2025 CVE Vulnerabilities
45,343 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-9806 | MEDIUM | 6.4 | 0.2% | Sep 2, 2025 | A vulnerability was determined in Tenda F1202 1.2.0.9/1.2.0.14/1.2.0.20. Impacted is an unknown function of the file /et... |
| CVE-2025-58162 | MEDIUM | 6.5 | 0.6% | Sep 2, 2025 | MobSF is a mobile application security testing tool used. In version 4.4.0, an authenticated user who uploaded a special... |
| CVE-2025-58161 | MEDIUM | 4.3 | 0.7% | Sep 2, 2025 | MobSF is a mobile application security testing tool used. In version 4.4.0, the GET /download/ route uses string path ve... |
| CVE-2025-9802 | MEDIUM | 5.1 | 0.2% | Sep 2, 2025 | A vulnerability was detected in RemoteClinic 2.0. This vulnerability affects unknown code of the file /staff/profile.php... |
| CVE-2025-9800 | MEDIUM | 6.1 | 0.3% | Sep 1, 2025 | A weakness has been identified in SimStudioAI sim up to ed9b9ad83f1a7c61f4392787fb51837d34eeb0af. Affected by this issue... |
| CVE-2025-9799 | MEDIUM | 5 | 0.3% | Sep 1, 2025 | A security flaw has been discovered in Langfuse up to 3.88.0. Affected by this vulnerability is the function promptChang... |
| CVE-2025-9796 | MEDIUM | 4.1 | 0.3% | Sep 1, 2025 | A vulnerability was found in thinkgem JeeSite up to 5.12.1. This affects the function decodeUrl2 of the file common/src/... |
| CVE-2025-9795 | MEDIUM | 5.4 | 0.2% | Sep 1, 2025 | A vulnerability has been found in xujeff tianti 天梯 up to 2.3. The impacted element is the function ajaxUploadFile of the... |
| CVE-2025-9810 | MEDIUM | 5.8 | 0.1% | Sep 1, 2025 | TOCTOU in linenoiseHistorySave in linenoise allows local attackers to overwrite arbitrary files and change permissions ... |
| CVE-2025-9375 | MEDIUM | 6.9 | 0.4% | Sep 1, 2025 | XML Injection vulnerability in xmltodict allows Input Data Manipulation. This issue affects xmltodict: from 0.14.2 befor... |
| CVE-2025-55007 | MEDIUM | 5.3 | 0.2% | Sep 1, 2025 | Knowage is an open source analytics and business intelligence suite. Prior to version 8.1.37, Knowage is vulnerable to s... |
| CVE-2025-33099 | MEDIUM | 5.9 | 0.2% | Sep 1, 2025 | IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to perform unauthorized actions using man in the ... |
| CVE-2025-33084 | MEDIUM | 5.9 | 0.2% | Sep 1, 2025 | IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to obtain sensitive information, caused by the fa... |
| CVE-2025-33083 | MEDIUM | 5.4 | 0.2% | Sep 1, 2025 | IBM Concert Software 1.0.0 through 1.1.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticat... |
| CVE-2025-33082 | MEDIUM | 5.4 | 0.2% | Sep 1, 2025 | IBM Concert Software 1.0.0 through 1.1.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticat... |
| CVE-2025-0656 | MEDIUM | 6.1 | 0.2% | Sep 1, 2025 | IBM Concert Software 1.0.0 through 1.1.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthentic... |
| CVE-2025-36133 | MEDIUM | 5.5 | 0.1% | Sep 1, 2025 | IBM App Connect Enterprise Certified Container CD: 9.2.0 through 11.6.0, 12.1.0 through 12.14.0, and 12.0 LTS: 12.0.0 th... |
| CVE-2025-9774 | MEDIUM | 4.3 | 0.4% | Sep 1, 2025 | A vulnerability has been found in RemoteClinic up to 2.0. This issue affects some unknown processing of the file /patien... |
| CVE-2025-9773 | MEDIUM | 6.1 | 0.4% | Sep 1, 2025 | A flaw has been found in RemoteClinic up to 2.0. This vulnerability affects unknown code of the file /staff/edit.php. Ex... |
| CVE-2025-9769 | MEDIUM | 6.2 | 25.9% | Sep 1, 2025 | A security flaw has been discovered in D-Link DI-7400G+ 19.12.25A1. Affected is the function sub_478D28 of the file /mng... |
| CVE-2025-58318 | MEDIUM | 5.9 | 0.2% | Sep 1, 2025 | Delta Electronics DIAView has an authentication bypass vulnerability. |
| CVE-2025-20707 | MEDIUM | 6.7 | 0.1% | Sep 1, 2025 | In geniezone, there is a possible memory corruption due to use after free. This could lead to local escalation of privil... |
| CVE-2025-20703 | MEDIUM | 6.5 | 0.3% | Sep 1, 2025 | In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of s... |
| CVE-2025-9570 | MEDIUM | 6.9 | 0.5% | Sep 1, 2025 | The eHRD CTMS developed by Sunnet has an Arbitrary File Reading vulnerability, allowing remote attackers with administra... |
| CVE-2025-9569 | MEDIUM | 6.1 | 0.2% | Sep 1, 2025 | The eHRD developed by Sunnet has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attacke... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now