2025 CVE Vulnerabilities
45,343 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-7735 | HIGH | 8.7 | 0.4% | Jul 17, 2025 | The Hospital Information System developed by UNIMAX has a SQL Injection vulnerability, allowing unauthenticated remote a... |
| CVE-2025-34130 | HIGH | 8.7 | 1.1% | Jul 16, 2025 | An unauthenticated arbitrary file read exists in LILIN Digital Video Recorder (DVR) devices prior to firmware version 2.... |
| CVE-2025-34129 | HIGH | 8.7 | 1.1% | Jul 16, 2025 | A command injection vulnerability exists in LILIN Digital Video Recorder (DVR) devices prior to firmware version 2.0b60_... |
| CVE-2025-34128 | HIGH | 8.6 | 0.9% | Jul 16, 2025 | A buffer overflow vulnerability exists in the X360 VideoPlayer ActiveX control (VideoPlayer.ocx) version 2.6 when handli... |
| CVE-2025-34126 | HIGH | 8.7 | 1.5% | Jul 16, 2025 | A path traversal vulnerability exists in RIPS Scanner version 0.54. The vulnerability allows remote attackers to read ar... |
| CVE-2025-34124 | HIGH | 8.4 | 0.4% | Jul 16, 2025 | A buffer overflow vulnerability exists in Heroes of Might and Magic III Complete 4.0.0.0, HD Mod 3.808 build 9, and Demo... |
| CVE-2025-34123 | HIGH | 8.4 | 0.5% | Jul 16, 2025 | A stack-based buffer overflow vulnerability exists in VideoCharge Studio 2.12.3.685 when processing a specially crafted ... |
| CVE-2025-34120 | HIGH | 8.7 | 1.2% | Jul 16, 2025 | An unauthenticated file download vulnerability exists in LimeSurvey versions from 2.0+ up to and including 2.06+ Build 1... |
| CVE-2025-34119 | HIGH | 8.8 | 1.5% | Jul 16, 2025 | A remote file disclosure vulnerability exists in EasyCafe Server 2.2.14, exploitable by unauthenticated remote attackers... |
| CVE-2025-34118 | HIGH | 8.7 | 1.4% | Jul 16, 2025 | A path traversal vulnerability exists in Linknat VOS Manager versions prior to 2.1.9.07, including VOS2009 and early VOS... |
| CVE-2025-53908 | HIGH | 8.3 | 0.4% | Jul 16, 2025 | RomM is a self-hosted rom manager and player. Versions prior to 3.10.3 and 4.0.0-beta.3 have an authenticated path trave... |
| CVE-2025-40777 | HIGH | 7.5 | 0.9% | Jul 16, 2025 | If a `named` caching resolver is configured with `serve-stale-enable` `yes`, and with `stale-answer-client-timeout` set ... |
| CVE-2025-36097 | HIGH | 7.5 | 0.4% | Jul 16, 2025 | IBM WebSphere Application Server 9.0 and WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.7 are vulnerable t... |
| CVE-2025-20284 | HIGH | 7.2 | 12.7% | Jul 16, 2025 | A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execut... |
| CVE-2025-20283 | HIGH | 7.2 | 6.6% | Jul 16, 2025 | A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execut... |
| CVE-2025-20274 | HIGH | 8.8 | 0.4% | Jul 16, 2025 | A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated,... |
| CVE-2025-7357 | HIGH | 8.7 | 0.4% | Jul 16, 2025 | LITEON IC48A firmware versions prior to 01.00.19r and LITEON IC80A firmware versions prior to 01.01.12e store FTP-server... |
| CVE-2025-53943 | HIGH | 8.7 | 0.3% | Jul 16, 2025 | VoidBot Open-Source is a customizable Discord bot. VoidBot Open-Source versions 0.0.1 through 0.8.1 contain a vulnerabil... |
| CVE-2025-53938 | HIGH | 7.5 | 0.6% | Jul 16, 2025 | WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. An Authenticati... |
| CVE-2025-5994 | HIGH | 8.7 | 0.2% | Jul 16, 2025 | A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching resolvers that sup... |
| CVE-2025-37104 | HIGH | 7.1 | 0.2% | Jul 16, 2025 | A security vulnerability has been identified in HPE Telco Service Orchestrator software. The vulnerability could allow a... |
| CVE-2025-32874 | HIGH | 7.5 | 0.1% | Jul 16, 2025 | An issue was discovered in Kaseya Rapid Fire Tools Network Detective through 2.0.16.0. A vulnerability exists in the Enc... |
| CVE-2025-32353 | HIGH | 8.2 | 0.1% | Jul 16, 2025 | Kaseya Rapid Fire Tools Network Detective 2.0.16.0 has Unencrypted Credentials (for privileged access) stored in the col... |
| CVE-2025-40776 | HIGH | 8.6 | 0.2% | Jul 16, 2025 | A `named` caching resolver that is configured to send ECS (EDNS Client Subnet) options may be vulnerable to a cache-pois... |
| CVE-2025-40923 | HIGH | 7.3 | 0.3% | Jul 16, 2025 | Plack-Middleware-Session before version 0.35 for Perl generates session ids insecurely. The default session id generato... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now