2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-14808 | LOW | 3.1 | 0.2% | Mar 25, 2026 | IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an attacker to obtain sensitive information from... |
| CVE-2025-11571 | LOW | 2.1 | 0.4% | Mar 24, 2026 | Vulnerable endpoints accept user-controlled input through a URL in JSON format which enables command execution. The comm... |
| CVE-2025-31703 | LOW | 2.4 | 0.2% | Mar 18, 2026 | A vulnerability found in Dahua NVR/XVR device. A third-party malicious attacker with physical access to the device may g... |
| CVE-2025-31966 | LOW | 2.7 | 0.2% | Mar 17, 2026 | HCL Sametime is vulnerable to broken server-side validation. While the application performs client-side input checks, th... |
| CVE-2025-69239 | LOW | 2.7 | 0.2% | Mar 16, 2026 | Raytha CMS is vulnerable to Server-Side Request Forgery in the “Themes - Import from URL” feature. It allows an attacker... |
| CVE-2025-26474 | LOW | 3.3 | 0.1% | Mar 16, 2026 | in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information improper input. This vulnerability can... |
| CVE-2025-13462 | LOW | 3.3 | 0.2% | Mar 12, 2026 | The "tarfile" module would still apply normalization of AREGTYPE (\x00) blocks to DIRTYPE, even while processing a multi... |
| CVE-2025-62328 | LOW | 3.7 | 0.2% | Mar 11, 2026 | HCL Nomad server on Domino did not configure the frame-ancestors directive in the Content-Security-Policy header by defa... |
| CVE-2025-70082 | LOW | 2.7 | 0.4% | Mar 11, 2026 | The administrator password can be changed without knowledge of the current password. When chained with an authentication... |
| CVE-2025-70330 | LOW | 3.3 | 0.2% | Mar 11, 2026 | Easy Grade Pro 4.1.0.2 contains a file parsing logic flaw in the handling of proprietary .EGP gradebook files. By modify... |
| CVE-2025-20073 | LOW | 1.8 | 0.1% | Mar 10, 2026 | Improper buffer restrictions in the UEFI DXE module for some Intel(R) Reference Platforms within UEFI may allow an infor... |
| CVE-2025-27769 | LOW | 2.6 | 0.1% | Mar 10, 2026 | A vulnerability has been identified in Heliox Flex 180 kW EV Charging Station (All versions < F4.11.1), Heliox Mobile DC... |
| CVE-2025-68467 | LOW | 3.4 | 0.1% | Mar 4, 2026 | Dark Reader is an accessibility browser extension that makes web pages colors dark. The dynamic dark mode feature of the... |
| CVE-2025-36364 | LOW | 3.3 | 0.1% | Mar 3, 2026 | IBM DevOps Plan 3.0.0 through 3.0.5 allows web page cache to be stored locally which can be read by another user on the ... |
| CVE-2025-12150 | LOW | 3.1 | 0.2% | Feb 27, 2026 | A flaw was found in Keycloak’s WebAuthn registration component. This vulnerability allows an attacker to bypass the conf... |
| CVE-2025-15567 | LOW | 3.3 | 0.1% | Feb 27, 2026 | Insufficient protection mechanisms in the Health Module may lead to partial information disclosure. |
| CVE-2025-67860 | LOW | 3.8 | 0.1% | Feb 25, 2026 | A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller c... |
| CVE-2025-52603 | LOW | 3.5 | 0.3% | Feb 20, 2026 | HCL Connections is vulnerable to information disclosure. In a very specific user navigation scenario, this could allow ... |
| CVE-2025-14547 | LOW | 2.3 | 0.3% | Feb 20, 2026 | An integer underflow vulnerability is present in Silicon Lab’s implementation of PSA Crypto and SE Manager EC-JPAKE APIs... |
| CVE-2025-14055 | LOW | 2.4 | 0.2% | Feb 20, 2026 | An integer underflow vulnerability in Silicon Labs Secure NCP host implementation allows a buffer overread via a special... |
| CVE-2025-14270 | LOW | 2.7 | 0.3% | Feb 19, 2026 | The OneClick Chat to Order plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, ... |
| CVE-2025-8860 | LOW | 3.3 | 0.1% | Feb 18, 2026 | A flaw was found in QEMU in the uefi-vars virtual device. When the guest writes to register UEFI_VARS_REG_BUFFER_SIZE, t... |
| CVE-2025-36183 | LOW | 2.7 | 0.2% | Feb 17, 2026 | IBM watsonx.data 2.2 through 2.2.1 IBM Lakehouse could allow a privileged user to upload malicious files that could be e... |
| CVE-2025-14573 | LOW | 2.7 | 0.2% | Feb 16, 2026 | Mattermost versions 10.11.x <= 10.11.9 fail to enforce invite permissions when updating team settings, which allows team... |
| CVE-2025-69873 | LOW | 2.9 | 0.5% | Feb 11, 2026 | ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now