2025 CVE Vulnerabilities
45,347 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-6130 | HIGH | 8.8 | 0.8% | Jun 16, 2025 | A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. This issue... |
| CVE-2025-6129 | HIGH | 8.8 | 0.8% | Jun 16, 2025 | A vulnerability classified as critical was found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. This vulnerability affects ... |
| CVE-2025-6128 | HIGH | 8.8 | 1.1% | Jun 16, 2025 | A vulnerability classified as critical has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. This affects an unknow... |
| CVE-2025-49795 | HIGH | 7.5 | 0.6% | Jun 16, 2025 | A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML expressions. This flaw allows an... |
| CVE-2025-49125 | HIGH | 7.5 | 3.2% | Jun 16, 2025 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Apache Tomcat. When using PreResources or Pos... |
| CVE-2025-49124 | HIGH | 8.4 | 0.3% | Jun 16, 2025 | Untrusted Search Path vulnerability in Apache Tomcat installer for Windows. During installation, the Tomcat installer fo... |
| CVE-2025-48988 | HIGH | 7.5 | 53.2% | Jun 16, 2025 | Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: ... |
| CVE-2025-48976 | HIGH | 7.5 | 63.3% | Jun 16, 2025 | Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons Fil... |
| CVE-2025-3526 | HIGH | 7.5 | 0.5% | Jun 16, 2025 | SessionClicks in Liferay Portal 7.0.0 through 7.4.3.21, and Liferay DXP 7.4 GA through update 9, 7.3 GA through update 2... |
| CVE-2025-3602 | HIGH | 7.5 | 0.4% | Jun 16, 2025 | Liferay Portal 7.4.0 through 7.4.3.97, and Liferay DXP 2023.Q3.1 through 2023.Q3.2, 7.4 GA through update 92, 7.3 GA thr... |
| CVE-2025-36632 | HIGH | 7.8 | 0.2% | Jun 16, 2025 | In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could execute c... |
| CVE-2025-6122 | HIGH | 8.8 | 0.3% | Jun 16, 2025 | A vulnerability, which was classified as critical, was found in code-projects Restaurant Order System 1.0. This affects ... |
| CVE-2025-5689 | HIGH | 8.5 | 0.3% | Jun 16, 2025 | A flaw was found in the temporary user record that authd uses in the pre-auth NSS. As a result, a user login for the fir... |
| CVE-2025-6115 | HIGH | 8.8 | 1.1% | Jun 16, 2025 | A vulnerability was found in D-Link DIR-619L 2.06B01 and classified as critical. Affected by this issue is the function ... |
| CVE-2025-6114 | HIGH | 8.8 | 1.1% | Jun 16, 2025 | A vulnerability has been found in D-Link DIR-619L 2.06B01 and classified as critical. Affected by this vulnerability is ... |
| CVE-2025-40728 | HIGH | 8.8 | 0.4% | Jun 16, 2025 | SQL injection vulnerability in Customer Support System v1.0. This vulnerability allows an authenticated attacker to retr... |
| CVE-2025-3464 | HIGH | 8.4 | 0.5% | Jun 16, 2025 | A race condition vulnerability exists in Armoury Crate. This vulnerability arises from a Time-of-check Time-of-use issue... |
| CVE-2025-6113 | HIGH | 8.8 | 1.0% | Jun 16, 2025 | A vulnerability, which was classified as critical, was found in Tenda FH1203 2.0.1.6. Affected is the function fromadvse... |
| CVE-2025-6112 | HIGH | 8.8 | 1.0% | Jun 16, 2025 | A vulnerability, which was classified as critical, has been found in Tenda FH1205 2.0.0.7. This issue affects the functi... |
| CVE-2025-4987 | HIGH | 8.7 | 0.3% | Jun 16, 2025 | A stored Cross-site Scripting (XSS) vulnerability affecting Opportunity Management in Project Portfolio Manager from Rel... |
| CVE-2025-6111 | HIGH | 8.8 | 0.8% | Jun 16, 2025 | A vulnerability classified as critical was found in Tenda FH1205 2.0.0.7(775). This vulnerability affects the function f... |
| CVE-2025-6110 | HIGH | 8.8 | 3.2% | Jun 16, 2025 | A vulnerability classified as critical has been found in Tenda FH1201 1.2.0.14(408). This affects an unknown part of the... |
| CVE-2025-6105 | HIGH | 8.8 | 0.3% | Jun 16, 2025 | A vulnerability has been found in jflyfox jfinal_cms 5.0.1 and classified as problematic. This vulnerability affects unk... |
| CVE-2025-6104 | HIGH | 8.8 | 3.1% | Jun 16, 2025 | A vulnerability, which was classified as critical, was found in Wifi-soft UniBox Controller up to 20250506. This affects... |
| CVE-2025-6103 | HIGH | 8.8 | 2.5% | Jun 16, 2025 | A vulnerability, which was classified as critical, has been found in Wifi-soft UniBox Controller up to 20250506. Affecte... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now