2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-69196 | MEDIUM | 6.5 | 0.4% | Mar 16, 2026 | FastMCP is the standard framework for building MCP applications. Prior to version 2.14.2, the server does not properly r... |
| CVE-2025-65734 | MEDIUM | 5.4 | 0.2% | Mar 16, 2026 | An authenticated arbitrary file upload vulnerability in the Courses/Work Assignments module of gunet Open eClass v3.11, ... |
| CVE-2025-57543 | MEDIUM | 6.1 | 0.2% | Mar 16, 2026 | Cross Site scripting vulnerability (XSS) in NetBox 4.3.5 "comment" field on object forms. An attacker can inject arbitra... |
| CVE-2025-52649 | MEDIUM | 5.3 | 0.1% | Mar 16, 2026 | HCL AION is affected by a vulnerability where certain identifiers may be predictable in nature. Predictable identifiers ... |
| CVE-2025-52646 | MEDIUM | 5.3 | 0.1% | Mar 16, 2026 | HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmfu... |
| CVE-2025-52645 | MEDIUM | 5.3 | 0.1% | Mar 16, 2026 | HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient aut... |
| CVE-2025-52642 | MEDIUM | 6.5 | 0.1% | Mar 16, 2026 | HCL AION is affected by a vulnerability where internal filesystem paths may be exposed through application responses or ... |
| CVE-2025-2274 | MEDIUM | 6.1 | 0.2% | Mar 16, 2026 | Improper Neutralization of Input During Web Page Generation in Forcepoint Web Security (On-Prem) on Windows allows Store... |
| CVE-2025-71264 | MEDIUM | 5.3 | 0.3% | Mar 16, 2026 | Mumble before 1.6.870 is prone to an out-of-bounds array access, which may result in denial of service (client crash). |
| CVE-2025-6969 | MEDIUM | 5.5 | 0.1% | Mar 16, 2026 | in OpenHarmony v5.1.0 and prior versions allow a local attacker cause DOS through improper input. |
| CVE-2025-69245 | MEDIUM | 6.1 | 0.3% | Mar 16, 2026 | Raytha CMS is vulnerable to Reflected XSS via returnUrl parameter in logon functionality. An attacker can craft a malici... |
| CVE-2025-69243 | MEDIUM | 5.3 | 0.3% | Mar 16, 2026 | Raytha CMS is vulnerable to User Enumeration in password reset functionality. Difference in messages could allow an atta... |
| CVE-2025-69242 | MEDIUM | 6.1 | 0.2% | Mar 16, 2026 | Raytha CMS is vulnerable to reflected XSS via the backToListUrl parameter. An attacker can craft a malicious URL which, ... |
| CVE-2025-69241 | MEDIUM | 5.4 | 0.2% | Mar 16, 2026 | Raytha CMS is vulnerable to Stored XSS via FirstName and LastName parameters in profile editing functionality. Authentic... |
| CVE-2025-69238 | MEDIUM | 4.3 | 0.1% | Mar 16, 2026 | Raytha CMS is vulnerable to Cross-Site Request Forgery across multiple endpoints. Attacker can craft special website, wh... |
| CVE-2025-69237 | MEDIUM | 5.4 | 0.2% | Mar 16, 2026 | Raytha CMS is vulnerable to Stored XSS via FieldValues[0].Value parameter in page creation functionality. Authenticated ... |
| CVE-2025-69236 | MEDIUM | 5.4 | 0.2% | Mar 16, 2026 | Raytha CMS is vulnerable to Stored XSS via FieldValues[1].Value parameter in post editing functionality. Authenticated a... |
| CVE-2025-13460 | MEDIUM | 5.3 | 0.2% | Mar 16, 2026 | IBM Aspera Console 3.3.0 through 3.4.8 could allow an attacker to enumerate usernames due to an observable response disc... |
| CVE-2025-13459 | MEDIUM | 4.9 | 0.4% | Mar 16, 2026 | IBM Aspera Console 3.3.0 through 3.4.8 could allow a privileged user to cause a denial of service due to improper enforc... |
| CVE-2025-13212 | MEDIUM | 4.3 | 0.3% | Mar 16, 2026 | IBM Aspera Console 3.3.0 through 3.4.8 could allow an authenticated user to cause a denial of service in the email servi... |
| CVE-2025-12736 | MEDIUM | 6.5 | 0.2% | Mar 16, 2026 | in OpenHarmony v5.0.3 and prior versions allow a local attacker case sensitive information leak through use of uninitial... |
| CVE-2025-10461 | MEDIUM | 5.3 | 0.4% | Mar 16, 2026 | Global file reads caused by improper URL checks in webserver in Softing Industrial Automation GmbH smartLinks on docker ... |
| CVE-2025-8766 | MEDIUM | 6.4 | 0.2% | Mar 13, 2026 | A container privilege escalation flaw was found in certain Multi-Cloud Object Gateway Core images. This issue stems from... |
| CVE-2025-66249 | MEDIUM | 6.3 | 0.6% | Mar 13, 2026 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Livy. This issue... |
| CVE-2025-60012 | MEDIUM | 6.3 | 0.5% | Mar 13, 2026 | Malicious configuration can lead to unauthorized file access in Apache Livy. This issue affects Apache Livy 0.7.0 and 0... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now