2025 CVE Vulnerabilities

45,138 CVEs published in 2025.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2025-58344MEDIUM6.2An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 12...
CVE-2025-58343MEDIUM5.5An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 12...
CVE-2025-58342MEDIUM6.2An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 12...
CVE-2025-58341MEDIUM6.2An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 12...
CVE-2025-58340MEDIUM6.2An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 12...
CVE-2025-52629MEDIUM6.1HCL AION is susceptible to Missing Content-Security-Policy.  An The absence of a CSP header may increase the risk of cr...
CVE-2025-46651MEDIUM4.3Tiny File Manager through 2.6 contains a server-side request forgery (SSRF) vulnerability in the URL upload feature. Due...
CVE-2025-65017MEDIUM6.5Decidim is a participatory democracy framework. In versions from 0.30.0 to before 0.30.4 and from 0.31.0.rc1 to before 0...
CVE-2025-13473MEDIUM5.3An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. The `django.contrib.auth.handlers...
CVE-2025-67857MEDIUM5.3A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs...
CVE-2025-67855MEDIUM6.1A flaw was found in mooodle. A remote attacker could exploit a reflected Cross-Site Scripting (XSS) vulnerability in the...
CVE-2025-67852MEDIUM6.1A flaw was found in Moodle. An open redirect vulnerability in the OAuth login flow allows a remote attacker to redirect ...
CVE-2025-67850MEDIUM6.1A flaw was found in moodle. This vulnerability, known as Cross-Site Scripting (XSS), occurs due to insufficient checks o...
CVE-2025-67849MEDIUM6.1A flaw was found in Moodle. This cross-site scripting (XSS) vulnerability, caused by improper sanitization of AI prompt ...
CVE-2025-41065MEDIUM5.1Stored Cross-Site Scripting (XSS) vulnerability type in LUNA software v7.5.5.6. This vulnerability allows an attacker to...
CVE-2025-14274MEDIUM5.4The Unlimited Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Border He...
CVE-2025-67483MEDIUM6.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F...
CVE-2025-67481MEDIUM6.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F...
CVE-2025-67480MEDIUM6.5Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiQue...
CVE-2025-67477MEDIUM6.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F...
CVE-2025-67476MEDIUM4.3Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Import/Imp...
CVE-2025-67475MEDIUM6.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F...
CVE-2025-61658MEDIUM4.3Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files src/GlobalContribut...
CVE-2025-61656MEDIUM6.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F...
CVE-2025-61655MEDIUM6.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F...

Check if your code is affected by 2025 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now