2025 CVE Vulnerabilities
45,138 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-32026 | LOW | 3.8 | 0.1% | Apr 8, 2025 | Element Web is a Matrix web client built using the Matrix React SDK. Element Web, starting from version 1.11.16 up to ve... |
| CVE-2025-20941 | LOW | 3.3 | 0.1% | Apr 8, 2025 | Improper access control in InputManager to SMR Apr-2025 Release 1 allows local attackers to access the scancode of speci... |
| CVE-2025-3360 | LOW | 3.7 | 0.4% | Apr 7, 2025 | A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601 timestamp... |
| CVE-2025-3329 | LOW | 3.1 | 0.3% | Apr 7, 2025 | A vulnerability classified as problematic has been found in Consumer Comanda Mobile up to 14.9.3.2/15.0.0.8. This affect... |
| CVE-2025-32054 | LOW | 3.3 | 0.4% | Apr 3, 2025 | In JetBrains IntelliJ IDEA before 2024.3, 2024.2.4 source code could be logged in the idea.log file |
| CVE-2025-3160 | LOW | 3.3 | 0.2% | Apr 3, 2025 | A vulnerability has been found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This vulnerabili... |
| CVE-2025-29991 | LOW | 2.2 | 0.1% | Apr 3, 2025 | Yubico YubiKey 5.4.1 through 5.7.3 before 5.7.4 has an incorrect FIDO CTAP PIN/UV Auth Protocol Two implementation. It u... |
| CVE-2025-3154 | LOW | 2.1 | 0.1% | Apr 2, 2025 | Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid VerticesPerRow value in a PDF shading dictio... |
| CVE-2025-27608 | LOW | 1 | 0.2% | Apr 2, 2025 | Arduino IDE 2.x is an IDE based on the Theia IDE framework and built with Electron. A Self Cross-Site Scripting (XSS) vu... |
| CVE-2025-30469 | LOW | 2.4 | 0.2% | Mar 31, 2025 | This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4. A person wi... |
| CVE-2025-24193 | LOW | 2.4 | 0.5% | Mar 31, 2025 | This issue was addressed with improved authentication. This issue is fixed in iOS 18.4 and iPadOS 18.4. An attacker with... |
| CVE-2025-30369 | LOW | 2.7 | 0.2% | Mar 31, 2025 | Zulip is an open-source team collaboration tool. The API for deleting an organization custom profile field is supposed t... |
| CVE-2025-30368 | LOW | 2.7 | 0.3% | Mar 31, 2025 | Zulip is an open-source team collaboration tool. The API for deleting an organization export is supposed to be restricte... |
| CVE-2025-27149 | LOW | 2.7 | 0.3% | Mar 31, 2025 | Zulip server provides an open-source team chat that helps teams stay productive and focused. Prior to 10.0, the data exp... |
| CVE-2025-1217 | LOW | 3.1 | 0.5% | Mar 29, 2025 | In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when http ... |
| CVE-2025-2923 | LOW | 3.3 | 0.2% | Mar 28, 2025 | A vulnerability, which was classified as problematic, has been found in HDF5 up to 1.14.6. Affected by this issue is the... |
| CVE-2025-2922 | LOW | 2 | 0.1% | Mar 28, 2025 | A vulnerability classified as problematic was found in Netis WF-2404 1.1.124EN. Affected by this vulnerability is an unk... |
| CVE-2025-2920 | LOW | 2 | 0.1% | Mar 28, 2025 | A vulnerability was found in Netis WF-2404 1.1.124EN. It has been rated as problematic. This issue affects some unknown ... |
| CVE-2025-2914 | LOW | 3.3 | 0.2% | Mar 28, 2025 | A vulnerability classified as problematic has been found in HDF5 up to 1.14.6. This affects the function H5FS__sinfo_Sri... |
| CVE-2025-30371 | LOW | 2.1 | 0.4% | Mar 28, 2025 | Metabase is a business intelligence and embedded analytics tool. Versions prior to v0.52.16.4, v1.52.16.4, v0.53.8, and ... |
| CVE-2025-27726 | LOW | 2.1 | 0.2% | Mar 28, 2025 | Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in the file download process... |
| CVE-2025-27574 | LOW | 3.6 | 0.2% | Mar 28, 2025 | Cross-site scripting vulnerability exists in the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and e... |
| CVE-2025-30877 | LOW | 2.7 | 0.4% | Mar 27, 2025 | Missing Authorization vulnerability in fatcatapps Quiz Cat quiz-cat allows Exploiting Incorrectly Configured Access Cont... |
| CVE-2025-20233 | LOW | 3.3 | 0.1% | Mar 26, 2025 | In the Splunk App for Lookup File Editing versions below 4.0.5, a script in the app used the `chmod` and `makedirs` Pyth... |
| CVE-2025-31160 | LOW | 2.9 | 0.2% | Mar 26, 2025 | atop through 2.11.0 allows local users to cause a denial of service (e.g., assertion failure and application exit) or po... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now