2025 CVE Vulnerabilities

45,320 CVEs published in 2025.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2025-12131MEDIUM6.5A truncated 802.15.4 packet can lead to an assert, resulting in a denial of service.
CVE-2025-15343MEDIUM6.5Tanium addressed an incorrect default permissions vulnerability in Enforce.
CVE-2025-15342MEDIUM4.3Tanium addressed an improper access controls vulnerability in Reputation.
CVE-2025-15341MEDIUM6.5Tanium addressed an incorrect default permissions vulnerability in Benchmark.
CVE-2025-15340MEDIUM6.5Tanium addressed an incorrect default permissions vulnerability in Comply.
CVE-2025-15339MEDIUM6.5Tanium addressed an incorrect default permissions vulnerability in Discover.
CVE-2025-15338MEDIUM6.5Tanium addressed an incorrect default permissions vulnerability in Partner Integration.
CVE-2025-15337MEDIUM6.5Tanium addressed an incorrect default permissions vulnerability in Patch.
CVE-2025-15336MEDIUM6.5Tanium addressed an incorrect default permissions vulnerability in Performance.
CVE-2025-15335MEDIUM4.3Tanium addressed an information disclosure vulnerability in Threat Response.
CVE-2025-15334MEDIUM4.3Tanium addressed an information disclosure vulnerability in Threat Response.
CVE-2025-15333MEDIUM4.3Tanium addressed an information disclosure vulnerability in Threat Response.
CVE-2025-15332MEDIUM4.9Tanium addressed an information disclosure vulnerability in Threat Response.
CVE-2025-15331MEDIUM4.3Tanium addressed an uncontrolled resource consumption vulnerability in Connect.
CVE-2025-15329MEDIUM4.9Tanium addressed an information disclosure vulnerability in Threat Response.
CVE-2025-15328MEDIUM5Tanium addressed an improper link resolution before file access vulnerability in Enforce.
CVE-2025-15327MEDIUM4.3Tanium addressed an improper access controls vulnerability in Deploy.
CVE-2025-15326MEDIUM4.3Tanium addressed an improper access controls vulnerability in Patch.
CVE-2025-15325MEDIUM6.3Tanium addressed an improper input validation vulnerability in Discover.
CVE-2025-15324MEDIUM6.6Tanium addressed a documentation issue in Engage.
CVE-2025-58190MEDIUM5.3The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can ...
CVE-2025-47911MEDIUM5.3The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which ...
CVE-2025-15551MEDIUM5.6The response coming from TP-Link Archer MR200 v5.2, C20 v5 and v6, TL-WR850N v3, and TL-WR845N v4 for any request is get...
CVE-2025-70792MEDIUM6.1Cross Site Scripting vulnerability in the "/admin/category/create" endpoint of Microweber 2.0.19. An attacker can manipu...
CVE-2025-70791MEDIUM6.1Cross Site Scripting vulnerability in the "/admin/order/abandoned" endpoint of Microweber 2.0.19. An attacker can manipu...

Check if your code is affected by 2025 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now