2025 CVE Vulnerabilities
45,174 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-31920 | HIGH | 8.5 | 0.3% | Jun 9, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AmentoTech WP Gupp... |
| CVE-2025-31917 | HIGH | 7.1 | 0.2% | Jun 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Unive... |
| CVE-2025-31638 | HIGH | 7.1 | 0.2% | Jun 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themeton Spare all... |
| CVE-2025-31635 | HIGH | 7.5 | 0.5% | Jun 9, 2025 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in LambertGroup CLEVER lbg-... |
| CVE-2025-31426 | HIGH | 7.1 | 0.2% | Jun 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Stick... |
| CVE-2025-31061 | HIGH | 7.1 | 0.2% | Jun 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in redqteam Wishlist ... |
| CVE-2025-31058 | HIGH | 7.1 | 0.2% | Jun 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Revol... |
| CVE-2025-31057 | HIGH | 7.1 | 0.2% | Jun 9, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Unive... |
| CVE-2025-31050 | HIGH | 7.5 | 0.5% | Jun 9, 2025 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in appthaplugins Apptha Sli... |
| CVE-2025-31045 | HIGH | 7.5 | 0.4% | Jun 9, 2025 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in elfsight elfsight Contact Fo... |
| CVE-2025-31019 | HIGH | 8.8 | 0.5% | Jun 9, 2025 | Authentication Bypass Using an Alternate Path or Channel vulnerability in miniOrange Password Policy Manager password-po... |
| CVE-2025-28992 | HIGH | 8.1 | 0.5% | Jun 9, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-28945 | HIGH | 8.1 | 0.5% | Jun 9, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-28944 | HIGH | 8.1 | 0.5% | Jun 9, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-28888 | HIGH | 8.1 | 0.5% | Jun 9, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-27362 | HIGH | 8.1 | 0.5% | Jun 9, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-26592 | HIGH | 8.1 | 0.5% | Jun 9, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-24770 | HIGH | 8.1 | 0.5% | Jun 9, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-24768 | HIGH | 8.1 | 0.5% | Jun 9, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2025-23974 | HIGH | 8.1 | 0.3% | Jun 9, 2025 | Incorrect Privilege Assignment vulnerability in ifkooo One-Login one-login allows Privilege Escalation.This issue affect... |
| CVE-2025-5877 | HIGH | 8.1 | 0.3% | Jun 9, 2025 | A vulnerability, which was classified as problematic, has been found in Fengoffice Feng Office 3.2.2.1. Affected by this... |
| CVE-2025-49006 | HIGH | 8.2 | 0.4% | Jun 9, 2025 | Wasp (Web Application Specification) is a Rails-like framework for React, Node.js, and Prisma. Prior to version 0.16.6, ... |
| CVE-2025-48053 | HIGH | 7.5 | 0.3% | Jun 9, 2025 | Discourse is an open-source discussion platform. Prior to version 3.4.4 of the `stable` branch, version 3.5.0.beta5 of t... |
| CVE-2025-40670 | HIGH | 8.8 | 0.3% | Jun 9, 2025 | Incorrect authorization vulnerability in TCMAN's GIM v11. This vulnerability allows an unprivileged attacker to create a... |
| CVE-2025-5875 | HIGH | 8.8 | 0.8% | Jun 9, 2025 | A vulnerability classified as critical has been found in TP-LINK Technologies TL-IPC544EP-W4 1.0.9 Build 240428 Rel 6949... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now