2025 CVE Vulnerabilities
45,343 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-41675 | HIGH | 7.2 | 0.6% | Jul 21, 2025 | A high privileged remote attacker can execute arbitrary system commands via GET requests in the cloud server communicati... |
| CVE-2025-41674 | HIGH | 7.2 | 0.6% | Jul 21, 2025 | A high privileged remote attacker can execute arbitrary system commands via POST requests in the diagnostic action due t... |
| CVE-2025-41673 | HIGH | 7.2 | 0.6% | Jul 21, 2025 | A high privileged remote attacker can execute arbitrary system commands via POST requests in the send_sms action due to ... |
| CVE-2025-1469 | HIGH | 7.5 | 0.4% | Jul 21, 2025 | Authorization Bypass Through User-Controlled Key vulnerability in Turtek Software Eyotek allows Exploitation of Trusted ... |
| CVE-2025-4569 | HIGH | 7.7 | 0.4% | Jul 21, 2025 | An insecure sensitive key storage issue was found in MyASUS. potentially allowing unauthorized actor to obtain a token t... |
| CVE-2025-4049 | HIGH | 8.6 | 0.2% | Jul 21, 2025 | Use of hard-coded, the same among all vulnerable installations SQLite credentials vulnerability in SIGNUM-NET FARA allow... |
| CVE-2025-7919 | HIGH | 7.1 | 0.4% | Jul 21, 2025 | WinMatrix3 Web package developed by Simopro Technology has a SQL Injection vulnerability, allowing unauthenticated remot... |
| CVE-2025-7344 | HIGH | 8.8 | 0.5% | Jul 21, 2025 | The EAI developed by Digiwin has a Privilege Escalation vulnerability, allowing remote attackers with regular privileges... |
| CVE-2025-24938 | HIGH | 8.4 | 0.3% | Jul 21, 2025 | The web application allows user input to pass unfiltered to a command executed on the underlying operating system. An at... |
| CVE-2025-7917 | HIGH | 8.6 | 0.5% | Jul 21, 2025 | WinMatrix3 Web package developed by Simopro Technology has an Arbitrary File Upload vulnerability, allowing remote attac... |
| CVE-2025-7914 | HIGH | 8.8 | 0.8% | Jul 21, 2025 | A vulnerability has been found in Tenda AC6 15.03.06.50 and classified as critical. Affected by this vulnerability is th... |
| CVE-2025-7913 | HIGH | 8.8 | 0.8% | Jul 21, 2025 | A vulnerability, which was classified as critical, was found in TOTOLINK T6 4.1.5cu.748_B20211015. Affected is the funct... |
| CVE-2025-7912 | HIGH | 8.8 | 1.0% | Jul 20, 2025 | A vulnerability, which was classified as critical, has been found in TOTOLINK T6 4.1.5cu.748_B20211015. This issue affec... |
| CVE-2025-7910 | HIGH | 8.8 | 1.2% | Jul 20, 2025 | A vulnerability classified as critical has been found in D-Link DIR-513 1.10. This affects the function sprintf of the f... |
| CVE-2025-7909 | HIGH | 8.8 | 1.2% | Jul 20, 2025 | A vulnerability was found in D-Link DIR-513 1.0. It has been rated as critical. Affected by this issue is the function s... |
| CVE-2025-7908 | HIGH | 8.8 | 1.1% | Jul 20, 2025 | A vulnerability was found in D-Link DI-8100 1.0. It has been declared as critical. Affected by this vulnerability is the... |
| CVE-2025-7905 | HIGH | 8.8 | 0.4% | Jul 20, 2025 | A vulnerability has been found in itsourcecode Insurance Management System 1.0 and classified as critical. This vulnerab... |
| CVE-2025-54317 | HIGH | 8.4 | 0.6% | Jul 20, 2025 | An issue was discovered in Logpoint before 7.6.0. An attacker with operator privileges can exploit a path traversal vuln... |
| CVE-2025-48965 | HIGH | 7.5 | 0.5% | Jul 20, 2025 | Mbed TLS before 3.6.4 has a NULL pointer dereference because mbedtls_asn1_store_named_data can trigger conflicting data ... |
| CVE-2025-7904 | HIGH | 8.8 | 0.4% | Jul 20, 2025 | A vulnerability, which was classified as critical, was found in itsourcecode Insurance Management System 1.0. This affec... |
| CVE-2025-7898 | HIGH | 7.2 | 0.4% | Jul 20, 2025 | A vulnerability was found in Codecanyon iDentSoft 2.0. It has been classified as critical. This affects an unknown part ... |
| CVE-2025-7896 | HIGH | 7.5 | 0.4% | Jul 20, 2025 | A vulnerability has been found in harry0703 MoneyPrinterTurbo up to 1.2.6 and classified as critical. Affected by this v... |
| CVE-2025-46385 | HIGH | 8.6 | 0.2% | Jul 20, 2025 | CWE-918 Server-Side Request Forgery (SSRF) |
| CVE-2025-46384 | HIGH | 8.8 | 0.3% | Jul 20, 2025 | CWE-434 Unrestricted Upload of File with Dangerous Type |
| CVE-2025-7886 | HIGH | 7.3 | 0.4% | Jul 20, 2025 | A vulnerability, which was classified as critical, was found in pmTicket Project-Management-Software up to 2ef379da2075f... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now