2025 CVE Vulnerabilities
45,172 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-14703 | MEDIUM | 5.5 | 0.6% | Dec 15, 2025 | A vulnerability has been found in Shiguangwu sgwbox N3 2.0.25. The affected element is an unknown function of the file /... |
| CVE-2025-14702 | MEDIUM | 4.4 | 0.2% | Dec 15, 2025 | A flaw has been found in Smartbit CommV Smartschool App up to 10.4.4. Impacted is an unknown function of the component b... |
| CVE-2025-13740 | MEDIUM | 6.4 | 0.2% | Dec 15, 2025 | The Lightweight Accordion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `lightweigh... |
| CVE-2025-14699 | MEDIUM | 5.3 | 0.2% | Dec 15, 2025 | A security vulnerability has been detected in Municorn FAX App 3.27.0 on Android. This vulnerability affects unknown cod... |
| CVE-2025-14698 | MEDIUM | 4.4 | 0.2% | Dec 15, 2025 | A weakness has been identified in atlaszz AI Photo Team Galleryit App 1.3.8.2 on Android. This affects an unknown part o... |
| CVE-2025-14697 | LOW | 3.7 | 0.3% | Dec 15, 2025 | A security flaw has been discovered in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 4.10.24.3... |
| CVE-2025-14696 | MEDIUM | 5.5 | 0.3% | Dec 15, 2025 | A vulnerability was identified in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 4.10.24.3. Aff... |
| CVE-2025-14695 | MEDIUM | 6.3 | 0.2% | Dec 15, 2025 | A vulnerability was determined in SamuNatsu HaloBot up to 026b01d4a896d93eaaf9d5163a287dc9f267515b. Affected is the func... |
| CVE-2025-14694 | MEDIUM | 4.7 | 0.2% | Dec 15, 2025 | A vulnerability was found in ketr JEPaaS up to 7.2.8. This impacts the function readAllPostil of the file /je/postil/pos... |
| CVE-2025-14693 | MEDIUM | 6.2 | 0.2% | Dec 15, 2025 | A vulnerability has been found in Ugreen DH2100+ up to 5.3.0. This affects an unknown function of the component USB Hand... |
| CVE-2025-67901 | MEDIUM | 5.3 | 0.2% | Dec 15, 2025 | openrsync through 0.5.0, as used in OpenBSD through 7.8 and on other platforms, allows a client to cause a server SIGSEG... |
| CVE-2025-14692 | MEDIUM | 6.1 | 0.4% | Dec 15, 2025 | A flaw has been found in Mayan EDMS up to 4.10.1. The impacted element is an unknown function of the file /authenticatio... |
| CVE-2025-67900 | HIGH | 8.1 | 0.1% | Dec 14, 2025 | NXLog Agent before 6.11 can load a file specified by the OPENSSL_CONF environment variable. |
| CVE-2025-67899 | LOW | 2.9 | 0.1% | Dec 14, 2025 | uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with... |
| CVE-2025-14691 | MEDIUM | 6.1 | 0.4% | Dec 14, 2025 | A vulnerability was detected in Mayan EDMS up to 4.10.1. The affected element is an unknown function of the file /authen... |
| CVE-2025-67898 | MEDIUM | 4.5 | 0.2% | Dec 14, 2025 | MJML through 4.18.0 allows mj-include directory traversal to test file existence and (in the type="css" case) read files... |
| CVE-2025-13281 | MEDIUM | 5.8 | 0.4% | Dec 14, 2025 | A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree P... |
| CVE-2025-14674 | MEDIUM | 6.3 | 0.3% | Dec 14, 2025 | A vulnerability was found in aizuda snail-job up to 1.6.0. Affected by this vulnerability is the function QLExpressEngin... |
| CVE-2025-14673 | CRITICAL | 9.8 | 0.4% | Dec 14, 2025 | A vulnerability has been found in gmg137 snap7-rs up to 1.142.1. Affected is the function snap7_rs::client::S7Client::as... |
| CVE-2025-14672 | CRITICAL | 9.8 | 0.4% | Dec 14, 2025 | A flaw has been found in gmg137 snap7-rs up to 1.142.1. This impacts the function TSnap7MicroClient::opWriteArea of the ... |
| CVE-2025-14668 | CRITICAL | 9.8 | 0.3% | Dec 14, 2025 | A vulnerability was detected in campcodes Advanced Online Examination System 1.0. This affects an unknown function of th... |
| CVE-2025-14667 | CRITICAL | 9.8 | 0.3% | Dec 14, 2025 | A security vulnerability has been detected in itsourcecode COVID Tracking System 1.0. The impacted element is an unknown... |
| CVE-2025-14666 | CRITICAL | 9.8 | 0.3% | Dec 14, 2025 | A weakness has been identified in itsourcecode COVID Tracking System 1.0. The affected element is an unknown function of... |
| CVE-2025-14665 | CRITICAL | 9.8 | 0.8% | Dec 14, 2025 | A security flaw has been discovered in Tenda WH450 1.0.0.18. Impacted is an unknown function of the file /goform/DhcpLis... |
| CVE-2025-14664 | CRITICAL | 9.8 | 0.3% | Dec 14, 2025 | A vulnerability was identified in Campcodes Supplier Management System 1.0. This issue affects some unknown processing o... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now