2025 CVE Vulnerabilities
45,347 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-6796 | HIGH | 7.5 | 1.3% | Jul 7, 2025 | Marvell QConvergeConsole getAppFileBytes Directory Traversal Information Disclosure Vulnerability. This vulnerability al... |
| CVE-2025-6795 | HIGH | 7.5 | 1.1% | Jul 7, 2025 | Marvell QConvergeConsole getFileUploadSize Directory Traversal Information Disclosure Vulnerability. This vulnerability ... |
| CVE-2025-6714 | HIGH | 7.5 | 0.3% | Jul 7, 2025 | MongoDB Server's mongos component can become unresponsive to new connections due to incorrect handling of incomplete dat... |
| CVE-2025-6663 | HIGH | 7.8 | 0.3% | Jul 7, 2025 | GStreamer H266 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows ... |
| CVE-2025-5987 | HIGH | 8.1 | 1.5% | Jul 7, 2025 | A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library. If an attacker manages to exhaust th... |
| CVE-2025-6209 | HIGH | 7.5 | 0.5% | Jul 7, 2025 | A path traversal vulnerability exists in run-llama/llama_index versions 0.12.27 through 0.12.40, specifically within the... |
| CVE-2025-7127 | HIGH | 7.2 | 0.4% | Jul 7, 2025 | A vulnerability, which was classified as critical, was found in itsourcecode Employee Management System up to 1.0. This ... |
| CVE-2025-7126 | HIGH | 7.2 | 0.4% | Jul 7, 2025 | A vulnerability, which was classified as critical, has been found in itsourcecode Employee Management System up to 1.0. ... |
| CVE-2025-7125 | HIGH | 7.2 | 0.4% | Jul 7, 2025 | A vulnerability classified as critical was found in itsourcecode Employee Management System up to 1.0. Affected by this ... |
| CVE-2025-7124 | HIGH | 8.8 | 0.4% | Jul 7, 2025 | A vulnerability classified as critical has been found in code-projects Online Note Sharing 1.0. Affected is an unknown f... |
| CVE-2025-7123 | HIGH | 7.2 | 0.4% | Jul 7, 2025 | A vulnerability was found in Campcodes Complaint Management System 1.0. It has been rated as critical. This issue affect... |
| CVE-2025-6386 | HIGH | 7.5 | 0.4% | Jul 7, 2025 | The parisneo/lollms repository is affected by a timing attack vulnerability in the `authenticate_user` function within t... |
| CVE-2025-3466 | HIGH | 7.2 | 0.7% | Jul 7, 2025 | langgenius/dify versions 1.1.0 to 1.1.2 are vulnerable to unsanitized input in the code node, allowing execution of arbi... |
| CVE-2025-3262 | HIGH | 7.5 | 0.4% | Jul 7, 2025 | A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the huggingface/transformers repository, ... |
| CVE-2025-3225 | HIGH | 7.5 | 0.4% | Jul 7, 2025 | An XML Entity Expansion vulnerability, also known as a 'billion laughs' attack, exists in the sitemap parser of the run-... |
| CVE-2025-3046 | HIGH | 7.5 | 0.6% | Jul 7, 2025 | A vulnerability in the `ObsidianReader` class of the run-llama/llama_index repository, versions 0.12.23 to 0.12.28, allo... |
| CVE-2025-7121 | HIGH | 8.8 | 0.4% | Jul 7, 2025 | A vulnerability was found in Campcodes Complaint Management System 1.0. It has been classified as critical. This affects... |
| CVE-2025-3920 | HIGH | 8.5 | 0.1% | Jul 7, 2025 | A vulnerability was identified in SUR-FBD CMMS where hard-coded credentials were found within a compiled DLL file. These... |
| CVE-2025-7118 | HIGH | 8.8 | 0.8% | Jul 7, 2025 | A vulnerability, which was classified as critical, has been found in UTT HiPER 840G up to 3.1.1-190328. This issue affec... |
| CVE-2025-7117 | HIGH | 8.8 | 0.8% | Jul 7, 2025 | A vulnerability classified as critical was found in UTT HiPER 840G up to 3.1.1-190328. This vulnerability affects unknow... |
| CVE-2025-7116 | HIGH | 7.5 | 0.8% | Jul 7, 2025 | A vulnerability classified as critical has been found in UTT 进取 750W up to 3.2.2-191225. This affects an unknown part of... |
| CVE-2025-7115 | HIGH | 7.3 | 0.4% | Jul 7, 2025 | A vulnerability was found in rowboatlabs rowboat up to 8096eaf63b5a0732edd8f812bee05b78e214ee97. It has been rated as cr... |
| CVE-2025-7114 | HIGH | 7.5 | 0.5% | Jul 7, 2025 | A vulnerability was found in SimStudioAI sim up to 37786d371e17d35e0764e1b5cd519d873d90d97b. It has been declared as cri... |
| CVE-2025-53473 | HIGH | 7.3 | 0.3% | Jul 7, 2025 | Server-side request forgery (SSRF) vulnerability exists n multiple versions of Nimesa Backup and Recovery, If this vulne... |
| CVE-2025-7145 | HIGH | 8.6 | 1.1% | Jul 7, 2025 | ThreatSonar Anti-Ransomware developed by TeamT5 has an OS Command Injection vulnerability, allowing remote attackers wit... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now