2025 CVE Vulnerabilities
45,347 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-6244 | MEDIUM | 5.4 | 0.2% | Jul 8, 2025 | The Essential Addons for Elementor – Popular Elementor Templates and Widgets plugin for WordPress is vulnerable to Store... |
| CVE-2025-5570 | MEDIUM | 5.4 | 0.2% | Jul 8, 2025 | The AI Engine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the mwai_chatbot shortcode 'id' para... |
| CVE-2025-20695 | MEDIUM | 6.5 | 0.2% | Jul 8, 2025 | In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to remote denial of serv... |
| CVE-2025-20694 | MEDIUM | 6.5 | 0.2% | Jul 8, 2025 | In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to remote denial of serv... |
| CVE-2025-20693 | MEDIUM | 6.5 | 0.1% | Jul 8, 2025 | In wlan STA driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote (... |
| CVE-2025-20692 | MEDIUM | 5.5 | 0.2% | Jul 8, 2025 | In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local inf... |
| CVE-2025-20691 | MEDIUM | 5.5 | 0.1% | Jul 8, 2025 | In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local inf... |
| CVE-2025-20690 | MEDIUM | 5.5 | 0.1% | Jul 8, 2025 | In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local inf... |
| CVE-2025-20689 | MEDIUM | 5.5 | 0.1% | Jul 8, 2025 | In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local inf... |
| CVE-2025-20688 | MEDIUM | 5.5 | 0.2% | Jul 8, 2025 | In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local inf... |
| CVE-2025-20687 | MEDIUM | 5.5 | 0.1% | Jul 8, 2025 | In Bluetooth driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local d... |
| CVE-2025-7156 | MEDIUM | 6.3 | 0.2% | Jul 8, 2025 | A vulnerability has been found in hitsz-ids airda 0.0.3 and classified as critical. This vulnerability affects the funct... |
| CVE-2025-43001 | MEDIUM | 6.9 | 0.1% | Jul 8, 2025 | SAPCAR allows an attacker logged in with high privileges to override the permissions of the current and parent directori... |
| CVE-2025-42992 | MEDIUM | 6.9 | 0.1% | Jul 8, 2025 | SAPCAR allows an attacker logged in with high privileges to create a malicious SAR archive in SAPCAR. This could enable ... |
| CVE-2025-42986 | MEDIUM | 4.3 | 0.2% | Jul 8, 2025 | Due to a missing authorization check in an obsolete RFC enabled function module in SAP BASIS, an authenticated low-privi... |
| CVE-2025-42985 | MEDIUM | 6.1 | 0.2% | Jul 8, 2025 | Due to insufficient sanitization in the SAP BusinessObjects Content Administrator Workbench, attackers could craft malic... |
| CVE-2025-42981 | MEDIUM | 6.1 | 0.2% | Jul 8, 2025 | Due to an open redirect vulnerability in SAP NetWeaver Application Server ABAP, an unauthenticated attacker could craft ... |
| CVE-2025-42979 | MEDIUM | 5.6 | 0.1% | Jul 8, 2025 | The GuiXT application, which is integrated with SAP GUI for Windows, uses obfuscation algorithms instead of secure symme... |
| CVE-2025-42974 | MEDIUM | 4.3 | 0.2% | Jul 8, 2025 | Due to missing authorization check, an attacker authenticated as a non-administrative user could call a remote-enabled f... |
| CVE-2025-42973 | MEDIUM | 5.4 | 0.2% | Jul 8, 2025 | Due to a Cross-Site Scripting vulnerability in SAP Data Services Management Console, an authenticated attacker could exp... |
| CVE-2025-42971 | MEDIUM | 4 | 0.1% | Jul 8, 2025 | A memory corruption vulnerability exists in SAPCAR allowing an attacker to craft malicious SAPCAR archives. When a high ... |
| CVE-2025-42970 | MEDIUM | 5.8 | 0.3% | Jul 8, 2025 | SAPCAR improperly sanitizes the file paths while extracting SAPCAR archives. Due to this, an attacker could craft a mali... |
| CVE-2025-42969 | MEDIUM | 6.1 | 0.2% | Jul 8, 2025 | SAP NetWeaver Application Server ABAP and ABAP Platform allows an unauthenticated attacker to inject a malicious script ... |
| CVE-2025-42968 | MEDIUM | 4.3 | 0.2% | Jul 8, 2025 | SAP NetWeaver allows an authenticated non-administrative user to call the remote-enabled function module which could gra... |
| CVE-2025-42965 | MEDIUM | 4.1 | 0.2% | Jul 8, 2025 | SAP CMC Promotion Management allows an authenticated attacker to enumerate internal network systems by submitting crafte... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now