 | HIGH | 7.5 | 0.2% | Dec 22, 2025 | Delta Electronics DVP15MC11T lacks proper validation of the modbus/tcp packets and can lead to denial of service. |
| CVE-2025-15016 | CRITICAL | 9.8 | 0.4% | Dec 22, 2025 | Enterprise Cloud Database developed by Ragic has a Hard-coded Cryptographic Key vulnerability, allowing unauthenticated ... |
| CVE-2025-15015 | HIGH | 8.7 | 0.5% | Dec 22, 2025 | Enterprise Cloud Database developed by Ragic has a Arbitrary File Read vulnerability, allowing unauthenticated remote at... |
| CVE-2025-15011 | CRITICAL | 9.8 | 0.3% | Dec 22, 2025 | A vulnerability was found in code-projects Simple Stock System 1.0. Impacted is an unknown function of the file /logout.... |
| CVE-2025-15010 | CRITICAL | 9.8 | 0.9% | Dec 22, 2025 | A vulnerability has been found in Tenda WH450 1.0.0.18. This issue affects some unknown processing of the file /goform/S... |
| CVE-2025-15009 | HIGH | 8.8 | 0.3% | Dec 22, 2025 | A flaw has been found in liweiyi ChestnutCMS up to 1.5.8. This vulnerability affects the function FilenameUtils.getExten... |
| CVE-2025-15008 | CRITICAL | 9.8 | 0.5% | Dec 22, 2025 | A vulnerability was detected in Tenda WH450 1.0.0.18. This affects an unknown part of the file /goform/L7Port of the com... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now