2025 CVE Vulnerabilities
45,331 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-9866 | HIGH | 8.8 | 0.4% | Sep 3, 2025 | Inappropriate implementation in Extensions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to bypass c... |
| CVE-2025-9920 | HIGH | 7.2 | 0.4% | Sep 3, 2025 | A security flaw has been discovered in Campcodes Recruitment Management System 1.0. This impacts the function include of... |
| CVE-2025-55852 | HIGH | 7.5 | 0.4% | Sep 3, 2025 | Tenda AC8 v16.03.34.06 is vulnerable to Buffer Overflow in the formWifiBasicSet function via the parameter security or s... |
| CVE-2025-0280 | HIGH | 7.5 | 0.1% | Sep 3, 2025 | A security vulnerability in HCL Compass can allow attacker to gain unauthorized database access. |
| CVE-2025-58644 | HIGH | 7.2 | 0.4% | Sep 3, 2025 | Deserialization of Untrusted Data vulnerability in enituretechnology LTL Freight Quotes - TQL Edition ltl-freight-quotes... |
| CVE-2025-58643 | HIGH | 7.2 | 0.4% | Sep 3, 2025 | Deserialization of Untrusted Data vulnerability in enituretechnology LTL Freight Quotes – Daylight Edition ltl-freight-q... |
| CVE-2025-58642 | HIGH | 7.2 | 0.4% | Sep 3, 2025 | Deserialization of Untrusted Data vulnerability in enituretechnology LTL Freight Quotes – Day & Ross Edition ltl-freight... |
| CVE-2025-58637 | HIGH | 7.5 | 0.4% | Sep 3, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-58608 | HIGH | 7.5 | 0.4% | Sep 3, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-58604 | HIGH | 7.6 | 0.3% | Sep 3, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFunnels Mail Min... |
| CVE-2025-57151 | HIGH | 8.8 | 0.6% | Sep 3, 2025 | phpgurukul Complaint Management System 2.0 is vulnerable to Cross Site Scripting (XSS) in admin/userprofile.php via the ... |
| CVE-2025-57150 | HIGH | 7.2 | 0.6% | Sep 3, 2025 | phpgurukul Complaint Management System in PHP 2.0 is vulnerable to Cross Site Scripting (XSS) in admin/subcategory.php v... |
| CVE-2025-57147 | HIGH | 7.5 | 0.5% | Sep 3, 2025 | A SQL Injection vulnerability was found in phpgurukul Complaint Management System 2.0. The vulnerability is due to lack ... |
| CVE-2025-57146 | HIGH | 8.1 | 0.4% | Sep 3, 2025 | phpgurukul Complaint Management System in PHP 2.0 is vulnerable to SQL Injection in user/reset-password.php via the mobi... |
| CVE-2025-47421 | HIGH | 8.6 | 0.3% | Sep 3, 2025 | Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in CRESTRON TOUCHSCREEN... |
| CVE-2025-2416 | HIGH | 8.6 | 0.3% | Sep 3, 2025 | Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft LimonDesk allows Authentication Bypa... |
| CVE-2025-26210 | HIGH | 8.8 | 0.5% | Sep 3, 2025 | DeepSeek R1 through V3.1 allows XSS, as demonstrated by JavaScript execution in the context of the run-html-chat.deepsee... |
| CVE-2025-53694 | HIGH | 7.5 | 5.3% | Sep 3, 2025 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Sitecore Sitecore Experience Manager (XM), S... |
| CVE-2025-53691 | HIGH | 8.8 | 1.4% | Sep 3, 2025 | Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) a... |
| CVE-2025-2415 | HIGH | 8.6 | 0.3% | Sep 3, 2025 | Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft MyRezzta allows Authentication Bypas... |
| CVE-2025-9817 | HIGH | 7.5 | 0.2% | Sep 3, 2025 | SSH dissector crash in Wireshark 4.4.0 to 4.4.8 allows denial of service |
| CVE-2025-21034 | HIGH | 7.8 | 0.1% | Sep 3, 2025 | Out-of-bounds write in libsavsvc.so prior to SMR Sep-2025 Release 1 allows local attackers to potentially execute arbitr... |
| CVE-2025-9785 | HIGH | 7.7 | 0.1% | Sep 3, 2025 | PaperCut Print Deploy is an optional component that integrates with PaperCut NG/MF which simplifies printer deployment a... |
| CVE-2025-58176 | HIGH | 8.8 | 7.7% | Sep 3, 2025 | Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. In versions 0.9... |
| CVE-2025-9848 | HIGH | 7.5 | 0.6% | Sep 3, 2025 | A security vulnerability has been detected in ScriptAndTools Real Estate Management System 1.0. The affected element is ... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now