2025 CVE Vulnerabilities
45,181 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-53545 | MEDIUM | 6.9 | 0.3% | Jul 8, 2025 | Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-... |
| CVE-2025-53480 | MEDIUM | 5.4 | 0.2% | Jul 8, 2025 | The CheckUser extension’s Special:Investigate page has a vulnerability in the Account information tab, where specific in... |
| CVE-2025-3630 | MEDIUM | 5.4 | 0.2% | Jul 8, 2025 | IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.6, 6.2.0.0 through 6.2.0.4, IBM Sterling File Gateway 6.0.0.0 throug... |
| CVE-2025-2827 | MEDIUM | 4.3 | 0.2% | Jul 8, 2025 | IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6, and 6.2.0.0 through 6.2.0.4 could disclose sensitive installat... |
| CVE-2025-2793 | MEDIUM | 5.4 | 0.2% | Jul 8, 2025 | IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.6, 6.2.0.0 through 6.2.0.4, IBM Sterling File Gateway 6.0.0.0 throug... |
| CVE-2025-29267 | MEDIUM | 6.5 | 0.3% | Jul 8, 2025 | SQL Injection vulnerability in Abis, Inc Adjutant Core Accounting ERP build v.PreBeta250F allows a remote attacker to ob... |
| CVE-2025-21433 | MEDIUM | 5.5 | 0.1% | Jul 8, 2025 | Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus. |
| CVE-2025-40721 | MEDIUM | 5.4 | 0.2% | Jul 8, 2025 | Reflected Cross-site Scripting (XSS) vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerab... |
| CVE-2025-40720 | MEDIUM | 6.1 | 0.2% | Jul 8, 2025 | Reflected Cross-site Scripting (XSS) vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerab... |
| CVE-2025-40719 | MEDIUM | 6.1 | 0.2% | Jul 8, 2025 | Reflected Cross-site Scripting (XSS) vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerab... |
| CVE-2025-41223 | MEDIUM | 6.3 | 0.1% | Jul 8, 2025 | A vulnerability has been identified in RUGGEDCOM i800 (All versions), RUGGEDCOM i801 (All versions), RUGGEDCOM i802 (All... |
| CVE-2025-41222 | MEDIUM | 6.9 | 0.3% | Jul 8, 2025 | A vulnerability has been identified in RUGGEDCOM i800 (All versions), RUGGEDCOM i801 (All versions), RUGGEDCOM i802 (All... |
| CVE-2025-40742 | MEDIUM | 6 | 0.3% | Jul 8, 2025 | A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V11.0), SIPROTEC 5 6MD85 (CP200) (All ve... |
| CVE-2025-27127 | MEDIUM | 5.3 | 0.3% | Jul 8, 2025 | A vulnerability has been identified in TIA Project-Server (All versions < V2.1.1), TIA Project-Server V17 (All versions)... |
| CVE-2025-21009 | MEDIUM | 5.5 | 0.1% | Jul 8, 2025 | Out-of-bounds read in decoding malformed frame header in libsavsvc.so prior to Android 15 allows local attackers to caus... |
| CVE-2025-21008 | MEDIUM | 5.5 | 0.1% | Jul 8, 2025 | Out-of-bounds read in decoding frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory c... |
| CVE-2025-21007 | MEDIUM | 5.5 | 0.1% | Jul 8, 2025 | Out-of-bounds write in accessing uninitialized memory in libsavsvc.so prior to Android 15 allows local attackers to caus... |
| CVE-2025-21005 | MEDIUM | 5.5 | 0.1% | Jul 8, 2025 | Improper access control in isemtelephony prior to Android 15 allows local attackers to access sensitive information. |
| CVE-2025-21004 | MEDIUM | 5.5 | 0.1% | Jul 8, 2025 | Improper verification of intent by broadcast receiver in System UI for Galaxy Watch prior to SMR Jul-2025 Release 1 allo... |
| CVE-2025-21003 | MEDIUM | 5.5 | 0.1% | Jul 8, 2025 | Insecure storage of sensitive information in Emergency SOS prior to SMR Jul-2025 Release 1 allows local attackers to acc... |
| CVE-2025-21002 | MEDIUM | 5.5 | 0.1% | Jul 8, 2025 | Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to manipulate broadcast... |
| CVE-2025-21001 | MEDIUM | 5.5 | 0.1% | Jul 8, 2025 | Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to stop broadcasting Au... |
| CVE-2025-20997 | MEDIUM | 5.5 | 0.1% | Jul 8, 2025 | Incorrect default permission in Framework for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to res... |
| CVE-2025-20983 | MEDIUM | 6.7 | 0.1% | Jul 8, 2025 | Out-of-bounds write in checking auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privilege... |
| CVE-2025-20982 | MEDIUM | 6.7 | 0.1% | Jul 8, 2025 | Out-of-bounds write in setting auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now