2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-55658 | MEDIUM | 6.5 | 0.3% | Jun 9, 2026 | GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gf_opus_parse_packet_header function (media... |
| CVE-2025-55657 | HIGH | 7.5 | 0.5% | Jun 9, 2026 | A NULL pointer dereference in the gf_odf_vvc_cfg_write_bs function (odf/descriptors.c) of GPAC MP4Box v2.4 allows attack... |
| CVE-2025-55651 | MEDIUM | 5.5 | 0.2% | Jun 9, 2026 | A NULL pointer dereference in the gf_isom_get_user_data_count function (isomedia/isom_read.c) of GPAC MP4Box v2.4 allows... |
| CVE-2025-52293 | HIGH | 7.5 | 0.5% | Jun 9, 2026 | A segmentation violaton in the gf_hevc_read_sps_bs_internal function (media_tools/av_parsers.c) of GPAC MP4Box v2.4 allo... |
| CVE-2025-52292 | HIGH | 7.5 | 0.5% | Jun 9, 2026 | A stack buffer overflow in the filein_process function (in_file.c) of GPAC MP4Box v2.4 allows attackers to cause a Denia... |
| CVE-2025-54509 | MEDIUM | 4 | 0.1% | Jun 9, 2026 | Improper access control for register interface in the Input-Output Memory Management Unit (IOMMU) could allow a privileg... |
| CVE-2025-67862 | MEDIUM | 6.7 | 0.1% | Jun 9, 2026 | An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244] vulnerability in Fortinet Forti... |
| CVE-2025-40808 | MEDIUM | 6.9 | 0.2% | Jun 9, 2026 | A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions), SIPROTEC 5 6MD85 (CP200) (All versions),... |
| CVE-2025-10263 | CRITICAL | 9.1 | 0.6% | Jun 9, 2026 | Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4... |
| CVE-2025-62858 | MEDIUM | 6.5 | 0.4% | Jun 9, 2026 | A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker... |
| CVE-2025-71315 | MEDIUM | 5.5 | 0.1% | Jun 8, 2026 | In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Convert to DRM's vblank timer Replace vk... |
| CVE-2025-12656 | LOW | 3.8 | 0.3% | Jun 6, 2026 | The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary directory de... |
| CVE-2025-71318 | CRITICAL | 9.8 | 0.5% | Jun 5, 2026 | NetMan 204 fails to enforce authentication on its administrative pages and command endpoints. A remote, unauthenticated ... |
| CVE-2025-71317 | CRITICAL | 9.8 | 0.4% | Jun 5, 2026 | NetMan 204 contains a hard-coded backdoor account with the username and password 'eurek' that grants administrative acce... |
| CVE-2025-5090 | MEDIUM | 6.5 | 0.2% | Jun 5, 2026 | CVX is not resilient to unexpected messages from a connected switch. This leads to agent crashes on CVX causing instabil... |
| CVE-2025-5089 | MEDIUM | 6.5 | 0.2% | Jun 5, 2026 | In a CVX cluster, an EOS switch connected to a CVX server is not resilient to certain malformed messages received from t... |
| CVE-2025-5088 | HIGH | 8.3 | 0.3% | Jun 5, 2026 | An authenticated Redis session could be used to obtain full root access to all servers in the CVX cluster. Note that thi... |
| CVE-2025-59174 | MEDIUM | 6.5 | 0.2% | Jun 5, 2026 | Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability where an attacker sending a large v... |
| CVE-2025-8873 | HIGH | 8.7 | 0.4% | Jun 4, 2026 | On affected platforms running Arista EOS with IPsec configured, a specially crafted packet can cause the dataplane to st... |
| CVE-2025-71316 | CRITICAL | 9.8 | 0.4% | Jun 4, 2026 | SQLite 'sqldiff.exe' does not securely handle the way the Microsoft Windows C runtime converts Unicode characters to ANS... |
| CVE-2025-65640 | MEDIUM | 6.3 | 0.2% | Jun 4, 2026 | Cross Site Scripting (XSS) vulnerability in the "Task in Progress / Recent" page in Arket Globe Document Intelligence 5.... |
| CVE-2025-69755 | HIGH | 8.2 | 0.5% | Jun 4, 2026 | An issue in Neterbit NW-431F Router vNW-431F-20241014-IR03 allows a remote attacker to obtain sensitive information and ... |
| CVE-2025-67448 | HIGH | 7.1 | 0.2% | Jun 4, 2026 | The SMS module in Neterbit NW-431F Router 20241014-IR03 and before is vulnerable to stored XSS. The application does not... |
| CVE-2025-67447 | CRITICAL | 9.8 | 1.0% | Jun 4, 2026 | The network diagnosis (ping) module in Neterbit NW-431F Router 20241014-IR03 and before is vulnerable to OS command inje... |
| CVE-2025-67446 | CRITICAL | 9.8 | 0.5% | Jun 4, 2026 | Improper Authentication (Authentication Bypass) exists in Neterbit NW-431F Router 20241014-IR03 and before. The router u... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now