2025 CVE Vulnerabilities
45,347 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-55136 | MEDIUM | 5.7 | 0.1% | Aug 7, 2025 | ERC (aka Emotion Recognition in Conversation) through 0.3 has insecure deserialization via a serialized object because j... |
| CVE-2025-55135 | MEDIUM | 6.4 | 0.2% | Aug 7, 2025 | In Agora Foundation Agora fall23-Alpha1 before 690ce56, there is XSS via a profile picture to server/controller/userCont... |
| CVE-2025-55134 | MEDIUM | 6.4 | 0.2% | Aug 7, 2025 | In Agora Foundation Agora fall23-Alpha1 before b087490, there is XSS via tag in client/agora/public/js/editorManager.js. |
| CVE-2025-55133 | MEDIUM | 6.4 | 0.2% | Aug 7, 2025 | In Agora Foundation Agora fall23-Alpha1 before b087490, there is XSS via topicName in client/agora/public/js/editorManag... |
| CVE-2025-44779 | MEDIUM | 6.6 | 0.2% | Aug 7, 2025 | An issue in Ollama v0.1.33 allows attackers to delete arbitrary files via sending a crafted packet to the endpoint /api/... |
| CVE-2025-50952 | MEDIUM | 6.5 | 0.2% | Aug 7, 2025 | openjpeg v 2.5.0 was discovered to contain a NULL pointer dereference via the component /openjp2/dwt.c. |
| CVE-2025-47188 | MEDIUM | 6.5 | 48.5% | Aug 7, 2025 | A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones through 6.4 SP4 (R6.4.0.4006), and th... |
| CVE-2025-8533 | MEDIUM | 6.9 | 0.4% | Aug 7, 2025 | A vulnerability was identified in the XPC services of Fantastical. The services failed to implement proper client author... |
| CVE-2025-32094 | MEDIUM | 4 | 0.5% | Aug 7, 2025 | An issue was discovered in Akamai Ghost, as used for the Akamai CDN platform before 2025-03-26. Under certain circumstan... |
| CVE-2025-8583 | MEDIUM | 4.3 | 0.2% | Aug 7, 2025 | Inappropriate implementation in Permissions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to perform... |
| CVE-2025-8582 | MEDIUM | 4.3 | 0.2% | Aug 7, 2025 | Insufficient validation of untrusted input in Core in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to ... |
| CVE-2025-8581 | MEDIUM | 4.3 | 0.3% | Aug 7, 2025 | Inappropriate implementation in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinc... |
| CVE-2025-8580 | MEDIUM | 4.3 | 0.2% | Aug 7, 2025 | Inappropriate implementation in Filesystems in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to perform... |
| CVE-2025-8579 | MEDIUM | 4.3 | 0.2% | Aug 7, 2025 | Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who... |
| CVE-2025-8577 | MEDIUM | 4.3 | 0.2% | Aug 7, 2025 | Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who... |
| CVE-2025-54885 | MEDIUM | 6.9 | 0.4% | Aug 7, 2025 | Thinbus Javascript Secure Remote Password is a browser SRP6a implementation for zero-knowledge password authentication. ... |
| CVE-2025-54798 | MEDIUM | 5.3 | 0.3% | Aug 7, 2025 | tmp is a temporary file and directory creator for node.js. In versions 0.2.3 and below, tmp is vulnerable to an arbitrar... |
| CVE-2025-54784 | MEDIUM | 6.1 | 0.2% | Aug 7, 2025 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. There is a Cro... |
| CVE-2025-54783 | MEDIUM | 6.1 | 0.2% | Aug 7, 2025 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Versions 7.14.... |
| CVE-2025-54786 | MEDIUM | 5.3 | 0.3% | Aug 7, 2025 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. In versions 7.... |
| CVE-2025-51058 | MEDIUM | 6.5 | 0.5% | Aug 6, 2025 | Bottinelli Informatical Vedo Suite 2024.17 is vulnerable to Server-side Request Forgery (SSRF) in the /api_vedo/video/pr... |
| CVE-2025-51057 | MEDIUM | 6.5 | 0.5% | Aug 6, 2025 | A local file inclusion (LFI) vulnerability in Vedo Suite version 2024.17 allows remote authenticated attackers to read a... |
| CVE-2025-51054 | MEDIUM | 6.5 | 0.4% | Aug 6, 2025 | Vedo Suite 2024.17 is vulnerable to Incorrect Access Control, which allows remote attackers to obtain a valid high privi... |
| CVE-2025-51053 | MEDIUM | 6.1 | 0.4% | Aug 6, 2025 | A Cross-site scripting (XSS) vulnerability in /api_vedo/ in Vedo Suite version 2024.17 allows remote attackers to inject... |
| CVE-2025-51052 | MEDIUM | 6.5 | 0.4% | Aug 6, 2025 | A path traversal vulnerability in Vedo Suite 2024.17 allows remote authenticated attackers to read arbitrary filesystem ... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now