2025 CVE Vulnerabilities
45,347 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-38354 | MEDIUM | 5.5 | 0.2% | Jul 25, 2025 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/gpu: Fix crash when throttling GPU immediat... |
| CVE-2025-38353 | MEDIUM | 5.5 | 0.1% | Jul 25, 2025 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix taking invalid lock on wedge If device... |
| CVE-2025-8155 | MEDIUM | 5.4 | 12.7% | Jul 25, 2025 | A vulnerability has been found in D-Link DCS-6010L 1.15.03 and classified as problematic. Affected by this vulnerability... |
| CVE-2025-5254 | MEDIUM | 6.1 | 0.3% | Jul 25, 2025 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kron Techno... |
| CVE-2025-5253 | MEDIUM | 6.5 | 0.4% | Jul 25, 2025 | Allocation of Resources Without Limits or Throttling vulnerability in Kron Technologies Kron PAM allows HTTP DoS. This ... |
| CVE-2025-8133 | MEDIUM | 6.3 | 0.3% | Jul 25, 2025 | A vulnerability classified as critical has been found in yanyutao0402 ChanCMS up to 3.1.2. This affects the function get... |
| CVE-2025-7022 | MEDIUM | 6.1 | 0.3% | Jul 25, 2025 | The My Reservation System WordPress plugin through 2.3 does not sanitise and escape a parameter before outputting it bac... |
| CVE-2025-8132 | MEDIUM | 5.4 | 0.5% | Jul 25, 2025 | A vulnerability was found in yanyutao0402 ChanCMS up to 3.1.2. It has been rated as critical. Affected by this issue is ... |
| CVE-2025-8129 | MEDIUM | 6.1 | 0.2% | Jul 25, 2025 | A vulnerability, which was classified as problematic, was found in KoaJS Koa up to 3.0.0. Affected is the function back ... |
| CVE-2025-8128 | MEDIUM | 6.3 | 0.3% | Jul 25, 2025 | A vulnerability, which was classified as critical, has been found in zhousg letao up to 7d8df0386a65228476290949e0413de4... |
| CVE-2025-54567 | MEDIUM | 5.4 | 0.2% | Jul 25, 2025 | hw/pci/pcie_sriov.c in QEMU through 10.0.3 mishandles the VF Enable bit write mask, a related issue to CVE-2024-26327. |
| CVE-2025-54566 | MEDIUM | 5.4 | 0.2% | Jul 25, 2025 | hw/pci/pcie_sriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue to CVE-2024-26327. |
| CVE-2025-54558 | MEDIUM | 4.1 | 0.2% | Jul 25, 2025 | OpenAI Codex CLI before 0.9.0 auto-approves ripgrep (aka rg) execution even with the --pre or --hostname-bin or --search... |
| CVE-2025-0252 | MEDIUM | 4.8 | 0.1% | Jul 25, 2025 | HCL IEM is affected by a password in cleartext vulnerability. Sensitive information is transmitted without adequate pro... |
| CVE-2025-0251 | MEDIUM | 5.7 | 0.2% | Jul 25, 2025 | HCL IEM is affected by a concurrent login vulnerability. The application allows multiple concurrent sessions using the ... |
| CVE-2025-0250 | MEDIUM | 4.9 | 0.2% | Jul 25, 2025 | HCL IEM is affected by an authorization token sent in cookie vulnerability. A token used for authentication and authori... |
| CVE-2025-0249 | MEDIUM | 5.9 | 0.2% | Jul 25, 2025 | HCL IEM is affected by an improper invalidation of access or JWT token vulnerability. A token was not invalidated which... |
| CVE-2025-3614 | MEDIUM | 5.4 | 0.2% | Jul 24, 2025 | The ElementsKit Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the... |
| CVE-2025-31955 | MEDIUM | 6.5 | 0.3% | Jul 24, 2025 | HCL iAutomate is affected by a sensitive data exposure vulnerability. This issue may allow unauthorized access to sensi... |
| CVE-2025-31953 | MEDIUM | 6.5 | 0.3% | Jul 24, 2025 | HCL iAutomate includes hardcoded credentials which may result in potential exposure of confidential data if intercepted ... |
| CVE-2025-8115 | MEDIUM | 5.4 | 0.3% | Jul 24, 2025 | A vulnerability has been found in PHPGurukul Taxi Stand Management System 1.0 and classified as problematic. Affected by... |
| CVE-2025-45702 | MEDIUM | 6.5 | 0.2% | Jul 24, 2025 | SoftPerfect Pty Ltd Connection Quality Monitor v1.1 was discovered to store all credentials in plaintext. |
| CVE-2025-53084 | MEDIUM | 6.1 | 0.7% | Jul 24, 2025 | A cross-site scripting (xss) vulnerability exists in the videosList page parameter functionality of WWBN AVideo 14.4 and... |
| CVE-2025-50128 | MEDIUM | 6.1 | 0.8% | Jul 24, 2025 | A cross-site scripting (xss) vulnerability exists in the videoNotFound 404ErrorMsg parameter functionality of WWBN AVide... |
| CVE-2025-47061 | MEDIUM | 5.4 | 0.3% | Jul 24, 2025 | Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability t... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now