2025 CVE Vulnerabilities
45,347 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-49080 | HIGH | 7.5 | 0.3% | Jun 12, 2025 | There is a memory management vulnerability in Absolute Secure Access server versions 9.0 to 13.54. Attackers with networ... |
| CVE-2025-46035 | HIGH | 7.5 | 0.6% | Jun 12, 2025 | Buffer Overflow vulnerability in Tenda AC6 v.15.03.05.16 allows a remote attacker to cause a denial of service via the o... |
| CVE-2025-49200 | HIGH | 7.5 | 0.4% | Jun 12, 2025 | The created backup files are unencrypted, making the application vulnerable for gathering sensitive information by downl... |
| CVE-2025-49198 | HIGH | 7.5 | 0.3% | Jun 12, 2025 | The Media Server’s authorization tokens have a poor quality of randomness. An attacker may be able to guess the token of... |
| CVE-2025-49197 | HIGH | 7.5 | 0.2% | Jun 12, 2025 | The application uses a weak password hash function, allowing an attacker to crack the weak password hash to gain access ... |
| CVE-2025-49194 | HIGH | 7.5 | 0.3% | Jun 12, 2025 | The server supports authentication methods in which credentials are sent in plaintext over unencrypted channels. If an a... |
| CVE-2025-49188 | HIGH | 7.5 | 0.4% | Jun 12, 2025 | The application sends user credentials as URL parameters instead of POST bodies, making it vulnerable to information gat... |
| CVE-2025-49184 | HIGH | 7.5 | 0.4% | Jun 12, 2025 | A remote unauthorized attacker may gather sensitive information of the application, due to missing authorization of conf... |
| CVE-2025-49183 | HIGH | 7.5 | 0.3% | Jun 12, 2025 | All communication with the REST API is unencrypted (HTTP), allowing an attacker to intercept traffic between an actor an... |
| CVE-2025-49181 | HIGH | 8.6 | 0.3% | Jun 12, 2025 | Due to missing authorization of an API endpoint, unauthorized users can send HTTP GET requests to gather sensitive infor... |
| CVE-2025-6021 | HIGH | 7.5 | 1.4% | Jun 12, 2025 | A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a ... |
| CVE-2025-0673 | HIGH | 7.5 | 0.5% | Jun 12, 2025 | An issue has been discovered in GitLab CE/EE affecting all versions from 17.7 before 17.10.8, 17.11 before 17.11.4, and ... |
| CVE-2025-4278 | HIGH | 8.7 | 6.1% | Jun 12, 2025 | An issue has been discovered in GitLab CE/EE affecting all versions starting with 18.0 before 18.0.2. Under certain cond... |
| CVE-2025-1516 | HIGH | 7.5 | 0.3% | Jun 12, 2025 | An issue has been discovered in GitLab CE/EE affecting all versions from 8.7 before 17.10.8, 17.11 before 17.11.4, and 1... |
| CVE-2025-1478 | HIGH | 7.5 | 0.3% | Jun 12, 2025 | An issue has been discovered in GitLab CE/EE affecting all versions from 8.13 before 17.10.7, 17.11 before 17.11.3, and ... |
| CVE-2025-4613 | HIGH | 8.8 | 0.5% | Jun 12, 2025 | Path traversal in Google Web Designer's template handling versions prior to 16.3.0.0407 on Windows allows attacker to ac... |
| CVE-2025-5012 | HIGH | 8.8 | 0.5% | Jun 12, 2025 | The Workreap plugin for WordPress, used by the Workreap - Freelance Marketplace WordPress Theme, is vulnerable to arbitr... |
| CVE-2025-35978 | HIGH | 7.1 | 0.1% | Jun 12, 2025 | Improper restriction of communication channel to intended endpoints issue exists in UpdateNavi V1.4 L10 to L33 and Updat... |
| CVE-2025-6009 | HIGH | 7.2 | 0.3% | Jun 12, 2025 | A vulnerability was found in kiCode111 like-girl 5.2.0 and classified as critical. Affected by this issue is some unknow... |
| CVE-2025-6008 | HIGH | 7.2 | 0.3% | Jun 12, 2025 | A vulnerability has been found in kiCode111 like-girl 5.2.0 and classified as critical. Affected by this vulnerability i... |
| CVE-2025-6007 | HIGH | 7.2 | 0.3% | Jun 12, 2025 | A vulnerability, which was classified as critical, was found in kiCode111 like-girl 5.2.0. Affected is an unknown functi... |
| CVE-2025-6006 | HIGH | 7.2 | 0.3% | Jun 12, 2025 | A vulnerability, which was classified as critical, has been found in kiCode111 like-girl 5.2.0. This issue affects some ... |
| CVE-2025-6005 | HIGH | 7.2 | 0.3% | Jun 12, 2025 | A vulnerability classified as critical was found in kiCode111 like-girl 5.2.0. This vulnerability affects unknown code o... |
| CVE-2025-32465 | HIGH | 8.5 | 0.3% | Jun 11, 2025 | A stored XSS vulnerability in RSTickets! component 1.9.12 - 3.3.0 for Joomla was discovered. It allows attackers to perf... |
| CVE-2025-25032 | HIGH | 7.5 | 0.3% | Jun 11, 2025 | IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and 12.0.4 could allow an a... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now