2025 CVE Vulnerabilities
45,326 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-14940 | CRITICAL | 9.8 | 0.3% | Dec 19, 2025 | A vulnerability was determined in code-projects Scholars Tracking System 1.0. The affected element is an unknown functio... |
| CVE-2025-14939 | HIGH | 7.2 | 0.3% | Dec 19, 2025 | A vulnerability was found in code-projects Online Appointment Booking System 1.0. Impacted is an unknown function of the... |
| CVE-2025-67846 | MEDIUM | 6.5 | 0.4% | Dec 19, 2025 | The Deployment Infrastructure in Mintlify Platform before 2025-11-15 allows remote attackers to bypass security patches ... |
| CVE-2025-67845 | MEDIUM | 5.4 | 0.5% | Dec 19, 2025 | A Directory Traversal vulnerability in the Static Asset Proxy Endpoint in Mintlify Platform before 2025-11-15 allows rem... |
| CVE-2025-67844 | MEDIUM | 4.3 | 0.4% | Dec 19, 2025 | The GitHub Integration API in Mintlify Platform before 2025-11-15 allows remote attackers to obtain sensitive repository... |
| CVE-2025-67843 | CRITICAL | 9.8 | 1.1% | Dec 19, 2025 | A Server-Side Template Injection (SSTI) vulnerability in the MDX Rendering Engine in Mintlify Platform before 2025-11-15... |
| CVE-2025-67842 | MEDIUM | 5.4 | 0.3% | Dec 19, 2025 | The Static Asset API in Mintlify Platform before 2025-11-15 allows remote attackers to inject arbitrary web script or HT... |
| CVE-2025-52692 | HIGH | 8.8 | 6.4% | Dec 19, 2025 | Successful exploitation of the vulnerability could allow an attacker with local network access to send a specially craft... |
| CVE-2025-14910 | MEDIUM | 6.5 | 0.4% | Dec 19, 2025 | A vulnerability was detected in Edimax BR-6208AC 1.02. This impacts the function handle_retr of the component FTP Daemon... |
| CVE-2025-14909 | HIGH | 8.1 | 0.4% | Dec 19, 2025 | A weakness has been identified in JeecgBoot up to 3.9.0. The impacted element is the function SysUserOnlineController of... |
| CVE-2025-13941 | HIGH | 8.8 | 0.2% | Dec 19, 2025 | A local privilege escalation vulnerability exists in the Foxit PDF Reader/Editor Update Service. During plugin installat... |
| CVE-2025-14908 | HIGH | 8.1 | 0.3% | Dec 19, 2025 | A security flaw has been discovered in JeecgBoot up to 3.9.0. The affected element is an unknown function of the file je... |
| CVE-2025-14900 | HIGH | 7.2 | 0.4% | Dec 19, 2025 | A security vulnerability has been detected in CodeAstro Real Estate Management System 1.0. Affected is an unknown functi... |
| CVE-2025-14899 | HIGH | 7.2 | 0.3% | Dec 19, 2025 | A weakness has been identified in CodeAstro Real Estate Management System 1.0. This impacts an unknown function of the f... |
| CVE-2025-14733 | CRITICAL | 9.8 | 26.5% | Dec 19, 2025 | An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attac... |
| CVE-2025-11774 | HIGH | 8.2 | 0.6% | Dec 19, 2025 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the software... |
| CVE-2025-64675 | CRITICAL | 9.6 | 0.6% | Dec 19, 2025 | Improper neutralization of input during web page generation ('cross-site scripting') in Azure Cosmos DB allows an unauth... |
| CVE-2025-14898 | HIGH | 7.2 | 0.3% | Dec 19, 2025 | A security flaw has been discovered in CodeAstro Real Estate Management System 1.0. This affects an unknown function of ... |
| CVE-2025-14897 | HIGH | 7.2 | 0.3% | Dec 19, 2025 | A vulnerability was identified in CodeAstro Real Estate Management System 1.0. The impacted element is an unknown functi... |
| CVE-2025-68422 | MEDIUM | 4.3 | 0.2% | Dec 18, 2025 | Improper Authorization (CWE-285) in Kibana can lead to privilege escalation (CAPEC-233) by allowing an authenticated use... |
| CVE-2025-68398 | CRITICAL | 9.1 | 0.8% | Dec 18, 2025 | Weblate is a web based localization tool. In versions prior to 5.15.1, it was possible to overwrite Git configuration re... |
| CVE-2025-68390 | MEDIUM | 4.9 | 0.3% | Dec 18, 2025 | Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow an authenticated user with sna... |
| CVE-2025-68389 | MEDIUM | 6.5 | 0.3% | Dec 18, 2025 | Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can allow a low-privileged authenticated user t... |
| CVE-2025-68387 | MEDIUM | 6.1 | 0.2% | Dec 18, 2025 | Improper neutralization of input during web page generation ('Cross-site Scripting') (CWE-79) allows an unauthenticated ... |
| CVE-2025-68386 | MEDIUM | 4.3 | 0.2% | Dec 18, 2025 | Improper Authorization (CWE-285) in Kibana can lead to privilege escalation (CAPEC-233) by allowing an authenticated use... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now