2025 CVE Vulnerabilities
45,169 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-30033 | HIGH | 8.5 | 0.2% | Aug 12, 2025 | The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when... |
| CVE-2025-41686 | HIGH | 7.8 | 0.1% | Aug 12, 2025 | A low-privileged local attacker can exploit improper permissions on nssm.exe to escalate their privileges and gain admin... |
| CVE-2025-8418 | HIGH | 8.8 | 0.5% | Aug 12, 2025 | The B Slider- Gutenberg Slider Block for WP plugin for WordPress is vulnerable to Arbitrary Plugin Installation in all v... |
| CVE-2025-6253 | HIGH | 7.5 | 0.4% | Aug 12, 2025 | The UiCore Elements – Free Elementor widgets and templates plugin for WordPress is vulnerable to Arbitrary File Read in ... |
| CVE-2025-5391 | HIGH | 8.1 | 0.8% | Aug 12, 2025 | The WooCommerce Purchase Orders plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file p... |
| CVE-2025-42976 | HIGH | 8.1 | 0.4% | Aug 12, 2025 | SAP NetWeaver Application Server ABAP (BIC Document) allows an authenticated attacker to craft a request that, when subm... |
| CVE-2025-42951 | HIGH | 8.8 | 0.4% | Aug 12, 2025 | Due to broken authorization, SAP Business One (SLD) allows an authenticated attacker to gain administrator privileges of... |
| CVE-2025-55158 | HIGH | 8.8 | 0.3% | Aug 11, 2025 | Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1406, when processing nested tu... |
| CVE-2025-55157 | HIGH | 8.8 | 0.3% | Aug 11, 2025 | Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1400, When processing nested tu... |
| CVE-2025-55156 | HIGH | 7.8 | 0.3% | Aug 11, 2025 | pyLoad is the free and open-source Download Manager written in pure Python. Prior to version 0.5.0b3.dev91, the paramete... |
| CVE-2025-55012 | HIGH | 8.5 | 0.2% | Aug 11, 2025 | Zed is a multiplayer code editor. Prior to version 0.197.3, in the Zed Agent Panel allowed for an AI agent to achieve Re... |
| CVE-2025-25235 | HIGH | 8.6 | 0.3% | Aug 11, 2025 | Server-Side Request Forgery (SSRF) in Omnissa Secure Email Gateway (SEG) in SEG prior to 2.32 running on Windows and SEG... |
| CVE-2025-54878 | HIGH | 8.6 | 0.4% | Aug 11, 2025 | CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDL... |
| CVE-2025-40920 | HIGH | 8.6 | 0.4% | Aug 11, 2025 | Catalyst::Authentication::Credential::HTTP versions 1.018 and earlier for Perl generate nonces using the Perl Data::UUID... |
| CVE-2025-7677 | HIGH | 8.2 | 0.3% | Aug 11, 2025 | A denial-of-service (DoS) attack is possible if access to the local network is provided to unauthorized users. This is d... |
| CVE-2025-54525 | HIGH | 7.5 | 0.3% | Aug 11, 2025 | Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the ... |
| CVE-2025-54463 | HIGH | 7.5 | 0.3% | Aug 11, 2025 | Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the ... |
| CVE-2025-52931 | HIGH | 7.5 | 0.3% | Aug 11, 2025 | Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the ... |
| CVE-2025-44004 | HIGH | 7.2 | 0.2% | Aug 11, 2025 | Mattermost Confluence Plugin version <1.5.0 fails to check the authorization of the user to the Mattermost instance whic... |
| CVE-2025-25231 | HIGH | 7.5 | 19.1% | Aug 11, 2025 | Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor may be able to ga... |
| CVE-2025-8859 | HIGH | 8.8 | 0.3% | Aug 11, 2025 | A vulnerability was identified in code-projects eBlog Site 1.0. Affected by this vulnerability is an unknown functionali... |
| CVE-2025-8863 | HIGH | 7 | 0.2% | Aug 11, 2025 | YugabyteDB diagnostic information was transmitted over HTTP, which could expose sensitive data during transmission |
| CVE-2025-8862 | HIGH | 7 | 0.3% | Aug 11, 2025 | YugabyteDB has been collecting diagnostics information from YugabyteDB servers, which may include sensitive gflag config... |
| CVE-2025-8846 | HIGH | 7.8 | 0.2% | Aug 11, 2025 | A vulnerability has been found in NASM Netwide Assember 2.17rc0. Affected is the function parse_line of the file parser.... |
| CVE-2025-8845 | HIGH | 7.8 | 0.2% | Aug 11, 2025 | A vulnerability was identified in NASM Netwide Assember 2.17rc0. This issue affects the function assemble_file of the fi... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now