2025 CVE Vulnerabilities
45,320 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-9120 | HIGH | 8.6 | 0.2% | Feb 24, 2026 | Improper Control of Generation of Code ('Code Injection') vulnerability in OpenText™ Carbonite Safe Server Backup allows... |
| CVE-2025-69252 | HIGH | 7.5 | 0.5% | Feb 24, 2026 | free5gc UDM provides Unified Data Management (UDM) for free5GC, an open-source project for 5th generation (5G) mobile co... |
| CVE-2025-69250 | HIGH | 7.5 | 0.4% | Feb 24, 2026 | free5gc UDM provides Unified Data Management (UDM) for free5GC, an open-source project for 5th generation (5G) mobile co... |
| CVE-2025-69248 | HIGH | 7.5 | 0.6% | Feb 23, 2026 | free5GC is an open-source project for 5th generation (5G) mobile core networks. Versions up to and including 1.4.1 of fr... |
| CVE-2025-69247 | HIGH | 7.5 | 0.5% | Feb 23, 2026 | free5GC go-upf is the User Plane Function (UPF) implementation for 5G networks that is part of the free5GC project. Vers... |
| CVE-2025-69232 | HIGH | 7.5 | 0.4% | Feb 23, 2026 | free5GC is an open-source project for 5th generation (5G) mobile core networks. free5GC go-upf versions up to and includ... |
| CVE-2025-71056 | HIGH | 8.1 | 0.2% | Feb 23, 2026 | Improper session management in GCOM EPON 1GE ONU version C00R371V00B01 allows attackers to execute a session hijacking a... |
| CVE-2025-70328 | HIGH | 8.8 | 1.8% | Feb 23, 2026 | TOTOLINK X6000R v9.4.0cu.1498_B20250826 contains an OS command injection vulnerability in the NTPSyncWithHost handler of... |
| CVE-2025-70329 | HIGH | 8 | 3.2% | Feb 23, 2026 | TOTOLink X5000R v9.1.0cu_2415_B20250515 contains an OS command injection vulnerability in the setIptvCfg handler of the ... |
| CVE-2025-67733 | HIGH | 7.1 | 0.6% | Feb 23, 2026 | Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious user can use ... |
| CVE-2025-63946 | HIGH | 7.4 | 0.2% | Feb 23, 2026 | A privilege escalation (PE) vulnerability in the Tencent PC Manager app thru 17.10.28554.205 on Windows devices enables ... |
| CVE-2025-63945 | HIGH | 7.4 | 0.2% | Feb 23, 2026 | A privilege escalation (PE) vulnerability in the Tencent iOA app thru 210.9.28693.621001 on Windows devices enables a lo... |
| CVE-2025-61144 | HIGH | 7.3 | 0.3% | Feb 23, 2026 | libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function. |
| CVE-2025-70058 | HIGH | 7.4 | 0.2% | Feb 23, 2026 | An issue pertaining to CWE-295: Improper Certificate Validation was discovered in YMFE yapi v1.12.0. The application dis... |
| CVE-2025-70045 | HIGH | 7.4 | 0.2% | Feb 23, 2026 | An issue pertaining to CWE-295: Improper Certificate Validation was discovered in jxcore jxm master. The application dis... |
| CVE-2025-14905 | HIGH | 7.2 | 1.0% | Feb 23, 2026 | A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the `schema_attr_enum_callbac... |
| CVE-2025-69700 | HIGH | 7.5 | 3.5% | Feb 23, 2026 | Tenda FH1203 V2.0.1.6 contains a stack-based buffer overflow vulnerability in the modify_add_client_prio function, which... |
| CVE-2025-15582 | HIGH | 8.1 | 0.3% | Feb 20, 2026 | A security flaw has been discovered in detronetdip E-commerce 1.0.0. The impacted element is the function Delete/Update ... |
| CVE-2025-69410 | HIGH | 8.1 | 0.5% | Feb 20, 2026 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-69409 | HIGH | 8.1 | 0.5% | Feb 20, 2026 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-69408 | HIGH | 8.1 | 0.5% | Feb 20, 2026 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-69407 | HIGH | 8.1 | 0.5% | Feb 20, 2026 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-69406 | HIGH | 8.1 | 0.5% | Feb 20, 2026 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-69402 | HIGH | 8.1 | 0.6% | Feb 20, 2026 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-69401 | HIGH | 7.5 | 0.3% | Feb 20, 2026 | Authentication Bypass by Spoofing vulnerability in mdalabar WooODT Lite byconsole-woo-order-delivery-time allows Identit... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now