2025 CVE Vulnerabilities
45,347 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-6568 | HIGH | 8.8 | 0.8% | Jun 24, 2025 | A vulnerability classified as critical has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. Affected is an unknown... |
| CVE-2025-36537 | HIGH | 7 | 0.2% | Jun 24, 2025 | Incorrect Permission Assignment for Critical Resource in the TeamViewer Client (Full and Host) of TeamViewer Remote and ... |
| CVE-2025-32978 | HIGH | 7.5 | 0.9% | Jun 24, 2025 | Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.... |
| CVE-2025-32976 | HIGH | 8.8 | 0.8% | Jun 24, 2025 | Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.... |
| CVE-2025-6032 | HIGH | 8.3 | 0.5% | Jun 24, 2025 | A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM ... |
| CVE-2025-27828 | HIGH | 7.1 | 0.4% | Jun 24, 2025 | A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4, 10.1.0.0 through 10.1.... |
| CVE-2025-27827 | HIGH | 7.1 | 0.3% | Jun 24, 2025 | A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.2.0.3 could allow an unauthen... |
| CVE-2025-6566 | HIGH | 7.5 | 0.7% | Jun 24, 2025 | A vulnerability was found in oatpp Oat++ up to 1.3.1. It has been declared as critical. This vulnerability affects the f... |
| CVE-2025-6565 | HIGH | 8.8 | 0.7% | Jun 24, 2025 | A vulnerability was found in Netgear WNCE3001 1.0.0.50. It has been classified as critical. This affects the function ht... |
| CVE-2025-6436 | HIGH | 8.1 | 4.3% | Jun 24, 2025 | Memory safety bugs present in Firefox 139 and Thunderbird 139. Some of these bugs showed evidence of memory corruption a... |
| CVE-2025-6435 | HIGH | 8.1 | 0.5% | Jun 24, 2025 | If a user saved a response from the Network tab in Devtools using the Save As context menu option, that file may not hav... |
| CVE-2025-6432 | HIGH | 8.6 | 0.4% | Jun 24, 2025 | When Multi-Account Containers was enabled, DNS requests could have bypassed a SOCKS proxy when the domain name was inval... |
| CVE-2025-6426 | HIGH | 8.8 | 0.2% | Jun 24, 2025 | The executable file warning did not warn users before opening files with the `terminal` extension. *This bug only affec... |
| CVE-2025-39205 | HIGH | 7.1 | 0.2% | Jun 24, 2025 | A vulnerability exists in the IEC 61850 in MicroSCADA X SYS600 product. The certificate validation of the TLS protocol a... |
| CVE-2025-39204 | HIGH | 8.5 | 0.3% | Jun 24, 2025 | A vulnerability exists in the Web interface of the MicroSCADA X SYS600 product. The filtering query in the Web interface... |
| CVE-2025-39203 | HIGH | 7.1 | 0.2% | Jun 24, 2025 | A vulnerability exists in the IEC 61850 of the MicroSCADA X SYS600 product. An IEC 61850-8 crafted message content from ... |
| CVE-2025-39202 | HIGH | 8.1 | 0.2% | Jun 24, 2025 | A vulnerability exists in in the Monitor Pro interface of the MicroSCADA X SYS600 product. An authenticated user with lo... |
| CVE-2025-2403 | HIGH | 8.7 | 0.3% | Jun 24, 2025 | A denial-of-service vulnerability due to improper prioritization of network traffic over protection mechanism exists in ... |
| CVE-2025-1718 | HIGH | 7.1 | 0.3% | Jun 24, 2025 | An authenticated user with file access privilege via FTP access can cause the Relion 670/650 and SAM600-IO series device... |
| CVE-2025-6206 | HIGH | 7.5 | 0.4% | Jun 24, 2025 | The Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit plugin for WordPress is... |
| CVE-2025-3092 | HIGH | 7.5 | 0.4% | Jun 24, 2025 | An unauthenticated remote attacker can enumerate valid user names from an unprotected endpoint. |
| CVE-2025-3091 | HIGH | 7.5 | 0.3% | Jun 24, 2025 | An low privileged remote attacker in possession of the second factor for another user can login as that user without kno... |
| CVE-2025-3090 | HIGH | 8.2 | 0.4% | Jun 24, 2025 | An unauthenticated remote attacker can obtain limited sensitive information and/or DoS the device due to missing authent... |
| CVE-2025-2962 | HIGH | 7.5 | 0.5% | Jun 24, 2025 | A denial-of-service issue in the dns implemenation could cause an infinite loop. |
| CVE-2025-41427 | HIGH | 8.8 | 1.0% | Jun 24, 2025 | WRC-X3000GS, WRC-X3000GSA, and WRC-X3000GSN contain an improper neutralization of special elements used in an OS command... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now