2025 CVE Vulnerabilities
45,172 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-57770 | MEDIUM | 5.3 | 0.4% | Aug 22, 2025 | The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Ve... |
| CVE-2025-55631 | MEDIUM | 4 | 0.1% | Aug 22, 2025 | Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 was discovered to manage use... |
| CVE-2025-55629 | MEDIUM | 6.5 | 0.2% | Aug 22, 2025 | Insecure permissions in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 allo... |
| CVE-2025-55627 | MEDIUM | 5.3 | 0.2% | Aug 22, 2025 | Insufficient privilege verification in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_... |
| CVE-2025-55626 | MEDIUM | 5.3 | 0.2% | Aug 22, 2025 | An Insecure Direct Object Reference (IDOR) vulnerability in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - ... |
| CVE-2025-55625 | MEDIUM | 6.3 | 0.2% | Aug 22, 2025 | An open redirect vulnerability in Reolink v4.54.0.4.20250526 allows attackers to redirect users to a malicious site via ... |
| CVE-2025-55624 | MEDIUM | 5.3 | 0.3% | Aug 22, 2025 | An intent redirection vulnerability in Reolink v4.54.0.4.20250526 allows unauthorized attackers to access internal funct... |
| CVE-2025-55623 | MEDIUM | 5.4 | 0.3% | Aug 22, 2025 | An issue in the lock screen component of Reolink v4.54.0.4.20250526 allows attackers to bypass authentication via using ... |
| CVE-2025-55622 | MEDIUM | 6.5 | 0.3% | Aug 22, 2025 | Reolink v4.54.0.4.20250526 was discovered to contain a task hijacking vulnerability due to inappropriate taskAffinity se... |
| CVE-2025-55621 | MEDIUM | 6.5 | 0.2% | Aug 22, 2025 | An Insecure Direct Object Reference (IDOR) vulnerability in Reolink v4.54.0.4.20250526 allows unauthorized attackers to ... |
| CVE-2025-55620 | MEDIUM | 6.1 | 0.2% | Aug 22, 2025 | A cross-site scripting (XSS) vulnerability in the valuateJavascript() function of Reolink v4.54.0.4.20250526 allows atta... |
| CVE-2025-53363 | MEDIUM | 4.8 | 0.4% | Aug 22, 2025 | dpanel is an open source server management panel written in Go. In versions 1.2.0 through 1.7.2, dpanel allows authentic... |
| CVE-2025-50733 | MEDIUM | 6.1 | 0.2% | Aug 22, 2025 | NextChat contains a cross-site scripting (XSS) vulnerability in the HTMLPreview component of artifacts.tsx that allows a... |
| CVE-2025-43751 | MEDIUM | 5.3 | 0.3% | Aug 22, 2025 | User enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2... |
| CVE-2025-38675 | MEDIUM | 4.7 | 0.1% | Aug 22, 2025 | In the Linux kernel, the following vulnerability has been resolved: xfrm: state: initialize state_ptrs earlier in xfrm_... |
| CVE-2025-38674 | MEDIUM | 5.5 | 0.1% | Aug 22, 2025 | In the Linux kernel, the following vulnerability has been resolved: Revert "drm/prime: Use dma_buf from GEM object inst... |
| CVE-2025-38673 | MEDIUM | 5.5 | 0.1% | Aug 22, 2025 | In the Linux kernel, the following vulnerability has been resolved: Revert "drm/gem-framebuffer: Use dma_buf from GEM o... |
| CVE-2025-38672 | MEDIUM | 5.5 | 0.1% | Aug 22, 2025 | In the Linux kernel, the following vulnerability has been resolved: Revert "drm/gem-dma: Use dma_buf from GEM object in... |
| CVE-2025-38671 | MEDIUM | 5.5 | 0.1% | Aug 22, 2025 | In the Linux kernel, the following vulnerability has been resolved: i2c: qup: jump out of the loop in case of timeout ... |
| CVE-2025-38669 | MEDIUM | 5.5 | 0.1% | Aug 22, 2025 | In the Linux kernel, the following vulnerability has been resolved: Revert "drm/gem-shmem: Use dma_buf from GEM object ... |
| CVE-2025-38668 | MEDIUM | 5.5 | 0.1% | Aug 22, 2025 | In the Linux kernel, the following vulnerability has been resolved: regulator: core: fix NULL dereference on unbind due... |
| CVE-2025-38665 | MEDIUM | 5.5 | 0.1% | Aug 22, 2025 | In the Linux kernel, the following vulnerability has been resolved: can: netlink: can_changelink(): fix NULL pointer de... |
| CVE-2025-38664 | MEDIUM | 5.5 | 0.2% | Aug 22, 2025 | In the Linux kernel, the following vulnerability has been resolved: ice: Fix a null pointer dereference in ice_copy_and... |
| CVE-2025-38663 | MEDIUM | 5.5 | 0.2% | Aug 22, 2025 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: reject invalid file types when reading inod... |
| CVE-2025-38661 | MEDIUM | 5.5 | 0.1% | Aug 22, 2025 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: alienware-wmi-wmax: Fix `dmi_system_i... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now