2025 CVE Vulnerabilities
45,347 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-38199 | MEDIUM | 5.5 | 0.1% | Jul 4, 2025 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix memory leak due to multiple rx_st... |
| CVE-2025-38197 | MEDIUM | 5.5 | 0.2% | Jul 4, 2025 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell_rbu: Fix list usage Pass the co... |
| CVE-2025-38196 | MEDIUM | 5.5 | 0.1% | Jul 4, 2025 | In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: validate buffer count with offset fo... |
| CVE-2025-38195 | MEDIUM | 5.5 | 0.1% | Jul 4, 2025 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix panic caused by NULL-PMD in huge_pte... |
| CVE-2025-38194 | MEDIUM | 5.5 | 0.2% | Jul 4, 2025 | In the Linux kernel, the following vulnerability has been resolved: jffs2: check that raw node were preallocated before... |
| CVE-2025-38193 | MEDIUM | 5.5 | 0.2% | Jul 4, 2025 | In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: reject invalid perturb period ... |
| CVE-2025-38192 | MEDIUM | 5.5 | 0.2% | Jul 4, 2025 | In the Linux kernel, the following vulnerability has been resolved: net: clear the dst when changing skb protocol A no... |
| CVE-2025-38191 | MEDIUM | 5.5 | 0.5% | Jul 4, 2025 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in destroy_prev... |
| CVE-2025-38190 | MEDIUM | 5.5 | 0.2% | Jul 4, 2025 | In the Linux kernel, the following vulnerability has been resolved: atm: Revert atm_account_tx() if copy_from_iter_full... |
| CVE-2025-38189 | MEDIUM | 5.5 | 0.1% | Jul 4, 2025 | In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Avoid NULL pointer dereference in `v3d_job... |
| CVE-2025-38188 | MEDIUM | 5.5 | 0.1% | Jul 4, 2025 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/a7xx: Call CP_RESET_CONTEXT_STATE Calling ... |
| CVE-2025-38186 | MEDIUM | 5.5 | 0.1% | Jul 4, 2025 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix double invocation of bnxt_ulp_stop()/b... |
| CVE-2025-38185 | MEDIUM | 5.5 | 0.2% | Jul 4, 2025 | In the Linux kernel, the following vulnerability has been resolved: atm: atmtcp: Free invalid length skb in atmtcp_c_se... |
| CVE-2025-38184 | MEDIUM | 5.5 | 0.2% | Jul 4, 2025 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix null-ptr-deref when acquiring remote ip o... |
| CVE-2025-38181 | MEDIUM | 5.5 | 0.2% | Jul 4, 2025 | In the Linux kernel, the following vulnerability has been resolved: calipso: Fix null-ptr-deref in calipso_req_{set,del... |
| CVE-2025-48172 | MEDIUM | 5.6 | 0.2% | Jul 4, 2025 | CHMLib through 2bef8d0, as used in SumatraPDF and other products, has a chm_lib.c _chm_decompress_block integer overflow... |
| CVE-2025-38177 | MEDIUM | 5.5 | 0.2% | Jul 4, 2025 | In the Linux kernel, the following vulnerability has been resolved: sch_hfsc: make hfsc_qlen_notify() idempotent hfsc_... |
| CVE-2025-7066 | MEDIUM | 6.1 | 0.3% | Jul 4, 2025 | Jirafeau normally prevents browser preview for text files due to the possibility that for example SVG and HTML documents... |
| CVE-2025-6740 | MEDIUM | 6.1 | 0.3% | Jul 4, 2025 | The Contact Form 7 Database Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tmpD’ param... |
| CVE-2025-6056 | MEDIUM | 6.9 | 0.3% | Jul 4, 2025 | Timing difference in password reset in Ergon Informatik AG's Airlock IAM 7.7.9, 8.0.8, 8.1.7, 8.2.4 and 8.3.1 allows una... |
| CVE-2025-50039 | MEDIUM | 6.5 | 0.2% | Jul 4, 2025 | Missing Authorization vulnerability in vgwort VG WORT METIS vgw-metis allows Exploiting Incorrectly Configured Access Co... |
| CVE-2025-50032 | MEDIUM | 6.5 | 0.2% | Jul 4, 2025 | Missing Authorization vulnerability in Paytiko - Payment Orchestration Platform Paytiko for WooCommerce paytiko allows E... |
| CVE-2025-49431 | MEDIUM | 6.5 | 0.2% | Jul 4, 2025 | Missing Authorization vulnerability in Gnuget MF Plus WPML mf-plus-wpml allows Exploiting Incorrectly Configured Access ... |
| CVE-2025-49303 | MEDIUM | 6.8 | 0.4% | Jul 4, 2025 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Shabti Kaplan Frontend A... |
| CVE-2025-48231 | MEDIUM | 6.5 | 0.2% | Jul 4, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople Booking... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now