2025 CVE Vulnerabilities
45,345 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-52953 | HIGH | 7.1 | 0.3% | Jul 11, 2025 | An Expected Behavior Violation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos... |
| CVE-2025-52952 | HIGH | 7.1 | 0.3% | Jul 11, 2025 | An Out-of-bounds Write vulnerability in the connectivity fault management (CFM) daemon of Juniper Networks Junos OS on M... |
| CVE-2025-52949 | HIGH | 7.1 | 0.3% | Jul 11, 2025 | An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Net... |
| CVE-2025-52948 | HIGH | 8.2 | 0.4% | Jul 11, 2025 | An Improper Handling of Exceptional Conditions vulnerability in Berkeley Packet Filter (BPF) processing of Juniper Netwo... |
| CVE-2025-52947 | HIGH | 7.1 | 0.3% | Jul 11, 2025 | An Improper Handling of Exceptional Conditions vulnerability in route processing of Juniper Networks Junos OS on specifi... |
| CVE-2025-52946 | HIGH | 8.7 | 0.4% | Jul 11, 2025 | A Use After Free vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Juniper Networks Ju... |
| CVE-2025-52089 | HIGH | 8.8 | 7.1% | Jul 11, 2025 | A hidden remote support feature protected by a static secret in TOTOLINK N300RB firmware version 8.54 allows an authenti... |
| CVE-2025-30661 | HIGH | 8.5 | 0.2% | Jul 11, 2025 | An Incorrect Permission Assignment for Critical Resource vulnerability in line card script processing of Juniper Network... |
| CVE-2025-50124 | HIGH | 7.2 | 0.2% | Jul 11, 2025 | A CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation when the server... |
| CVE-2025-50123 | HIGH | 7.2 | 0.3% | Jul 11, 2025 | A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote comman... |
| CVE-2025-50122 | HIGH | 8.9 | 0.2% | Jul 11, 2025 | A CWE-331: Insufficient Entropy vulnerability exists that could cause root password discovery when the password generati... |
| CVE-2025-7442 | HIGH | 7.5 | 0.3% | Jul 11, 2025 | The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to SQL Injection via several parameters i... |
| CVE-2025-30025 | HIGH | 7.8 | 0.2% | Jul 11, 2025 | The communication protocol used between the server process and the service control had a flaw that could lead to a local... |
| CVE-2025-7434 | HIGH | 8.8 | 0.8% | Jul 11, 2025 | A vulnerability was found in Tenda FH451 up to 1.0.0.9 and classified as critical. Affected by this issue is the functio... |
| CVE-2025-7423 | HIGH | 8.8 | 0.8% | Jul 11, 2025 | A vulnerability classified as critical was found in Tenda O3V2 1.0.0.12(3880). Affected by this vulnerability is the fun... |
| CVE-2025-7422 | HIGH | 8.8 | 0.8% | Jul 11, 2025 | A vulnerability classified as critical has been found in Tenda O3V2 1.0.0.12(3880). Affected is the function setAutoRebo... |
| CVE-2025-7421 | HIGH | 8.8 | 0.8% | Jul 11, 2025 | A vulnerability was found in Tenda O3V2 1.0.0.12(3880). It has been rated as critical. This issue affects the function f... |
| CVE-2025-7420 | HIGH | 8.8 | 0.8% | Jul 11, 2025 | A vulnerability was found in Tenda O3V2 1.0.0.12(3880). It has been declared as critical. This vulnerability affects the... |
| CVE-2025-53515 | HIGH | 8.8 | 0.5% | Jul 11, 2025 | A vulnerability exists in Advantech iView that allows for SQL injection and remote code execution through NetworkServle... |
| CVE-2025-53509 | HIGH | 7.1 | 0.3% | Jul 11, 2025 | A vulnerability exists in Advantech iView that allows for argument injection in the NetworkServlet.restoreDatabase(). T... |
| CVE-2025-53475 | HIGH | 8.8 | 4.3% | Jul 11, 2025 | A vulnerability exists in Advantech iView that could allow for SQL injection and remote code execution through Network... |
| CVE-2025-52577 | HIGH | 8.8 | 0.5% | Jul 11, 2025 | A vulnerability exists in Advantech iView that could allow SQL injection and remote code execution through NetworkServl... |
| CVE-2025-52459 | HIGH | 7.1 | 0.3% | Jul 11, 2025 | A vulnerability exists in Advantech iView that allows for argument injection in NetworkServlet.backupDatabase(). This i... |
| CVE-2025-50109 | HIGH | 8.5 | 0.1% | Jul 11, 2025 | Emerson ValveLink Products store sensitive information in cleartext within a resource that might be accessible to anothe... |
| CVE-2025-48891 | HIGH | 7.6 | 0.3% | Jul 11, 2025 | A vulnerability exists in Advantech iView that could allow for SQL injection through the CUtils.checkSQLInjection() fun... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now