2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-30053 | MEDIUM | 6.9 | 0.4% | Oct 23, 2026 | The CGM CLININET application runs the cgm-updater process listening on an open network port without any authentication. ... |
| CVE-2025-30051 | MEDIUM | 6.8 | 0.1% | Oct 23, 2026 | The CGM CLININET application stores the production database login and password, as well as RabbitMQ broker credentials, ... |
| CVE-2025-69723 | MEDIUM | 6.1 | 0.2% | Oct 22, 2026 | A reflected cross-site scripting (XSS) vulnerability in localstack v4.9.2 allows attackers to execute arbitrary Javascri... |
| CVE-2025-60476 | MEDIUM | 5.5 | 0.2% | Oct 21, 2026 | A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box before 2.5 a... |
| CVE-2025-60469 | MEDIUM | 5.5 | 0.2% | Oct 21, 2026 | A NULL pointer dereference in the gf_ac4_presentation_ch_mode function (/media_tools/av_parsers.c) of GPAC Project/MP4Bo... |
| CVE-2025-60497 | MEDIUM | 5.5 | 0.2% | Oct 21, 2026 | A segmentation violation in the GetESD function (/isomedia/track.c) of GPAC Project/MP4Box before 2.5 allows attackers t... |
| CVE-2025-60493 | MEDIUM | 5.5 | 0.2% | Oct 21, 2026 | A segmentation violation in the check_media_profile function (/mp4box/mp4box.c) of GPAC Project/MP4Box before 2.5 allows... |
| CVE-2025-60492 | MEDIUM | 5.5 | 0.3% | Oct 21, 2026 | A stack overflow in the gf_bifs_dec_node function (/bifs/field_decode.c) of GPAC Project/MP4Box before 2.5 allows attack... |
| CVE-2025-60491 | MEDIUM | 5.5 | 0.2% | Oct 21, 2026 | A heap use-after-free in the dasher_flush_segment function (/filters/dasher.c) of GPAC Project/MP4Box before 2.5 allows ... |
| CVE-2025-60490 | MEDIUM | 5.5 | 0.2% | Oct 21, 2026 | A heap use-after-free in the gf_filter_pid_send_event_downstream function (/filter_core/filter_pid.c) of GPAC Project/MP... |
| CVE-2025-60487 | MEDIUM | 5.5 | 0.2% | Oct 21, 2026 | A segmentation violation in the gf_isom_get_esd function (/isomedia/isom_read.c) of GPAC Project/MP4Box before 2.5 allow... |
| CVE-2025-60478 | MEDIUM | 5.5 | 0.2% | Oct 21, 2026 | A use-after-free in the gf_filter_packet_destroy function (/filter_core/filter_pck.c) of GPAC Project/MP4Box before 2.5 ... |
| CVE-2025-71438 | MEDIUM | 5.5 | 0.2% | Oct 21, 2026 | An out-of-bounds read in gf_odf_ac4_cfg_dsi_v1 (/odf/descriptors.c) in GPAC Project/MP4Box before v26.07.0 allows attack... |
| CVE-2025-60489 | MEDIUM | 5.5 | 0.2% | Oct 21, 2026 | A NULL pointer dereference in the dasher_insert_timeline_entry function (/filters/dasher.c) of GPAC Project/MP4Box befor... |
| CVE-2025-60479 | MEDIUM | 5.5 | 0.2% | Oct 21, 2026 | A NULL pointer dereference in the StatSFVec2f function (/scene_manager/scene_stats.c) of GPAC Project/MP4Box before 2.5 ... |
| CVE-2025-71437 | MEDIUM | 6.5 | 0.3% | Oct 21, 2026 | Astral uv before 0.8.22 contains a path traversal vulnerability in source distribution (sdist) tar extraction that allow... |
| CVE-2025-60496 | MEDIUM | 5.5 | 0.4% | Oct 20, 2026 | A Floating-Point Exception (FPE) in the reframer_send_packet function (/filters/reframer.c) of GPAC Project/MP4Box befor... |
| CVE-2025-60494 | MEDIUM | 5.5 | 0.2% | Oct 20, 2026 | A segmentation violation in the gf_props_equal_internal function (/filter_core/filter_props.c) of GPAC Project/MP4Box be... |
| CVE-2025-60475 | MEDIUM | 5.5 | 0.2% | Oct 20, 2026 | A buffer overflow in the gf_ac4_parser_bs function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 2.5 allows ... |
| CVE-2025-36252 | MEDIUM | 6.3 | 0.2% | Oct 19, 2026 | IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate... |
| CVE-2025-36069 | MEDIUM | 5.5 | 0.2% | Oct 19, 2026 | IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an auth... |
| CVE-2025-36061 | MEDIUM | 6.5 | 0.3% | Oct 19, 2026 | IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could al... |
| CVE-2025-60482 | MEDIUM | 5.5 | 0.2% | Oct 19, 2026 | A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box 2.5-DEV-rev1... |
| CVE-2025-60480 | MEDIUM | 5.5 | 0.2% | Oct 19, 2026 | A heap buffer overflow in the gf_odf_ac4_cfg_alternative_info function (/odf/descriptors.c) of GPAC Project/MP4Box 2.5-D... |
| CVE-2025-55667 | MEDIUM | 5.5 | 0.2% | Oct 19, 2026 | A segmentation violation in the dump_isom_saps function (/mp4box/filedump.c) of GPAC MP4Box v2.5-DEV-rev1672-gc9a31d0e1-... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now