2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-15010 | CRITICAL | 9.8 | 1.0% | Dec 22, 2025 | A vulnerability has been found in Tenda WH450 1.0.0.18. This issue affects some unknown processing of the file /goform/S... |
| CVE-2025-15008 | CRITICAL | 9.8 | 0.5% | Dec 22, 2025 | A vulnerability was detected in Tenda WH450 1.0.0.18. This affects an unknown part of the file /goform/L7Port of the com... |
| CVE-2025-15007 | CRITICAL | 9.8 | 1.0% | Dec 22, 2025 | A security vulnerability has been detected in Tenda WH450 1.0.0.18. Affected by this issue is some unknown functionality... |
| CVE-2025-15006 | CRITICAL | 9.8 | 1.0% | Dec 22, 2025 | A weakness has been identified in Tenda WH450 1.0.0.18. Affected by this vulnerability is an unknown functionality of th... |
| CVE-2025-15002 | CRITICAL | 9.8 | 0.5% | Dec 21, 2025 | A vulnerability has been found in SeaCMS up to 13.3. The affected element is an unknown function of the file js/player/d... |
| CVE-2025-14990 | CRITICAL | 9.8 | 0.4% | Dec 21, 2025 | A security flaw has been discovered in Campcodes Complete Online Beauty Parlor Management System 1.0. Impacted is an unk... |
| CVE-2025-14989 | CRITICAL | 9.8 | 0.4% | Dec 21, 2025 | A vulnerability was identified in Campcodes Complete Online Beauty Parlor Management System 1.0. This issue affects some... |
| CVE-2025-13619 | CRITICAL | 9.8 | 0.3% | Dec 20, 2025 | The Flex Store Users plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.... |
| CVE-2025-13329 | CRITICAL | 9.8 | 0.6% | Dec 20, 2025 | The File Uploader for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type ... |
| CVE-2025-14968 | CRITICAL | 9.8 | 0.3% | Dec 19, 2025 | A security flaw has been discovered in code-projects Simple Stock System 1.0. Affected by this issue is some unknown fun... |
| CVE-2025-14967 | CRITICAL | 9.8 | 0.3% | Dec 19, 2025 | A vulnerability was identified in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unkno... |
| CVE-2025-14964 | CRITICAL | 9.8 | 0.9% | Dec 19, 2025 | A vulnerability has been found in TOTOLINK T10 4.1.8cu.5083_B20200521. This affects the function sprintf of the file /cg... |
| CVE-2025-14961 | CRITICAL | 9.8 | 0.3% | Dec 19, 2025 | A vulnerability was detected in code-projects Simple Blood Donor Management System 1.0. The affected element is an unkno... |
| CVE-2025-14960 | CRITICAL | 9.8 | 0.3% | Dec 19, 2025 | A security vulnerability has been detected in code-projects Simple Blood Donor Management System 1.0. Impacted is an unk... |
| CVE-2025-14959 | CRITICAL | 9.8 | 0.3% | Dec 19, 2025 | A weakness has been identified in code-projects Simple Stock System 1.0. This issue affects some unknown processing of t... |
| CVE-2025-66580 | CRITICAL | 9.6 | 0.5% | Dec 19, 2025 | Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. A critical Stor... |
| CVE-2025-63665 | CRITICAL | 9.8 | 0.5% | Dec 19, 2025 | An issue in GT Edge AI Community Edition Versions before v2.0.12 allows attackers to execute arbitrary code via injectin... |
| CVE-2025-58053 | CRITICAL | 9.8 | 0.3% | Dec 19, 2025 | Galette is a membership management web application for non profit organizations. Prior to version 1.2.0, while updating ... |
| CVE-2025-34433 | CRITICAL | 9.3 | 1.5% | Dec 19, 2025 | AVideo versions 14.3.1 prior to 20.1 contain an unauthenticated remote code execution vulnerability caused by predictabl... |
| CVE-2025-14952 | CRITICAL | 9.8 | 0.4% | Dec 19, 2025 | A vulnerability was detected in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /... |
| CVE-2025-14951 | CRITICAL | 9.8 | 0.3% | Dec 19, 2025 | A security vulnerability has been detected in code-projects Scholars Tracking System 1.0. The impacted element is an unk... |
| CVE-2025-14950 | CRITICAL | 9.8 | 0.3% | Dec 19, 2025 | A weakness has been identified in code-projects Scholars Tracking System 1.0. The affected element is an unknown functio... |
| CVE-2025-1928 | CRITICAL | 9.1 | 0.3% | Dec 19, 2025 | Improper Restriction of Excessive Authentication Attempts vulnerability in Restajet Information Technologies Inc. Online... |
| CVE-2025-14940 | CRITICAL | 9.8 | 0.3% | Dec 19, 2025 | A vulnerability was determined in code-projects Scholars Tracking System 1.0. The affected element is an unknown functio... |
| CVE-2025-67843 | CRITICAL | 9.8 | 1.1% | Dec 19, 2025 | A Server-Side Template Injection (SSTI) vulnerability in the MDX Rendering Engine in Mintlify Platform before 2025-11-15... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now