2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-11455 | MEDIUM | 4.3 | 0.2% | Oct 31, 2026 | The Perfect Images plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability c... |
| CVE-2025-8574 | HIGH | 8.7 | 0.4% | Oct 30, 2026 | The Database Cleaner plugin for WordPress is vulnerable to arbitrary table deletion in all versions up to, and including... |
| CVE-2025-49602 | CRITICAL | 9.8 | 0.4% | Oct 30, 2026 | An issue was discovered in Keyfactor EJBCA 9. When an administrator is removed from its administrator role while having ... |
| CVE-2025-68395 | MEDIUM | 5.1 | 0.2% | Oct 30, 2026 | ARKETEAM Protectel modules PROTECTELMAJ and BDF contain a note editor module vulnerable to Stored XSS. A low privileged... |
| CVE-2025-68394 | HIGH | 8.4 | 0.2% | Oct 30, 2026 | ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerability. Improper neutralization o... |
| CVE-2025-68393 | HIGH | 8.4 | 0.2% | Oct 30, 2026 | ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerability. Improper neutralization o... |
| CVE-2025-68392 | MEDIUM | 5.1 | 0.2% | Oct 30, 2026 | ARKETEAM Protectel modules PROTECTELMAJ and BDF allow low privileged users to use some of the functionalities reserved f... |
| CVE-2025-68391 | MEDIUM | 5.3 | 0.2% | Oct 30, 2026 | ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to arbitrary file upload. Any user is able to upload arbi... |
| CVE-2025-31704 | CRITICAL | 9.8 | 1.4% | Oct 30, 2026 | A vulnerability has been found in the Dahua Intelligent Connection Center. A remote attacker could send a specially craf... |
| CVE-2025-12523 | MEDIUM | 6.5 | 0.2% | Oct 29, 2026 | Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated user |
| CVE-2025-13050 | MEDIUM | 5.4 | 0.3% | Oct 29, 2026 | Broken Function Level Authorization allows execution of poller post-restart commands by authenticated user |
| CVE-2025-62841 | HIGH | 8.7 | 0.2% | Oct 29, 2026 | An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Bac... |
| CVE-2025-62839 | HIGH | 8.7 | 0.2% | Oct 29, 2026 | An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Bac... |
| CVE-2025-14260 | HIGH | 8.3 | 0.3% | Oct 28, 2026 | Due to the improper implementation of access control rules, malicious actors could perform a Server Side Request Forgery... |
| CVE-2025-30414 | HIGH | 7.1 | 0.2% | Oct 28, 2026 | Local privilege escalation due to improper authentication. The following products are affected: Acronis Cyber Protect Cl... |
| CVE-2025-12534 | — | — | — | Oct 27, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2025-64394 | MEDIUM | 4.3 | 0.1% | Oct 27, 2026 | A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installa... |
| CVE-2025-71439 | MEDIUM | 5.5 | 0.1% | Oct 27, 2026 | llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llama_vocab::impl::print_info() that allows a... |
| CVE-2025-13833 | HIGH | 7.7 | 0.1% | Oct 26, 2026 | A vulnerability exists in SecureConnector for Windows when the “Additional Appliance Connections” setting is enabled and... |
| CVE-2025-15705 | LOW | 3.5 | 0.2% | Oct 25, 2026 | The Contact Form by Supsystic WordPress plugin before 1.8.0 does not sanitise and escape a form name, allowing users wi... |
| CVE-2025-45528 | HIGH | 7.3 | 0.2% | Oct 23, 2026 | An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local attacker to execute arbitrary code via a c... |
| CVE-2025-58403 | MEDIUM | 5.1 | 0.5% | Oct 23, 2026 | CGM CLININET is vulnerable to Reflected Cross-Site Scripting (XSS) due to improper neutralization of user-supplied data.... |
| CVE-2025-30054 | CRITICAL | 9.3 | 0.1% | Oct 23, 2026 | CGM CLININET is vulnerable to local privilege escalation. The service that processes incoming HL7 messages runs with roo... |
| CVE-2025-30053 | MEDIUM | 6.9 | 0.4% | Oct 23, 2026 | The CGM CLININET application runs the cgm-updater process listening on an open network port without any authentication. ... |
| CVE-2025-30052 | HIGH | 8.8 | 0.3% | Oct 23, 2026 | The rsyncd service of the CGM CLININET is vulnerable to Authentication Bypass via IP spoofing. Access is granted based s... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now