2025 CVE Vulnerabilities
45,138 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-9909 | MEDIUM | 6.7 | 0.2% | Feb 27, 2026 | A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows ... |
| CVE-2025-9908 | MEDIUM | 6.7 | 0.2% | Feb 27, 2026 | A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Streams. This vulnerabilit... |
| CVE-2025-9907 | MEDIUM | 6.7 | 0.2% | Feb 27, 2026 | A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Stream API. This vulnerabi... |
| CVE-2025-9572 | MEDIUM | 6.5 | 0.3% | Feb 27, 2026 | n authorization flaw in Foreman's GraphQL API allows low-privileged users to access metadata beyond their assigned permi... |
| CVE-2025-13327 | MEDIUM | 6.3 | 0.1% | Feb 27, 2026 | A flaw was found in uv. This vulnerability allows an attacker to execute malicious code during package resolution or ins... |
| CVE-2025-15509 | MEDIUM | 4.3 | 0.3% | Feb 27, 2026 | The SmartRemote module has insufficient restrictions on loading URLs, which may lead to some information leakage. |
| CVE-2025-14149 | MEDIUM | 6.4 | 0.2% | Feb 27, 2026 | The Xpro Addons — 140+ Widgets for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the p... |
| CVE-2025-14040 | MEDIUM | 6.4 | 0.3% | Feb 27, 2026 | The Automotive Car Dealership Business WordPress Theme for WordPress is vulnerable to Stored Cross-Site Scripting via th... |
| CVE-2025-56605 | MEDIUM | 5.4 | 0.2% | Feb 26, 2026 | A reflected Cross-Site Scripting (XSS) vulnerability exists in the register.php backend script of PuneethReddyHC Event M... |
| CVE-2025-64999 | MEDIUM | 5.4 | 0.1% | Feb 26, 2026 | Improper neutralization of input in Checkmk versions 2.4.0 before 2.4.0p22, and 2.3.0 before 2.3.0p43 allows an attacker... |
| CVE-2025-3525 | MEDIUM | 6.5 | 0.3% | Feb 25, 2026 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.0 before 18.7.5, 18.8 before 18.8.5, and 18... |
| CVE-2025-14103 | MEDIUM | 4.3 | 0.2% | Feb 25, 2026 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.7 before 18.7.5, 18.8 before 18.8.5, and 1... |
| CVE-2025-67601 | MEDIUM | 4.8 | 0.2% | Feb 25, 2026 | A vulnerability has been identified within Rancher Manager, where using self-signed CA certificates and passing the -ski... |
| CVE-2025-14742 | MEDIUM | 4.3 | 0.2% | Feb 25, 2026 | The WP Recipe Maker plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check ... |
| CVE-2025-11563 | MEDIUM | 4.6 | 0.3% | Feb 25, 2026 | URLs containing percent-encoded slashes (`/` or `\`) can trick wcurl into saving the output file outside of the current ... |
| CVE-2025-5781 | MEDIUM | 5.2 | 0.1% | Feb 25, 2026 | Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager, Hitac... |
| CVE-2025-69231 | MEDIUM | 5.4 | 4.2% | Feb 25, 2026 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio... |
| CVE-2025-68277 | MEDIUM | 5 | 0.2% | Feb 25, 2026 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio... |
| CVE-2025-67491 | MEDIUM | 5.4 | 0.2% | Feb 25, 2026 | OpenEMR is a free and open source electronic health records and medical practice management application. Versions 5.0.0.... |
| CVE-2025-46320 | MEDIUM | 6.1 | 0.2% | Feb 24, 2026 | A cross-site scripting (XSS) vulnerability in a FileMaker WebDirect custom homepage could lead to unauthorized access an... |
| CVE-2025-1787 | MEDIUM | 4.2 | 0.1% | Feb 24, 2026 | Local admin could to leak information from the Genetec Update Service configuration web page. An authenticated, admin pr... |
| CVE-2025-62512 | MEDIUM | 5.3 | 0.8% | Feb 24, 2026 | Piwigo is an open source photo gallery application for the web. In version 15.5.0 and likely earlier 15.x releases, the ... |
| CVE-2025-47904 | MEDIUM | 4.1 | 0.1% | Feb 24, 2026 | Download of Code Without Integrity Check vulnerability in Microchip Time Provider 4100 allows Malicious Manual Software ... |
| CVE-2025-10010 | MEDIUM | 6.8 | 0.3% | Feb 24, 2026 | The CPSD CryptoPro Secure Disk application boots a small Linux operating system to perform user authentication before us... |
| CVE-2025-27555 | MEDIUM | 6.5 | 0.4% | Feb 24, 2026 | Airflow versions before 2.11.1 have a vulnerability that allows authenticated users with audit log access to see sensiti... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now