2025 CVE Vulnerabilities
45,522 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-52869 | HIGH | 8.1 | 0.4% | Feb 11, 2026 | A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, th... |
| CVE-2025-52868 | HIGH | 8.1 | 0.3% | Feb 11, 2026 | A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, th... |
| CVE-2025-48725 | HIGH | 8.1 | 0.4% | Feb 11, 2026 | A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker... |
| CVE-2025-48724 | HIGH | 8.1 | 0.4% | Feb 11, 2026 | A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, th... |
| CVE-2025-48723 | HIGH | 8.1 | 0.4% | Feb 11, 2026 | A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, th... |
| CVE-2025-30276 | HIGH | 8.8 | 0.5% | Feb 11, 2026 | An out-of-bounds write vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user accoun... |
| CVE-2025-30269 | HIGH | 8.1 | 0.3% | Feb 11, 2026 | A use of externally-controlled format string vulnerability has been reported to affect Qsync Central. If a remote attack... |
| CVE-2025-8099 | HIGH | 7.5 | 0.4% | Feb 11, 2026 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.8 before 18.6.6, 18.7 before 18.7.4, and 1... |
| CVE-2025-10174 | HIGH | 8.3 | 0.1% | Feb 11, 2026 | Cleartext Transmission of Sensitive Information vulnerability in Pan Software & Information Technologies Ltd. PanCafe Pr... |
| CVE-2025-15096 | HIGH | 8.8 | 0.3% | Feb 11, 2026 | The 'Videospirecore Theme Plugin' plugin for WordPress is vulnerable to privilege escalation via account takeover in all... |
| CVE-2025-9986 | HIGH | 8.2 | 0.2% | Feb 11, 2026 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Vadi Corporate Information S... |
| CVE-2025-15440 | HIGH | 7.2 | 0.4% | Feb 11, 2026 | The iONE360 configurator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Contact Form Paramet... |
| CVE-2025-13651 | HIGH | 7.5 | 0.4% | Feb 11, 2026 | Exposure of Sensitive System Information to an Unauthorized Actor vulnerability in Microcom ZeusWeb allows Web Applicati... |
| CVE-2025-10913 | HIGH | 8.3 | 0.3% | Feb 11, 2026 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Saastech Cl... |
| CVE-2025-14541 | HIGH | 7.2 | 0.5% | Feb 11, 2026 | The Lucky Wheel Giveaway plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and includin... |
| CVE-2025-29951 | HIGH | 7.3 | 0.1% | Feb 10, 2026 | A buffer overflow in the AMD Secure Processor (ASP) bootloader could allow an attacker to overwrite memory, potentially ... |
| CVE-2025-29950 | HIGH | 7.1 | 0.1% | Feb 10, 2026 | Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory le... |
| CVE-2025-35998 | HIGH | 7.9 | 0.2% | Feb 10, 2026 | Missing protection mechanism for alternate hardware interface in the Intel(R) Quick Assist Technology for some Intel(R) ... |
| CVE-2025-32008 | HIGH | 8.7 | 0.3% | Feb 10, 2026 | Out-of-bounds write in the firmware for the Intel(R) AMT and Intel(R) Standard Manageability within Ring 3: User Applica... |
| CVE-2025-30513 | HIGH | 8.3 | 0.1% | Feb 10, 2026 | Race condition for some TDX Module within Ring 0: Hypervisor may allow an escalation of privilege. System software adver... |
| CVE-2025-25210 | HIGH | 8.2 | 0.1% | Feb 10, 2026 | Improper input validation for some Server Firmware Update Utility(SysFwUpdt) before version 16.0.12 within Ring 3: User ... |
| CVE-2025-22453 | HIGH | 7.5 | 0.1% | Feb 10, 2026 | Improper input validation for some Server Firmware Update Utility(SysFwUpdt) before version 16.0.12 within Ring 3: User ... |
| CVE-2025-20080 | HIGH | 8.2 | 0.2% | Feb 10, 2026 | Null pointer dereference in the firmware for some Intel(R) AMT and Intel(R) Standard Manageability within Ring 0: Kernel... |
| CVE-2025-64157 | HIGH | 7.2 | 1.4% | Feb 10, 2026 | A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 throug... |
| CVE-2025-62676 | HIGH | 7.1 | 0.2% | Feb 10, 2026 | An Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet Forti... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now