2025 CVE Vulnerabilities
45,320 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-52541 | HIGH | 7.3 | 0.1% | Feb 11, 2026 | A DLL hijacking vulnerability in Vivado could allow a local attacker to achieve privilege escalation, potentially result... |
| CVE-2025-48503 | HIGH | 7.8 | 0.1% | Feb 11, 2026 | A DLL hijacking vulnerability in the AMD Software Installer could allow an attacker to achieve privilege escalation pote... |
| CVE-2025-57713 | HIGH | 7.5 | 0.5% | Feb 11, 2026 | A weak authentication vulnerability has been reported to affect File Station 5. The remote attackers can then exploit th... |
| CVE-2025-57709 | HIGH | 8.1 | 0.5% | Feb 11, 2026 | A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, th... |
| CVE-2025-57707 | HIGH | 8.8 | 0.7% | Feb 11, 2026 | An improper neutralization of directives in statically saved code ('Static Code Injection') vulnerability has been repor... |
| CVE-2025-52870 | HIGH | 8.1 | 0.4% | Feb 11, 2026 | A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, th... |
| CVE-2025-52869 | HIGH | 8.1 | 0.4% | Feb 11, 2026 | A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, th... |
| CVE-2025-52868 | HIGH | 8.1 | 0.3% | Feb 11, 2026 | A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, th... |
| CVE-2025-48725 | HIGH | 8.1 | 0.4% | Feb 11, 2026 | A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker... |
| CVE-2025-48724 | HIGH | 8.1 | 0.4% | Feb 11, 2026 | A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, th... |
| CVE-2025-48723 | HIGH | 8.1 | 0.4% | Feb 11, 2026 | A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, th... |
| CVE-2025-30276 | HIGH | 8.8 | 0.5% | Feb 11, 2026 | An out-of-bounds write vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user accoun... |
| CVE-2025-30269 | HIGH | 8.1 | 0.3% | Feb 11, 2026 | A use of externally-controlled format string vulnerability has been reported to affect Qsync Central. If a remote attack... |
| CVE-2025-8099 | HIGH | 7.5 | 0.4% | Feb 11, 2026 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.8 before 18.6.6, 18.7 before 18.7.4, and 1... |
| CVE-2025-10174 | HIGH | 8.3 | 0.1% | Feb 11, 2026 | Cleartext Transmission of Sensitive Information vulnerability in Pan Software & Information Technologies Ltd. PanCafe Pr... |
| CVE-2025-15096 | HIGH | 8.8 | 0.3% | Feb 11, 2026 | The 'Videospirecore Theme Plugin' plugin for WordPress is vulnerable to privilege escalation via account takeover in all... |
| CVE-2025-9986 | HIGH | 8.2 | 0.2% | Feb 11, 2026 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Vadi Corporate Information S... |
| CVE-2025-15440 | HIGH | 7.2 | 0.4% | Feb 11, 2026 | The iONE360 configurator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Contact Form Paramet... |
| CVE-2025-13651 | HIGH | 7.5 | 0.4% | Feb 11, 2026 | Exposure of Sensitive System Information to an Unauthorized Actor vulnerability in Microcom ZeusWeb allows Web Applicati... |
| CVE-2025-10913 | HIGH | 8.3 | 0.3% | Feb 11, 2026 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Saastech Cl... |
| CVE-2025-14541 | HIGH | 7.2 | 0.5% | Feb 11, 2026 | The Lucky Wheel Giveaway plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and includin... |
| CVE-2025-29951 | HIGH | 7.3 | 0.1% | Feb 10, 2026 | A buffer overflow in the AMD Secure Processor (ASP) bootloader could allow an attacker to overwrite memory, potentially ... |
| CVE-2025-29950 | HIGH | 7.1 | 0.1% | Feb 10, 2026 | Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory le... |
| CVE-2025-35998 | HIGH | 7.9 | 0.2% | Feb 10, 2026 | Missing protection mechanism for alternate hardware interface in the Intel(R) Quick Assist Technology for some Intel(R) ... |
| CVE-2025-32008 | HIGH | 8.7 | 0.3% | Feb 10, 2026 | Out-of-bounds write in the firmware for the Intel(R) AMT and Intel(R) Standard Manageability within Ring 3: User Applica... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now