2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-68711 | LOW | 2.4 | 0.2% | May 26, 2026 | AppLockZ App Lock and Fingerprint Lock (applock.passwordfingerprint.applockz) 4.2.11 for Android allows a local attacker... |
| CVE-2025-68708 | LOW | 2.4 | 0.2% | May 26, 2026 | SailingLab AppLock (aka com.alpha.applock) 4.3.8 for Android allows a local attacker with physical access to bypass the ... |
| CVE-2025-14361 | HIGH | 7.1 | 0.2% | May 26, 2026 | Missing Authorization vulnerability in AA-Team Woocommerce Envato Affiliates allows Accessing Functionality Not Properly... |
| CVE-2025-68710 | LOW | 2.4 | 0.2% | May 26, 2026 | Easyelife App lock (aka Fingerprint,Applock or locker.app.safe.applocker) 1.9.2 for Android allows a local attacker with... |
| CVE-2025-68709 | MEDIUM | 5.2 | 0.2% | May 26, 2026 | SailingLab AppLock (aka com.alpha.applock) 4.3.8 for Android allows a local attacker to trigger arbitrary JavaScript exe... |
| CVE-2025-33221 | MEDIUM | 6 | 0.2% | May 26, 2026 | NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel driver, where a user could cause an i... |
| CVE-2025-36221 | HIGH | 7.5 | 0.3% | May 26, 2026 | IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 IBM Cloud Pak for Data System uses default pas... |
| CVE-2025-36220 | CRITICAL | 9.8 | 0.3% | May 26, 2026 | IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 IBM Cloud Pak for Data System is vulnerable to... |
| CVE-2025-36148 | MEDIUM | 6.1 | 0.2% | May 26, 2026 | IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4.0 through 3.2.4.15 IBM Financial Transacti... |
| CVE-2025-36145 | MEDIUM | 5.3 | 0.2% | May 26, 2026 | IBM watsonx.data 2.2 through 2.3.1 IBM Lakehouse does not properly restrict inbound and outbound connections which could... |
| CVE-2025-36126 | HIGH | 7.6 | 0.2% | May 26, 2026 | IBM Cognos Analytics 11.2.0, 12.0, and 12.1.0 and IBM Cognos Transformer 12.0, 11.2.4, and 12.1.0 is vulnerable to store... |
| CVE-2025-14290 | MEDIUM | 5.4 | 0.2% | May 26, 2026 | IBM webMethods Integration (on prem) -Integration Server 10.15 through IS_10.15_Core_Fix2611.1 to IS_11.1_Core_Fix10 IBM... |
| CVE-2025-13755 | MEDIUM | 5.5 | 0.1% | May 26, 2026 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes DB2 Connect Server) store... |
| CVE-2025-11482 | HIGH | 8.7 | 0.3% | May 26, 2026 | An Allocation of Resources Without Limits or Throttling vulnerability in the OPC-UA Server used in PPT30 Operating Syst... |
| CVE-2025-71310 | LOW | 1.8 | 0.3% | May 26, 2026 | The GDPR cookies module for Backdrop CMS (before 1.x-1.3.5) doesn't sufficiently protect visitors from Cross Site Scri... |
| CVE-2025-62745 | MEDIUM | 6.5 | 0.2% | May 25, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Team S... |
| CVE-2025-46371 | MEDIUM | 5.5 | 0.1% | May 22, 2026 | Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) a Use of a Broken or Risky Cryptographic Algorithm vulnerability ... |
| CVE-2025-45145 | HIGH | 7.5 | 0.7% | May 22, 2026 | Directory traversal in Follett Software's Destiny Library Manager 22_0_2_rc1 and fixed in v.22.5 AU1 allows remote attac... |
| CVE-2025-32751 | MEDIUM | 5.5 | 0.1% | May 22, 2026 | Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Insecure Storage of Sensitive Information vulnerability. A low... |
| CVE-2025-32749 | HIGH | 7.5 | 0.1% | May 22, 2026 | Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through Directory Listing vulnerabilit... |
| CVE-2025-32747 | HIGH | 7.8 | 0.1% | May 22, 2026 | Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Incorrect Privilege Assignment vulnerability. A low privileged... |
| CVE-2025-32746 | MEDIUM | 5.5 | 0.1% | May 22, 2026 | Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Insecure Storage of Sensitive Information vulnerability. An un... |
| CVE-2025-32745 | MEDIUM | 6.5 | 0.1% | May 22, 2026 | Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Improper Certificate Validation vulnerability. An unauthentica... |
| CVE-2025-26483 | HIGH | 8.2 | 0.2% | May 22, 2026 | Dell PowerFlex Manager, versions 4.6.2 and prior, contains an Open Redirect Vulnerability. An unauthenticated attacker c... |
| CVE-2025-71217 | HIGH | 7.8 | 0.3% | May 21, 2026 | An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection mechanism could allow a... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now