2025 CVE Vulnerabilities
45,347 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-30756 | MEDIUM | 6.1 | 0.1% | Jul 15, 2025 | Vulnerability in Oracle REST Data Services (component: General). The supported version that is affected is 24.2.0. Eas... |
| CVE-2025-30754 | MEDIUM | 4.8 | 0.4% | Jul 15, 2025 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE... |
| CVE-2025-30753 | MEDIUM | 6.5 | 0.4% | Jul 15, 2025 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t... |
| CVE-2025-30748 | MEDIUM | 6.1 | 0.2% | Jul 15, 2025 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). S... |
| CVE-2025-30747 | MEDIUM | 4.3 | 0.3% | Jul 15, 2025 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). S... |
| CVE-2025-30746 | MEDIUM | 6.1 | 0.2% | Jul 15, 2025 | Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions th... |
| CVE-2025-30745 | MEDIUM | 6.1 | 0.2% | Jul 15, 2025 | Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (component: Device Integrat... |
| CVE-2025-30739 | MEDIUM | 5.5 | 0.3% | Jul 15, 2025 | Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Suppo... |
| CVE-2025-53893 | MEDIUM | 6.5 | 0.3% | Jul 15, 2025 | File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, previ... |
| CVE-2025-52082 | MEDIUM | 6.5 | 0.3% | Jul 15, 2025 | In Netgear XR300 V1.0.3.38_10.3.30, a stack-based buffer overflow exists in the HTTPD service through the usb_device.cgi... |
| CVE-2025-52081 | MEDIUM | 6.5 | 0.3% | Jul 15, 2025 | In Netgear XR300 V1.0.3.38_10.3.30, a stack-based buffer overflow vulnerability exists in the HTTPD service through the ... |
| CVE-2025-52080 | MEDIUM | 6.5 | 0.3% | Jul 15, 2025 | In Netgear XR300 V1.0.3.38_10.3.30, a stack-based buffer overflow vulnerability exists in the HTTPD service through the ... |
| CVE-2025-53622 | MEDIUM | 5.2 | 0.4% | Jul 15, 2025 | DSpace open source software is a repository application which provides durable access to digital resources. Prior to ver... |
| CVE-2025-53621 | MEDIUM | 6.9 | 0.4% | Jul 15, 2025 | DSpace open source software is a repository application which provides durable access to digital resources. Two related ... |
| CVE-2025-52379 | MEDIUM | 5.4 | 9.7% | Jul 15, 2025 | Nexxt Solutions NCM-X1800 Mesh Router firmware UV1.2.7 and below contains an authenticated command injection vulnerabili... |
| CVE-2025-52378 | MEDIUM | 5.4 | 5.9% | Jul 15, 2025 | Cross-Site Scripting (XSS) vulnerability in Nexxt Solutions NCM-X1800 Mesh Router firmware UV1.2.7 and below allowing at... |
| CVE-2025-52377 | MEDIUM | 5.4 | 9.0% | Jul 15, 2025 | Command injection vulnerability in Nexxt Solutions NCM-X1800 Mesh Router versions UV1.2.7 and below, allowing authentica... |
| CVE-2025-48795 | MEDIUM | 5.6 | 0.6% | Jul 15, 2025 | Apache CXF stores large stream based messages as temporary files on the local filesystem. A bug was introduced which mea... |
| CVE-2025-33097 | MEDIUM | 5.4 | 0.2% | Jul 15, 2025 | IBM QRadar SIEM 7.5 - 7.5.0 UP12 IF02 is vulnerable to stored cross-site scripting. This vulnerability allows authentica... |
| CVE-2025-30483 | MEDIUM | 5.5 | 0.1% | Jul 15, 2025 | Dell ECS versions prior to 3.8.1.5/ ObjectScale version 4.0.0.0 contains an Insertion of Sensitive Information into Log ... |
| CVE-2025-4369 | MEDIUM | 5.5 | 0.2% | Jul 15, 2025 | The Companion Auto Update plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘update_delay_days’ ... |
| CVE-2025-24477 | MEDIUM | 6.7 | 0.2% | Jul 15, 2025 | A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7, FortiOS... |
| CVE-2025-7672 | MEDIUM | 4.3 | 0.2% | Jul 15, 2025 | The improper default setting in JiranSoft CrossEditor4 on Windows, Linux, Unix (API modules) potentaily allows Stored XS... |
| CVE-2025-7367 | MEDIUM | 6.4 | 0.2% | Jul 15, 2025 | The Strong Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Testimonial Custom Fie... |
| CVE-2025-53891 | MEDIUM | 4.3 | 0.3% | Jul 15, 2025 | The timelineofficial/Time-Line- repository contains the source code for the TIME LINE website. A vulnerability was found... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now