2025 CVE Vulnerabilities
45,179 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-27019 | CRITICAL | 9.8 | 0.4% | Dec 8, 2025 | Remote shell service (RSH) in Infinera MTC-9 version R22.1.1.0275 allows an attacker to utilize password-less user acco... |
| CVE-2025-14262 | MEDIUM | 4.3 | 0.2% | Dec 8, 2025 | A wrong permission check in KNIME Business Hub before version 1.17.0 allowed an authenticated user to save jobs of other... |
| CVE-2025-14227 | CRITICAL | 9.8 | 0.3% | Dec 8, 2025 | A security flaw has been discovered in Philipinho Simple-PHP-Blog up to 94b5d3e57308bce5dfbc44c3edafa9811893d958. This i... |
| CVE-2025-14226 | CRITICAL | 9.8 | 0.3% | Dec 8, 2025 | A vulnerability was identified in itsourcecode Student Management System 1.0. This vulnerability affects unknown code of... |
| CVE-2025-14225 | HIGH | 8.8 | 7.4% | Dec 8, 2025 | A vulnerability was determined in D-Link DCS-930L 1.15.04. This affects an unknown part of the file /setSystemAdmin of t... |
| CVE-2025-66334 | MEDIUM | 5.5 | 0.1% | Dec 8, 2025 | Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may a... |
| CVE-2025-66333 | MEDIUM | 5.5 | 0.1% | Dec 8, 2025 | Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may a... |
| CVE-2025-66332 | MEDIUM | 5.5 | 0.1% | Dec 8, 2025 | Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may a... |
| CVE-2025-66331 | MEDIUM | 5.5 | 0.1% | Dec 8, 2025 | Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may a... |
| CVE-2025-66330 | MEDIUM | 5.5 | 0.1% | Dec 8, 2025 | App lock verification bypass vulnerability in the file management app. Impact: Successful exploitation of this vulnerabi... |
| CVE-2025-66329 | MEDIUM | 5.5 | 0.1% | Dec 8, 2025 | Permission control vulnerability in the window management module. Impact: Successful exploitation of this vulnerability ... |
| CVE-2025-66328 | MEDIUM | 4.7 | 0.1% | Dec 8, 2025 | Multi-thread race condition vulnerability in the network management module. Impact: Successful exploitation of this vuln... |
| CVE-2025-66327 | MEDIUM | 4.7 | 0.1% | Dec 8, 2025 | Race condition vulnerability in the network module. Impact: Successful exploitation of this vulnerability may affect ser... |
| CVE-2025-66325 | MEDIUM | 5.5 | 0.1% | Dec 8, 2025 | Permission control vulnerability in the package management module. Impact: Successful exploitation of this vulnerability... |
| CVE-2025-58279 | MEDIUM | 5.5 | 0.1% | Dec 8, 2025 | Permission control vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may ... |
| CVE-2025-26489 | MEDIUM | 6.5 | 0.3% | Dec 8, 2025 | Improper input validation in the Netconf service in Infinera MTC-9 allows remote authenticated users to crash the servic... |
| CVE-2025-26488 | HIGH | 7.5 | 0.3% | Dec 8, 2025 | Improper Input Validation vulnerability in Infinera MTC-9 allows remote unauthenticated users to crash the service and c... |
| CVE-2025-26487 | HIGH | 8.6 | 0.3% | Dec 8, 2025 | Server-Side Request Forgery (SSRF) vulnerability in Infinera MTC-9 version allows remote unauthenticated users to gain ... |
| CVE-2025-14224 | CRITICAL | 9.8 | 0.6% | Dec 8, 2025 | A vulnerability was found in Yottamaster DM2, DM3 and DM200 up to 1.2.23/1.9.12. Affected by this issue is some unknown ... |
| CVE-2025-12956 | MEDIUM | 5.4 | 0.2% | Dec 8, 2025 | A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEX... |
| CVE-2025-66326 | MEDIUM | 4.7 | 0.1% | Dec 8, 2025 | Race condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerability may affect avail... |
| CVE-2025-66324 | MEDIUM | 5.5 | 0.1% | Dec 8, 2025 | Input verification vulnerability in the compression and decompression module. Impact: Successful exploitation of this vu... |
| CVE-2025-66323 | MEDIUM | 5.5 | 0.1% | Dec 8, 2025 | Vulnerability of improper criterion security check in the card module. Impact: Successful exploitation of this vulnerabi... |
| CVE-2025-66322 | MEDIUM | 4.7 | 0.1% | Dec 8, 2025 | Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulner... |
| CVE-2025-66321 | MEDIUM | 4.7 | 0.1% | Dec 8, 2025 | Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulner... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now