2025 CVE Vulnerabilities
45,138 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-54161 | MEDIUM | 4.9 | 0.4% | Feb 11, 2026 | An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a r... |
| CVE-2025-54155 | MEDIUM | 4.9 | 0.4% | Feb 11, 2026 | An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a r... |
| CVE-2025-54152 | MEDIUM | 6.5 | 0.4% | Feb 11, 2026 | A use of out-of-range pointer offset vulnerability has been reported to affect Qsync Central. If a remote attacker gains... |
| CVE-2025-54151 | MEDIUM | 5.5 | 0.2% | Feb 11, 2026 | An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a local attacker gains ... |
| CVE-2025-54150 | MEDIUM | 5.5 | 0.2% | Feb 11, 2026 | An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a local attacker gains ... |
| CVE-2025-54149 | MEDIUM | 5.5 | 0.2% | Feb 11, 2026 | An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a local attacker gains ... |
| CVE-2025-54148 | MEDIUM | 6.5 | 0.5% | Feb 11, 2026 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user ac... |
| CVE-2025-54147 | MEDIUM | 6.5 | 0.4% | Feb 11, 2026 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user ac... |
| CVE-2025-54146 | MEDIUM | 6.5 | 0.5% | Feb 11, 2026 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user ac... |
| CVE-2025-53598 | MEDIUM | 6.5 | 0.5% | Feb 11, 2026 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user ac... |
| CVE-2025-48722 | MEDIUM | 6.5 | 0.4% | Feb 11, 2026 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user ac... |
| CVE-2025-47209 | MEDIUM | 6.5 | 0.4% | Feb 11, 2026 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user ac... |
| CVE-2025-47205 | MEDIUM | 4.9 | 0.4% | Feb 11, 2026 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote... |
| CVE-2025-30266 | MEDIUM | 6.5 | 0.4% | Feb 11, 2026 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user ac... |
| CVE-2025-14592 | MEDIUM | 5.3 | 0.3% | Feb 11, 2026 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.6, 18.7 before 18.7.4, and 1... |
| CVE-2025-14560 | MEDIUM | 5.4 | 0.2% | Feb 11, 2026 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.1 before 18.6.6, 18.7 before 18.7.4, and 1... |
| CVE-2025-12575 | MEDIUM | 5.4 | 0.2% | Feb 11, 2026 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.0 before 18.6.6, 18.7 before 18.7.4, and 18.8... |
| CVE-2025-12073 | MEDIUM | 4.3 | 0.2% | Feb 11, 2026 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.0 before 18.6.6, 18.7 before 18.7.4, and 1... |
| CVE-2025-13650 | MEDIUM | 6.1 | 0.2% | Feb 11, 2026 | An attacker with access to the web application ZeusWeb of the provider Microcom (in this case, registration is not neces... |
| CVE-2025-13649 | MEDIUM | 6.1 | 0.2% | Feb 11, 2026 | An attacker with access to the web application ZeusWeb of the provider Microcom (in this case, registration is not nec... |
| CVE-2025-13648 | MEDIUM | 6.1 | 0.2% | Feb 11, 2026 | An attacker with access to the web application ZeusWeb of the provider Microcom (in this case, registration is require... |
| CVE-2025-10912 | MEDIUM | 5.4 | 0.2% | Feb 11, 2026 | Authorization Bypass Through User-Controlled Key vulnerability in Saastech Cleaning and Internet Services Inc. TemizlikY... |
| CVE-2025-15400 | MEDIUM | 6.5 | 0.3% | Feb 11, 2026 | The OpenPix for WooCommerce WordPress plugin through 2.13.3 allows any authenticated user to trigger AJAX actions that r... |
| CVE-2025-15524 | MEDIUM | 4.3 | 0.2% | Feb 11, 2026 | The Gallery by FooGallery plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability ... |
| CVE-2025-13431 | MEDIUM | 6.5 | 0.2% | Feb 11, 2026 | The SlimStat Analytics plugin for WordPress is vulnerable to time-based SQL Injection via the ‘args’ parameter in all ve... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now