2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-14334 | CRITICAL | 9.8 | 0.4% | Dec 9, 2025 | A flaw has been found in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /new_ad... |
| CVE-2025-64672 | CRITICAL | 9 | 1.0% | Dec 9, 2025 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo... |
| CVE-2025-59719 | CRITICAL | 9.8 | 23.7% | Dec 9, 2025 | An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through 7.6... |
| CVE-2025-59718 | CRITICAL | 9.8 | 65.8% | Dec 9, 2025 | A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 ... |
| CVE-2025-34414 | CRITICAL | 9.3 | 1.0% | Dec 9, 2025 | Entrust Instant Financial Issuance (IFI) On Premise software (formerly referred to as CardWizard) versions 5.x, prior to... |
| CVE-2025-63742 | CRITICAL | 9.8 | 0.4% | Dec 9, 2025 | SQL Injection vulnerability in function setwxqyAction in file webmain/task/api/loginAction.php in Xinhu Rainrock RockOA ... |
| CVE-2025-67504 | CRITICAL | 9.8 | 0.5% | Dec 9, 2025 | WBCE CMS is a content management system. Versions 1.6.4 and below use function GenerateRandomPassword() to create passwo... |
| CVE-2025-66631 | CRITICAL | 9.8 | 0.7% | Dec 9, 2025 | CSLA .NET is a framework designed for the development of reusable, object-oriented business layers for applications. Ver... |
| CVE-2025-66568 | CRITICAL | 9.1 | 0.2% | Dec 9, 2025 | The ruby-saml library implements the client side of an SAML authorization. Versions up to and including 1.12.4, are vuln... |
| CVE-2025-66567 | CRITICAL | 9.1 | 0.4% | Dec 9, 2025 | The ruby-saml library is for implementing the client side of a SAML authorization. ruby-saml versions up to and includin... |
| CVE-2025-66565 | CRITICAL | 9.8 | 0.5% | Dec 9, 2025 | Fiber Utils is a collection of common functions created for Fiber. In versions 2.0.0-rc.3 and below, when the system's c... |
| CVE-2025-42928 | CRITICAL | 9.1 | 9.5% | Dec 9, 2025 | Under certain conditions, a high privileged user could exploit a deserialization vulnerability in SAP jConnect to launch... |
| CVE-2025-42880 | CRITICAL | 9.9 | 4.5% | Dec 9, 2025 | Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when cal... |
| CVE-2025-40938 | CRITICAL | 9.8 | 0.4% | Dec 9, 2025 | A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected device stores sensitive inf... |
| CVE-2025-40343 | CRITICAL | 9.8 | 0.7% | Dec 9, 2025 | In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: avoid scheduling association deletion twi... |
| CVE-2025-14330 | CRITICAL | 9.8 | 0.5% | Dec 9, 2025 | JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140... |
| CVE-2025-14326 | CRITICAL | 9.8 | 0.5% | Dec 9, 2025 | Use-after-free in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 146 and Thunderbird 146. |
| CVE-2025-14324 | CRITICAL | 9.8 | 0.6% | Dec 9, 2025 | JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 115... |
| CVE-2025-14321 | CRITICAL | 9.8 | 0.6% | Dec 9, 2025 | Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thund... |
| CVE-2025-14310 | CRITICAL | 9.3 | 0.4% | Dec 9, 2025 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in rethinkdb.This issue affects ret... |
| CVE-2025-14308 | CRITICAL | 9.8 | 0.6% | Dec 9, 2025 | An integer overflow vulnerability exists in the write method of the Buffer class in Robocode version 1.9.3.6. The method... |
| CVE-2025-14306 | CRITICAL | 9.1 | 1.1% | Dec 9, 2025 | A directory traversal vulnerability exists in the CacheCleaner component of Robocode version 1.9.3.6. The recursivelyDel... |
| CVE-2025-12504 | CRITICAL | 9.8 | 0.6% | Dec 9, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Talent Software UN... |
| CVE-2025-11022 | CRITICAL | 9.6 | 0.6% | Dec 9, 2025 | Cross-Site Request Forgery (CSRF) vulnerability in Personal Project Panilux allows Cross Site Request Forgery. This ... |
| CVE-2025-66481 | CRITICAL | 9.6 | 0.6% | Dec 9, 2025 | DeepChat is an open-source AI chat platform that supports cloud models and LLMs. Versions 0.5.1 and below are vulnerable... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now