2025 CVE Vulnerabilities
45,342 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-9998 | MEDIUM | 6 | 0.2% | Sep 5, 2025 | The sequence of packets received by a Networking server are not correctly checked. An attacker could exploit this vulne... |
| CVE-2025-54744 | MEDIUM | 6.5 | 0.2% | Sep 5, 2025 | Missing Authorization vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Exploi... |
| CVE-2025-53571 | MEDIUM | 6.5 | 0.2% | Sep 5, 2025 | Missing Authorization vulnerability in VillaTheme HAPPY happy-helpdesk-support-ticket-system allows Exploiting Incorrect... |
| CVE-2025-48105 | MEDIUM | 6.5 | 0.2% | Sep 5, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vincent Boiardt Ea... |
| CVE-2025-48103 | MEDIUM | 6.5 | 0.2% | Sep 5, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mulscully Today's ... |
| CVE-2025-48102 | MEDIUM | 5.9 | 0.2% | Sep 5, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gourl GoUrl Bitcoi... |
| CVE-2025-32317 | MEDIUM | 5.5 | 0.1% | Sep 5, 2025 | In App Widget, there is a possible Information Disclosure due to a confused deputy. This could lead to local information... |
| CVE-2025-32316 | MEDIUM | 5.5 | 0.1% | Sep 5, 2025 | In gralloc4, there is a possible out of bounds write due to a missing bounds check. This could lead to local information... |
| CVE-2025-27003 | MEDIUM | 4.3 | 0.1% | Sep 5, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in fullworks Quick Paypal Payments quick-paypal-payments allows Cross Si... |
| CVE-2025-26434 | MEDIUM | 5.5 | 0.1% | Sep 5, 2025 | In libxml2, there is a possible out of bounds read due to a buffer overflow. This could lead to local information disclo... |
| CVE-2025-10013 | MEDIUM | 6.3 | 0.3% | Sep 5, 2025 | A vulnerability was detected in Portabilis i-Educar up to 2.10. This affects an unknown function of the file /exportacao... |
| CVE-2025-8695 | MEDIUM | 5.4 | 0.2% | Sep 5, 2025 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Netcad NetG... |
| CVE-2025-58887 | MEDIUM | 6.5 | 0.2% | Sep 5, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Course Finder | an... |
| CVE-2025-58886 | MEDIUM | 5.9 | 0.2% | Sep 5, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tan Nguyen Instant... |
| CVE-2025-58884 | MEDIUM | 5.9 | 0.2% | Sep 5, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ivan Drago vipdrv ... |
| CVE-2025-58883 | MEDIUM | 5.9 | 0.2% | Sep 5, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Thomas Harris Sear... |
| CVE-2025-58882 | MEDIUM | 6.5 | 0.2% | Sep 5, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in w1zzard Simple Tex... |
| CVE-2025-58880 | MEDIUM | 6.5 | 0.2% | Sep 5, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in reubenthiessen Tra... |
| CVE-2025-58878 | MEDIUM | 6.5 | 0.1% | Sep 5, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in usamafarooq Woocommerce Gifts Product woo-gift-product allows Cross S... |
| CVE-2025-58876 | MEDIUM | 6.5 | 0.2% | Sep 5, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ali Aghdam Aparat ... |
| CVE-2025-58875 | MEDIUM | 6.5 | 0.2% | Sep 5, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sudar Muthu WP Git... |
| CVE-2025-58874 | MEDIUM | 6.5 | 0.2% | Sep 5, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in josepsitjar StoryM... |
| CVE-2025-58873 | MEDIUM | 5.9 | 0.2% | Sep 5, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pusheco Pushe Web ... |
| CVE-2025-58872 | MEDIUM | 6.5 | 0.3% | Sep 5, 2025 | Insertion of Sensitive Information Into Sent Data vulnerability in premiumbizthemes Simple Price Calculator simple-price... |
| CVE-2025-58871 | MEDIUM | 6.5 | 0.2% | Sep 5, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Luis Rock Master P... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now