2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-47378 | HIGH | 7.1 | 0.1% | Mar 2, 2026 | Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain. |
| CVE-2025-47377 | HIGH | 7.8 | 0.1% | Mar 2, 2026 | Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls. |
| CVE-2025-47376 | HIGH | 7.8 | 0.1% | Mar 2, 2026 | Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls. |
| CVE-2025-47375 | HIGH | 7.8 | 0.1% | Mar 2, 2026 | Memory corruption while handling different IOCTL calls from the user-space simultaneously. |
| CVE-2025-47373 | HIGH | 7.8 | 0.1% | Mar 2, 2026 | Memory Corruption when accessing buffers with invalid length during TA invocation. |
| CVE-2025-52469 | HIGH | 7.1 | 0.3% | Mar 2, 2026 | Chamilo is a learning management system. Prior to version 1.11.30, a logic vulnerability in the friend request workflow ... |
| CVE-2025-50197 | HIGH | 7.2 | 2.7% | Mar 2, 2026 | Chamilo is a learning management system. Prior to version 1.11.30, there is an OS Command Injection vulnerability in /ma... |
| CVE-2025-50196 | HIGH | 7.2 | 2.7% | Mar 2, 2026 | Chamilo is a learning management system. Prior to version 1.11.30, there is an OS Command Injection vulnerability in /pl... |
| CVE-2025-50195 | HIGH | 7.2 | 2.7% | Mar 2, 2026 | Chamilo is a learning management system. Prior to version 1.11.30, there is an OS Command Injection vulnerability in /pl... |
| CVE-2025-50194 | HIGH | 7.2 | 2.6% | Mar 2, 2026 | Chamilo is a learning management system. Prior to version 1.11.30, there is an OS Command Injection vulnerability in /ma... |
| CVE-2025-50193 | HIGH | 7.2 | 2.6% | Mar 2, 2026 | Chamilo is a learning management system. Prior to version 1.11.30, there is an OS command Injection vulnerability in /pl... |
| CVE-2025-58107 | HIGH | 7.5 | 0.3% | Mar 2, 2026 | In Microsoft Exchange through 2019, Exchange ActiveSync (EAS) configurations on on-premises servers may transmit sensiti... |
| CVE-2025-52482 | HIGH | 8.3 | 0.4% | Mar 2, 2026 | Chamilo is a learning management system. Prior to version 1.11.30, a Stored XSS vulnerability exists in the glossary fun... |
| CVE-2025-50191 | HIGH | 7.2 | 0.5% | Mar 2, 2026 | Chamilo is a learning management system. Prior to version 1.11.30, there is an error-based SQL Injection via POST userFi... |
| CVE-2025-50189 | HIGH | 8.8 | 0.7% | Mar 2, 2026 | Chamilo is a learning management system. Prior to version 1.11.30, the application performs insufficient validation of d... |
| CVE-2025-50188 | HIGH | 7.2 | 0.7% | Mar 2, 2026 | Chamilo is a learning management system. Prior to version 1.11.30, the application performs insufficient validation of d... |
| CVE-2025-58402 | HIGH | 7.5 | 0.2% | Mar 2, 2026 | The CGM CLININET application uses direct, sequential object identifiers "MessageID" without proper authorization checks.... |
| CVE-2025-30042 | HIGH | 7.8 | 0.1% | Mar 2, 2026 | The CGM CLININET system provides smart card authentication; however, authentication is conducted locally on the client d... |
| CVE-2025-10350 | HIGH | 8.8 | 0.2% | Mar 2, 2026 | SQL Injection vulnerability in "imageserver" module when processing C-FIND queries in CGM NETRAAD software allows attack... |
| CVE-2025-13673 | HIGH | 7.5 | 0.5% | Feb 28, 2026 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to SQL Injection via the 'coupon... |
| CVE-2025-69437 | HIGH | 8.7 | 0.3% | Feb 27, 2026 | PublicCMS v5.202506.d and earlier is vulnerable to stored XSS. Uploaded PDFs can contain JavaScript payloads and bypass ... |
| CVE-2025-10990 | HIGH | 7.5 | 0.5% | Feb 27, 2026 | A flaw was found in REXML. A remote attacker could exploit inefficient regular expression (regex) parsing when processin... |
| CVE-2025-40932 | HIGH | 8.2 | 0.2% | Feb 27, 2026 | Apache::SessionX versions through 2.01 for Perl create insecure session id. Apache::SessionX generates session ids inse... |
| CVE-2025-71057 | HIGH | 8.2 | 0.1% | Feb 26, 2026 | Improper session management in D-Link Wireless N 300 ADSL2+ Modem Router DSL-124 ME_1.00 allows attackers to execute a s... |
| CVE-2025-14343 | HIGH | 7.6 | 0.2% | Feb 26, 2026 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dokuzsoft T... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now