2025 CVE Vulnerabilities
45,348 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-27022 | MEDIUM | 6.5 | 0.5% | Jul 2, 2025 | A path traversal vulnerability of the WebGUI HTTP endpoint in Infinera G42 version R6.1.3 allows remote authenticated u... |
| CVE-2025-24333 | MEDIUM | 6.4 | 0.2% | Jul 2, 2025 | Nokia Single RAN baseband software earlier than 24R1-SR 1.0 MP contains administrative shell input validation fault, whi... |
| CVE-2025-24331 | MEDIUM | 6.4 | 0.1% | Jul 2, 2025 | The Single RAN baseband OAM service is intended to run as an unprivileged service. However, it initially starts with roo... |
| CVE-2025-24330 | MEDIUM | 6.4 | 0.2% | Jul 2, 2025 | Sending a crafted SOAP "provision" operation message PlanId field within the Mobile Network Operator (MNO) internal Radi... |
| CVE-2025-24329 | MEDIUM | 6.4 | 0.2% | Jul 2, 2025 | Sending a crafted SOAP "provision" operation message archive field within the Mobile Network Operator (MNO) internal Rad... |
| CVE-2025-24328 | MEDIUM | 4.2 | 0.2% | Jul 2, 2025 | Sending a crafted SOAP "set" operation message within the Mobile Network Operator (MNO) internal Radio Access Network (R... |
| CVE-2025-6017 | MEDIUM | 5.5 | 0.1% | Jul 2, 2025 | A flaw was found in Red Hat Advanced Cluster Management through versions 2.10, before 2.10.7, 2.11, before 2.11.4, and 2... |
| CVE-2025-52462 | MEDIUM | 6.1 | 0.2% | Jul 2, 2025 | Cross-site scripting vulnerability exists in Active! mail 6 BuildInfo: 6.30.01004145 to 6.60.06008562. If this vulnerabi... |
| CVE-2025-6687 | MEDIUM | 5.4 | 0.2% | Jul 2, 2025 | The Magic Buttons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's magic... |
| CVE-2025-6686 | MEDIUM | 5.4 | 0.2% | Jul 2, 2025 | The Magic Buttons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's magic... |
| CVE-2025-52925 | MEDIUM | 5 | 0.1% | Jul 2, 2025 | In One Identity OneLogin Active Directory Connector before 6.1.5, encryption of the DirectoryToken was mishandled, aka S... |
| CVE-2025-5692 | MEDIUM | 4.3 | 0.2% | Jul 2, 2025 | The Lead Form Data Collection to CRM plugin for WordPress is vulnerable to unauthorized access due to a missing capabili... |
| CVE-2025-6600 | MEDIUM | 4.3 | 0.3% | Jul 1, 2025 | An exposure of sensitive information vulnerability was identified in GitHub Enterprise Server that could allow an attack... |
| CVE-2025-48379 | MEDIUM | 5.5 | 0.3% | Jul 1, 2025 | Pillow is a Python imaging library. In versions 11.2.0 to before 11.3.0, there is a heap buffer overflow when writing a ... |
| CVE-2025-46259 | MEDIUM | 5.4 | 0.3% | Jul 1, 2025 | Missing Authorization vulnerability in POSIMYTH Innovation The Plus Addons for Elementor Pro allows Exploiting Incorrect... |
| CVE-2025-27153 | MEDIUM | 6.5 | 0.2% | Jul 1, 2025 | Escalade GLPI plugin is a ticket escalation process helper for GLPI. Prior to version 2.9.11, there is an improper acces... |
| CVE-2025-53103 | MEDIUM | 5.8 | 0.1% | Jul 1, 2025 | JUnit is a testing framework for Java and the JVM. From version 5.12.0 to 5.13.1, JUnit's support for writing Open Test ... |
| CVE-2025-52294 | MEDIUM | 5.7 | 0.2% | Jul 1, 2025 | Insufficient validation of the screen lock mechanism in Trust Wallet v8.45 allows physically proximate attackers to bypa... |
| CVE-2025-45083 | MEDIUM | 6.1 | 0.1% | Jul 1, 2025 | Incorrect access control in Ullu (Android version v2.9.929 and IOS version v2.8.0) allows attackers to bypass parental p... |
| CVE-2025-34080 | MEDIUM | 6.1 | 1.1% | Jul 1, 2025 | The Contec Co.,Ltd. CONPROSYS HMI System (CHS) is vulnerable to Cross-Site Scripting (XSS) in the getqsetting.php functi... |
| CVE-2025-50641 | MEDIUM | 6.5 | 0.4% | Jul 1, 2025 | Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the addWifiMacFilter function via the parameter deviceId... |
| CVE-2025-50405 | MEDIUM | 6.5 | 0.3% | Jul 1, 2025 | Intelbras RX1500 Router v2.2.17 and before is vulnerable to Incorrect Access Control in the FirmwareUpload function and ... |
| CVE-2025-50404 | MEDIUM | 5.3 | 6.3% | Jul 1, 2025 | Intelbras RX1500 Router v2.2.17 and before is vulnerable to Integer Overflow. The websReadEvent function incorrectly use... |
| CVE-2025-34065 | MEDIUM | 6.9 | 0.5% | Jul 1, 2025 | An authentication bypass vulnerability exists in AVTECH IP camera, DVR, and NVR devices’ streamd web server. The strstr(... |
| CVE-2025-34062 | MEDIUM | 5.7 | 0.1% | Jul 1, 2025 | An information disclosure vulnerability exists in OneLogin AD Connector versions prior to 6.1.5 via the /api/adc/v4/conf... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now